Activity
From 04/12/2015 to 05/11/2015
05/11/2015
-
09:52 PM Bug #4696: OpenVPN Status / Client List
- Hi,
I admit, not sure ... ;). The issue is that Load Balancer is showing an incorrect status for OpenVPN, when I a... -
01:24 PM Bug #4696 (Feedback): OpenVPN Status / Client List
- what does load balancer have to do with your OpenVPN?
-
- NP, will dig into it further. Unfortunately it has been working fine for 6-8 months, only stopped working when I upgr...
-
- there are no such general issues, this is a config or testing methodology issue. please use one of our support resour...
-
- this was fixed in strongswan 5.3.0
-
- I suspect this is probably fixed in 2.2x versions because of FreeBSD 10.1 base. Anyone who was seeing this able to co...
-
- I suspect this isn't an issue with strongswan in the way it was with racoon. Also not concerned with PPTP anything at...
-
- the linked thread in Vasyl's comment has the solution on 8.1, and 10.x doesn't appear to have same issue.
-
- all the settings are specific to the service on whose page you're configuring them, and they can operate independentl...
-
- FTP helper in question no longer exists.
- 08:21 PM Revision 922bf65c: interfaces_lagg_edit Conversion complete
- Ready for review
-
-
- 07:22 PM Revision 13393817: interfaces_gre_edit.php Conversion complete
- Ready for review
- 07:13 PM Revision c1c09523: Corrected input name
- 07:03 PM Revision 2686a780: interfces_gif_edit.php Conversion complete
- Ready for review
- 04:43 PM Revision c8f7068d: Merge pull request #1648 from phil-davis/floating-tab
- 04:12 PM Revision 0c469044: Handle extra column on floating rules tab
- when there are no floating rules to display.
The box needs to span 11 columns. - 03:43 PM Revision a9741c0c: Merge pull request #1646 from phil-davis/firewall-rules
-
03:34 PM Bug #4685: Crash/panic "Sleeping thread owns a non-sleepable lock"
- Reports from customers indicate that crashes still occur even with net.bpf.zerocopy_enable=0
and net.isr.dispatch=de... - 03:23 PM Revision 7a2cb2f2: Merge with master
- 02:57 PM Revision fa61d033: Merge pull request #1647 from phil-davis/firewall-shaper
- 02:49 PM Revision 6aaec445: Code style firewall shaper
- 02:36 PM Revision 7bf0ce52: fixed indent according to the style guide.
- 02:36 PM Revision 32749275: Currently pfsense enforces unique unqualified hostnames for static dhcp leases, which is not correct as only the fully qualified hostname (hostname + domainname) must be unique. With this commit the old validation logic for uniqeness is modified such that hostnames no longer need to be unique and at the same time the fully qualified hostname hast to be unique.
- This change makes it possible to have host with identical hostnames in different (sub)domains. For example myhost.sal...
- 02:36 PM Revision 8efea69a: Merge pull request #1637 from alex-berger/dhcp-staticleases-unique-check
-
- the squid users mailing list is probably your best bet to start.
- 01:16 PM Revision 250f6436: Merge pull request #1616 from Robert-Nelson/floating-interfaces
- 01:10 PM Revision 603d3c16: Code style Firewall Rules
-
- the built-in load balancer relayd doesn't have that ability. haproxy is available for those who need it.
-
-
12:51 PM Bug #4686: Rekeyed SAs are not properly removed
- The many phase 2 entries might be a result of: https://wiki.strongswan.org/issues/951
-
- thanks for confirming.
- 12:40 PM Revision efd081de: Merge pull request #1645 from phil-davis/wizard
- 12:39 PM Revision a4042967: Merge pull request #1644 from phil-davis/firewall-virtual-ip
- 12:38 PM Revision 2fa098a0: Merge pull request #1643 from phil-davis/firewall-schedule
- 12:36 PM Revision 3be6106f: Merge pull request #1642 from phil-davis/firewall-nat
- 12:34 PM Revision 58c8900e: Merge pull request #1641 from phil-davis/firewall-aliases
- 12:33 PM Revision 1c0b7c8a: Merge pull request #1640 from phil-davis/patch-2
- 12:31 PM Revision 55395a83: Firewall Rules Edit missing slash
- This should be the end of a "tr" here.
Browsers seem to be forgiving of this stuff - I don't see any difference in re... - 12:31 PM Revision 047c8758: Merge pull request #1639 from phil-davis/patch-1
- 12:09 PM Revision c00152f3: diag_ipsec_leases.php Conversion complete
- Ready for review
- 12:03 PM Revision ae36a9e5: diag_ipsec_spd conversion complete
- Ready for review
-
- Reported by Nicholas Starke:
> I found an XSS vulnerability in PFSense 2.2.2. Here are my notes on the vuln:
>
... - 08:37 AM Revision f566451e: Code style Wizard
- 06:43 AM Revision 760b1df9: Code style Firewall VIP
- 06:32 AM Revision a4edef21: fixed indent according to the style guide.
- 06:27 AM Revision bedc00c8: Code style Firewall Schedule
- 06:21 AM Revision 37ba954d: Code style Firewall NAT
- 06:07 AM Revision 95a40ac0: Code style firewall_aliases
- 03:22 AM Revision accb5756: Minor changes to firewall_shaper_layer7
- The tabbing of this code is not so good, so it is difficult to see what is going on. I will format that in a later pu...
-
03:17 AM pfSense Packages Bug #4304: pfflowd non-functional on 2.2.x versions
- Hello
as advised in the forum : https://forum.pfsense.org/index.php?topic=88441.0
I have uninstalled pfflowd pac...
05/10/2015
-
07:29 PM Bug #4592: FreeBSD 10.1-RELEASE-p6 signal handling problems with squid (FreeBSD bug 195802)
- Just did a firmware update to the latest 2.2.3 snapshot and shutdown works. Looking forward to the full 2.2.3 release.
-
06:09 PM Bug #4431: Bandwidth not reported correctly in "Status: Traffic shaper: Queues"
- I'm seeing this also. Screenshot attached. I'm running 2.2.2
-
- Hi,
It would be handy to be able to Load Balance by hostname, not only by hard-coded IP Address.
Thanks! -
- Hi,
More info at the attached link, but basically - when OpenVPN is up and running, if I am connected to it Load B... -
- Hi,
More details at the attached link, but basically ... in v2.2.2 I can't seem to get traffic from OpenVPN (TAP c... -
- Hi,
I have been struggling to figure this out (and no luck so far) ... but in v2.2.2 I seem to be having issues wi... - 04:41 PM Revision e9a88707: Firewall Rules Edit missing slash
- This should be the end of a "tr" here.
Browsers seem to be forgiving of this stuff - I don't see any difference in re... - 11:59 AM Revision 69f65caf: Merge https://github.com/SjonHortensius/pfsense into bootstrap
- 11:41 AM Revision 38e06c66: Support new Form('text') too, convert existing custom buttons
- + fix html @system_firmware
- 11:40 AM Revision 6135e79f: Convert diag_dump_states_sources
- 10:56 AM Revision 9f10fa7b: PROGRESS.md updated, removed windows enters from script
- 10:49 AM Revision 256f418c: Minor tweaks, hellip in interf_gif, typo in rss.widget
- plus rewrote traffic_graphs.widget to new format
- 10:32 AM Revision 3fadcdfe: Merge pull request #191 from Bouwdie/services_dhcpv6_relay
- Converted services_dhcpv6_relay
- 10:30 AM Revision 31f048d4: Merge pull request #190 from Bouwdie/services_dhcp_relay
- Re-introduced incidentally removed interface filter.
- 10:29 AM Revision e49ce81d: Added panel-body
- The ...
- 10:29 AM Revision ea02edef: diag_logs.vpn.php Conversion complete
- Ready for review.
In guiconfig.inc dump_clog_no_tables() now returns the number of log
lines printed allowing for an...
05/09/2015
- 01:31 PM Revision dbf6bf9f: Re-introduced incidentally removed interface filter.
- 01:26 PM Revision 5caa70ec: Revert "Re-introduced incidentally removed interface filter."
- This reverts commit e3d953d5f4eac06672d1331c6ff9fe88f88a3c51.
- 01:19 PM Revision e3d953d5: Re-introduced incidentally removed interface filter.
- 01:13 PM Revision bb466f49: Copied util functions from services_dhcp_relay.php.
- Migrated to form class.
- 01:00 PM Revision f0a108f2: Append button to control group instead of control label
- Refs. #142
- 12:35 PM Revision 916a2d71: Clean.sh
- 12:15 PM Revision ead9fa43: Merge https://github.com/SjonHortensius/pfsense into bootstrap
- 12:01 PM Revision 52d7947c: Implemented new MultiCheckbox feature, refs #142
- 11:58 AM Revision 85033097: Form - introduce MultiCheckbox(+Group) #142
- 11:38 AM Revision d390bbf7: Minor edits per SH
- Thanks!
- 11:32 AM Revision 458a6879: Minor edits as suggested
- Thanks
- 10:42 AM Revision b148c54a: Make consistent #183
- 10:40 AM Revision 1332ace6: interface_gre.php Conversion complete
- Ready for review
- 10:37 AM Revision 5ff01d01: Oops, move NAV to correct location #184
- 10:36 AM Revision c8610c74: Make consistent #182
- 10:33 AM Revision 6a2a3416: interface_gif.php Conversion complete
- Ready for review
- 10:31 AM Revision 719da9a2: fixed typo, correct $tab_array in interfaces_groups.php #184
- 10:30 AM Revision e41d7a1c: cleanup interfaces_groups.php
- 10:26 AM Revision 2ec0d736: interfaces_groups.php Conversion complete
- Page updated for compatibility with the other interface_* pages
- 10:21 AM Revision 174722ac: diag_patterns.pgp Conversion complete
- Ready for review.
Note: The “Browse” button has some alignment issues that should be
addressed. - 10:09 AM Revision 0074384f: guiconfig.inc updated
- dump_clog_no_table() now returns the number of log lines printed so
that the caller can display a message if there we... - 09:59 AM Revision f849a29f: diag_logs_filter_dynamic.php conversion complete
- Ready for review
Table can be popularized both on initial load and at timed intervals,
hence the button needed to be... - 09:44 AM Revision cb77470a: Put something usefull in placeholder for Filter expression
- 09:40 AM Revision f2731e42: Merge pull request #172 from sbeaver-netgate/diag_logs_filter_summary
- Convert diag_logs_filter_summary
- 09:33 AM Revision fe0d6189: Merge pull request #165 from Bouwdie/services_dhcp_relay
- Covnert services_dhcp_relay + bugfix in IpAddress
- 09:31 AM Revision 1c306cd0: If a btn-danger has a title, use that instead of generic for confirm()
- 09:30 AM Revision 6717d1fc: simplify xhr delete button
- 09:12 AM Revision 645086f8: Merge pull request #155 from sbeaver-netgate/diag_dump_states
- Convert diag_dump_states.php
- 08:48 AM Revision cbda5c13: Merge pull request #162 from sbeaver-netgate/system_hasync
- Converted system_hasync
- 08:34 AM Revision 0ea606c9: Merge pull request #151 from sbeaver-netgate/status_rrd_graph_settings
- Converted status_rrd_graph_settings.php
-
08:28 AM Bug #4693: php warning when applying changes after change Resolver service|Access List
- This was already reported at least 3 times and fixed almost 1 month ago...
https://redmine.pfsense.org/projects/pf... -
06:54 AM Bug #4693: php warning when applying changes after change Resolver service|Access List
- Note the difference betwwen $sysdnsserver and $sys_dnsserver*s*
-
- php warning when applying changes after change Resolver service|Access List
The php warning is:
"Warning: in_ar... -
05:32 AM
pfSense Packages
Bug #4690: Squid cache needs to be flushed periodically or package managers on LAN clients wont work
- Chris, thanks for the response. YOu suggest to follow up with the responsible parties (I assume squid's devs) but d...
05/08/2015
-
- this is a configuration that never should have worked, would have never worked reliably in a variety of possible fail...
-
- this is almost certainly a problem within squid itself, or a problem on the servers in question, none of which we hav...
-
01:41 PM
pfSense Packages
Bug #4690 (Rejected): Squid cache needs to be flushed periodically or package managers on LAN clients wont work
- I have experienced the same issue about 6 months ago when after having installed squid+SG I noticed that package mana...
- 08:43 PM Revision 801cbbf7: Unmatched td in firewall_nat
- This file seems to have an unmatched "td" ending. Adding the line here matches the "td" at line 320 and this embraces...
-
08:43 PM Revision ca9a4e2b: Call clear_subsystem_dirty('staticmaps') if using Unbound
- 08:43 PM Revision d0c28e66: Merge pull request #1635 from Robert-Nelson/staticmap-bug
- 08:40 PM Revision 897a4c6b: Merge pull request #1636 from phil-davis/patch-1
-
07:50 PM Bug #4692: CODELQ scheduler defaults to incorrect "target" and "interval" values.
- My apologies if this patch is incorrect or causes a fire. I figured I would try. It modifies pfsense-tools/patches/st...
-
- Perhaps it is obvious, but it looks like the calls to "@codel_alloc(100, 5, 0);@" in one/all of the "altq_codel.diff"...
-
- If I setup CODELQ as my WAN's queue scheduler, when I run "@pfctl -vsq | grep -i codel@" the returned string is "@alt...
- 07:25 PM Revision fa6cb13a: Remove 'form-control' class from file inputs
- Refs. #180
- 04:18 PM Revision 3ba1e728: Keep verify_all_package_servers() and check_package_server_ssl() around until GUI is finished
- 04:17 PM Revision e6b4c39d: Fix syntax
-
- 03:47 PM Revision 5b275f2d: xmlrpc is not being used anymore
- 03:46 PM Revision 481aa701: diag_logs_filter_summary improved per SH
- Thanks for the suggestion. Can’t believe I didn’t see that :(
- 03:42 PM Revision e0d24d88: Keep get_pkg_id() around since a couple of packages are using them
- 03:27 PM Revision b7e9afc0: Escape entire command to avoid breaking parameters
- 03:26 PM Revision dfa9759a: ASSUME_ALWAYS_YES is boolean
- 03:23 PM Revision 7a643e58: Merge https://github.com/SjonHortensius/pfsense into bootstrap
- 03:03 PM Revision d78c4a27: Install regular git-lite package
- 01:58 PM Revision 50ec85d6: Merge pull request #161 from sbeaver-netgate/diag_logs
- diag_logs - Added warning for DHCP
-
- Exact cause yet unknown, but a panic can be triggered with the above condition. It appears to be a "FreeBSD bug":http...
-
08:27 AM Bug #4103: Xen xn NICs can't tag VLANs
- Hello Chris,
I've read many reports about this issue and this one is the best by far. But I still think the proble... -
06:06 AM Feature #4688 (New): Missing TFC Traffic Flow Confidentiality support
- Got a IPSEC IKEv2 Tunnel up and running where a linux client connects to the pfsense 2.2.2 server. When connecting i ...
-
05:07 AM Bug #4686: Rekeyed SAs are not properly removed
- Yeh, you might be right. I will leave it for more knowledgeable persons to comment further.
-
- From the looks of it this should only affect connections with multiple P2 entries defined, no? I am having a single s...
-
03:55 AM Bug #2762: PF drops IPv6 packets with fragment header followed by a last fragment only
- What is the time frame for fixing this? I was hit by this bug now by adding dnssec NSEC3 to my DNS which enlarged th...
05/07/2015
-
10:05 PM pfSense Packages Feature #4687 (Duplicate): OpenVPN Client Export - Use the VPN description when producing the exported file (instead of host-proto-port combination)
- I found the default <hostname>-<protocol>-<port>-<user/certname> combination a bit unfriendly for my users, so I adde...
-
- There are some changes coming for 2.2.3 like https://github.com/pfsense/pfsense/commit/afd0c1f2c9c46eaa8e496e98bea8a8...
-
- I am getting weird behaviour on some IPSec connections since 2.2.2. It looks as if CHILD_SA are not cleaned up which ...
- 06:22 PM Revision 5f3a0fc3: Drop verify_all_package_servers() verify_package_server() check_package_server_ssl() package_server_ssl_failure_message() and package_server_mismatch_message()
- 06:21 PM Revision fa0a84cd: Drop pkg_fetch_config_file() and pkg_fetch_additional_files()
- 06:16 PM Revision 84d0ea1c: Remove package_skip_tests(), it won't be necessary anymore with pkg
- 06:15 PM Revision 3c4392ee: Add a note to implement pkg_reinstall_all later
- 06:11 PM Revision eb9cc943: Make rc.packages ready to deal with pkg install/deinstall scripts calls
- 06:10 PM Revision 3bb7e3e8: Rework delete_package_xml() for pkg migration
- 06:07 PM Revision 8af4dd4c: Fix delete_package for pkg
- 06:04 PM Revision 801fcf24: Modify install_package and install_package_xml to work with new pkg flow
- 04:37 PM Revision 4d4e9b06: Fix git path and use pkg_install() to install it on gitsync
- 04:37 PM Revision 7379d80f: Implement pkg_install()
- 04:28 PM Revision d69bbc8b: Remove unused function get_pbi_binaries()
- 04:27 PM Revision 57a608c5: Remove unused function pkg_fetch_recursive()
- 04:27 PM Revision 04dd9b04: Do not try to install package since it's already installed at this point
- 04:24 PM Revision d1a8f050: Adjust uninstall_package() for pkg
- 04:17 PM Revision 82917ea2: Remove unnecessary function get_pkg_depends()
- 04:16 PM Revision a0d4336f: Rework sync_package, remove unused parameters, remove sync_depends, sanitize returns
- 04:07 PM Revision eafe02a2: Remove global variables declared but not used
- 03:51 PM Revision a4f585c0: Return a blank array on get_pkg_info for now, will be implemented later when I touch GUI
-
- I've add PR # 1638 to fix this issue.
- 03:08 PM Revision 78c61a75: Remove unused function expand_to_bytes() get_pkg_db() and get_pkg_interfaces_select_source()
- 03:08 PM Revision b27c5cbf: Use 'interfaces_selection' type to miniupnp fields
- 03:03 PM Revision 22b88bc4: Currently pfsense enforces unique unqualified hostnames for static dhcp leases, which is not correct as only the fully qualified hostname (hostname + domainname) must be unique. With this commit the old validation logic for uniqeness is modified such that hostnames no longer need to be unique and at the same time the fully qualified hostname hast to be unique.
- This change makes it possible to have host with identical hostnames in different (sub)domains. For example myhost.sal...
- 02:53 PM Revision 79b0035d: Remove unused function does_package_depend()
- 02:52 PM Revision 106574d1: Remove unecessary function force_remove_package()
- 02:50 PM Revision 24fa00fc: Drop is_freebsd_pkg_installed() in favour of is_pkg_installed()
- 02:48 PM Revision 97c88dfa: Remove unused function walk_depends()
- 02:48 PM Revision ae786f03: Remove unused function squash_from_bytes()
- 02:47 PM Revision 45cd5fcd: Remove unused functions get_pkg_sizes() and get_package_install_size()
- 02:02 PM Revision af5d93f6: Rename get_pkg_id() to get_package_id() and get_pkg_internal_name() to get_package_internal_name(). Try to use more standard parameter names and simplify logic while here
- 01:53 PM Revision c2eb2508: Rename remove_freebsd_package() to pkg_delete() and introduce pkg_remove_prefix() pkg_call() and is_pkg_installed()
-
- Several reported similar panics have been happening to users. There appears to be an issue with BPF/ARP resolution at...
- 01:33 PM Revision d2caff9b: Cleanup old and unecessary directory creation
- 01:27 PM Revision 8341eb47: Remove unused function add_text_to_file()
- 01:26 PM Revision ffa04fc2: Remove use of obsolete packages tag 'modify_system'
- 01:20 PM Revision 7d11138e: Merge pull request #150 from sbeaver-netgate/diag_pkglogs.php
- Converted diag_pkglogs.php
- 01:02 PM Revision fdae0912: Pass correct package name to add_package_tabs()
- 01:01 PM Revision 253b37d8: Read tab information from package xml file instead of config.xml
- 12:58 PM Revision 0bd239d9: Define pkg_prefix global var
- 12:00 PM Revision 3e19c704: Display inner tabs as tabs
- 11:20 AM Revision f18fa98d: Unmatched td in firewall_nat
- This file seems to have an unmatched "td" ending. Adding the line here matches the "td" at line 320 and this embraces...
-
09:55 AM pfSense Packages Bug #4684 (Resolved): WebGUI: siproxd disabled in menu but still running as service
- Just found a little bug in the siproxd package:
The start situation is: pfSense 2.2.2 (32bit), package siproxd 1.0... -
- In pfSense 2.2.2 strongswan runs with version 5.3.0 and it looks like it supports elliptic curves in the dh-group:
... - 06:41 AM Revision 135ad35b: - Fixed indenting
- - Fixed matching closing tags
- Moved action buttons to separate <nav>
Refs. #22
05/06/2015
- 10:14 PM Revision 25955c6e: Removed unneeded var
- 10:00 PM Revision f2fd5978: Converted img to btn-xs button
- 09:09 PM Revision 46d1a381: diag_logs_filter_summary conversion complete
- Ready for review
The previous charing system is not compatible with JQuery (because it
makes use of its own $() macr... - 08:09 PM Revision 9a9c8e25: Make save button for widget configuration better visible
- Refs. #48
- 03:06 PM Revision 9ca6cf48: Merge https://github.com/SjonHortensius/pfsense into bootstrap
- 07:44 AM Revision e14400b2: Revert button>input so we can keep using $name
- refs #101
-
07:30 AM Bug #4682: invalid return payload crash on primary on filter reload
- Looks like a different manifestation of the issue fixed here: https://redmine.pfsense.org/projects/pfsense/repository...
-
- After upgrading to 2.2.2 a crash occurs on CARP primary machines after syncing their config to the secondary. It appe...
-
- From the Stats and Restore tabs you can easily see all the stored backups for any host belonging to your account - gr...
05/05/2015
-
- you have one on HTTP and one on HTTPS it appears, or some other non-matching config. Not a bug, please post to the fo...
-
02:38 PM pfSense Packages Bug #4677 (Not a Bug): pfsync bulk fail
- I set up two firewalls with CARP, using dedicated interfaces SYNC, when the master tries to send firewall settings, t...
-
- For the second issue I updated my PR to allow it to be configured between allow, deny and ignore.
-
- There are three issues:
- The wrong domain was being used, domain instead of ddnsdomain.
- The option "deny client-... -
- 07:02 PM Revision ff916cd2: Fix print_info_box_np with apply button
- - Wrap message in container to float button to the right
- Fix syntax error
Refs. #101 -
06:55 PM Bug #4680 (New): DHCP relay does not work with DHCP server on other end of OpenVPN tunnel
- It is currently documented at https://doc.pfsense.org/index.php/DHCP_Relay that DHCP Relays don't work over IPsec tun...
- 06:44 PM Revision 0ce45fdf: Replace td's with th's and make table responsive
- Refs. #168
- 06:28 PM Revision d55a8692: Merge https://github.com/SjonHortensius/pfsense into bootstrap
- 06:28 PM Revision 12c82b37: Merge https://github.com/SjonHortensius/pfsense into bootstrap
-
05:49 PM Bug #4345: Traffic Shaping doesn't work with Xen netfront driver
- Is there something to test or something else to do?
I'm still on 2.1.5 and want to update. -
- Where you have an SA in status REKEYED in 'ipsec statusall', similar to: ...
-
- If you add a static entry and you are using Unbound with register DHCP static entries, then the Apply configuration b...
- 02:52 PM Revision f6f04195: Remove make_dirs(), it was only being used by packages but now all calls were replaced by mkdir()
- 02:29 PM Revision 6d27296b: Combined two if($curcat . . blocks
- 02:24 PM Revision cccdc5ce: Updated per SH suggestions
- Thanks!
- 02:03 PM Revision 59efb129: Improved as suggested
- Thanks
- 01:47 PM Revision 3865efd1: Merge pull request #157 from sbeaver-netgate/system_firmware
- Convert system_firmware conversion
- 01:43 PM Revision 607b1c39: Rewrote xhr javascript, applied .form-inline refs #153
- 12:52 PM Revision a906772a: Merge pull request #153 from sbeaver-netgate/status_graph
- Inital conversion of status_graph.php
- 12:35 PM Revision be736a44: Merge pull request #146 from sbeaver-netgate/status_ntpd
- Converted status_ntpd update
- 12:35 PM Revision 7366071d: Merge pull request #145 from sbeaver-netgate/status_interfaces
- Converted status_interfaces.php
- 12:32 PM Revision b95ce5a5: removed red. indenting + unused variable refs #139
- 12:31 PM Revision 7aae81d2: Merge pull request #139 from sbeaver-netgate/status_gateway_groups
- Converted status_gateway_groups
- 12:19 PM Revision 684a1dbc: Use default array_filter callback.
- Moved adding of section down for clarity.
Wrapped message in an alert (same as print_input errors but without the ext... - 11:51 AM Revision 4889ed28: Added fix in IpAddress to check if a mask is set to prevent a method call on a non object.
- Migrated form.
Moved server input to an array form value. -
10:06 AM pfSense Packages Bug #4676 (Rejected): Avahi & .local domain in config file
- I can't manage to get Avahi to work out of the box. When I restart it on commandline I get the message:...
- 09:16 AM Revision c50cdaa0: Merge branch 'bootstrap' of https://github.com/Bouwdie/pfsense into services_dhcp_relay
- Caught up with main repo.
-
07:04 AM Bug #4652: Captive Portal Idle-Timeout causes 2147483647 for acctsessiontime when no data transferred
- Markus Tellian wrote:
> The change applied in "120acbae8c2edd2e60685dd7ca16966cd988afc7":https://redmine.pfsense.org... -
- The change applied in "120acbae8c2edd2e60685dd7ca16966cd988afc7":https://redmine.pfsense.org/projects/pfsense/reposit...
-
02:21 AM Bug #2582: OpenVPN service won't start after changing the IP of interface
- I was running into this when selecting a Failover Gateway Group as the outbound device for the OpenVPN connection, ru...
05/04/2015
-
- It doesn't appear specific to VLANs. A CARP IP on an interface that's a member of the bridge, or on the bridge itself...
- 07:02 PM Revision cb7b3761: system_hasync.php - Conversion complete
- Ready for review
- 04:17 PM Revision 5d7a0cca: diag_logs.php Added DBCP warning
- Warning notice is required when viewing DHCP logs
Reduced unneeded indenting in HTML - 02:50 PM Revision 560723a4: Merge https://github.com/SjonHortensius/pfsense into bootstrap
- 02:50 PM Revision 7e0b4ccf: ensure gettext and htmlspecialchars are correctly called
- 02:44 PM Revision f4b10abe: Merge pull request #160 from sbeaver-netgate/logs-consolidation
- Converted diag_logs_*
- 02:31 PM Revision 566b1e7f: dig_settings updated
- Switched to my master branch, updated with pull from SH fork, updated
tab array and committed.
This version should c... - 02:19 PM Revision cb578e18: diag_logs.php Minor edit per SH suggestion
- Substitute in_array() for long ‘if’ statement
Thanks for the suggestion - 02:07 PM Revision 0a5d0b7b: diag_logs - log file consolidation
- A GET argument has been added to dig_logs.php so that the log file to
displayed can be specified.
Minor edits to the... -
01:47 PM Bug #4671: Add "net.inet.ip.portrange.reservedhigh" to system tunable GUI
- AFAIK, you can add ANY tuneable in System: Advanced: System Tunables
that's what the "< + >" button at the bottom ... - 12:42 PM Revision 84942ddd: system_firmware_settings detailed changes per SH
- Thanks for the suggestions.
- 12:22 PM Revision 1180c752: status_rrd_graph_settings detail changes per SH
- Thanks for the suggestions.
- 12:01 PM Revision 1e314e79: status_ntpd.pnp detailed changes
- Removed unneeded printCell funtion
- 11:56 AM Revision 45e630d7: system_firmware detailed changes
- Removed unneeded placeholders
Forced firmware upgrades to be disabled on atoll page load. - 11:46 AM Revision fb6c7bb8: status_interfaces detailed changes per SH
- Useful suggestions. Thank you.
htmlspecialchars() moved to showDef[Btn] functions
Minor formatting changes - 11:16 AM Revision 4ed05874: status_gateway_groups
- Detailed changed per SH
-
08:53 AM Bug #4674 (Resolved): invalid state table entries after WAN IP change
- This is similar to Bug #1629. I have a SIP client behind pfsense 2.2.2. When the WAN IP changes, there is a state tab...
-
- Hmmm, wonderful. Now, someone tell me how to fix this....
-
- Well, figured out. Another corpse left after accidental cross-arch upgrade (kindly see Bug #4636 and fix the braindea...
-
- taking out the filter reload doesn't influence this, and will break things in a number of circumstances. There seemin...
05/03/2015
-
11:10 PM Bug #3710: Adding static DHCP leases doesn't cause BIND zones to update
- Affected by this as well on pfSense 2.2.2; BIND plugin 0.3.9.
Is there a good workaround for this issue?
The si... -
- I have checked again, with the patch, it seems to work even without ip_change_kill_states. I do not know whether I sa...
-
06:05 PM Bug #4669: QinQ virtual interfaces available for assignment where they shouldn't be
- There appear to be three distinct issues here. Documenting it before I forget.
1. The generated netgraphcmd file see... - 12:16 PM Revision 53be3e0d: Merge pull request #147 from sbeaver-netgate/status_lb_vs
- Converted status_lb_vs.php
-
09:21 AM Bug #4673 (Not a Bug): Can't override rules in filter.inc from the GUI
- Sometimes legitimate traffic is blocked by the default/quick rules in filter.inc. However, these cannot be overridde...
-
- The currently installed version of igmpproxy is an early beta version from 2005, and has a number of issues. For exa...
05/02/2015
-
- I have the same issue with a SIP client. It seems that the SIP client creates a new entry in the short time after flu...
-
06:38 PM Bug #4671 (Not a Bug): Add "net.inet.ip.portrange.reservedhigh" to system tunable GUI
- *Background:*
To be able to bind squid for reverse proxy to port under 1024 the _net.inet.ip.portrange.reservedhigh_... -
- Having run some tests this appears to be broken beyond just exposing the raw interface names.
Choosing the QinQ name... - 12:41 PM Revision e22512fc: ensure gettext and htmlspecialchars are correctly called
- 12:33 PM Revision 103fab1d: head.inc - don't include modal if there are no notices
- 12:20 PM Revision a2143951: update bootstrap to 3.3.4, jquery to 1.11.2
- 12:13 PM Revision 44d906ca: system_authservers - fix toggle by making it explicit fixes #108
- also allow calling toggles without any arguments
- 09:34 AM Revision 5d571dee: Cherry-pick 'sbeaver-netgate-status_gateways' into bootstrap, excl. _groups
- fixes #137
- 09:33 AM Revision 0843bc20: status_gateways updated as requested
- nbsp was not found. Perhaps I forgot to sync
Column widths were removed. You were right :) - 09:33 AM Revision 961ffe14: Added thead/tbody tabs and removed unneeded div id
- 09:33 AM Revision a023d257: status_gateways.php conversion complete
- Two tables eliminated
Colors defined to eliminate magic
Bootstrap column width specified
All obsolescent classes and ... - 09:33 AM Revision d696dd1f: Corrected background color
- 09:33 AM Revision fff68385: status_gateways.php Bootstrap conversion
- 09:27 AM Revision 563ffd03: updated, fixes #111
- 09:19 AM Revision a3a38ffc: Merge branch 'sbeaver-netgate-diag_traceroute' into bootstrap
- 09:18 AM Revision 444381d1: diag_traceroute updated as requested
- 09:18 AM Revision a7420eba: Corrected typo
- 09:18 AM Revision cd7d902d: Updated per SH comments
- 09:18 AM Revision 77af9793: Page ready for review
- 08:58 AM Revision eb500b85: removed unneeded attributes, rewrote xhr-delete, made form not auto-submit
-
- Latest 2.2.3-DEVELOPMENT snapshot....
-
04:16 AM Bug #4131 (Resolved): CP RADIUS accounting not working
05/01/2015
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
06:34 PM Bug #4131: CP RADIUS accounting not working
- Confirmed working.
-
- Pushed the fix on pfSense as well.
-
- Can you please try this change?...
-
- Thanks, confirmed that is the issue.
[01-May-2015 15:03:56 America/Toronto] Running pfSense_ipfw_getTablestats(2, ... -
- I think your problem is on the mac address format it should be specified by : rather than -
-
- # ipfw -x 2 table 1 entrystats 10.10.8.139
10.10.8.139/32 0 1 1 0
-
- Can you run the same request but from CLI with ipsec -x 2 table 1 entrystats 10.10.8.139?
Tell me what do you see? -
- I put some debug code into /etc/inc/captiveportal.inc and got this result:
[01-May-2015 13:35:43 America/Toronto] ... -
- This is still a problem in 2.2.2. Byte counts are all still zero!
I'm about to start digging through the code now,... -
- Creating a QinQ VLAN adds 3 interfaces to the assign interfaces tab. For instance, add a QinQ on em1 with tag 5, QinQ...
- 03:38 PM Revision c6d6ee9e: system_firmware_restorefullbackup.php conversion complete
- Ready for review
This page was best converted by retaining one HTML form. The buttons
embedded in the table made thi... -
- There is a commit done on how charon daemon was restarted.
Now it goes and signals starter which does the right thin... -
- Applied in changeset commit:3a09e0d96e63e5a8fafcad9199ab2c1d657d68b9.
-
- Applied in changeset commit:6e4c8e92f8f0407468eccb4c76f4f5affc598d1d.
-
-
- This should be fixed.
Though to be checked if only reply-to is desired instead of both reply-to and route-to being g... -
- Applied in changeset commit:65ceb82d1e0727c0b0c2dcd3f8aa65277171ea33.
-
- Applied in changeset commit:be8b480ed1ab787d35f2e8cfeb471b5b898b0fff.
-
- Applied in changeset commit:120acbae8c2edd2e60685dd7ca16966cd988afc7.
-
- Applied in changeset commit:2842c8d407e34a9183908a1677ec162a7b0ea209.
-
- Committed.
-
- The reqid is now removed and let to Strongswan to manage.
It seems to improve things.
Leaving as feedback to be c... - 09:00 AM Revision 36a0cfe8: Tweak initial state for toggleable checkboxes
- - When iterating over a jQuery object, just use $(this) for the current value
- Use the .data() method to fetch data ... - 01:05 AM Revision 491c5dba: system_firmware_settings.php conversion complete
- Ready for review
04/30/2015
- 10:30 PM Revision d55e91c1: comment out trailing } on these ifs also.
-
-
-
- This reverts commit 7d5add01e48bab8d82d5a5699325fa7b6aeb4e5c.
-
- This reverts commit 6d7e7c0c5cd8ec613235cd9f2a01f60bb7c32c79.
-
- This reverts commit 54dd568af28ebe7b4905fedd3cdf48269e63f001.
-
- This reverts commit 7bc36682339693dd10aa53e361f00ab7358115e1.
- 07:46 PM Revision 1be02f50: Detailed changes per SH
- 07:37 PM Revision 5387537e: system_firmware conversion complete
- Ready for review
-
03:47 PM Bug #4668 (Closed): ID Column in Firewall Rules
- The ID column under firewall rules is always blank (v.2.2.2). Is it supposed to display @$i@?
-
- I shouldn't test at 2 AM apparently.
-
- Yes. The only way to fix this without reversing the evil logic would be reverting this commit and changing the descri...
-
- Yes, Chris seems to have reversed the fix I made for the "flip every save" problem. The whole thing needs some re-eng...
-
- No, sorry, sir. We are back to the flip every save. This no logic MUST go away.
-
- fixed, thanks
- 12:51 PM Revision 4b219dfd: introduce Form::setMultipartEncoding() for uploading files
-
06:41 AM Bug #4592 (Feedback): FreeBSD 10.1-RELEASE-p6 signal handling problems with squid (FreeBSD bug 195802)
- I've backported revisions from stable/10 and applied on 2.2.x snapshots
-
- 06:24 AM Revision 43f83ab4: Show correct selection for noshuntlan option. Ticket #4655
- 06:23 AM Revision ee72e2ca: Show correct selection for noshuntlan option. Ticket #4655
-
- In the 2.1.x unbound package, there is this dumpcache variable to control saving and restoring the cache (https://git...
-
- There is nothing suggesting that it does not work. The function is poorly implemented, with no progress bar or anythi...
-
02:48 AM Bug #4666 (Not a Bug): Restore full backup
- Hi. I upgrade pfsense 2.1.5 to 2.2.2/ every thing is good/ but restore full backup dont work/ why?
Thanks guys -
- the original issue in this ticket no longer exists in 2.2.1 and newer. The remaining multi-P2 issues are covered by #...
-
- last bit fixed under #4655
-
- Where a system has a number of P2s on a single P1 with IKEv1, strongswan at times assigns the same reqid across multi...
04/29/2015
-
06:00 PM Feature #4664 (Resolved): Separate Processor (CPU) and Processes graphs
- Currently, the Processor graph contains both CPU usage information (User/Nice/System/Interrupt) mixed with the number...
- 01:03 PM Revision 3032b29b: dig_dump_states.php conversion complete
- Ready for review
- 12:15 PM Revision 4f2192e6: diag_resetstates.php conversion complete
- Ready for review.
-
08:31 AM pfSense Packages Bug #4663 (Resolved): pfsense 2.2.2-RELEASE + squid3 + squidGuard = Breaking squid.conf when using c-icap
- Squid + SquidGuard will break squid.conf when changes are made if using C-ICAP due to some parameters missing the ON ...
-
07:18 AM Bug #4661: OpenVPN client can't assign to GWGroup specifying VIPs
- WAN1 and WAN2 — static IP. May want to try it in my "virtual machine":https://yadi.sk/d/PWSuNbZhgK47P for test.
-
- As I remember, when creating or editing an OpenVPN instance, the interface or highest tier of the gateway group to wh...
-
- # Failover pfSense with CARP —> OpenVPN client autostart OK.
# Failover multi-WAN —> OpenVPN client autostart OK.
#... -
05:27 AM pfSense Packages Bug #4662 (Closed): zabbixLTS snmpwalk doesn't work
- [2.2.2-RELEASE][root@pfsense]/usr/pbi/zabbix22-proxy-i386/local/bin: find / -iname 'snmpwalk' | xargs ls -l
lrwxr-xr...
04/28/2015
- 07:55 PM Revision e31aa678: status_graph.php conversion complete
- Tis page has a very clever presentation that I did not want to loose.
So one table remains.
Otherwise tit has been c... - 06:32 PM Revision 501d7904: Merge pull request #88 from sbeaver-netgate/diag_sockets
- Convert diag_sockets
- 04:46 PM Revision 3c44b044: status_rd_graph.php updated
- This page has been extensively updated, but it could do with bing
revised further at some time in the future.
For no... -
- 12:01 PM Revision bef0adce: Updated for consistency with reboot.php
- 11:54 AM Revision 45d6ada5: Revert "Merge pull request #100 from sbeaver-netgate/halt"
- This reverts commit 5bd406696ae634b3993d79a8b9aef03eeab42488, reversing
changes made to b9bd62735f2afb818d9ff3afd399c... -
- fixed
-
- I've pushed a patch to fix it, please confirm.
-
- installer log attached
-
- Could you send me /tmp/installer.log? I tried to reproduce it but couldn't
-
-
- The enc interface never has an IP, and all those interface selections require IPs in the Unbound config, hence it's n...
-
08:04 AM Bug #4660 (Not a Bug): Unbound DOsent Display IPSEC interface
- This prevents DNS requests from exclusion zones from being forwaded across an IPSEC VPN to the root private DNS server
-
03:02 AM Revision 404ff523: removed unnecessary curl options.
-
-
01:16 AM Bug #4571: scheduled firewall reboot crashes
- inspite of the crosstalk on the adapter, 2.1.5 still allows to select slice and press any key or enter to continue wh...
04/27/2015
-
- One thing I would add is that this behavior is particular to the Unity plug-in. With the Unity plug-in disabled, the ...
-
- Sorry Chris, I guess I didn't search deep enough in the bug list.
-
- duplicate of #4418
-
- If the Unity plugin is enabled, garbage is added to the last domain listed in Split DNS. In my case, it's always the ...
- 08:18 PM Revision 42c94540: status_rrd_graph_settings.php conversion complete
- Ready for review
-
- Where you have a system with SATA disks, setup a GEOM mirror with them, and then try to do the quick/easy install, it...
- 06:44 PM Revision 3c2c32b3: diag_pkglog.php conversion complete
- Ready for review
- 05:27 PM Revision 663e75cd: status_b_vs.php updated
- Ready for review
Many nested tables and their old classes removed
Added warning when no LBs have been configured
Stan... - 03:50 PM Revision 8dff26ce: status_ntpd update complete
- Ready for review
This conversion has no forms so lent itself to the removal off the
outer tables (3) the provision o... - 01:49 PM Revision bd06568f: status_interfaces - WIP for discussion
- This is one way to present the information without the 600 lines of
HTML that were in the file.
Comments or suggesti... -
01:19 PM pfSense Packages Feature #4503: GNUGateKeeper H.323 Proxy Package
- Now set PFSense 2.2.2 x32 and for him, set GNUGateKeeper ver. 3.8. Now I am engaged with the settings for simple oper...
-
- Asterisk not work in ver 2.2.1 and up
- 12:13 PM Revision cf3aff59: Add static mapping interface not set when IP in a pool
- If the DHCP IP address is in a pool (not in the main DHCP range for the interface) then the interface that correspond...
- 12:12 PM Revision 60dee68b: Merge pull request #1631 from phil-davis/patch-5
- 12:09 PM Revision d7d6342c: Fall back to getting local user pages and groups
- if the groups could not be found from LDAP and there is a local user.
- 12:08 PM Revision 437799b8: Merge pull request #1628 from phil-davis/patch-2
- 12:03 PM Revision 73bbcaed: Do not process dhcpd implementation if input errors
- If I go to Service->DHCP Server, make some edits that are invalid (e.g. change range start or end to some invalid str...
- 12:03 PM Revision 03a1d3f6: Merge pull request #1630 from phil-davis/patch-4
- 12:02 PM Revision 1fa1a40b: Tidy up "services_unbound.php" XHTML
- Add missing closing TD tag
- 12:02 PM Revision 9dded879: Tidy up "status_upnp.php" XHTML
- Remove double line from table
- 12:01 PM Revision 3bc13e79: Merge pull request #1629 from ExolonDX/master
- 12:00 PM Revision 89f89d73: Merge pull request #1625 from phil-davis/www-e
- 11:58 AM Revision 58befbf8: Merge pull request #1623 from phil-davis/code-style-diag
- 11:55 AM Revision 701833bb: Merge pull request #1622 from phil-davis/usr-local-www
- 11:50 AM Revision daac712a: Merge pull request #1618 from phil-davis/www-widgets
-
11:32 AM Bug #4081: Apinger reporting incorrect latency
- Sending ping #1584 to GWPDP (200.160.6.214)
Recently lost packets: 0
Sending ping *#3607* to GWEBT (200.230.251.... -
08:10 AM Bug #4656 (Not a Bug): cannot connect IPsec VPN via dialup
- I have had an VPN up and running but suddenly it disconnected and gets stuck on connecting. I have done plenty of tro...
-
- i did some research and it seems there is some issue relating to crosstalk between the TX and RX lines as the alix se...
-
02:56 AM Bug #4276: Layer 7 not working / ipfw-classifyd high load
- Hy folks, any chance to hav a patch for the 2.2.2?
regards
04/26/2015
- 02:08 PM Revision 01752a98: Fix "Apply" button in dialogs #101
- 01:33 PM Revision 11486640: Add nav-wrapper to loose buttons
- 01:21 PM Revision 3e607d0e: Don't use $section2, toggle all remote-options when disabled
- pfSense.js - Force correct initial state for toggleable checkboxes #143
- 11:41 AM Revision c2518204: Prepare for different width, make widths static
- refs #141
-
10:22 AM Bug #4383: Firewall log contains IGMP for rules that do not have logging on
- Just adding a "me too". I have default rule logging turned off, but still seeing lots of entries in firewall log of "...
- 10:13 AM Revision 687456e3: Merge pull request #134 from sbeaver-netgate/diag_logs_settings.php
- Converted diag_logs_settings.php
-
- i got the new usb to serial adapter and tried with my alix, still the issue persists, cant press any key on keyboard ...
-
- Before this gets lost again: After the commits related to Bug #4640, the checkbox does the exact opposite of what'd d...
04/25/2015
-
- 02:17 PM Revision 9ba6f708: Form - show all global Buttons in a single wrapper
- fixes #135
- 01:59 PM Revision 4705fa62: Replaced js with toggles
- Also eliminated unneeded gettext from help
- 01:37 PM Revision b49f31d0: Converted system_certmanager
- fixes #106
- 12:43 PM Revision 6755cfe8: Replace js with addClass to set button class
- Also removed htmlspecialcharacters() where not required
- 12:24 PM Revision b56b1321: Ran clean.sh.
- 11:48 AM Revision b0f52526: diag_logs_settings replace ugly help with staticText
- 11:17 AM Revision 4d79f95e: diag_logs_settings Removed bogus print_r
- Also removed unneeded gettext
- 10:57 AM Revision 88627531: dig_sockets updated as requested
- Also fixed an incorrect </div> placement
I have retained the “$class = 'info’;” for now as I believe it
significantly... - 10:56 AM Revision 6393afea: Merge pull request #87 from sbeaver-netgate/diag_tables
- Converted diag_tables.php
- 08:56 AM Revision 2445bf60: Merge pull request #138 from sbeaver-netgate/system
- Bugfix: properly store timezone + don't close <a> twice
- 08:47 AM Revision 5ff28acd: Merge pull request #109 from sbeaver-netgate/diag_logs
- Converted diag_logs.php
- 08:42 AM Revision 5bd40669: Merge pull request #100 from sbeaver-netgate/halt
- Updated halt.php for consistency with reboot.php
-
- one easy way this could be done is, add the extra box but store the values of both in the same field in the xml but j...
-
07:50 AM Feature #809: Config sync username change
- Problem still exist Version 2.2.2
-
03:38 AM Bug #3749: Upgrade from 2.1.4 to 2.2 does not automatically reboot
- ALso had the sam issue with 2.1.5 to 2.2.2 with a Vmware cluster of 2 machines in CARP. I saw it hung on reboot in th...
04/24/2015
-
- fixed
-
09:05 PM Bug #4081: Apinger reporting incorrect latency
- I never saw this happen on several 2.1.5 installs but it happened on every (3) 2.2.0 install I tried.
I'll have a ... -
- I must add that this always happened, with 2.1.4, 2.1.5, 2.2.0, 2.2.1 and 2.2.2. In a XEN or VMWare environment.
-
- I have this bug here. It screws up our Multi-WAN setup. Ideally we should use losses/highping to switch gateways, but...
-
-
- 03:44 PM Revision 58f592e6: status_gateway_groups conversion complete
- This page had three nested tables. It now has two, but this seems to be
the best way to display the information. Sugg... -
-
-
-
-
03:11 PM pfSense Packages Bug #4654 (Closed): mod_security 0.43 generates a syntax error when "ModSecurity protection" is enabled.
- Running under 2.2.2-RELEASE (amd64) with the "Apache with mod_security-dev 0.42" package installed. When "ModSecurit...
-
-
- 02:39 PM Revision 64c3b4cd: system.php bugfix
- $timezonelist was an indexed array, causing the page to save the index
in the config, not the value. -
- When running the mtree post-upgrade from 2.1x or earlier, mtree will run partially through but eventually die with a ...
-
- Maybe somebody can make a package for web interface on base gatekeeper? I am ready to sponsor this direction, I want ...
-
- I very much hope that this problem will be solved in version 2.2.3.
-
- pkg_add -r ftp://ftp-archive.freebsd.org/pub/FreeBSD-Archive/ports/i386/packages-8.3-release/Latest/gatekeeper.tbz
A... - 07:34 AM Revision b9bd6273: Merge pull request #136 from Bouwdie/services_wol
- Converted services_wol
-
- Accidentally I posted the code from my dev PfSense, here is the working code:...
-
- If you log in to captive portal and a Idle-Timeout is set (in my setup from radius)
the function captiveportal_get_l... -
04/23/2015
-
-
-
03:24 PM Bug #4383: Firewall log contains IGMP for rules that do not have logging on
- I too have ran into this. Very irritating. :)
-
03:22 PM Revision 42328d90: Removed double newlines.
- Removed onclick event.
- 02:56 PM Revision 49878b9e: Add static mapping interface not set when IP in a pool
- If the DHCP IP address is in a pool (not in the main DHCP range for the interface) then the interface that correspond...
- 02:55 PM Revision 45b99bb6: Remove unneeded gettext in setHelp() call
- 02:37 PM Revision 3a652703: Removed unneeded table elements and HTML input elements
- Ready for review
- 02:25 PM Revision 48ac0aa0: Do not process dhcpd implementation if input errors
- If I go to Service->DHCP Server, make some edits that are invalid (e.g. change range start or end to some invalid str...
- 12:27 PM Revision a6ff5ea1: Removed unneeded class and fixed tabs/spaces
-
- Link_interface_to_bridge check also applied to wol_edit.
Inverted link_interface_to_bridge check to be more clear. -
- So I don't know what your bug is - that is really weird if the link has "if=" with no interface, but then the interfa...
-
09:40 AM Bug #4649: Add static mapping for this mac address button links to wrong page
- Yes, they are all fine. If I hover over the plus button for more than a few MSEC, the URL fills out completely and t...
-
- Have you defined DHCP pools?
Do the effected entries have DHCP addresses issued from the pool(s)?
I can see that th... -
- A little testing - I can get it to happen pretty reliably in both Chrome and Firefox. What I noticed was that the de...
- 08:05 AM Revision 2c20e3e9: Re-enstate copyright that got lost in pull request
- Refs. #99
-
- If the policy route negation rules are active, the automatic negation rule receives the same tracker ID as the rule i...
-
- I found the pf-rule that causes the problem:
pass out route-to ( pppoe0 2.2.2.2 ) from 1.1.1.1 to !1.1.1.1/32 tra... -
- I installed this package openh323-1.19.0.1_8 . PFsense 2.1.5 i386.
pkg_add -r ftp://ftp-archive.freebsd.org/pub/Fre... -
- i had the exact same issue when i upgraded one box from 2.1.5 to 2.2.2, it didnt reboot, ssh was lost, only web gui w...
-
01:56 AM Bug #3749: Upgrade from 2.1.4 to 2.2 does not automatically reboot
- Braden McGrath wrote:
> This also happens on 2.1.5, and just occurred for me on a 2.1.5 -> 2.2.2 upgrade (x64/AMD64)... -
- This also happens on 2.1.5, and just occurred for me on a 2.1.5 -> 2.2.2 upgrade (x64/AMD64).
I have remote web ac...
04/22/2015
-
- services_dhcp.php doesn't exist in that file at all. Don't see how that would be possible.
Definitely report back... -
- well that is very weird. I opened chrome and tested, it worked correctly. I switched to a firefox tab, selected DHC...
-
- It works fine on my 2.2.2 systems. I have attached a screen shot of Status->DHCP Leases while hovering over the butto...
-
- The add static mapping for this mac address button used to take one to the static mapping entry page at /services_dhc...
- 10:08 PM Revision 0c9eb13b: #126
- Added required classes to table.
- 10:03 PM Revision f0b20c3f: #126
- Wrapped table in table responsive div.
- 09:50 PM Revision ba8749ed: #126
- Removed gettext calls when creation form parts; this is done by the form class
Removed obsolete submit button on edit... - 09:15 PM Revision ea96b189: - Fix broken source address input & replace one-time method with array_merge
- - Removed redundant htmlspecialchar and gettext methods; the form class itself takes care of this
- Slightly modified... - 08:52 PM Revision 7aac3413: Merge pull request #99 from sbeaver-netgate/diag_testport
- Diag testport
- 08:15 PM Revision d6f74188: Trying to submit a symlink as part of crash reports will cause a failed
- submission. Remove symlinks first. Also properly set user agent while
here, consistent with others. Fix some style an... - 08:14 PM Revision bc28e0e4: Trying to submit a symlink as part of crash reports will cause a failed
- submission. Remove symlinks first. Also properly set user agent while
here, consistent with others. Fix some style an... - 08:11 PM Revision 8c10899b: Replace +- with explanatory buttons
- Refs. #45
- 07:19 PM Revision 50715ba1: diag_logs_settings.php conversion complete
-
-
- Some crash reports that have symlinks in /var/crash will fail to submit. Fix coming momentarily
-
- fixed (by removing the modules entirely for now at least, they mostly aren't necessary, and cause stability issues)
-
- fixed
-
- fixed
- 11:54 AM Revision 301eb34f: Tidy up "status_upnp.php" XHTML
- Remove double line from table
- 11:51 AM Revision 57e15e41: Tidy up "services_unbound.php" XHTML
- Add missing closing TD tag
-
10:12 AM Todo #1940: Integrate rSyslogd
- I need to send my syslog through internet and for security reason I need TLS/SSL to do that.
Please switch syslogd t... -
09:50 AM Feature #4366: Namecheap Dynamic DNS updates fail on subdomain formatted domains
- The main problem isn't if the domain is 2 or 3 part. It's that hard coding the number of parts breaks it for anythin...
-
- well then the current logic uses 3 parts when on domain.co.uk whereas namecheap has other domains with 3 parts like x...
-
- >There are cases when the domain has more than two parts, specifically the case in the test with .uk, so the domain i...
-
- Trel S wrote:
> "parta.partb" is a valid A record. Using the logic you said, there would be no possibility of updat... -
- The safest solution would be the two input boxes to allow the user to define how much is the host name, and how much ...
-
- But that would then break in scenarios such as
parta.partb.domain.tld
"parta.partb" is a valid A record. Using... -
- Modifying that test would break other domains that function correctly now. That may be an "easy fix" for this specifi...
-
- easy fix would be to edit the /etc/inc/dyndns.class file on line 537
replace
$domain_part_count = ($dparts[count(... -
- rather than having to modify gui and the xml values separately, its better to modify the logic such that u consider o...
-
09:20 AM pfSense Packages Bug #4277: squidGuard-squid3 installation Failed after pfSense Update to 2.2
- squid3 fails to install on a fresh 2.2 install too, here is the error:
Beginning package installation for squid3 .... -
07:39 AM Bug #4648 (Resolved): ifconfig syncpeer fails with IPv6 address
- When running CARP in an IPv6 only environment I get this error during bootup:
Apr 22 14:11:32 fw002-ac php: rc.boo... -
- I just wanted to bump this bug report: I tested with 2.2.2, and it still dumps core (as Chris mentioned above).
I'... -
- Good day! Tell me, is it possible to expand the functions of the package ,siproxd, so that he could translate the pro...
04/21/2015
-
11:01 PM Bug #3022: OpenVPN does not failover to the 2nd configured LDAP auth.server
- two years has passed.. any chances to have that fixed in near future?
- 10:00 PM Revision bc3fa9f1: #126
- Ran clear.sh.
Replaced forms with Form builder.
Introduced an extra panel for the WOL devices. - 06:06 PM Revision 201c0361: Added btn-sm class to buttons.
-
- When you click on Services-DHCP Server the first tab to open is the WAN tab, where you're very unlikely to be serving...
- 05:54 PM Revision 33d52df1: daig_logs.php conversion complete
- This conversion relies on a change to guiconfig.inc.
A new function was added: dump_clog_no_table() which performs t... -
-
-
-
- This reverts commit 4e8eacfd7c0f1909c15d85b4cae2302b0ba3f0fc.
Conflicts:
etc/inc/ipsec.inc -
- Is there something more I need to do to get this processed?
-
- I have now tried to reproduce this on a pure FreeBSD 10.1 installation, but everything seems to be working correctly ...
- 11:15 AM Revision 2e101d89: Toggle classes should be attached to group, not input (so that help toggles with group)
- Refs. #18
- 09:35 AM Revision 748cbea6: Update display_top_tabs to use pills as default
- Refs. #107
- 06:53 AM Revision fe65bb3a: Fall back to getting local user pages and groups
- if the groups could not be found from LDAP and there is a local user.
04/20/2015
-
- there was still some work in progress there. The _12 version is available now.
-
06:53 PM pfSense Packages Bug #4160: First shutdown attempt of guest fails with open-vm-tools
- I note that you recently made some changes. Were these released in the _11 release of VMWare_Tools. However, after ...
-
- Still receiving the following GeoIP related errors...
On startup:
ntopng: [Geolocation.cpp:59] WARNING: Unable to... -
- duplicate of #4617
The nano images weren't updated as they're generally not affected (most enable the serial cons... -
- Disable the serial port.
-
03:48 PM Bug #4645 (Duplicate): Very,very, slow boot and halt (not first time) - nanobsd
- I'm trying pfsense 2.2.2 in this hardware:
http://linitx.com/product/fabiatech-fx5625-intel-atom-18ghz-8-nic-firew... - 09:26 PM Revision 3be781e7: Add new bios product id string
- 08:37 PM Revision be2191af: Add new bios product id string
-
07:46 PM Feature #4646 (New): Recover valuable vertical screen real estate in dashboard
- Vertical screen real estate tends to be quite valuable.
The dashboard page uses about 1/2" at the top of the page ... - 07:04 PM Revision 9cf1dbff: Remove duplicate 'ppp' case in switch statement
-
-
-
- Actually the GUI is displaying the opposite setting to what is in the config. When the user pressed save that opposit...
-
-
-
- 05:47 PM Revision ad9e2a90: dig_tables.php revised to use Form.classe
- Would you please review these changes and let me have your comments.
I will remove the “echo” statements once I have... - 04:04 PM Revision 41b1ff89: More www code style oddments
-
- Errr... let me repeat this once again: this does the exact opposite of what's described in the GUI! When you enable t...
-
- Applied in changeset commit:868a62be4c27860aef9f3fd939beee5a6f26090a.
-
- Applied in changeset commit:75d072be3a10949ead88a82ecec51ae0e5490fbe.
-
- Merged pull request.
-
- Indeed confirmed. The GUI description is totally inverted to the actual behaviour. Stuff like noshuntlaninterfaces, n...
-
- I am totally confused. So I applied this, checked the checkbox and the bypasslan connection got deleted....
-
02:11 PM Feature #4644 (Resolved): Dyndns Loopia Wildcard
- Add wildcard support for Loopia dynamic dns.
My changes in /etc/inc/dyndns.class
case 'loopia':
$needsIP = TRU... -
- Applied in changeset commit:905e1156680129b3c49fe380b4e821f9eb02362a.
-
- Pull request merged.
-
- i have ordered another serial adapter so once i get that ill test that and report as well as i have few other alix bo...
-
- this is something specific to probably your serial console setup, maybe in combination with something to do with the ...
-
05:29 AM pfSense Packages Feature #4643 (Needs Patch): munin-node package?
- Hi again!
I extensively use munin-node to centrally monitor a bunch of pfsense devices, overall it runs fantastic!... -
- Hi again...
This is something i suffer consistently on my nanobsd installs since... don't remember, maybe from the... - 04:15 AM Revision 75d072be: Fix #4640 IPsec Auto-exclude LAN address toggles
- every time save is pressed.
Actually the GUI is displaying the opposite setting to what is in the config. When the us... -
- Restoring a config that contains selected "Services -> DNS Forwarder -> Interfaces" which are "IPv6 Link-Local" doesn...
04/19/2015
-
- Actually the "Auto-exclude LAN address" setting is being displayed opposite to what is in the config. Every time you ...
-
- After updating from 2.2.1 to 2.2.2, in VPN -> IPsec -> Advanced Settings, the check-box setting for "Disable Cisco Ex...
- 06:26 PM Revision 6e69ebef: Merge branch 'bootstrap' into halt
- Conflicts:
usr/local/www/halt.php - 06:22 PM Revision 40d263e7: Merge branch 'bootstrap' of https://github.com/SjonHortensius/pfsense into bootstrap
- 06:22 PM Revision 94596324: Add title to separate form and table
- Refs. #22
- 03:18 PM Revision b21e49ed: fix last line
- refs #95
- 03:17 PM Revision efcc4fd4: Merge pull request #95 from sbeaver-netgate/reboot
- Converted reboot.php
- 03:16 PM Revision 6073137f: Updated for consistency with reboot.php
- Updated for consistency with reboot.php
- 03:09 PM Revision c9f0fd77: Fixed bad copy/paste :(
- 02:44 PM Revision a2a10102: appended some missing fixes in system_camanager.php
- 02:41 PM Revision 5d2edeca: Converted system_camanager
- 02:36 PM Revision 50ea0588: bindCollapseToOptions - support multiple options targeting single section
- fix #96
- 02:24 PM Revision 6ea2ea99: Supdated per SH
- Good suggestions. Thank you.
- 01:32 PM Revision 17219182: Remove alternative version
- 01:27 PM Revision 0ba2494e: IpAddress - set correct validationpattern, toggle mask based on family
- 12:59 PM Revision 709754ab: Skip inline gw creation; it should be a Modal that inlines /gw_edit
- 12:56 PM Revision 3c128b8c: IpAddress - move from max mask=32 to 128, removed method-default @ fw_edit
- 12:55 PM Revision f3bb71cf: Converted system_routes*, pending implementation of direct gw addition
- 12:15 PM Revision 5f601060: Code style usr-local-www diag
- 11:21 AM Revision 0b456cf7: pfSense.js - add confirm to .btn-danger elements; removed onclicks
- 10:47 AM Revision 67c3b90b: Merge branch 'bootstrap' of ssh://github.com/SjonHortensius/pfsense into bootstrap
- 10:42 AM Revision 249fc764: use foot.inc instead of custom footer on login screen
- 06:39 AM Revision 962f215d: Code style xmlrpc
- 06:38 AM Revision 45b4ffc6: Code style usr-local-www back-end
- files that do stuff in mostly in the background.
-
- well u use a usb to serial adapter or the above setup, the result is the same, not to mention not many new PC have a ...
-
- Bipin Chandra wrote:
> actually i use like this as my PC doesnt have a serial port
> USB to TTL adapter -> TTL to R... -
- plus during pfsense boot it gives option to enter slice to boot from, that time using tera term not able to type 1 or...
-
- actually i use like this as my PC doesnt have a serial port
USB to TTL adapter -> TTL to RS232 (serial) adapter ->... -
- Huh? Powered? Never seen a externally powered null modem cable.
-
- i mean the serial cable needs to be removed then if i unplug power and replug or the schedule runs then it reboots fine
-
- still having issues in reboot, when serial console is attached and conencted then it reboots fine, when serial consol...
04/18/2015
- 03:57 PM Revision 68b6d88c: Update PROGRESS.md
- 03:49 PM Revision 68a25036: Focus first input globally
- 03:48 PM Revision b5c278be: Complete conversion; add <form>, remove dead sntxhgh, use events
- refs #94
- 03:21 PM Revision cbc967d4: Merge pull request #94 from sbeaver-netgate/edit_file
- Convert edit.php
- 03:18 PM Revision 19d32085: correct nesting & whitespace, then run away from this page fast
- also no need for popen, you can simply use system() instead
refs #92 - 03:00 PM Revision d7f7cfdd: Merge pull request #92 from sbeaver-netgate/exec
- Convert exec.php
- 02:58 PM Revision 23601b9a: Completed diag_routes, add panels, fix generated tables
- refs #91
-
- I think I found a bug in the NAT of the packet filter, but I am not sure. My
setup is as follows.
client (linux)
... -
02:36 PM pfSense Packages Bug #4638 (Resolved): not able to install or update open-vmware-tools package
- VMware Version 5.5 Update 2
VM Version 10
VMX Net3 nic's
Pfsense version 2.2.2 x64
When I click on update vm-... - 02:32 PM Revision 40b416b9: Merge branch 'sbeaver-netgate-diag_routes' into bootstrap
- 02:31 PM Revision 65d93621: Merge branch 'diag_routes' of https://github.com/sbeaver-netgate/pfsense into sbeaver-netgate-diag_routes
- refs #91
- 02:23 PM Revision f3a51a3a: Completed diag_ndp, made consistent with status_dhcp_leases
- refs #85
- 02:18 PM Revision 765d5ea0: Merge pull request #85 from sbeaver-netgate/diag_ndp
- Convert diag_ndp.php
- 02:16 PM Revision 1b939e01: Completed diag_limiter_info.php; made consistent with other pages
- refs #83
- 02:13 PM Revision 0ba2b32f: Merge pull request #83 from sbeaver-netgate/diag_limiter_info
- Convert diag_limiter_info.php
- 02:10 PM Revision e44c520f: Reorder elements, use events, remove table
- refs #79
- 02:06 PM Revision bd59922c: Merge pull request #79 from sbeaver-netgate/diag_system_activity
- Converted diag_system_activity
- 02:03 PM Revision 4e748801: Completed conversion of diag_pf_info - introduce Form
-
02:00 PM Bug #4637 (Closed): system unreachable after deleting VLAN
- Scenario:
pfSense x86_64 2.2.2-RELEASE
Two-interface system: igb0, igb1.
One LACP LAGG, includes both interf... -
- When I select something from the "Default Auto Update URLs" dropdown, the "Use an *unofficial* server for firmware up...
- 01:47 PM Revision 4526063b: Merge pull request #77 from sbeaver-netgate/diag_pf_info
- Converted diag_pf_info.php
- 01:43 PM Revision c722847e: complete conversion of diag_system_pftop.php
- refs #70
- 01:42 PM Revision abcc2dc5: make construct less strict to allow hiding submit button
-
- In the OpenBGPd configuration, it would be very helpful if options could be declared at the group level as well as th...
-
- See #3227. Still broken when neighbours aren't part of a group.
-
- Yup. Works correctly if the neighbour is part of a group, otherwise the same breakage occurs.
-
- I'm guessing a similar fix needs to be applied around line 168. I'll try putting them all into groups and see what h...
-
- I don't know if I'm doing something wrong, but when I apply the fixed version of openbgpd.inc to a 2.2.2-RELEASE syst...
-
01:21 PM Bug #4617: boot_serial="YES" in loader.conf causes very slow boot on some hardware where serial console not enabled
- Still an issue with recent pfSense-2.2.2-RELEASE-4g-amd64-nanobsd-vga.img.gz, just downloaded and installed a few hou...
-
- On a new system, after creating a new CARP VIP, the CARP Status gadget for the dashboard shows "Disabled".
Turns out... - 01:02 PM Revision 6979041d: Merge pull request #70 from sbeaver-netgate/diag_system_pftop
- Converted diag_system_pftop
-
- Frank Heydlauf wrote:
> this still seems to be open (at least for me) ... in all 3 cases the keys were not generated... -
11:40 AM Bug #4003: SSH host keys regenerated post-2.2 upgrade
- Hi folx,
this still seems to be open (at least for me)
Upgraded from 2.1.5-RELEASE to 2.2-rel to 2.2-rel to 2.2.1... -
- 2.1, 2.2, 2.2.1, 2.2.2 also affected.
Currently going through this major PITA process on a pair of firewalls that ar... -
-
-
08:17 AM Feature #4632 (New): Support for Multipath TCP (MPTCP)
- Hi,
i have read a lot of articles about MPTCP recently. So I wondered why the best router OS pfsense is not suppor... -
- seems fine for me, clear ur browser cache and retry
-
04:06 AM Bug #4238: Firewall rule: source port display issue
- Chris Buechler wrote:
> fixed
with the latest version i noted the issue is back and also is present in the destio... -
- ok, i reimaged the CF and now 115200 seems to work fine during slice selection, next thing to now test is the reboot ...
-
- 115200 works just fine here on many Alix boxes. Looks like you should just re-image the broken box.
-
- Applied in changeset commit:1d839e6da61e7ce8eca949111ab41e59744d5e1e.
-
- Applied in changeset commit:0608bd3c354ea76eb6df9ed9322e2ef8686f15e7.
-
01:50 AM Bug #1629: invalid state table entries after WAN IP change
- Just got hit by this issue again, in v2.2 on alix.
Are you able to confirm what release will finally kill this bug?
...
04/17/2015
-
- still crashing on reboot and when i login to check its actually stuck on reboot at the slice selection place.
rega... - 09:44 PM Revision 63f37d5f: Revised per SvL comments
- Thank you.
- 09:37 PM Revision ff4bb928: - Remove htmlspecialchars; Form_Element->__toString() already encodes attribute values
- - Use password input type for password
Refs. #81 - 09:34 PM Revision 7d302dbf: Merge pull request #81 from sbeaver-netgate/diag_authentication
- Conversion of diag_authentication completed
- 09:00 PM Revision 2983fb9c: Some more rigorous rewrite of diag_states_summary
- - Replace table in table with table cells spanning two or more rows
- Removed redundant panel
- Removed column width ... - 08:27 PM Revision beb657c7: Merge pull request #78 from sbeaver-netgate/diag_states_summary
- Diag states summary
- 08:14 PM Revision ad25eae6: Tweak converted halt.php
- - Replace 'submit' with 'save', which is more in line with the Form.class
- Add h2 panel title
- Just match string in... - 08:12 PM Revision cde85ce5: Table replaced with panel
- Thank you for your suggestion. I will revisit other pages that use
tables and make the same change. - 08:04 PM Revision 7557a480: Merge pull request #75 from sbeaver-netgate/halt
- Merge updated halt.php
-
- this is fixed completely for 2.2.3, and fixed in the full update files for 2.2.2.
- 07:08 PM Revision ae5549ab: edit.php - Fixed tester class
- 06:12 PM Revision 15567921: edit.php - Form field class corrected
- 05:58 PM Revision 85e84623: edit.php conversion complete
- This was a tricky conversion because of the included JS libraries and
the in-line JS functions.
Syntax highlighting h... - 02:46 PM Revision a0f190a2: Do not try to add package tabs info to config
- Remove broken code that was supposed to add packages tabs entries to
config.xml. Since tag['name'] doesn't exist, it ... -
-
-
- 12:25 PM Revision e115bd22: Fix php module names since check is case sensitive
- 09:55 AM Revision 04a2364b: Make diag_smart back button look like other buttons
- The back button here was just a piece of text with no nice formatting.
This change codes it as a button in the same w... - 08:16 AM Revision 0b884dd2: Make auth_get_authserver_list available to vpn.inc
- This is a follow-up to PR #1613 and avoids a crash in this script at random times.
- 08:08 AM Revision 1d75a92f: Make auth_get_authserver_list available to vpn.inc
- This is a follow-up to PR #1612 and avoids a crash in this script at random times.
- 07:17 AM Revision 7c490370: Widgets code style
-
06:50 AM Revision ea6cbc39: Update voucher.inc
- As https://redmine.pfsense.org/issues/4625
-
06:26 AM Bug #4622: /var/dhcpd/var/db/dhcpd6.leases grows to enormous size, cpu usage high
- I've got your point.
Turns out it was a rogue HP printer. I disabled IPv6 for it and voíla, /var/dhcpd/var/db/dhcpd6... -
- Created a pull request https://github.com/pfsense/pfsense/pull/1617
-
01:05 AM Bug #4030: AR9227 cards cause kernic panic when switched to n-mode
- I have the same wireless chipset in my system, too. My pfsense was upgraded to the latest version 2.2.2 and the stabi...
04/16/2015
-
- or if it's trivially simple, just throw < pre > tags around it. It picked those up and used them as its indication of...
-
- It will be easy if you make the changes in the online GitHub and submit a pull request, then it is clear exactly what...
-
- Humm. posting html destroys my post.
I meant to write
echo "< pre>"; print_r($cpentry); echo "< /pre>";
/* remov... -
- The main issue still stands.
The result from
captiveportal_read_db("WHERE username = '{$voucher}'");
h2. is *an ar... -
- Applied in changeset commit:41ee55145341f5aa4be1ca16878285c551fa3d19.
-
- Applied in changeset commit:abaa7feb680dc6f6f9bc79577075c45b3786a061.
-
- https://forum.pfsense.org/index.php?topic=91435.0
According to https://github.com/pfsense/pfsense/blob/master/etc/... -
- there is a workaround for this, but I'll revisit the subject as a whole.
-
-
- filter_configure wasn't always called upon IPsec changes that required a filter reload. Ticket for tracking, associat...
-
- the upgrade didn't change anything in that regard, in that circumstance it just grows over time. What's the device th...
-
- Looks like it has got worse after upgrade to 2.2.2. leases file is now 43Mb.
-
-
-
-
- 05:37 PM Revision 0545a75e: Always do a filter reload in vpn_ipsec_configure to ensure the ruleset is
- updated where necessary in every IPsec change scenario.
- 05:34 PM Revision ff3c14a5: Always do a filter reload in vpn_ipsec_configure to ensure the ruleset is
- updated where necessary in every IPsec change scenario.
-
03:56 PM Bug #4630: OpenVPN Client Limiting Download Speeds
- Also, If I disable the VPN and do a speed test through the ISP, it maxes out at 110 Mbps on pfSense 2.2 so it is look...
-
- Since upgrading from pfSense 2.1.5 all pfSense 2.2 versions have limited my clients VPN download speed to around 40 M...
- 03:15 PM Revision cc1f655f: Remove boot_serial='yes' from loader.conf when serial is disabled, error introduced by me on commit 986e77a2eab
- 03:13 PM Revision eee053fe: Remove boot_serial='yes' from loader.conf when serial is disabled, error introduced by me on commit 986e77a2eab
-
- The floating rules can apply to multiple interfaces unlike the other tabs. Since the interface isn't shown you have ...
-
- This is missed patch from 8.3 diverttag.diff
-
- This should work as expected on newer versions.
-
- duplicate of #4503. this is not a priority for us in the foreseeable future, no need to keep bumping it.
-
- Hello dear, developers and managers of this very necessary and important project! You are doing great! I would like t...
-
- The System Tunables page for managing sysctl values is good, but we need a similar GUI to handle loader tunables that...
-
- Merged pull requests.
- 10:32 AM Revision 98615a31: Fix unbound warning when dnsallowoverride off and forwarding on
- Reported in forum: https://forum.pfsense.org/index.php?topic=92437.0
The $ns array was being used further down, but ... - 10:32 AM Revision 656b7f0a: Merge pull request #1615 from phil-davis/patch-2
-
10:18 AM Bug #4596: NAT 1:1 vs VIP, limiters works on LAN, but on WAN breaks NAT
.. still persist in 2.2.2-
07:32 AM Feature #4626 (Resolved): Ability to set charon.make_before_break in strongswan.conf
- There is a new feature "make before break" in strongswan 5.3.0.
Its purpose is to prevent connectivity gaps from hap... - 06:44 AM Revision 9b837c5d: Fix unbound warning when dnsallowoverride off and forwarding on
- Reported in forum: https://forum.pfsense.org/index.php?topic=92437.0
The $ns array was being used further down, but ...
04/15/2015
-
- Thanks Testerr for the config. Pretty sure we know the cause of this, awaiting feedback on the forum thread.
-
- anyone who's seeing this, could you get me a config backup? Copy/paste via status.php is fine, which trims out certs,...
-
- not sure the cause of this, trying to track down more info.
https://forum.pfsense.org/index.php?topic=92415.0
-
05:59 PM Bug #4617: boot_serial="YES" in loader.conf causes very slow boot on some hardware where serial console not enabled
- After automatic upgrade from 2.2.1 to 2.2.2 I have the same problem.
-
10:08 AM Bug #4617: boot_serial="YES" in loader.conf causes very slow boot on some hardware where serial console not enabled
- I have made additional tests for explanation.
It's mine phone video of this incident.
http://dfiles.ru/files/pxrf... - 09:24 PM Revision 5945ba99: exec.php conversion complete
- Tables eliminated, panels added, panels re-ordered to place output near
the control that generated it. Messages conve... - 09:21 PM Revision 924757e2: Reverted change - Wrong branch :(
- 09:18 PM Revision a07b9b5e: diag_exec.php conversion complete
- Page re-factored to display output in panels and to put the
warnings/messages alongside the control that generated them. -
- same root cause as one or more of #4596, #4590 and similar
- 05:55 PM Revision 4aa0d136: diag_sockets
- Updated per SvL suggestions. - Thank you!
- 05:08 PM Revision 51d31df3: dig_routes Update complete
- Javascript required update for bootstrap compatibility.
Form.class.php updated so that form button is not drawn if th... -
- probably just need to add firewall rules manually since the auto rules don't allow traffic to VIPs. PPTP is deprecate...
-
03:48 PM Bug #4624 (Closed): VPN PPTP via Virtual IPs
- Hi,
I do not know if that is a bug or not.
But if you try to use a PPTP VPN through a Virtual IPs the PPTP VPN not ... - 04:22 PM Revision 696b20dd: Bump version to 2.2.3-DEVELOPMENT
- 01:07 PM Revision a0990a91: Define var_path global key since it is being used in interfaces.inc, but it was not being declared anywhere
- 01:06 PM Revision 563771b1: Define var_path global key since it is being used in interfaces.inc, but it was not being declared anywhere
- 12:28 PM Revision d09155b6: Add support for EAP-RADIUS to IKEv2 Mobile Clients (Rel. 2.2)
- 12:28 PM Revision cb377516: Add support for EAP-RADIUS to IKEv2 Mobile Clients
- 12:24 PM Revision fc70ad87: Merge pull request #1601 from phil-davis/check-overlapping-subnets
-
12:18 PM Bug #4623 (Resolved): Carp not working under bhyve
- It seems the carp implementation differs from the freebsd standard one, which cannot be used under bhyve.
On a fre... - 12:03 PM Revision 0fbf338d: 2 minor typos
- 11:58 AM Revision 17be9d34: use proper variable to detect state
- refs #69
- 11:55 AM Revision a02e2774: Properly convert select > radios
- refs #69
- 11:48 AM Revision fc2c3e34: correct several typos, remove whitespace from pre
- refs #69
- 11:44 AM Revision 2195baef: Merge pull request #1611 from jlduran/one-cache-control-header
- 11:41 AM Revision 4994409f: Fix panel structure.
- - Contents should be placed in a `.panel-body`, which adds proper padding.
- Title is wrapped in a H2, which is usual... - 10:01 AM Revision 5a0bad72: Merge pull request #69 from sbeaver-netgate/diag_ping
- Convert diag_ping.php
-
08:49 AM pfSense Packages Bug #3986: BandwidthD can break php-fpm in unknown rare edge case
- I confirm that I have bandwithd installed, but it *isn't* enabled!
My syslog is filled with these:... -
07:58 AM pfSense Packages Bug #4420: warning: bad command startup -- throttling
- I installed pcre package and the problem was solved! :)
'pkg install pcre'
I hope this helps! -
- Already reported a couple of times.
-
- Confirm !
I've just installed a new, clean PFSense 2.2.1.
- Add a single VIP (IP Alias)
- Define limiters up a... -
- This pfsense installation is configured with IPv6 tunnel (hurricane electric) and DHCP for ipv6.
The issue is that f... -
- This has been committed to master and RELENG_2_2 so it will come out in some 2.2.n release. Not sure that it quite ma...
-
03:48 AM Bug #4621 (Resolved): OpenVPN server does not bind to IPv6 CARP interface when configured from webgui.
- The generated OpenVPN server config is invalid when configured with using an IPv6 CARP interface.
See more informa... - 03:51 AM Revision 457e7e34: Re-enable verification for selfhost since their chain issue is resolved. Ticket #4545
- 03:50 AM Revision 4847615c: Re-enable verification for selfhost since their chain issue is resolved. Ticket #4545
- 02:55 AM Revision 5d5fff67: set forcesync to 1 by default for now, testing potential impact for Ticket #4523.
- 02:52 AM Revision decb0b11: set forcesync to 1 by default for now, testing potential impact for Ticket #4523.
- 02:52 AM Revision 53bc8504: Revert "Make forcesync default to the same behavior as freebsd rather than as intended for cf cards. People with issues on CF can enable the tunable"
- This reverts commit 34dced26198480d7b02e80578df40336fef89043.
- 02:52 AM Revision 828f37aa: Revert "Make forcesync default to the same behavior as freebsd rather than as intended for cf cards. People with issues on CF can enable the tunable"
- This reverts commit 32e53d709f1d63e48ea13bd1eb53c2c30f719ee4.
04/14/2015
-
- There wasn't a ticket created for this, it's worth adding one. This fixed here: https://github.com/pfsense/pfsense/co...
- 11:07 PM Revision 2ebbb0bc: Remove pre-check and post-check from Cache-Control
- If both `post-check` and `pre-check` are specified and set to `0`, both
are entirely ignored:
http://blogs.msdn.com/... -
- Thanks, it's been re-enabled (though this came through after 2.2.2-RELEASE was already completed and in testing, so n...
- 10:18 PM Revision 2c5fda82: Combine Cache-Control header in one line
- Sorted by RFC 2616:
Section 14.9.1 `no-cache`
Section 14.9.2 `no-store`
Section 14.9.4 `must-revalidate`
Combined i... -
- fixed
-
- that's a post-2.2.2-RELEASE commit.
Ermal, the tunable is already there to begin with as well. -
- The previous two commits (34dced26 and 34dced26) have a typo that makes the tunable useless.
-
-
- 08:34 PM Revision f1dab9ec: Conversion completed
-
-
- before you upgrade is fine, and probably preferable so it's there on the first boot post-upgrade
-
03:41 AM Bug #4613: Interface not found
- I have add a new Intel w1392 between 2 test !
Thanks for help, I will try to modify loader.conf.local this week end.... -
03:27 AM Bug #4613: Interface not found
- Try setting 'hint.agp.0.disabled=1' in loader.conf.local.
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=196501
-
- I suspect that's the same as described here:
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=196501
if you add... -
- pciconf shows 5 interfaces. Which one is successfully probed and attached?
bge0@pci0:3:1:0: class=0x020000 card=... -
- Firewall with 4 interfaces works in 2.1.5.
After update to 2.2, only 1 interface found but not not the 3 intel w1392... - 06:56 PM Revision 1189757e: Remove redundant/unused call to kldstat
- 06:56 PM Revision 8228109b: Fix operator
- 06:56 PM Revision 3a644b61: Fix typo in variable name
- 06:50 PM Revision cd5084d5: Remove redundant/unused call to kldstat
- 06:48 PM Revision f74636b6: Fix operator
- 06:48 PM Revision 5d6e9640: Fix typo in variable name
-
- having just gone through all the testing for 2.2.2-RELEASE, this most definitely is not a general problem.
need m... -
- Works just fine here. Please, use the forums before you have some specific confirmed issue. Total lack of information...
-
- Manual update of working configuration (in GUI-menu System:Firmware, Invoke pfSense Manual Upgrade) from version 2.2....
- 06:04 PM Revision 53bcf6b9: Updated per SH
- Mostly :)
- 05:55 PM Revision c054d8bc: Conversion completed
-
- This is not limited to FQDNs. When you have URL aliases that rely on local files that do not exist (such as restoring...
- 03:57 PM Revision f4bda8a5: Update completed
- 03:35 PM Revision 5d5cf2b8: Completed
- Ready for review
- 03:16 PM Revision ed3f295a: Conversion completed
- 02:19 PM Revision d9cb9f8e: Changes checkbox layout
- 02:07 PM Revision 9ab4aaca: Added braces for clarity around if(run)
- 01:58 PM Revision 88dbf583: Converted
- Added some Ajax to allow the user to freeze the page (otherwise it is
not possible to view it before it refreshes) - 01:18 PM Revision d84b001e: Merge pull request #1609 from phil-davis/www-bits
- 01:17 PM Revision 4b46e9b1: Fix OpenVPN server listening on associated IPv6 address
- As reported in forum https://forum.pfsense.org/index.php?topic=92174.0
If the ordinary interface is selected for an O... - 01:17 PM Revision 67335f40: Merge pull request #1603 from phil-davis/patch-1
- 01:11 PM Revision 1d421723: When deleting a VIP check it is not used by OpenVPN
- I noticed this when cleaning up VIPs and OpenVPN server when testing for this forum post https://forum.pfsense.org/in...
- 01:11 PM Revision b3f96620: Merge pull request #1608 from phil-davis/patch-2
- 12:21 PM Revision 377e3872: Eliminate white space in Submit value
- 12:19 PM Revision 68951763: Updated
- 11:34 AM Revision f7c1bce7: Updated to bootstrap
- Use of Ajax in this file precluded the use of Form.classes
Table was replaced with bootstrap panel/row and input com... - 11:30 AM Revision c72470f9: Updated to bootstrap
-
- NAT always overrides that where it matches. Browsers have a bad habit of caching the redirect, which is probably the ...
-
06:43 AM Bug #4616 (Not a Bug): Disable webConfigurator redirect rule bypass NAT rules
- System >Advanced > Admin Access > Disable webConfigurator redirect rule
When that param is unchecked, the NAT rul... -
- Sry, do not set AccessLog for squidclamav.conf.default
-
- /var/logs/c-icap/server.log and access.log aren't rotated and don't contain useful information.
It can be very lar... -
- There were error(s) loading the rules: /tmp/rules.debug:186: rule expands to no valid combination - The line in quest...
- 08:25 AM Revision f3ec0487: Code style for small things in usr-local-www
-
- Yes - and uninstalling squid resolves the problem as well. However, both "fast" and "slow" traffic were being proxie...
-
- An implementation of this feature is present at https://forum.pfsense.org/index.php?topic=90753.msg510914#msg510914
... - 04:08 AM Revision 52856a80: When deleting a VIP check it is not used by OpenVPN
- I noticed this when cleaning up VIPs and OpenVPN server when testing for this forum post https://forum.pfsense.org/in...
-
01:22 AM pfSense Packages Bug #4612: syslog-ng creates logrotate cron job, but logrotate doesn't exist
- Here's what I ended up with after further investigation.
* this package expects logrotate to be installed, but it ... -
- I noticed my log files weren't rotating.
The syslog-ng package creates a cronjob "/usr/bin/nice -n20 /usr/local/sb... - 12:53 AM Revision 460610b2: Don't remove all of /usr/local/libdata as obsolete files. User-installed
- package contents may live there, factory default configs live there.
- 12:51 AM Revision 31a810ba: Don't remove all of /usr/local/libdata as obsolete files. User-installed
- package contents may live there, factory default configs live there.
04/13/2015
-
- crash provided in duplicate #4610 attached.
-
- Appears setting sysctl net.inet.ipsec.directdispatch to 0 (can be done under System>Advanced, System Tunables) fixes ...
-
- duplicate of #4537
-
03:07 PM Bug #4610 (Duplicate): IPsec crash on i386 when accessing system's IPs across VPN
- Hello There,
I was installed pfSense 2.2.1-RELEASE (i386) last weekend.
I have setup ipsec site-to-site vpn betwe... -
- you have transparent proxy enabled with squid?
-
- Details and screen shots are at https://forum.pfsense.org/index.php?topic=92214.0
Bug: Limiter blocks port 80 traf... -
02:14 PM pfSense Packages Bug #4609 (Duplicate): squidGuard & pfsense RAM disk compatible
- If enabled System: Advanced: Miscellaneous : RAM Disk, the squidGuard lost self blacklist DB from /var subfolder
I t... -
- If enabled System: Advanced: Miscellaneous : RAM Disk, the squidGuard lost self blacklist DB from /var subfolder
I t... - 02:07 PM Revision 222e6390: Domain override with multiple authoritative DNS servers
- Tell users that this is possible in DNS Resolver and how to achieve it. The code in unbound.inc already supports it a...
- 02:07 PM Revision 7db22354: Merge pull request #1606 from phil-davis/patch-2
-
-
- 01:58 PM Revision 561b76b5: Merge pull request #1605 from Robert-Nelson/issue-4603
- 01:57 PM Revision 52f67967: Merge pull request #1600 from Robert-Nelson/remove-obsolete-logging
-
- Chris Buechler wrote:
> I don't see where that got committed to RELENG_10_1 Renato, you sure that's in there?
You... -
- Yeah, we'll update this ticket then. If you could help confirm the issue fixed at that point, that'd be appreciated.
-
- Okay, great! Will you be referencing this bug in the changelog so I'll know when it goes into the 2.2.3 snapshots?
-
- yes, 2.2.2-RELEASE is already built. we can get that patch into 2.2.3 snapshots at some point after 2.2.2, probably w...
-
11:25 AM Bug #4607 (Resolved): Bridge+CARP crashes/freezes pfSense
- When using the following configuration:
* 1 physical ethernet port with VLANs;
* CARP with virtual address on one o... -
- Reopening this since it's still broken even on 2.2.2. Renato had a lead on a fix, which I confirmed worked, but Ermal...
- 11:00 AM Revision fc2e17f3: Domain override with multiple authoritative DNS servers
- Tell users that this is possible in DNS Resolver and how to achieve it. The code in unbound.inc already supports it a...
-
10:48 AM Feature #4606 (Duplicate): PKI : CA signing external CSR
- I like the internal CA included with pfsense.
I would like to use it to also sign certificates for my servers.
I wo... -
09:25 AM Bug #4605 (Resolved): OpenVPN user/pass fails if usernames and/or passwords contain special characters (reopen bugs 4177 and 4340)
- The fix for bug 4177 (OpenVPN user/pass auth fails if passwords end on special characters.) doesn't completely resolv...
-
-
- I added pull request https://github.com/pfsense/pfsense/pull/1606
That just adds words to the GUI so users can know ... -
- I discovered this is already possible - just enter the domain to override multiple times in the DNS Resolver GUI with...
-
- Pull request has been merged
-
- Hi Chris,
in short term: *They fixed it*!
Long term explanation:
The provider Selfhost has used a "cross-roo... -
- Aleksei Aksenov wrote:
> There is a need to add support for NAT forwarding protocol H323.
> Ready to sponsor this d... -
- The attached PDF (NTP.pdf) shows the following:
- 2 time-server entries: time.apple.com and another pfSense box (i...
04/12/2015
- 09:52 PM Revision 9c6de8b8: bump to 2.2.2-RELEASE
-
- So, no chance for a patch until 2.2.3? I'd like to contribute on the squid package for pfSense, but we can't rely on...
-
-
- fixed
-
- I submitted a fix as PR # 1605.
-
- Package log files are reinitialized on each boot causing their contents to be lost.
-
04:04 AM Bug #4602 (Not a Bug): Captive Portal pfSense 2.2 not working as before when used with CARP
- I feel that there might be a bug in captive portal from pfSense 2.2 when used with CARP.
With pfSense 2.1.5, I had...
Also available in: Atom