pfSense

02/27/2016

11:35 PM Bug #5936: RRD Std. Dev. Overwhelming Graph

Thanks for the quick turnaround. Don't care about the existing data. It's strictly a dev system. Maybe others do. ... NOYB NOYB

11:01 PM Bug #5936: RRD Std. Dev. Overwhelming Graph

The dpinger fix is pushed. It probably won't be in pfSense snapshots until Monday.
Please note that the fix will n... Denny Page

09:30 PM Bug #5936: RRD Std. Dev. Overwhelming Graph

It's an integer overflow on 32 bit. I'll have a fix up shortly. Denny Page

07:46 PM Bug #5936: RRD Std. Dev. Overwhelming Graph

2.3-BETA (i386)
built on Fri Feb 26 13:07:04 CST 2016
FreeBSD 10.3-BETA2
dpinger parameters:
Weight: 1
Dat... NOYB NOYB

01:56 PM Bug #5936: RRD Std. Dev. Overwhelming Graph

Are you on 64 bit or 32 bit? What dpinger parameters are you using? Denny Page

04:27 AM Bug #5936 (Resolved): RRD Std. Dev. Overwhelming Graph

Standard deviation is overwhelming the RRD quality graph scale. Rendering the graph not very useful. Can the standa... NOYB NOYB

07:55 PM Bug #5937 (Closed): Not Receiving Redmine Bug Update Email Notifications

For past couple days have not received any email notifications of created or updated bug reports. NOYB NOYB

05:10 PM Bug #5935 (Feedback): firewall_rules.php - no schedule preview

Anonymous

05:09 PM Bug #5935: firewall_rules.php - no schedule preview

In my testing I find that the schedule pop-up is not blank, but shows the schedule name and the schedule description.... Anonymous

10:02 AM Bug #5935: firewall_rules.php - no schedule preview

Yes, exactly. See attached. Marco Novielli

06:37 AM Bug #5926 (Resolved): Collapsible Sections generate JavaScript error when toggled

Chris Buechler

06:33 AM Todo #5903 (Feedback): Review 3rd party list in license.php

think I got everything here Chris Buechler

06:08 AM pfSense Packages Bug #5932: Suricata / Alerts - can't clear alerts

Hi
New Suricata installation. Nothing fancy.
Add Snort VRT Rules. Add 2 Interfaces configured with resolve flo... Raul Ramos

03:24 AM Bug #5933 (Resolved): status_logs_filter.php not showing ICMPv6 logs

works, thanks NOYB Chris Buechler

02:09 AM Bug #5933: status_logs_filter.php not showing ICMPv6 logs

Pull request to fix submitted.
https://github.com/pfsense/pfsense/pull/2690
NOYB NOYB

12:01 AM Bug #5934 (Feedback): When two distinct Phase 1 are configured, only the first one connects ar startup

subject is definitely not an issue.
Guessing this is the one using AH (no encryption) rather than ESP that's affe... Chris Buechler

02/26/2016

11:51 PM Bug #5935 (Confirmed): firewall_rules.php - no schedule preview

File attachments fixed. You mean the hover over the schedule on firewall_rules.php? That looks to be blank where it s... Chris Buechler

11:47 PM Bug #5935: firewall_rules.php - no schedule preview

we just upgraded redmine today and moved it to a new server, apparently file attachment issues. testing Chris Buechler

11:35 PM Bug #5935: firewall_rules.php - no schedule preview

Picture not uploading here. Marco Novielli

11:34 PM Bug #5935 (Resolved): firewall_rules.php - no schedule preview

I believe there is supposed to be a preview of the schedule when hovering over it in firewall rules. It doesn't show... Marco Novielli

11:23 PM Bug #5921 (Feedback): Freeze when Gateway goes down

going to need more than that to go on, it's certainly not replicable to freeze a machine when a gateway goes down. No... Chris Buechler

08:45 PM Bug #5916 (Resolved): General Setup page cannot be saved with blank DNS server slots

yeah this is all good, thanks! pointy hat to me for not thinking of this use case Chris Buechler

08:40 PM Bug #5916: General Setup page cannot be saved with blank DNS server slots

Tested in 2.3.b.20160226.1008 and everything looks good. I think this can be closed. Mark Furneaux

07:54 PM Bug #5931 (Resolved): system_rotues_edit.php: "Destination Network" field is not allowing an IPv6 address to be entered.

fixed Chris Buechler

10:33 AM Bug #5931 (Feedback): system_rotues_edit.php: "Destination Network" field is not allowing an IPv6 address to be entered.

Fixed by commit:954202d03343e3bfbba9ada401ff7c54dad571f2 Jim Pingle

10:24 AM Bug #5931 (Resolved): system_rotues_edit.php: "Destination Network" field is not allowing an IPv6 address to be entered.

On system_rotues_edit.php the "Destination Network" field does not allow an IPv6 address to be entered, it yields too... Jim Pingle

04:53 PM pfSense Packages Bug #5932 (Feedback): Suricata / Alerts - can't clear alerts

Screenshot please :) Anonymous

10:29 AM pfSense Packages Bug #5932 (Resolved): Suricata / Alerts - can't clear alerts

Under Suricata / Alerts I can't seem to clear alert entries. Clicking on Clear button shows two popups but doesn't cl... Ivor Kreso

02:21 PM Bug #5930 (Resolved): wrong 'ifconfig 0.0.0.2 0.0.0.1' line in OpenVPN conf

fixed Chris Buechler

01:43 AM Bug #5930 (Feedback): wrong 'ifconfig 0.0.0.2 0.0.0.1' line in OpenVPN conf

should be good Chris Buechler

01:42 AM Bug #5930 (Resolved): wrong 'ifconfig 0.0.0.2 0.0.0.1' line in OpenVPN conf

Regression after the recent IP function changes, OpenVPN ends up with: ... Chris Buechler

12:50 PM Bug #5934: When two distinct Phase 1 are configured, only the first one connects ar startup

Some clarification...
The two Phase 1 are not going out in the same Interface in the "Central Server" but through ... Luiz Fernando Cavalcanti

12:12 PM Bug #5934 (Not a Bug): When two distinct Phase 1 are configured, only the first one connects ar startup

As the attached files will illustrate if you have two distinct phase 1 entries with equally distinct and respective P... Luiz Fernando Cavalcanti

11:46 AM Bug #5933 (Resolved): status_logs_filter.php not showing ICMPv6 logs

ICMPv6 logs are correct in filter.log, but missing from status_logs_filter.php. Other protocols with IPv6 don't seem ... Chris Buechler

11:23 AM Bug #5383: CODELQ Traffic Shaper Causes Panic and Reboot During Speed Test

I upgraded to 150/150 as well, enabled CODELQ on all interfaces and experienced the same crashing. I've attached the... Anonymous

10:36 AM pfSense Packages Todo #5588 (Resolved): Convert the pfSense package Suricata (security/pfSense-pkg-suricata) to Bootstrap

Looks good in general and with some basic testing. I fixed a problem listing the snort VRT rules in the category list... Jim Pingle

08:02 AM pfSense Packages Todo #5588 (Feedback): Convert the pfSense package Suricata (security/pfSense-pkg-suricata) to Bootstrap

All UI files (including the dashboard widget) have been converted and tested for appearance and control actions. This... Anonymous

08:06 AM Bug #5928 (Resolved): PFI Config Loading for the Installer is not working on 2.3

Tested by JimP Renato Botelho

07:55 AM Feature #4905 (Needs Patch): Expose Curve25519 DH group to UI

The Curve 25519 patch referenced here was never incorporated into StrongSwan. I have not been able to determine what ... Anonymous

07:51 AM Feature #5929 (Rejected): Choose a default interface assignment for the first boot or reset of a pfSense

Already in 2.3. Duplicate of #4535 Jim Pingle

07:28 AM Bug #5926 (Feedback): Collapsible Sections generate JavaScript error when toggled

Fixed in https://git.pfmechanics.com/pfsense/pfsense/commit/c24d39e07edce207537910e5424d3d178fb506cb
The updateWid... Anonymous

01:50 AM Bug #5910 (Resolved): apply button on adding ipv6 static mapping deletes dhcpv6 settings

once I got a scenario that presented an apply changes button, that was easily replicable. Fixed now Chris Buechler

01:14 AM Bug #5914 (Resolved): services_dhcpv6.php enable/disable show/hide fields issue

all good Chris Buechler

01:08 AM Bug #5913 (Resolved): Link cycling issue with some ix NICs

all the circumstances that failed before are good on the latest 2.3 snapshot Chris Buechler

02/25/2016

09:30 PM Feature #5929 (Rejected): Choose a default interface assignment for the first boot or reset of a pfSense

Hi,
We have some appliances that have at least 8 ports connected for each device (custom built due to interface ne... Daniel Subert

05:39 PM Bug #5927 (Closed): reset to defaults not working on live CD

Sounds like it can be summarized as updated subject. Live CD mode no longer exists in 2.3 so that's not something we'... Chris Buechler

04:39 AM Bug #5927 (Closed): reset to defaults not working on live CD

Hello,
Version pfSense "pfSense-memstick-serial-2.2.6-RELEASE-i386" install on a USB key, the router is a net6501-... Nicolas Rojo

12:37 PM Bug #5928 (Feedback): PFI Config Loading for the Installer is not working on 2.3

Fixed in bsdinstaller 2.0.9 Renato Botelho

11:57 AM Bug #5928: PFI Config Loading for the Installer is not working on 2.3

Talked with Renato and he said this is due to how the installer works on 2.3, but he's working in this area of factor... Jim Pingle

11:33 AM Bug #5928 (Resolved): PFI Config Loading for the Installer is not working on 2.3

The automatic loading of a configuration file from a USB memstick is not working as it did previously. The procedure ... Jim Pingle

11:59 AM Todo #5895: Remove "LiveCD" name from ISO image filename and related info from docs

Doc wiki references have been updated/removed in all places except for those that list actual filenames (which refere... Jim Pingle

11:52 AM Bug #5913: Link cycling issue with some ix NICs

Updated the ix driver to Intel version 3.1.14. Luiz Souza

09:35 AM Bug #5925 (Resolved): interfaces_ppps_edit.php: 4c746b8c832417578fe8e186674b813524836517 broke interface selection

Looks good to me, thanks! Jim Pingle

08:06 AM Bug #5925 (Feedback): interfaces_ppps_edit.php: 4c746b8c832417578fe8e186674b813524836517 broke interface selection

Should be fixed now, let me know if something is still wrong.
Sorry for the breakage. Luiz Souza

04:10 AM Bug #5914: services_dhcpv6.php enable/disable show/hide fields issue

Applied in changeset commit:611cc5ca74fdb320ad0e726d13a3ec2011dfa6ce. Renato Botelho

02:18 AM Bug #5926: Collapsible Sections generate JavaScript error when toggled

PR Submitted
https://github.com/pfsense/pfsense/pull/2686
NOYB NOYB

02/24/2016

08:03 PM Bug #5379 (Resolved): Installer runs out of RAM and fails with < ~600 MB RAM

through multiple attempts again, this is definitely no longer an issue. No problem with 256 MB RAM in multiple circum... Chris Buechler

05:09 PM Bug #5926 (Resolved): Collapsible Sections generate JavaScript error when toggled

When you manually click on the icon to collapse a "collapsible SECTION" within the new Bootstrap framework, you recei... Bill Meeks

03:53 PM Bug #5925 (Resolved): interfaces_ppps_edit.php: 4c746b8c832417578fe8e186674b813524836517 broke interface selection

After commit:4c746b8c832417578fe8e186674b813524836517 the interface list on the PPP edit screen changed from a physic... Jim Pingle

03:50 PM Bug #5910 (Feedback): apply button on adding ipv6 static mapping deletes dhcpv6 settings

Applied in changeset commit:8f36f87aa5df4afc66de5bc1c78ae81e2404ef1c. Jim Pingle

03:24 PM Bug #5910 (Confirmed): apply button on adding ipv6 static mapping deletes dhcpv6 settings

Yep, definitely an issue.
Edit a v6 static mapping, click save, looks OK until you click Apply and then the settin... Jim Pingle

03:12 PM pfSense Packages Bug #5912 (Rejected): OpenVPN Client Export Utility works only if "peer CA" in the daemon is set to an internal CA

I can't replicate this as stated. The current export package does not check for the CA's private key. Perhaps somethi... Jim Pingle

03:03 PM Bug #5924 (Resolved): system_certmanager.php: "Certificate Type" selection of "CA" is broken, lacks good purpose

Jim Pingle

02:50 PM Bug #5924 (Feedback): system_certmanager.php: "Certificate Type" selection of "CA" is broken, lacks good purpose

Applied in changeset commit:1c2b01a74ea2d87f2e2a5d1e056dac33c3a75cc5. Jim Pingle

02:40 PM Bug #5924 (Resolved): system_certmanager.php: "Certificate Type" selection of "CA" is broken, lacks good purpose

The "Certificate Type" selection when creating a new certificate offers a choice of "CA", but the choice is broken an... Jim Pingle

02:47 PM Bug #5453 (Resolved): Wifi card using the ath driver running in hostap mode causes a panic when a client joins.

This appears solid now. Confirmed the panic on a previous snap, then updated and now a client can join and pass data ... Jim Pingle

01:29 PM Bug #5884 (Resolved): find_carp_interface() was removed, but it is still referenced by packages

all good Chris Buechler

07:19 AM Bug #5884 (Feedback): find_carp_interface() was removed, but it is still referenced by packages

A fix was committed to Quagga and OpenBGPd packages.
All the references of find_carp_interface() were removed. Luiz Souza

01:28 PM Bug #5907: User Group Deleted Even If Say Cancel

thanks NYOB. Chris Buechler

06:57 AM Bug #5907 (Resolved): User Group Deleted Even If Say Cancel

PR 2685 tested and merged. Thank you! Anonymous

02:01 AM Bug #5907: User Group Deleted Even If Say Cancel

Pull request submitted
https://github.com/pfsense/pfsense/pull/2685
NOYB NOYB

01:19 PM Bug #5923 (Resolved): interfaces.inc: Test for ix interfaces for ALTQ is incorrect

Chris Buechler

12:50 PM Bug #5923 (Feedback): interfaces.inc: Test for ix interfaces for ALTQ is incorrect

Applied in changeset commit:af7698018fe8093c25931b75a3798f197bf87d1c. Jim Pingle

12:46 PM Bug #5923: interfaces.inc: Test for ix interfaces for ALTQ is incorrect

Chris tested ALTQ on ix and confirmed it worked, so it's safe to fix. Jim Pingle

12:45 PM Bug #5923 (Resolved): interfaces.inc: Test for ix interfaces for ALTQ is incorrect

The test in is_altq_capable() for ix interfaces is incorrect. It's looking for interfaces named "ixgbe" when they are... Jim Pingle

07:31 AM Feature #5922: SNMP - enable SNMP v3 functionality

I removed the IPv6 portion of the title and description because bsnmpd does not support IPv6 currently. It does suppo... Jim Pingle

04:26 AM Feature #5922 (New): SNMP - enable SNMP v3 functionality

Would be good to add SNMP v3 support w/ encryption for extra security. A P

02/23/2016

05:39 PM Bug #5413: Reduce disruptions when changing DNS records from DHCP leases in Unbound

robi: your issue is almost certainly a different root cause, this issue just exacerbates it. Post a new thread on the... Chris Buechler

03:25 AM Bug #5413: Reduce disruptions when changing DNS records from DHCP leases in Unbound

I had to go back to DNS Forwarder (dnsmasq) because of this.
In my case, unbound was restarting itself every 2 secon... robi robi

04:49 AM Bug #5920 (Resolved): Custom Install: error loading script, Internal Lua error

The problem originally reported in this ticket is gone. The issue you are seeing now looks like a hardware problem, b... Renato Botelho

03:17 AM Bug #5921 (Not a Bug): Freeze when Gateway goes down

I have one failover group, tier 1 is WAN, tier 2 is another Gateway(Router) on the LAN.
As you can see in the logs a... Joel Linn

02/22/2016

09:01 PM Bug #5920: Custom Install: error loading script, Internal Lua error

Ok, tried this on two different systems with the same symptoms on both. I attached a screenshot of the errors I'm ge... Angel Torres

03:25 PM Bug #5920: Custom Install: error loading script, Internal Lua error

Yeah, you probably have a bad snapshot, please try using most recent one Renato Botelho

03:17 PM Bug #5920: Custom Install: error loading script, Internal Lua error

The fix was to the bsdinstaller port in our ports repository so it wouldn't show in the main repo: https://github.com... Jim Pingle

03:12 PM Bug #5920: Custom Install: error loading script, Internal Lua error

Was using a snap from early Friday, didnt see anything in the commits involving the installer so didnt update this mo... Angel Torres

02:48 PM Bug #5920: Custom Install: error loading script, Internal Lua error

What is the exact date and filename of the ISO you're attempting to install from?
There was a known issue with the... Jim Pingle

02:39 PM Bug #5920: Custom Install: error loading script, Internal Lua error

Using a desktop Dell Optiplex 755 SFF with a dual intel NIC. I have a similar system that i can test again on to rul... Angel Torres

02:31 PM Bug #5920 (Feedback): Custom Install: error loading script, Internal Lua error

can't replicate. what kind of system is that on? Chris Buechler

01:11 PM Bug #5920 (Resolved): Custom Install: error loading script, Internal Lua error

Using the Custom install, i get the Error Loading Script - An internal Lua error occurred while trying to run the scr... Angel Torres

12:46 PM Feature #5919 (Duplicate): Add a control to the web gui to allow the setting of leftsendcert in IPSec

In some IPSec tunnels the responder end requires the initiator to set send the certificate and that's only possible b... Steve Wheeler

11:48 AM Bug #5453 (Feedback): Wifi card using the ath driver running in hostap mode causes a panic when a client joins.

We reverted the FreeBSD 11 wireless import and decided to keep stock FreeBSD stable/10 wireless stack in place for now Renato Botelho

08:54 AM Bug #5916: General Setup page cannot be saved with blank DNS server slots

2680 reverted. Anonymous

04:29 AM Bug #5520: IPsec status seems to hang preventing access to the webgui.

Hey Jim!
You can call it fixed, it didn`t happen on my 2 systems too. Greg M

01:44 AM Bug #5520: IPsec status seems to hang preventing access to the webgui.

Jim Thompson wrote:
> We're now at 45 hours since that post, so a total of 97 hours of run time, assuming that it ha... Jim Thompson

01:43 AM Bug #5520: IPsec status seems to hang preventing access to the webgui.

We're now at 45 hours since that post, so a total of 97 hours of run time, assuming that it hasn't hung yet.
Last ... Jim Thompson

12:17 AM Bug #5913: Link cycling issue with some ix NICs

> It doesn't happen on any Intel 10G cards with SFP+ that we have around. The XG-C2758 has no such problem.
XG-C2758... Jim Thompson

02/21/2016

11:28 PM Bug #5918 (Resolved): IPsec dashboard widget: Tunnels tab shows hard-to-read alternating row color in dark theme

Please see attachment.
In the dark theme, the second and subsequent even-numbered rows in the "Tunnels" tab of the... Andrew M

11:21 PM Bug #5917 (Resolved): IPsec status widget border shows white edge on right side of dashboard widget in dark theme with Chrome

Please see attachment.
This white edge appears to only be present in Google Chrome.
Issue is only visible when "d... Andrew M

09:22 PM Bug #5916: General Setup page cannot be saved with blank DNS server slots

On a second look, 2680 will always crash when no servers are populated, so it is the one which must be reverted. Mark Furneaux

09:09 PM Bug #5916: General Setup page cannot be saved with blank DNS server slots

Actually there is harm in both. The change in https://github.com/pfsense/pfsense/pull/2680 will cause a crash if all ... Mark Furneaux

07:51 AM Bug #5916 (Feedback): General Setup page cannot be saved with blank DNS server slots

Anonymous

07:50 AM Bug #5916 (Resolved): General Setup page cannot be saved with blank DNS server slots

No harm in applying both. Anonymous

07:40 AM Bug #5916 (Feedback): General Setup page cannot be saved with blank DNS server slots

Applied in changeset commit:bdfe939c4e1d30ba0d10bd6b9e995f1129bb483e. Phillip Davis

06:52 AM Bug #5916: General Setup page cannot be saved with blank DNS server slots

Now I see that there is an alternative solution already in pull request https://github.com/pfsense/pfsense/pull/2678
... Phillip Davis

06:49 AM Bug #5916: General Setup page cannot be saved with blank DNS server slots

This helps: https://github.com/pfsense/pfsense/pull/2680 Phillip Davis

08:47 PM Bug #5857 (Feedback): VLANs on interface with 1500 MTU PPPoE end up with 1508 MTU

The code was reworked and tested with many different settings. All the known issues were fixed. Luiz Souza

02:30 PM Bug #5914: services_dhcpv6.php enable/disable show/hide fields issue

Applied in changeset commit:9eeb91dd85329a24f2aebb780ef1c7df46dbd05d. Anonymous

02:26 PM Bug #5914 (Feedback): services_dhcpv6.php enable/disable show/hide fields issue

Anonymous

02/20/2016

12:21 PM Bug #5916 (Resolved): General Setup page cannot be saved with blank DNS server slots

If there are 2 or more blank DNS server addresses on the System/General Setup page, saving the page will result in th... Mark Furneaux

07:23 AM pfSense Packages Bug #5318: Upgrade FreeRadius to 2.2.9

Do you guys think that using pkg install freeradius ( 2.2.9 available ) and make use of that binary would mess things... Tommaso Carrara

07:22 AM pfSense Packages Bug #5318: Upgrade FreeRadius to 2.2.9

Oh, sorry I read 2.2.3 for some reasons, and that's why I didn't get it initially.
Thanks Tommaso Carrara

05:12 AM Bug #5907: User Group Deleted Even If Say Cancel

We have no Windows devices with touch or stylus to try. IE's a small portion of the user base, and touch/stylus is a ... Chris Buechler

05:06 AM Bug #5907: User Group Deleted Even If Say Cancel

It is more widespread that just the group manager. It appears to be system wide. Just verified same behavior on fir... NOYB NOYB

04:56 AM Bug #5907: User Group Deleted Even If Say Cancel

Disagree that it is not a bug. It works fine in 2.2.6 with touch or stylus.
It's not related to the method used f... NOYB NOYB

04:33 AM Bug #5907 (Not a Bug): User Group Deleted Even If Say Cancel

Weird. Yeah that's not something we're going to be able to fix. :) Maybe it's mis-clicking onto OK instead, that seem... Chris Buechler

04:30 AM Bug #5907: User Group Deleted Even If Say Cancel

Okay found a works/doesn't work data point. Make sure you are sitting down for this.
Clicking the trashcan with m... NOYB NOYB

04:22 AM Bug #5907: User Group Deleted Even If Say Cancel

Don't really know what to say... But I'll try...
Happens without fail here. Can reproduce every time at will.
S... NOYB NOYB

03:08 AM Bug #5907: User Group Deleted Even If Say Cancel

Doesn't happen on Windows 8.1 and IE 11 here Chris Buechler

04:44 AM Bug #5520: IPsec status seems to hang preventing access to the webgui.

The change from strongswan's 1185-vici-action-unlock branch was brought in this week in hopes of addressing this.
... Chris Buechler

04:10 AM Bug #4675 (Resolved): DHCPv6 DDNS doesn't work properly

works Chris Buechler

03:45 AM Bug #5915 (Resolved): DNS server IPs shouldn't be configurable multiple times

fixed Chris Buechler

03:45 AM Bug #5915 (Resolved): DNS server IPs shouldn't be configurable multiple times

Since static routes are added for DNS server IPs, specifying them multiple times can result in non-functional configs... Chris Buechler

03:23 AM Feature #3029: DHCPv6 Server/RA page should list interfaces that are configured to track DHCP-PD

Cleaned up a lot of this. DHCPv6 server and radvd can now be disabled with track6. Interfaces that haven't gotten a P... Chris Buechler

03:02 AM Bug #5899 (Resolved): diag_tables.php- Poor performance with large tables

much faster than 2.2.x in all browsers now Chris Buechler

02/19/2016

11:58 PM Bug #5914 (Resolved): services_dhcpv6.php enable/disable show/hide fields issue

Browse to services_dhcpv6.php on an interface that has it enabled. Uncheck the enable box, and it doesn't hide the fi... Chris Buechler

11:20 PM Bug #5892 (Resolved): Restoring a backup with vlans on lagg can confuse GUI (vlan parent does not exist)

is_interface_vlan_mismatch checks if interfaces exist, in the case of lagg it might not at time of config restore. Th... Chris Buechler

10:59 PM Bug #5845 (Resolved): New URL Table (Ports) alias can cause invalid ruleset when alias changes not yet applied

the remaining issue here outside all the validation added in #5848 fixed by validating URL table ports alias is valid... Chris Buechler

09:04 PM Bug #5907: User Group Deleted Even If Say Cancel

The cancel button works in Chrome. Group is not deleted.
The cancel button does not work in IE. After page refre... NOYB NOYB

08:19 PM Bug #5907: User Group Deleted Even If Say Cancel

I'll fire things up here in a little while and see if I can still replicate the issue.
There really wasn't much to i... NOYB NOYB

05:53 PM Bug #5907: User Group Deleted Even If Say Cancel

I cannot reproduce the issue either. Anonymous

05:47 PM Bug #5907 (Feedback): User Group Deleted Even If Say Cancel

not seeing that in IE, Firefox, or Chrome. Anything more to it than that to replicate? Chris Buechler

03:25 AM Bug #5907 (Resolved): User Group Deleted Even If Say Cancel

NOYB NOYB

08:39 PM Feature #3029: DHCPv6 Server/RA page should list interfaces that are configured to track DHCP-PD

AWESOME to see this finally in pfSense!!! A few things I've noticed just from my quick use of it...
- If the "Enab... Anonymous

07:00 AM Feature #3029 (Feedback): DHCPv6 Server/RA page should list interfaces that are configured to track DHCP-PD

Applied in changeset commit:ada3eeb33cadce1c05b67462c03bb51d6646cba2. Renato Botelho

08:28 PM Bug #5913 (Resolved): Link cycling issue with some ix NICs

There's an issue with the XG-1540's 10 Gb NICs where they cycle link upon applying certain settings to the interface,... Chris Buechler

04:17 PM pfSense Packages Bug #5912 (Rejected): OpenVPN Client Export Utility works only if "peer CA" in the daemon is set to an internal CA

With pfSense 2.2.6, and OpenVPN Client Export Utility 1.3.0 I can't export a client config unless the "peer CA" of th... Marco B.

03:44 PM Bug #5909 (Closed): Some Privilege Assignments Not Working

Jim Pingle

01:20 PM Bug #5909: Some Privilege Assignments Not Working

Now it works. Thanks.
P.S. Might consider adding the Gold menu. Don't recall seeing that in the privileges list. NOYB NOYB

01:00 PM Bug #5909 (Feedback): Some Privilege Assignments Not Working

Applied in changeset commit:44c30eb309d2575ec0900d4670ce98136eb9f3ab. Jim Pingle

12:45 PM Bug #5909 (Assigned): Some Privilege Assignments Not Working

Hmm, I'll check again. I'm seeing that now as well. Jim Pingle

12:44 PM Bug #5909: Some Privilege Assignments Not Working

Now all menus show. Even the ones without privileges. Confusing and unable for the user to know what they actually ... NOYB NOYB

08:40 AM Bug #5909: Some Privilege Assignments Not Working

Applied in changeset commit:8559c9d9cddaab8da792af71eeb69d4230bd6508. Jim Pingle

08:28 AM Bug #5909 (Feedback): Some Privilege Assignments Not Working

1. The Dashboard privilege worked when requesting "/index.php" but not when requesting "/", I pushed a fix.
2. The H... Jim Pingle

06:26 AM Bug #5909 (Assigned): Some Privilege Assignments Not Working

Jim Pingle

03:38 AM Bug #5909 (Closed): Some Privilege Assignments Not Working

For example members of a group with
WebCfg - Dashboard (all) Allow access to all pages required for the dashboard. ... NOYB NOYB

03:22 PM Bug #4719: IKEv2 to Cisco ASA results in TS mismatch when initiation triggered by traffic

Jim Thompson wrote:
> "Affected version is 2.2.2 and 2.2.3."
>
> Does this not affect 2.3?
I removed that from... Chris Buechler

10:37 AM Bug #4719: IKEv2 to Cisco ASA results in TS mismatch when initiation triggered by traffic

"Affected version is 2.2.2 and 2.2.3."
Does this not affect 2.3? Jim Thompson

01:36 PM Bug #5911 (Resolved): Unable to Remove Last User From User Group

Anonymous

01:35 PM Bug #5911: Unable to Remove Last User From User Group

OK good :) Anonymous

01:33 PM Bug #5911: Unable to Remove Last User From User Group

Never mind. I failed to hit the save button. The list of privileges has it off the bottom of the screen. Out of si... NOYB NOYB

01:31 PM Bug #5911: Unable to Remove Last User From User Group

Visually it works but not really.
The user is no longer in the group's list but is not returned to the non member li... NOYB NOYB

01:30 PM Bug #5911: Unable to Remove Last User From User Group

Applied in changeset commit:2ccf2ede9e8fdfd236b221d9d19464dd8975e682. Anonymous

01:19 PM Bug #5911 (Feedback): Unable to Remove Last User From User Group

Fixed. Anonymous

01:06 PM Bug #5911 (Confirmed): Unable to Remove Last User From User Group

Anonymous

12:50 PM Bug #5911 (Resolved): Unable to Remove Last User From User Group

NOYB NOYB

12:42 PM Bug #5908 (Resolved): Returned to Wrong User Group After Adding Permissions

Renato Botelho

12:41 PM Bug #5908: Returned to Wrong User Group After Adding Permissions

That seems to work. Thanks. NOYB NOYB

07:40 AM Bug #5908: Returned to Wrong User Group After Adding Permissions

Applied in changeset commit:06683083f76252eb577cf146c33b365d46a3a615. Anonymous

07:28 AM Bug #5908: Returned to Wrong User Group After Adding Permissions

OK thanks. There was a usort in system_usermanager_addprivs that was causing this. I assume the intention was to sort... Anonymous

07:04 AM Bug #5908: Returned to Wrong User Group After Adding Permissions

Have no expectation regarding the list order. My expectation is not to be returned to one of the other groups instea... NOYB NOYB

06:56 AM Bug #5908 (Feedback): Returned to Wrong User Group After Adding Permissions

Is it your expectation that the list of groups displayed by system_groupmanager.php should be sorted alphabetically? ... Anonymous

03:32 AM Bug #5908 (Resolved): Returned to Wrong User Group After Adding Permissions

After having created a new user group it is at the bottom of the list rather than being sorted in correct order. Whe... NOYB NOYB

11:51 AM Bug #5910 (Resolved): apply button on adding ipv6 static mapping deletes dhcpv6 settings

the apply button upon adding or editing ipv6 static mappings causes dhcpv6 to loose settings and deactivates dhcpv6
... Michael Kellogg

11:46 AM pfSense Packages Bug #5318 (Feedback): Upgrade FreeRadius to 2.2.9

To get FreeRADIUS 2.2.9 you have to be running pfSense 2.3, which is still beta (but quite stable) Jim Pingle

11:42 AM pfSense Packages Bug #5318: Upgrade FreeRadius to 2.2.9

Hi there,
I have pfsense 2.2.6 running, but I can' t see any freeradius 2.2.9 available. The latest, which is the ... Tommaso Carrara

07:32 AM Bug #5379 (Feedback): Installer runs out of RAM and fails with < ~600 MB RAM

I installed it 5 times on a VM with 256Mb of RAM and was unable to reproduce. Probably overcome by events since insta... Renato Botelho

07:14 AM Todo #5895: Remove "LiveCD" name from ISO image filename and related info from docs

Item 2 has been fully deployed. Snapshots are now output as "pfSense-2.3-BETA-amd64-20160217-1500.iso.gz" (No "LiveCD... Jim Pingle

06:59 AM Todo #5777: Review code for text that is not internationalized well

I finished reviewing files in /usr/local/www and /etc/inc
The last commit is https://github.com/pfsense/pfsense/comm... Phillip Davis

01:35 AM Bug #5848 (Resolved): Downloaded rules data validation

This all works.
Alex Vergilis wrote:
> Is there an md5 validity check for URL Table aliases that can be implemen... Chris Buechler

12:53 AM Bug #5887: hardware_offloading_applyflags sets/unsets most values when already set correctly

That caused a variety of fallout in a number of cases. encaps either doesn't report correctly, or things don't work w... Chris Buechler

02/18/2016

10:57 PM Bug #4719: IKEv2 to Cisco ASA results in TS mismatch when initiation triggered by traffic

details of what's happening here:
https://wiki.strongswan.org/issues/1313
Chris Buechler

06:56 PM Bug #4704 (Resolved): IKEv2 to Cisco ASA won't bring up multiple P2 networks

Initiates fine from either side. Rekeys fine. works
Roman H wrote:
> Is it already in night / snapshot build and ... Chris Buechler

05:16 PM Bug #4704: IKEv2 to Cisco ASA won't bring up multiple P2 networks

Great to hear!
Is it already in night / snapshot build and worth to test? Roman H

04:05 PM Bug #4704 (Feedback): IKEv2 to Cisco ASA won't bring up multiple P2 networks

added a checkbox for IKEv2 P1s for "Split connections", which splits out the ipsec.conf conn entries. Confirmed this ... Chris Buechler

09:14 AM Bug #5899: diag_tables.php- Poor performance with large tables

Doing some more testing this morning I find that the browser lockup I was seeing is peculiar to one particular versio... Anonymous

07:17 AM Bug #5899: diag_tables.php- Poor performance with large tables

Agreed. Thanks again for the patch. I'll as Jared to look over the CSS to see if he can find an issue there. Anonymous

07:16 AM Bug #5899: diag_tables.php- Poor performance with large tables

I'd prefer not to have the whole thing pre tagged. It's nice to have the tables formatted where performance is pract... NOYB NOYB

07:08 AM Bug #5899: diag_tables.php- Poor performance with large tables

There are a lots of lists available from many sources. Many of them are quite large. I use a CIPB (COUNTRY IP BLOCK... NOYB NOYB

06:51 AM Bug #5899: diag_tables.php- Poor performance with large tables

Not loading the sorting stuff makes the difference between locking up the browser and slow but usable for me so I wil... Anonymous

06:47 AM Bug #5905 (Feedback): Hard coded background colors on status_gateways.php

Anonymous

01:56 AM Bug #4428 (Confirmed): Setting media option on em(4) leads to infinite link cycling

happened upon this in testing #5888 on 2.3. Setting mediaopt on em(4) (at least in a FW-7541) cycles link, then rc.li... Chris Buechler

01:32 AM Todo #4858 (Resolved): Finish/fix CARP uniqid changes

Dynamic DNS on gateway groups with VIPs was broken. It's working now including IP alias and CARP VIPs. That should be... Chris Buechler

01:09 AM Bug #5872 (Resolved): Creating a network alias with both IPv6 subnets and FQDNs results in a table with only the FQDN entries.

this does work now. The last test I was getting same as in original report, is correct now on a variety of cases that... Chris Buechler

02/17/2016

09:11 PM Bug #5905: Hard coded background colors on status_gateways.php

I think I made those defines about a year ago. Problem is Bootstrap gives us only four colors and they are fairly den... Anonymous

03:34 PM Bug #5905 (Resolved): Hard coded background colors on status_gateways.php

I noticed hardcoded background colors on status_gateways.php that haven't been converted to bootstrap classes (succes... Jared Dillard

09:02 PM Bug #5906 (Duplicate): OPENVPN fails to failover when using multiple LDAP authentication backends

duplicate of #3022 Chris Buechler

08:45 PM Bug #5906 (Duplicate): OPENVPN fails to failover when using multiple LDAP authentication backends

Selecting multiple LDAP authentication backends doesn't cause the Openvpn server to failover the second one
if the f... Evelio Vila

08:31 PM Bug #5899: diag_tables.php- Poor performance with large tables

Chris Buechler wrote:
> still just locks up my Firefox and IE when attempting to load that page.
I'm displaying t... NOYB NOYB

08:26 PM Bug #5899: diag_tables.php- Poor performance with large tables

Steve Beaver wrote:
> Perhaps we need to do some server side paging?
Problem with that is losing the ability to s... NOYB NOYB

08:20 PM Bug #5899: diag_tables.php- Poor performance with large tables

still just locks up my Firefox and IE when attempting to load that page. Chris Buechler

05:27 PM Bug #5899: diag_tables.php- Poor performance with large tables

Steve Beaver wrote:
> OK so I was a factor of ten out :)
>
> The slowness appears to be coming from the table sor... NOYB NOYB

04:25 PM Bug #5899: diag_tables.php- Poor performance with large tables

OK so I was a factor of ten out :)
The slowness appears to be coming from the table sorting library. As a workarou... Anonymous

04:18 PM Bug #5899: diag_tables.php- Poor performance with large tables

Steve Beaver wrote:
> Using Firefox bogons6 just locks up the browser for ever. Even removing all the table code and... NOYB NOYB

02:17 PM Bug #5899: diag_tables.php- Poor performance with large tables

Jim Thompson wrote:
> lowering priority. This isn't required functionality (it's part of the diag menu, and there i... NOYB NOYB

02:17 PM Bug #5899: diag_tables.php- Poor performance with large tables

understood, but I still have to perform triage, or we won't ever get to a 2.3-RELEASE Jim Thompson

02:14 PM Bug #5899: diag_tables.php- Poor performance with large tables

Same table in ver. 2.2.6 isn't a problem in any of those browsers. NOYB NOYB

02:12 PM Bug #5899: diag_tables.php- Poor performance with large tables

lowering priority. This isn't required functionality (it's part of the diag menu, and there is a lot of poorly consi... Jim Thompson

01:56 PM Bug #5899: diag_tables.php- Poor performance with large tables

Using Firefox bogons6 just locks up the browser for ever. Even removing all the table code and disabling javascript l... Anonymous

01:13 PM Bug #5899: diag_tables.php- Poor performance with large tables

As Chris mentioned. The bogons list isn't large enough. Need to select bogonsv6 to see the issue. NOYB NOYB

12:26 PM Bug #5899: diag_tables.php- Poor performance with large tables

bogons isn't long enough, bogonsv6 is though. Just picking bogonsv6 from the drop down on diag_tables.php will show t... Chris Buechler

07:11 AM Bug #5899 (Feedback): diag_tables.php- Poor performance with large tables

I have tested this by selecting "bogons" and then clicking "Update". This produces a very long table that on my syste... Anonymous

01:22 AM Bug #5899: diag_tables.php- Poor performance with large tables

Though on 2.2.6 IE is fine at ~10 seconds just like -2.3-.
Meant to say ... just like Chrome. NOYB NOYB

01:19 AM Bug #5899: diag_tables.php- Poor performance with large tables

Oh sorry. Guess I was a bit too light on info there. But it was bad enough on both Chrome and IE that I just neglec... NOYB NOYB

12:19 AM Bug #5899 (Confirmed): diag_tables.php- Poor performance with large tables

what browser? A comparison in Chrome on Windows and Linux is around 11 seconds on 2.2.6, 25 seconds on 2.3. That's a ... Chris Buechler

08:16 PM Bug #4312 (Resolved): Bridge advanced settings not always applied after interface is added to bridge

works Chris Buechler

02:52 PM Bug #4312 (Feedback): Bridge advanced settings not always applied after interface is added to bridge

Chris Buechler

07:07 PM Bug #5875 (Resolved): Factory Defaults in GUI is not working

fixed Chris Buechler

05:06 PM Bug #5721 (Assigned): ALTQ fails with "bandwidth for q... higher than interface" in some circumstance

Either the patch didn't make it into the builds or it isn't having the intended effect. On a current snap built after... Jim Pingle

09:26 AM Bug #5721 (Feedback): ALTQ fails with "bandwidth for q... higher than interface" in some circumstance

The default speed (when the NIC driver doesn't provide one) is now 1G. Luiz Souza

08:29 AM Bug #5721 (Assigned): ALTQ fails with "bandwidth for q... higher than interface" in some circumstance

Digging through the pf source in our repo it appears we set the default bandwidth to 100 in cases when the speed cann... Jim Pingle

06:04 AM Bug #5721: ALTQ fails with "bandwidth for q... higher than interface" in some circumstance

In every case where I have seen this I was able to get past it by setting the bandwidth manually on the root queue on... Steve Wheeler

03:04 PM Bug #5900 (Resolved): interfaces_bridge_edit.php issues

fixed Chris Buechler

02:58 PM Feature #5871 (Resolved): Multiple SPAN ports on bridge

works Chris Buechler

02:18 PM Todo #5895: Remove "LiveCD" name from ISO image filename and related info from docs

#1 has been committed, #2 has also been committed but not deployed. Once new snapshots come out in the new location i... Jim Pingle

01:22 PM Todo #5895: Remove "LiveCD" name from ISO image filename and related info from docs

Looks like this will need to happen in a few subtasks, I may add a few child tickets under this. Some of them are tim... Jim Pingle

10:59 AM Todo #5895: Remove "LiveCD" name from ISO image filename and related info from docs

Then let's do that. Jim Thompson

07:46 AM Todo #5895: Remove "LiveCD" name from ISO image filename and related info from docs

No objections here, that's another good option. Jim Pingle

01:02 AM Todo #5895: Remove "LiveCD" name from ISO image filename and related info from docs

Can we no just leave the file extension (.iso) and hope that people are smart?
pfSense-2.3-BETA-amd64.iso Jim Thompson

12:13 PM Bug #5888 (Resolved): all em(4) bridge members endlessly link cycle after one loses and regains link

works Chris Buechler

12:00 PM Bug #5904 (Resolved): OpenVPN P2P Shared Key Local Port wont accept 0

Anonymous

11:53 AM Bug #5904: OpenVPN P2P Shared Key Local Port wont accept 0

Gitsynced and all is proper now, thank you for the quick fix. Angel Torres

11:50 AM Bug #5904: OpenVPN P2P Shared Key Local Port wont accept 0

Applied in changeset commit:5bf773af036ecae256bcd0ee046f305f6960401b. Anonymous

11:43 AM Bug #5904 (Feedback): OpenVPN P2P Shared Key Local Port wont accept 0

Fix pushed. Please gitsync and test, or wait for the next snapshot.
I corrected the issue on both the OpenVPN serv... Anonymous

11:37 AM Bug #5904 (Assigned): OpenVPN P2P Shared Key Local Port wont accept 0

Thanks for the report. This is an easy fix. Watch for it in a few minutes :) Anonymous

11:34 AM Bug #5904 (Resolved): OpenVPN P2P Shared Key Local Port wont accept 0

OpenVPN P2P Shared Key config wont accept 0 for a local port as description states for a random port.
Message stat... Angel Torres

10:20 AM Bug #4936: dhcpd sets wrong permissions on leases files

aha so this is a intermittient bug?
I have never had this bug, so I tought it was fixed. sebastian nielsen

08:44 AM Todo #5903 (Resolved): Review 3rd party list in license.php

I noted there are outdated information there, like ipsec-tools. Probably it's missing new software too, needs a review. Renato Botelho

07:03 AM Bug #5901 (Resolved): Available Widgets and Save Icons Gone Missing

#2658 applied and tested. Thanks Anonymous

05:23 AM Bug #5901: Available Widgets and Save Icons Gone Missing

Fixed with PR #2658 NOYB NOYB

04:07 AM Bug #5901: Available Widgets and Save Icons Gone Missing

The save icon is displayed via jquery overwriting the second to last list element. index.php: line: 492
Now that ... NOYB NOYB

03:31 AM Bug #5901: Available Widgets and Save Icons Gone Missing

Occurred on this commit.
Commit date: 11 hours ago (2/16/2016 2:33:03 PM)
Commit hash: 9014e27c61b7c342816019f43d... NOYB NOYB

03:24 AM Bug #5901 (Resolved): Available Widgets and Save Icons Gone Missing

Available widgets icon, the plus symbol (+), has gone missing from the dashboard title bar. NOYB NOYB

06:10 AM Todo #5902 (New): Use a common place for default values

Currently the default value of many settings is used in the backend code that implements something, and is also in th... Phillip Davis

06:00 AM Bug #4675 (Feedback): DHCPv6 DDNS doesn't work properly

Applied in changeset commit:391d63da8fa0c46daa7275c225222dff5ec2522b. Renato Botelho

02/16/2016

11:17 PM Bug #5900 (Feedback): interfaces_bridge_edit.php issues

Chris Buechler

11:15 PM Bug #5900 (Resolved): interfaces_bridge_edit.php issues

Interface cost field isn't saved or filled upon edit.
Interface priority field not filled upon edit.
Assigned... Chris Buechler

10:18 PM Bug #5899 (Resolved): diag_tables.php- Poor performance with large tables

Displaying large tables such as bogonsv6 has very poor page loading performance. More than a minute. Clocked at ~75... NOYB NOYB

08:12 PM Feature #5897: Make Alias url table persistent after reboot without internet

guessing you're on nanobsd? They are retained on full installs, but /var/ is a RAM disk on nano and those aren't amon... Chris Buechler

09:08 AM Feature #5897 (Resolved): Make Alias url table persistent after reboot without internet

After reboot without internet connection Alias url table ip/port is empty, do not use the last "saved" ip/port. Oscar Francia

07:52 PM Bug #4312 (Confirmed): Bridge advanced settings not always applied after interface is added to bridge

Chris Buechler

07:50 PM Bug #4312 (Feedback): Bridge advanced settings not always applied after interface is added to bridge

Applied in changeset commit:9af087de91a2612e27023a4856a186215e350d9d. Chris Buechler

07:44 PM Bug #4312 (Confirmed): Bridge advanced settings not always applied after interface is added to bridge

that change lead to issue #5888, so this was reverted. different fix coming. Chris Buechler

07:42 PM Bug #5888 (Feedback): all em(4) bridge members endlessly link cycle after one loses and regains link

this was fixed reverting the change from #4312, will fix that differently. Chris Buechler

05:08 PM Bug #4936: dhcpd sets wrong permissions on leases files

sebastian nielsen wrote:
> You can set this to fixed.
Did you have a circumstance where this was reliably replica... Chris Buechler

05:05 PM Bug #4936: dhcpd sets wrong permissions on leases files

Forgot to say that the screenshotted machine is running 2.2.6 if you want to specify like "fixed in version" or whate... sebastian nielsen

04:57 PM Bug #4936: dhcpd sets wrong permissions on leases files

You can set this to fixed. sebastian nielsen

02:32 PM Bug #1837 (Resolved): Problem with PPP and default gateway switching

Still solid no matter how I hammer it. Feedback from others testing various scenarios has shown no negative effects e... Jim Pingle

02:30 PM Bug #5876 (Resolved): system_gateway_groups_edit.php: Gateway description is printed without escaping

Additional feedback from the original reporter confirms the internal testing results that this has been fixed. Jim Pingle

02:30 PM Bug #5877 (Resolved): firewall_shaper_vinterface.php and firewall_shaper_layer7.php: Parameters are printed without escaping

Additional feedback from the original reporter confirms the internal testing results that this has been fixed. Jim Pingle

12:55 PM Bug #5898 (Resolved): services_dhcp.php: "Ignore denied clients" is incompatible with failover

Tested the fix on two different 2.3 HA setups, works fine. Attempting to combine the two options fails with an input ... Jim Pingle

12:00 PM Bug #5898 (Feedback): services_dhcp.php: "Ignore denied clients" is incompatible with failover

Applied in changeset commit:8209517de8a4d09dbbb5837a587539255926e4b9. Jim Pingle

11:36 AM Bug #5898 (Resolved): services_dhcp.php: "Ignore denied clients" is incompatible with failover

The "Ignore denied clients" option on services_dhcp.php is not compatible with a high availability configuration. If ... Jim Pingle

09:53 AM Bug #5885 (Resolved): get_configured_carp_interface_list() and get_configured_ip_aliases_list() were consolidated but still referenced by packages, missing filtering

Looks good, thanks! Jim Pingle

08:00 AM Bug #5885 (Feedback): get_configured_carp_interface_list() and get_configured_ip_aliases_list() were consolidated but still referenced by packages, missing filtering

now get_configured_vip_list() has a switch to select the kind of VIP address you want in the list (CARP, IP alias and... Luiz Souza

09:28 AM Bug #5896 (Resolved): diag_packet_capture.php: Promiscuous mode checkbox does not stay checked on form submission

Fix confirmed by myself and stevew. Jim Pingle

07:40 AM Bug #5896 (Feedback): diag_packet_capture.php: Promiscuous mode checkbox does not stay checked on form submission

Applied in changeset commit:35e1cbdeab83bc9a4cb867638ff4dd2b1d8c0d29. Jim Pingle

07:35 AM Bug #5896 (Resolved): diag_packet_capture.php: Promiscuous mode checkbox does not stay checked on form submission

It becomes unchecked on each page load, other settings are retained during the same page visit when clicking start/st... Jim Pingle

05:50 AM Bug #5875 (Feedback): Factory Defaults in GUI is not working

Applied in changeset commit:80f10be21aba134c207e79f73cf16096dba6bcfa. Renato Botelho

03:01 AM Bug #5894 (Resolved): Help -> Search Portal Menu Item Broken?

Renato Botelho

02/15/2016

09:58 PM Bug #5894: Help -> Search Portal Menu Item Broken?

Looks good on the latest snapshot. Thanks Renato. Paul K

11:40 AM Bug #5894 (Feedback): Help -> Search Portal Menu Item Broken?

Applied in changeset commit:caf21e6b67a720be45793a9513b222bff1a660a7. Renato Botelho

03:40 PM Todo #5895 (Resolved): Remove "LiveCD" name from ISO image filename and related info from docs

The LiveCD platform was deactivated back in July, as a part of the switch to making everything based on pkg. The "Liv... Jim Pingle

01:52 PM Bug #5688: Remote Config Backup Not Working in 2.2.6 version

Ok, thank you any way embrace. Jefferson Lima

01:38 PM Bug #5688: Remote Config Backup Not Working in 2.2.6 version

Please discuss the problem on the forum if you need assistance. I removed the attachment you uploaded because it cont... Jim Pingle

01:35 PM Bug #5688: Remote Config Backup Not Working in 2.2.6 version

Staff, good afternoon , I'm having trouble backing up the pfSense version 2.2.6 , already performed to check the scri... Jefferson Lima

01:32 PM Feature #5889: Log of locked out IPs

Chris,
Enabling default logging would log the entire internet attempting access the default block rules, instead o... Alex Vergilis

12:55 PM Feature #5889 (Closed): Log of locked out IPs

IPs that get locked out are logged to the system log at the time of lockout. The block rule that blocks additional at... Chris Buechler

01:03 PM Bug #5875 (Assigned): Factory Defaults in GUI is not working

pfSense-upgrade gets locked when it calls /etc/rc.conf_mount_rw, I'll investigate how to fix it Renato Botelho

11:07 AM Bug #5891 (Resolved): Issues with vlans on lagg

It was due to the commit for #5887, I reverted it and this tests OK now. Further discussion can go on #5887. Jim Pingle

11:06 AM Bug #5887: hardware_offloading_applyflags sets/unsets most values when already set correctly

I had to revert the commit referenced here. In a LAGG+VLAN setup the parent NICs had unexpected flags (POLLING and LR... Jim Pingle

09:24 AM Bug #5893 (Closed): dhcp option can't be send

I ran a test with a client that requested 125 using your given text and it worked, the server replied with 125 and th... Jim Pingle

08:40 AM Bug #5882 (Resolved): XMLRPC sync tests for DNS Forwarder and Resolver are incorrect, will disable one in a valid configuration

Updated and tested this again each way (one enabled, the other enabled, both enabled, etc) and each time the behavior... Jim Pingle

02/14/2016

09:24 PM Bug #5893: dhcp option can't be send

assigned to pingle for eval. Jim Thompson

07:50 PM Bug #5893 (Closed): dhcp option can't be send

I add Additional BOOTP/DHCP Options value 125 as string in dhcp server setting page.
But it does't work.
I use wire... leon zhou

09:16 PM Bug #5894 (Resolved): Help -> Search Portal Menu Item Broken?

Menu item Help -> Search Portal points to URL https://www.pfsense.org/search.php. That page does not look to be funct... Paul K

06:52 PM Bug #5892 (Resolved): Restoring a backup with vlans on lagg can confuse GUI (vlan parent does not exist)

After restore a backup with vlans on lagg the GUI asks the user to resolve the conflict that doesn't exist. Luiz Souza

06:49 PM Bug #5891 (Resolved): Issues with vlans on lagg

There are recent reports of issues with vlans on lagg. Luiz Souza

03:24 PM Feature #5871 (Feedback): Multiple SPAN ports on bridge

Support for multiple span ports was added to 2.3.
Please test and let us know if works for you.
Thanks! Luiz Souza

12:50 PM Bug #5890: "External config loader" not loading config.xml from USB at boot

Applied in changeset commit:921e237fdeecdf6a362b33afd1bbdd365aa350c6. Anonymous

12:50 PM Bug #5890 (Feedback): "External config loader" not loading config.xml from USB at boot

Applied in changeset commit:e7733965b4047e9410c19ad938d6bb2bf7fe3b9b. Anonymous

07:48 AM Bug #5890 (Resolved): "External config loader" not loading config.xml from USB at boot

I was looking at how pfSense can restore configuration if we needed to switch to new hardware.
Looking at "/etc/ec... Nick Holloway

12:36 PM Bug #4515: Unable To Set MTU on LAGG Interface If No VLANs Assigned

This still seems to be present in 2.2.6. I have to set the MTU on a VLAN on the LAGG. Steve Wheeler

02/13/2016

11:20 PM Bug #1837: Problem with PPP and default gateway switching

I believe I located the source of the trouble here. With "set iface route default" in the mpd config, it was removing... Jim Pingle

11:20 PM Bug #1837 (Feedback): Problem with PPP and default gateway switching

Applied in changeset commit:2efb39d092a971c6ea8d06b25c315be7d400c4a1. Jim Pingle

03:46 PM Feature #5889: Log of locked out IPs

In 2.3, you can edit */etc/inc/filter.inc* and force it to log. Currently, its only logging if the "Default logging" ... BBcan177 .

12:45 PM Feature #5889: Log of locked out IPs

That function is performed already. The issue is that the IP address is not logged by pfsense. There's no data to sen... Alex Vergilis

12:05 PM Feature #5889: Log of locked out IPs

You could send your pfSense syslogs to a remote syslog for long-term storage/analysis. BBcan177 .

10:11 AM Feature #5889 (Closed): Log of locked out IPs

Feature request to log IP addresses that are placed into lockout groups like sshlockout and virusprot.
It would ai... Alex Vergilis

03:46 PM Bug #5872: Creating a network alias with both IPv6 subnets and FQDNs results in a table with only the FQDN entries.

Chris, it seems to work for me:
cat /var/etc/filterdns.cong
pf www.google.com net_host_v6
pf 2001:1291:2001:1::/... Luiz Souza

10:03 AM Bug #5887: hardware_offloading_applyflags sets/unsets most values when already set correctly

I've seen the changes that you've done, dug a little and found non-initialized variables in another file which uses t... Jorge M. Oliveira

02/12/2016

08:37 PM Bug #5783 (Confirmed): IGMP Proxy not working with CARP alias on upstream interface

wasn't related to the changes in 2a5960b0. Appears latest igmpproxy has a Linuxism that expects its interfaces to onl... Chris Buechler

08:32 PM Bug #5888 (Resolved): all em(4) bridge members endlessly link cycle after one loses and regains link

Put em NICs in a bridge, unplug and replug one of them, and all the em bridge member interfaces go into continual lin... Chris Buechler

07:19 PM Bug #5848: Downloaded rules data validation

Unfortunately, I do not have a sample I can provide. The file contents have been overwritten with other valid downloa... Alex Vergilis

06:27 PM Bug #5848 (Feedback): Downloaded rules data validation

I've been through a slew of circumstances that were broken before and are all fine now. There are multiple levels of ... Chris Buechler

06:21 PM Todo #4858: Finish/fix CARP uniqid changes

I've re-tested every use of CARP and IP aliases including on gateway groups with the exception of dynamic DNS which I... Chris Buechler

04:59 PM Feature #4688 (New): Missing TFC Traffic Flow Confidentiality support

I should have checked if FreeBSD actually had TFC support first. It doesn't, so I commented it out.
The GUI and b... Chris Buechler

04:50 PM Bug #5887 (Confirmed): hardware_offloading_applyflags sets/unsets most values when already set correctly

thought this would fix the ix(4) link cycling issue on XG-1540 particularly when a DHCP client (rxcsum/txcsum causes ... Chris Buechler

04:47 PM Bug #5887 (Confirmed): hardware_offloading_applyflags sets/unsets most values when already set correctly

hardware_offloading_applyflags sets txcsum, rxcsum, LRO, TSO, etc. whether or not they're already set correctly. That... Chris Buechler

03:14 PM Bug #1837 (Confirmed): Problem with PPP and default gateway switching

Chris Buechler

02:48 PM Bug #1837: Problem with PPP and default gateway switching

This also seems to be a problem with both WANs are PPPoE. The system logs that it's switching the gateway during the ... Jim Pingle

02:35 PM Bug #5874 (Resolved): status_rrd_graph_img.php: Lack of validation on "graph" variable can lead to shell exec

Feedback from the original reporter confirms it is now fixed. Jim Pingle

02:34 PM pfSense Packages Bug #5869 (Resolved): Squid non-functional in transparent mode in 2.3

Looks good now, others on the forum and here have also confirmed it is working now. Closing. Jim Pingle

12:47 PM Feature #4535 (Resolved): Make factory default interface assignment more flexible

Thanks Phil Chris Buechler

12:38 PM Bug #5856 (Resolved): Unused downloaded alias table files are not removed

fixed Chris Buechler

04:15 AM Bug #5856 (Feedback): Unused downloaded alias table files are not removed

should be good Chris Buechler

12:20 PM Bug #5882 (Feedback): XMLRPC sync tests for DNS Forwarder and Resolver are incorrect, will disable one in a valid configuration

Applied in changeset commit:57b5da701888602edb008fbd55f6e55e18578eb8. Jim Pingle

11:32 AM Bug #5886 (Resolved): "ipsec up" commands can take a long time to return, hanging status page

fixed Chris Buechler

11:31 AM Bug #5886 (Resolved): "ipsec up" commands can take a long time to return, hanging status page

When using the "connect" button on status_ipsec.php, if trying to connect to something that isn't responding at all, ... Chris Buechler

10:37 AM Bug #5885 (Resolved): get_configured_carp_interface_list() and get_configured_ip_aliases_list() were consolidated but still referenced by packages, missing filtering

get_configured_carp_interface_list() and get_configured_ip_aliases_list() were removed in commit:2a5960b07bb2a40aeaf8... Jim Pingle

09:22 AM Bug #5884 (Resolved): find_carp_interface() was removed, but it is still referenced by packages

find_carp_interface() was removed in commit:2a5960b07bb2a40aeaf81423b0c52d5629e87e49 (and its many associated tickets... Jim Pingle

06:52 AM Bug #5872 (Confirmed): Creating a network alias with both IPv6 subnets and FQDNs results in a table with only the FQDN entries.

Still doesn't work. To match the behavior of IPv4, it'd just omit the v6 subnets from filterdns.conf and add them in ... Chris Buechler

02/11/2016

10:16 PM Bug #5845: New URL Table (Ports) alias can cause invalid ruleset when alias changes not yet applied

Alex Vergilis wrote:
> FYI - In my case, the issue exists even after applying the changes of Alias creation, and the... Chris Buechler

09:25 AM Bug #5845: New URL Table (Ports) alias can cause invalid ruleset when alias changes not yet applied

FYI - In my case, the issue exists even after applying the changes of Alias creation, and then creating the rule. Alex Vergilis

03:18 AM Bug #5845 (Confirmed): New URL Table (Ports) alias can cause invalid ruleset when alias changes not yet applied

Finally found a way to replicate. This is what happens when you add a URL Table ports alias, don't apply changes in a... Chris Buechler

08:05 PM Bug #5341 (Resolved): dnsmasq 2.75 exits with signal 11

this is fixed by the switch to dnsmasq-devel, and that change hasn't caused any regressions. We'll just have to switc... Chris Buechler

07:28 PM Bug #5878 (Resolved): diag_dump_states/php: State filter no longer works

works. Interface is a nice addition too Chris Buechler

04:04 PM Bug #5878 (Feedback): diag_dump_states/php: State filter no longer works

Fixed now. Sorry for the breakage. Luiz Souza

05:49 PM Bug #5883 (Resolved): dnsmasq host overrides don't work when both unbound and dnsmasq are enabled

fixed Chris Buechler

05:40 PM Bug #5883 (Resolved): dnsmasq host overrides don't work when both unbound and dnsmasq are enabled

system_hosts_generate uses unbound's config for generating the hosts file if it's enabled. dnsmasq relies on the host... Chris Buechler

01:50 PM Bug #5857: VLANs on interface with 1500 MTU PPPoE end up with 1508 MTU

Also there is a situation where the value is decremented by 8
https://github.com/pfsense/pfsense/blob/master/src/etc... Jorge M. Oliveira

12:50 PM Bug #5857: VLANs on interface with 1500 MTU PPPoE end up with 1508 MTU

Maybe the logic behind this code could be worked out
https://github.com/pfsense/pfsense/blob/master/src/etc/inc/in... Jorge M. Oliveira

12:42 PM Bug #5872 (Feedback): Creating a network alias with both IPv6 subnets and FQDNs results in a table with only the FQDN entries.

Fixed the filterdns v6 netmask parsing. (filterdns-1.0_8) Luiz Souza

11:21 AM Bug #5783: IGMP Proxy not working with CARP alias on upstream interface

Sorry, did not help. I'm on the latest beta with gitsync as of now.
ifconfig still shows the CARP IPs as aliases of ... Anonymous

10:49 AM Bug #5882 (Resolved): XMLRPC sync tests for DNS Forwarder and Resolver are incorrect, will disable one in a valid configuration

The tests at source:src/usr/local/www/xmlrpc.php#L214 are making faulty assumptions. The test assumes that only one o... Jim Pingle

08:47 AM pfSense Packages Bug #5869 (Feedback): Squid non-functional in transparent mode in 2.3

A bit of a tangled web of permissions here. I pushed a fix that worked here locally but it will definitely need more ... Jim Pingle

07:56 AM Bug #4237: Error "macro IPsec not defined" once after firmware upgrade

I obeserved /tmp/rules.debug every 0.5 seconds with pfctl -nf /tmp/rules.debug
and copied rules.debug to rules.debug... Fabian Melters

04:51 AM Bug #4237: Error "macro IPsec not defined" once after firmware upgrade

Chris: yes, it's still happening while the system is running. looks like some kind of race-condition to me, as ... Fabian Melters

04:01 AM Bug #4237: Error "macro IPsec not defined" once after firmware upgrade

I believe the issue described here is just during the first filter reload during boot post-upgrade. I've never seen a... Chris Buechler

03:17 AM Bug #4237: Error "macro IPsec not defined" once after firmware upgrade

I have the same issue after upgrade to 2.2.6... Fabian Melters

07:44 AM Bug #4219 (Feedback): Bump sched buckets limiter log spam

Fixed. Now this message will be printed only with boot verbose enabled. Luiz Souza

06:51 AM Feature #4647: Services: DHCP server should default to LAN, not WAN

:-) Thank you! David Gessel

12:39 AM Feature #4647 (Resolved): Services: DHCP server should default to LAN, not WAN

all good Chris Buechler

03:23 AM Bug #5881 (Not a Bug): Firewall Logs

the log size is adjustable on the Settings tab. Please take such discussions to https://forum.pfsense.org Chris Buechler

03:06 AM Bug #5881 (Not a Bug): Firewall Logs

Does the planned improvements to keep a log of firewall log server without?
500 Kb log's are many bi does not work W... Landforces turkuaz

02:33 AM Bug #5880 (Resolved): IKE version auto didn't get fixed in 2.3

works Chris Buechler

01:18 AM Bug #5880 (Feedback): IKE version auto didn't get fixed in 2.3

should be good Chris Buechler

01:17 AM Bug #5880 (Resolved): IKE version auto didn't get fixed in 2.3

The IKE version auto fixes happened in RELENG_2_2 in the midst of Bootstrapping 2.3 so weren't made there at the time. Chris Buechler

02:28 AM Feature #4688 (Feedback): Missing TFC Traffic Flow Confidentiality support

committed, needs testing beyond verifying the ipsec.conf is correct. Chris Buechler

12:37 AM Bug #4450 (Resolved): GRE Tunnel does not work if one of the endpoints is an IP Alias

works Chris Buechler

12:12 AM Bug #3716 (Resolved): Adding IPv6 alias to IPv6 CARP IP throws error - fix proposal attached

works Chris Buechler

02/10/2016

11:22 PM Bug #5500 (Resolved): IPsec won't create firewall rules when you use an IP Alias on "Interface"

still correct for IP aliases and CARP Chris Buechler

05:10 PM Bug #5500 (Feedback): IPsec won't create firewall rules when you use an IP Alias on "Interface"

to me to confirm Chris Buechler

07:20 AM Bug #5500 (Resolved): IPsec won't create firewall rules when you use an IP Alias on "Interface"

This is now fixed and tested with CARP and IP Aliases. Luiz Souza

10:19 PM pfSense Packages Bug #5869: Squid non-functional in transparent mode in 2.3

Finally was able to replicate it here. Found the cause, best solution is yet to be determined.
truss shows it tryi... Jim Pingle

08:58 PM pfSense Packages Bug #5869 (Confirmed): Squid non-functional in transparent mode in 2.3

If this was in reference to squid on 2.3 having issues with transparent mode (who could have a clue from the original... Chris Buechler

07:57 PM pfSense Packages Bug #5869: Squid non-functional in transparent mode in 2.3

How can you say this isn't a bug if you don't know what it's referencing? There is most definitely a problem with thi... Brian Caouette

05:42 PM pfSense Packages Bug #5869 (Not a Bug): Squid non-functional in transparent mode in 2.3

no idea what this is referencing Chris Buechler

03:18 AM pfSense Packages Bug #5869 (Resolved): Squid non-functional in transparent mode in 2.3

Squid in transparent mode in 2.3 is non-functional. Squid config seems sane, the rdr to 127.0.0.1:3128 is correct and... Landforces turkuaz

07:09 PM Bug #5844 (Resolved): Gateway groups VIPs not selected on edit, VIP list wrong

works Chris Buechler

03:30 PM Bug #5844 (Feedback): Gateway groups VIPs not selected on edit, VIP list wrong

fixed again Chris Buechler

03:13 PM Bug #5844 (Confirmed): Gateway groups VIPs not selected on edit, VIP list wrong

the "VIP list wrong" part of this regressed after 2a5960b0 Chris Buechler

08:25 AM Bug #5844: Gateway groups VIPs not selected on edit, VIP list wrong

Gateway groups have been tested and reviewed together with IP Aliases and CARP. Luiz Souza

07:03 PM Bug #5872 (Confirmed): Creating a network alias with both IPv6 subnets and FQDNs results in a table with only the FQDN entries.

confirmed, it adds IPv6 subnets to filterdns.conf rather than directly into the table. IPv4 subnets are handled corre... Chris Buechler

07:25 AM Bug #5872 (Resolved): Creating a network alias with both IPv6 subnets and FQDNs results in a table with only the FQDN entries.

It looks like filter DNS is choking on the IPv6 entries.
To test I created a network alias containing:
2607:f8b0:40... Steve Wheeler

06:59 PM Bug #5875 (Confirmed): Factory Defaults in GUI is not working

Chris Buechler

11:33 AM Bug #5875 (Resolved): Factory Defaults in GUI is not working

The php-fpm process is killed by pfSense-upgrade (called from reset_factory_defaults()) and the whole process stop th... Luiz Souza

06:53 PM Bug #5852 (Resolved): Changing update branch causes error and crash report

happened to hit this too. just trying to unset something that may not be an array, fixed. Chris Buechler

05:45 PM Bug #5878 (Confirmed): diag_dump_states/php: State filter no longer works

Chris Buechler

03:38 PM Bug #5878 (Resolved): diag_dump_states/php: State filter no longer works

V. 2.2.x used $_POST['filter'] to filter hte states with egrep before display.
$grepline = (isset($_POST['filter']... Anonymous

05:41 PM Feature #5870 (Closed): Log and reports details

nothing actionable here, there could always be "more detailed logging" Chris Buechler

03:19 AM Feature #5870 (Closed): Log and reports details

You can work for a more detailed logging. Landforces turkuaz

05:29 PM Bug #3257 (Resolved): IP Alias on CARP IP doesn't work where IP alias above CARP parent in list

works Chris Buechler

05:14 PM Bug #3257 (Feedback): IP Alias on CARP IP doesn't work where IP alias above CARP parent in list

to me to confirm Chris Buechler

12:10 PM Bug #3257 (Resolved): IP Alias on CARP IP doesn't work where IP alias above CARP parent in list

Fixed in 2.3 as part of CARP uniqid fixes. Luiz Souza

05:20 PM Bug #5441: Unbound config does not bind to CARP IP

still works Chris Buechler

07:55 AM Bug #5441 (Resolved): Unbound config does not bind to CARP IP

This is now fixed. Thanks! Luiz Souza

05:15 PM Bug #4450 (Feedback): GRE Tunnel does not work if one of the endpoints is an IP Alias

to me to confirm Chris Buechler

07:17 AM Bug #4450 (Resolved): GRE Tunnel does not work if one of the endpoints is an IP Alias

This is now fixed. Thanks! Luiz Souza

05:13 PM Bug #3716 (Feedback): Adding IPv6 alias to IPv6 CARP IP throws error - fix proposal attached

to me to confirm Chris Buechler

07:31 AM Bug #3716 (Resolved): Adding IPv6 alias to IPv6 CARP IP throws error - fix proposal attached

Fixed in 2.3. Thanks! Luiz Souza

05:07 PM Bug #5442: Upgraded CARP IPs fail HTTP REFERER check

still works Chris Buechler

07:22 AM Bug #5442 (Resolved): Upgraded CARP IPs fail HTTP REFERER check

This issue also affect IP Aliases, this is now fixed. Luiz Souza

04:52 PM Bug #5879 (Not a Bug): services_dyndns_edit.php password issue on edit

nevermind, form filler gone wild. Chris Buechler

04:14 PM Bug #5879 (Not a Bug): services_dyndns_edit.php password issue on edit

If you edit an existing entry on services_dyndns_edit.php and don't re-populate the password fields, you end up with:... Chris Buechler

04:42 PM Feature #5832: add speedtest cli in pfsense via package or comand line

working :)
thanks Luis Couto

02:46 PM Feature #5832: add speedtest cli in pfsense via package or comand line

it's been there since yesterday Chris Buechler

12:30 PM Bug #5877 (Feedback): firewall_shaper_vinterface.php and firewall_shaper_layer7.php: Parameters are printed without escaping

Applied in changeset commit:b76fd2a05664379c6752c5ee28c42462348d5d51. Jim Pingle

12:25 PM Bug #5877 (Resolved): firewall_shaper_vinterface.php and firewall_shaper_layer7.php: Parameters are printed without escaping

On firewall_shaper_vinterface.php and firewall_shaper_layer7.php many parameters are printed without escaping. Notabl... Jim Pingle

12:30 PM Bug #5876 (Feedback): system_gateway_groups_edit.php: Gateway description is printed without escaping

Applied in changeset commit:1ab9e48986ff9a0cccf03a5abb0c1ad917db1624. Jim Pingle

11:53 AM Bug #5876 (Resolved): system_gateway_groups_edit.php: Gateway description is printed without escaping

On system_gateway_groups_edit.php, if a gateway has a description using a string containing JS, it will show up here ... Jim Pingle

11:20 AM Bug #5874: status_rrd_graph_img.php: Lack of validation on "graph" variable can lead to shell exec

Applied in changeset commit:7cd2add4de7b85f64033722a055d72f379e487ca. Jim Pingle

11:20 AM Bug #5874 (Feedback): status_rrd_graph_img.php: Lack of validation on "graph" variable can lead to shell exec

Applied in changeset commit:6a109e3eafe6849d7907d59a3395329aaf5c12c9. Jim Pingle

10:07 AM Bug #5874 (Resolved): status_rrd_graph_img.php: Lack of validation on "graph" variable can lead to shell exec

The graph parameter on status_rrd_graph_img.php is somewhat sanitized but still allows the pipe character, which can ... Jim Pingle

09:17 AM Todo #4858: Finish/fix CARP uniqid changes

The uniqid changes are now finished. All the serious and known bugs are fixed.
It took me a while to understand t... Luiz Souza

08:20 AM Bug #5783 (Feedback): IGMP Proxy not working with CARP alias on upstream interface

This should be fixed. Let us know if it works for you. Thanks! Luiz Souza

08:15 AM Bug #5873 (Resolved): PHP error from upgrade_142_to_143() when run during rc.bootup

Tested with a problem config on two systems, works fine now, thanks! Jim Pingle

08:10 AM Bug #5873 (Feedback): PHP error from upgrade_142_to_143() when run during rc.bootup

Applied in changeset commit:032def61ca2d829524172066d054211a9771d077. Anonymous

07:47 AM Bug #5873: PHP error from upgrade_142_to_143() when run during rc.bootup

More info: It does happen at gitsync but it requires having just the wrong thing in the config.
Config contains th... Jim Pingle

07:34 AM Bug #5873 (Resolved): PHP error from upgrade_142_to_143() when run during rc.bootup

On three systems I have seen an error during the reboot process in upgrade_142_to_143() when run from rc.bootup. Stac... Jim Pingle

07:30 AM Feature #5871: Multiple SPAN ports on bridge

https://github.com/pfsense/pfsense/pull/2613 jeroen van breedam

07:25 AM Feature #5871 (Resolved): Multiple SPAN ports on bridge

request on forum: https://forum.pfsense.org/index.php?topic=106498.0
a patch for 2.3.x appears todo its job, but I... jeroen van breedam

04:59 AM pfSense Packages Bug #5868: Quagga OSPF Priority value "0" (zero) is being ignored - DR election doesnt work properly.

And I have tried this on pfSense version 2.2.6 only pfSense network as well as 2.2.4 only pfSense network.
Regards... ERSAN YOLCU

02:12 AM pfSense Packages Feature #5434: Let's Encrypt pfSense support

"le":https://github.com/Neilpang/le doesn't work for now in pfsense... im trying find solution, but... it is a bit co... Y N

02/09/2016

09:42 PM Bug #5858 (Resolved): Services Status Widget - Hide Service

Anonymous

08:47 PM Bug #5858: Services Status Widget - Hide Service

Ah, think I missed that last commit. It's working. Thanks. NOYB NOYB

07:46 PM Bug #5858: Services Status Widget - Hide Service

Nope. Still cannot hide openvpn_2. Returning to the config after selecting to hide, it is as though it was not sele... NOYB NOYB

06:38 PM Bug #5858: Services Status Widget - Hide Service

Should be OK now, but I'll check that out. Thanks. Anonymous

06:01 PM Bug #5858: Services Status Widget - Hide Service

In status services there is some code that produces a unique id and link for each of the services. Maybe that could ... NOYB NOYB

05:47 PM Bug #5858: Services Status Widget - Hide Service

It sees the suffixed service as being up. But cannot hide it. Only the non suffixed service can be hidden. NOYB NOYB

05:06 PM Bug #5858: Services Status Widget - Hide Service

Just pushed a change that should help.
Anonymous

04:48 PM Bug #5858: Services Status Widget - Hide Service

Could be. I'll investigate. Anonymous

04:39 PM Bug #5858: Services Status Widget - Hide Service

Now though it shows openvpn_2 as being down (yellow x). Guessing because there is no actual service by that name. NOYB NOYB

01:10 PM Bug #5858: Services Status Widget - Hide Service

Applied in changeset commit:7d3c67dea8d1f305da586ba980489048727d5e74. Anonymous

12:36 PM Bug #5858: Services Status Widget - Hide Service

An incrementing suffix is added to tth service names so that they remain unique in the multiselect. e.g.:
dpinger
... Anonymous

11:57 AM Bug #5858 (Feedback): Services Status Widget - Hide Service

Not an easy fix. If the services have identical names, the only other option is to hide by table row number. But if y... Anonymous

02:58 AM Bug #5858 (Resolved): Services Status Widget - Hide Service

Hide service hides all services with same name. For example with multiple OpenVPN services running. Hiding one hide... NOYB NOYB

07:52 PM Bug #5867 (Resolved): status_queues.php: Old version of jQuery directly referenced but not present

Looks good now, thanks! Jim Pingle

04:10 PM Bug #5867: status_queues.php: Old version of jQuery directly referenced but not present

Applied in changeset commit:625c4a8b5ba0c1137c639fe7496fbd27b33b984b. Anonymous

04:07 PM Bug #5867 (Feedback): status_queues.php: Old version of jQuery directly referenced but not present

jquery statement removed. Javascript wraped in events.push(function() { }); Anonymous

03:33 PM Bug #5867: status_queues.php: Old version of jQuery directly referenced but not present

Just remove the src statement. It is no longer needed. I'll do this later today. Anonymous

03:19 PM Bug #5867 (Resolved): status_queues.php: Old version of jQuery directly referenced but not present

The queues status page directly references an older version of jquery:... Jim Pingle

06:55 PM pfSense Packages Bug #5868: Quagga OSPF Priority value "0" (zero) is being ignored - DR election doesnt work properly.

Category should be Quagga OSPF, I couldn't find the way to update my bug report, sorry.
Regards,
Ersan Yolcu ERSAN YOLCU

06:44 PM pfSense Packages Bug #5868 (Resolved): Quagga OSPF Priority value "0" (zero) is being ignored - DR election doesnt work properly.

On the interface configuration of the Quagga OSPF in a broadcast network, if we dont want a pfsense to take place on ... ERSAN YOLCU

02:24 PM Feature #5860 (Resolved): firewall_rules.php (Floating tab): Add an icon to indicate the status of "quick" being checked in a floating rule

Looks good, thanks! Jim Pingle

01:10 PM Feature #5860: firewall_rules.php (Floating tab): Add an icon to indicate the status of "quick" being checked in a floating rule

Applied in changeset commit:e2461a2f1dd3de3a028f5798a11c6b1a0ef7578c. Anonymous

01:03 PM Feature #5860 (Feedback): firewall_rules.php (Floating tab): Add an icon to indicate the status of "quick" being checked in a floating rule

Implemented as requested. Anonymous

09:37 AM Feature #5860 (Resolved): firewall_rules.php (Floating tab): Add an icon to indicate the status of "quick" being checked in a floating rule

Given the significance of the 'quick' property of floating rules, it would be useful to see an icon indicating the pr... Jim Pingle

01:50 PM Bug #5559 (Resolved): IE 11 display issues related to table padding/margins

Anonymous

01:40 PM Bug #5559 (Feedback): IE 11 display issues related to table padding/margins

Applied in changeset commit:fdb83ce0555487a4ba076aa40f9a1a4886259f22. NOYB NOYB

12:26 PM Feature #5832: add speedtest cli in pfsense via package or comand line

try today , and same problem ...
pkg: No packages available to install matching 'py27-speedtest-cli' have been ... Luis Couto

10:21 AM Bug #5476: Does not appear possible to use policy routing for traffic originating from the firewall (self)

Wouldn't even need to link to this ticket. You would have to replicate it on a stock FreeBSD install though, preferab... Jim Pingle

10:03 AM Bug #5476: Does not appear possible to use policy routing for traffic originating from the firewall (self)

Ok thanks Jim at least I know i'm not crazy! I'm not familiar with reporting bugs upstream to FreeBSD. Would it be ... → luckman212

09:23 AM Bug #5476 (Needs Patch): Does not appear possible to use policy routing for traffic originating from the firewall (self)

I ran some tests here and it does not appear to function any longer. This is something that needs replicated with pf ... Jim Pingle

10:18 AM Feature #5862 (Resolved): Add RFC 2136 Dynamic DNS entries to the Dynamic DNS widget

Jim Pingle

09:57 AM Feature #5862 (Resolved): Add RFC 2136 Dynamic DNS entries to the Dynamic DNS widget

The Dynamic DNS widget did not contain entries from the RFC 2136 tab, which made it more difficult to track their sta... Jim Pingle

10:17 AM Feature #5866 (Resolved): diag_packet_capture.php: "pfsync" is missing from the Protocol list

Since tcpdump can interpret the output of pfsync and the contents are useful to see on occasion, it would help to hav... Jim Pingle

10:10 AM Bug #5865 (Resolved): Easy Rule fails when using Portuguese, causes the config to be tossed out

Reported at https://forum.pfsense.org/index.php?topic=105999.0
Fixed by commit:1c0083d004e4aeaad0c22f63df393f40243... Jim Pingle

10:01 AM Bug #5864 (Resolved): status_captiveportal.php: "Disconnect" text visible without formatting

Looks like "Disconnect" for clients should be a button, but has not been formatted as such.
Fix was committed in... Jim Pingle

09:59 AM Bug #5863 (Resolved): services_rfc2136_edit.php: "Save & Force Update" button missing

The "Save & Force Update" button was present on the RFC 2136 editing page on 2.2.x, but is missing on 2.3. The code s... Jim Pingle

09:56 AM Feature #5861 (Resolved): Multi-WAN support for RFC 2136 Dynamic DNS

RFC 2136 Dynamic DNS lacked support for Multi-WAN so it could not be used for failover scenarios. Even though it's su... Jim Pingle

08:49 AM Bug #5859 (Resolved): "Key Rotation" field name incorrect in interfaces.php

The "Key Rotation" field name from 2.2.x is listed as "WPA Pre-Shared Key" on 2.3.
Already fixed in commit:11439ca... Jim Pingle

05:01 AM Bug #5857: VLANs on interface with 1500 MTU PPPoE end up with 1508 MTU

I, too, believe that the "All vlans need to use the same mtu value as their parent" comment at the head of interface_... David Wood

02/08/2016

11:12 PM Bug #5846 (Resolved): Click status Icon to enable/disable Firewall Rules

looks good, thanks Steve! It'd been irking me too though I hadn't opened a ticket yet.
The contrast between enabl... Chris Buechler

10:32 PM Bug #5846: Click status Icon to enable/disable Firewall Rules

Looks good... Thanks Steve...
Only suggestion would be to make the contrast between enabled and disabled Rules more... BBcan177 .

07:40 PM Bug #5846: Click status Icon to enable/disable Firewall Rules

Applied in changeset commit:d4cb4cf3d665da3af06d348be0064b7c0dc616b2. Anonymous

07:32 PM Bug #5846 (Feedback): Click status Icon to enable/disable Firewall Rules

Anonymous

07:31 PM Bug #5846: Click status Icon to enable/disable Firewall Rules

Implemented as requested Anonymous

09:15 AM Bug #5846 (Assigned): Click status Icon to enable/disable Firewall Rules

Anonymous

10:57 PM Bug #5857 (Resolved): VLANs on interface with 1500 MTU PPPoE end up with 1508 MTU

Issue described here:
https://github.com/pfsense/pfsense/pull/2598
though that PR won't work to fix since it cha... Chris Buechler

10:35 PM Bug #5476: Does not appear possible to use policy routing for traffic originating from the firewall (self)

I've just re-tested with the latest 2.3 snapshot as of Feb 8 2016. Still can't even come close to making this work. ... → luckman212

09:49 PM Bug #5559: IE 11 display issues related to table padding/margins

The cause of horizontal scrollbar on interfaces without any rules is that all rows of the table (rules of other inter... NOYB NOYB

08:29 PM Bug #5856: Unused downloaded alias table files are not removed

FYI - Alias definitions are also not removed from /tmp/rules.debug Alex Vergilis

05:06 PM Bug #5856 (Resolved): Unused downloaded alias table files are not removed

When an alias table file entry of "URL Table (Ports)" or "URL Table (IPs)" is renamed, or removed, the actual file is... Alex Vergilis

08:00 PM Bug #5855 (Resolved): XML error: no leases object found

already fixed in 2.3 as it won't pass a non-XML file to parse_xml_config in ipsec_dump_mobile Chris Buechler

07:18 PM Bug #5855: XML error: no leases object found

OK thanks. Since it is seen in 2.2.x I'll leave it for Chris. Anonymous

06:46 PM Bug #5855: XML error: no leases object found

Steve,
The error is observed in the system log every time index.php is loaded.
Chris is aware of this issue:
... Alex Vergilis

06:19 PM Bug #5855 (Feedback): XML error: no leases object found

Alex,
Would you provide some more details please? I have IPSec configured and running, and the widget installed. E... Anonymous

10:42 AM Bug #5855 (Resolved): XML error: no leases object found

Loading index.php with the IpSec widget produces this error:... Alex Vergilis

07:50 PM Bug #5854 (Resolved): User/Group Add Priv - filter and descriptions are out of sync

Anonymous

07:41 PM Bug #5854: User/Group Add Priv - filter and descriptions are out of sync

Works, thanks Phillip Davis

07:15 PM Bug #5854 (Feedback): User/Group Add Priv - filter and descriptions are out of sync

Index is now based on shadow list, which is always unfiltered. Anonymous

06:27 PM Bug #5854: User/Group Add Priv - filter and descriptions are out of sync

Using the index of the shadow list should rectify this. Looking at it now. Anonymous

02:57 AM Bug #5854 (Resolved): User/Group Add Priv - filter and descriptions are out of sync

Go to User Manager, edit a user, add priv, filter the privs to show a reduced list.
Select a priv.
Look at the desc... Phillip Davis

06:12 PM Feature #1189: Gateway: Multiple monitor ips

How can we run multiple dpingers to monitor arbitrary IPs and dump results to rrd? Is this written down somewhere or ... → luckman212

05:22 PM Feature #1189: Gateway: Multiple monitor ips

Phillip Davis wrote:
> https://redmine.pfsense.org/issues/4354 was closed a few days ago. Is this still "a good thin... Chris Buechler

04:53 AM Feature #1189: Gateway: Multiple monitor ips

https://redmine.pfsense.org/issues/4354 was closed a few days ago. Is this still "a good thing" to do in some way? Phillip Davis

06:01 PM Bug #5847 (Resolved): Crash report when accessing Diagnostics --> Packet Capture

Chris Buechler

06:00 PM Bug #5848 (Confirmed): Downloaded rules data validation

Chris Buechler

07:21 AM Bug #5848: Downloaded rules data validation

RE "internet sources"?
From the 2 provided log samples of failures that occur across all of my tracked systems:
... Alex Vergilis

03:55 PM Bug #3209 (Resolved): editing VLAN tag on OPT interface changes LAN interface instead

Thanks Phil! never happened to hit that circumstance in trying to replicate this, but that's clearly the issue. Chris Buechler

08:20 AM Bug #3209 (Feedback): editing VLAN tag on OPT interface changes LAN interface instead

Applied in changeset commit:1c32fb7e988fae89cf2da474778f39bcdd8a8656. Phillip Davis

08:15 AM Bug #3209: editing VLAN tag on OPT interface changes LAN interface instead

This looks like it has been just a plain old dumb bug - https://github.com/pfsense/pfsense/pull/2601 Phillip Davis

03:38 PM Feature #4647 (Assigned): Services: DHCP server should default to LAN, not WAN

thanks Phil! PR looks fine at a glance, I'll test and merge when I get a chance sometime today. Chris Buechler

09:29 AM Feature #4647: Services: DHCP server should default to LAN, not WAN

This has annoyed me also, and Chris bumping it here reminded me about it.
For a suggested solution see https://githu... Phillip Davis

03:32 PM Bug #5845: New URL Table (Ports) alias can cause invalid ruleset when alias changes not yet applied

could you email me the URL, Alex? cmb at pfsense dot org Chris Buechler

03:24 PM Bug #5845: New URL Table (Ports) alias can cause invalid ruleset when alias changes not yet applied

Its your call for fix deliverability to a specific version. I have "work around".
I can definitely reproduce this ... Alex Vergilis

02:58 PM Bug #5845: New URL Table (Ports) alias can cause invalid ruleset when alias changes not yet applied

also not seeing any way of making that happen, on 2.2.x nor 2.3. Add a ports URL table alias, and it's in the ruleset... Chris Buechler

02:50 PM Bug #5845: New URL Table (Ports) alias can cause invalid ruleset when alias changes not yet applied

Sorry but we are still unable to reproduce this. A list of ports in a text file saved on an HTTP server is download a... Anonymous

08:38 AM Bug #5845: New URL Table (Ports) alias can cause invalid ruleset when alias changes not yet applied

The issue is not with "Port(s)"
The issue is with "URL Table (Ports)"
In firewall_aliases_edit.php
Firewal... Alex Vergilis

08:22 AM Bug #5845: New URL Table (Ports) alias can cause invalid ruleset when alias changes not yet applied

Just to be sure, you are referring to: firewall_aliases_edit.php?tab=url and select Type = Port(s) ? Anonymous

08:15 AM Bug #5845: New URL Table (Ports) alias can cause invalid ruleset when alias changes not yet applied

"URL Table (IPs)" list works fine.
The issue is only with the "URL Table (Ports)" alias entry Alex Vergilis

07:36 AM Bug #5845 (Feedback): New URL Table (Ports) alias can cause invalid ruleset when alias changes not yet applied

Unable to reproduce.
Created file sbeaver.com/iplist.txt
Created new URL alias speifying that URL
Clicked "Save"... Anonymous

04:40 AM Bug #5363: Reject rules show as blocked on firewall log normal and dynamic views

Yes, I will look at it some time. There is no rush to do this in 2.3 Phillip Davis

04:28 AM Bug #5451: Invalid ruleset generated with some AVPair-defined ACLs

I believe this is fixed in both 2.2.x and 2.3, and can be marked Resolved. Phillip Davis

04:15 AM Feature #4535: Make factory default interface assignment more flexible

IMHO this is now working and resolved for 2.3 Phillip Davis

02/07/2016

11:46 PM Bug #5783 (Assigned): IGMP Proxy not working with CARP alias on upstream interface

Jim Thompson

11:46 PM Bug #5500 (Assigned): IPsec won't create firewall rules when you use an IP Alias on "Interface"

reopened, assigned to Luiz. apparently there is a better fix. Jim Thompson

11:45 PM Bug #5441 (Assigned): Unbound config does not bind to CARP IP

Jim Thompson

11:44 PM Bug #5441: Unbound config does not bind to CARP IP

Luiz apparently has a better fix. Jim Thompson

11:44 PM Bug #5442 (Assigned): Upgraded CARP IPs fail HTTP REFERER check

Luiz apparently has a better fix Jim Thompson

11:38 PM Bug #5847 (Feedback): Crash report when accessing Diagnostics --> Packet Capture

Put in 'Feedback', assigned to Pingle. Jim Thompson

05:18 PM Bug #5847: Crash report when accessing Diagnostics --> Packet Capture

Confirmed working with latest snap. Marco Novielli

08:35 AM Bug #5847: Crash report when accessing Diagnostics --> Packet Capture

JimP committed a fix for this, so I cancelled the previous open PR. BBcan177 .

11:37 PM Bug #5848 (Feedback): Downloaded rules data validation

What "Internet sources"?
Jim Thompson

11:35 PM Bug #5341: dnsmasq 2.75 exits with signal 11

needs to be found/fixed by 2/15. Jim Thompson

09:07 PM Feature #5851: Add copy action to OpenVPN client / server

Setting this to "future" since we are not adding new features at this point. We are in "late Beta" mode, so bug fixes... Anonymous

05:41 PM Feature #5851 (Resolved): Add copy action to OpenVPN client / server

Just as there is a copy action on firewall rules, please add the same action to OpenVPN server / client pages. Exampl... Ivor Kreso

09:03 PM Bug #5853: Drop down menus and dialog boxes are too wide

This is something that may be reviewed in future version, but we are not going to go to fixed width controls. It is i... Anonymous

05:54 PM Bug #5853: Drop down menus and dialog boxes are too wide

I forgot to set assignee, category and affected version. Now I can't edit the ticket. Obviously this is for 2.3. Ivor Kreso

05:52 PM Bug #5853 (Not a Bug): Drop down menus and dialog boxes are too wide

I've noticed that on all pages dialog boxes and drop down menus are too wide. Even when the options take 1/4 of the l... Ivor Kreso

08:32 PM Todo #4858: Finish/fix CARP uniqid changes

Unfortunately this is not yet fixed, there are numerous issues when dealing with IP aliases and CARP in pfSense servi... Luiz Souza

05:44 PM Bug #5852 (Resolved): Changing update branch causes error and crash report

Changing update branch causes this error:
Fatal error: Cannot unset string offsets in /usr/local/www/system_update... Marco Novielli

01:04 PM Feature #5295: RRD Graphs custom color selection

note: I am a paying customer of a SG-2440 Evan Sikorski

01:03 PM Feature #5295: RRD Graphs custom color selection

I ahve some problems with colorblindness and would find this equally helpful. Just give us a web-ui access to the c... Evan Sikorski

12:35 PM Feature #5850 (New): Limit "WebCfg - System: User Manager page" privilege to non-admins and non-admin groups

A user with the "WebCfg - System: User Manager page" privileges can asign himself and others to the admin group and g... Timon Esser

10:34 AM Bug #5849 (Closed): Routing fail on CARP IPsec

Hi, people.
There is some strange detail in pfSense, found on 2.2.6 and 2.2.2 versions.
Probably may affect all ver... Uri Whatever

03:05 AM Bug #5476: Does not appear possible to use policy routing for traffic originating from the firewall (self)

Jim Pingle wrote:
> Be sure to account for the necessary outbound NAT in that scenario. The system selects the outbo... Всеволод Старовойтов

02/06/2016

03:30 PM Bug #5548: NTP "Unreach/Pending" on backup carp firewall with 2 LAN interfaces selected

Confirmed not a bug, thanks for the explanation and solution suggestion! Works fine now.
Added the following NAT r... Eduard Rozenberg

04:50 AM Bug #5548 (Not a Bug): NTP "Unreach/Pending" on backup carp firewall with 2 LAN interfaces selected

You're breaking NTP connectivity on the backup by sending the traffic using a CARP IP. It won't, and can't, receive t... Chris Buechler

12:27 PM Bug #5848 (Resolved): Downloaded rules data validation

Occasionally, data is not properly downloaded from internet based sources, and rules cannot be generated with errors ... Alex Vergilis

11:32 AM Bug #5847: Crash report when accessing Diagnostics --> Packet Capture

Its missing a comma on line 284
https://github.com/pfsense/pfsense/pull/2589 BBcan177 .

11:21 AM Bug #5847 (Resolved): Crash report when accessing Diagnostics --> Packet Capture

Receive the following page when accessing packet capture: Parse error: syntax error, unexpected ''!esp'' (T_CONSTANT_... Marco Novielli

11:18 AM Feature #5832: add speedtest cli in pfsense via package or comand line

when i try , console tell me
[2.3-BETA][admin@white.localdomain]/root: pkg install py27-speedtest-cli
Updati... Luis Couto

05:54 AM Feature #5832 (Resolved): add speedtest cli in pfsense via package or comand line

Added py-speedtest-cli to our package build list for 2.3. Not in the GUI packages, but can be installed with 'pkg ins... Chris Buechler

10:59 AM Bug #5846 (Resolved): Click status Icon to enable/disable Firewall Rules

In 2.2.x, you could click the status icon per Firewall Rule and enable/disable the Rule without having to edit the ru... BBcan177 .

08:36 AM Bug #5845 (Resolved): New URL Table (Ports) alias can cause invalid ruleset when alias changes not yet applied

When creating new URL Table (Ports) Alias entry, the entry needs to be saved twice in order for the values to be down... Alex Vergilis

07:22 AM Feature #1305 (Resolved): Queue Action should have its own symbol on the floating tab

The "queue" action ("match" on current versions) has had its own distinct icon for a while now (At least since 2.2.x,... Jim Pingle

07:12 AM pfSense Packages Bug #5534 (Feedback): Captive Portal stop sending accounting updates to free radius

Jim Pingle

07:11 AM pfSense Packages Bug #5534: Captive Portal stop sending accounting updates to free radius

I haven't seen or even heard of anything like this happening. We have customers who run CP in similar circumstances a... Jim Pingle

06:16 AM pfSense Packages Bug #5534: Captive Portal stop sending accounting updates to free radius

does captive portal stop sending them, or does FreeRADIUS stop receiving them? Ticket's filed under FreeRADIUS, but s... Chris Buechler

06:10 AM Bug #4770 (Resolved): Packet Filter Reject IPSEC packets

thanks for the feedback Chris Buechler

04:41 AM Bug #4770: Packet Filter Reject IPSEC packets

We are on 2.2.6 all round now and don't seem to be having this issue any more. Nei Ka

04:37 AM Bug #4770: Packet Filter Reject IPSEC packets

Nei: is this something you can still replicate on latest version?
I haven't heard of any such issues from anyone ... Chris Buechler

05:27 AM Bug #5341 (Feedback): dnsmasq 2.75 exits with signal 11

not something I've been able to replicate, we'll have to await feedback from those who encounter it. Chris Buechler

02:39 AM Bug #5341: dnsmasq 2.75 exits with signal 11

I switched 2.3 to dnsmasq-devel for now to get more testing on 2.76test. Chris Buechler

01:36 AM Bug #5341 (Confirmed): dnsmasq 2.75 exits with signal 11

updated original post with root issue and resolution Chris Buechler

05:25 AM Bug #2913: OpenVPN servers and clients not reevaluated when gateway groups settings are saved and applied

pretty sure I fixed this in a 2.2.x version and 2.3 some time ago, will check. Phil, if you know offhand whether it's... Chris Buechler

05:06 AM Feature #4688: Missing TFC Traffic Flow Confidentiality support

this should be a quick add and would be good to support, I'll take it. Chris Buechler

05:03 AM Feature #130 (Needs Patch): Add color picker to rules / nat rows

Chris Buechler

04:45 AM Bug #5415 (Resolved): pfSense attempts to display aliases on mouse over, which hangs the UI if there are significant numbers of IP addresses

this was a 2.2.x issue that was resolved with Phil's PR in RELENG_2_2. Not an issue in 2.3 Chris Buechler

04:42 AM Bug #4780 (Resolved): max_input_vars limit reached with aliases having >1000 members

This was bumped to 5000 in https://github.com/pfsense/pfsense/commit/e56374a84399026855886ce8f4d2b2ec4ab224b6
That... Chris Buechler

04:33 AM Bug #3860 (Resolved): Selection of Enable STARTTLS disapears after clicking TEST SMTP on system_advanced_notifications.php

fixed long ago Chris Buechler

04:31 AM Bug #3765 (Resolved): Port alias creation and expansion leaves white space padding, causes is_numeric() tests on port validity to fail.

the space issue doesn't exist in 2.3. The remainder is correct behavior. Chris Buechler

04:27 AM Feature #3289 (Needs Patch): VPN tunnels configuration displayed in pages

Chris Buechler

04:26 AM Bug #2933 (Resolved): miniupnpd ext_ifname setting is not updated after changing WAN interface type from DHCP to PPPoE

this was fixed some time ago Chris Buechler

04:25 AM Feature #2815 (Resolved): Anonymizing the config during export on the backup page

status.php has been updated since then to address this. Chris Buechler

04:24 AM Feature #2690 (Resolved): Prevent installation of incompatible packages during upgrade

incompatible packages are no longer available for install post-upgrade Chris Buechler

04:23 AM Feature #1189 (Duplicate): Gateway: Multiple monitor ips

duplicate of #4354 Chris Buechler

04:22 AM Feature #1811 (Closed): Monitor PPP for connections stuck in "initial" state

subject isn't necessary. Root issue likely doesn't exist in 2.2.x or 2.3 and newer. If it does, we'll need updated de... Chris Buechler

04:18 AM Feature #2660 (Closed): Checkbox to disable re-install packages after a config restore

the package reinstall process doesn't do this anymore in 2.3. Chris Buechler

04:02 AM Bug #5740 (Not a Bug): Alias Hostnames Are Not Being Updated

looks like a general DNS problem Chris Buechler

04:01 AM Bug #3471 (Resolved): Attempting to load an empty URL table (alias) causes an error

this was fixed in a 2.2x version, and still good in 2.3 Chris Buechler

03:58 AM Bug #5656 (Resolved): CP "RADIUS NAS IP attribute" loses selection on VIPs

fixed in 2.3, thanks! Chris Buechler

03:45 AM pfSense Packages Feature #3583 (Closed): haproxy-devel: individual backend for each acl

seems this exists already, as PiBa noted. Chris Buechler

03:38 AM Bug #3902 (Resolved): dhcp6c can't handle Server Unicast Option

this was either fixed in 2.2.x or 2.3 with newer dhcp6c Chris Buechler

03:21 AM Feature #4262 (Needs Patch): Alphabetical listing of interfaces, VLANs

Chris Buechler

03:17 AM Feature #5190 (Resolved): Include scponly package as part of the base

2.3 includes scponly in base Chris Buechler

03:15 AM Bug #5750 (Resolved): unbound.inc should not add 127.0.0.0/8 in forward mode

fixed, thanks! Chris Buechler

02:49 AM Bug #4423 (Resolved): NTP RRD graphing fails to recognise that offset can be negative

Merged, thanks David! Chris Buechler

01:29 AM pfSense Packages Bug #5839: Squid package loses all settings when upgrading from 2.2.2 to 2.2.6.

there is a setting in the package to not retain settings during package reinstall (which includes package upgrades), ... Chris Buechler

01:23 AM Bug #4747 (Resolved): DNS Resolver - Insufficient sanity checking for DNS Query Forwarding

fixed Chris Buechler

12:50 AM Bug #5844 (Resolved): Gateway groups VIPs not selected on edit, VIP list wrong

fixed Chris Buechler

12:49 AM Todo #4858 (Feedback): Finish/fix CARP uniqid changes

that should be the last of it. Chris Buechler

02/05/2016

08:12 PM Bug #4329: OpenVPN Server returns an error message while validating selfsigned certificate with a deep of 2

It definitely works in that specific circumstance if you pick the intermediate CA in the OpenVPN config, or a chain i... Chris Buechler

07:58 PM Bug #4329: OpenVPN Server returns an error message while validating selfsigned certificate with a deep of 2

Chris Buechler wrote:
> Steve: did you misstate one of the steps there? In that case, where both the OpenVPN server ... Steve Matos

07:10 PM Bug #4329: OpenVPN Server returns an error message while validating selfsigned certificate with a deep of 2

If the CA chain is the problem then this bug isn't quite as described. It should be closed in favor of one that fits ... Jim Pingle

07:04 PM Bug #4329: OpenVPN Server returns an error message while validating selfsigned certificate with a deep of 2

Steve: did you misstate one of the steps there? In that case, where both the OpenVPN server and client certs are from... Chris Buechler

06:40 PM Bug #4329: OpenVPN Server returns an error message while validating selfsigned certificate with a deep of 2

I am another pfSense user who has experienced this problem. Here's how I caused it to happen...
1.) Create a root ... Steve Matos

12:22 AM Bug #4329 (Not a Bug): OpenVPN Server returns an error message while validating selfsigned certificate with a deep of 2

This has to be a config that in some way was wrong to begin with, but worked out of coincidence until a newer OpenVPN... Chris Buechler

07:58 PM Bug #5844 (Feedback): Gateway groups VIPs not selected on edit, VIP list wrong

looks to be all working correctly now, leaving for additional testing Chris Buechler

04:46 PM Bug #5844 (Resolved): Gateway groups VIPs not selected on edit, VIP list wrong

On system_gateway_groups_edit.php, picking a virtual IP and saving does set it in the config, but upon editing the gr... Chris Buechler

03:14 PM Feature #5049 (Resolved): Add search capability to Multi-select for privileges and perhaps other places it makes sense.

Tested with the latest fixes and it works fine, closing, thanks! Jim Pingle

02:50 PM Bug #3719 (Not a Bug): vmware cpu host extraordinary high usage

we can only control CPU usage inside the guest, if it's low, the host should be reporting low as well (which it prett... Chris Buechler

01:58 PM Bug #4326: Limiters on firewall rules where NAT applies drop all traffic

Problem still present in version 2.2.6. What is the deadline for solving this problem? Hamilton Calixto

01:04 PM Bug #5748 (Resolved): stf interface IPv6 IP never leaves tentative state

This issue is fixed in pfSense. I'll keep track of FreeBSD changes and revert it when it's time Renato Botelho

01:03 PM Bug #5837 (Resolved): pfSense-upgrade: Make sure it aborts update when pkg calls fail

I was able to simulate the 'out of space' problem and the fixes work as expected Renato Botelho

05:50 AM Bug #5837 (Feedback): pfSense-upgrade: Make sure it aborts update when pkg calls fail

Applied in changeset commit:f1d01c3ee747a7392cf3df8175aa362c4a24e675. Renato Botelho

05:39 AM Bug #5837 (Assigned): pfSense-upgrade: Make sure it aborts update when pkg calls fail

Renato Botelho

01:02 PM Feature #4083: Replace GET by POST

It's a WIP and won't be completed for 2.3 Renato Botelho

12:36 PM Bug #5363 (Needs Patch): Reject rules show as blocked on firewall log normal and dynamic views

When it's ready, without cause any performance problem, we can integrate on next major version Renato Botelho

11:59 AM Todo #4543 (Closed): 2.1.5 to 2.2.1 upgrade hangs on package reinstall - more info requested during package reinstall, post upgrade.

This kind of issue will not happen anymore on 2.3 using pkg(8) Renato Botelho

06:58 AM Bug #5841 (Resolved): firewall_rules_edit.php - Floating rules added to the top of the rules list produce XML error

Anonymous

01:17 AM Bug #4936: dhcpd sets wrong permissions on leases files

We're now on dhcpd 4.3. This is an issue in dhcpd, so may be fixed. I don't have a replicable test case. Chris Buechler

01:14 AM pfSense Packages Bug #4304 (Closed): pfflowd non-functional on 2.2.x versions

pfflowd is abandoned upstream, and would require a good deal of work to function on FreeBSD 10+. softflowd is availab... Chris Buechler

01:02 AM Feature #4534 (Resolved): Add ability to start dhcp6c in debug mode

works. Thanks Paul! Chris Buechler

12:41 AM Feature #4366 (Resolved): Namecheap Dynamic DNS updates fail on subdomain formatted domains

Looks good, works. Chris Buechler

12:26 AM Bug #3900 (Resolved): DynamicDNS should allow "@" at hostname

Chris Buechler

02/04/2016

11:46 PM Feature #4534 (Feedback): Add ability to start dhcp6c in debug mode

added in https://github.com/pfsense/pfsense/pull/2585 Chris Buechler

11:40 PM Feature #5843 (Resolved): Allow gateway weights higher than 5

discussed here:
https://github.com/pfsense/pfsense/pull/1614
implemented here:
https://github.com/pfsense/pfse... Chris Buechler

11:14 PM Bug #5051 (Resolved): Dynamic DNS URL for NO-IP should be updated

Works. Thanks Tiago Chris Buechler

09:25 AM Bug #5051 (Feedback): Dynamic DNS URL for NO-IP should be updated

Pull request has been merged, thanks! Renato Botelho

11:01 PM Bug #5842 (Resolved): gif interface MTU only set at boot time with static IP WAN

fixed Chris Buechler

10:59 PM Bug #5842 (Resolved): gif interface MTU only set at boot time with static IP WAN

gif interface's MTU is only configured correctly post-boot if it's on a static IP WAN. Otherwise you end up with the ... Chris Buechler

09:47 PM Bug #4418 (Resolved): IPsec mobile clients - bogus "p" appended to search domain

this was either fixed in newer OS X or newer strongswan, issue no longer exists. ... Chris Buechler

09:26 PM Bug #5764 (Resolved): OpenVPN 'topology subnet' change breaks many upgraded client configs

all the issues here are fixed. If the client's configured with a topology and the server pushes one, it prefers the p... Chris Buechler

09:15 PM Bug #5830 (Resolved): dpinger pings dropped by some things because of no data payload

works as intended, thanks Denny and Renato. Chris Buechler

04:50 AM Bug #5830 (Feedback): dpinger pings dropped by some things because of no data payload

Applied in changeset commit:85a2b0655015a4cae43948aa19cf6f7e647f9062. Renato Botelho

08:50 PM Feature #4632: Support for Multipath TCP (MPTCP)

update: https://www.freebsd.org/news/status/report-2015-10-2015-12.html#Multipath-TCP-for-FreeBSD
Maybe in 11-RELE... Jim Thompson

08:14 PM Bug #4329: OpenVPN Server returns an error message while validating selfsigned certificate with a deep of 2

I've never been able to replicate any issues here. The circumstance I believe should be:
# create CA testCA
# cr... Chris Buechler

07:50 PM Bug #5841: firewall_rules_edit.php - Floating rules added to the top of the rules list produce XML error

Applied in changeset commit:e1e1ab076b99a6cc47fb5fe1e5519a2e686eca45. Anonymous

07:41 PM Bug #5841 (Feedback): firewall_rules_edit.php - Floating rules added to the top of the rules list produce XML error

Interface name is set to "FloatingRules" which conflicted with the XML due to case insensitivity.
Added some strto... Anonymous

07:39 PM Bug #5841 (Resolved): firewall_rules_edit.php - Floating rules added to the top of the rules list produce XML error

firewall_rules.php - visit the "Floating" tab, click hte "Add to top" button add a description and save. The system p... Anonymous

06:37 PM Bug #3624 (Closed): "ppp: OpenConfFile: Can't open file '/var/etc/mpd_wan.conf': No such file or directory"

no indications of this happening to anyone on 2.2.x and newer versions Chris Buechler

06:33 PM Feature #4734 (Needs Patch): SSHD Logs, select facility to log to

Chris Buechler

06:31 PM Feature #3426 (Resolved): NanoBSD shorter F1 boot prompt display

-t is for ticks, of which there are about 18.2 per second, so '-t 2' would be way too short. changed this to roughly ... Chris Buechler

06:21 PM Feature #4597: Allow gateway monitoring via VIP

Thanks . Sorry about that! Brendon Baumgartner

06:14 PM Feature #4597 (Duplicate): Allow gateway monitoring via VIP

duplicate of #3859 Chris Buechler

06:17 PM Feature #2607 (Duplicate): CARP Traffic affected from Traffic Shaping

duplicate of #2099 Chris Buechler

06:14 PM Feature #3859: Make it possible to set the source IP address for gateway monitoring

can be done via source NAT. Chris Buechler

06:11 PM Todo #2346 (Closed): do we need to change our require() calls to require_once()?

Chris Buechler

06:09 PM pfSense Packages Bug #4868 (Duplicate): excessive Quagga package restart when IP change

duplicate of #4474 Chris Buechler

06:06 PM Feature #1020 (Closed): Provide HTTP basic auth additional authentication option

time would be better spent on certificate auth instead. Chris Buechler

05:57 PM Feature #3105 (Closed): Multi alias and alias uncluding

nested aliases cover anything you could want here Chris Buechler

05:50 PM Feature #3260 (Resolved): Add ability to see a summary list of IP addresses for currently connected mobile IPsec clients

this has been there for quite some time. Chris Buechler

05:42 PM Feature #2438 (Duplicate): Inbound traffic shaping on unpredictable ADSL - the qosmon approach

duplicate of #2315 Chris Buechler

05:32 PM Feature #4647 (Needs Patch): Services: DHCP server should default to LAN, not WAN

it defaults to the first static IP interface, which for most is LAN. Defaulting to the first interface with an enable... Chris Buechler

05:29 PM Feature #3507 (Duplicate): add regex? to dhcpv6 Static mappings to convert windows DUID to BSD formatted DUID (replace -s with :s)

duplicate of #2568 Chris Buechler

05:28 PM Feature #3476 (Duplicate): Null rule entry for logical segmentation of sets of rules

Chris Buechler

05:27 PM Feature #3476 (Resolved): Null rule entry for logical segmentation of sets of rules

there is a separator feature now in 2.3 Chris Buechler

04:32 PM Feature #2453 (Resolved): [ER] allow renaming of network interfaces without enabling them

this is possible in 2.3 Chris Buechler

04:11 PM Feature #2226 (Resolved): Unmonitored gateways should be listed as "unmonitored" instead of "online" in dashboard

I addressed that in the Status>Gateways page recently in 2.3. Just added that for the dashboard gateways widget, also... Chris Buechler

03:53 PM Feature #1185 (Closed): PHP compression activation

enabled gzip compression in nginx for 2.3. no need for PHP compression Chris Buechler

03:12 PM Bug #2164 (Resolved): Captive Portal - RADIUS - Acct-Session-Time does not reset when "stop/start accounting" is enabled

Tested this pretty thoroughly and it's OK here. If someone else finds a problem, feel free to comment. Jim Pingle

02:45 PM Bug #2164: Captive Portal - RADIUS - Acct-Session-Time does not reset when "stop/start accounting" is enabled

Tested again on a new setup and single session accounting looks like it's working great. Multi-session needs one more... Jim Pingle

03:04 AM Bug #2164: Captive Portal - RADIUS - Acct-Session-Time does not reset when "stop/start accounting" is enabled

bump for resolution Jim Thompson

12:22 PM Feature #4470: RA page in GUI

Hi guys!
After I seen this:
https://redmine.pfsense.org/projects/pfsense/repository/revisions/424921dd4c05d0dc609... Greg M

09:25 AM Bug #3900 (Feedback): DynamicDNS should allow "@" at hostname

Pull request has been merged, thanks! Renato Botelho

08:25 AM Todo #4120 (Resolved): Improve passwd security

One place was missed (swapping the password for bcrypt-hash in /conf.default/config.xml), I pushed a correction for t... Jim Pingle

03:55 AM Todo #4120: Improve passwd security

It's working fine AFAIK. I didn't see any problems reported.
Left it in feedback so more people can validate Renato Botelho

03:04 AM Todo #4120: Improve passwd security

bump Jim Thompson

07:22 AM pfSense Packages Bug #5840 (Not a Bug): Installing self signed SSL certificate breaks https webgui

Not a general issue, likely something wrong with the certificate or the way it was imported. The default certificates... Jim Pingle

07:18 AM pfSense Packages Bug #5840 (Not a Bug): Installing self signed SSL certificate breaks https webgui

I have created a self signed SSL certificate with openssl and xca GUI which I have stored in the pfSense webgui in ce... Paul Müller

07:05 AM Bug #4864 (Needs Patch): IPsec MSS clamping not backed up in IPsec partial backup

It's a global flag because it's used also by OpenVPN and PPPoE server.
If you think it's useful to have separate v... Renato Botelho

03:56 AM Bug #4605 (Resolved): OpenVPN user/pass fails if usernames and/or passwords contain special characters (reopen bugs 4177 and 4340)

Works Renato Botelho

03:06 AM Bug #4605: OpenVPN user/pass fails if usernames and/or passwords contain special characters (reopen bugs 4177 and 4340)

bump (a month in feedback) Jim Thompson

03:55 AM Bug #5041 (Resolved): dhcpd.conf in-addr.arpa zones incorrect in some circumstances

It works Renato Botelho

03:06 AM Bug #5041: dhcpd.conf in-addr.arpa zones incorrect in some circumstances

bump (a month old now) Jim Thompson

03:51 AM Bug #5831 (Resolved): After updating, on reboot pfSense is trying to fetch files

Ivor reported it's OK now Renato Botelho

03:05 AM Bug #5451: Invalid ruleset generated with some AVPair-defined ACLs

bump (3 months, fix it or close it.) Jim Thompson

03:03 AM Bug #4150: Captive Portal doesn't work with > 120 VLAN interfaces

bump Jim Thompson

02/03/2016

06:53 PM Bug #4515 (Resolved): Unable To Set MTU on LAGG Interface If No VLANs Assigned

I believe this was fixed in a later 2.2.x version, but it definitely works in 2.3. Chris Buechler

05:45 PM Feature #4083 (Assigned): Replace GET by POST

Jeremy Porter

05:35 PM Feature #2533 (Resolved): Use Certificate Manager in Captive portal settings

completed some time ago Chris Buechler

04:25 PM Feature #5827 (Needs Patch): Captive portal login facebook

Chris Buechler

04:19 PM Bug #3290 (Duplicate): IPV6 conectivity not restored after cablemodem reset

the link up dhcp6c issue was fixed in another ticket covering same issue Chris Buechler

04:15 PM Feature #4063 (Duplicate): Captive Portal: Sync IPFW table states between CARP Members

duplicate of #97 Chris Buechler

04:14 PM pfSense Packages Feature #4643 (Needs Patch): munin-node package?

Chris Buechler

04:14 PM Feature #3504 (Resolved): Firewall rules hit counter

Marcello's change there has been implemented in 2.3. That addresses subject as best possible Chris Buechler

02:07 PM Bug #5830 (Assigned): dpinger pings dropped by some things because of no data payload

New dpinger is in place, working on GUI Renato Botelho

02:05 PM Bug #4329 (Feedback): OpenVPN Server returns an error message while validating selfsigned certificate with a deep of 2

After spend some time making lots of tests on 2.3 I was not able to reproduce it anymore.
I'll leave this in feedb... Renato Botelho

01:32 PM pfSense Packages Bug #5839 (Feedback): Squid package loses all settings when upgrading from 2.2.2 to 2.2.6.

upgrading base version doesn't touch the squid config. Could have went forward a number of squid package versions, th... Chris Buechler

01:25 PM pfSense Packages Bug #5839 (Not a Bug): Squid package loses all settings when upgrading from 2.2.2 to 2.2.6.

Squid3 package loses all settings when upgrading from 2.2.2 to 2.2.6. Jeroen van Gelderen

11:37 AM Feature #2727 (Resolved): Add switch to dDNS Updates (RFC 2136) for external IP check

This was added long ago. Jim Pingle

04:59 AM Bug #4418: IPsec mobile clients - bogus "p" appended to search domain

For the records, I've tried it with Unity plugin enabled and disabled with same results Renato Botelho

04:52 AM Bug #4418 (Feedback): IPsec mobile clients - bogus "p" appended to search domain

I spent some time trying to reproduce it on 2.3 snapshot and couldn't, as you can see below, all split DNS items look... Renato Botelho

04:54 AM pfSense Packages Bug #3986: BandwidthD can break php-fpm in unknown rare edge case

I will be traveling for a while, so not much chance to do any work on this. But if someone has time to port bandwidth... Phillip Davis

01:59 AM pfSense Packages Bug #3986 (Confirmed): BandwidthD can break php-fpm in unknown rare edge case

Chris Buechler

03:24 AM Bug #4286: State killing on gateway change

I just saw you already opened this feature request 5 years ago https://redmine.pfsense.org/issues/855
"the ability t... Jo S

03:17 AM Bug #4286: State killing on gateway change

Ok then if it's not a bug, it's a feature request, "State killing on gateway recover".
Without this option, VPN conn... Jo S

12:37 AM Bug #4286 (Not a Bug): State killing on gateway change

it works as intended, it just doesn't wipe states after a gateway recovers as that's usually excessively disruptive. Chris Buechler

02:08 AM Bug #3802 (Resolved): DNS forwarder/resolver - IPv6 link local selections shouldn't use hard-coded addresses

completed and working in 2.3 for forwarder and resolver Chris Buechler

01:53 AM Feature #2839 (Closed): MultiWAN channel up/down notification

Chris Buechler

01:51 AM Bug #1903 (Closed): 1.x->2.0 Config upgrade problem with multiple bridged interfaces

this turned out to be an uncommon circumstance and nearly every impacted system is upgraded past this being an issue ... Chris Buechler

01:43 AM Bug #1991 (Resolved): URL Table aliases issue after config restore

that was fixed long ago Chris Buechler

01:35 AM Bug #1523 (Closed): DHCP settings checks only one interface IP via ifconfig to validate settings

while technically DHCP could work on an alias subnet, there are tons of potential complications in allowing something... Chris Buechler

01:32 AM Bug #4325 (Resolved): GUI for limiter rules turns Gb/s into b/s

removed the Gb option Chris Buechler

01:26 AM Bug #2325 (Duplicate): Limiters don't work on OPT WAN rules w/rdr

duplicate of #1848 Chris Buechler

01:26 AM Bug #3096 (Duplicate): Limiters problem using Multi WAN

duplicate of #1848 Chris Buechler

01:24 AM Bug #1634 (Duplicate): Limiter and bridge needs special handling

duplicate of #3824 Chris Buechler

01:22 AM Bug #2749 (Not a Bug): gateway groups - when tier 1 gateway fails, routes traffic via gateway set to "never"

"never" on a gateway group means that gateway is never a member of the group. that works fine.
See System>Advance... Chris Buechler

01:20 AM Bug #2171 (Closed): PHP fast-cgi and exit behaviour

fastcgi no longer applicable Chris Buechler

01:16 AM Bug #3006 (Resolved): filterdns prevents pfsense to boot up when dns resolution is not possible.

fixed some time ago Chris Buechler

01:15 AM pfSense Packages Bug #2809 (Closed): Reverse Proxy for ActiveSync / Real-Time Monitor

Chris Buechler

01:14 AM Bug #2997 (Duplicate): CARP and pfSync traffic issues with traffic shaping

at least one other ticket on same issue Chris Buechler

01:13 AM Bug #2493 (Closed): WAN loadbalancing rule fails on second/third safe

lot of issues with sticky back then that aren't an issue in 2.2.x and newer. Chris Buechler

01:11 AM Bug #2398 (Closed): tftpd and tftp-proxy (inetd?) dies after WAN periodic reset

this likely fixed a number of versions ago. at a minimum, the same issue doesn't exist in 2.3 Chris Buechler

01:03 AM Bug #3836 (Resolved): field redirect target port must be quit in a specific way to keep conntent

fixed in bootstrap conversion Chris Buechler

12:40 AM Bug #4549 (Closed): Backup before upgrade fills hard drive, can't find kernel

"full backup" feature no longer exists in 2.3 so no longer applicable Chris Buechler

12:35 AM Bug #4666 (Not a Bug): Restore full backup

it worked, with the caveats Kill Bill noted (though the reboot part is fixed in later 2.2.x versions). Removed from 2... Chris Buechler

12:25 AM pfSense Packages Bug #4167 (Resolved): Lightsquid package does not remove crontab entries

fixed. if you ended up with multiple instances in cron, use the cron package to remove Chris Buechler

12:20 AM Bug #4058 (Resolved): WAN interface configured as PPPoE not displaying properly in Interfaces box of Dashboard

Chris Buechler

12:17 AM pfSense Packages Bug #4508 (Needs Patch): Mailscanner does not work on pfSense 2.2.

Chris Buechler

12:12 AM pfSense Packages Bug #4243 (Resolved): Last squidguard update prevents squid from starting

Chris Buechler

12:09 AM Bug #4441 (Resolved): duplicating a relayd load balancer monitor in reality just overwrites the existing one and renames it.

fixed Chris Buechler

02/02/2016

11:50 PM Bug #4430 (Closed): pppoe configuration can not be removed from WAN interface.

this was duplicated with some other bug fixed some time ago Chris Buechler

11:47 PM pfSense Packages Bug #4420 (Resolved): warning: bad command startup -- throttling

Chris Buechler

11:45 PM Bug #4364 (Duplicate): cannot change or set keymap during and after install

duplicate of #4387 Chris Buechler

11:45 PM pfSense Packages Bug #4376 (Closed): Squid3 Squidguard3 Stability Problems

Chris Buechler

11:41 PM Bug #4648 (Resolved): ifconfig syncpeer fails with IPv6 address

pfsync syncpeer only supports IPv4. Added input validation to prevent invalid configs. Chris Buechler

11:27 PM pfSense Packages Bug #4608 (Resolved): squidGuard & pfsense RAM disk compatible

Chris Buechler

11:27 PM pfSense Packages Bug #4615 (Resolved): /var/logs/c-icap/server.log & access.log growing without being rotated

Chris Buechler

11:12 PM Feature #4321 (Resolved): Enable IPv6 for miniupnpd

option's enabled. Does show up as a valid IGD on IPv6 in upnpc. Haven't found any real applications that use IPv6 upnp Chris Buechler

10:53 PM pfSense Packages Bug #5727 (Resolved): tftp service - errors when stopping service

Chris Buechler

10:52 PM Bug #2392 (Closed): Adding outgoing, floating rule for DNS on the WAN interface breaks DNS lookups.

no replicable issues here in current versions and no feedback Chris Buechler

10:51 PM Bug #3163 (Resolved): XS4All IPv6 does not work

variety of dhcp6c related changes in other tickets since then. No recent reports of dhcp6c crashes like were seen here Chris Buechler

10:44 PM pfSense Packages Bug #4612 (Resolved): syslog-ng creates logrotate cron job, but logrotate doesn't exist

Chris Buechler

10:43 PM Bug #5609 (Closed): jquery inside widgets need to be added manually

Chris Buechler

10:41 PM Todo #5563 (Resolved): Login screen isn't responsive / mobile friendly

Chris Buechler

10:41 PM Bug #5134 (Resolved): The handling of base64 encoding in the package XML is insane

Chris Buechler

10:40 PM Bug #5361 (Resolved): PFSense Control Panel hangs

fixed some time ago Chris Buechler

10:39 PM Bug #4766 (Confirmed): "URL Table (IPs)" and "URL (IPs)" do not work when text file is hosted on a fresh install of pfSense

Chris Buechler

08:32 PM Feature #4079 (Closed): Specify opt-number to use on new interfaces

Chris Buechler

08:31 PM Feature #3406 (Needs Patch): Change Virtual IP & CARP Status screens to a tree view

Chris Buechler

08:29 PM Bug #3818 (Resolved): Gateway status terminology is inconsistent when it is "pending" or "unknown"

this is addressed by the switch to dpinger, its status is sane and consistent. Chris Buechler

08:28 PM pfSense Packages Bug #3516 (Needs Patch): pfflowd segfaults when netflow version is set to version 9

pfflowd is dead (upstream abandoned, doesn't work on 2.2.x and newer) Chris Buechler

08:25 PM Bug #3081 (Closed): multi WAN with pppoe over dhcp interface not working

lot has changed in the past 3 years. There are people doing similar things with no issue. Zeev: if you're still seein... Chris Buechler

08:20 PM Feature #2211 (Closed): tun interfaces should not be hidden from Interfaces>assign

Chris Buechler

08:20 PM Feature #3261 (Needs Patch): RRD Graph Change

Chris Buechler

08:18 PM Feature #3048 (Resolved): Pre-download packages to reduce downtime during upgrade process?

2.3 does this Chris Buechler

08:18 PM Feature #3013 (Resolved): Better upgrading for a CARP cluster

this is fixed in 2.3 by the nature of how upgrades work now, all the packages are downloaded pre-reboot, and are upgr... Chris Buechler

08:17 PM Bug #2257 (Closed): Multiple related bugs, apparent causes and supporting/disagnostic data (please change bug report title as needed)

I see multiple issues here that have since been fixed. the rest isn't clear and likely would be completely different ... Chris Buechler

08:12 PM Feature #2980 (Closed): Clickable "sort" by IP or username PPTP VPN

PPTP's dead Chris Buechler

08:08 PM Feature #813 (Needs Patch): Offer to create a ppp interface during console assignment

Chris Buechler

08:07 PM Feature #1349 (Needs Patch): DHCP+L2tp/Pptp type connection.

Chris Buechler

08:05 PM Feature #709 (Resolved): Add DHCP lease counts to the DHCP leases page

added in 2.3 Chris Buechler

08:04 PM Todo #1481 (Needs Patch): Bring back console menu banner link indication

Chris Buechler

08:03 PM Feature #1701 (Closed): Vouchertime should be seperated

people do this type of thing with RADIUS users faking vouchers and RADIUS accounting to handle time Chris Buechler

08:01 PM Bug #1335 (Not a Bug): Scheduled Floating Queue Rules not prioritized correctly.

they're prioritized the same as rules without a schedule. sounds like the order wasn't right to match, or were expect... Chris Buechler

07:59 PM Feature #149 (Needs Patch): !ports in firewall rules

Chris Buechler

07:03 PM Bug #4474 (Confirmed): IP address change triggers reload of all packages

as Phil noted it's not as simple as not doing this, as that breaks other situations that require it. Chris Buechler

02:58 PM Feature #5049 (Assigned): Add search capability to Multi-select for privileges and perhaps other places it makes sense.

Looks good there too, though I hit a snag.
It works fine if you select just one thing, but if you select multiple ... Jim Pingle

02:37 PM Feature #5049 (Feedback): Add search capability to Multi-select for privileges and perhaps other places it makes sense.

Anonymous

02:30 PM Feature #5049: Add search capability to Multi-select for privileges and perhaps other places it makes sense.

Done Anonymous

02:26 PM Feature #5049 (Assigned): Add search capability to Multi-select for privileges and perhaps other places it makes sense.

That looks and works great, thanks!
Can that get put on the privilege editor for the Groups as well? (system_group... Jim Pingle

02:10 PM Feature #5049: Add search capability to Multi-select for privileges and perhaps other places it makes sense.

Applied in changeset commit:4abd750d4dcd3ae2467d3010b22aa0b2172d4407. Anonymous

02:08 PM Feature #5049 (Feedback): Add search capability to Multi-select for privileges and perhaps other places it makes sense.

Adding select/search capability via chosen or select2 gave formatting issues and would no longer allow dynamic help t... Anonymous

10:01 AM Feature #4195: Aliases: sections

Alias tables may now be sorted by clicking the column header.
You cannot save the revised order yet, but it is a s... Anonymous

07:20 AM Bug #3330: Load Balancer showing wrong Status when using aliases for the port

Bug still affecting 2.2.6, Pool Status is marked as down whenever Alias is used, even with ICMP as a monitor.
Rami Gherbal

06:30 AM Bug #5831: After updating, on reboot pfSense is trying to fetch files

Applied in changeset commit:b69a106aa2ee995cc1e3fb3c161fc8ffb553605b. Renato Botelho

01:45 AM Bug #5045 (Resolved): advanced fields not expanded automatically where such options are configured

I believe we covered all these where they did so on 2.2.x. Chris Buechler

01:40 AM pfSense Packages Bug #5117 (Resolved): HAVP fails to start after claimed to be successfull install 2.2.4

Chris Buechler

01:34 AM Bug #1344 (Resolved): Replace prototype javascript code with jQuery

Chris Buechler

01:29 AM Feature #1371 (Needs Patch): UPnP & NAT-PMP Status - Delete individual connections

Chris Buechler

01:26 AM Feature #1860 (Needs Patch): Allow NTP server to be overriden by WAN DHCP

Chris Buechler

01:25 AM Bug #1891 (Resolved): i18n of checks related to the [apply] buttons'

no longer applicable Chris Buechler

01:24 AM Feature #1530 (Needs Patch): Super vlan(RFC 3069)

Chris Buechler

01:16 AM Feature #1431 (Closed): PPPoE LQR Echo

this has been configured for years Chris Buechler

01:13 AM Feature #1456 (Closed): Vouchers expire at fixed time

use of user auth with a hidden username or password to fake vouchers is the answer for such circumstances Chris Buechler

01:12 AM Todo #1182 (Closed): Integrate minicron to check_reload_status

Chris Buechler

01:07 AM Bug #2578 (Closed): Upgrade 1.2.3 to 2.0 CARP

no apparent issues here, no response Chris Buechler

01:04 AM Feature #1868 (Needs Patch): RFE: DHCP Server option pull-down menus, pre-populated data types

Chris Buechler

01:04 AM Feature #1904 (Needs Patch): DHCP server doesn't allow arbitrary config blocks

Chris Buechler

01:03 AM Feature #1922 (Closed): Add stge(4) driver

not hardware we care about Chris Buechler

01:00 AM Bug #4760 (Closed): PPPoE loses connection to modem, clicking connect does not reconnect but rebooting pfSense does

no response and no other reports of such issues in this circumstance Chris Buechler

12:16 AM Bug #2114 (Resolved): Depreciated PHP Functions/Warnings

addressed long ago Chris Buechler

12:14 AM Feature #185 (Resolved): PPPoE server 'set radius me'

fixed PPPoE server to actually use the NAS IP field. PPTP's dead. Chris Buechler

12:01 AM Feature #2007 (Needs Patch): RRD Data -- Saving and Restoring

Chris Buechler

12:00 AM Feature #2013 (Closed): Package log file size

Chris Buechler

02/01/2016

11:57 PM Bug #1905 (Resolved): Upgrade code does not rename PPPoE restart script, creates second cron job.

fixed Chris Buechler

11:46 PM Feature #1217 (Needs Patch): Change OpenVPN local/remote networks to lists instead of single boxes

Chris Buechler

11:44 PM Bug #1705 (Closed): Multi-WAN Failover loses default route

root cause of this is "Gateways status could not be determined", which was an apinger status race condition. that's f... Chris Buechler

11:42 PM pfSense Packages Feature #2197 (Closed): WebDav gateway

Chris Buechler

11:41 PM Bug #1893 (Closed): Status - Queue does not show all the queues

not aware of any such issues in current versions. If you're still seeing issues on the latest version, please start a... Chris Buechler

11:41 PM Feature #1708 (Closed): LDSR from Yahoo

Chris Buechler

11:40 PM Feature #4354 (Closed): Allow dpinger to ping more than one destination for a gateway.

Jim Thompson

11:38 PM Feature #4354: Allow dpinger to ping more than one destination for a gateway.

using an anycasted IP as the monitor IP should generally suffice Jim Thompson

11:36 PM Feature #4632: Support for Multipath TCP (MPTCP)

Viprnet is just bonding, not mtcp.
When mtcp shows up in FreeBSD base (not as a side-project), we'll make this wor... Jim Thompson

11:36 PM Feature #1911 (Closed): Interface Groups

Chris Buechler

11:36 PM Bug #444 (Closed): All mounts should be noatime

Chris Buechler

11:30 PM Feature #772 (Needs Patch): Add More Options to Diagnostics -> DNS Lookup

Chris Buechler

11:28 PM Feature #604 (Needs Patch): Need to show interrupts per second for interfaces

Chris Buechler

11:27 PM Feature #1652 (Closed): Improvements in captive portal page

the things that matter noted here were addressed some time ago Chris Buechler

11:26 PM Feature #1422 (Closed): short voucher codes

use a RADIUS server to fake vouchers with a hidden username or password for arbitrary lengths. Chris Buechler

11:25 PM Feature #1424 (Closed): OpenVPN entry on interface groups

Chris Buechler

11:23 PM Bug #1383 (Closed): Upgrade routines should check free space

done in #5837 Chris Buechler

11:22 PM Bug #1532 (Closed): test_pfSpkg code breaks packages

no longer relevant as that doesn't exist anymore Chris Buechler

11:21 PM pfSense Packages Feature #1435 (Needs Patch): Squid - add syslog capability

Chris Buechler

11:21 PM Feature #1267 (Resolved): Show certificate expiration dates in UI

this was completed quite some time ago Chris Buechler

11:20 PM Feature #150 (Closed): Option to change syslog facility

facility is partially how syslogd splits log files, not worth doing Chris Buechler

11:19 PM Feature #1269 (Closed): define a default end date for for new certs by CA

Chris Buechler

11:19 PM Feature #1109 (Duplicate): Allow prepending exception entries to SPD

newer feature ticket covering this Chris Buechler

11:15 PM Feature #624 (Needs Patch): Add more native way to connect on WAN via DHCP+PPTP/L2TP

Chris Buechler

11:14 PM Feature #805 (Closed): PPTP Status screen

PPTP's dead Chris Buechler

11:14 PM Feature #663 (Resolved): Add more options to DHCP server static entries

this was done some time ago Chris Buechler

11:12 PM Feature #676 (Needs Patch): Move DHCP (fixed lease) definitions between interfaces

Chris Buechler

11:12 PM Feature #77 (Closed): All files need function headers and also file headers

Chris Buechler

11:09 PM pfSense Packages Bug #4885 (Resolved): squid3 chmod error at boot after reinstall post-upgrade

Chris Buechler

11:09 PM pfSense Packages Bug #5154 (Resolved): squid3 - min/max_object_size directives out of order in config and not applied to cache_dir

Chris Buechler

11:08 PM Bug #3519 (Duplicate): IPv6 - Dynamic IPv6-prefix - After reconnect no new IPv6 prefix

duplicate of #5297 Chris Buechler

11:07 PM pfSense Packages Bug #4085 (Resolved): Check_mk agent configuration: 'Listen Port' is required, contrary to description

Chris Buechler

11:04 PM Bug #5836 (Resolved): Insufficient space in 1GB NanoBSD image to upgrade 2.3 snapshots cleanly.

Chris Buechler

01:30 PM Bug #5836 (Feedback): Insufficient space in 1GB NanoBSD image to upgrade 2.3 snapshots cleanly.

Applied in changeset commit:7d9c553c917c92e816178ba63c5a50cb1a3b9d74. Renato Botelho

12:42 PM Bug #5836 (Assigned): Insufficient space in 1GB NanoBSD image to upgrade 2.3 snapshots cleanly.

Looks like 1Gb nanobsd has no enough space to handle pkg(8) model. Renato Botelho

12:36 PM Bug #5836 (Resolved): Insufficient space in 1GB NanoBSD image to upgrade 2.3 snapshots cleanly.

Recent snapshots have required two upgrade cycles to get all the updates pkgs in the update.
Checking the logs it is... Steve Wheeler

11:03 PM Bug #4817 (Closed): rc.start_packages: Restarting/Starting all packages on config sync

it's not the config sync, it's the resulting OpenVPN restart that restarts packages. That has a separate ticket Chris Buechler

10:59 PM Bug #5456 (Closed): redmine filter bug?

works here too Chris Buechler

10:09 PM Bug #5131 (Closed): Wrong radvd.conf generated

works as it should, root issue is really that it isn't configurable on a tracked interface which is covered elsewhere. Chris Buechler

09:57 PM Bug #5838 (Not a Bug): Diagnostics-->Traceroute can cause DoS on web console

subject issue doesn't exist as claimed. You can find long-running traceroute commands, like trying to traceroute to a... Chris Buechler

08:37 PM Bug #5838: Diagnostics-->Traceroute can cause DoS on web console

Having a high number of hops such as 18 is also key to seeing the issue.
Eventually, NGINX error comes up with "50... Marco Novielli

08:29 PM Bug #5838: Diagnostics-->Traceroute can cause DoS on web console

Just reread my last sentence - I think I need some rest.
Either way, I can definitely reproduce the issue. Steps ... Marco Novielli

08:22 PM Bug #5838: Diagnostics-->Traceroute can cause DoS on web console

Sorry, traceroute definitely works with IP address. Got confused with DNS lookup for a second.
I had 18 selected ... Marco Novielli

08:16 PM Bug #5838 (Not a Bug): Diagnostics-->Traceroute can cause DoS on web console

Running a traceroute with an IP address will cause a DoS on the web console, and is then no longer accessible. Inter... Marco Novielli

07:58 PM Bug #4031: Notifications mail bomb in some gateway failure circumstances

this still happens to me along with other issues when wan goes down on 2.3 does not seem related to flapping Michael Kellogg

05:04 PM Bug #4524 (Resolved): Relax shaper wizard interface validation when there are no interfaces with gateways selected

Chris Buechler

05:02 PM Bug #4240 (Not a Bug): 2.2 IPv6 radvd RDNSS Issue

radvd's config and behavior is correct in this circumstance. Chris Buechler

04:55 PM Bug #3308 (Closed): route-to/reply-to not updated when PPP gateway IP changes

the update of route-to/reply-to definitely works in current versions Chris Buechler

04:49 PM pfSense Packages Bug #5169 (Resolved): /etc/rc.haproxy_ocsp.sh emits an extra blank line, causing cron to email that output

Chris Buechler

04:48 PM pfSense Packages Bug #1561 (Resolved): HTTP traffic dies after disabling HAVP

Chris Buechler

04:48 PM pfSense Packages Bug #5157 (Resolved): HAVP 1.09 - Log tabs give 404, daemon mode doesn't work

Chris Buechler

04:47 PM Bug #4233 (Resolved): Inconsistent handling of seperators in easyrule cli

Chris Buechler

04:43 PM Bug #4105 (Not a Bug): rc.update_bogons.sh fetch failure should never sleep on FW upgrade

subject issue doesn't exist, user-added <shellcmd> responsible Chris Buechler

04:42 PM Bug #4392 (Closed): OpenVPN daemon crashing with ath(4) card installed

unable to replicate. guessing it was probably fixed in ath driver update in newer 2.2.x versions Chris Buechler

04:39 PM Bug #2943 (Closed): Problem with Interim-Update in PfSense Captive portal

JimP's been through everything here with FreeRADIUS and accounting. The only outstanding issues were addressed with t... Chris Buechler

04:32 PM pfSense Packages Bug #4391 (Resolved): Status | Services | nrpe2 | restart does not restart nrpe

Chris Buechler

04:31 PM pfSense Packages Bug #4256 (Closed): Squid3 using 100% CPU after install/reboot

Chris Buechler

04:30 PM pfSense Packages Bug #4197 (Resolved): squid 3.4 anti-virus feature not working

Chris Buechler

04:30 PM Bug #3963 (Closed): PPPoE client interface status wrong while attempting to connect

Chris Buechler

04:29 PM pfSense Packages Feature #3511 (Closed): IGMP Proxy - its own tab under system logs

Chris Buechler

04:29 PM Bug #3628 (Resolved): Firewall: Aliases: Edit - When i remove a item, the "Diagnostics: Tables" dont remove the referer IP of a host

Chris Buechler

04:28 PM Feature #2241 (Resolved): DHCP - prevent dhcpd from handing out leases to certain MAC addresses

Chris Buechler

04:28 PM Feature #2546 (Resolved): Dashboard Traffic Graph Enhancement Request: add graph for IPSec which is already available in Status : Traffic Graph section

Chris Buechler

04:27 PM Feature #1009 (Closed): Active Directory group membership checking

Chris Buechler

04:27 PM Feature #1477 (Resolved): IGMPPROXY spamming the main systemlog

Chris Buechler

04:26 PM Bug #2627 (Resolved): Old delegated prefixes are not removed from the LAN interface

resolved some time ago, not an issue at least on 2.2.x and newer. Chris Buechler

04:25 PM Bug #3577 (Resolved): SMTP Notifications not working when using SMTPS

Chris Buechler

04:24 PM Bug #355 (Resolved): syslog should not bind on *

Chris Buechler

04:22 PM Feature #2733 (Resolved): Add in a "description" field for additional DHCP pools

Chris Buechler

04:21 PM Feature #2640 (Needs Patch): Add a way to find where an alias is used

Chris Buechler

04:20 PM Bug #1540 (Closed): Captive Portal Vouchers Synchronization

Chris Buechler

04:20 PM Feature #1482 (Resolved): Captive Portal support for a configurable RADIUS NAS ID

Chris Buechler

04:19 PM Bug #3349 (Not a Bug): System Information Widget Showing Incorrect Memory Used %

Chris Buechler

04:19 PM Bug #5273 (Closed): UMTS / 3G Connection reports wrong Gateway information (10.64.64.0) and no data is going through that connection.

something specific to that card, no apparent problems in our code here. Chris Buechler

04:17 PM pfSense Packages Bug #4663 (Resolved): pfsense 2.2.2-RELEASE + squid3 + squidGuard = Breaking squid.conf when using c-icap

Chris Buechler

04:16 PM pfSense Packages Bug #4460 (Closed): Upgrade to HAVP v1.05 forever displays "Antivirus Server ( ) Stopped"

HAVP has been deprecated Chris Buechler

04:15 PM pfSense Packages Bug #3729 (Resolved): Bacula-client Services not running

Chris Buechler

04:15 PM pfSense Packages Feature #3608 (Rejected): new package: puppet

Chris Buechler

04:14 PM pfSense Packages Bug #2992 (Duplicate): Boot problem after upgrade

duplicate of #3986 Chris Buechler

04:12 PM pfSense Packages Bug #3360 (Resolved): Apache reverse proxy-dev leaves / out of Backend Path

Chris Buechler

04:11 PM pfSense Packages Bug #3533 (Closed): bind package restores outdated config.xml

Chris Buechler

04:11 PM Bug #3815 (Resolved): Gateway monitoring broken

resolved in 2.3 by replacing apinger Chris Buechler

04:10 PM pfSense Packages Bug #3905 (Closed): Upgrade from 2.1.3 to 2.1.5 broken Net/SNMP.pm path

Chris Buechler

04:07 PM Bug #5314 (Closed): /etc/sshd script fails to restart SSH properly

can't replicate, no feedback Chris Buechler

04:04 PM Bug #4848 (Not a Bug): The remote gateway "ip-adres is already used by phase1 "name of phase 1"

Chris Buechler

04:03 PM Feature #4915 (Resolved): Move logout link

Chris Buechler

01:43 PM Bug #5834 (Resolved): Traffic shaper PHP eror on creating new FAIRQ queue

Anonymous

07:40 AM Bug #5834: Traffic shaper PHP eror on creating new FAIRQ queue

Applied in changeset commit:43568d7dd1cc2f378586e43c33a71410845d85d1. Anonymous

07:31 AM Bug #5834 (Feedback): Traffic shaper PHP eror on creating new FAIRQ queue

Removed bogus HTML
Added missing Form_Inputs Anonymous

07:30 AM Bug #5834 (Resolved): Traffic shaper PHP eror on creating new FAIRQ queue

https://forum.pfsense.org/index.php?topic=106112.0 Anonymous

01:30 PM Bug #5837 (Feedback): pfSense-upgrade: Make sure it aborts update when pkg calls fail

Applied in changeset commit:ec3371678b60de82ada14716b6ef272d1f51776c. Renato Botelho

12:43 PM Bug #5837 (Resolved): pfSense-upgrade: Make sure it aborts update when pkg calls fail

When free space on PKG_CACHEDIR is not enough to download updates, throw an error and exit Renato Botelho

12:49 PM Feature #5829 (Resolved): Factory reset should uninstall packages too

Tested on a full install and it worked fine. The warning appeared, and after the reset, packages were gone. Looks goo... Jim Pingle

06:40 AM Feature #5829 (Feedback): Factory reset should uninstall packages too

Applied in changeset commit:7222324e2a073d006ef55fcf36a5250bee73faef. Renato Botelho

05:58 AM Feature #5829 (Assigned): Factory reset should uninstall packages too

It makes sense. All additional packages config will be removed from config.xml when factory reset happens. So it does... Renato Botelho

12:40 PM Bug #4418: IPsec mobile clients - bogus "p" appended to search domain

I'll handle it Renato Botelho

11:30 AM Feature #4366 (Feedback): Namecheap Dynamic DNS updates fail on subdomain formatted domains

Applied in changeset commit:6635aa0f6c7a166a56a92ea2492930a67e825ce1. Jim Pingle

09:39 AM Bug #2657 (Closed): Potential weakness of the captive portal voucher system (design issue)

Jeremy Porter

09:38 AM Bug #2196 (Not a Bug): Multiple crypto cards in a box may conflict in unexpected ways

Jeremy Porter

09:37 AM Bug #932 (Not a Bug): IP TTL does not get decreased with route-to/reply-to.

issuwee documented. Jeremy Porter

08:37 AM Feature #5835 (New): Improve OpenVPN client gateway detection in edge cases where the remote does not send gateway information

There are a few edge cases where OpenVPN does not set the "route_vpn_gateway" or "ifconfig_remote" environment variab... Jim Pingle

07:19 AM Bug #5621: dhcp6c running twice with PPP. random interface ID issue at boot time

Thanks for the fix! Martijn Coenen

05:20 AM Bug #5831 (Feedback): After updating, on reboot pfSense is trying to fetch files

Applied in changeset commit:93a8ddf7a4c5d43cbeb623c923eb76659e6f49e0. Renato Botelho

03:58 AM Bug #5833 (Closed): OpenVPN reports "no route to host" although a GW Group is selected for failover

pfSense with 2 physical interfaces, WAN and LAN. There is another www gateway on the LAN which is configured in a GW ... Joel Linn

01/31/2016

08:45 PM Bug #5830: dpinger pings dropped by some things because of no data payload

Thanks Denny. Jim Thompson

03:19 PM Bug #5830: dpinger pings dropped by some things because of no data payload

Option to set data size has been released. Dpinger version 1.5. Denny Page

07:59 AM Bug #5830: dpinger pings dropped by some things because of no data payload

I would up vote this
Mainly cause I have had to deal with non compliant ISPs that refuse to change
In this case an... Michael Kellogg

12:00 PM pfSense Packages Feature #4489: Add Varnish 4 Plugin

Varnish 4.1 now supports the PROXY protocol from an upstream server.
This replaces the need for accepting X-Forward-... Joshua Ruehlig

11:04 AM Feature #5832 (Resolved): add speedtest cli in pfsense via package or comand line

It would be great to have this built-in tool within the pfsense via package or command line
https://github.com/s... Luis Couto

02:08 AM Bug #3640: Sierra Wireless 3G Modem support driver

Jim,
OK, I am agree to buy one and to send you for testing.
What is the address ?
I suppose you have all neces... Nicolas Scheffer

01/30/2016

09:50 PM Feature #5829: Factory reset should uninstall packages too

renato can decide what the 'right thing' is here. Jim Thompson

09:49 PM Bug #5830: dpinger pings dropped by some things because of no data payload

I'm not sure why we're going out of our way to accommodate equipment (from Cisco!) that isn't compliant with the stan... Jim Thompson

04:41 AM Bug #5830 (Resolved): dpinger pings dropped by some things because of no data payload

The root issue in this thread:
https://forum.pfsense.org/index.php?topic=105644.0
has been shown to be something... Chris Buechler

09:47 PM Bug #3640: Sierra Wireless 3G Modem support driver

we can't test this until we have a module in-hand. Jim Thompson

03:23 PM Bug #3640: Sierra Wireless 3G Modem support driver

FreeBSD forum user experience with DIP
https://forums.freebsd.org/threads/sierra-wireless-hspa-usb-modem.24719/ Nicolas Scheffer

01:28 AM Bug #3640: Sierra Wireless 3G Modem support driver

Chris,
If you use PPP nothing need to be done on the UI like any modem.
But if you want to use DIP mode (Direct... Nicolas Scheffer

06:58 AM Bug #5831: After updating, on reboot pfSense is trying to fetch files

Yeah, it happens to me as well. Greg M

06:45 AM Bug #5831: After updating, on reboot pfSense is trying to fetch files

Full upgrade log attached per cmb's suggestion. Ivor Kreso

06:41 AM Bug #5831 (Resolved): After updating, on reboot pfSense is trying to fetch files

After each update so far, I've noticed that pfSense is trying to fetch files. This happens right before it actually s... Ivor Kreso

04:57 AM Bug #3997 (Resolved): get_interface_ip() returns first IP on interface, not necessarily primary IP

fixed Chris Buechler

04:23 AM Bug #5621 (Resolved): dhcp6c running twice with PPP. random interface ID issue at boot time

updating this ticket to include both those issues since the commits were done under this ticket number.
This is f... Chris Buechler

04:01 AM Bug #5621: dhcp6c running twice with PPP. random interface ID issue at boot time

Thanks for the merge to master, Chris. I submitted a pull request for the RELENG_2_2 version of the patch at https://... David Wood

03:58 AM Bug #5621: dhcp6c running twice with PPP. random interface ID issue at boot time

I've been working with David on this for a while, I'll take it. Chris Buechler

03:56 AM Bug #5621: dhcp6c running twice with PPP. random interface ID issue at boot time

David submitted a pull request to RELENG_2_2 for this as well, which has been merged.
https://github.com/pfsense/pf... Chris Buechler

01/29/2016

11:25 PM Bug #5051: Dynamic DNS URL for NO-IP should be updated

I signed the CLA as described and re-submitted a pull request (#2574).
@cbuechler: What means "you'll need a CLA o... Tiago Barrionuevo

09:17 PM pfSense Packages Feature #5434: Let's Encrypt pfSense support

Hi, I'm also hoping for a LetsEncrypt client package for pfSense.
It seems to me that if a dynamic DNS service mat... Brian Buchanan

08:57 PM Bug #5764: OpenVPN 'topology subnet' change breaks many upgraded client configs

Thanks JimP, changed 141 to only do the clients, I missed that in 129-130.
It probably should have a "default" or... Chris Buechler

09:22 AM Bug #5764: OpenVPN 'topology subnet' change breaks many upgraded client configs

Thanks Chris.
Routes get created in TLS mode now.
There is still a cosmetic issue with the shared key field showin... Landon Timothy

07:20 AM Bug #5764: OpenVPN 'topology subnet' change breaks many upgraded client configs

The server topology was already being preserved as net30 back in upgrade_129_to_130(), so upgrade_140_to_141() should... Jim Pingle

02:06 AM Bug #5764 (Feedback): OpenVPN 'topology subnet' change breaks many upgraded client configs

I think that should take care of all the problem scenarios.
Landon: your situation should definitely be good now.... Chris Buechler

04:38 PM Feature #5675: Theme specific textarea background color

The textarea color #bfbfbf looks great in the Dark Theme... BBcan177 .

04:27 PM Bug #5828 (Resolved): firewall_nat_out.php enabled/disabled status not shown

This is all good now. The X was there, I just didn't notice it, was expecting it to be grayed out like it used to be ... Chris Buechler

07:37 AM Bug #5828: firewall_nat_out.php enabled/disabled status not shown

This all looks good to me now after Steve B's fixes. The rules were marked disabled before but the only indication wa... Jim Pingle

07:10 AM Bug #5828: firewall_nat_out.php enabled/disabled status not shown

Applied in changeset commit:1cd1435e8594c06bee8c4ac61edce9cec86af137. Anonymous

07:08 AM Bug #5828 (Feedback): firewall_nat_out.php enabled/disabled status not shown

Appropriate code has now been added here. Anonymous

02:15 AM Bug #5828 (Resolved): firewall_nat_out.php enabled/disabled status not shown

The NAT rules on firewall_nat_out.php should be grayed out when disabled, same as firewall_nat.php and others.
Ad... Chris Buechler

03:16 PM Bug #5752 (Resolved): Problem with loading firewall rules when using pfBlocker

Much, much faster for me on the system that was sluggish before. Works like a dream now, thanks! Closing. Jim Pingle

10:10 AM Bug #5752 (Feedback): Problem with loading firewall rules when using pfBlocker

Discovreed a work-around for this issue to prevent Firefox taking all week to initialize the "sortable" method. Anonymous

08:40 AM Bug #5752: Problem with loading firewall rules when using pfBlocker

This matter is being tracked on the forum here: https://forum.pfsense.org/index.php?topic=105852.0
Anonymous

02:54 PM Feature #5829 (Resolved): Factory reset should uninstall packages too

Currently on 2.2.x whenever you do a factory reset packages will not be removed. Instead, they are just removed from ... Ivor Kreso

02:51 PM Bug #3152: Updater should fall back to IPv4 if IPv6 fails

Had this happen on a VM with DHCPv6 here. Somehow it lost its WAN IPv6 IP address, when it tried to check for updates... Jim Pingle

02:19 PM Bug #4780: max_input_vars limit reached with aliases having >1000 members

I found the solution for this :
you need to edit the /etc/rc.php_ini_setup file and add the following entry on it :
... si lec

10:46 AM Bug #4784: IPsec mobile fails with VPNC and "Network List" after 2.2.x upgrade

Sorry I overlooked comment #7. I retract my previous comment on this bug ;) Edward Roper

10:21 AM Bug #4784: IPsec mobile fails with VPNC and "Network List" after 2.2.x upgrade

This is/was affecting a large number of my geographically dispersed Mac OS X users using the "Cisco IPSec" configurat... Edward Roper

05:29 AM Bug #4784 (Closed): IPsec mobile fails with VPNC and "Network List" after 2.2.x upgrade

this looks to be a problem in vpnc. It works fine if you leave the "Provide a list of accessible networks to clients"... Chris Buechler

06:57 AM Bug #5671 (Resolved): Remove slide-bar in the new Collapsible Form Section class.

Fixed by user NOYB in PR 2571 Anonymous

06:09 AM Bug #5812 (Resolved): RADVD starts at boot when it shouldn't

Fixed.
Antonio Prado wrote:
>
> my report was about 2.2.6
It's the same root issue, we're largely only fixi... Chris Buechler

05:05 AM Bug #3640: Sierra Wireless 3G Modem support driver

Currently using the new APU2 board from PC Engines with a Sierra MC7710 modem and it's working using PPP with the lat... Nicolas Scheffer