Activity
From 02/02/2015 to 03/03/2015
03/03/2015
-
11:42 PM Bug #4384 (Resolved): missing input validation in captive portal
- fixed
-
- thanks for the report. Fixed. I matched it on ovpn* rather than only a server interface.
-
- fixed
-
- works
- 10:36 PM Revision 6690eb14: Merge branch 'master' into feature/easyrule-unblock
- Conflicts:
etc/inc/easyrule.inc -
- works
-
- fixed
-
09:34 PM Bug #4177: Bug in OpenVPN user/pass auth
- The extra base64 encoding is not needed. The problem is that base64 can produce three non-alphanum characters: =, +...
-
07:19 PM Revision 1dbe220c: Tweak the carp demotion factors slightly to avoid CARP transitions that are most likely unnecessary.
-
-
- subject updated to what appears to be the specific issue here. this is a very unusual circumstance. The other issues ...
- 04:02 PM Revision dedc40f7: Fix password box in diag_authentication
- In 2.2 when I go to Diagnostics->Authentication the password field shows the little lock icon, but the text input are...
-
02:07 PM Feature #1835: uPNP IPv6 support
- If you do a "sockstat" with the new binary running, you should see that it's now listening on v4 and v6 sockets, wher...
-
02:05 PM Feature #1835: uPNP IPv6 support
- Denis Dzyubenko wrote:
> Denis Dzyubenko wrote:
> > I just tried this binary and I see no changes between this and ... -
- Denis Dzyubenko wrote:
> I just tried this binary and I see no changes between this and the original miniupnpd in pf... -
- I just tried this binary and I see no changes between this and the original miniupnpd in pfsense 2.2
Actually afte... -
- Attached is an amd64 binary of miniupnpd with the patches in #4320 and #4321 applied; you can just copy it to /usr/lo...
-
- There's a patch to enable IPv6 in miniupnpd in issue #4321, but so far it doesn't look like anybody's looked at it.
-
- Is there an update on this? I am running pfsense 2.2 but it seems upnp here still doesn't support ipv6 :(
-
- fixed
- 12:06 PM Revision 6cf2c8b0: Code style etc inc z
- end of code style review for the etc folder tree
- 11:09 AM Revision 6e4c199b: Make the DHCP network booting options line up
- by putting the text and selection boxes into a 2-column table so that it can be rendered with the boxes lined up vert...
- 11:09 AM Revision be83cc29: Merge pull request #1539 from phil-davis/patch-7
- 11:08 AM Revision 6cf3278f: system_groupmanager edit cancel button looks small
- It looks smaller and different to the Save button. This makes it the same.
- 11:08 AM Revision 2c5ca6ae: Merge pull request #1538 from phil-davis/patch-6
- 11:08 AM Revision f636bc12: system_usermanager edit cancel button looks small
- It looks smaller and different to the Save button. This makes it the same.
- 11:07 AM Revision d9ac2354: Merge pull request #1537 from phil-davis/patch-5
- 11:07 AM Revision 1626b5ad: Make the Power Mode selection boxes line up
- by putting the text and selection boxes into a 2-column table so that it can be rendered with the boxes lined up vert...
- 11:07 AM Revision db949a19: Standardise power mode selection boxes
- I noticed that this looked a little odd, the boxes for AC and Battery Power Mode are 1 after the other on the same li...
- 11:06 AM Revision 3a1810a9: Merge pull request #1536 from phil-davis/patch-4
- 11:05 AM Revision bd5a8268: Add missing BR tags and fix display with pfsense_ng_fs theme
- Fixes #4481
Similar issue to commit https://github.com/pfsense/pfsense/commit/5cfd948144741ba0d6981f89b2e40257cb9ef2b... - 11:05 AM Revision f6aa92a1: Merge pull request #1535 from phil-davis/patch-3
- 11:03 AM Revision adbbd4f9: Merge pull request #1533 from phil-davis/Code-Style-etc-inc-u
- 11:02 AM Revision 52886a07: Merge pull request #1532 from phil-davis/Code-Style-etc-inc-r-s
- 11:01 AM Revision 603a97cb: Be safe use require_once in zeromq
- I was testing code and just doing stuff like:
require_once("zeromq.inc");
in Diagnostics->Command Prompt, PHP Execute... - 11:01 AM Revision cb743abb: Merge pull request #1531 from phil-davis/patch-2
- 10:48 AM Revision ec67423b: Make the DHCP network booting options line up
- by putting the text and selection boxes into a 2-column table so that it can be rendered with the boxes lined up vert...
-
10:26 AM Bug #4481 (Resolved): DHCP server - Dynamic DNS options layout messed up
-
08:49 AM Bug #4481: DHCP server - Dynamic DNS options layout messed up
- Fixed, thanks. ;)
-
05:20 AM Bug #4481: DHCP server - Dynamic DNS options layout messed up
- Applied in changeset commit:bd5a82681d7c9206799a4b72ffa943ec648ef47f.
-
- Applied in changeset commit:6b16c91c511723b8343fe6339b8e6c16b648c186.
- 07:12 AM Revision 47aa60f9: Make the Power Mode selection boxes line up
- by putting the text and selection boxes into a 2-column table so that it can be rendered with the boxes lined up vert...
- 06:53 AM Revision 86481f75: system_groupmanager edit cancel button looks small
- It looks smaller and different to the Save button. This makes it the same.
- 06:45 AM Revision 3cd4406f: system_usermanager edit cancel button looks small
- It looks smaller and different to the Save button. This makes it the same.
- 06:28 AM Revision ebfb1d0b: Standardise power mode selection boxes
- I noticed that this looked a little odd, the boxes for AC and Battery Power Mode are 1 after the other on the same li...
- 06:18 AM Revision 911cc213: Remove "Prefer old SA" option, and ignore it in all existing configurations. Breaks things in many cases with strongSwan. For the very rare circumstances where this is actually desirable, it's just a sysctl that can be set in tunables.
- 06:16 AM Revision 58c58dcf: Remove "Prefer old SA" option, and ignore it in all existing configurations. Breaks things in many cases with strongSwan. For the very rare circumstances where this is actually desirable, it's just a sysctl that can be set in tunables.
- 05:56 AM Revision 6b16c91c: Add missing BR tags and fix display with pfsense_ng_fs theme
- Fixes #4481
Similar issue to commit https://github.com/pfsense/pfsense/commit/5cfd948144741ba0d6981f89b2e40257cb9ef2b... -
05:55 AM Bug #1493: pf blocks all traffic following filter reload.
- Chris Buechler wrote:
> nothing you're encountering today has any relation to this issue. I suspect any such issues ... -
- Diagnostics->Edit File
Where it gives progress messages like "File successfully saved" - that comes out bold in pfse... -
- In pfsense_ng theme the head-words "failover" "fec" "lacp" render in bold. They are each followed by plain text descr...
-
02:21 AM Bug #4210: Bring back a FTP proxy
- Chris Buechler wrote:
> In a completely default config, passive FTP clients will work fine. The default LAN rule per... -
12:53 AM Feature #4179: Driver oce is missing from 2.2 RC
- Mathieu FRAPPIER wrote:
> When I load the module, using kldload, I got the following output:
>
> oce0: <Emulex CN... -
- fixed
-
- works
-
- fixed
-
- fixed, thanks Paul.
-
- fixed
-
- fixed
-
- confirmed fixed multiple times.
03/02/2015
-
- I made a pull request to fix that: https://github.com/pfsense/pfsense/pull/1535
-
- Now I tries with psense_ng_fs theme and can see the problem. That is the different factor. The full screen width is m...
-
- https://github.com/pfsense/pfsense/commit/5cfd948144741ba0d6981f89b2e40257cb9ef2b1 <= this is missing with services_d...
-
- Exact same messed up layout on multiple 2.2 nanobsd boxes. Dunno guys, but I can see obviously missing BR tags on lin...
-
- That made me update my home system to 2.2.1-DEVELOPMENT - time to be checking/testing with that anyway. From Firefox ...
-
- Apparently I was not specific enough. This is in the "DHCP Static Mappings for this interface." -- i.e., when you add...
-
10:24 PM Bug #4483 (Resolved): SLAAC and stateful DHCP6 IPs are configured on interface when using DHCP6 config type
- If I set my WAN IPv6 configuration type to DHCP6 and leave 'Request only a IPv6 prefix' unchecked I end up with two p...
- 06:54 PM Revision 751533a2: Code style etc inc u
- 06:26 PM Revision 61e047a5: Code style etc in r s
-
- IPsec connections that are bound to a gateway group using VIPs end up omitted from ipsec.conf, and are missing their ...
- 05:03 PM Revision 86084233: Be safe use require_once in zeromq
- I was testing code and just doing stuff like:
require_once("zeromq.inc");
in Diagnostics->Command Prompt, PHP Execute... -
- that's never worked from the looks of it.
-
03:34 PM Bug #4081: Apinger reporting incorrect latency
- I had this problem on a clean plain install of 2.2 using a cable modem DHCP WAN with no explicitly set or override of...
-
- nothing you're encountering today has any relation to this issue. I suspect any such issues on 2.2 have the same root...
-
- I can confirm that I am experiencing the same with 2.2-Release (AMD64) version.
Any updates on this? -
01:25 PM Bug #4177: Bug in OpenVPN user/pass auth
- Sorry for the mess.
The diff below should have looked like this:... -
- Hi,
I've stumbled upon a special case where my client invented a super complicated password and got what he had comi... - 12:10 PM Revision 8f5f40c9: Merge pull request #1529 from phil-davis/Code-Style-pkg-utils
- 12:08 PM Revision 0f6a1db1: Merge pull request #1528 from phil-davis/Code-Style-putil
- 11:55 AM Revision 76de1b3f: Merge pull request #1526 from phil-davis/Code-Style-openvpn
- 11:51 AM Revision 969a5793: Merge pull request #1525 from phil-davis/Code-Style-etc-inc-i-to-p
- 10:39 AM Revision c8703520: Ancient bug on upgrade_014_to_015
- This code looked silly the way it was, with the construct:
$var = $var;
unset($var);
Seems it was accidentally chang... - 10:39 AM Revision a469662b: Merge pull request #1530 from phil-davis/patch-2
03/01/2015
-
- services_dhcp.php has not changed since 1 Jan 2015 so should be the same in 2.2
I do not see this problem in 2.2
Wh... -
- !http://i.imgur.com/V155ffo.png!
- 03:46 PM Revision 839966e3: Ancient bug on upgrade_014_to_015
- This code looked silly the way it was, with the construct:
$var = $var;
unset($var);
Seems it was accidentally chang... -
01:02 PM Bug #4155: ntpd crashes on 32 bit with dynamic WAN reconnections and OpenVPN client configured
- Why not just remove system_ntp_configure and ntp_sync_once.sh from rc.newwanip and rc.newwanipv6 (https://forum.pfsen...
-
09:11 AM Bug #4401: remove xen netfront driver until it can handle altq
- You make a really good job and if XN+ALTQ is working in 2.2.2 we'll never spoke about that.
It's never xen which c...
02/28/2015
-
- Removing this would not result in 100% upgrade success, it'd result in 100% of already upgraded and fixed systems bre...
-
- If it's come with 2.2.2 I can wait.
But if not I think 100% update success is better than 80% faster running systems... -
- We will get ALTQ support into xn for 2.2.2. We'll track that on the original ticket for that problem, #4345
We're ... - 05:24 PM Revision 49aec489: Code style for pkg-utils
- 02:40 PM Revision 23a193da: Code style for pfsense-utils
- 02:27 PM Revision bb235b27: Merge pull request #1527 from phil-davis/patch-2
- 12:56 PM Revision 472da675: Semi-colon went AWOL in dyndns.class
- after putting it back the code runs much better :)
-
09:19 AM Bug #4480: DHCP self-reported hostnames not synced properly
- Thanks, I'd tried searching for existing bugs on this one but there were so many items mentioning DHCP that I couldn'...
-
- duplicate of #4061
- 09:01 AM Revision ef00af3c: Code style openvpn.inc
- 08:40 AM Revision b37a2e8c: Code style for etc inc i to p
-
04:58 AM Bug #4178: IPsec leftsubnet changed to 0.0.0.0 with Cisco unity plugin active
- I renamed `libstrongswan-unity.so` to `libstrongswan-unity.so.orig` three days ago, and the tunnel has stayed up all...
-
- updated subject to specific issue at hand here.
-
- that message means there are no queues in the running ruleset. I suspect this is actually a duplicate of a different ...
02/27/2015
-
- Hello,
I noticed that if a few of my servers are set up to self-report hostnames to DHCP (active lease type), the ... -
03:25 PM Bug #4479 (New): Firewall rules won't match GRE interface after applying IPSEC transport encryption on GRE tunnel
- I have an issue with IPSEC where my GRE tunnels work fine until I turn on transport encryption with IPSEC. After IPSE...
-
- yeah, duplicate of #3314
-
- radvd stops/starts with CARP status where it's bound to a CARP IPv6 IP. If you bind it to a specific interface, that'...
-
04:44 AM Bug #4478 (Rejected): radvd running though disabled in CARP setup
- I'm running a CARP setup with two routers IPv6 only.
I don't know what the exact behaviour *should* be but when both... - 02:35 PM Revision 139deffb: Merge pull request #1524 from phil-davis/Code-Style-Guide-Interfaces-inc
- 01:57 PM Revision e59410d5: Merge pull request #1523 from phil-davis/patch-2
- 01:36 PM Revision fd74eeea: Merge pull request #1522 from phil-davis/Code-Style-Guide-etc-inc-f-to-g
-
- Olivier Müller wrote:
> Thanks for the fixes !
>
> On this topic, Unbound 1.5.2rc1 has just been released, and f... -
- confirmed fixed
-
08:24 AM Bug #4364: cannot change or set keymap during and after install
- Hi,
I can confirm that. Just downloaded a 2.2 full iso, installed it : no video or keymap choices at install time, a... - 05:28 AM Revision cf73302f: Code style guide interfaces.inc
- This is another big file that has many diffs so Github refuses to
display them. I thought it best to keep doing indiv... -
- such a terrible idea to use this. But, legit issue if that is a problem
-
- confirmed
-
- fixed
-
- the C2758s we sell display VGA fine regardless of primaryconsole configuration. A good chunk of the boot process, fro...
-
- fixed
-
- thanks for the confirmation, Paul. I confirmed as well, fixed.
-
-
03:42 AM pfSense Packages Bug #4084: Check_mk agent doesn't work: wrong bash path
- The Problem is that with 2.2-RELEASE bash is not there anymore so check_mk_agent will not work.
After installing bas...
02/26/2015
-
- it's fixed in 2.2.1. this is actually a duplicate of #4393 which has the specific cause and commits that fixed.
-
06:10 AM Bug #4352: 2.2 syslogd exiting sig 15 when boot finishes
- Did you ever find a resolution to this? We're seeing the exact same behavior.
- 04:39 PM Revision 918bdf0d: More style guide changes
- In gwlb.inc at line 676 and 779 I added an extra set of brackets. In the
"if" clause as a whole there were a mix of &... - 03:59 PM Revision e6cbfb65: Code style guide changes for filter.inc 2nd version
- This is the changes to filter.inc as per the commits in https://github.com/pfsense/pfsense/pull/1521 but done in just...
-
- This regressed somewhere after 2.2 release and been going for ever since the 2.2.1 snapshots have been made available...
-
- Still broken. Really, I feel somehow the point gets missed here - is there actually some upgrade script to clean up t...
- 01:34 PM Revision 59f64414: Fix track6 prefix id range in error message, reported on Pull Request #1517
- 01:34 PM Revision aa2370d8: Fix track6 prefix id range in error message, reported on Pull Request #1517
-
-
-
- Applied in changeset commit:e7aca8a470e3ea13e018c99f7db4351c4119f082.
- 01:12 PM Revision ae52d165: Fix indent and remove some unecessary ()
- 12:38 PM Revision ae3b187a: Merge pull request #1520 from phil-davis/Code-Style-Guide-etc-inc-a-to-e
- 12:37 PM Revision 9c8e788c: Merge pull request #1519 from phil-davis/Code-style-etc-misc
- 12:31 PM Revision e607009a: Check if variables are set before trying to pass them to function substr_count to avoid generating PHP alerts.
- 12:31 PM Revision 9e52dca6: Merge pull request #1518 from k-paulius/fix-ntpd-unset-vars
- 12:28 PM Revision 2798bb68: interface_netgraph_needed can miss setting found equals true
- This routine seems to go looking to see if the passed-in interface is PPP-style. At the end, if it is not PPP-style t...
- 12:28 PM Revision ded7e5bf: Merge pull request #1516 from phil-davis/patch-2
- 12:25 PM Revision 7136682e: Merge pull request #1515 from phil-davis/Style-updates
-
11:15 AM Bug #4392: OpenVPN daemon crashing with ath(4) card installed
- This error also occurs almost every minute on my pfSense firewall since the update to 2.2. Is there a any solution to...
- 08:25 AM Revision 9ba87997: Code Style Guide etc inc f to g
- 07:36 AM Revision 777291a2: remove unused legacy code
- 07:35 AM Revision 8cf108b2: remove unused legacy code
-
- Pushed a fix commit:aa2370d8341b9ece91c30a500aac4c19a4e78795 and commit:59f64414ab456ea56751c0381b625205a28e064a
- 07:32 AM Revision 71a690bb: Log ifconfig commands used to setup wireless interfaces
- 07:32 AM Revision 95d2d24b: Log ifconfig commands used to setup wireless interfaces
- 05:42 AM Revision 1e0b1727: Code style guide etc in a to e
-
05:14 AM Bug #4476 (Closed): pfSense blocks all new traffic after applying port forwarding changes
- Version: 2.2-RELEASE (i386)
built on Thu Jan 22 14:04:25 CST 2015
FreeBSD 10.1-RELEASE-p4
I am using pfSense o... - 03:50 AM Revision 1bfcf6f1: Code style guide changes for miscellaneous files
- under etc
- 02:44 AM Revision 10221050: Check if variables are set before trying to pass them to function substr_count to avoid generating PHP alerts.
-
- Target for 2.2.2 looks good. This does not effect actual firewall functions from a security point of view - packet pa...
-
- I suspect the root issue here is logging of passed traffic with IP options regardless of whether logging is enabled o...
-
-
- this indeed is inadequate to fix the issue, we'll need that option to omit that plugin entirely.
02/25/2015
-
- There are some packages that might like to know about interface state changes, including changes where the interface ...
-
02:43 PM Bug #4474 (Confirmed): IP address change triggers reload of all packages
- Hey!
When OpenVPN restarts and the clients or servers are assigned to interfaces, the packages are reloaded. They ... -
08:27 PM Revision 59eb0ce7: Put the bits to use the new reset utility
-
-
- Pull request: https://github.com/pfsense/pfsense/pull/1517
-
- If you enter incorrect IPv6 prefix on the interface that is set to 'Track Interface', validation message that is disp...
-
- Tested on v2.2 branch. Config file is generated correctly now.
-
- Tested on 2.2 branch and it is working fine now.
Thanks for your feedback Renato. -
06:08 PM Bug #4081: Apinger reporting incorrect latency
- could this issue be aggravated by using google dns as monitor addresses as they are anycast?
-
- with this about 20% of the time causes a mail storm makes the box inaccessible from webgui a reset of web configurato...
- 05:21 PM Revision 7af43cb0: interface_netgraph_needed can miss setting found equals true
- This routine seems to go looking to see if the passed-in interface is PPP-style. At the end, if it is not PPP-style t...
-
-
-
-
-
-
-
-
- Raul Ramos wrote:
> I doubt that web developers from pfSense have the taste and the ability to do that, is only my o... -
01:15 PM Todo #4225: Lets improve the webGUI
- Raul Ramos wrote:
> Kerio Control web gui? i pass. Bootstrap, foundation, own css/js whatever they choose is fine.
... -
08:55 AM Todo #4225: Lets improve the webGUI
- Kerio Control web gui? i pass. Bootstrap, foundation, own css/js whatever they choose is fine.
See what Ubiquiti i... -
- Updates are signed and validated. The downloads page has a link to the md5 and sha256 hash files for your selected do...
-
- Yeah, hence my saying "not quite so simple for the average user to verify". :-)
We keep our own copy of gzsig in o... -
07:25 AM Feature #4472: Cryptographically sign every (sub-)release
- Uhh - what a rare animal! I wasn't aware of gzsig so far.
Let's hope the attack on monkey.org, hosting also gzsig,... -
- Yes, all of the files including the ISO and IMG files are gzipped and signed with gzsig which adds signature metadata...
-
- I cannot find signatures when opening a mirror directory (e.g. http://files.nl.pfsense.org/mirror/downloads/). I mean...
-
- They are all currently signed with gzsig. Update files have their signature checked before being applied. So do packa...
-
- As it is quite easy for an active adversary to inject arbitrary data, every release should be signed, not only hashed.
-
10:40 AM pfSense Packages Bug #4473: Still can't run EGP and IGP on the same system
- We're looking at adding BIRD as a package, which would allow BGP and OSPF to run.
-
10:16 AM pfSense Packages Bug #4473 (Closed): Still can't run EGP and IGP on the same system
- A client just ran into the same problem I've noted a few times previously - you still can't install an EGP daemon (Op...
-
09:40 AM Bug #1974: Captive Portal RADIUS accounting bytes wrong
- It seems there is a regression, at least in 2.2 for 32bit.
Radius is reporting 1320 MB while according to Bandwidt... -
- Thank you for finding the separator issue.
I pushed fixes for separating dns names with spaces.
The characters at... -
08:16 AM Bug #3568: DynDNS: Hostname '@' not accepted for Namecheap
- As you can see there:
https://www.namecheap.com/support/knowledgebase/article.aspx/597/10/how-can-i-set-up-a-catchal... - 06:26 AM Revision e2d700da: remove old, unused code
- 06:25 AM Revision e082eca9: remove old, unused code
-
- I also found that disabling the plugin is inadequate to fix the issue (even after a strongswan restart). I'm now tryi...
02/24/2015
-
10:19 PM Bug #4418: IPsec mobile clients - bogus "p" appended to search domain
- Hi all,
Not sure if this helps, but some findings:
First, it appears that the strongswan config is generated us... -
07:52 PM Bug #4418: IPsec mobile clients - bogus "p" appended to search domain
- Hi.
Also tried Revision fc06d8ea with no effect on clients from Mountain Lion through Yosemite. - 07:58 PM Revision a8efbde4: Minor spacing edits to etc files
- 07:23 PM Revision e173dd74: Code style for etc files
- 07:08 PM Revision aa314146: When RADIUS auth is selected, radius protocol and server ip/host are mandatory. Fixes #4384
- 07:08 PM Revision 10b92c57: When RADIUS auth is selected, radius protocol and server ip/host are mandatory. Fixes #4384
- 06:45 PM Revision 6c452c3e: Initialize var and move unset outside the loop
- 06:45 PM Revision 83fa2c73: Do not request prefix delegation if no tracking interfaces are setup to
- use it. Ticket #4436
- 06:45 PM Revision 8104c3df: Initialize var and move unset outside the loop
- 06:43 PM Revision 9212eb92: Merge pull request #1495 from k-paulius/fix-dhcp6c-4436
- 06:40 PM Revision 3adf6f27: isset is a better check here
- 06:40 PM Revision 2e50e5b1: Fixing issues with NTP RRD graph state changes
- - only call enable_rrd_graphing() after $config['ntpd']['statsgraph']
is set
- fix if condition; empty and isset ... - 06:40 PM Revision 5a27b146: isset is a better check here
- 06:39 PM Revision 88a5ad7e: Merge pull request #1494 from k-paulius/ntp-rrd-fix
-
- This should work as is on 2.2 in FreeBSD head it has been fixed with:...
-
- Applied in changeset commit:aa314146cac3382cc1c7fc28c93296f70e7c9682.
-
- Applied in changeset commit:10b92c5756c5d9aa4e183fa08fe8fe0ad2c12bd0.
-
- Pull request https://github.com/pfsense/pfsense/pull/1514
-
- When you configure IPv6 to use 6rd or 6to4 tunnel a new interface ('wan_stf' for example) is created.
If IPv6 config... -
- Merged
-
- Merged
-
- Merged
-
- Merged
-
-
- Warnings gone with the latest snapshot. ;)
-
- I submitted a fix for the FreeBSD ports tree and rebuild it. Should be ok now.
-
- Merged
- 11:55 AM Revision b8b3784f: Merge pull request #1479 from surrural/master
-
11:40 AM Revision b5ecfe0f: carp, don't show status icon from previous carp ip in case the ip is not present on the interface (test with ifconfig em0 1.2.3.4 delete)
- 11:40 AM Revision 0b9d204a: Merge pull request #1492 from PiBa-NL/carp-statusicon
- 11:24 AM Revision 42fcce27: Handle reverse lookup domain overrides
- that match exactly a whole block of private address space.
e.g. if the user has checked "Do not forward private rever... - 11:24 AM Revision 069bb759: Merge pull request #1498 from phil-davis/patch-3
- 11:08 AM Revision f31436cc: Fix PTR records for aliases in host overrides
- 10:10 AM Revision e91f03b4: Merge pull request #1513 from znerol/bug/master/unbound-host-alias-ptr-followup
- 09:31 AM Revision f29610b0: Fix PTR records for aliases in host overrides
-
07:52 AM Feature #4470: RA page in GUI
- ....and updated to 1.9.7 version (I don`t know what is the latest version for FreeBSD, on linux there is 2.9, latest ...
-
- RA page in gui needs some advanced settings like:
- change lifetimes
- change RA packets min and max send value
- ... -
- Done
-
-
06:53 AM Bug #4447: Unbound adds PTR records for host override aliases
- Thanks for merging the followup, and sorry for the noise. It works now as expected with the newest snapshot. @PTR@ qu...
-
- Oops, that completely broke revers DNS lookups. Regrettably I confused the config keys, the code looks for @ip@ inste...
-
- How can I determine which pfsense in my env is sending the syslog messages if no hostname/ip is specified? This would...
-
- If Descriptive Name of an auth server contains string 'local', it is going to be considered as 'Local Database', for ...
-
03:23 AM Bug #4468 (Resolved): radvd multiple prefix not working
- Per discussion here:https://forum.pfsense.org/index.php?topic=78035.0
radvd.conf not showing extra prefixes, only ... -
02:50 AM Feature #2743: Add external interface selector to UPnP Settings
- i can try and add multi wan selection but can some1 show me a sample upnp config file with multiple wans so i know ho...
-
01:27 AM Bug #4465: Traffic utilization error egress on vlan interface
- Yes it looks like it, did not see it as I thought it was spesific to the 2.2 release.
02/23/2015
-
- This is a duplicate of #3314 ?
-
- I have configured two vlan interfaces on one port and is running traffic from one to the other, then the traffic graf...
-
- Yes, agree with Ermal.
My comments were just to document/mention the negative numbers behavior on 32-bit systems. I ... -
- This seems to work now!
-
- Diagnostics->Backup/Restore, Config History tab, has a list of locally stored old configs. You can configure the numb...
-
04:59 PM pfSense Packages Feature #4466: Config history and diffs
- Sorry, I am referring to the AutoConfigBackup package page under Diagnostics menu. I am curious what you're talking a...
-
- The config history already has this. There are radio selectors and a 'diff' button to show changes.
-
- Something similar to Wikipedia, where you can select two configs and see the changes between them. Also nice would be...
-
-
- 08:00 PM Revision e0a4147b: Add support for DNSimple (dnsimple.com)
- 08:00 PM Revision c19250a5: Update dyndns.class
- 08:00 PM Revision a39b78b5: Add support for DNSimple (dnsimple.com)
- 08:00 PM Revision e29543d6: Add support for DNSimple (dnsimple.com)
- 08:00 PM Revision 916d683e: Add support for DNSimple (dnsimple.com)
- 07:28 PM Revision 623e6d09: Preserve "add routers" value across loop for each interface
- Forum: https://forum.pfsense.org/index.php?topic=89302.0
If the user put "none" in the 'gateway' field for the DHCP ... - 07:28 PM Revision 8252ccfa: Merge pull request #1511 from phil-davis/patch-4
- 07:18 PM Revision 4f5967b9: diag_arp allow underscore in resolved host names
- is_hostname() and is_domain() allow underscore in the names. So it is possible to have underscore in host names, for ...
- 07:17 PM Revision b2507ae6: Merge pull request #1497 from phil-davis/patch-2
-
- The existing implementation of Net_IPv6::compress produces an empty
string when compressing the all-zeros ("::") addr... - 07:05 PM Revision e6daaa3b: Merge pull request #1477 from razzfazz/fix_net_ipv6_compress_all_zeroes_master
- 06:33 PM Revision 3f141c9d: Preserve "add routers" value across loop for each interface
- Forum: https://forum.pfsense.org/index.php?topic=89302.0
If the user put "none" in the 'gateway' field for the DHCP ... -
- I had this issue as well, but I don't think this is an issue with 2.2. This was most likely an issue with previous re...
-
03:13 AM Bug #4464 (Resolved): Config restore forces serial console to be enabled
- during the upgrade to 2.2 " Enables the first serial port with 115200/8/N/1 by default, or another speed selectable b...
- 06:14 PM Revision 92a33a83: Merge pull request #1496 from stilez/patch-2
-
- The existing code only includes a v6 name server IP in the
automatically generated dhcpdv6 configuration for tracking... - 06:01 PM Revision 545e25fa: Merge pull request #1476 from razzfazz/fix_dns6ip_assignment_for_track6_master
-
- When computing the start IP for the 'available range' field,
services_dhcpv6.php attempts to increment a colon-format... - 05:38 PM Revision d596baab: Merge pull request #1478 from razzfazz/fix_dhcpv6_avail_range_dump_master
-
05:31 PM Bug #4467 (New): Traffic Graphs shows wrong throughput when traffic shaping enabled
- When I enable traffic shaping with the wizard the traffic graph is incorrect. It is showing much lower throughput tha...
- 05:31 PM Revision a0e4410f: Do not add PTR records for aliases in host overrides
- 05:30 PM Revision beb6a984: Merge pull request #1509 from znerol/bug/master/unbound-host-alias-ptr
- 05:18 PM Revision ff7990df: Fix display style typo
- I could not see any difference in rendering of the page after fixing this, but it looks it it should be fixed.
- 05:18 PM Revision 41de7158: Fix display style typo
- I could not see any difference in rendering of the page after fixing this, but it looks it it should be fixed.
- 05:18 PM Revision ba7d3bd3: OpenVPN server improve handling of authmode
- Currently if the user is clicking around while they are setting up an OpenVPN server, they can do stuff like this:
a)... - 05:17 PM Revision 683eb992: vpn_openvpn_server.php white space
- 05:17 PM Revision 359d0123: Merge pull request #1510 from phil-davis/patch-6
- 04:46 PM Revision 5fd42bbb: Fix display style typo
- I could not see any difference in rendering of the page after fixing this, but it looks it it should be fixed.
- 04:44 PM Revision cbd49c77: Fix display style typo
- I could not see any difference in rendering of the page after fixing this, but it looks it it should be fixed.
- 04:31 PM Revision a087e197: OpenVPN server improve handling of authmode
- Currently if the user is clicking around while they are setting up an OpenVPN server, they can do stuff like this:
a)... - 04:13 PM Revision 3e41ad59: vpn_openvpn_server.php white space
-
- Accepted upstream as well.
-
- Merged was put in.
-
- Submitted "pull request":https://github.com/pfsense/pfsense/pull/pear/Net_IPv6#10 to Net_IPv6 upstream repo.
-
- This will be solved by bringing in the _start routine from FreeBSD 8 as has been done for other drivers in the tree.
... -
- that fix appears to work fine
- 02:30 PM Revision 06266c34: Do not add PTR records for aliases in host overrides
- 12:30 PM Revision d2ffc02f: Mention interface name on DHCP edit GUI
- IMHO it can be confusing on the DHCP edit page for static mapped entries to know which interface the entry is being e...
- 12:30 PM Revision 7ccc1c32: Merge pull request #1505 from phil-davis/patch-7
- 12:29 PM Revision aeb5bf8e: Status_dhcp_leases fix edit button for static entries with no IP address
- The edit button for static entries always has an index id=0 and thus pressing the edit button goes to (mostly) edit t...
- 12:29 PM Revision 1a1df767: Merge pull request #1504 from phil-davis/patch-6
- 12:23 PM Revision 8261c0b6: Fix broken links to dhcp6c.conf man page.
- manpath FreeBSD+Ports no longer exits and needs to be replaced with FreeBSD+10.1-RELEASE+and+Ports
- 12:23 PM Revision a8b8033f: Merge pull request #1506 from k-paulius/fix-links
- 12:18 PM Revision c0fde4e4: Success typo
- might as well fix it while I notice it
- 12:18 PM Revision 1426b89f: Merge pull request #1507 from phil-davis/patch-8
- 12:17 PM Revision 7b6d4e6c: Modified DynDns -> Eurodns url
- 12:17 PM Revision 890136d4: Merge pull request #1508 from johnbyronent/master
-
- Pull Request has been merged and commit cherry-picked to RELENG_2_2
-
- Opened PR "1509":https://github.com/pfsense/pfsense/pull/1509 (proper @master@).
- 07:23 AM Revision 900e9df6: Success typo
- might as well fix it while I notice it
-
05:36 AM Bug #4175: kernel panic when loading run driver for RT3070
- I'm seeing this too on an older device that worked fine in 2.1.X. I'll try to run up a FreeBSD 10.1 install and test....
- 03:47 AM Revision d82b2a6f: Fix broken links to dhcp6c.conf man page.
- manpath FreeBSD+Ports no longer exits and needs to be replaced with FreeBSD+10.1-RELEASE+and+Ports
-
- Access Restrictions once open says "these options control access to NTP from the WAN."
This is incorrect.
It sets...
02/22/2015
-
- Thanks, I wasn't aware of that option!
I searched around and managed to find it in its hiding place (System: Advan... -
- enable the default gateway switching option if you need this behavior.
-
- It appears pfSense email alerts may also be going out over the Default WAN only
(so if Default is down no email aler... -
- Hello,
I have multi-wan set up with gateways WAN1 (Default) and WAN2.
If I temporarily take down the WAN1 gatew... -
07:07 PM pfSense Packages Bug #4462 (Resolved): Custom ACLS (After_Auth) not written to squid.conf
- Services->Proxy server->General, the input field "Custom ACLS (After_Auth)" is not written to squid.conf.
Tested s... -
- The UI on Services->Proxy server->ACL has a good list list of ACL types to add.
Unfortunately most of these are not ... -
- duplicate of #4259
-
09:07 AM Feature #4457 (Rejected): NAT rules with "any" as ip protocol
- hello,
i started to use pfsense in my company and with other products we often do nat rules without to specify ip p... -
- Thanks for the feedback. definitely a duplicate of #4296
-
- I have not seen the issue again in the 2-3 days since I removed the FQDN from that alias. So far so good.
-
- back to new to update to .22
-
02:41 PM pfSense Packages Bug #4460 (Closed): Upgrade to HAVP v1.05 forever displays "Antivirus Server ( ) Stopped"
- Upgrading HAVP 0.91_1 pkg v1.04 to version v1.05 causes the Antivirus: General page to display "Antivirus Server ( ) ...
-
01:47 PM Bug #4459: Tzdata is too old (needs to be updated for Russia)
- More info:
I have correct time on the dashboard:
Sun Feb 22 22:45:03 MSK 2015
In console i have incorrect timezone... -
- Time difference is 1h for Russia.
- 06:02 AM Revision 18620400: Mention interface name on DHCP edit GUI
- IMHO it can be confusing on the DHCP edit page for static mapped entries to know which interface the entry is being e...
- 05:36 AM Revision f5bea142: Status_dhcp_leases fix edit button for static entries with no IP address
- The edit button for static entries always has an index id=0 and thus pressing the edit button goes to (mostly) edit t...
-
- Hello,
it would be useful to have the packet capture with more filter options. For example i need often to filter ne... -
02:52 AM Bug #4175: kernel panic when loading run driver for RT3070
- Got the same issue today while upgrading to 2.2 on fit-pc2i. It got RT2870 card and the same double fault while loadi...
02/21/2015
-
11:51 PM pfSense Packages Bug #4336: syslog-ng package missing libraries
- I believe this is because these libraries are in the subfolder /usr/pbi/syslog-ng-amd64/lib/syslog-ng.
Normally /u... -
09:51 PM Bug #4455: Router Advertisment Daemon does not add UnicastOnly for OpenVPN interfaces
- Note. The bugtracker did add formatting to my code making it pretty unreadable. Updated code that shouldn't get chang...
-
- Found out when enabling RADVD on ovpns1 (a tun virtual interface), that the configuration page does not add UnicastOn...
-
- Are there any issues with my "pull request":https://github.com/pfsense/pfsense/pull/1478 that would prevent it from b...
-
- Are there any issues with my "pull request":https://github.com/pfsense/pfsense/pull/1476 that would prevent it from b...
-
- Are there any issues with my "pull request":https://github.com/pfsense/pfsense/pull/1477 that would prevent it from b...
- 05:11 PM Revision 7a3848b6: correct 2 typos
- Form_Input - forceName should actually use parameter
firewall_rules_edit - add Inputs to Section, not form - 02:13 PM Revision 48868a05: Initial version of converted firewall_rules_edit
-
- I have that same bug in the following pfSense version: 2.2-RELEASE (i386)
built on Thu Jan 22 14:04:25 CST 2015
F...
02/20/2015
-
- One thing you might consider is adding 'server:' as the last keyword in all configuration files that are included in ...
-
-
- there has to be something different, as the run driver we ship is 100% identical to FreeBSD 10.1's. If someone wants ...
-
-
-
03:35 PM Bug #4403: Enabling SNMP causes kernel panic with APU with empty SD card slot
- I am running on a SD card (and without any other card) and I am encountering the problem.
-
- Problem still exists. Only selecting the interface adds: "interface listen em1" , while only selecting the carp-ip, d...
-
- thanks Phil
-
10:13 AM Bug #4454 (Duplicate): scrub random-id + PPPoE + IPsec + communication to LAN IP = kernel panic on 32 bit
- Started almost here https://forum.pfsense.org/index.php?board=16.0
But I am not sure is it all have the same reason ... -
- Updated the description to be more accurate. The actual problem appears to be that deleting an IP Alias VIP with a CA...
-
02:58 AM Bug #4446: IP Alias with CARP VIP parent is not removed from OS on secondary node when deleted
- Ok, I know how to reproduce this.
On the master, I have this config:... -
- what does the output of ifconfig show on the secondary?
-
- Chris Buechler wrote:
> this definitely works in general. when you end up in dual master is if it doesn't sync the a... -
04:43 AM pfSense Packages Bug #4453: Squid-in-the-middle SSL Bump downgrades client SSL/TLS connections
- I am aware of that, but since the CA is internal, I don't see the point why this should lead to RC4 and 40-bit keys b...
-
- René Pfeiffer wrote:
> This is a critical bug and may render strong encryption useless once SSL Bump is deployed.
... -
- When enabling the Squid-in-the-middle SSL Bump option on pfSense 2.2/2.2.1 the SSL/TLS connections between server <->...
-
04:05 AM pfSense Packages Bug #4452 (Resolved): squid3 XMLRPC Sync
- The settings made in the tab "Antivirus" are not synchronized. On the sync-slave all settings made in this tab are cl...
02/19/2015
-
- Forum post is actually: https://forum.pfsense.org/index.php?topic=89072.0
and I do not see any buttons that allow me... -
- Forum: https://forum.pfsense.org/index.php?topic=89043.0
Add a "Static Mapped" DHCP entry for some MAC address but d... -
06:54 PM Bug #4442: Boot sits at "Configuring firewall" for long time with hostnames, URL Tables, where DNS non-functional
- Could this help:
$destination = $fqdn;
$output = shell_exec("host -W 1 $destination");
if (preg_match_all('#\b(c... -
- this definitely works in general. when you end up in dual master is if it doesn't sync the alias across for some reas...
-
- I used to have a CARP VIP for any IP address my pf cluster has to handle since that used to be the only way (changed ...
-
- duplicate of #4310
-
- I had a dedicated rule for a test machine in a DMZ with a limiter active (800kBit each direction) after an upgrade fr...
-
- It sounds like that could be the issue. I'll take out the fqdn for now and if the problem does not come back that wou...
-
- That sounds the same as #4296. Eduard, does the description there seem to match up with what you're seeing?
-
- Is this the same or similar issue to https://redmine.pfsense.org/issues/4296 ?
-
- Hello,
I have a WAN1 rule that allows traffic from Source defined by an IP alias.
The IP alias contains various I... -
- See https://forum.pfsense.org/index.php?topic=88947.0 for more details.
I've reproduced this issue on two sets of ... -
- This is not my first patch, CLA is already done.
1500 was bogus, because it was against an old master, ... -
- I expect the devs will want you to make just a pull request against master. Then the devs will sort out committing to...
-
- Github Pull requests:
* "1499":https://github.com/pfsense/pfsense/pull/1499 (RELENG_2_2)
* "1500":https://github.co... -
- It is not recommended to add more than one ...
-
07:17 AM Bug #4392: OpenVPN daemon crashing with ath(4) card installed
- to answer your previous question yes this is running 2.2-RELEASE (amd64)
-
- I have applied the patch. Ill let you know if I see any more syslog crashes. Thanks!
-
06:22 AM Bug #4175: kernel panic when loading run driver for RT3070
- Hi. I am not sure if I am supposed to create a new issue or update this one...
I am experiencing the exact same be... - 01:53 AM Revision a9386b8f: add a couple unnecessary bsdinstaller files to obsoletedfiles
- 01:52 AM Revision e0c1bfd7: add a couple unnecessary bsdinstaller files to obsoletedfiles
- 01:44 AM Revision 07dee7aa: remove unused dfuife files.
- 01:41 AM Revision 0778191e: remove unused dfuife files.
02/18/2015
-
- it's somehow a hardware/hypervisor-specific issue, but I don't think it's indicative of a problem with Hyper-V itself...
-
- On some Hyper-V systems, applying changes to NAT in the web interface results in a rules.debug omitting all config-de...
-
10:30 PM pfSense Packages Bug #4373: pfBlockerNG: IPv4 aliases are not preserved when upgrading package
- Here is the commit to default "Keep settings" to "on":
https://github.com/BBcan177/pfsense-packages/commit/f802459... -
- there are a lot of people who are going to be surprised by that default, I suggest switching to defaulting to enablin...
-
- If you enable "Do not forward private reverse lookups" and then have domain override(s) that cover whole chunk(s) of ...
-
- This was implemented for 2.2-RELEASE by commit: https://github.com/pfsense/pfsense/commit/3b5707db5bd1ea4d886b41f86bc...
-
- I think it was this commit that fixed the status background color updating: https://github.com/pfsense/pfsense/commit...
-
- is_hostname() and is_domain() allow underscore in the names. So it is possible to have underscore in host names, for ...
-
- anyone who's having issues with syslogd not running, install the System Patches package, then browse to System>Patche...
-
- No need for that patch I posted now, Chris found the actual fix after that. The fix is in the commits shown in the "A...
-
- I applied the patch and it created the lighttpd-breakage.log but its 0bytes. After applying the patch and restarting...
-
- best to gitsync to get to 2.2.1 right now. Option 12 at console, run "playback gitsync RELENG_2_2"
-
-
- Where you have FQDNs in aliases, and no reachable DNS servers, the boot gets excessively delayed sitting at "Configur...
-
- the specific issue is if you have an IP alias VIP that's not within any of your interfaces' subnets, and you have a g...
-
06:47 AM Bug #4438 (Resolved): Unable to delete IP Alias outside an interface's subnet where a gateway exists in the same subnet
- I have a working 2 FW CARP setup with pfSense 2.2 and a /28 subnet of available ip addresses.
If I add one of my a... -
-
01:00 PM Bug #4441 (Resolved): duplicating a relayd load balancer monitor in reality just overwrites the existing one and renames it.
- Create a load balancing monitor called "Xhttps" and configure it to monitor https. Further configure it to use a host...
-
- duplicate of #4341
-
11:44 AM Bug #4341: strongSwan fails to re-attach dynamic IPs where interfaces_use specified
- Chris, will you merge BUG #4425 with this one. I had filed that bug report to outline the same problem that you have ...
- 10:57 AM Revision 153613e3: Handle reverse lookup domain overrides
- that match exactly a whole block of private address space.
e.g. if the user has checked "Do not forward private rever... -
09:58 AM Feature #3933: Limiter burst doesn't have any effect
- Would a bounty help with this?
- 08:48 AM Revision 6777fc3b: diag_arp allow underscore in resolved host names
- is_hostname() and is_domain() allow underscore in the names. So it is possible to have underscore in host names, for ...
- 07:58 AM Revision 90d1d8cf: Don't hard code harden-referral-path. It defaults to no, so no behavior change, and that setting is unlikely to ever become a default. This allows users to configure an override to enable this option if desired. part of Ticket #4399
- 07:57 AM Revision 559c8d3d: Don't hard code harden-referral-path. It defaults to no, so no behavior change, and that setting is unlikely to ever become a default. This allows users to configure an override to enable this option if desired. part of Ticket #4399
-
- Duplicate of #4439
-
- I have a working 2 FW CARP setup with pfSense 2.2 and a /28 subnet of available ip addresses.
The Virtual IP Alias... -
- The VIP types that are supposed to sync work properly: CARP VIPs, IP Aliases *using a CARP VIP as their parent interf...
-
- I have a working 2 FW CARP setup with pfSense 2.2 and a /28 subnet of available ip addresses.
The Virtual IP Alias... -
-
05:29 AM pfSense Packages Bug #4198: lightsquid doesn't work, perl is missing
- thanks Jim! I think we can close this ticket.. I didn't report this, but the only issue now with the package is with ...
- 06:39 AM Revision 7b404fde: Add GUI control for MOBIKE. Hide it when IKEv1 selected. Enable toggling of NAT-T field display so it's on for IKEv1, off for IKEv2. Do same for reauth while here. Ticket #3979
- 06:38 AM Revision 065e78b3: Add GUI control for MOBIKE. Hide it when IKEv1 selected. Enable toggling of NAT-T field display so it's on for IKEv1, off for IKEv2. Do same for reauth while here. Ticket #3979
-
- The broken code never made it into any -RELEASE. pfSense is based on 10.1-RELEASE, so no it's not affected.
-
- No. https://lists.freebsd.org/pipermail/freebsd-current/2015-February/054581.html
-
01:02 AM Bug #4437 (Closed): FreeBSD Kernel RNG Broken
- Is pfsense of this serious vulnerability affected?
https://lists.freebsd.org/pipermail/freebsd-current/2015-February... - 04:32 AM Revision cfda8861: Wait a bit after sending a TERM to syslogd as in some instances it can take too long to stop, and it fails to restart because it's still running at that point. Add a KILL in case it's still running after that. Ticket #4393
- 04:30 AM Revision 209ba3aa: Wait a bit after sending a TERM to syslogd as in some instances it can take too long to stop, and it fails to restart because it's still running at that point. Add a KILL in case it's still running after that. Ticket #4393
-
- I removed harden-referral-path from the default config, so you can enable it as an advanced option if wanted.
-
- Thanks for the follow up. SLAAC requires a /64, which is why. The RAs are correct. Not a bug.
though we could imp... -
- works
-
- this should all be addressed now, needs review and further testing.
02/17/2015
-
- fixed
-
- In a completely default config, passive FTP clients will work fine. The default LAN rule permits what's necessary.
... -
- Chris Buechler wrote:
> check out the info here:
> https://doc.pfsense.org/index.php/FTP_without_a_Proxy
>
> it... -
- Chris Buechler wrote:
> check out the info here:
> https://doc.pfsense.org/index.php/FTP_without_a_Proxy
>
> it... -
- check out the info here:
https://doc.pfsense.org/index.php/FTP_without_a_Proxy
it's always possible to support p... -
- Interesting because i'm getting reports from vendors who refuse to change away from FTP that PASV mode is not working...
-
- fixed
-
- thanks for confirming.
-
- every circumstance I could replicate is fixed by what I just pushed.
-
- I still can't seem to reproduce it here even with a "bad" set of logs and similar settings. There must be some other ...
-
05:20 PM Revision 31495068: Three minor improvements to IP functions
- 1) Most is_ip***() functions can return 4 or 6 to indicate type of IP, for benefit of calling code (both evaluate to ...
-
01:38 PM Feature #4366: Namecheap Dynamic DNS updates fail on subdomain formatted domains
- A few more pieces of information
In this scenario, the subdomain is being pointed at namecheap's dynamic DNS not t... -
10:19 AM Bug #4429: Problem with radvd(8) SLAAC packets autoconfiguring client IPv6 routes
- In fact, the SLAAC logic in pfSense 2.2 *seems to be okay.* If an interface is configured with flawed Ipv6 notation l...
-
- can you send me a pcap containing one of the RAs? Email to me cmb at pfsense.org referencing this ticket # if you don...
-
04:13 AM Bug #4310: Limiters + HA results in hangs on secondary
- Ermal Luçi wrote:
> Patch committed.
Can you post a link to the patch - 04:13 AM Revision 71383901: Do not request prefix delegation if no tracking interfaces are setup to
- use it. Ticket #4436
-
01:01 AM Bug #4428: Setting media option on em(4) leads to infinite link cycling
- It is not. No special functionality (vlan, lagg/lacp, or bridging) is enabled on any interfaces in the system.
-
- Is that interface part of a bridge, or lagg or anything?
-
-
- this can be worse than it might seem at a glance, as if you don't get a PD assignment, it'll keep retrying over and o...
02/16/2015
-
- Submitted pull request: https://github.com/pfsense/pfsense/pull/1495
-
- When interface with DHCPv6 has 'DHCPv6 Prefix Delegation size' set and no interfaces are setup to track it, pfSense g...
-
- Updated subject should be accurate of specific issue. Removing interfaces_use from strongswan.conf makes the problem ...
-
- Found a scenario where this is replicable with PPPoE.
1) setup IPsec bound to a PPPoE WAN, with no keepalive defi... -
- Tested the patch on v2.2. Rules are now appearing in the correct order and DHCPv6 messages are not getting blocked.
... -
- When I load the module, using kldload, I got the following output:
oce0: <Emulex CNA NIC function:///10.0.664.0///... - 05:31 AM Revision e2caaee8: Fixing issues with NTP RRD graph state changes
- - only call enable_rrd_graphing() after $config['ntpd']['statsgraph']
is set
- fix if condition; empty and isset ... -
- I don't think this is done exactly right......
-
- Pull request for fix here: https://github.com/pfsense/pfsense/pull/1478
-
- Note that this is actually matches the behavior of the range checks that services_dhcpv6.php performs: The actual che...
-
- When computing the start IP for the 'available range' field, services_dhcpv6.php attempts to increment a colon-format...
-
- Pull request https://github.com/pfsense/pfsense/pull/1494
-
- When enabling NTP RRD graphs nothing happens first time NTP page is submitted.
Graphs are enabled if page is submi...
02/15/2015
-
11:12 PM Bug #4175: kernel panic when loading run driver for RT3070
- Had time to load stock FreeBSD 10.1 and the wireless interface worked. Also updated to 2.2-RELEASE and still experien...
-
- Pull request for fix: https://github.com/pfsense/pfsense/pull/1476
-
- The auto-generated DHCP6 configuration for tracking interfaces only includes a v6 name server if there are additional...
-
- Pull request for fix: https://github.com/pfsense/pfsense/pull/1477
-
- Net_IPv6::compress produces an empty string when compressing the all-zeros address, rather than the expected output o...
-
- Yes, I'm getting a *single* RA from pfSense to ip6-allnodes which results in a correct IPv6 route in the Ubuntu clien...
-
- This works in general. You're getting RAs, which seem fine at a basic level at least though contents of the RA not sh...
-
- h1. Additional info
h2. Bogons
My *Interfaces: LAN* 'Private networks' section contains _Block private networks... -
- In the last release 2.1.5, stateless address autoconfiguration (SLAAC) was working correctly. After updating to 2.2 m...
-
-
02:12 PM Bug #4431 (Duplicate): Bandwidth not reported correctly in "Status: Traffic shaper: Queues"
- I'm running pfSense version 2.2 on an Alix 2d2 board. The reported bandwidth under the queues status page is incorre...
-
- fixed
-
- I just had this happen again. I have noticed that this appeared again in the logs.
Feb 15 11:57:57 kernel: sonewc... -
08:03 AM Bug #4430 (Closed): pppoe configuration can not be removed from WAN interface.
- When WAN interface is set as pppoe it can not be changed to DHCP or NONE.
First time, the web interface tells to a...
02/14/2015
-
- If the media or mediaopt config option is set, an infinite link cycling loop results since the link cycles when ifcon...
-
06:39 PM Bug #4427 (Resolved): Traffic Shaper Wizard still having issues
- I just upgraded to the latest 2.2 snapshot from Feb 13 in hopes of getting past the already documented traffic shapin...
-
- Thanks for the feedback, I'll close this out.
If you have any ideas on how to simplify the GUI for this to make it... -
06:03 PM Bug #4307: bacula-fd configuration is mangled
- This is fixed for me. Thank you.
-
- fixed
-
- It changes the weird character OS X shows at the end in its system.log, but otherwise unchanged and still wrong. Now ...
-
- I added a tgz of /var/log from a system exhibiting the problem to projects/ticket-files/
-
- I received it, but it may be Tuesday before I have a chance to look at the logs.
-
- I sent you an email yesterday with the logs (9MB). Did you get the email?
-
- I misunderstood JimP's earlier comment, running 'sysctl -a' won't panic it in the way enabling SNMP will.
-
08:20 AM Bug #4403: Enabling SNMP causes kernel panic with APU with empty SD card slot
- Same for me during the upgrade from 2.1.5 (amd64) to 2.2 (amd64) on a APU.1C4 (4 GB).
Retried it successfully with a... -
- I just started to test what combinations of hardware let this crash happen, but the command "systcl -a" is not crashi...
-
06:38 AM pfSense Packages Bug #4415: wrong start script in nrpe2 within 64bit installation
- Since 2.12_4 v2.2_4 this bug is also in i386.
-
01:06 AM Feature #4179: Driver oce is missing from 2.2 RC
- @Matthieu: We copied it over from FreeBSD 10.1 release and added oce_load="YES" to /boot/loader.conf, worked as expec...
02/13/2015
-
- I reported a bug 4425 which I'm thinking might be related to this. Let me know if you need any logs from me.
Sam -
Just wondering if this could be related to Bug 4353.-
- Whats we saw was that 2.2 had no issue bringing up the tunnel but once the tunnels were up they were unstable and if ...
-
10:33 PM Feature #4354: Allow dpinger to ping more than one destination for a gateway.
- This would be an amazing enhancement! My only comment would be if you're going to enhance the engine to support multi...
-
- @Christoph: Can you explain where od you get the file and how exactly do you load it ?
-
09:26 PM pfSense Packages Bug #4426 (Resolved): NUT fails to start or restart until NUT's settings are (re)saved
- Since updating NUT to 2.6.5_1 pkg/2.0.4, I'm finding that NUT won't start on a pfSense reboot. Pressing a "restart s...
- 08:28 PM Revision cc94ea50: Unobsolete libpcre.so.1
- 08:28 PM Revision 3b7f8f83: Unobsolete libpcre.so.1
- 06:27 PM Revision d72e936f: Merge pull request #1484 from phil-davis/more-text-typos
-
- Found this issue in conjunction with user Digdug3
- 06:24 PM Revision 49fa70a2: Merge pull request #1485 from BBcan177/patch-1
-
- Hi, I have the same issue. I tried to update to the latest maintance version, but receive error after upgrade: "shar...
-
- Well, all I can say is that this is definitely not fixed. Tested with 2.2.1-DEVELOPMENT-i386-20150213-1429 snapshot.
... -
- If you have made an archive of the logs you can post them on a site like Google Drive or Dropbox and PM me the URL on...
-
- I just had this happen again after rebooting my box from Bug #4392. How can I email you the logs?
-
- Hi Ryan, my PR for pfBNG *v1.04* was merged. Please let me know if that fixes your issue.
There is a "pfBlockerNG" t... -
-
-
- Since at least one other user confirmed that, filing the bug here - relevant forum thread: https://forum.pfsense.org/...
-
- I just had this happen again..Here is what I'm seeing. The Service status dashboard shows the Daemon is running, but...
- 06:19 AM Revision e2d0aee8: force minimum 100000 byte log file size. Some have been confused thinking this is KB, in some cases causing problems. This should help, and there shouldn't be a need for logs smaller than that.
- 06:17 AM Revision 47d3f94a: force minimum 100000 byte log file size. Some have been confused thinking this is KB, in some cases causing problems. This should help, and there shouldn't be a need for logs smaller than that.
-
- Ok thank you i think i know where the issue is now.
I will update here when the issue is fixed but will need a ker... -
- I pushed a commit since this seems relevant only during parsing time of the options.
Can anyone re-producing this ... -
- the symbol at the end that OS X's logs show doesn't copy/paste, attached screenshot.
-
- If you go to GitHub at https://github.com/pfsense/pfsense and make the edit online there, then submit a pull request,...
-
04:46 AM Bug #4422 (Resolved): /etc/rc.initial doesn't handle -c parameters
- /etc/rc.initial fails to handle parameters passed to it using -c. As a result, SFTP against the internal SSH server f...
-
- The definition of the offset date source in /etc/inc/rrd.inc fails to recognise that offset can be negative, meaning ...
-
03:07 AM pfSense Packages Bug #4419: fatal: open /etc/aliases: No such file or directory
- Update: My Postfix Forwarder version: 2.11.3_2 pkg v.2.4.1.
-
- I get this error in maillog:...
-
- Update: My Postfix Forwarder version: 2.11.3_2 pkg v.2.4.1.
-
- I get this error in maillog:...
-
- Just want to report that I must specify Site Path, Backend Path to '/' instead of leaving blank to use '/' as suggest...
-
02:47 AM Bug #4414: pfsense on amd64 Thinclient Futro S550 // 2.1.5 // 2.2
- Hello Chris,
thanks for your reply
i added a dmesg dump of 2.1.5
I hope you find the bug.
thanks Tom
www_l...
02/12/2015
-
- Found this issue in conjunction with user Digdug3
-
05:13 PM
Bug #3290: IPV6 conectivity not restored after cablemodem reset
- An update... had some maintenance last night... while my LAN prefix appears to have been restored following everythin...
-
04:33 PM Bug #4326: Limiters on firewall rules where NAT applies drop all traffic
- I also increased the limiter to 700Mb, higher than throughput without limiter and it worked without issue, got the no...
-
- Finally able to get around to building a VM lab for this. Here is what I have found.
* Appears to only be an issue... -
- Can you do another test to have full information?
Do the usual breaking test you have reported and show the output... -
- it's more than just a p, it ends up with some weird character after the p as well. I've already dug into this a bit b...
-
- At least 4 reports of this on the forum:
https://forum.pfsense.org/index.php?topic=88631.0
https://forum.pfsense.or... -
-
-
04:11 PM Bug #4131: CP RADIUS accounting not working
- Still having this issue on a machine updated from 2.1.5 to 2.2.
Prior to upgrading, the setup did work, although the... -
03:16 PM pfSense Packages Bug #4417 (Resolved): Ruleset link for GPLv2 Community rules on Categories tab is incorrect
- If you're on the Categories tab and have enabled "GPLv2 Community Rules (VRT certified)", the hyperlink assigned to i...
-
- Pretty simple to reproduce
* Add a layer 7 container, for example, to block bittorrent
* Apply the layer 7 contai... -
- Duplicate of #4276
-
-
- Using a basic test case, Layer 7 is not functional on 2.2:
* Add a layer 7 container, for example, to block bittorre... -
- Great! I'll try it out once it's released.
Thanks -
- hardware-specific problem, replicate on stock FreeBSD 10.1 and report upstream.
-
- This is not a supported platform.
Try booting stock freebsd 10.1 off a USB stick.
Also post the full verbose kernel... -
- dmesg.txt added
-
- Hello@All
on my labs firewalls (Thinclient Futro S550 /amd64/1GB/CF-Card-4G)
--2.1.5 will only boot "headless" ... -
- A patch has been pushed which will fix limiters with ipv6.
-
- After Update to 2.12_4 v2.2_3 service does not start any more.
Log: root: /usr/local/etc/rc.d/nrpe2.sh: WARNING: r... - 10:44 AM Revision a9982b43: Unobsolete crypto tools and athstats, ticket #4239
- 10:44 AM Revision 0a81c3ab: Unobsolete crypto tools and athstats, ticket #4239
-
- Some people have reported that this happens only if prefer oldsa setting is enabled.
-
09:22 AM Bug #4402: Unbound: enable harden-glue by default and/or apply patch
- Thanks for the fixes !
On this topic, Unbound 1.5.2rc1 has just been released, and final may then be ready before... -
- Build was fixed and all binaries removed from obsolete list
- 04:29 AM Revision d4a18f13: Merge branch 'RELENG_2_2' of git.pfmechanics.com:pfsense/pfsense into RELENG_2_2
- 04:28 AM Revision 0f31e918: get rid of wizards/initial/ images that were never used
- 04:28 AM Revision 6972f14e: get rid of wizards/initial/ images that were never used
-
03:06 AM Feature #4413 (Duplicate): Vendor specific option spaces
- It would be nice to have a possibility to specify subject.
-
12:14 AM pfSense Packages Bug #4324: HAproxy and SSL client certificate validation
- I tested the latest version (had an IPv6 connectivity problem with the packages repository), it works as intended.
...
02/11/2015
- 11:00 PM Revision 377b1faa: DHCPv6 client rules MUST come before bogons. Add a comment that hopefully
- sticks out so this stops getting broken. Ticket #3395
- 10:59 PM Revision 274a531a: DHCPv6 client rules MUST come before bogons. Add a comment that hopefully
- sticks out so this stops getting broken. Ticket #3395
-
- @Ryan. Thanks for the Bug report. I haven't seen a Comment line with an IP in it before. The fix for this bug is in m...
-
- We have a list provider that requires our IP be passed as a variable in the query (e.g. http://example.com/list.php?i...
-
-
-
-
-
-
-
- it's only unusable where you need to allow traffic into WAN that's sourced from CGN space. Which in nearly all cases ...
-
07:00 PM pfSense Packages Bug #4412 (Not a Bug): squid reverse proxy
- when I try to activate the squid reverse proxy reports an error and when I modify sysctl returns or null or invalid s...
-
- Indeed. Fixed again, and added a comment that will hopefully prevent this from ever getting broken again.
-
- note the sort is there if you have 1 user only, disappears with > 1. I'm sure Phil's right on that. Moving to 2.2.2 s...
-
-
- Chris Buechler wrote:
> Andreas: could you do some experimentation with your combination of hardware? See if it's th... -
- the only scenario we've been able to replicate is with no SD card installed. It's easily replicable by just removing ...
-
- I don't have an SD card in, but I do have a Mini-PCIe wireless card.
-
- Well the first crash after update from 2.1 to 2.2 was with a sd card as the disk and a mini pcie 3g modem installed.
... -
- ...
-
- does sysctl hw.bus return a result?
-
- I can reproduce it on my APU now as well. Fresh install on mSATA, no SD card inserted, using the factory image.
Seem... -
- not a bug.
source is available here:
https://github.com/pfsense/pfsense -
06:24 AM Bug #4404: Fatal error when enabling IPSec
- Do you have a link to a stock util.inc, so I can compare ?
The file i patched, I need to have several subnets in D... -
- you're missing, or have a broken, /etc/inc/util.inc file. The installer can't forget files (and if anything as critic...
-
- nothing is broken, just have to put things in correctly. added #4411 to add input validation at some point to prevent...
-
- Kill Bill wrote:
>
> The server: clause is not the place for different kind of things, like the stub zone and forw... -
- Can we please append a link to unbound.conf(5) manpage (https://www.unbound.net/documentation/unbound.conf.html) with...
-
- Andreas Pflug wrote:
> Moving the custom option generation as suggested would make any option appear under the serve... -
- Kill Bill wrote:
> What advanced settings? This is just not true in general. Prefix the custom options with server: ... -
- In my case, I need *do-not-query-localhost: no* set.
-
- What advanced settings? This is just not true in general. Prefix the custom options with server: as noted on the bug ...
-
- If you have a patch change that works, it will be very easy for the devs if you make the edit at https://github.com/p...
-
- Same symptom as https://redmine.pfsense.org/issues/4090, but a different reason:
When domain overrides are set, an... -
- Something similar to dnsmasq's advanced config validation would be helpful for Unbound, to prevent users from creatin...
-
- Probably that was because the strongswan setting was not being propagated to the plugin.
Now that strongswan was upd... -
- Copied interfaces.inc and system.inc to my 2.2 box and seems to work alright now..
Without daily snapshots online,... -
- Applied in changeset commit:b65de5585bb7bffe06750c712b399cd4da10052c.
-
- Applied in changeset commit:2de650f6117f4b80c3db4f9b46ad83d75d5b9130.
-
- Ok should be fixed by the commit i pushed.
Can you please confirm as well?
This seems to be a bug since 2.1++ -
- Applied in changeset commit:810b36ac0c363c21ea2f1b963f2c1be142fc59a2.
-
- It behaves correctly with the applied patch.
-
09:46 AM pfSense Packages Bug #4409 (Resolved): Tincd not starting on pfSense 2.2
- Hello,
i had troubles getting tinc daemon to work in 2.2, after some investigation I had to do:
ln -s /usr/loc... - 09:12 AM Revision 01c155f2: Random text typos
- and I "corrected" function names that had "_choosen_" in them.
That is not technically an error - function names do n... - 09:04 AM Revision 302cb96e: Check if notification is disabled
- in send_smtp_message()
Other packages like arpwatch sm.php and cron job output as reported in forum https://forum.pfs... - 09:04 AM Revision 33649526: Merge pull request #1480 from phil-davis/patch-1
- 09:02 AM Revision 1444c08e: Random text typos
- that I noticed.
- 09:01 AM Revision c70002be: Merge pull request #1482 from phil-davis/CP-text-typos
- 09:00 AM Revision 4ab7f8f4: Fix typo in class in bridge edit
- Fixing this makes nice little pencil icons appear in front of the text
entry fields. - 09:00 AM Revision ef8182ca: Merge pull request #1483 from phil-davis/formfld-unknown
- 08:59 AM Revision 079b0e20: Remove unset variable, spotted by phil-davis
- 08:59 AM Revision 5132312f: Remove unset variable, spotted by phil-davis
-
08:34 AM Bug #4408: Changes to DHCP-services crashes GUI and DHCP daemon when many leases are in use
- If I disable DHCP failover everything works perfectly.
-
- I have the DHCP service running on five interfaces and a good amount of leases (I would guess around 1,000 or more at...
- 07:45 AM Revision b3aacd59: rrset-cache-size should == 2 * msg-cache-size. Ticket #4367
-
- I saw that yesterday, thank you!
-
- I pushed a fix for this yesterday. Perl is there but the package couldn't find it. Works for me now in testing.
- 07:43 AM Revision 2597415b: rrset-cache-size should == 2 * msg-cache-size. Ticket #4367
- 07:28 AM Revision 0c6db320: Fix typo in class in bridge edit
- Fixing this makes nice little pencil icons appear in front of the text
entry fields. - 07:14 AM Revision 24cbfd5a: Check if Unbound is enabled and using the same port before allowing dnsmasq to be enabled. part of Ticket #4332
- 07:13 AM Revision 06e847a7: Check if Unbound is enabled and using the same port before allowing dnsmasq to be enabled. part of Ticket #4332
- 07:07 AM Revision f416763b: Random text typos
- that I noticed.
-
- Is there a way to disable xen detection while booting?
I had to remove traffic shaping from my local pfsense and now... -
03:21 AM Bug #4401: remove xen netfront driver until it can handle altq
- xn0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
options=3<RXCSUM,TXCSUM>
ether be:f5:19... -
- Part of this was fixed in the default config yesterday (harden-glue is now enabled by default). We'll also add config...
-
- ath(4) does have ALTQ support, but its cloned interfaces end up unable to use it. ...
-
- still no other reports of this. will leave for feedback for now.
-
- It causes a wide range of problems for people. We've already seen several people report IPsec changes not applying be...
-
- that was apparently an oversight, thanks for catching. It should be fixed with what I just committed, which sets rrse...
-
01:29 AM Bug #4329: OpenVPN Server returns an error message while validating selfsigned certificate with a deep of 2
- ...
-
- Douglas Haber wrote:
> Maybe a hook should be added then in the web UI to say, "hey, Xen detected, please make sure ... -
- setting the MTU before setting the IP doesn't behave any differently. The MTU must be appended to the ifconfig comman...
-
- this is a hardware-specific issue of some sort, not an issue in our code. Judging by Ermal's analysis, ACPI seems lik...
02/10/2015
-
- enough people have reported this that it's clearly an issue in some circumstance. I'm not sure what that circumstance...
-
- Hi Together,
i am not sure if this is a hardware problem, but basically i am using a PC Engines APU.1C(2GB) board ... -
- fixed
-
- fixed
-
- It's best to leave as is, the upgrade and release notes describe how to work around pre-upgrade if necessary, and we'...
-
- The problem i think is that on FreeBSD 10 you have no tunnable to revert to 8.x behaviour.
That is only on HEAD. -
09:07 PM Feature #4405 (In Progress): Traffic shaping doesn't work when applied to a bridge interface
- Having two or more interfaces within a bridge, the traffic shaper doesn't work when applied to it. Traffic is seen on...
-
-
-
-
-
-
-
-
- 05:50 PM Revision 02376f6f: Check if notification is disabled
- in send_smtp_message()
Other packages like arpwatch sm.php and cron job output as reported in forum https://forum.pfs... -
- I have 3 boxes with pfSense 2.2 installed, and on one of them I get a fatal error when enable the checkmark "Enable I...
-
- Ok, reverted a test vm to factory defaults, then configured a simplified setup again it shows the same problem.
Sa... -
- Can you provide your config.xml to have a way to reproduce this normally it should work as expected!
-
- XN driver does not support ALTQ at all though it should not be hard to implement it.
-
- Since 2.2 (freeBSD 10.1) pfsense always detect xen on booting and uses pv(hvm) drivers (xn#).
xn0 is unusable withou... -
- Applied in changeset commit:1ee360aaa9176d3287a7099abd47f95c4464ac23.
-
- Applied in changeset commit:51e76899e66360dc9d8e35f68282c54ccd9a4759.
-
- Applied in changeset commit:22bca296dc3777bb872c7be460f09c3ff1177994.
-
- Applied in changeset commit:ed56ce5a1d12b5a065e2c375a182adc1b2d8f91d.
-
- Ok i pushed the proper fix for this.
Can you confirm it works for you as well? -
- gpioapu corrected to avoid comparison with NULL in strncmp.
-
- Applied in changeset commit:afb388159bc5a55d784404411ef1a7c7d22625a5.
-
- Applied in changeset commit:1ac5261fb0c96764526beb4d9928b9300094ac3e.
-
- I pushed a fix which make it work for me.
Can you please confirm?
Normally it is not necessary to have the mtu on... -
- For me this should be closed.
Setting in feedback for now. -
01:02 PM Feature #3387: process_alias_urltable Frequency
- rc.update_urltables accepts the parameter argv[1], and looks for the option now.
I've put in my crontab... -
11:39 AM Bug #2800: OpenVPN doesn't work properly with intermediate/chained CAs
- Same broken behaviour in 2.2.
Adding the Root CA certificate to the Intermediate CA's certificate in System: Certi... -
10:50 AM pfSense Packages Bug #4281 (Feedback): E-Mail Reports (mailreports package) Error With Multiple Graphs
- Applied in changeset commit:b852b5cd883b3d059bc3744fc7b130531a5f20ed.
-
- I set the log file size low and ran some tests and still couldn't make it crash.
If someone else finds syslogd cra... -
- It looks like this fixed my issue. I had the log size set to 8192 thinking that it was in KB and realized that the f...
-
- DNS poisoning seems to be possible under 2.2 according to https://forum.pfsense.org/index.php?topic=87491.0.
Fix: ... -
- well one way possible would be to set domain overrides in dns resolver but the problem there is the override applies ...
-
- That is not possible. Entries must be resolved accurately to have their addresses placed into a table. There is no wa...
-
- it would be better if aliases allowed to enter a * before domain in order to block all different subdomain ips for a ...
-
- the same instance is not always affected...its 2 of the 3 that have the issue. So I would log into the GUI and notic...
-
- Yeah i have done this for mobile settings and some reports from the forum where the settings were not updated.
I w... -
- It was re-enabled in 2012 in commit:c25197ba, is there anything else still missing?
- 04:34 AM Revision 5ece44f7: touch up Unbound text
- 04:34 AM Revision 74ab379d: touch up Unbound text
- 04:33 AM Revision ccdaaec6: Update Unbound defaults
-
- harden-referral-path - hardcoded to no in unbound.inc ATM; any very good reason for this? (Yeah, I did read the manpa...
- 04:28 AM Revision ef120e87: Update Unbound defaults
-
- And what is this checkbox for in the first column?
You can select multiple users and then delete them with 1 click (... -
02:18 AM Bug #4398 (Resolved): Userlist - No sorting anymore
- The Userlist in pfSense was changed in Version 2.2. Now there is no option sorting the user by name. Before a doublec...
- 12:36 AM Revision fb64f3aa: also add v6 IPs to hosts in the same manner v4 IPs are added. Ticket #4395
- 12:10 AM Revision f7dddc86: also add v6 IPs to hosts in the same manner v4 IPs are added. Ticket #4395
02/09/2015
-
- Where MTU on an interface is user-defined, the ifconfig command that assigns the IP and IPv6 addresses must include t...
-
- this was done in 2.2-RELEASE (can't set that as target since it's closed).
-
- this is excessive in at least some circumstances. The restart flushes the SAD so it will cause at least a brief outag...
- 08:22 PM Revision 3d5e8dce: Use appropriate interface field description when working with floating rules, it was confusing and potentially incorrect for floating rule purposes.
- 08:20 PM Revision 758b51a0: Use appropriate interface field description when working with floating rules, it was confusing and potentially incorrect for floating rule purposes.
-
- it's always just put v4 in there, I added v6 in the same manner if it exists.
-
- ...
-
- the likely reason for this is your squid3 config requiring communication with localhost, and it picking v6 to try to ...
-
- Applied in changeset pfsense-packages:commit:909f0dfd8a1efc99c8392423123fdc0b3d88ffea.
-
- Applied in changeset pfsense-packages:commit:11375fe3e8826e02f7a5bec1f6a2d743060dbd76.
-
- This doesn't seem to be anything specific to our package, but softflowd on FreeBSD 10.x (and likely 9.x) in general. ...
-
12:26 PM Bug #4396: Lengthy unbound outage during restart when adding static DHCP leases
- Update:
Affected version: 2.2 Release -
- When updating static DHCP leases the call to services_unbound_configure on the services_dhcp page causes a full rebui...
-
- In the new >=0.17 package acl's are written before the user custom config, so acl's should be usable.
As for adding ... -
- There is no public 'development' repository to install developing packages from, however the official package reposit...
- 11:22 AM Revision 2b704ea9: Merge pull request #1469 from makkbe/master
-
- I just pushed a fix, there were some path issues in the config and startup script and such.
Seems to work OK here ... -
- When computing the start IP for the 'available range' field,
services_dhcpv6.php attempts to increment a colon-format... -
- The existing implementation of Net_IPv6::compress produces an empty
string when compressing the all-zeros ("::") addr... -
- The existing code only includes a v6 name server IP in the
automatically generated dhcpdv6 configuration for tracking...
02/08/2015
-
- to get that log it has to be 2.2-something, I presume this is 2.2-RELEASE.
-
- is it the same instance that's affected every time?
The log "OpenVPN ID server1 PID 22206 still running, killing"... -
- I have OpenVPN with tunnels between 3 locations. Almost every day Ill look at the dashboard and it will show one on ...
-
- Quick question, what is the proper way to install a development package?
The interface only allows me to install up ... -
- HAproxy currently allows to define ACLs to redirect to specific backends, and to define several frontend -> backend r...
-
- This typically happens when you have a corrupted log file. The first attempted write to said log file will crash sysl...
-
- Sometimes after rebooting syslogd shows that it has crashed. Rebooting usually fixes the issue. Here is what I see i...
-
- I have since done a kill -TERM and then reloaded: /status_services.php?mode=restartservice&service=nrpe2
This star... -
- What's in /var/run/nrpe2.pid ? Is the the current PID? If you killall -9 nrpe2; rm /var/run/nrpe2.pid, and then star...
-
- On pfSense 2.2, I am unable to restart nrpe2
I click through: Status | Services | nrpe2 | restart service.
The ... -
02:00 PM Bug #4390 (Resolved): Cannot create an IP alias on a CARP interface where the actual Interface address is in a different network
- I have configured the WAN IP addresses to be private addresses (i.e. in the 10.0.254.0/30 network) so that I can pres...
-
10:58 AM Bug #4326: Limiters on firewall rules where NAT applies drop all traffic
- Nope! Stays at 0 throughout....
-
- Yes, this yet again got broken.
02/07/2015
-
- I am experiencing this issue with v2.2. Rules look like this:...
-
- gif0 tunnel for ipv6 using a carp-ip to the outside world stops working upon reboots and some config changes
I fou... -
06:04 PM pfSense Packages Bug #4388 (Duplicate): Squid exits when listening on port 800
- Squid 3.4.10_2 pkg 0.2.6 running on 2.2 Release AMD64
After changing the port that the proxy listens on from 3128 to... -
- Could you checkout 0.17 package?(or perhaps 0.18) I've changed the 'none' CA to a separate checkbox which probably ma...
-
- The 2.2 Release AMD64 CD Installer does not provide any choices for keymap, screenmap or video font. Only '(default)'...
-
01:08 PM pfSense Packages Bug #4386 (Closed): softflowd not generating flow data on pfsense 2.2
- I used to run pfsense 2.1 on several machines, all of which sent NetFlow data to a PRTG collector without any problem...
-
- that is by design because of how it's used for registration of static mappings in the DNS Resolver/Forwarder. Allowin...
-
- Uh. No.
http://tools.ietf.org/html/rfc952
http://tools.ietf.org/html/rfc1123#page-13
etc. etc. etc. -
05:56 AM Bug #4385 (Rejected): hostname dots
- 2.2-RELEASE (amd64), built on Thu Jan 22 14:03:54 CST 2015, FreeBSD 10.1-RELEASE-p4
This might seem like a feature... - 04:28 AM Revision 6d5d9658: fix up text
- 04:28 AM Revision 5cb2a425: fix up text
02/06/2015
-
- services_captiveportal.php is missing input validation that allows creating invalid configurations, including ones th...
-
05:12 PM pfSense Packages Bug #3344: Disable IPV6 Squid3 not run
- Gilmar Cabral You are right man, your post helped me today means after one year you posted it...
i have been in thi... -
- Example: https://forum.pfsense.org/index.php?topic=88029.msg486945#msg486945
02/05/2015
- 09:09 PM Revision e4610d66: remove CGN from "Block private networks" as it was in 2.0x and earlier
- releases since it specifically notes RFC 1918 and CGN is more bogon.
Ticket #4379 - 07:47 PM Revision 2dfe7846: remove CGN from "Block private networks" as it was in 2.0x and earlier
- releases since it specifically notes RFC 1918 and CGN is more bogon.
Ticket #4379 -
-
-
- Yes, of course. I think we don't understand each other. I can trivially create a RFC1918 alias and place that rule wh...
-
- Bogons and block private only applies to traffic sourced on the WAN in question. Where you're on CGN, you pretty much...
-
- I'm not using either of these, so I pretty much don't care either way, but... fixing the description and nuking this ...
-
- since block private specifically says RFC 1918, it's more valid as bogon than private, I removed it from private.
-
- No need to filter this in both places, this is really the same thing like RFC1918 ranges.
Forum thread: https://fo... - 02:52 PM Revision 20078775: Merge pull request #1458 from xbipin/patch-4
-
- As requested at Bug #4380 - currently there's no way to track the status of syslogd service and/or start/stop/restart...
-
- Not a bug per se but a feature request. You can submit a feature request to add syslogd as a service under Status > S...
-
- Yes, so it's not a problem with the package, but with the base system. Should I file the bug about the same thing und...
-
- It was rejected because it's not the purpose of this package to track the services itself. The services are defined b...
-
- Kinda don't get why is this rejected. (Oh, and please, don't get me started with "delete the logs", not interested in...
-
- It uses the service list provided by the firewall. Same as Status > Services. Adding a service just to the package wo...
-
- No idea why it's not there. Certainly would be nice to have it when things go wrong, such as Bug #4352 or https://for...
-
- Applied in changeset commit:bb8a30c23b04d8332e8d4fccf15ed91d950cda2b.
-
- Applied in changeset commit:8b4c7ed15cdde2e49cfce5f96990ba1dbb2a9fd0.
-
- Update:
The rule is there but broken, pointing to the wrong port numbers, for example:
/tmp/rules.debug has:
<... -
- pfSense 2.1.x had an automatic captive portal pass rule to allow users to reach the portal daemon, this automatic rul...
-
01:14 PM Bug #4341: strongSwan fails to re-attach dynamic IPs where interfaces_use specified
- Same issue using a DHCP wan with Kabeldeutschland Cable ISP using a dynamic IP and the other node using a PPP wan wit...
-
- Same issue one Box using a PPP wan with O2/Alice ISP using a dynamic IP and other Box using DHCP with Kabeldeutschlan...
- 10:10 AM Revision ec1d66cc: Use web-gui setting for pap or chap instead of having it hard-coded to chap.
- 10:10 AM Revision 42c57d69: Merge pull request #1472 from bassebaba/master
- 09:48 AM Revision 8f637a0c: Merge pull request #1455 from xbipin/patch-2
- 09:41 AM Revision d06f9ebe: Use web-gui setting for pap or chap instead of having it hard-coded to chap.
-
- remove empty values
-
08:59 AM Bug #3997: get_interface_ip() returns first IP on interface, not necessarily primary IP
- Oh, and bridges and gateway config: https://gist.github.com/MikeN123/22d50fa3d37834b9659a
-
- Interfaces config, slightly censored: https://gist.github.com/MikeN123/009bc5fb76347663e448
Virtual IP config, sli... -
- Can you share your interfaces config or all of it so i can replicate that?
-
- 2.1.5 and 2.2.0. After reboot the VIP becomes the primary IP, and all outbound traffic and firewall rules referencing...
-
- On which scenario and which version this happens?
-
- Just FYI, I have a bridge interface with x.x.x.106 as primary IP, and an IP alias x.x.x.105. This fails consistently,...
-
- Where you have dial on demand enabled on PPPoE, and have multiple PPPoE connections, saving on interfaces.php after m...
-
07:51 AM Bug #4377 (Rejected): pfSense boot freezes after restart in QEMU/KVM
- pfSense virtual machine freezes after reboot at
@usbus0: 12Mbps Full Speed USB v1.0@
qemu proc contains :
@-... -
06:29 AM pfSense Packages Bug #4376 (Closed): Squid3 Squidguard3 Stability Problems
- Hi
Pfsense.2.2 also squid3 3 the stability and squidGuard3 squidGuard3 is experiencing problems, especially after 3... -
- upgrade config code so old entries not lost during upgrade
-
04:47 AM Revision e5e3216e: Add RTMP to the Traffic Shaper
-
03:53 AM Bug #4375: Kernel Crash
- So solution is disable acpi in bios ? or what we can do.
-
- I think this is because of acpi being enabled by default now.
-
- Jetway Mini ITX NF9D 2550 Board
-
- Upgrading 2.1.5 or new install same crash.
-
- Also this issue on redmine https://wiki.strongswan.org/issues/431 recommends reauth = no for IKEv2 for IKEv1 not sure...
-
- Also looking at this thread http://comments.gmane.org/gmane.network.vpn.strongswan.user/2055
It can be a solution to... -
- Does net.inet.ip.dummynet.io_pkt_drop increase during this time?
-
12:43 AM Feature #4374 (New): Add timestamps to notification e-mails
- It would sometimes be useful to have timestamps in the body of the e-mail itself. E-Mail transmission is not always r...
-
- Ah, my bad. I got used to original pfBlocker and it's behavior ... didn't expected it to change. Thanks for clarifica...
02/04/2015
-
06:23 PM Revision cdcf197b: Fixed not being able to save custom and custom-v6 dyndns
- entries due to "host" being posted empty, and thus failing
is_domain() check. - 06:23 PM Revision 68f7662b: Merge pull request #1466 from tuyan/master
- 06:22 PM Revision a912dd7d: Firmware upgrade script text changes
- while I am looking at this, might as well correct these.
No function problems or impact. - 06:22 PM Revision 13685ab5: Merge pull request #1470 from phil-davis/patch-1
-
06:07 PM
Bug #4149: Register DHCP leases in DNS forwarder broken
- Now on 2.2, the bug is still present:
Feb 4 20:40:44 dhcpd: Unable to add forward map from linehead.ozone.caligrafi... -
-
-
-
-
- This is not a bug.
The text beside the pfBlockerNG Enable Checkbox in the General Tab, is as follows
*"Note - w... -
- After upgrading 1.01 to 1.02 I've lost all IPv4 tab aliases.
-
10:27 AM Bug #4344: package (re)installation loop after upgrading from 2.1.5-RELEASE to 2.2-RELEASE
- *FYI*
there's another package that was reported as unable to be 100% reinstalled after the upgrade procedure from 2.... -
- Vinícius Zavam wrote:
> *Piba-NL*'s (##pfsense@freenode) pointed out that would be nice to try this procedures:
> *... - 10:14 AM Revision 1f97f379: In last case, use dmesg.boot do detect ALIX boards when hw.model is not enough
- 10:14 AM Revision 6d043a1d: In last case, use dmesg.boot do detect ALIX boards when hw.model is not enough
-
- I can verify that turning off reply-to doesn't seem to make a difference, here:
The rule:... - 09:43 AM Revision 0fcf26e4: Silent kenv when smbios.system.product is not present. While here, add VirtualBox to the list of virtualenvs
- 09:43 AM Revision 7e36f71c: Silent kenv when smbios.system.product is not present. While here, add VirtualBox to the list of virtualenvs
-
- Applied in changeset commit:68716545c5fde880d7a22cd9b13b901d01ccb561.
-
- Applied in changeset commit:322cc0188107e8b8ca912511915e71334fe4089b.
-
- Thank you for the persistence.
Merged a better/modified version of the fix suggested here. - 02:18 AM Revision 695b6d08: Firmware upgrade script text changes
- while I am looking at this, might as well correct these.
No function problems or impact.
02/03/2015
-
- I haven't had a chance to get back to testing this scenario yet, but will soon. Seems like it may not be specific to ...
-
- Have we confirmed if having reply-to enabled or disabled affects if the limiter works correctly? As well, what about...
-
- thanks for the confirmation Paul, and Jim and Bryce for fixing. Others have confirmed fixed as well.
-
- Tested on v2.2 amd64 full install.
Removed existing version, made sure nothing but settings are left behind and in... -
- Update the package and try again, I pushed some fixes earlier today. It works for me in testing here.
-
- It'd be nice to have dnscrypt support built-in so people don't need hacks like
https://docs.google.com/document/d/1B... -
- We had to drop suhosin when moving to PHP 5.4 as it wasn't compatible at the time and its development had stalled. Th...
- 07:25 PM Revision f8b5f41d: Merge remote-tracking branch 'upstream/master'
- 07:21 PM Revision 68fde79c: Fixed alignment issue.
- 07:17 PM Revision 197cf433: Added DynDNS support for GleSYS API (www.glesys.com).
- 06:54 PM Revision 98b3de78: fix responder-only IPsec text
- 06:54 PM Revision d7f4c1a4: fix responder-only IPsec text
-
- Patch committed.
-
- ntpd does nothing with selected carp interfaces.
When only carp ip's are selected for ntpd to listen on the config '... -
- *Piba-NL*'s (##pfsense@freenode) pointed out that would be nice to try this procedures:
* clear installation's lock;... -
08:14 AM
pfSense Packages
Bug #4369 (Resolved): patch fetching doesn't work if pfsense is behind proxy
- Hello,
while i was testing a patch (Bug #4238) i noted that the fetch doesn't work.
Issuing a packet caputure while... -
07:25 AM Feature #809: Config sync username change
- The bug is still here in version 2.2 64bit.
The "Remote System Username" field into Firewall->Virtual IP->CARP Set... - 03:32 AM Revision adf17d4f: fix text
- 03:32 AM Revision e829fcbb: fix text
-
- ...
-
- Just reporting another little very minor thing, I am testing the latest version for which you added ACL negation and ...
02/02/2015
-
- unbound.conf is generated by back-end code in /etc/inc/unbound.inc
Search for rrset_cache_size and rrset-cache-siz... -
04:43 PM Bug #4367 (Resolved): Incorrect rrset-cache-size in unbound.conf
- In /usr/local/www/services_unbound_advanced.php is missing code responsible for setting correct value for rrset-cache...
-
-
-
- No, I haven't. In my production settings, I am only using "ssl_c_used" since I can guarantee for sure we are in a TLS...
-
- Thanks for reporting this, my suspicion is that 'ssl_c_used ssl_c_verify 0' would be enough for all cases.
Have yo... - 05:28 PM Revision 4520b2d2: Fix aliases popup width when fields are hidden when page is loaded. It should fix #4238
- 05:28 PM Revision 6672609b: Fix aliases popup width when fields are hidden when page is loaded. It should fix #4238
-
-
-
- Formatting removed the {@} symbol
{@}.sub.domain.com -
- The domain in question is in the format
sub.domain.com
I need to update the @ record for this domain.
So, it's b... -
- entries due to "host" being posted empty, and thus failing
is_domain() check. - 01:19 PM Revision 315d866c: Merge remote-tracking branch 'origin/master'
-
11:37 AM Bug #4365 (Resolved): ALTQ Traffic Shaping is not working in pfSense 2.2 when run on Hyper-V 2012 R2
- Using pfSense 2.2 release on Hyper-V 2.2 with regular network adapters (not legacy adapters), HFSC queues can be set ...
-
- Applied in changeset commit:4520b2d2b70caa48813f73f89ef5b9c942ea5b25.
-
- Applied in changeset commit:6672609b90a8e60a13ca471a3ad3e054eca542bd.
-
- fix indent
-
- Let me double check this issue again.
-
05:11 AM Bug #3669: WAN IPs not being cached causing unnecessary "rc.start_packages: Restarting/Starting all packages"
- Whilst this ticket has been marked resolved, the second part of the fix relating to /etc/rc.newwanipv6 has never been...
-
-
- 07:56 AM Revision b82159a6: Unbound domain override IP:port validation
- The domain override is IP:port is invalid if either the IP address OR port is invalid.
Previously you could put an in... - 07:56 AM Revision e67c5bee: Merge pull request #1457 from phil-davis/patch-2
-
- 07:55 AM Revision 2b8353ba: Merge pull request #1459 from PiBa-NL/speedup_is_port
- 07:54 AM Revision 87549136: Remove latin-1 encoding of RSS feed
- Many thanks to Gertjan in forum https://forum.pfsense.org/index.php?topic=87504.msg484017#msg484017
Specifically sett... - 07:54 AM Revision b2b1822b: Merge pull request #1465 from phil-davis/patch-1
-
- No keymap file is present on pfsense 2.2 64bit so, when installing : no keymap selection is available.
After havin... -
-
- This is fixed with rev. 87549136 / rev. 8820a3aa close please.
-
03:55 AM Bug #4274: Marking a packet with only a number results in a broken rule
- Just wanted to say I've verified this works. Thanks so much for the quick response.
- 02:40 AM Revision 8820a3aa: Remove latin-1 encoding of RSS feed
- Many thanks to Gertjan in forum https://forum.pfsense.org/index.php?topic=87504.msg484017#msg484017
Specifically sett...
Also available in: Atom