Activity
From 01/20/2015 to 02/18/2015
02/18/2015
-
11:55 PM Bug #4445: Applying NAT changes in Hyper-V can break running NAT config
- it's somehow a hardware/hypervisor-specific issue, but I don't think it's indicative of a problem with Hyper-V itself...
-
- On some Hyper-V systems, applying changes to NAT in the web interface results in a rules.debug omitting all config-de...
-
10:30 PM pfSense Packages Bug #4373: pfBlockerNG: IPv4 aliases are not preserved when upgrading package
- Here is the commit to default "Keep settings" to "on":
https://github.com/BBcan177/pfsense-packages/commit/f802459... -
- there are a lot of people who are going to be surprised by that default, I suggest switching to defaulting to enablin...
-
09:59 PM Bug #4444 (Resolved): Reverse lookup domain overrides and "Do not forward private reverse lookups"
- If you enable "Do not forward private reverse lookups" and then have domain override(s) that cover whole chunk(s) of ...
-
- This was implemented for 2.2-RELEASE by commit: https://github.com/pfsense/pfsense/commit/3b5707db5bd1ea4d886b41f86bc...
-
- I think it was this commit that fixed the status background color updating: https://github.com/pfsense/pfsense/commit...
-
- is_hostname() and is_domain() allow underscore in the names. So it is possible to have underscore in host names, for ...
-
- anyone who's having issues with syslogd not running, install the System Patches package, then browse to System>Patche...
-
07:59 AM Bug #4393: syslogd stops and fails to restart during boot in some cases
- No need for that patch I posted now, Chris found the actual fix after that. The fix is in the commits shown in the "A...
-
07:56 AM Bug #4393: syslogd stops and fails to restart during boot in some cases
- I applied the patch and it created the lighttpd-breakage.log but its 0bytes. After applying the patch and restarting...
-
- best to gitsync to get to 2.2.1 right now. Option 12 at console, run "playback gitsync RELENG_2_2"
-
-
- Where you have FQDNs in aliases, and no reachable DNS servers, the boot gets excessively delayed sitting at "Configur...
-
- the specific issue is if you have an IP alias VIP that's not within any of your interfaces' subnets, and you have a g...
-
06:47 AM Bug #4438 (Resolved): Unable to delete IP Alias outside an interface's subnet where a gateway exists in the same subnet
- I have a working 2 FW CARP setup with pfSense 2.2 and a /28 subnet of available ip addresses.
If I add one of my a... -
-
01:00 PM Bug #4441 (Resolved): duplicating a relayd load balancer monitor in reality just overwrites the existing one and renames it.
- Create a load balancing monitor called "Xhttps" and configure it to monitor https. Further configure it to use a host...
-
- duplicate of #4341
-
11:44 AM Bug #4341: strongSwan fails to re-attach dynamic IPs where interfaces_use specified
- Chris, will you merge BUG #4425 with this one. I had filed that bug report to outline the same problem that you have ...
- 10:57 AM Revision 153613e3: Handle reverse lookup domain overrides
- that match exactly a whole block of private address space.
e.g. if the user has checked "Do not forward private rever... -
09:58 AM Feature #3933: Limiter burst doesn't have any effect
- Would a bounty help with this?
- 08:48 AM Revision 6777fc3b: diag_arp allow underscore in resolved host names
- is_hostname() and is_domain() allow underscore in the names. So it is possible to have underscore in host names, for ...
- 07:58 AM Revision 90d1d8cf: Don't hard code harden-referral-path. It defaults to no, so no behavior change, and that setting is unlikely to ever become a default. This allows users to configure an override to enable this option if desired. part of Ticket #4399
- 07:57 AM Revision 559c8d3d: Don't hard code harden-referral-path. It defaults to no, so no behavior change, and that setting is unlikely to ever become a default. This allows users to configure an override to enable this option if desired. part of Ticket #4399
-
- Duplicate of #4439
-
- I have a working 2 FW CARP setup with pfSense 2.2 and a /28 subnet of available ip addresses.
The Virtual IP Alias... -
- The VIP types that are supposed to sync work properly: CARP VIPs, IP Aliases *using a CARP VIP as their parent interf...
-
- I have a working 2 FW CARP setup with pfSense 2.2 and a /28 subnet of available ip addresses.
The Virtual IP Alias... -
-
05:29 AM pfSense Packages Bug #4198: lightsquid doesn't work, perl is missing
- thanks Jim! I think we can close this ticket.. I didn't report this, but the only issue now with the package is with ...
- 06:39 AM Revision 7b404fde: Add GUI control for MOBIKE. Hide it when IKEv1 selected. Enable toggling of NAT-T field display so it's on for IKEv1, off for IKEv2. Do same for reauth while here. Ticket #3979
- 06:38 AM Revision 065e78b3: Add GUI control for MOBIKE. Hide it when IKEv1 selected. Enable toggling of NAT-T field display so it's on for IKEv1, off for IKEv2. Do same for reauth while here. Ticket #3979
-
- The broken code never made it into any -RELEASE. pfSense is based on 10.1-RELEASE, so no it's not affected.
-
02:20 AM Bug #4437: FreeBSD Kernel RNG Broken
- No. https://lists.freebsd.org/pipermail/freebsd-current/2015-February/054581.html
-
01:02 AM Bug #4437 (Closed): FreeBSD Kernel RNG Broken
- Is pfsense of this serious vulnerability affected?
https://lists.freebsd.org/pipermail/freebsd-current/2015-February... - 04:32 AM Revision cfda8861: Wait a bit after sending a TERM to syslogd as in some instances it can take too long to stop, and it fails to restart because it's still running at that point. Add a KILL in case it's still running after that. Ticket #4393
- 04:30 AM Revision 209ba3aa: Wait a bit after sending a TERM to syslogd as in some instances it can take too long to stop, and it fails to restart because it's still running at that point. Add a KILL in case it's still running after that. Ticket #4393
-
- I removed harden-referral-path from the default config, so you can enable it as an advanced option if wanted.
-
- Thanks for the follow up. SLAAC requires a /64, which is why. The RAs are correct. Not a bug.
though we could imp... -
- works
-
- this should all be addressed now, needs review and further testing.
02/17/2015
-
- fixed
-
- In a completely default config, passive FTP clients will work fine. The default LAN rule permits what's necessary.
... -
11:37 PM Bug #4210: Bring back a FTP proxy
- Chris Buechler wrote:
> check out the info here:
> https://doc.pfsense.org/index.php/FTP_without_a_Proxy
>
> it... -
- Chris Buechler wrote:
> check out the info here:
> https://doc.pfsense.org/index.php/FTP_without_a_Proxy
>
> it... -
- check out the info here:
https://doc.pfsense.org/index.php/FTP_without_a_Proxy
it's always possible to support p... -
- Interesting because i'm getting reports from vendors who refuse to change away from FTP that PASV mode is not working...
-
- fixed
-
- thanks for confirming.
-
- every circumstance I could replicate is fixed by what I just pushed.
-
- I still can't seem to reproduce it here even with a "bad" set of logs and similar settings. There must be some other ...
-
05:20 PM Revision 31495068: Three minor improvements to IP functions
- 1) Most is_ip***() functions can return 4 or 6 to indicate type of IP, for benefit of calling code (both evaluate to ...
-
01:38 PM Feature #4366: Namecheap Dynamic DNS updates fail on subdomain formatted domains
- A few more pieces of information
In this scenario, the subdomain is being pointed at namecheap's dynamic DNS not t... -
10:19 AM Bug #4429: Problem with radvd(8) SLAAC packets autoconfiguring client IPv6 routes
- In fact, the SLAAC logic in pfSense 2.2 *seems to be okay.* If an interface is configured with flawed Ipv6 notation l...
-
- can you send me a pcap containing one of the RAs? Email to me cmb at pfsense.org referencing this ticket # if you don...
-
04:13 AM Bug #4310: Limiters + HA results in hangs on secondary
- Ermal Luçi wrote:
> Patch committed.
Can you post a link to the patch - 04:13 AM Revision 71383901: Do not request prefix delegation if no tracking interfaces are setup to
- use it. Ticket #4436
-
01:01 AM Bug #4428: Setting media option on em(4) leads to infinite link cycling
- It is not. No special functionality (vlan, lagg/lacp, or bridging) is enabled on any interfaces in the system.
-
- Is that interface part of a bridge, or lagg or anything?
-
-
- this can be worse than it might seem at a glance, as if you don't get a PD assignment, it'll keep retrying over and o...
02/16/2015
-
10:23 PM Bug #4436: dhcp6c requests prefix delegation when no tracking interfaces are configured
- Submitted pull request: https://github.com/pfsense/pfsense/pull/1495
-
- When interface with DHCPv6 has 'DHCPv6 Prefix Delegation size' set and no interfaces are setup to track it, pfSense g...
-
- Updated subject should be accurate of specific issue. Removing interfaces_use from strongswan.conf makes the problem ...
-
- Found a scenario where this is replicable with PPPoE.
1) setup IPsec bound to a PPPoE WAN, with no keepalive defi... -
- Tested the patch on v2.2. Rules are now appearing in the correct order and DHCPv6 messages are not getting blocked.
... -
02:10 PM Feature #4179: Driver oce is missing from 2.2 RC
- When I load the module, using kldload, I got the following output:
oce0: <Emulex CNA NIC function:///10.0.664.0///... - 05:31 AM Revision e2caaee8: Fixing issues with NTP RRD graph state changes
- - only call enable_rrd_graphing() after $config['ntpd']['statsgraph']
is set
- fix if condition; empty and isset ... -
- I don't think this is done exactly right......
-
12:25 AM Bug #4435: Invalid increment in DHCP6 server address range check
- Pull request for fix here: https://github.com/pfsense/pfsense/pull/1478
-
- Note that this is actually matches the behavior of the range checks that services_dhcpv6.php performs: The actual che...
-
- When computing the start IP for the 'available range' field, services_dhcpv6.php attempts to increment a colon-format...
-
- Pull request https://github.com/pfsense/pfsense/pull/1494
-
- When enabling NTP RRD graphs nothing happens first time NTP page is submitted.
Graphs are enabled if page is submi...
02/15/2015
-
11:12 PM Bug #4175: kernel panic when loading run driver for RT3070
- Had time to load stock FreeBSD 10.1 and the wireless interface worked. Also updated to 2.2-RELEASE and still experien...
-
- Pull request for fix: https://github.com/pfsense/pfsense/pull/1476
-
- The auto-generated DHCP6 configuration for tracking interfaces only includes a v6 name server if there are additional...
-
- Pull request for fix: https://github.com/pfsense/pfsense/pull/1477
-
- Net_IPv6::compress produces an empty string when compressing the all-zeros address, rather than the expected output o...
-
- Yes, I'm getting a *single* RA from pfSense to ip6-allnodes which results in a correct IPv6 route in the Ubuntu clien...
-
- This works in general. You're getting RAs, which seem fine at a basic level at least though contents of the RA not sh...
-
- h1. Additional info
h2. Bogons
My *Interfaces: LAN* 'Private networks' section contains _Block private networks... -
- In the last release 2.1.5, stateless address autoconfiguration (SLAAC) was working correctly. After updating to 2.2 m...
-
03:29 PM Revision 8f5352df: carp, don't show status icon from previous carp ip in case the ip is not present on the interface (test with ifconfig em0 1.2.3.4 delete)
-
02:12 PM Bug #4431 (Duplicate): Bandwidth not reported correctly in "Status: Traffic shaper: Queues"
- I'm running pfSense version 2.2 on an Alix 2d2 board. The reported bandwidth under the queues status page is incorre...
-
- fixed
-
- I just had this happen again. I have noticed that this appeared again in the logs.
Feb 15 11:57:57 kernel: sonewc... -
08:03 AM Bug #4430 (Closed): pppoe configuration can not be removed from WAN interface.
- When WAN interface is set as pppoe it can not be changed to DHCP or NONE.
First time, the web interface tells to a...
02/14/2015
-
- If the media or mediaopt config option is set, an infinite link cycling loop results since the link cycles when ifcon...
-
06:39 PM Bug #4427 (Resolved): Traffic Shaper Wizard still having issues
- I just upgraded to the latest 2.2 snapshot from Feb 13 in hopes of getting past the already documented traffic shapin...
-
- Thanks for the feedback, I'll close this out.
If you have any ideas on how to simplify the GUI for this to make it... -
06:03 PM Bug #4307: bacula-fd configuration is mangled
- This is fixed for me. Thank you.
-
- fixed
-
- It changes the weird character OS X shows at the end in its system.log, but otherwise unchanged and still wrong. Now ...
-
- I added a tgz of /var/log from a system exhibiting the problem to projects/ticket-files/
-
- I received it, but it may be Tuesday before I have a chance to look at the logs.
-
- I sent you an email yesterday with the logs (9MB). Did you get the email?
-
- I misunderstood JimP's earlier comment, running 'sysctl -a' won't panic it in the way enabling SNMP will.
-
08:20 AM Bug #4403: Enabling SNMP causes kernel panic with APU with empty SD card slot
- Same for me during the upgrade from 2.1.5 (amd64) to 2.2 (amd64) on a APU.1C4 (4 GB).
Retried it successfully with a... -
- I just started to test what combinations of hardware let this crash happen, but the command "systcl -a" is not crashi...
-
06:38 AM pfSense Packages Bug #4415: wrong start script in nrpe2 within 64bit installation
- Since 2.12_4 v2.2_4 this bug is also in i386.
-
01:06 AM Feature #4179: Driver oce is missing from 2.2 RC
- @Matthieu: We copied it over from FreeBSD 10.1 release and added oce_load="YES" to /boot/loader.conf, worked as expec...
02/13/2015
-
- I reported a bug 4425 which I'm thinking might be related to this. Let me know if you need any logs from me.
Sam -
Just wondering if this could be related to Bug 4353.-
- Whats we saw was that 2.2 had no issue bringing up the tunnel but once the tunnels were up they were unstable and if ...
-
10:33 PM Feature #4354: Allow dpinger to ping more than one destination for a gateway.
- This would be an amazing enhancement! My only comment would be if you're going to enhance the engine to support multi...
-
- @Christoph: Can you explain where od you get the file and how exactly do you load it ?
-
09:26 PM pfSense Packages Bug #4426 (Resolved): NUT fails to start or restart until NUT's settings are (re)saved
- Since updating NUT to 2.6.5_1 pkg/2.0.4, I'm finding that NUT won't start on a pfSense reboot. Pressing a "restart s...
- 08:28 PM Revision cc94ea50: Unobsolete libpcre.so.1
- 08:28 PM Revision 3b7f8f83: Unobsolete libpcre.so.1
- 06:27 PM Revision d72e936f: Merge pull request #1484 from phil-davis/more-text-typos
-
- Found this issue in conjunction with user Digdug3
- 06:24 PM Revision 49fa70a2: Merge pull request #1485 from BBcan177/patch-1
-
- Hi, I have the same issue. I tried to update to the latest maintance version, but receive error after upgrade: "shar...
-
- Well, all I can say is that this is definitely not fixed. Tested with 2.2.1-DEVELOPMENT-i386-20150213-1429 snapshot.
... -
- If you have made an archive of the logs you can post them on a site like Google Drive or Dropbox and PM me the URL on...
-
- I just had this happen again after rebooting my box from Bug #4392. How can I email you the logs?
-
- Hi Ryan, my PR for pfBNG *v1.04* was merged. Please let me know if that fixes your issue.
There is a "pfBlockerNG" t... -
11:32 AM Revision fc06d8ea: Surrond the some mobile clients attributes with " ( quote ) to help the strongswan parser identify properly the values. Ticket #4418
-
-
- Since at least one other user confirmed that, filing the bug here - relevant forum thread: https://forum.pfsense.org/...
-
- I just had this happen again..Here is what I'm seeing. The Service status dashboard shows the Daemon is running, but...
- 06:19 AM Revision e2d0aee8: force minimum 100000 byte log file size. Some have been confused thinking this is KB, in some cases causing problems. This should help, and there shouldn't be a need for logs smaller than that.
- 06:17 AM Revision 47d3f94a: force minimum 100000 byte log file size. Some have been confused thinking this is KB, in some cases causing problems. This should help, and there shouldn't be a need for logs smaller than that.
-
- Ok thank you i think i know where the issue is now.
I will update here when the issue is fixed but will need a ker... -
- I pushed a commit since this seems relevant only during parsing time of the options.
Can anyone re-producing this ... -
- the symbol at the end that OS X's logs show doesn't copy/paste, attached screenshot.
-
- If you go to GitHub at https://github.com/pfsense/pfsense and make the edit online there, then submit a pull request,...
-
04:46 AM Bug #4422 (Resolved): /etc/rc.initial doesn't handle -c parameters
- /etc/rc.initial fails to handle parameters passed to it using -c. As a result, SFTP against the internal SSH server f...
-
- The definition of the offset date source in /etc/inc/rrd.inc fails to recognise that offset can be negative, meaning ...
-
03:07 AM pfSense Packages Bug #4419: fatal: open /etc/aliases: No such file or directory
- Update: My Postfix Forwarder version: 2.11.3_2 pkg v.2.4.1.
-
- I get this error in maillog:...
-
- Update: My Postfix Forwarder version: 2.11.3_2 pkg v.2.4.1.
-
- I get this error in maillog:...
-
- Just want to report that I must specify Site Path, Backend Path to '/' instead of leaving blank to use '/' as suggest...
-
02:47 AM Bug #4414: pfsense on amd64 Thinclient Futro S550 // 2.1.5 // 2.2
- Hello Chris,
thanks for your reply
i added a dmesg dump of 2.1.5
I hope you find the bug.
thanks Tom
www_l...
02/12/2015
-
- Found this issue in conjunction with user Digdug3
-
05:13 PM
Bug #3290: IPV6 conectivity not restored after cablemodem reset
- An update... had some maintenance last night... while my LAN prefix appears to have been restored following everythin...
-
04:33 PM Bug #4326: Limiters on firewall rules where NAT applies drop all traffic
- I also increased the limiter to 700Mb, higher than throughput without limiter and it worked without issue, got the no...
-
- Finally able to get around to building a VM lab for this. Here is what I have found.
* Appears to only be an issue... -
- Can you do another test to have full information?
Do the usual breaking test you have reported and show the output... -
- it's more than just a p, it ends up with some weird character after the p as well. I've already dug into this a bit b...
-
- At least 4 reports of this on the forum:
https://forum.pfsense.org/index.php?topic=88631.0
https://forum.pfsense.or... -
-
-
04:11 PM Bug #4131: CP RADIUS accounting not working
- Still having this issue on a machine updated from 2.1.5 to 2.2.
Prior to upgrading, the setup did work, although the... -
03:16 PM pfSense Packages Bug #4417 (Resolved): Ruleset link for GPLv2 Community rules on Categories tab is incorrect
- If you're on the Categories tab and have enabled "GPLv2 Community Rules (VRT certified)", the hyperlink assigned to i...
-
- Pretty simple to reproduce
* Add a layer 7 container, for example, to block bittorrent
* Apply the layer 7 contai... -
- Duplicate of #4276
-
-
- Using a basic test case, Layer 7 is not functional on 2.2:
* Add a layer 7 container, for example, to block bittorre... -
- Great! I'll try it out once it's released.
Thanks -
- hardware-specific problem, replicate on stock FreeBSD 10.1 and report upstream.
-
01:44 PM Bug #4414: pfsense on amd64 Thinclient Futro S550 // 2.1.5 // 2.2
- This is not a supported platform.
Try booting stock freebsd 10.1 off a USB stick.
Also post the full verbose kernel... -
- dmesg.txt added
-
- Hello@All
on my labs firewalls (Thinclient Futro S550 /amd64/1GB/CF-Card-4G)
--2.1.5 will only boot "headless" ... -
- A patch has been pushed which will fix limiters with ipv6.
-
- After Update to 2.12_4 v2.2_3 service does not start any more.
Log: root: /usr/local/etc/rc.d/nrpe2.sh: WARNING: r... - 10:44 AM Revision a9982b43: Unobsolete crypto tools and athstats, ticket #4239
- 10:44 AM Revision 0a81c3ab: Unobsolete crypto tools and athstats, ticket #4239
-
- Some people have reported that this happens only if prefer oldsa setting is enabled.
-
09:22 AM Bug #4402: Unbound: enable harden-glue by default and/or apply patch
- Thanks for the fixes !
On this topic, Unbound 1.5.2rc1 has just been released, and final may then be ready before... -
04:44 AM Bug #4239 (Feedback): athstats, cryptostats, cryptotest missing from 2.2 builds
- Build was fixed and all binaries removed from obsolete list
- 04:29 AM Revision d4a18f13: Merge branch 'RELENG_2_2' of git.pfmechanics.com:pfsense/pfsense into RELENG_2_2
- 04:28 AM Revision 0f31e918: get rid of wizards/initial/ images that were never used
- 04:28 AM Revision 6972f14e: get rid of wizards/initial/ images that were never used
-
03:06 AM Feature #4413 (Duplicate): Vendor specific option spaces
- It would be nice to have a possibility to specify subject.
-
12:14 AM pfSense Packages Bug #4324: HAproxy and SSL client certificate validation
- I tested the latest version (had an IPv6 connectivity problem with the packages repository), it works as intended.
...
02/11/2015
- 11:00 PM Revision 377b1faa: DHCPv6 client rules MUST come before bogons. Add a comment that hopefully
- sticks out so this stops getting broken. Ticket #3395
- 10:59 PM Revision 274a531a: DHCPv6 client rules MUST come before bogons. Add a comment that hopefully
- sticks out so this stops getting broken. Ticket #3395
-
- @Ryan. Thanks for the Bug report. I haven't seen a Comment line with an IP in it before. The fix for this bug is in m...
-
- We have a list provider that requires our IP be passed as a variable in the query (e.g. http://example.com/list.php?i...
-
-
-
-
-
-
-
- it's only unusable where you need to allow traffic into WAN that's sourced from CGN space. Which in nearly all cases ...
-
07:00 PM pfSense Packages Bug #4412 (Not a Bug): squid reverse proxy
- when I try to activate the squid reverse proxy reports an error and when I modify sysctl returns or null or invalid s...
-
- Indeed. Fixed again, and added a comment that will hopefully prevent this from ever getting broken again.
-
- note the sort is there if you have 1 user only, disappears with > 1. I'm sure Phil's right on that. Moving to 2.2.2 s...
-
-
- Chris Buechler wrote:
> Andreas: could you do some experimentation with your combination of hardware? See if it's th... -
- the only scenario we've been able to replicate is with no SD card installed. It's easily replicable by just removing ...
-
- I don't have an SD card in, but I do have a Mini-PCIe wireless card.
-
- Well the first crash after update from 2.1 to 2.2 was with a sd card as the disk and a mini pcie 3g modem installed.
... -
- ...
-
- does sysctl hw.bus return a result?
-
- I can reproduce it on my APU now as well. Fresh install on mSATA, no SD card inserted, using the factory image.
Seem... -
- not a bug.
source is available here:
https://github.com/pfsense/pfsense -
06:24 AM Bug #4404: Fatal error when enabling IPSec
- Do you have a link to a stock util.inc, so I can compare ?
The file i patched, I need to have several subnets in D... -
- you're missing, or have a broken, /etc/inc/util.inc file. The installer can't forget files (and if anything as critic...
-
- nothing is broken, just have to put things in correctly. added #4411 to add input validation at some point to prevent...
-
06:03 AM Bug #4407: unbound advanced settings broken
- Kill Bill wrote:
>
> The server: clause is not the place for different kind of things, like the stub zone and forw... -
- Can we please append a link to unbound.conf(5) manpage (https://www.unbound.net/documentation/unbound.conf.html) with...
-
- Andreas Pflug wrote:
> Moving the custom option generation as suggested would make any option appear under the serve... -
- Kill Bill wrote:
> What advanced settings? This is just not true in general. Prefix the custom options with server: ... -
- In my case, I need *do-not-query-localhost: no* set.
-
- What advanced settings? This is just not true in general. Prefix the custom options with server: as noted on the bug ...
-
- If you have a patch change that works, it will be very easy for the devs if you make the edit at https://github.com/p...
-
- Same symptom as https://redmine.pfsense.org/issues/4090, but a different reason:
When domain overrides are set, an... -
- Something similar to dnsmasq's advanced config validation would be helpful for Unbound, to prevent users from creatin...
-
- Probably that was because the strongswan setting was not being propagated to the plugin.
Now that strongswan was upd... -
- Copied interfaces.inc and system.inc to my 2.2 box and seems to work alright now..
Without daily snapshots online,... -
- Applied in changeset commit:b65de5585bb7bffe06750c712b399cd4da10052c.
-
- Applied in changeset commit:2de650f6117f4b80c3db4f9b46ad83d75d5b9130.
-
- Ok should be fixed by the commit i pushed.
Can you please confirm as well?
This seems to be a bug since 2.1++ -
- Applied in changeset commit:810b36ac0c363c21ea2f1b963f2c1be142fc59a2.
-
- It behaves correctly with the applied patch.
-
09:46 AM pfSense Packages Bug #4409 (Resolved): Tincd not starting on pfSense 2.2
- Hello,
i had troubles getting tinc daemon to work in 2.2, after some investigation I had to do:
ln -s /usr/loc... - 09:12 AM Revision 01c155f2: Random text typos
- and I "corrected" function names that had "_choosen_" in them.
That is not technically an error - function names do n... - 09:04 AM Revision 302cb96e: Check if notification is disabled
- in send_smtp_message()
Other packages like arpwatch sm.php and cron job output as reported in forum https://forum.pfs... - 09:04 AM Revision 33649526: Merge pull request #1480 from phil-davis/patch-1
- 09:02 AM Revision 1444c08e: Random text typos
- that I noticed.
- 09:01 AM Revision c70002be: Merge pull request #1482 from phil-davis/CP-text-typos
- 09:00 AM Revision 4ab7f8f4: Fix typo in class in bridge edit
- Fixing this makes nice little pencil icons appear in front of the text
entry fields. - 09:00 AM Revision ef8182ca: Merge pull request #1483 from phil-davis/formfld-unknown
- 08:59 AM Revision 079b0e20: Remove unset variable, spotted by phil-davis
- 08:59 AM Revision 5132312f: Remove unset variable, spotted by phil-davis
-
08:34 AM Bug #4408: Changes to DHCP-services crashes GUI and DHCP daemon when many leases are in use
- If I disable DHCP failover everything works perfectly.
-
- I have the DHCP service running on five interfaces and a good amount of leases (I would guess around 1,000 or more at...
- 07:45 AM Revision b3aacd59: rrset-cache-size should == 2 * msg-cache-size. Ticket #4367
-
- I saw that yesterday, thank you!
-
- I pushed a fix for this yesterday. Perl is there but the package couldn't find it. Works for me now in testing.
- 07:43 AM Revision 2597415b: rrset-cache-size should == 2 * msg-cache-size. Ticket #4367
- 07:28 AM Revision 0c6db320: Fix typo in class in bridge edit
- Fixing this makes nice little pencil icons appear in front of the text
entry fields. - 07:14 AM Revision 24cbfd5a: Check if Unbound is enabled and using the same port before allowing dnsmasq to be enabled. part of Ticket #4332
- 07:13 AM Revision 06e847a7: Check if Unbound is enabled and using the same port before allowing dnsmasq to be enabled. part of Ticket #4332
- 07:07 AM Revision f416763b: Random text typos
- that I noticed.
-
03:42 AM Bug #4401: remove xen netfront driver until it can handle altq
- Is there a way to disable xen detection while booting?
I had to remove traffic shaping from my local pfsense and now... -
03:21 AM Bug #4401: remove xen netfront driver until it can handle altq
- xn0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
options=3<RXCSUM,TXCSUM>
ether be:f5:19... -
- Part of this was fixed in the default config yesterday (harden-glue is now enabled by default). We'll also add config...
-
- ath(4) does have ALTQ support, but its cloned interfaces end up unable to use it. ...
-
- still no other reports of this. will leave for feedback for now.
-
- It causes a wide range of problems for people. We've already seen several people report IPsec changes not applying be...
-
- that was apparently an oversight, thanks for catching. It should be fixed with what I just committed, which sets rrse...
-
01:29 AM Bug #4329: OpenVPN Server returns an error message while validating selfsigned certificate with a deep of 2
- ...
-
- Douglas Haber wrote:
> Maybe a hook should be added then in the web UI to say, "hey, Xen detected, please make sure ... -
- setting the MTU before setting the IP doesn't behave any differently. The MTU must be appended to the ifconfig comman...
-
- this is a hardware-specific issue of some sort, not an issue in our code. Judging by Ermal's analysis, ACPI seems lik...
02/10/2015
-
- enough people have reported this that it's clearly an issue in some circumstance. I'm not sure what that circumstance...
-
- Hi Together,
i am not sure if this is a hardware problem, but basically i am using a PC Engines APU.1C(2GB) board ... -
- fixed
-
- fixed
-
- It's best to leave as is, the upgrade and release notes describe how to work around pre-upgrade if necessary, and we'...
-
- The problem i think is that on FreeBSD 10 you have no tunnable to revert to 8.x behaviour.
That is only on HEAD. -
09:07 PM Feature #4405 (In Progress): Traffic shaping doesn't work when applied to a bridge interface
- Having two or more interfaces within a bridge, the traffic shaper doesn't work when applied to it. Traffic is seen on...
-
-
-
-
-
-
-
-
- 05:50 PM Revision 02376f6f: Check if notification is disabled
- in send_smtp_message()
Other packages like arpwatch sm.php and cron job output as reported in forum https://forum.pfs... -
- I have 3 boxes with pfSense 2.2 installed, and on one of them I get a fatal error when enable the checkmark "Enable I...
-
- Ok, reverted a test vm to factory defaults, then configured a simplified setup again it shows the same problem.
Sa... -
- Can you provide your config.xml to have a way to reproduce this normally it should work as expected!
-
- XN driver does not support ALTQ at all though it should not be hard to implement it.
-
- Since 2.2 (freeBSD 10.1) pfsense always detect xen on booting and uses pv(hvm) drivers (xn#).
xn0 is unusable withou... -
- Applied in changeset commit:1ee360aaa9176d3287a7099abd47f95c4464ac23.
-
- Applied in changeset commit:51e76899e66360dc9d8e35f68282c54ccd9a4759.
-
- Applied in changeset commit:22bca296dc3777bb872c7be460f09c3ff1177994.
-
- Applied in changeset commit:ed56ce5a1d12b5a065e2c375a182adc1b2d8f91d.
-
- Ok i pushed the proper fix for this.
Can you confirm it works for you as well? -
- gpioapu corrected to avoid comparison with NULL in strncmp.
-
- Applied in changeset commit:afb388159bc5a55d784404411ef1a7c7d22625a5.
-
- Applied in changeset commit:1ac5261fb0c96764526beb4d9928b9300094ac3e.
-
- I pushed a fix which make it work for me.
Can you please confirm?
Normally it is not necessary to have the mtu on... -
- For me this should be closed.
Setting in feedback for now. -
01:02 PM Feature #3387: process_alias_urltable Frequency
- rc.update_urltables accepts the parameter argv[1], and looks for the option now.
I've put in my crontab... -
11:39 AM Bug #2800: OpenVPN doesn't work properly with intermediate/chained CAs
- Same broken behaviour in 2.2.
Adding the Root CA certificate to the Intermediate CA's certificate in System: Certi... -
10:50 AM pfSense Packages Bug #4281 (Feedback): E-Mail Reports (mailreports package) Error With Multiple Graphs
- Applied in changeset commit:b852b5cd883b3d059bc3744fc7b130531a5f20ed.
-
- I set the log file size low and ran some tests and still couldn't make it crash.
If someone else finds syslogd cra... -
- It looks like this fixed my issue. I had the log size set to 8192 thinking that it was in KB and realized that the f...
-
- DNS poisoning seems to be possible under 2.2 according to https://forum.pfsense.org/index.php?topic=87491.0.
Fix: ... -
09:09 AM Feature #4400: allow aliases to enter *.domain.com to block all subdomains
- well one way possible would be to set domain overrides in dns resolver but the problem there is the override applies ...
-
- That is not possible. Entries must be resolved accurately to have their addresses placed into a table. There is no wa...
-
- it would be better if aliases allowed to enter a * before domain in order to block all different subdomain ips for a ...
-
- the same instance is not always affected...its 2 of the 3 that have the issue. So I would log into the GUI and notic...
-
- Yeah i have done this for mobile settings and some reports from the forum where the settings were not updated.
I w... -
- It was re-enabled in 2012 in commit:c25197ba, is there anything else still missing?
- 04:34 AM Revision 5ece44f7: touch up Unbound text
- 04:34 AM Revision 74ab379d: touch up Unbound text
- 04:33 AM Revision ccdaaec6: Update Unbound defaults
-
- harden-referral-path - hardcoded to no in unbound.inc ATM; any very good reason for this? (Yeah, I did read the manpa...
- 04:28 AM Revision ef120e87: Update Unbound defaults
-
- And what is this checkbox for in the first column?
You can select multiple users and then delete them with 1 click (... -
02:18 AM Bug #4398 (Resolved): Userlist - No sorting anymore
- The Userlist in pfSense was changed in Version 2.2. Now there is no option sorting the user by name. Before a doublec...
- 12:36 AM Revision fb64f3aa: also add v6 IPs to hosts in the same manner v4 IPs are added. Ticket #4395
- 12:10 AM Revision f7dddc86: also add v6 IPs to hosts in the same manner v4 IPs are added. Ticket #4395
02/09/2015
-
- Where MTU on an interface is user-defined, the ifconfig command that assigns the IP and IPv6 addresses must include t...
-
- this was done in 2.2-RELEASE (can't set that as target since it's closed).
-
- this is excessive in at least some circumstances. The restart flushes the SAD so it will cause at least a brief outag...
- 08:22 PM Revision 3d5e8dce: Use appropriate interface field description when working with floating rules, it was confusing and potentially incorrect for floating rule purposes.
- 08:20 PM Revision 758b51a0: Use appropriate interface field description when working with floating rules, it was confusing and potentially incorrect for floating rule purposes.
-
- it's always just put v4 in there, I added v6 in the same manner if it exists.
-
- ...
-
- the likely reason for this is your squid3 config requiring communication with localhost, and it picking v6 to try to ...
-
- Applied in changeset pfsense-packages:commit:909f0dfd8a1efc99c8392423123fdc0b3d88ffea.
-
- Applied in changeset pfsense-packages:commit:11375fe3e8826e02f7a5bec1f6a2d743060dbd76.
-
- This doesn't seem to be anything specific to our package, but softflowd on FreeBSD 10.x (and likely 9.x) in general. ...
-
12:26 PM Bug #4396: Lengthy unbound outage during restart when adding static DHCP leases
- Update:
Affected version: 2.2 Release -
- When updating static DHCP leases the call to services_unbound_configure on the services_dhcp page causes a full rebui...
-
- In the new >=0.17 package acl's are written before the user custom config, so acl's should be usable.
As for adding ... -
- There is no public 'development' repository to install developing packages from, however the official package reposit...
- 11:22 AM Revision 2b704ea9: Merge pull request #1469 from makkbe/master
-
- I just pushed a fix, there were some path issues in the config and startup script and such.
Seems to work OK here ... -
- When computing the start IP for the 'available range' field,
services_dhcpv6.php attempts to increment a colon-format... -
- The existing implementation of Net_IPv6::compress produces an empty
string when compressing the all-zeros ("::") addr... -
- The existing code only includes a v6 name server IP in the
automatically generated dhcpdv6 configuration for tracking...
02/08/2015
-
- to get that log it has to be 2.2-something, I presume this is 2.2-RELEASE.
-
- is it the same instance that's affected every time?
The log "OpenVPN ID server1 PID 22206 still running, killing"... -
- I have OpenVPN with tunnels between 3 locations. Almost every day Ill look at the dashboard and it will show one on ...
-
- Quick question, what is the proper way to install a development package?
The interface only allows me to install up ... -
- HAproxy currently allows to define ACLs to redirect to specific backends, and to define several frontend -> backend r...
-
- This typically happens when you have a corrupted log file. The first attempted write to said log file will crash sysl...
-
- Sometimes after rebooting syslogd shows that it has crashed. Rebooting usually fixes the issue. Here is what I see i...
-
- I have since done a kill -TERM and then reloaded: /status_services.php?mode=restartservice&service=nrpe2
This star... -
- What's in /var/run/nrpe2.pid ? Is the the current PID? If you killall -9 nrpe2; rm /var/run/nrpe2.pid, and then star...
-
- On pfSense 2.2, I am unable to restart nrpe2
I click through: Status | Services | nrpe2 | restart service.
The ... -
02:00 PM Bug #4390 (Resolved): Cannot create an IP alias on a CARP interface where the actual Interface address is in a different network
- I have configured the WAN IP addresses to be private addresses (i.e. in the 10.0.254.0/30 network) so that I can pres...
-
10:58 AM Bug #4326: Limiters on firewall rules where NAT applies drop all traffic
- Nope! Stays at 0 throughout....
-
- Yes, this yet again got broken.
02/07/2015
-
- I am experiencing this issue with v2.2. Rules look like this:...
-
- gif0 tunnel for ipv6 using a carp-ip to the outside world stops working upon reboots and some config changes
I fou... -
06:04 PM pfSense Packages Bug #4388 (Duplicate): Squid exits when listening on port 800
- Squid 3.4.10_2 pkg 0.2.6 running on 2.2 Release AMD64
After changing the port that the proxy listens on from 3128 to... -
- Could you checkout 0.17 package?(or perhaps 0.18) I've changed the 'none' CA to a separate checkbox which probably ma...
-
- The 2.2 Release AMD64 CD Installer does not provide any choices for keymap, screenmap or video font. Only '(default)'...
-
01:08 PM pfSense Packages Bug #4386 (Closed): softflowd not generating flow data on pfsense 2.2
- I used to run pfsense 2.1 on several machines, all of which sent NetFlow data to a PRTG collector without any problem...
-
- that is by design because of how it's used for registration of static mappings in the DNS Resolver/Forwarder. Allowin...
-
- Uh. No.
http://tools.ietf.org/html/rfc952
http://tools.ietf.org/html/rfc1123#page-13
etc. etc. etc. -
05:56 AM Bug #4385 (Rejected): hostname dots
- 2.2-RELEASE (amd64), built on Thu Jan 22 14:03:54 CST 2015, FreeBSD 10.1-RELEASE-p4
This might seem like a feature... - 04:28 AM Revision 6d5d9658: fix up text
- 04:28 AM Revision 5cb2a425: fix up text
02/06/2015
-
- services_captiveportal.php is missing input validation that allows creating invalid configurations, including ones th...
-
05:12 PM pfSense Packages Bug #3344: Disable IPV6 Squid3 not run
- Gilmar Cabral You are right man, your post helped me today means after one year you posted it...
i have been in thi... -
- Example: https://forum.pfsense.org/index.php?topic=88029.msg486945#msg486945
02/05/2015
- 09:09 PM Revision e4610d66: remove CGN from "Block private networks" as it was in 2.0x and earlier
- releases since it specifically notes RFC 1918 and CGN is more bogon.
Ticket #4379 - 07:47 PM Revision 2dfe7846: remove CGN from "Block private networks" as it was in 2.0x and earlier
- releases since it specifically notes RFC 1918 and CGN is more bogon.
Ticket #4379 -
-
-
- Yes, of course. I think we don't understand each other. I can trivially create a RFC1918 alias and place that rule wh...
-
- Bogons and block private only applies to traffic sourced on the WAN in question. Where you're on CGN, you pretty much...
-
- I'm not using either of these, so I pretty much don't care either way, but... fixing the description and nuking this ...
-
- since block private specifically says RFC 1918, it's more valid as bogon than private, I removed it from private.
-
- No need to filter this in both places, this is really the same thing like RFC1918 ranges.
Forum thread: https://fo... - 02:52 PM Revision 20078775: Merge pull request #1458 from xbipin/patch-4
-
- As requested at Bug #4380 - currently there's no way to track the status of syslogd service and/or start/stop/restart...
-
- Not a bug per se but a feature request. You can submit a feature request to add syslogd as a service under Status > S...
-
- Yes, so it's not a problem with the package, but with the base system. Should I file the bug about the same thing und...
-
- It was rejected because it's not the purpose of this package to track the services itself. The services are defined b...
-
- Kinda don't get why is this rejected. (Oh, and please, don't get me started with "delete the logs", not interested in...
-
- It uses the service list provided by the firewall. Same as Status > Services. Adding a service just to the package wo...
-
- No idea why it's not there. Certainly would be nice to have it when things go wrong, such as Bug #4352 or https://for...
-
- Applied in changeset commit:bb8a30c23b04d8332e8d4fccf15ed91d950cda2b.
-
- Applied in changeset commit:8b4c7ed15cdde2e49cfce5f96990ba1dbb2a9fd0.
-
- Update:
The rule is there but broken, pointing to the wrong port numbers, for example:
/tmp/rules.debug has:
<... -
- pfSense 2.1.x had an automatic captive portal pass rule to allow users to reach the portal daemon, this automatic rul...
-
01:14 PM Bug #4341: strongSwan fails to re-attach dynamic IPs where interfaces_use specified
- Same issue using a DHCP wan with Kabeldeutschland Cable ISP using a dynamic IP and the other node using a PPP wan wit...
-
- Same issue one Box using a PPP wan with O2/Alice ISP using a dynamic IP and other Box using DHCP with Kabeldeutschlan...
- 10:10 AM Revision ec1d66cc: Use web-gui setting for pap or chap instead of having it hard-coded to chap.
- 10:10 AM Revision 42c57d69: Merge pull request #1472 from bassebaba/master
- 09:48 AM Revision 8f637a0c: Merge pull request #1455 from xbipin/patch-2
- 09:41 AM Revision d06f9ebe: Use web-gui setting for pap or chap instead of having it hard-coded to chap.
-
- remove empty values
-
08:59 AM Bug #3997: get_interface_ip() returns first IP on interface, not necessarily primary IP
- Oh, and bridges and gateway config: https://gist.github.com/MikeN123/22d50fa3d37834b9659a
-
- Interfaces config, slightly censored: https://gist.github.com/MikeN123/009bc5fb76347663e448
Virtual IP config, sli... -
- Can you share your interfaces config or all of it so i can replicate that?
-
- 2.1.5 and 2.2.0. After reboot the VIP becomes the primary IP, and all outbound traffic and firewall rules referencing...
-
- On which scenario and which version this happens?
-
- Just FYI, I have a bridge interface with x.x.x.106 as primary IP, and an IP alias x.x.x.105. This fails consistently,...
-
- Where you have dial on demand enabled on PPPoE, and have multiple PPPoE connections, saving on interfaces.php after m...
-
07:51 AM Bug #4377 (Rejected): pfSense boot freezes after restart in QEMU/KVM
- pfSense virtual machine freezes after reboot at
@usbus0: 12Mbps Full Speed USB v1.0@
qemu proc contains :
@-... -
06:29 AM pfSense Packages Bug #4376 (Closed): Squid3 Squidguard3 Stability Problems
- Hi
Pfsense.2.2 also squid3 3 the stability and squidGuard3 squidGuard3 is experiencing problems, especially after 3... -
- upgrade config code so old entries not lost during upgrade
-
04:47 AM Revision e5e3216e: Add RTMP to the Traffic Shaper
-
03:53 AM Bug #4375: Kernel Crash
- So solution is disable acpi in bios ? or what we can do.
-
- I think this is because of acpi being enabled by default now.
-
- Jetway Mini ITX NF9D 2550 Board
-
- Upgrading 2.1.5 or new install same crash.
-
- Also this issue on redmine https://wiki.strongswan.org/issues/431 recommends reauth = no for IKEv2 for IKEv1 not sure...
-
- Also looking at this thread http://comments.gmane.org/gmane.network.vpn.strongswan.user/2055
It can be a solution to... -
- Does net.inet.ip.dummynet.io_pkt_drop increase during this time?
-
12:43 AM Feature #4374 (New): Add timestamps to notification e-mails
- It would sometimes be useful to have timestamps in the body of the e-mail itself. E-Mail transmission is not always r...
-
- Ah, my bad. I got used to original pfBlocker and it's behavior ... didn't expected it to change. Thanks for clarifica...
02/04/2015
-
06:23 PM Revision cdcf197b: Fixed not being able to save custom and custom-v6 dyndns
- entries due to "host" being posted empty, and thus failing
is_domain() check. - 06:23 PM Revision 68f7662b: Merge pull request #1466 from tuyan/master
- 06:22 PM Revision a912dd7d: Firmware upgrade script text changes
- while I am looking at this, might as well correct these.
No function problems or impact. - 06:22 PM Revision 13685ab5: Merge pull request #1470 from phil-davis/patch-1
-
06:07 PM
Bug #4149: Register DHCP leases in DNS forwarder broken
- Now on 2.2, the bug is still present:
Feb 4 20:40:44 dhcpd: Unable to add forward map from linehead.ozone.caligrafi... -
-
-
-
-
- This is not a bug.
The text beside the pfBlockerNG Enable Checkbox in the General Tab, is as follows
*"Note - w... -
- After upgrading 1.01 to 1.02 I've lost all IPv4 tab aliases.
-
10:27 AM Bug #4344: package (re)installation loop after upgrading from 2.1.5-RELEASE to 2.2-RELEASE
- *FYI*
there's another package that was reported as unable to be 100% reinstalled after the upgrade procedure from 2.... -
- Vinícius Zavam wrote:
> *Piba-NL*'s (##pfsense@freenode) pointed out that would be nice to try this procedures:
> *... - 10:14 AM Revision 1f97f379: In last case, use dmesg.boot do detect ALIX boards when hw.model is not enough
- 10:14 AM Revision 6d043a1d: In last case, use dmesg.boot do detect ALIX boards when hw.model is not enough
-
- I can verify that turning off reply-to doesn't seem to make a difference, here:
The rule:... - 09:43 AM Revision 0fcf26e4: Silent kenv when smbios.system.product is not present. While here, add VirtualBox to the list of virtualenvs
- 09:43 AM Revision 7e36f71c: Silent kenv when smbios.system.product is not present. While here, add VirtualBox to the list of virtualenvs
-
- Applied in changeset commit:68716545c5fde880d7a22cd9b13b901d01ccb561.
-
- Applied in changeset commit:322cc0188107e8b8ca912511915e71334fe4089b.
-
- Thank you for the persistence.
Merged a better/modified version of the fix suggested here. - 02:18 AM Revision 695b6d08: Firmware upgrade script text changes
- while I am looking at this, might as well correct these.
No function problems or impact.
02/03/2015
-
- I haven't had a chance to get back to testing this scenario yet, but will soon. Seems like it may not be specific to ...
-
- Have we confirmed if having reply-to enabled or disabled affects if the limiter works correctly? As well, what about...
-
- thanks for the confirmation Paul, and Jim and Bryce for fixing. Others have confirmed fixed as well.
-
- Tested on v2.2 amd64 full install.
Removed existing version, made sure nothing but settings are left behind and in... -
- Update the package and try again, I pushed some fixes earlier today. It works for me in testing here.
-
- It'd be nice to have dnscrypt support built-in so people don't need hacks like
https://docs.google.com/document/d/1B... -
- We had to drop suhosin when moving to PHP 5.4 as it wasn't compatible at the time and its development had stalled. Th...
- 07:25 PM Revision f8b5f41d: Merge remote-tracking branch 'upstream/master'
- 07:21 PM Revision 68fde79c: Fixed alignment issue.
- 07:17 PM Revision 197cf433: Added DynDNS support for GleSYS API (www.glesys.com).
- 06:54 PM Revision 98b3de78: fix responder-only IPsec text
- 06:54 PM Revision d7f4c1a4: fix responder-only IPsec text
-
- Patch committed.
-
- ntpd does nothing with selected carp interfaces.
When only carp ip's are selected for ntpd to listen on the config '... -
- *Piba-NL*'s (##pfsense@freenode) pointed out that would be nice to try this procedures:
* clear installation's lock;... -
08:14 AM
pfSense Packages
Bug #4369 (Resolved): patch fetching doesn't work if pfsense is behind proxy
- Hello,
while i was testing a patch (Bug #4238) i noted that the fetch doesn't work.
Issuing a packet caputure while... -
07:25 AM Feature #809: Config sync username change
- The bug is still here in version 2.2 64bit.
The "Remote System Username" field into Firewall->Virtual IP->CARP Set... - 03:32 AM Revision adf17d4f: fix text
- 03:32 AM Revision e829fcbb: fix text
-
- ...
-
- Just reporting another little very minor thing, I am testing the latest version for which you added ACL negation and ...
02/02/2015
-
- unbound.conf is generated by back-end code in /etc/inc/unbound.inc
Search for rrset_cache_size and rrset-cache-siz... -
04:43 PM Bug #4367 (Resolved): Incorrect rrset-cache-size in unbound.conf
- In /usr/local/www/services_unbound_advanced.php is missing code responsible for setting correct value for rrset-cache...
-
-
-
- No, I haven't. In my production settings, I am only using "ssl_c_used" since I can guarantee for sure we are in a TLS...
-
- Thanks for reporting this, my suspicion is that 'ssl_c_used ssl_c_verify 0' would be enough for all cases.
Have yo... - 05:28 PM Revision 4520b2d2: Fix aliases popup width when fields are hidden when page is loaded. It should fix #4238
- 05:28 PM Revision 6672609b: Fix aliases popup width when fields are hidden when page is loaded. It should fix #4238
-
-
-
- Formatting removed the {@} symbol
{@}.sub.domain.com -
- The domain in question is in the format
sub.domain.com
I need to update the @ record for this domain.
So, it's b... -
- entries due to "host" being posted empty, and thus failing
is_domain() check. - 01:19 PM Revision 315d866c: Merge remote-tracking branch 'origin/master'
-
11:37 AM Bug #4365 (Resolved): ALTQ Traffic Shaping is not working in pfSense 2.2 when run on Hyper-V 2012 R2
- Using pfSense 2.2 release on Hyper-V 2.2 with regular network adapters (not legacy adapters), HFSC queues can be set ...
-
- Applied in changeset commit:4520b2d2b70caa48813f73f89ef5b9c942ea5b25.
-
- Applied in changeset commit:6672609b90a8e60a13ca471a3ad3e054eca542bd.
-
- fix indent
-
- Let me double check this issue again.
-
05:11 AM Bug #3669: WAN IPs not being cached causing unnecessary "rc.start_packages: Restarting/Starting all packages"
- Whilst this ticket has been marked resolved, the second part of the fix relating to /etc/rc.newwanipv6 has never been...
-
-
- 07:56 AM Revision b82159a6: Unbound domain override IP:port validation
- The domain override is IP:port is invalid if either the IP address OR port is invalid.
Previously you could put an in... - 07:56 AM Revision e67c5bee: Merge pull request #1457 from phil-davis/patch-2
-
- 07:55 AM Revision 2b8353ba: Merge pull request #1459 from PiBa-NL/speedup_is_port
- 07:54 AM Revision 87549136: Remove latin-1 encoding of RSS feed
- Many thanks to Gertjan in forum https://forum.pfsense.org/index.php?topic=87504.msg484017#msg484017
Specifically sett... - 07:54 AM Revision b2b1822b: Merge pull request #1465 from phil-davis/patch-1
-
- No keymap file is present on pfsense 2.2 64bit so, when installing : no keymap selection is available.
After havin... -
-
- This is fixed with rev. 87549136 / rev. 8820a3aa close please.
-
03:55 AM Bug #4274: Marking a packet with only a number results in a broken rule
- Just wanted to say I've verified this works. Thanks so much for the quick response.
- 02:40 AM Revision 8820a3aa: Remove latin-1 encoding of RSS feed
- Many thanks to Gertjan in forum https://forum.pfsense.org/index.php?topic=87504.msg484017#msg484017
Specifically sett...
02/01/2015
-
- At least two people have reported issues with 2.2-RELEASE not booting on their hardware, stopping with a kernel panic...
-
03:28 PM Bug #4297: Squid unable to listen on port inferior to 1024
- Chris,
This is a bug and you can see in the forums that other users are having the same problem.
Yes, I do need t... - 11:55 AM Revision 0453eb6e: Converted Misc & Notifications
-
- It's just waiting on one of use to have enough time to test it to make sure it works and also doesn't break 2.1.x.
-
- me too agree its completely broken and the patch provided by bryce needs to be merged
- 10:44 AM Revision f9a9fb78: Converted system_advanced_network
- 10:29 AM Revision 9aa48e62: Select - update name to name[] when multiple=true
- 10:28 AM Revision 4b6f8c8d: updated last incorrect _POST references
-
09:45 AM Feature #4354: Allow dpinger to ping more than one destination for a gateway.
- I've got 2 poor internet connections and use apinger to switch as need be and as of 2.2rc this is no longer a reliabl...
-
05:08 AM Feature #4354: Allow dpinger to ping more than one destination for a gateway.
- we're probably going to re-write apinger for 2.3
-
- See feature request https://redmine.pfsense.org/issues/1189
Various people have discussed this over the years - nobo... - 07:33 AM Revision 63072a7f: need $g here so product_name is set in user agent
- 07:33 AM Revision b051f148: need $g here so product_name is set in user agent
-
06:19 AM
Bug #4238: Firewall rule: source port display issue
- Bipin Chandra wrote:
> i checked and doesnt seem any issue in port forwarding ports, try clearing your browser cache... -
- See https://forum.pfsense.org/index.php?topic=87504.msg484017#msg484017 for cause and fix.
01/31/2015
-
- Here is a quick fix that you can apply to get it working until patch is merged.
64-bit run: ln -sf /usr/local/etc/... -
01:19 PM pfSense Packages Bug #4282: Vnstat2 1.11 Does Configuration Parser Error
- Is there a status update to when the pull request will be accepted, as it stands right now VNSTAT2 package is complet...
- 10:30 PM Revision 76a9ad94: Add input validation to prevent the use of AES > 128 where glxsb is enabled. Ticket #4361
- 10:30 PM Revision 69aeef21: Add input validation to prevent the use of AES > 128 where glxsb is enabled. Ticket #4361
-
-
-
-
- 05:13 PM Revision 3a8c6408: Merge branch 'master' of github.com:SjonHortensius/pfsense
- 05:10 PM Revision 5d00f1d4: fix another typo in cleaner
- 05:08 PM Revision f6546b41: WIP: Converted advanced_firewall
- 05:08 PM Revision 2cc784b3: Form_Select - handle selected values
- 05:06 PM Revision ae479a27: Add placeholder showing default value
-
-
- The glxsb crypto accelerator breaks AES > 128 bit and people don't seem to be aware of that. Adding input validation ...
- 02:14 PM Revision a41b03d0: Support data-toggle=disable
- Checkbox - moved call to better location
Select - use parent:: for attributes
Input - add support for attributes with... -
-
- This issue is still not resolved
https://forum.pfsense.org/index.php?topic=77506.new;topicseen#new
Can this tic... - 01:09 PM Revision 1a86b8fe: Don't treat >name special, just put it in attr; fixes Select.id
- Select - name is no longer special, use $attr and get a free ID
Checkbox - make displayAsRadio return itself for chai... -
- Applied in changeset commit:87808568a70404e04c306723cdd65f52e59003f9.
-
- Applied in changeset commit:fdc9ac09ef07752da6153cd3c28f734c61985372.
-
- Currently only Mobile connection is repsonder only.
There are situations where this behaviour is required hence the ... -
- Applied in changeset commit:86e1846f47bda6a1e2560c249994b47716fac4ad.
-
- Applied in changeset commit:908edbd3d17a6fac747b6583322be9e547026f7f.
-
- Strongswan allows ID behaviour to be controllable especially useful for multiple devices connecting with same ID.
- 12:22 PM Revision 81dfcea5: Converted system_advanced_admin
- 12:21 PM Revision 276c29d4: Add support for sprintf to setHelp
- clean - fix typo in php-end-tag cleaner
Input - support sprintf parameter
Select - put option-names through gettext -
- http://svnweb.freebsd.org/base?view=revision&revision=265096
-
- Problem still there in 2.2 RELEASE.
I run pfSense on an Alix board, which is 32 bits.
Is the kerbel config the ... -
- The kernel option is there in our kernels and should be on 2.2 kernels as well....
-
- The kernel option is there in our kernels and should be on 2.2 kernels as well....
-
- More testing should be done related to rekey, uniqueids and DPD closeaction statement which might impact this.
-
- The first code block is wrong.
It should be:
#1:... -
- In openvpn.widget.php:
> document type does not allow element "table" here; missing one of "th", "td" start-tag
... -
- My interfaces starts with the number of the port written on the case.
> It is possible that you violated the namin... -
- In openvpn.widget.php:
> The <tfoot> element is used in conjunction with the <thead> and <tbody> elements to spec... -
- In openvpn.widget.php:
<table style="padding-top:0px; padding-bottom:0px; padding-left:0px; padding-right:0px" cla... - 10:08 AM Revision b8150520: Traffic Shaper Wizard Upstream SIP Server
- Not being remembered and actioned.
Bug #4314 -
-
-
-
-
- 09:17 AM Revision 7790dacc: Firewall Log does not display logged IGMP packets
- If IGMP packets are logged (either pass or block) then parse_filter_line did not set their src and dst IP.
Later in t... -
-
-
-
08:21 AM Bug #4352: 2.2 syslogd exiting sig 15 when boot finishes
- received email. will reply with access info...
-
08:20 AM Bug #4341: strongSwan fails to re-attach dynamic IPs where interfaces_use specified
- Same issue using a PPP wan with Orange France ISP using a dynamic IP. Everything was working fine before pfsense 2.2/...
-
- this is back for me and I dont't know why this suddenly showed up and why restarting apinger no longer fixes this. al...
-
07:20 AM pfSense Packages Bug #4293: Squid 2.7.9 pkg v.4.3.6 i386 won't start
- Some missing link lib.
you can add this symbolic links in a ssh session,
and restart the squid service.
ln... -
-
- this allows schedule selection to pkg_edit.php, this can then be
utilized by packages to set schedules in many other ... -
- Hello,
I would like to be able to put more than one IP as a monitoring IP in the GUI. I would like the system to u... -
- Applied in changeset commit:41da54ce14d2d43a5ce9738bd80b73355fa26180.
-
- Applied in changeset commit:420fce0458f4f1b49faa167a1b6ccc7800d2b8a3.
-
-
- Merged pull 1453
-
- Applied in changeset commit:430379acf9e4bfcda2625954700a6184265c8f73.
-
- Applied in changeset commit:ee65c642df6466ed59c332d448a4804690ce55c1.
-
-
- Applied in changeset commit:fdf6fcb3b1405016146088f547085c5d08ff0398.
-
- Applied in changeset commit:95c93bc3f6a281bd525d72925ea54dfa6ec2709b.
-
- Fixed the same way as poasswords
-
- The pull request has been merged.
-
- i checked and doesnt seem any issue in port forwarding ports, try clearing your browser cache and check again and if ...
01/30/2015
-
- I emailed you to see if we can setup a time that I can check out your system in general
-
- Yes, it does it at every boot or reboot and started exactly after performing an in place upgrade from 2.1.5 release.
... -
- does it do that at every boot? could you share your config?
-
- upgraded box from 2.1.5. syslogd now exits at boot/reboot and does not restart again. prevents ALL logs on the entire...
-
-
- 05:00 PM Revision 07b37952: Unbound domain override IP:port validation
- The domain override is IP:port is invalid if either the IP address OR port is invalid.
Previously you could put an in... -
04:43 PM Bug #4345: Traffic Shaping doesn't work with Xen netfront driver
- Yes, that NIC's changed to xm but still working on 2.1.5 and not on 2.2.
-
- that should be something that changed to xn NICs after upgrade so they're no longer Realtek, is that the case?
-
- I'm using 2 NIC's Realtek RTL8111/8168 PCI Express Gigabit Ethernet. Both are working on PFSense 2.1.5 with traffic s...
-
04:30 PM Bug #4286: State killing on gateway change
- As I thought, it seems to be a miss-configuration on our part. However, further testing is necessary. Would you mind ...
-
- probably would be good to have upgrade code to clean this up, should help fix some people's issues.
-
- Applied in changeset commit:fa77655557586453a0279566a84d01cd25645978.
-
- Applied in changeset commit:7c449a56f208cb7a02c739610a8abfe11ee498be.
-
- Should there be upgrade code to fix this issue or not?
-
- Also for a discussion https://forum.pfsense.org/index.php?topic=87786.new#new
-
- On 2.2 of pfSense reqid is part of the configuration stored.
When from the GUI a phase2/phase1 is generated with the... -
- If things on strongswan.conf are changed ipsec service needs to be restarted since reloading does not work for them
-
12:52 PM Bug #3692: apinger loss % gets stuck
- I hate to say it but in a new pfsense 2.2 installation (with two wan load balancing and high availability) I have now...
-
- As suggested in forum: https://forum.pfsense.org/index.php?topic=80264.0
To prevent the possibility that a malicio... -
- I deleted the package and tried to use pkg as described at https://doc.pfsense.org/index.php/Installing_FreeBSD_Packa...
-
- Known issue: https://forum.pfsense.org/index.php?topic=85265.0
-
- I do not know how to fix the mangled FailDaemon name, but I see the cause....
-
- Unbound seems to allow multiple stub-addr in a stub-zone.
This would be handy when using DNS Resolver on pfSense wit... -
- *http://pastebin.com/8ni6F2Tb* was scheduled to expire in 2 weeks, so... here's its content:...
-
- unnecessary but lets just add this for safety
-
04:29 AM pfSense Packages Bug #4331: Issue with VPN interface within Squid 3.4 for Transparent Proxy
- Nev Secular wrote:
> I'm running pfSense 2.2 with squid 3.4.10_2
>
> Want to include my VPN interface in transpar... -
03:55 AM pfSense Packages Bug #4348 (Closed): SquidGuard is not starting
- Applying "Enable" results in
System log:
php: squidGuard_blacklist_update.sh: The command '/usr/pbi/squid-amd64... -
03:43 AM pfSense Packages Feature #4347 (Closed): Recent Version of Asterisk
- Version 1.8 is very old. Please update Asterisk to something recent.
-
- I have modified radiusd.sh to prevent it from being executed in parallel and to wait a bit for the process to start b...
-
- I dug a little deeper and here is what I discovered.
By the time "radiusd.sh start" is invoked second time, first ... -
- During FreeRADIUS package uninstall, package is removed, but process fails to stop. Log:...
01/29/2015
-
- please use one of our available support resources. https://pfsense.org/support
-
01:42 PM pfSense Packages Bug #4342: carp switch problem
- It was configured using : https://doc.pfsense.org/index.php/Configuring_pfSense_Hardware_Redundancy_%28CARP%29
Pleas... -
- this is almost certainly indicative of a connectivity problem between the two systems
-
- Wrong files.
Please remove pfsense_problem.JPG
-
- I have 2 pfsense cluster installations in two different locations.
One of them 2.2 version 64-bit, second 32 and 64 ... -
- which driver is it saying doesn't support altq?
-
- On the version 2.1.5 I got the traffic shaping work without problem but after upgraded to 2.2 it's just doesn't worki...
- 05:10 PM Revision 091195f0: Firewall Log does not display logged IGMP packets
- If IGMP packets are logged (either pass or block) then parse_filter_line did not set their src and dst IP.
Later in t... -
- I think this happens because CARP packets are being sent to dummynet.
Before the kernel patch prevented this from ha... - 02:02 PM Revision f5b23288: Set update_url and update_manifest automatically based on version being or not a RELEASE
- 02:02 PM Revision 15ff0dc5: Set update_url and update_manifest automatically based on version being or not a RELEASE
-
- I this affected us at PAX South. We had limiters in place and had certain downloads dropping to 0 bytes/sec until we...
-
- I suppose that's possible, although manually checking the box to disable the generated reply-to doesn't seem to chang...
-
- I believe it only happens where the matching rule with limiter includes reply-to.
-
- this issue was originally reported by "WolfSec-Support" <support at wolfsec.ch> on the pfSense's mailing list.
* htt... -
11:53 AM Feature #2834: carp+pfsync: add ability to prefer one node as master
- https://github.com/pfsense/pfsense/pull/1449
My patch was rejected. Looking to see what will be accepted. -
11:43 AM pfSense Packages Feature #4335: NUT send notifications via built in smtp notification feature
- The following seems to work pretty good.
Add to upsmon.conf... -
- I think I found the info needed to make this work. A command line tool for sending email via the notification system...
-
- Related forum thread that got me started looking at this: https://forum.pfsense.org/index.php?topic=87723.0
-
- Note: In filter_log.inc parse_filter_line() there is also code that tries to handle protocol 112 CARP (around line 24...
-
- Proposed fix: https://github.com/pfsense/pfsense/pull/1456
-
- I have a rule that that deals with multicast packets (to 224.0.0.0/4).
There are lines in /var/log/filter.log for pa... -
- remove old permission box fields
- 09:51 AM Revision d9f9836a: Merge pull request #7 from SanderVanLeeuwen/bootstrap
- Documentation updates + layout tweaks
- 09:47 AM Revision 10322913: Keep original PHP form example
- 09:39 AM Revision 2900b876: Fix footer position
-
- Done on both builders
- 09:06 AM Revision 76d450e2: fix input validation, = is OK here
- 09:05 AM Revision 427831ac: fix input validation, = is OK here
-
07:33 AM
Bug #4238: Firewall rule: source port display issue
- i noted also that the issue is present also for nat rules (port forwarding)
-
- after its merged, this can be closed
-
02:05 AM
Bug #4238: Firewall rule: source port display issue
- ben kenobi wrote:
> Thanks,
> after removing style="display:none" the cosmetic issue is not present anymore.
-
02:05 AM
Bug #4238: Firewall rule: source port display issue
- Thanks,
after removing style="display:none" id="sprtable" the cosmetic issue is not present anymore.
-
06:12 AM Bug #4341 (Resolved): strongSwan fails to re-attach dynamic IPs where interfaces_use specified
- I have a single WAN setup with PPPOE
IPsec (problem applies to both: IKE1 and IKE2)
Every 24 hours the WAN gets rec... -
03:20 AM Bug #4340 (Resolved): OpenVPN connect fails if login contains special characters (e.g. &)
- Hello,
after upgrade pfSense to 2.2, OpenVPN fails connect for login S&V (authorization by AD).
@
openvpn: user 'S... -
- fixed, thanks
-
- though you're right on the math part, shouldn't have = there. about to push a fix.
-
- You must be looking at the wrong description for the box. One is 40 MB, one is 60 MB. ...
-
02:56 AM Bug #4339: RAM Disk Setting minimum ram error
- Also, 60MB isn't accepted either. the actual minimum is 61.
-
- Version : 2.2-RELEASE (amd64)
when saying "Set the size, in MB, for the /tmp RAM disk. Leave blank for 40MB. Do n... -
- After reconsideration, I agree we should keep the existing default. I'm not sure that's the right answer for upgraded...
-
- That FreeBSD PR got bumped recently, no patch available at this time.
-
- Ermal Luçi wrote:
> [...]
>
> Can you try this patch and let me know if it works for you?
The patch creates an e... - 12:05 AM Revision 079becf2: Add form styling conventions with an HTML example
01/28/2015
-
- Need to upgrade PHP to 5.5.21 for 2.2.1.
-
-
-
-
- 09:39 PM Revision 422a715c: Add id attribute to input elements
-
- This also happens on system boot.
-
- I noticed that whenever I change WAN interface settings and apply them multiple radiusd instances are launched. Syste...
-
-
- 06:46 PM Revision 340e8bc5: Accept port range on Outbound NAT. Fixes #4300
- 06:45 PM Revision b601f897: Accept port range on Outbound NAT. Fixes #4300
-
- you're using a serial console, it's not hung, it has no keyboard. Please follow up on your forum thread for additiona...
-
02:08 PM Bug #4334 (Rejected): Haning installation
- I have been trying to install pfsense sevarel times.
but every time the installation hangs at the same point (See at... -
- The following error is logged when attempting to enable the syslog-ng service:
Syslog-ng syntax test failed: [2015-0... - 04:28 PM Revision 42322ae0: Fix name attr for Select, implement Checkbox::displayAsRadio
-
- Applied in changeset commit:1fbae628c24e8259dc2ddb3f610c78b4dad45a34.
-
- Applied in changeset commit:6a2f0ad75063b9a0068b0a1983fb61fe3b408920.
-
-
- Confirmed. If you place a purely numerical value in the "You can mark a packet matching this rule and use this mark t...
-
- Applied in changeset commit:1abdf80b2d4abaf7fb0238ae21d554603149619e.
-
- Applied in changeset commit:17b3a06878f3664abb7f745a08ab19fc2c58bbba.
-
-
- The same rule does not break pf on a pfSense 2.1 install, so it's definitely an issue with 2.2
-
- This is related to #2998 and i do not see anything different in 2.2 in comparison to 2.1?
Probably even 2.1 it did... -
- I do not expect there to be issues from this.
The SAD is there but the policies(SPD) are not so there is nothing tha... - 03:43 PM Revision fee13fc0: Reload filter when IPsec is disabled, fixes #4245
- 03:42 PM Revision 1959e3d1: Reload filter when IPsec is disabled, fixes #4245
- 03:33 PM Revision a27f0c10: Add support for 0x20 DNS random bit support. Fixes #4205
- 03:33 PM Revision 52d946d8: Merge pull request #1440 from wagonza/patch-6
- 03:23 PM Revision 7c7c2ba2: Support for Office365 Mail
- https://redmine.pfsense.org/issues/4176
Allow the user to choose SMTP authentication mechanism PLAIN or LOGIN.
For ex... - 03:23 PM Revision 27c25d29: Support choice of SMTP Authentication Mechanisms
- https://redmine.pfsense.org/issues/4176
I have left some documentation here of other mechanisms that someone might ca... - 03:23 PM Revision e336d9ef: Merge pull request #1421 from phil-davis/patch-4
-
- This is a wishlist feature request.
The NUT package should have a checkbox that allows it to use the built in noti... -
- I'm seeing this when the limiter is applied to a filter on the WAN interface, but not the LAN interface. Odd.
-
- Applied in changeset commit:b50baf79f18b21454dad25819d3a6656caf2abcc.
-
- Applied in changeset commit:99df898e0c5fd8533d234bbb7846b89d9097a424.
-
-
- Likely, (or build from source) but 2.2.1 likely not that far away, either.
-
12:55 PM Bug #4328: Some symlinks not updated by full update
- Thanks. I assume the only way to test this is to wait for 2.2.1 :)
-
- I pushed a fix for this on tools
-
- Forum thread: https://forum.pfsense.org/index.php?topic=87336.msg481876#msg481876
On upgrade, there are loads of /... -
- Can we talk about *not* disabling strict mode? FreeBSD 10 runs LAGG LACP in 'strict' mode for a reason.
https://bug... -
- ...
-
- Phillip Davis wrote:
> "Two" should be good. I just checked a road warrior server of mine. I changed Certificate Dep... -
- "Two" should be good. I just checked a road warrior server of mine. I changed Certificate Depth to "Two" and it chang...
-
- Phillip Davis wrote:
> Is that related to the "Certificate Depth" setting on the OpenVPN Server GUI page?
I didn't ... -
- Is that related to the "Certificate Depth" setting on the OpenVPN Server GUI page?
Do you have that already set to "... -
- Hello,
I've recently upgraded from 2.1.5 to 2.2 and getting an error message:-
>Jan 28 09:39:23 pfsense openvpn[4... - 01:38 PM Revision 7094c303: Fix #4318 - gen_subnetv4_max() not working on 32bit
- 01:38 PM Revision e69a0cf3: Fix #4318 - gen_subnetv4_max() not working on 32bit
-
- Applied in changeset commit:340e8bc5cf67a2e826df28d1ac3a1eb70ed2c5c5.
-
- Applied in changeset commit:b601f897a5f6acfb4abc8beeedf0bb0d5cfa3193.
- 12:56 PM Revision 01a84fcf: updated forms description HTML > PHP
-
12:38 PM Bug #4311: aPinger service gets higher ping. Resolves for short period after restart aPinger service
- I am also getting this same issue, and I can confirm a restart restores the pings to their normal value for a short t...
-
02:09 AM Bug #4311: aPinger service gets higher ping. Resolves for short period after restart aPinger service
- Forgot to mention that this is based on a fresh 2.2 install with a restore of a backup of 2.0 version
-
- drivers are outside our control, we only follow up with ones relevant to things we sell @ store.pfsense.org. Please r...
-
03:32 AM Bug #4330: Pfsense 2.2 breaks certain Realtek cards
- Should mention I tried adding if_re.ko and if_rl.ko from FreeBSD 10.1 to /boot/modules with no success.
-
- Hi there
Pfsense 2.2 upgrade has gone very smoothly on all but one of my machines. Unfortunately one happened to b... -
10:08 AM Feature #4322: Add Google Domains DDNS
- I'm aware, but it took a while to figure it out on my own. It would be much simpler to have a menu item of it's own. ...
-
- Applied in changeset commit:fee13fc057f3c1e96a3db2535ab7734953de5924.
-
- Applied in changeset commit:1959e3d1d08747799229bacea10fbb906367c84f.
-
09:50 AM Feature #4205: unbound config option missing
- Applied in changeset commit:a27f0c10a90e696d9b987bdc38727eb738163c48.
-
- Applied in changeset commit:a771a6aee364f60ab436f26d061b373118462c43.
-
- If you run through the shaper wizard with, for example, two WANs, then some sections like VoIP get a set of <conn0upl...
-
- with this additional change we can allow infinite number of entries
rather than just 500 due to the for loop set to a... -
- Pull request has been merged
-
- the above link is the patch file but u can simply edit the page (/usr/local/www/firewall_rules_edit.php) by going to ...
-
- https://github.com/pfsense/pfsense/pull/1452.patch
-
04:57 AM
Bug #4238: Firewall rule: source port display issue
- the fetch fails
i suppose that a / is missing on the patch
usr/local/www/firewall_rules_edit.php
Regards - 08:57 AM Revision 0f062592: Dynamic DNS wildcard typo
- Self-explanatory, just a dumb typo bug
- 08:57 AM Revision c19bdcf4: Merge pull request #1450 from phil-davis/patch-1
- 08:55 AM Revision 4c40e2a7: Unimportant typos in user and group manager
- that do not effect anything.
- 08:55 AM Revision adaf6ca9: Merge pull request #1445 from phil-davis/priv-typos
-
- This patch will allow the web GUI for UPnP to enter more user specified
entries rather than just 4, I replaced the 4 ... -
08:37 AM Bug #4314: Traffic Shaper Wizard not accepting an alias in the "Upstream SIP Server" text box
- I applied the patch and it works ok now. The wizard remembers the text box content and the floating rules are automat...
-
- Note:
$x2 = ip2long32("127.255.255.255");
var_dump($x2);
$y2 = ip2long32("128.0.0.0");
var_dump($y2);
$z2 = $y2 ... -
- Sorry - the last subtraction in my code above should have been "$z2 = $y2 - $x2" - so ignore the rubbish "float(-198....
-
- Yes - I had been checking the code on a 64-bit system accidentally. Now I am at home with my Alix it all goes wrong:
... -
08:10 AM Bug #4317: firewall_edit_nat.php - memory exhaustion on 32 bit with VIP range
- yes, correct, everything i386 on our side...
-
- A fix was just posted for #4318, apply that fix and try this again, I suspect it will work fine. If so, we can close ...
-
08:06 AM Bug #4317: firewall_edit_nat.php - memory exhaustion on 32 bit with VIP range
- Yep, on i386 Kernel.
Dont see a way to change architecture doing an auto upgrade and several machines are remote.
... -
- Are you all on i386?
I could see that loop going out of control due to #4318, source:usr/local/www/firewall_nat_ed... -
- Here i paste relevant part of one upgraded router setup.
This particular one has a mixture of virtualIPs, may this h... -
- Numbers like that work fine for me - e.g. subnet 197.1.2.131 subnet_bits 29
It build a correct list of 8 addresses.
... -
- I got exactly the same situation, so may I at least help consistently confirming the issue existence:
I have stopp... -
- You are right, must have missed it due to fatigue, although I do remember removing this before upgrading to 2.2.
<... -
- It should be possible to run both services for different purposes so long as they are on different port numbers.
C... -
- Applied in changeset commit:7094c303b7d46c9f7b24c3f1bd4432187832e85c.
-
- Applied in changeset commit:e69a0cf3a216c8647a6def4eee41ab01319ce90f.
-
- I'm running pfSense 2.2 with squid 3.4.10_2
Want to include my VPN interface in transparent proxy within squid.
s... -
- i added the rowhelper control as well as it will allow infinite number of entries and tried it and works well
http... -
12:24 AM
Bug #4327 (Closed): Package Manager issue behind proxy
- Hello,
the pfsense that i have installed inside my company uses proxy connections to get updates from pfsense sites....
01/27/2015
-
- When I do that, /tmp/rules.limiter has the expected stuff like:
pipe 1 config bw 4Gb
But as you say, Diagnostics... -
- Steps to reproduce:
# Firewall -> Traffic Shaper -> Limiter
# Create new limiter with a memorable bandwidth. (In ... -
- A PASS filter rule with In / Out limiters set will pass traffic until bandwidth in a limited direction hits the limit...
-
- I just stumbled upon something with HAproxy that is probably not the expected/intended behavior when building an ACL ...
- 08:33 PM Revision 69f9ff40: final touches on Forms
- system - removed trailing unused form-html
Form - set proper width for submit-button column
Element - support returni... - 07:51 PM Revision dc58b7b3: moved some js from separate files to contextual .php
- pfSense.js - to prevent a blob of scripts; move index-widget handling to
actual index, introduce events instead
*.j... - 06:17 PM Revision 7efe99b5: Traffic Shaper Wizard Upstream SIP Server
- Not being remembered and actioned.
Bug #4314 -
- it can be manually configured using the "custom" type currently
-
- Google domains (domains.google.com) has added DDNS services outlined here: https://support.google.com/domains/answer/...
-
- duplicate of #4276
-
04:13 PM Bug #4323 (Rejected): Layer 7 / ipfw-classifyd 100% cpu in 2.2
- Any Layer 7 traffic shaper configuration causes ipfw-classifyd to use 100% of cpu and essentially blocks all outbound...
-
- The VPN on Site A has the "Stake killing on gateway change" feature enabled (box unchecked), and it did not restore o...
-
- We're currently testing the same kind of set up with IPsec and it seems we have the same issue (on 2.1.4). This funct...
-
09:31 AM Bug #4286: State killing on gateway change
- The problem was already here in the previous stable version.
-
- Did you have this multiwan setup working previously with 2.1.5? Or has the issue existed since then?
-
- not sure if this helps
01-27-2015 15:33:50 Daemon.Debug pfsense Jan 27 15:33:50 arpwatch: reaper: pid 93610, exit ... - 02:22 PM Revision ca127ab7: Simplify use of other serial ports setting all of them as onifconsole when serial is enabled
- 02:22 PM Revision 04c8360c: Teach ufslabels.sh to deal with DESTDIR, useful on installation
- 02:22 PM Revision 8c392069: Improve a bit sh syntax and fix it for multiple swap devices
- 02:20 PM Revision 12fe841f: Change version to 2.2.1-DEVELOPMENT
-
- not a replicable circumstance.
In order for the situation as described to occur, you have to have some kind of co... -
- Hi,
After upgrade to 2.2, experience memory limit errors even after increasing php memory_limit :
_Crash report... -
- The effect that I see most often is Macs on the LAN adding a mapping for external port 4500 (for BTMM) and breaking I...
-
- This might actually be considered a bug rather than a feature, as without this change, miniupnpd will happily let LAN...
-
- The miniupnpd port has a build-time option that forces it to check if the requested external port is already in use l...
-
- Miniupnpd supports IPv6; this can be enabled by adding the "IPV6" and "UPNP_IGDV2" make options to the port. See atta...
-
- I re-did tests with 3.4.10_2 pkg 0.2.6 on clean VM and real router and looks like everything is ok. I wonder what was...
- 01:57 PM Revision 4f009171: Simplify use of other serial ports setting all of them as onifconsole when serial is enabled
- 01:50 PM Revision 873cab16: Teach ufslabels.sh to deal with DESTDIR, useful on installation
-
- #4318 is the root cause of this
-
01:42 PM Bug #4319 (Rejected): Release 2.2 - Wake on Lan different behaviour on alix and apu
- Upgrade worked fine on multiple hardware installations (all on
alix / apu). The only thing I've realised is, that WO... -
- gen_subnet_max returns incorrectly on 32 bit 2.2. One example, WoL will always throw in 255.255.255.255 as the broadc...
- 12:59 PM Revision db4b4576: Improve a bit sh syntax and fix it for multiple swap devices
- 12:39 PM Revision a005a836: finalized Form classes, allowed add/removeClass on all elements
- + add overloadable submit button
- 12:39 PM Revision f76cbd6f: Fix sed syntax, -i requires a space before the parameter. Also fix regex to find swap device
- 12:38 PM Revision 802956d6: Fix sed syntax, -i requires a space before the parameter. Also fix regex to find swap device
-
- I think this should fix it:
https://github.com/pfsense/pfsense/pull/1453
The field name for that had been changed i... -
- When using the traffic shaper wizard "Multiple LAN/WAN" I choose to prioritize voice over IP traffic and use a generi...
-
- you're pointing to the snapshot server not the stable release update location, so that's the expected end result.
... -
11:40 AM Bug #4315 (Resolved): unable to auto-update i386 from 2.2-BETA to 2.2-RELEASE
- Currently running "2.2-BETA (i386) built on Sat Nov 22 20:52:45 CST 2014 FreeBSD 10.1-RELEASE".
Dashboard shows upda... -
- not true, that works correctly
-
09:58 AM Bug #4313: DHCP server does not send configured DNS (with DNS forwarder/resolver disabled)
- Sorry, I had something misconfigured...
-
- I have DHCP server enabled on LAN, with the DNS fields configured.
I also disabled DNS forwarder/resolver.
On the... - 09:12 AM Revision a32c0623: whitespace changes; renamed classes to Form_ prefix
-
- Not likely to happen. If anything we may go the other way, deprecating NanoBSD and using full installs exclusively. L...
-
- https://github.com/pfsense/pfsense/pull/1452
patch to fix this -
07:25 AM Bug #4312 (Resolved): Bridge advanced settings not always applied after interface is added to bridge
- on 2.2 release
after reboot, the option PRIVATE PORTS (ovpns6 and ovpnc4 for my example) of BRIDGE not work (brigde ... -
07:15 AM Bug #4276: Layer 7 not working / ipfw-classifyd high load
- in logs:...
- 06:26 AM Revision 6a32a3e4: use example.com for examples
- 06:26 AM Revision a8b61be6: use example.com for examples
- 06:21 AM Revision 5e3affe2: these descriptions were flipped. Ticket #4273
- 06:21 AM Revision 580f5eee: these descriptions were flipped. Ticket #4273
-
- Bump
-
-
-
- duplicate of #4276
-
- Have "ipfw-classifyd: packet dropped: output queue full" in system log, cant load any web page
-
- im trying to code the schedule feature to upnp but seems im totally lost in all the php and inc file code, can any1 g...
-
- Our RRD graphs in the section Quality gain a higher ping than I can measure. After restarting the aPinger service the...
-
- Configuring limiters on a firewall rule in 2.2 on a system using HA results in a kernel panic reboot loop. To replica...
-
- the root issue here is #4308
-
- In FreeBSD 10.0 and newer, LAGG with LACP defaults to strict mode. If it's not getting LACPDUs on the ports, it doesn...
-
12:42 AM Bug #4297: Squid unable to listen on port inferior to 1024
- Chris Buechler wrote:
> that sysctl has no relation to what you're trying to do. net.inet.ip.portrange.reservedhigh ... -
- Thanks. Yeah the descriptions were backwards, fixed.
-
- reported here that just setting cisco_unity=no is inadequate to fix this issue.
https://forum.pfsense.org/index.php...
01/26/2015
-
- that sysctl has no relation to what you're trying to do. net.inet.ip.portrange.reservedhigh is what you're looking fo...
-
- Squid 3.4.10_2 pkg 0.2.6
pFsense 2.2
Impossible to listen on port <1024
The field 'reverse HTTP port' must con... -
- The UI also has a typo: Diector
-
- Oh, now that I notice it: "director = -dir" would normally be "director = bacula-dir", that it is, it would match t...
-
- This is what pfSense 2.2 shows me for my bacula-fd configuration:...
-
- Bacula is running with:...
-
- duplicate of #4081
-
- To add: minimum possible WAN GATEWAY ping return value is 7ms (100% impossible for it to go under that number, a cabl...
-
- Impossibly high, or impossibly low?
Yes, I have seen occasions when the ping time is impossibly low for a while. I t... -
- Performed upgrade from 2.1.5 to 2.2-RELEASE. Now Gateway Monitor produces arbitrary and completely bogus (impossible)...
-
- already there, just have to configure it correctly
-
06:15 PM Feature #4305: Add Advanced / local-data option to Host Overrides for DNS Resolver / Unbound
- You are (obviously) right.
I read that article, but must have assumed it was part of the TXT Comment Support.
T... -
- You're just doing it wrong....
-
- The Advanced button doesn't allow the inclusion of local-data: entries. Actually it allows it, but it breaks unbound
... -
- this is part of what's noted in if_bridge(4): ...
- 04:40 PM Revision 3ad5d4ce: Merge branch 'bootstrap' of github.com:SjonHortensius/pfsense into bootstrap
- 04:38 PM Revision b40bcb23: New POC for generating forms through PHP classes
- reduce the amount of html c/ping by keeping the amount of
meta-data limited -
- that'll be required to add as a tunable where you need that to work. The fact it worked before was technically the bu...
-
10:19 AM Bug #4284: PFSense 2.2. won't automatically add arp entries from multicast mac addresses into its arp table
- This can be permanently fixed on each PFSense Firewall by:
System->Advanced->System Tunables
Then add an entry ... -
- Even if you don't go to the extreme I'm suggesting in [[https://redmine.pfsense.org/issues/4272]], I would suggest ke...
-
- In addition to this, I'd say the forced change to "pfsense" is rather annoying, in that it's really simple to fat fin...
-
03:21 PM Bug #4280: LAN with quad NIC configured with LAGG-LACP and VLANs
- Ok so I created a VM with a fresh install of 2.2 and did the following,
System > Advanced > Networking
Checked "D... -
- Ok for some reason there was a nat state that was already passing traffic. Deleting that state made the apinger pings...
-
- that's how things work by design, the interface IP of the interface in question is the appropriate source. You can NA...
-
- When using a public carp-ip on a wan interface that has a private ip apinger 'srcip' is set to the local ip.
Even wh... -
02:16 PM pfSense Packages Bug #4304: pfflowd non-functional on 2.2.x versions
- The Packages page reports version as:
0.8 pkg v1.0.2 -
- Jan 26 20:56:32 pfflowd[40995]: pfflowd listening on pfsync0
Jan 26 20:56:32 kernel: pfsync0: promiscuous mode enabl... -
- not something we're going to fix, you can replicate on stock FreeBSD and report upstream to see if that gets any resu...
-
- duplicate of #4282
-
-
- Several DSCP choices are non-functional in pfSense 2.2 rules and when chosen, they result in a broken ruleset that wi...
-
- Not much info I can provide for this one but arpwatch isn't sending email reports anymore after upgrading to 2.2 amd6...
- 10:03 AM Revision 5f8673d1: Merge pull request #6 from SanderVanLeeuwen/bootstrap
- pfSense in Virtualbox installation instructions
- 09:54 AM Revision 6c6ff9ad: Add Virtualbox installation instructions
- 09:51 AM Revision 88d0577b: Add Virtualbox installation instructions
-
- In the meantime, that field may also be left blank so that it affects all ports, not only that specific range.
-
- One note, it is to be noted that this does NOT seem to break update, nor backup/restore. I.e. on upgrade, from 2.1.5...
-
- Thanks for the head-up. It seem to be to fix bug #3857. I concur that the edit box is a single port entry, and shou...
-
- That behavior was changed by https://github.com/pfsense/pfsense/commit/9060f420a9444c68fc8db926787d0bb37d77ed72
Not ... -
- In pfSense 2.1.5, I could enter an outbound NAT rule with destination port range, and in pfSense 2.2, I get error tha...
-
- siproxd works fine on amd64 but fails on i386.
Crashes with signal 4. -
- In the monitoring system there is a strange entry for IP:
Address Interface Netmask
0.0.0.0/ vtnet0 (... -
- When accessing snmp from a montitoring system I get many, many errors (logged in the central syslog):
snmpd[95772]...
01/25/2015
-
- If aliases exist that have both FQDN entries and IP address or network entries, and the same FQDN entries are in mult...
-
05:59 PM Feature #2989: Changing language english to turkish not effect
- Is the pull request merged? what it's id?
-
04:42 PM pfSense Packages Bug #4295 (Resolved): stunnel not working in Release 2.2
- Installed Package stunnel on pfsense 2.2 but is doesn't work.
(Please see attached file)
I was able to resolve th... -
04:42 PM Feature #4294: Add additonal option to RADIUS Called-Station-Id value
- Also, if this ne option is set, the Called-Station-Id should also be the same WAN MAC in RADIUS accounting packets to...
-
- We are a hotspot provider and have many potential customers who are looking to use our service and love their pfSense...
-
04:27 PM Bug #4218: Bridge does not have AUTO_LINKLOCAL flag
- Can anyone reproduce this? Can this be assigned to 2.2.1?
-
04:26 PM pfSense Packages Bug #4293: Squid 2.7.9 pkg v.4.3.6 i386 won't start
- understand from irc the 64bit package works ok - i386 seems to have issues
-
- squid not starting following upgrade to 2.2
32 bit
squid-2.7.9_4-i386
php-fpm[259]: /rc.start_packages: The co... - 03:47 PM Revision 3aa55bbe: Dynamic DNS wildcard typo
- Self-explanatory, just a dumb typo bug
-
02:24 PM Feature #4292 (New): Show 95th Percentile for IPv6 Traffic in RRD Graphs
- The RRD graphs correctly show the 95th percentile for IPv4 traffic but it is neither computed nor displayed for IPv6 ...
-
- Ahh - well that is different to what I was thinking. Yes the failback of the OpenVPN traffic in that case will depend...
-
- Thank you for your answer, however I forgot to mention that I'm not using OpenVPN server on Pfsense, but on a remote ...
-
- This seems more an OpenVPN failover issue. I just tested mine at home on 2.2-RELEASE - failed my main link, my OpenVP...
-
- Hello,
I have a problem in a multi-wan configuration:
Link 1 (main) in tier1
Link 2 (backup) in tier2
The m... -
11:06 AM Bug #4289: Invalid alias using a numerical name causes a filter reload error
- What config look older alias?
-
- It may be an older notice that hasn't cleared, make sure the alias is gone and then force a filter reload from Status...
-
- I Remove it and rename it. But after filter reload error the same # User Aliases
1 = "{ 21 }" -
- You have an invalid alias named "1". Remove it or rename it.
"The alias name must be less than 32 characters long,... -
- Done!
-
- Please attach a copy of your config.xml and /tmp/rules.debug. A sanitized version of config.xml can be copied from op...
-
- Jan 25 16:09:02 php-fpm[55157]: /rc.filter_configure_sync: New alert found: There were error(s) loading the rules: /t...
-
- Don't forget to also check that the package continues to work on 2.1.x with the fix applied. If it does not, then mor...
-
- i tested this and it seems to solve the issue
-
- After digging into this further, this is a "feature" of the PBI architecture, and a bug in the package. The PBI middl...
-
10:18 AM Feature #4291: combined dynamic/static ARP
- I'm not sure if it is a bug or this is the normal behavior...
As a work around I do attach another NIC to pfSense... -
- while creating DHCP server there is option called "Enable Static ARP entries"...
When NOT ticked... each lease will ... -
- inetd is running - but the standard start script is missing.
Also the check_mk config goes to /etc/inetd.conf - th... -
- When installing or configuring the package I get in the system log:
php-fpm[74859]: /rc.start_packages: The comman... -
- https://github.com/pfsense/pfsense/pull/1438
this patch will allow the web GUI for UPnP to enter more user specifi... -
- Hello,
I have a ppp link configured with a 3G usb modem Huwaei E372 which is working great.
However there is a bu... -
04:59 AM pfSense Packages Bug #4277: squidGuard-squid3 installation Failed after pfSense Update to 2.2
- Having the same problem here, see https://forum.pfsense.org/index.php?topic=87325.0
There is no sha256sum for squi... -
- Pullreq/patch https://github.com/pfsense/pfsense-packages/pull/795
-
- The lcdproc package in the 2.2/FreeBSD-10 release is a PBI and therefore its file access calls go through the PBI pat...
-
- this seems a duplicate of https://redmine.pfsense.org/issues/4282
fixing that would solve this
01/24/2015
-
- I have a cluster created with Windows Network Load Balancing using the IGMP multicast. Anyway, the cluster IP has a m...
-
- Attached is a simple fix based on the initial request of giving people the option to disable the syncing of the skew ...
-
- Updated a copy of a working 2.1.5 production system to 2.2 and, during the boot, see constant cas2 and cas3 device ti...
-
- also see post https://forum.pfsense.org/index.php?topic=87316.0;topicseen
-
- I can confirm, this bug as well Vnstat2 installs correctly but no logs are ever updated. after going into the shell a...
-
- (Wow, I meant to update the title slightly... I promise, I speak better English)
Obligatory patch to pfsense-packa... -
- Since upgrading to 2.2 (and reinstalling all packages), vnstat2 errors out every time....
-
- Thanks for fixing the project - didn't realize which project I was in when I opened the issue.
I went ahead and op... -
- I've got some other bugs to fix there already (such as updating the mail library). I plan to work on it this week if ...
-
- Simple patch to rename the temporary variable that's conflicting with the global $g....
-
- When a report has multiple graphs, the following errors are generated while generating graphs 2-N...
-
- Original Post:
https://forum.pfsense.org/index.php?topic=87311
Problem:
With a fresh install of 2.2 and a basic ... -
- I have noticed this before when upgrading a slow system (like Alix 2D13). After getting the upgrade it tells you the ...
-
- In mail notification from pfsesne:...
-
11:42 AM pfSense Packages Bug #4277 (Closed): squidGuard-squid3 installation Failed after pfSense Update to 2.2
- hello
after updating pfSense to the last release 2.2 it is impossible de reinstall squidGuard-squid3 with the f... -
- In logs:...
-
- After upgrade pfsense 2.1.5 to 2.2 i have problem with ipfw-classifyd...
- 10:17 AM Revision 0bf1e5fe: Fixed contextual links
- pfSense.css - move help-link to ul that gets positioned
head.inc - implemented fixme
shortcuts.inc - replaced icons - 09:53 AM Revision 64c0004e: Updated readme with development instructions
-
- Upon upgrade of 2.1.5 to 2.2, strongswan did not start and quit with the following message:
Jan 24 16:12:39 ips... - 09:38 AM Revision b4988336: Merge branch 'master' into bootstrap
- Conflicts:
usr/local/www/head.inc
usr/local/www/themes/_corporate/styles/jquery-ui-1.11.1.css - 09:35 AM Revision 4c4e082b: Merge branch 'master' of https://github.com/pfsense/pfsense
-
- Any updates or work around!?
We also need this option... We use login by MAC address...but it's waiting the client t... -
07:57 AM Bug #3147: Adding new interface can cause issues
- This 'bug' appears to have finally been addressed with the changes for #3846 "Adding interface for new VLAN selects a...
-
07:41 AM
Bug #3290: IPV6 conectivity not restored after cablemodem reset
- I had a similar issue when my modem automatically rebooted during Comcast maintenance. Two things... First, a reboot ...
-
- Sorry, just realized I didn't list this as applying to 2.2 and it doesn't seem that I'm able to change it now.
-
- I have a lot of floating rules used to mark packets with a number that I then catch later to do traffic shaping. Thi...
-
04:43 AM Bug #4273 (Resolved): OpenVPN options route-nopull and route-noexec swapped
- From the pfsense GUI:
Don't pull routes - Don't add or remove routes automatically. Instead pass routes to --route-u... -
- Embedded looks like a great way to go, why continue supporting a full install?
I've had this idea for a while. It ma... -
- I think that is expected unless you have received mail, and thus have an sqlite log/database.
See attached image, of... -
- The Postfix dashboard widget shows blank in 2.2, likely needs updates for new PHP.
-
- pointed out here
https://forum.pfsense.org/index.php?topic=84026.msg477208#msg477208
fix would be simply changing... -
- vnstat2 package conf file in /usr/pbi/vnstat-i386/etc/vnstat.conf and /usr/pbi/vnstat-amd64/etc/vnstat.conf not point...
01/23/2015
-
- Well, indeed, not 'dead', but traffic is stopped.
I did what you suggested and e don't see any loop. However, I s... -
- it's certainly not possible to kill a system by putting an incorrect IP into a port forward. maybe if you managed to ...
-
- First, this is using invalid actions, so this is not so critical, but doing so will result in denial of service.
-... -
- thought we already had a ticket to change strongswan's behavior here in the future, apparently not, but we do now. #4...
-
08:55 PM Bug #4267 (Closed): IPSEC Phase 1 deletion
- Deleting an IPSEC phase 1 entry from vpn_ipsec.php for a tunnel that has not connected does not result in the entry b...
-
- Doesn't appear we've opened a ticket to address this yet. strongSwan's behavior of not updating the SAD is going to g...
-
- to me for info gathering
-
- Where you have multiple P2s configured on a single P1 with IKEv1, there are some rekeying issues under some circumsta...
- 02:52 PM Revision 4c7f7c29: Merge pull request #5 from SanderVanLeeuwen/bootstrap
- Updated documentation / guidelines
-
- can any of the core developer let me know what would be the preferred method for those permission list so i can make ...
-
- i mean separated with a ","
-
- well, what i can do is is replace the last 4 permission boxes with a single one where some1 could type out all entrie...
-
- And the interface LAGG is BRIGED with the LAN
-
- After the patche of bug https://redmine.pfsense.org/issues/4257
the BRIDGE is OK, but not the LAGG
On 2.2RC last up... -
- As shown in the log above: some squid processes. The issue is stable to reproduce.
- 12:02 AM Revision 323317c3: Typo
01/22/2015
- 10:41 PM Revision 6c943511: Additional documentation
- - Added checkbox example
- Form field help block example
- Button and icon usage explained -
- Many if not most 2FA solutions support LDAP and/or RADIUS so are already supported. That said, enhancements here woul...
-
- Allow during bootup rc.newwanip to continue up to a ceratin part to handle bridges or other complex interfaces.
-
- Allow during bootup rc.newwanip to continue up to a ceratin part to handle bridges or other complex interfaces.
-
- fixed
-
- Applied in changeset commit:9b527a7931795466ab7286f0caadd7bef082d002.
-
- Applied in changeset commit:8e24d1dacd80fd539cc9dd6a5f0a7c8953bcffd0.
-
- this is mostly fixed. Where CARP goes to backup status, it seems fine. But if the CARP VIPs are completely gone, it f...
-
- fixed
-
- Applied in changeset commit:145eb9907c638f5a1cf279b480a69bb3556c3b7e.
-
- Applied in changeset commit:30a61a895a969cfa890a30df76b2f83b252cb231.
-
- Fixed anything else apart taps through this issue.
-
- at the time I set it to 2.2.1, 2.2-release was already built and signed. Since we're rebuilding it for other reasons,...
-
- To remind you: there is no traffic between sites after reboot. Both sides are UP and RUNNING and NOTHING goes between.
-
- Huh, team is going to release 2.2 without working tap openvpn? That's interesting ...
-
- fixed
-
- Fixed by allowing the blocksize to not be multiple of blocksize.
-
- Jim mentioned today we'll get this addressed in 2.2.
Ermal: test setup with AES-GCM to an ASA is setup. will emai... - 04:27 PM Revision e8477a56: Text tweak
- 12:02 PM Revision 9b527a79: Make sure radvd is reconfigured when CARP is enabled/disabled. It should fix #4252
- 12:01 PM Revision 8e24d1da: Make sure radvd is reconfigured when CARP is enabled/disabled. It should fix #4252
-
-
- 11:03 AM Revision 560d1b53: When configuring radvd, check if carp is enabled. Ticket #4252
- 11:02 AM Revision 7b753c2b: Do not translate function return string
-
- I don't get the design in the first place. You could as many permissions there as needed, if only there was one of th...
-
- it would be great if the upnp settings page allowed to type in individual client ip for which to allow or deny rather...
- 11:01 AM Revision ee8fb75d: Fix typo in function name
- 11:00 AM Revision 150d479b: When configuring radvd, check if carp is enabled. Ticket #4252
- 11:00 AM Revision 42cc62a2: Do not translate function return string
- 10:59 AM Revision 44763e58: Fix typo in function name
- 10:24 AM Revision 2a746a1e: Add language hint to code block
- 10:22 AM Revision f180fe1a: Code style documentation for tables and forms
- 09:14 AM Revision dc85e806: Merge branch 'master' of https://github.com/pfsense/pfsense
- 09:13 AM Revision cc5b2948: Merge pull request #4 from SanderVanLeeuwen/bootstrap
- Firewall rules and VPN L2TP layout changes
-
09:05 AM Bug #1333: Rate causes high CPU usage
- Not here:
PID USERNAME THR PRI NICE SIZE RES STATE TIME WCPU COMMAND
70675 root 1 119 0 3... -
08:22 AM Bug #4240: 2.2 IPv6 radvd RDNSS Issue
- attached screenshots
-
- The help link used to open in a new window, it was changed to give the user the choice. The way it is now, the user c...
-
03:25 AM Feature #4264 (Closed): Make distinction between general & security updates, while applying the latter automatically
- Current pfSense setup does not make a distinction between security updates and general updates. The latter requires a...
-
- OK, lets call this fixed then. Thanks. :)
(Kinda inconsistent results, perhaps the VPN stuff would be worth a sepa... -
- for v4, it uses the same source networks as it uses for outbound NAT auto rule generation, which is a diff process.
-
- Kinda confused really what it covers now. It certainly is adding OpenVPN and IPSec IPv4 subnets to the ACL.
-
- It only covers interfaces that are assigned and enabled plus static routes for IPv6. Manual entries will be required ...
-
- Ok, this works mostly fine, except that it misses OpenVPN's IPv6 (and probably IPsec as well, don't have IPv6 IPsec t...
-
- The underlying identifier strings "wan" "lan" "opt1" ... are used all over the place in the config to hook things tog...
-
-
- Works just fine. See https://forum.pfsense.org/index.php?topic=86900.msg477095#msg477095
-
12:24 AM Bug #4261: Google Domains Dynamic DNS -- Works on 2.1.5 but not 2.2-RC
- Sorry, typo in the report -- I am using HTTPS for all my attempts, not HTTP. I'll start fresh and see if I can figur...
-
- oh one difference between what you're doing and we're trying, we're using HTTPS rather than HTTP. Might want to try t...
-
01:19 AM
pfSense Packages
Bug #4263 (Needs Patch): ntopng: historical feature issue
- Hello,
i can't use the historical feature. when i try to load historical data after setting interface and time inter... -
- which process is using 100% CPU?
-
12:20 AM Feature #4038: Button to clear the arp cache
- Chris Buechler wrote:
> Applying that may be dangerous, in that it leaves a file on your system with no authenticati... - 12:04 AM Revision 7fd2a0e3: Strict comparison not necessary here, and makes this fail to work as
- intended. Fixes #4258
- 12:04 AM Revision 7684d66f: Strict comparison not necessary here, and makes this fail to work as
- intended. Fixes #4258
01/21/2015
-
- Damien Braillard wrote:
> Just a proposition:
> When clicking the help button from a page of the web configurator, ... -
- works fine here, we just did some testing with two diff hosts on Google Domains. Both update, both display the correc...
-
- Hi team,
I'm using the new Google Domains Dynamic DNS functionality, and I am pleased that it works so well on 2.1... -
- Chris Buechler wrote:
> Applying that may be dangerous, in that it leaves a file on your system with no authenticati... -
- Applying that may be dangerous, in that it leaves a file on your system with no authentication that clears your ARP t...
-
- Grischa Zengel wrote:
> After swapping IP from two embedded devices (WizNet RS485 Gateways) the gateways weren't rea... -
- Thanks for the quick reply, Chris! Yes, an option would be great, even if it weren't a change to the default behavio...
-
- they're listed in the order of their identifier. wan, lan, opt1, opt2, ...
This is one of those things where if y... -
- Hi team,
If possible, I'd love to see interfaces and VLANs ordered alphabetically instead of by order of creation ... -
-
-
-
-
-
-
-
-
-
-
- that fixes the initial described problem. Also re-verified multi-WAN bits after static routes returned, including dis...
-
- Static routes are put back in the configuration.
-
- I put a workaround to not use the interfaces not present in config.
Though the real workaround here is to install ... -
- sent Ermal details on how to replicate in the test setup.
-
-
-
-
-
-
-
-
-
- updated subject to specific issue. Fixed
-
- Applied in changeset commit:7fd2a0e3a9163d8cc3f578f4bd105ed0c982737f.
-
- Applied in changeset commit:7684d66fad740820ca1c945a5b67a6f813306235.
-
- IPv4 subnets are automagically added to /var/unbound/access_lists.conf; however this is not done with any of the IPv6...
-
- 04:38 PM Revision 52b5a223: When radvd is configured on a CARP interface, enable it when it is MASTER and disable when go to BACKUP. It should fix #4252
- 04:36 PM Revision caaaf9ce: Add missing require for filter.inc since vpn_ipsec_configure() calls filter_configure(). It should fix #4236
- 04:36 PM Revision a6934401: When radvd is configured on a CARP interface, enable it when it is MASTER and disable when go to BACKUP. It should fix #4252
-
03:20 PM pfSense Packages Bug #4243: Last squidguard update prevents squid from starting
- The problem appears to be more complex than I first thought.
In a fresh install into virtualbox with squid 2.x and s... -
- strongswan has had ECP DH key groups support for quite some time, should be added to GUI.
https://wiki.strongswan.o... -
-
- https://redmine.pfsense.org/issues/4146
-
- *Before instance restart/after reboot:*
ovpnc1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 15... -
- you're right, I was too quick on the trigger here. The config upgrade failed on one pair of systems because it was up...
-
- Do you have a config that was broken after upgrade? I upgraded a 2.1.x to 2.2 on both modes, automatic and advanced a...
-
- There is a code to convert it, it's upgrade_102_to_103()
-
11:28 AM Feature #3377: OAuth2 authentication in captive portal
- Thomas NOEL wrote:
> Here is a proof of concept, for a OAuth2 captive portal authentication with Google accounts :
... -
- Applied in changeset commit:52b5a22363d34bbd621b9eb555cf849782318dda.
-
- Applied in changeset commit:a693440176e8bd4a783a9ccb75d2cd57629b5699.
-
- The conf file problem is fixed. Since CARP no longer has its own interface, we'll need to start/stop radvd along with...
-
09:37 AM
Feature #4259 (Resolved): Port forward NAT rules with "any" protocol
- Hello,
i'm starting to use pfsense inside my company network but i see that pfsense is missing a NAT ability compare... -
-
- 06:36 AM Revision 94efc59d: Use the parent NIC rather than the VIP. Fixes part of Ticket #4252
- 06:35 AM Revision 2f74d9d8: Use the parent NIC rather than the VIP. Fixes part of Ticket #4252
-
- 1. Install latest pfSense snapshot;
2. Install Squid3 package;
3. Observe 100% load on CPU oob and after reboot;
... -
- The only other explanation that came to my mind is that nat reflection might need a reboot to activate under some cir...
01/20/2015
-
- working on this
-
- radvd.conf where a CARP IP is chosen results in an invalid config file, as it omits the interface entirely (where it ...
-
-
-
- Outbound NAT configs in 2.1.x and prior use a different XML structure than 2.2, and there isn't any config upgrade co...
-
- So sorry to waste your valuable time. I'll do better in the future.
-
- upgrade, that was fixed a while ago
-
- The dialog for Diagnostics > Test Port says this for source port, "This should typically be left blank." and the fiel...
-
- Where you have a dynamic interface removed and re-added while running IKEv2 in strongswan, things break. Good easily ...
-
- I replied back on your forum thread, this sounds like a stale upstream ARP cache.
-
10:52 AM Bug #4249 (Not a Bug): virtual ips backup/restore bug
- the version of the software is 2.2 RC Jan 16 11:53
to take full backup; press diagnostics > backup > full backup >... - 04:44 PM Revision f0d51562: Place form save button outside form panel for clarity (saves whole form, not just the last panel)
- - Increase body bottom margin to create 20px margin between elements
and footer -
- It was bridged with an OpenVPN PSK TAP Client. That connection has been down for about a month but was not disabled. ...
-
- what was LAN bridged to? Was there an IP on the bridge itself or was it on the LAN interface?
-
- I have been trying everything to get NAT reflection working. My last effort was to remove LAN bridge (which I wasn't ...
-
02:21 PM Bug #4206: Missing route creation on DHCP-PD lease where ia-na != ia-pd
- Here is a follow-up with 3 attachments: The pcap file, a screenshot of the "Status: DHCPv6 leases" page and the dhcpd...
-
- The IP address and gateway settings on Interfaces > [assigned gif name] should remain at "None".
There is a dynami... -
- Error while saving gateway page, having the default checkbox checked:
- "The gateway address 2001:x:x:x::1 does not ... - 10:08 AM Revision c4a7740d: Finish preliminary restyle of L2TP configuration
- vpn_l2tp.php - Use pill style for navigation
vpn_l2tp_users.php - Cleaned and formatted according to bootstrap style... -
- As reported on https://forum.pfsense.org/index.php?topic=86866.msg477744#msg477744
The linux hosts like to send unpa... -
- This also limit the ability to debug problems with igmpproxy.
Is the fact that MROUTING kernel support is missing ... -
- Note that this was working properly in 2.1.5: Multicast forwarding table was displayed for IPv4.
Also available in: Atom