Activity
From 02/26/2016 to 03/26/2016
03/26/2016
-
09:58 PM Bug #6031: Anti-Lockoug Rule Not Effective Against Canned Interface Block Rules
-
LOL I'm not running block private or bogons on LAN. I was just looking at the firewall rules display order vs. th... -
09:48 PM Bug #6031 (Confirmed): Anti-Lockoug Rule Not Effective Against Canned Interface Block Rules
- Yeah the order isn't ideal there. You're probably the only person in the world running block private or bogon on LAN....
-
-
The anti-lockout rule appears to be to low in the processing order to be effective against inadvertently enabling ... -
- Thanks for the follow up, Greg.
Phil: yes, RELENG_2_3 switch over isn't done yet, but when we switch to that we'l... -
09:19 PM Bug #5520: IPsec status seems to hang preventing access to the webgui.
- I guess that commit https://github.com/pfsense/pfsense/commit/c5d8cbe07c9646f34afebd2610ac34bed090ced0 to master shou...
-
05:53 AM Bug #5520: IPsec status seems to hang preventing access to the webgui.
- Hi Chris!
You are correct. Now with your additional fix to background the commands everything is really smooth, thanks! -
- Deadlock confirmed fixed on another system this week by upgrading to 2.3. That's the issue this ticket started with, ...
-
- regressed in cc2cff0b, because of the counters shown on firewall_rules.php rely on those being static. Not a big deal.
-
- they no longer have unique tracker IDs as they should and used to.
-
-
@Mar 26 15:16:27 WAN Block ULA networks from WAN block fc00::/7 (12000) 192.168.2.21 192.168.2.42 ICMP@
Shou... -
06:23 PM pfSense Packages Feature #5434: Let's Encrypt pfSense support
- https://github.com/analogic/lescript has been working for a while. The part that needs work is making it into a prope...
- 09:15 AM Revision c5d8cbe0: Background all the ipsec commands run from status_ipsec.php to make sure they don't hang up the entire GUI. Ticket #5520
-
-
- More accurate section title.
-
- this appears to be sane now. I still need to verify some additional data sets.
03/25/2016
-
- Ought to keep a "last known good" rules.debug and apply that if it fails, and if that fails/is unavailable, maybe jus...
-
-
Pet peeve of mine that the system seems to be wide open by default until firewall rules get applied. Think I brou... -
- not a single firewall rule loaded after reboot..
There should be some failsafe default ruleset that prohibits acce... -
03:39 PM pfSense Packages Bug #3530: TinyDNS creates incorrect NS records
- Not particularly weird, it's really the only way to do split DNS on one box.
The difficulty is how TinyDNS could k... -
03:33 PM Bug #6025 (Assigned): Load balancing fails when one gateway has a weight of 1 and another gateway has a weight >1
-
- Pushing this out a bit -- not a huge concern for now. If someone hits it they can easily work around it by adjusting ...
-
02:41 PM Bug #6029 (New): Unhelpful error messages in xmlparse*.inc and generally
- Although it shouldn't happen, a quick forum check shows that errors used to arise some years ago with bare GUI error ...
-
01:46 PM Revision fbbaf135: Revert "Branch master is now 2.4-DEVELOPMENT"
- Fat finger here, rolling back for now
This reverts commit 30d9ba51d194600ccb7d474d998c7491d0ba61b6. -
-
-
09:07 AM Bug #5993: dhcp6c not started until an RA received
- The interfaces.inc.patch attached was generated against 2.3.b.20160325.07**, I have applied it to my system and all ...
-
- Word smithing to remove a bunch of personalization ("You").
-
- Well lets assume quite some people will still use a mouse to configure their firewall through its webgui..
The iss... -
06:29 AM Bug #5721: ALTQ fails with "bandwidth for q... higher than interface" in some circumstance
- Having the same issues here, with Beta 2.3 from 22 March.
I'd be glad to test fixes :) -
- Hello,
Minor bug here, when opening the captive portal, there's no favicon.ico so nginx complains:
> nginx: 201... - 05:06 AM Revision 66d78ebc: Do not allow empty elements in IPv6 addresses
- Redmine #6024
Upstream pull request https://github.com/pear/Net_IPv6/pull/14
At this point in the checkIPv6 processin... -
-
- I also submitted a couple of other PRs to PEAR for:
a) Cleanup some comments (some of which are fixed in the pfSense... -
- Proposed fix for PEAR library: https://github.com/pear/Net_IPv6/pull/14
Same fix to the pfSense copy: https://github...
03/24/2016
-
- Phillip Davis wrote:
> All the rules that you quote look OK, so are you saying that the code that generates the rule... -
- All the rules that you quote look OK, so are you saying that the code that generates the rules is OK, but somehow the...
-
- Strange one here:
Testing Load Balancing it seems there is an issue with weights. Given that there are two WANs ea... -
09:14 PM Revision 4bf6e70f: Disable the check of subqueues bandwidth until it is fixed.
- Ticket #5721
- 09:08 PM Revision ce798e75: Show the full OpenVPN verb debug range same as 2.2.x.
- 09:06 PM Revision 507df66b: Clarify OpenVPN verb level descriptions
-
-
07:51 PM Revision 89c70e81: change logos to reflect community edition
-
-
Use a touch screen so you don't have to scroll to the bottom for access to the horizontal scroll bar. Just swipe ... -
- with some rulesets the 'action buttons' dont show on the screen, so first need to scroll down, then right, then back ...
-
- Net_IPv6::checkIPv6 returns true where the IP ends or begins in : in that case. It's always done that.
Reported u... -
- Source and destination in webgui are both set to 1234:5678:90AB:CDEF:1234:5678:90AB:CDEF: please notice the last col...
-
- What is the actual IP address entered in the GUI?
And what is the actual rule found in /tmp/rules.debug that is fail... -
- Firewall rules, ip validation allows incorrect ip.
Webgui shows a error while rules are loaded..
There were error... -
- This change was reverted while I'm working on a proper fix.
Sorry for the breakage.
-
03:37 PM Bug #5721: ALTQ fails with "bandwidth for q... higher than interface" in some circumstance
- After making the wizard single Lan single Wan HFCS Scheduler type. Don't know if is related with this changes or not...
-
- Kicking this back open due to the problem above.
I'm tempted to make the LDAP/RADIUS group check both _ and ' ' wh... -
- Changing the group names with spaces to underscores breaks some working setups that relied on the groups to match ext...
- 01:57 PM Revision 84400156: Merge pull request #2787 from NOYB/HTML_Compliance_-_Firewall_/_Rules
-
01:34 PM pfSense Packages Bug #6023 (New): Traffic Shaper (pfsense 2.3) Suricata V3.0 Inline Mode Operation
- Gentleman:
Bill Meeks asked that I describe the issue. I have Pfsense 2.3 (beta) installed with the latest version... -
09:11 AM pfSense Packages Feature #6022: Consider MLVPN for bonded VPN
- Right - I've been looking for an open-source equivalent of Peplink's Speedfusion for some time, and MLVPN is just the...
-
- +1 for this functionality, whatever the actual solution used.
There are cases where a client office wants VPN conn... -
- In a few different situations, I've had clients require Peplink's Speedfusion for multiple-link VPN aggregation betwe...
-
- Stilez y wrote:
> And so it was. Thanks! I guess not a bug as it won't affect regular upgraders? Worth putting in no... -
- And so it was. Thanks! I guess not a bug as it won't affect regular upgraders? Worth putting in notes maybe?
-
- Error: Duplicate ID frrfc1918.
<tr id=frrfc1918>
03/23/2016
-
- Spotted by: Jorge Oliveira
Ticket #5721 -
-
- It was sorting alphabetically, instead of numerically, before calculating the percentile. It sorts appropriately now ...
-
02:10 PM Bug #5721: ALTQ fails with "bandwidth for q... higher than interface" in some circumstance
- I have made a "huge" PR that may fix the problem.
See: https://github.com/pfsense/pfsense/pull/2785/files
It needs ... -
- Also getting this when running through the wizard on a different system:...
-
- That commit seems to have broken one of my test setups that I've noticed so far, in a rather fatal way (skips most of...
-
- 11:52 AM Revision 179196e4: Merge pull request #2781 from jlduran/fix-openvpn-client-typo
- 11:51 AM Revision 773d778b: Merge pull request #2780 from NOYB/HTML_Compliance_-_Vertical_Align
- 07:44 AM Revision b2e51160: Improve handling of source-hash key
- - Store the source-hash key in its own config field.
- Validate the provided source-hash key. Check that hex string i... - 07:07 AM Revision a7a430b8: Fix OpenVPN client additional options typo
- Should read client instead of server. Also remove the `push` example.
-
- pkg.php and functions.inc
- 05:40 AM Revision 8557d323: Add paren here for clarity, suggested by Phil Davis.
-
- If the bandwidth is not set the speed of root queue is set by media status.
In this case a ruleset which contains qu...
03/22/2016
-
- The correct fix is specify the root queue bandwidth in GUI.
This makes the ruleset functional with any kind of med... -
- guessing that's a system you upgraded before the full PBI removal fixes were put in place. run: ...
-
- Failed reinstall when initial; status was "configured but not installed" and "!". System is current 2.3b.
pkg manage... - 07:57 PM Revision af85fb0c: Remove ssl_stapling. Ticket #6020
- 06:32 PM Revision 162dfff9: One too many "!" in the "Advanced options" button javascript caused the Link parameters to be always hidden
-
-
04:25 PM Bug #6020: OSCP stapling misconfiguration
- Thank you!
-
- that's more relevant for public web servers (which is where that got copy/pasted from), removed.
-
- Reviewing @/var/log/nginx-error.log@ I found the following message:
> "ssl_stapling" ignored, no OCSP responder UR... -
-
- Jose Luis Duran wrote:
>
> It used to "work" (as in the same way IPv4 does) in 2.2.x
No, ovpn-linkup has never ... -
- Thanks!
It used to "work" (as in the same way IPv4 does) in 2.2.x -
- I added a CSV export option so we can double check the numbers if you want to give that a shot.
-
-
10:03 AM Bug #5990: AES-GCM should be an allowed encryption algorithm for IKEv2 in P1
- strongswan also got a test configuration using GCM in both "IKE" and "ESP" parameter
https://www.strongswan.org/test... -
-
-
- Should have some sleep, forgot to mention essential:
Running 2.3-BETA (amd64) built on Tue Mar 22 02:17:00 CDT 2016 -
- I'm running captive portal too, which works great.
If I happen to disable transparent proxy and reboot pfSense, ever... -
- Hello,
Strange problem here. I'm running Squid + squidguard in transparent mode.
Everything works find until I re... -
- Text Align & Background Color
-
- New way to repolicate.
Establish ipsec.
Reboot box A and wait 15 seconds (needs to be 100% down).
Now on box B dis... -
- I can replicate this everytime I do step 1 and 2 from above post.
So this is definitly not fixed. -
- Hi!
It still happens for me, I can`t always replicate. restarting php brings webgui back.
I have 2 pfsenses.
W... - 03:33 AM Revision c640d60e: Fix syntax error in diag_traceroute
- The semi-colon is not needed here.
Reported by forum: https://forum.pfsense.org/index.php?topic=108643.0 - 02:44 AM Revision 54bbb646: Don't log to filter.log when local logging is disabled. Ticket #6018
- 12:47 AM Revision a337e809: Have recovery mode go to a shell as intended.
03/21/2016
- 09:57 PM Revision 5de2f30e: Merge pull request #2774 from heper/patch-1
-
09:50 PM Revision 5af7c623: possible typo
-
- fixed
-
- The option to disable local logging skips filter.log.
- 08:49 PM Revision 9b48e538: Fixed #6017
-
-
-
-
-
- thanks
-
- It turns out "outblock6" was missing and might have thrown things off. I fixed that issue and it may have fixed the 9...
-
- post-upgrade fixed too.
-
- Looks good after gitsync and re-test.
-
03:51 PM
Bug #6017 (Feedback): system_gateway_groups_edit.php: Gateway group that includes a deleted gateway in the first entry becomes uneditable
- This was a combination of a old bug that continued to display group members that no longer exist, and a newer one tha...
-
- If a gateway group has a deleted gateway in the first position, no gateways are displayed when editing the group:
... -
- 01:56 PM Revision 91170f75: Bump default config ver to 14.8
-
- it never has populated the v6 gateway. Judging by my perusal of the OpenVPN bug tracker as part of #5835, there are i...
- 12:37 PM Revision 2ac8c295: Merge pull request #2773 from NewEraCracker/small-php-js-tweaks
- 12:36 PM Revision 6402307c: Merge pull request #2772 from NOYB/HTML_Compliance_-_Diagnostics_/_Test_Port
- 12:35 PM Revision c7e2c3e8: Merge pull request #2771 from stilez/patch-20
- 12:34 PM Revision 002fc0d0: Merge pull request #2769 from phil-davis/btnattr
- 12:33 PM Revision f15d0e1a: Merge pull request #2768 from phil-davis/patch-3
- 12:32 PM Revision 965ff2a7: Merge pull request #2767 from NOYB/HTML_Compliance_-_Firewall_/_Schedules_/_Edit
- 08:51 AM Revision 28e3d579: Echo boolean value instead of string
- Prior to this change, code would echo an empty string if false and 1 if true. In all other files, with similar code, ...
-
- Error: Start tag seen without seeing a doctype first.
Expected e.g. <!DOCTYPE html>.
Error: Stray doctype.
Error: Str... -
-
- Code loops through all return values of get_possible_traffic_source_addresses(true) to create a list of key=>descript...
03/20/2016
- 10:21 AM Revision 347c0214: Reengineer Form_Button setAttribute
- As per what was done for https://github.com/pfsense/pfsense/pull/2765 -
do it to the rest of them.
Seems to work OK. - 09:51 AM Revision 53fc2039: Allow moving last pool entry
- If you are moving load balancer pool entries back and forth between the enabled and disabled pools, you can't move th...
-
- Error: Duplicate ID tempFriendlyTime.
-
- I'm not sure if this is the intended behavior.
When configured as an OpenVPN (dual stack) client, the @/tmp/ovpn1_... - 05:16 AM Revision d3f3b75f: If there was a group with a space, delete all the user-defined groups before hitting local_sync_accounts so pw doesn't get hung up. Ticket #6012
- 03:30 AM Revision 7227efd6: Merge pull request #2766 from jlduran/nginx-ssl-parameter-on-listen-directive
-
- Jim Pingle wrote:
>
> That said, I believe they do this deliberately. In this scenario if there are no pushed rout... -
- That wasn't enough to prevent the problem post-upgrade as pw hits the never-ending loop when modifying users before i...
-
12:18 AM Bug #6001: Not all packages are started during boot time
- I was not having issues until the same snapshot timeframe as Greg. The workaround Greg mentioned works for Lightsquid...
03/19/2016
-
- fixed
-
- also never updated it because it used groupadd instead of groupmod.
fixed -
- Renaming a group in the user manager leaves the former group name in /etc/group. groupmod -l $group_name should fix.
-
- works
-
- fixed
-
- Subject is root issue (at least as it stands today in 2.3, haven't looked back further but probably same previously)
-
12:17 PM Bug #6014 (Resolved): Changing active LAGG configuration orphans VLANs on it
- Test case:
1x Netgate SG-2440 (pfSense 2.2.6)
1x Cisco SG-30028 managed L2 switch
2x Client laptops, plugged int... -
- thanks
-
11:31 PM Bug #5917: IPsec status widget border shows white edge on right side of dashboard widget in dark theme with Chrome
- Confirmed resolved. Thank you!
-
- status_monitoring.php's 95th percentile numbers are way off for at least inpass and outpass total. For instance, the ...
- 11:34 PM Revision ac387383: Reconfigure any VLANs with a lagg parent after recreating the lagg. Ticket #6014
-
- Checked on both dark and light themes. Confirmed resolved. Thanks!
- 10:06 PM Revision 7cb01159: Check whether group exists using GID rather than name. Users can change the name, but not the GID. Check return code of pw for whether group exists. Ticket #6013
- 09:16 PM Revision e5ef7ae2: Save changes to config in 148 config upgrade. Ticket #6012
- 05:55 PM Revision df2aa83e: Changed the button colors and icons. The fa-terminal wasn't doing it for me :)
-
- Mike Depot wrote:
> I waited until it happened again, and grabbed a log excerpt:
>
Which all looks correct. Did... -
05:09 PM Bug #5958: Stale Aliases - upstream DNS changes do not update firewall rules that are based on aliases
- I waited until it happened again, and grabbed a log excerpt:
Mar 19 13:14:32 gateway filterdns: adding entry ... - 05:30 PM Revision 1a2d6d34: Ensure replacement group name is unique
-
- still need to verify in the 2.2.x->2.3 upgrade situation once that makes it to a snapshot.
-
- fixed after e5ef7ae26b32d18b7aa1a117605ccbbfafefca14
-
08:59 AM
Bug #6012: Groups with spaces in names not handled correctly in group file
- Config upgrade function added to replace spaces with underscores in group names
This has been tested from the cmd ... -
08:00 AM
Bug #6012 (Feedback): Groups with spaces in names not handled correctly in group file
- Applied in changeset commit:78d168ceccff8a45da76df2a8487d0f1b1910779.
-
07:52 AM
Bug #6012: Groups with spaces in names not handled correctly in group file
- Space removed from chars allowed in group name
-
- Group names that contain spaces are added to the group file with only the last word of the group name. So if you have...
- 03:03 PM Revision 8e2090a1: Cleanup nginx configuration file
- - Fix indentations
- Use the `ssl` parameter of the `listen` directive [1]
- Change the rewrite rule to use the recom... - 01:56 PM Revision b76cc978: Fixed #6012
- Config upgrade function replaces space with underscore in group names
- 12:50 PM Revision 78d168ce: Partially fixed #6012 by removing space from chars allowed in group names
- 12:44 PM Revision 1eb8403b: Merge pull request #2765 from NOYB/Services_/_DNS_Resolver_/_General_Settings
-
-
- Static should be static.
Elements that don't need to be dynamic should be static.
More robust than depending on clien... -
- Just a note to anyone who uses the patches, the patch does two files, interfaces.inc and interfaces.php. There is a n...
-
- Ok, I understand. But still 10 days ago all was started just fine I don't know what changed, maybe package startup wa...
-
- Doesn't appear there is any general problem with package startup (that will be addressed with the status quo of packa...
-
- The deadlock in strongswan is confirmed fixed with 2.3 on one production system that was hitting it frequently. There...
03/18/2016
-
- this was fixed in December in e93a7c71db7b35512591028316f15f579cd57cf7
-
- duplicate of #4450, already fixed in 2.3.
-
- attaching a patch version of the full files Martin posted.
-
- Chris Buechler wrote:
> There are a number of potential race conditions in the patches here, the one Martin noted am... -
- 04:30 PM Revision cee365e6: Suppress dashboard save icon until needed.
-
-
-
- Works
-
- Applied in changeset commit:93520d92eb5d9627449c88cd9127868dcf0e2c1f.
-
- gif had the same problem, pushed a fix for both.
-
- When creating or editing a GRE interface the interface at the OS level (e.g. gre0) has all flags by default (LINK0, L...
- 03:10 PM Revision 48f9b1cf: Merge pull request #2761 from heper/patch-1
-
- The rules case seems to be better after that, looks like this can be closed out.
-
- Both PRs had been merged. Thanks!
- 02:54 PM Revision b8a0f4b1: Merge pull request #2718 from NOYB/JavaScript_Polyfill_-_String_Includes_Method
- 02:36 PM Revision 6b28e00a: Merge pull request #2757 from NewEraCracker/allow-ip-as-althostname
- 02:21 PM Revision dda3c4da: Merge pull request #2763 from NOYB/Services_/_DNS_Resolver_/_General_Settings
-
-
- Echoing $pconfig['custom_options'] directly into JavaScript is prone to breaking the script by creating invalid synta...
-
-
-
-
-
- Just a little correction to original post.
5) auth.inc line 208 - get_configured_ipv6_addresses() will return an arr... -
- On default configured pfSense, the LAN interface has the following IPv6 set by default: fe80::1:1
Trying to login ... -
-
- Echoing $pconfig['custom_options'] directly into JavaScript is prone to breaking the script by creating invalid synta...
-
- Confirmed the fix on two other boxes, looks good.
-
- Applied in changeset commit:dc9d5657abbddc840c1e73bff7748bde4ff39449.
-
- The remote ID is always printed as "Unknown" even when the correct ID is shown in "ipsec statusall" for example.
I... -
- William St.Denis wrote:
> Does anyone have a work around to keep limiters and sync working? The only option I have c...
03/17/2016
- 11:08 PM Revision 7076def1: Temporarily disable PR 2750 pending revision by NOYB
- 10:48 PM Revision 7271dfe9: Merge pull request #2762 from phil-davis/patch-4
- 10:47 PM Revision 6f0a2ba8: Merge pull request #2760 from phil-davis/patch-3
- 10:06 PM Revision 747142f9: Redmine #5994 Enhance test for PPP advanced defaults
- If pppoe_monthly, pppoe_weekly, pppeo_daily or pppoe_hourly was already set, then when editing the PPP interface the ...
-
- Seems to be a copy/paste error remain from when i initially created the dhcpd rrd thingy. Just noticed this now ;)
M... - 09:45 PM Revision 907e3ea7: Redmine #5994 Fix test for default source port fields
- Fixes the problem reported by @jimp where the Advanced button for the source port fields would show "Hide Advanced" w...
- 07:45 PM Revision b00bbc0b: Fixed #6003
- Corrected showadv logic
Corrected long standing iussue displaying reset times (goes back to 2.0)
Corrected config sav... -
06:11 PM
Bug #6003 (Resolved): interfaces_ppps_edit periodic reset settings not saved
- Merged your most recent change too. Thanks.
-
- Works.
I noticed that if the user chooses one of the pppoe_monthly... preset reset options, then when editing the ... -
03:00 PM
Bug #6003: interfaces_ppps_edit periodic reset settings not saved
- Applied in changeset commit:b00bbc0b56413690eab7e0314ab8725cf583af71.
-
02:48 PM
Bug #6003 (Feedback): interfaces_ppps_edit periodic reset settings not saved
- Corrected showadv logic
Corrected old issue displaying reset times
Corrected improper save by adding hidden ptpid e... -
06:11 PM
Bug #6007 (Resolved): JavaScript error in firewall_nat_edit.php for protocols that do not use ports
-
- That was easily fixed - just remove the code altogether :)
I wasn't game to do that as I thought the code must have ... -
10:20 AM
Bug #6007 (Feedback): JavaScript error in firewall_nat_edit.php for protocols that do not use ports
- Applied in changeset commit:47d6bf69f05aad42b7bea8f44811df9ea57b7d96.
-
10:00 AM
Bug #6007 (Assigned): JavaScript error in firewall_nat_edit.php for protocols that do not use ports
-
- Note: This happens in the existing firewall_rules_edit.php from master, and also just the same in the version where I...
-
- 1) Make a NAT Port Forward rule with some protocol that is not TCP or UDP - e.g. ICMP.
2) Turn on the developer stuf... -
- Also since #6003 is fixed so that the periodic reset radio button setting is saved in interfaces_pps_edit.php #6003, ...
-
- It needed to fix the test for if a source port from/to fields were default or not, so it considers blank or "any" to ...
-
- They all look OK except for firewall_rules_edit.php -- When creating a brand new rule, which defaults to TCP, it show...
-
- to me for testing
-
- Thank you Phil!
-
- All now done and committed:
firewall_rules_edit.php - https://github.com/pfsense/pfsense/commit/c3ed121066c5ec2c201b... -
- These have also now been done and committed:
services_ntpd.php - https://github.com/pfsense/pfsense/commit/c0d1ceda2... - 04:42 PM Revision 18e7bc46: FIlebrowser package moved to vendor direcroty
- 04:27 PM Revision 8ed6b8e3: Relocated tree directory to vendors/tree
-
03:55 PM Bug #4310: Limiters + HA results in hangs on secondary
- Does anyone have a work around to keep limiters and sync working? The only option I have come up with is to disable l...
- 03:28 PM Revision 39e45f40: Revised fix #6007
- 03:13 PM Revision 47d6bf69: Fixed #6007
- Initilize element before refreshing
-
- And found cause.
So I have snort running on 3 ifaces. It takes a long time to start it up. It starts before lights... -
- BTW I guess package startup gets interrupted because after boot (like 10 minutes after) there is still /tmp/.rc.start...
-
08:12 AM Bug #6001: Not all packages are started during boot time
- >2016/03/17 10:14:00 kid1| /var/run/squid/access.log: (2) No such file or directory
>/tmp/cache.log
>2016/03/17 1... -
- Squid does not start after boot too. Not only Squid.
https://forum.pfsense.org/index.php?topic=108425 - 02:00 PM Revision 95a2f028: Remove unneeded control
- 01:48 PM Revision 14ac4ed2: Merge pull request #2755 from NOYB/HTML_Compliance_-_Services_/_DHCP_Server
- 01:46 PM Revision d7f2ed5f: Merge pull request #2758 from phil-davis/patch-4
- 01:46 PM Revision 2f066c2c: Merge pull request #2754 from phil-davis/patch-3
- 01:45 PM Revision 97d55ee5: Merge pull request #2753 from phil-davis/patch-5
- 01:43 PM Revision 2c95f1cd: Redmine #5994 Standardize Unbound custom options button
- This is the last piece of code I have for standardizing "advanced" buttons in the UI.
- 01:04 PM Revision 6b2d2977: Allow IPs in althostnames
- This change will allow implementation of workarounds for bugs involving 'An HTTP_REFERER was detected other than what...
- 01:02 PM Revision 61aa0edb: Redmine #5994 Standardize NAT Edit Source Advanced
- 1) Standardize the way the Advanced button works to display and hide the source address/port fields.
2) Remove dstena... -
11:43 AM Bug #6008 (Duplicate): Can't create GRE tunnel on IP Alias VIP
- I need to create a tunnel with my local endpoint being a virtual IP. I initially created an IP Alias VIP on loopback...
- 11:41 AM Revision 3e7d2c4f: Merge pull request #2756 from NewEraCracker/css-path-fix
-
- I tested the LDAP field and a couple others, seems to work OK for me.
-
- Thanks Phil!
- 10:31 AM Revision c3ed1210: Redmine #5994 standardize firewall rule advanced button
- 09:39 AM Revision 32b52cce: Update file_exists check to full path as done in other files
-
-
-
- A place for JavaScript polyfills.
JavaScript string includes method polyfill. A new method that has not yet found i... - 08:55 AM Revision b4738ddc: Fix CSS paths missed by 9d1be24ef72c0c27fe7a297bf79ec5e4f552a390
-
- Error: The align attribute on the td element is obsolete. Use CSS instead.
-
- there are hardware compatibility issues with the net6501, though people have gotten them running. We don't support ha...
-
04:26 AM Bug #6006 (Not a Bug): Can not start on a hard drive after installing a managed
- Hello developer,
I have a trouble when i install pfSense version; of pfSense-memstick-serial-2.2.3-RELEASE-i386.im... -
- thanks
-
- Looks like everything is fine now. Thanks!
-
- There are a number of potential race conditions in the patches here, the one Martin noted among other possibilities. ...
-
-
03/16/2016
-
- find_interface_ipv6 returns the first IP on the interface in that case, which might not be the intended one in that s...
- 10:55 PM Revision 770e3f4c: Redmine #5994 Standardize source port button
- in firewall_rules_edit
1) Put some common code fragments into show_source_port_range() and use code that actually suc... -
-
-
-
-
-
- 07:36 PM Revision 3d49794c: Merge pull request #2753 from phil-davis/patch-5
- 07:36 PM Revision 70989f17: Merge pull request #2752 from phil-davis/patch-4
- 07:36 PM Revision 926a8caa: Merge pull request #2751 from phil-davis/patch-3
- 07:35 PM Revision bd9fe795: Redmine #5994 services_ntpd_gps standardize advanced button
-
07:30 PM
Bug #5918: IPsec dashboard widget: Tunnels tab shows hard-to-read alternating row color in dark theme
- Applied in changeset commit:f1c27d6942b38de500be05b52e3cfa6bc8e8019c.
-
- I fixed this by taking out what looked like some old CSS rules. You may want to check it out on the light theme as we...
-
-
- I was unable to replicate this, but I may have fixed it when I fixed #5918.
-
-
- 07:03 PM Revision 697b1e07: Simplified styling
- 06:14 PM Revision 79df3d68: Revised modal styling
-
- 05:53 PM Revision 098604d3: Converted LDAP container picker to modal
-
-
-
04:32 PM Feature #5474: Add 802.1x configuration to wired interfaces.
- Here's a hacked-together shell script that can be used in the meantime:...
- 03:00 PM Revision 496347c6: Style revisions
- 02:54 PM Revision 28f38270: LDAP test pop-up replaced with Bootstrap styled modal
-
- 02:50 PM Revision b29b3831: Redmine #5994 interfaces_ppps_edit standardize advanced button
-
02:37 PM Bug #6005 (Resolved): CloudFlare dyndns API changes other record settings
- The update to the CloudFlare API implemented in #4737 hardcodes the 'proxiable' and 'proxied' parameters to false.
... -
- 01:22 PM Revision 6dfeb992: Redmine #5994 interfaces_bridge_edit standardize advanced button
- 01:16 PM Revision 9fc5eac7: Redmine #5994 services_ntpd_gps standardize advanced button
- 12:47 PM Revision ffecaa66: Merge pull request #2749 from phil-davis/patch-5
- 12:46 PM Revision cd52523d: Merge pull request #2748 from phil-davis/patch-3
- 12:45 PM Revision 3218a579: Merge pull request #2747 from phil-davis/patch-4
- 12:33 PM Revision f8088b00: servise_dhcp include btnadvopts in section
- Before this change, $section is added to $form before btnadvopts is put into $section. The previous code looked to me...
- 12:09 PM Revision c0d1ceda: Redmine #5994 services_ntpd standardize advanced buttons
-
- Sorry just noticed patch I posted earlier is backwards!! Mea culpa!
-
- Richard's patch although allowed dhcp6c to run and get a prefix delegation has issues with losing that prefix shortly...
-
08:46 AM Bug #5993: dhcp6c not started until an RA received
- Attached rudimentary patch for interfaces.inc proves that starting dhcp6c prior to rtsold is sufficient to trigger th...
- 10:56 AM Revision 68b0c1c2: services_ntpd_gps fix handling of initcmd
- 1) When reading the (encoded) initcmd string into Form_Textarea(), decode it.
Previously the encoded value was displa... -
-
-
- That's a deliberate choice. That field does not have CDATA protection in XML and cannot contain such characters direc...
-
- Hello,
I'm trying to configure squidGuard, in Common ACL.
When I enter a string for "Proxy Denied Error", the str... -
- Edit a PPPoE interface.
Advanced
1) Choose Periodic Reset = Custom
Enter an hour and minute in Reset Date/Time
Sa... - 09:42 AM Revision f99f8a67: services_ntpd fix leaptext array key name
- Use leaptext everywhere - some references were to leaptext and some to leaptxt, so it didn't work.
-
08:48 AM Bug #4310: Limiters + HA results in hangs on secondary
- I have the same issue.
ha-backup crashed after 7 min -
- Error: Element ul not allowed as child of element span in this context. (Suppressing further errors from this subtree.)
-
- I responded on your other ticket, we try not to use this system for support type questions such as that. In short:
*... -
02:10 AM Feature #5997: Captive Portal - Create more then 1024 vouchers once
- Hi Jim,
thanks for the reply.
To summarize this:
- what happens if we need more than 1023 total rolls some day? ... -
-
-
-
03/15/2016
-
-
-
-
-
- 09:26 PM Revision 02c52e3d: Merge pull request #2744 from phil-davis/patch-3
- 09:23 PM Revision f1d5b8ef: Comment typos - firewall_rules
-
- 07:49 PM Revision 4dbdb358: Highlight moved rows to confirm move
-
-
- After I manually run rc.start_packages file is created and it has content:
2016-03-15 22:59:48: (network.c.416) ca... -
- I have no such file.
But I can see .rc.start_packages.running file which shouldnt be there right? -
- what's in your /tmp/bootup_messages file?
-
- Hi!
In snapshots from (I think so) 11. march some packages are not started durin boot/reboot.
Example is Lightsqu... -
-
04:30 PM
Bug #5953 (Feedback): Widget alignment issues
- Applied in changeset commit:6fefbd485808f89dc1443fd177f3f807bf859abb.
-
- I just pushed a fix for this, once the builder picks it up let me know if this fixes it for you. Thanks for taking th...
-
-
- 03:34 PM Revision 8fae468c: Add field to specify source-hash key
- The source-hash pool option uses a hash of the source address to
determine the translation address. This hashing algo... - 03:31 PM Revision 8f95aee6: Merge pull request #2742 from phil-davis/patch-6
- 02:51 PM Revision 36e9994b: Merge pull request #2741 from phil-davis/patch-5
- 02:50 PM Revision f460e59b: Merge pull request #2740 from phil-davis/patch-4
- 02:48 PM Revision ee1f18fe: Redmine #5994 Standardize gateways edit advanced button
- 02:40 PM Revision ab996f82: Merge pull request #2739 from phil-davis/patch-3
- 02:39 PM Revision 3671cb40: Merge pull request #2737 from NOYB/HTML_Compliance_-_Interfaces
-
02:23 PM Feature #6002 (Resolved): UPNP presentation_url and model_number
- Allow configuration of presentation_url and model_number via the web gui which would also be retained in the xml conf...
- 02:01 PM Revision 4aa42b06: Redmine #5972 Display Advanced settings on page load
- If there are non-default advanced settings, then the relevant fields are displayed on page load.
Advanced button beha... -
-
12:16 PM Feature #6000 (Needs Patch): Possibility to order Virtual IPs
- Hi,
It would be nice to have the possibility to organise Virtual Ips with separators like in the rules tab. For ex... - 01:17 PM Revision 7a2c0131: Redmine #5994 Make DHCP static edit advanced buttons
- Make the advanced buttons consistent.
-
01:15 PM Feature #946: Allow aliases to be used to define IPsec phase 2 networks
- It will be great see it in next release of pfSense.
Today I must create ~100 tunnels phase 2.
I had to create 5 my ... - 01:12 PM Revision afe62c2b: Redmine #5994 Make DHCP advanced buttons work consistently
- This is the first UI page to be changed so that the Advanced buttons work as specified in Redmine #5994
If this seems... -
- This reverts commit a32bed49516f3df3d104a5026a5b2c74451f348f, reversing
changes made to 9ec9978267a5d1985d6da8ba35d52... -
11:51 AM Feature #5616: Incorrect Wireless Channel
- I am still having this problem on a number of pfSense devices.
ssid SSID1 channel 10 (2457 MHz 11g ht/40-) bssid 0... -
- Looks good, thanks!
-
11:30 AM
Bug #5998 (Feedback): Double-digit alerts can cause the menu bar formatting to break
- Applied in changeset commit:bfb82face7f2788f6a5e25f6956054f28236b121.
-
- If you have more then 9 alerts, the formatting of the menu bar can break on most browsers.
!http://i.imgur.com/k4L... -
10:51 AM pfSense Packages Feature #5434: Let's Encrypt pfSense support
- https://github.com/Neilpang/le !!!
now it works! -
- You can already do this now by adjusting the bit counts in the voucher creation, for example, reduce the roll bits to...
-
- Hi,
regarding our conversation with "Steve" from pfsense-support, we would like to request the feature to create mor... -
10:25 AM Bug #5999 (Resolved): IPv6 IP Alias prevents Track Interface from working with DHCPv6 and RA
- I'm attempting to have GUA and ULA addresses provisioned to clients on the LAN interface by using DHCPv6 to provide G...
-
- Done so far:
services_dhcp.php - https://github.com/pfsense/pfsense/commit/afe62c2bbb892f053c8264f3c2bffa6a15111990
... -
- Pull request https://github.com/pfsense/pfsense/pull/2741
Commit https://github.com/pfsense/pfsense/commit/36e9994b1... -
- This one is a bit different, because it is the one page where there is no smart code to auto-open the relevant Advanc...
-
- We can probably close this one in favor of #5994
-
- Error: Duplicate ID btnadvppp.
<a class=btn btn-default btn-info href=interfaces_ppps_edit.php id=btnadvppp> -
06:40 AM Bug #5995: Button spacing on Diag > Edit file
- Updated screenshot showing new buttons but spacing still cramped.
-
- It's incredibly trivial but it grates on me every time I see it!
The spacing between the buttons and the main edit f... -
06:26 AM pfSense Packages Bug #5996: Snort service does not start back after rules update
- 5 mins later, Snort service did start the interfaces services, it just took it's time. Probably like 5 mins on APU. N...
-
- After rules update service doesn't start back on. No errors in log. After manually starting the Snort service, I get ...
-
- looks good, thanks!
03/14/2016
-
- 09:08 PM Revision 3f597adb: Re-commit change
- 09:08 PM Revision 533bce6f: Revert "Fixed #5983"
- This reverts commit 9ec9978267a5d1985d6da8ba35d52b7174239d2f.
- 09:01 PM Revision 2ae79c20: Use product name rather than smbios here.
- 07:48 PM Revision 0974e2de: Merge pull request #2736 from phil-davis/patch-2
- 07:47 PM Revision 1ce6d9e9: Merge pull request #2735 from NOYB/HTML_Compliance_-_Firewall_/_Schedules_/_Edit_-_Readonly_Attribute
- 07:47 PM Revision b824ec91: Merge pull request #2732 from ExolonDX/branch_02
- 07:45 PM Revision a32bed49: Merge pull request #2728 from phil-davis/form_button
- 07:23 PM Revision 9ec99782: Fixed #5983
- Added the ability to move multiple firewall rules via a "movre to here" icon (anchor)
-
- I can look at this tonight (my time) = Tuesday day US time.
-
- See forum for discussion: https://forum.pfsense.org/index.php?topic=108108.0
Where there is an Advanced section:
... -
- On a residential IPoE (not PPPoE) broadband line, a BNG will often require a subscriber to send a DHCPv6 SOLICIT in o...
-
-
- works
-
- Applied in changeset commit:8658cc0ed1127c2c7f1d84b4610db75675d914e7.
-
- I notice that I was the last one to change interfaces_wireless_edit.php and @Jimp committed it - https://github.com/p...
-
- n/m, I'll take it, I see the problem.
-
- The list on interfaces_wireless_edit.php is effectively empty even though there is in fact an appropriate wireless in...
-
- It looks like all these issues have been addressed.
Unfortunately, the period data can't come back as it stands, i... - 04:24 PM Revision d7b4cc7b: Change to 4 spaces
-
- Default settings are now in place.
-
-
02:43 PM
Bug #5983: Can no longer move multiple firewall rules simultaneously
- Multiple rules may now be moved by clicking them to select, then clicking the anchor icon at the location you want th...
-
02:30 PM
Bug #5983 (Feedback): Can no longer move multiple firewall rules simultaneously
- Applied in changeset commit:9ec9978267a5d1985d6da8ba35d52b7174239d2f.
-
- OpenVPN only has route_vpn_gateway in its environment variables if a route is pushed, even when you push route_vpn_ga...
-
- ruben rpuserh wrote:
> I found the case,
> I passes All VLANS (TRANK) to pfsense and then created 2 wan and 1 lan a... -
- 12:14 PM Revision 15e4340e: Anchot icon requires icon-pointer class
- 11:10 AM Revision 60f8fa56: Translate button text
-
-
-
-
-
- Pushed a fix, new version is up, confirmed working on multiple systems.
-
- Error: Bad value readonly for attribute type on element input.
Readonly is not a valid type attribute value.
If the ... -
- Looks like it might be a part of #4642, but you'd have to try a 2.3 snapshot to confirm.
Give a 2.3 snapshot a shot... -
12:11 AM Bug #5989 (Closed): OpenVPN status for multiple instance incorrectly works
- all tunnels work fine, but in status page some of them shown as down (printsreeen attached)
2.2.6-RELEASE (amd64) ... -
- Please keep the discussion on your current open forum thread until a bug is confirmed, this ticket system is not for ...
-
06:04 AM Bug #5991 (Not a Bug): Voucher relogin on slave server on pfsense 2.3 beta
- With pfsense 2.3 beta
I have two server with Voucher database synchronization.
The primary server can sync good to ... -
- Can see that GCM options for phase1 IPsec has been removed again at:
https://github.com/pfsense/pfsense/commit/76b... -
03/13/2016
-
- Your interface in the screenshot is a PPP type interface (pppoe?) and not igb0 directly. Unless the actual interface ...
-
07:51 PM Bug #5988 (Not a Bug): Missing link speed in interfaces widget
- In Dashboard/Interfaces widget, the link speed for WAN (Intel i211 nic/igb0) is empty
ifconfig:
igb0: flags=8843<... -
- Disclaimer - this happened, but I'm not sure what caused it, or what exactly fixed it. Raising as issue in case it ha...
-
11:42 AM Bug #5986: Multi wan problem with route
- I found the case,
I passes All VLANS (TRANK) to pfsense and then created 2 wan and 1 lan and this problem happened
... -
- Please post on the forum or use one of our available support resources for assistance with your configuration.
-
- Hi,
I have 2 wan interfaces and 1 lan order (wan, lan, wan2)
I setted up interfaces gateways for each ISP.
When de... -
- Feel free to open a bug upstream with OpenVPN if you'd like to see if they would be willing to accommodate this scena...
-
- I've done experimenting with this (#5981) issue. Looks like it's the issue of OpenVPN itself. If I add this string in...
-
03/12/2016
- 10:03 PM Revision 8778c9f0: Tidy up "interfaces_bridge_edit"
- Change type of input to number
- 10:01 PM Revision 282a02d3: Tidy up "system_gateways_edit"
- Tidy up missing semi-colon in non-breaking space
- 10:00 PM Revision f451c51e: Tidy up "pkg_mgr_installed"
- Remove stray closing SMALL tag
-
07:50 PM Feature #5985 (Resolved): ntp pool command
- For future ntp (FreeBSD 10.2+ ntpd 4.2.8p3) usage would it be possible for the web interface to support the pool comm...
-
- Error: Stray end tag spa.
Error: End tag td seen, but there were open elements.
Error: Unclosed element span. -
- 1) ok thanks.
2) been always like that indeed.. isnt verry friendly though..
3) it might be by (current) design, bu... -
- 1) yeah that will make certain things that used to be easy a real pain. opened #5983 for that
2) feature, always bee... -
- Still happens on my APU, just run through the wizard using HFSC and plug in 900 Mbit/s for all the interfaces bandwid...
-
- Anyone have a config that will reliably replicate this? I'm coming up empty on an APU, and with VLAN+lagg.
Steve ... - 08:07 AM Revision 677f0a18: Disable TLSv1.0 for web GUI's nginx instance. Ticket #5984
-
- See the details I have in #5835 for that specific case which isn't quite the same as the original problem here.
-
- Here is a config file. Nothing fancy is there.
-
- I don't know why but $route_vpn_gateway is always empty here. I've added some debug info to the /usr/local/sbin/ovpn-...
-
- works now
- 05:49 AM Revision e0712c75: Use route_vpn_gateway for tap-type OpenVPN instances as well where specified. Remove old and wrongly copy/pasted comments while here. Ticket #5981
- 05:46 AM Revision 6f838722: Don't try to put the file contents in place if file is empty. Ticket #5982
-
-
- While there are no known weaknesses in TLSv1.0 as we have it configured, it's increasingly triggering "vulnerability"...
-
- firewall_rules.php used to have a "move here" button like vpn_ipsec.php added in 2.3. Currently there isn't a way to ...
- 12:42 AM Revision bf648a15: Merge RCC add, 1540 name fix, from 2_2 branch.
-
-
-
03/11/2016
-
- fixed
-
- If you manage to get an empty file for a URL table alias, implode on a non-array ends up creating a crash report.
-
- The issue I turned this into is fixed.
Dmitriy: your issue is #5981, fix for that coming on that ticket momentari... -
- I turned this into something different from where it started having seen the same "pending" status on a couple other ...
-
- Jim Pingle wrote:
> Does that tun actually get a gateway sent by the far side?
>
> In lots of tun or topology sub... -
- Does that tun actually get a gateway sent by the far side?
In lots of tun or topology subnet configs the server se... -
- I have yet another an ovpn TLS TCP TUN net30 client connection and everything works fine. So TAP doesn't work and TUN...
-
- Tested on 2.3.b.20160311.1315 x64: Issue is not fixed, unfortunately;
-
- Well, this happens not only during boot. You can create a ovpn client in any time and you'll get the same result with...
-
- this looks to be working in all cases now, and the changes didn't result in any regressions that I can find. It also ...
-
- ovpn-linkup skips config of gateways for non-tun instances.
-
- Since the settings split hostname and domain the export package needs to catch up to the change.
https://forum.pfs... -
-
-
- Yeah I specifically mentioned this to Jared in the design process but had forgotten there was a ticket open on it. Ag...
-
- 04:17 PM Revision 2f62ed87: Resolve conflicts with master
- 03:59 PM Revision bc3c30eb: Internationalize Form_Button text
- The text of a Form_Button is not translated internally. Some Form_Button
calls already had the button text enclosed i... -
-
-
-
- 03:06 PM Revision 0eeee31f: Merge pull request #2725 from NewEraCracker/system_certmanager-fixes
- 03:02 PM Revision 491ec6f1: Merge pull request #2727 from phil-davis/savebtn
- 03:01 PM Revision 7e1f2e65: Merge pull request #2726heper:patch-2 from phil-davis/patch-2
- 02:43 PM Revision 306cbbc8: Fix $POST checks so they do not depend on string Save
- This prevents problems when Save is translated to other languages.
Note: This is the only remaining place I could fin... -
-
- 01:53 PM Revision 74bd7993: Translate the default submit button text
- Note: This will cause a problem for some code that does comparisons expecting this text to be exactly the string 'Sav...
-
- Done. New version is up now with the graphs removed.
-
- The Mail Reports package graphs cannot function with the current rrdtool, since it lacks the graph function. The code...
- 12:47 PM Revision 41869588: Merge pull request #2724 from NOYB/HTML_Compliance_-_CARP_Status_Widget
-
- Error: th start tag in table body.
Warning: A table row was 1 columns wide, which is less than the column count estab... -
- 12:02 PM Revision b35250d9: Indent system_certmanager.php
- 12:01 PM Revision 308f0665: The 'csr' code block is duplicated. This commit removes it
-
- This should be OK now in the package. The current version is up and works fine here.
-
- Looks good.
-
- Applied in changeset commit:4fb86e067c92c08f9603a110fed01a5bb537b9f2.
-
- This used to be there at some point in time, now missing. Same for vouchers page.
Quick/easy fix, will push moment... -
- This is about as good as it's going to get for the base system. Packages may still need some nudging but those can be...
-
- OK now
-
- Applied in changeset commit:b95e3de4cb39e0b3ef6a0f042b2c96b041019522.
-
- When the config contains no certs (http mode, all certs deleted), a foreach error is shown on System > Advanced, Admi...
-
-
09:02 AM Bug #4587: apinger doesnt come up when wan monitoring is disabled and vpn monitoring is on on boot
- ys its fixed, tried on a full and nanobsd install and monitoring comes up just fine on openvpn tunnel on bootup, u ca...
-
- Error: th start tag in table body.
Warning: A table row was 1 columns wide, which is less than the column count estab... -
- Remove cryptodev from kernel and build it as a module
- 05:42 AM Revision ccdb9c3b: Don't exit if the system is booting, should always be unnecessary. related to Ticket #5952
-
-
-
- You're welcome to it, Phil. Same as the v4 page would be fine, you know how it should work. :)
-
- fixed, and not seeing anything that regressed.
-
-
- 01:12 AM Revision 80d3cf1c: Doesn't seem to be any reason rc.newwanip should skip things while the system is booting. Ticket #5952
03/10/2016
-
- this should be fixed in 2.3 as part of #5952, Bipin can you test with the first snapshot from March 11 or newer?
-
-
-
- This issue happens when OpenVPN instances aren't yet connected at the time setup_gateways_monitor runs during boot. T...
-
- Just updated 2nd router to latest snapshot and ran into the same issue. it's 100% reproducible on both routers.
-
- Maybe there is a way to turn on nice debug logs in pfSense which I could provide to you?
-
- This isn't as easily replicable as I figured. I know it exists in some form, from OP's description, another forum rep...
-
-
-
-
-
-
-
- Some things i found to be 'strange'.
1) Ability to move multiple rows at once to a new location after selecting th... -
-
-
- To me for eval.
Looks like maybe it's unhappy if the config contains no certificates. I'll run some tests and try ... -
01:51 AM pfSense Packages Bug #5973 (Resolved): FreeRADIUS settings error
- FreeRADIUS: EAP TAB...
-
- This should be fairly well taken care of now. I kept finding more and more instances of things that needed fixes/adju...
-
- please use one of our available support resources. https://pfsense.org/support
-
02:33 PM Bug #5974 (Not a Bug): PPP configuration
- Hi all my name is Gianluca!
I've this error with my firewall:
ppp: [opt1_link0] MODEM: Fail to open serial port ... -
-
-
- 02:01 PM Revision 990a985e: Revised disk space display to use progress bar
-
- 01:03 PM Revision 0c35ea41: Merge pull request #2721 from phil-davis/patch-2
- 01:02 PM Revision 83a1c6d7: Merge pull request #2720 from phil-davis/patch-1
-
-
- I added the enable/disable and reset RRD data options, the builder will pick them up next time around. The default op...
-
- Make the status monitoring settings panel collapsible with page load state configurable in general setup associated p...
- 06:56 AM Revision f7e3a67f: Improve test for firewall rule advanced setting
- You could make some advanced settings, save the firewall rule, then when editing again the advanced section would not...
-
06:09 AM Feature #3859: Make it possible to set the source IP address for gateway monitoring
- Thank you Chris, it works indeed. It feels messy to add a NAT rule just for that, but I can see how adding this optio...
- 05:43 AM Revision 9d94bfd7: Display NAT advanced source settings if defined
- On NAT Port Forward Edit, if any of the source port settings are different to the defaults then display the source fi...
-
- Setup DHCPv6 Server, click on any of the Advanced boxes, the various subsets of advanced settings are displayed.
Ent...
03/09/2016
-
- works
-
-
-
- fixed
-
-
-
-
- 09:24 PM Revision ad1188d9: Fixed 5971
-
-
-
-
- Still need to review Advanced buttons and Repeatable block buttons.
-
04:06 PM Feature #3859: Make it possible to set the source IP address for gateway monitoring
- Source NAT may be a solution. However in my case the router is not doing any NAT at all. I find it a bit messy to add...
-
- Nicolas Canceill wrote:
>
> How can I make apinger use the correct source IP?
With source NAT, but that can't w... -
- I just encountered this issue in another use-case: using CARP with a single WAN IP, as explained here => http://serve...
-
- Submitted by: Bill Meeks
-
- Looks much better now
-
- Applied in changeset commit:db47fd9492a0838de6a72d8b51fb480974e3114d.
-
- On the UPnP settings (miniupnpd.xml), the formatting is bad on the page. The option names are long and wrapping, chec...
-
- Looks good
-
03:29 PM
Bug #5971 (Feedback): services_dhcpv6.php: Repeatable fields for additional options are not hidden
- Fixed and pushed
-
- On services_dhcpv6.php, The repeatable fields for additional DHCP options are not hidden by default. The "add" button...
-
02:41 PM Feature #4664: Separate Processor (CPU) and Processes graphs
- I believe this issue is sufficiently addressed with the new interactive graph in 2.3 and this feature request can be ...
-
- Thanks Anders, also checked out fine on a couple more systems here.
Greg M wrote:
>
> Is this connected?
Un... -
03:21 AM Bug #5957: Fix for missing route creation during reboot for delegated prefixes (given by DHCPv6 to sub-routers before the reboot)
- Thanks Chris! It works!
I made 3 reboots with the latest snapshot and in all 3 reboots pfSense recreated the route t... -
- Hi!
I have also some issues with route6:
/rc.filter_configure_sync: The command '/sbin/route change -inet6 defa... -
- There are at least a couple settings/functions that currently aren't there and still need replacement in a settings a...
-
- since RRD was replaced with monitoring graphs there seems to be no way to enable it on nanobsd if during 2.2.3 RRD wa...
-
- Works, thanks
- 01:22 AM Revision 08acb038: log dhcpleases and dhcpleases6 to dhcpd.log. Ticket #5968
03/08/2016
-
11:21 PM
Feature #5498: RRD needs a makeover
- Please bring back the summary view "period". The total byte count was what I mostly used the RRD traffic graphs for.
- 11:15 PM Revision ea125f70: Correct reference for 6rd. Ticket #5967
-
-
-
- that's in the latest snapshot now. Works here, Anders could you please confirm.
-
- None of my networks were quiet enough that I'd noticed that. I confirmed the noted change to dhcpleases6 makes it add...
-
- fixed
-
-
- 6rd interfaces show fields that aren't applicable (DHCP6, track, etc.).
- 07:46 PM Revision 40b65f4e: Changed all selectoraction to"change" instead of "click"
- 07:46 PM Revision 88ce4c45: Fixed #5962
-
-
-
-
- The default syslog.conf can miss logs from dhcpleases and dhcpleases6.
-
-
-
-
-
-
-
-
- Works
-
- Applied in changeset commit:c933c798835586904921b8305c8732bfba47317b.
-
- I see a good way to fix this (and it's using the wrong icon anyhow)
-
- The icon on the "Import" button on Firewall > Aliases is white on a white background, at least in the light theme. Wh...
-
01:48 PM
Bug #5962 (Feedback): IPsec Phase 2 edit page: Remote Network subnet bits field doesn't enable/disable correctly
- Changed selector jQuery from "click" to"change". This seems to make Chrome happy, and does not affect other browsers.
-
01:26 PM
Bug #5962: IPsec Phase 2 edit page: Remote Network subnet bits field doesn't enable/disable correctly
- This issue appears to be confined to Chrome. Investigating now.
-
- I didn't check other similar fields in the same page, like Local Network or NAT/BINAT Translation, but they may have ...
-
-
-
-
12:32 PM Bug #5520: IPsec status seems to hang preventing access to the webgui.
- I'm on 2.2.6-RELEASE (amd64) and experiencing this issue. Is there a patch I can apply? I tried the ones listed here ...
- 12:31 PM Revision bf2602a9: Merge pull request #2717 from NOYB/System_/_User_Manager_/_Groups_/_Edit
- 12:31 PM Revision 040cb6ef: Merge pull request #2716 from phil-davis/patch-6
- 12:30 PM Revision cbfbab58: Merge pull request #2715 from phil-davis/patch-5
- 12:29 PM Revision 836400cd: Merge pull request #2714 from phil-davis/actions
- 12:29 PM Revision 2c2dc9af: Merge pull request #2713 from phil-davis/patch-3
- 12:28 PM Revision 8c19aece: Merge pull request #2711 from NOYB/System_/_User_Manager_/_Users_/_Edit
-
- Applied in changeset commit:b4e955d94fa063efda750cdb6adf9c73f7051ef1.
-
- When editing a 1:1 NAT rule the text for the disable option is an inconsistent copy of the negate text.
Fix pendin... -
- Looks much better now
-
- Applied in changeset commit:1ce9c03dc3f24f44f6d36a182f45ed0d2ad8ecfe.
-
- The CARP status widget is not formatted properly compared to other widgets, and its VIP status icons are not consiste...
-
- Applied in changeset commit:15b6dcac6ae1697336a762b955cbde19d30047c4.
-
- There are a few icon usage inconsistencies around the GUI in 2.3 that need cleanup:
* fa-hand-paper-o used when it... -
-
- Works
-
- Applied in changeset commit:89333d37c4864bee6a0947358d5194f99b2c2860.
-
- On the Config History tab under Diag > Backup/Restore, the Save button for the settings is outside of its collapsible...
-
- Error: th start tag in table body.
Warning: A table row was 3 columns wide and exceeded the column count established... - 05:04 AM Revision 8d89682e: Change invalid use of $iface in interfaces.php
- At this point $iface is an undefined var. So the last test of this "if" statement is useless.
That code fragment was ... - 03:47 AM Revision 1ee6d09a: Improve track6-prefix-id handling
- 1) The var $iface is not set at lines 2457 or 2464. It is a var that was used higher up local to build_ipv6interface_...
- 02:37 AM Revision 21d973b2: Add Actions column heading
- to other places where it was missing, for UI consistency.
- 02:05 AM Revision b1466a09: Add Actions column heading for CRL Manager
- To be consistent with everywhere else that has a heading for the Actions column.
03/07/2016
-
- Warning: A table row was 4 columns wide and exceeded the column count established by the first row (3).
Error: Stray... -
-
-
-
- what do your resolver logs show for filterdns?
Maybe it's something to do with the fact those are both CNAMEs, ma... -
- Looks good now.
-
- Applied in changeset commit:4af2649f7f03fe0c38ca213ff370ea57d683bcb4.
-
- I'll take this actually. I thought it might be something deeper but it's pretty simple.
-
- On the Load Balancer status widget there is a variable showing through instead of its value in the Pool column:
!h... -
- Looks good now.
-
- Applied in changeset commit:b35edfe772b8b17c007b8facdc7bf0430c8bea0e.
-
- Widget formatting is not correct on the WoL widget, status icon is outside of the table.
I'm not too crazy about t... -
- 10:58 AM Revision 8ed2d200: Destroy reference after foreach
- As recommended at https://secure.php.net/manual/en/control-structures.foreach.php
-
- Applied upstream - https://svnweb.freebsd.org/ports?view=revision&revision=410518
-
03:30 AM Bug #3870: re(4) NICs on APU are unable to hardcode speed/duplex properly
- Hi,
I was also effected by this bug, also had it pegged down as a hardware issue, but it's not. I switched to IPFire...
03/06/2016
-
-
A potential workaround for manual update may be to edit and save the alias. Haven't tried it but maybe that would... -
- If the whole TTL tracking bit is too complicated, how about just a periodic refresh every so many hours.
Also, i... -
- I'm seeing a problem where pfSense starts blocking connections that it had previously been allowing through. When th...
-
- I have noticed that if pfSense reboots then routes to sub-routers are not re-created.
Meaning subnets given by DHCPv... -
-
-
-
- Reproducible with any widget. Right now I've an error while playing with widgets and pfSense offered to upload crash ...
-
- It's in Opera 35.0.2066.92 on Win10 1511 x64.
- 12:51 PM Revision bf9a83cd: Merge pull request #2709 from NOYB/HTML_Compliance_-_Login_Form
-
- Hello!
On my 2.3 latest snap it happened again today.
Had to kill php and restart webconfigurator to gain access ... -
-
- Applied in changeset commit:96f22d875b8a8e20de3ee89447e7d8dd11fc336d.
-
- Error: Duplicate attribute class.
<div class=alert alert-warning class=hidden id=no_cookies>Your browser must support... -
-
- This fixes the need for a reboot after changing interface assignment in console.
03/05/2016
- 11:00 PM Revision 801d5559: Merge pull request #2708 from phil-davis/patch-3
- 11:00 PM Revision 68219e9a: Merge pull request #2707 from phil-davis/patch-2
- 10:56 PM Revision ad51eb90: Limit widget column to dashboardcolumns
- Stops widgets from "going missing" when the user reduces the dashboard columns in System, General Setup.
If the user ... -
- what browser and OS? Anything else to replicating? I can move the gateways widget around anywhere without seeing that...
-
- Sorry, I've uploaded invalid file!
-
- See pfsn2.3widgets_bug.mp4 for more information
-
- nanobsd builds are coming out broken, file size much too small.
-
- works
-
- fix pushed
-
- It's very intermittent. I believe this was fixed by dhcpd 4.3 upgrade in 2.3, no has seen it happen on 2.3.
-
- fixed
- 09:39 PM Revision 1f64e8b8: Correct wording of prefer_ipv4 help text
-
- works
-
- Thanks Chris!
-
- IPs and VIPs now added back after recreation
-
- regressed in 329b8d92573ca6682b74b05f0feaaa8d5470108c.
-
- Save a VLAN on interfaces_vlan_edit.php on an assigned interface, and you end up with that VLAN interface missing all...
-
- works with the updated _7 package.
Renato: please review and let's get that change upstreamed. -
- pushed a change to omit that patch. System that used to fall apart within minutes is solid now.
-
- In some circumstances, dhcp6c causes the WAN IPv6 IP to be lost after renewal, in circumstances that work fine with 2...
-
- Luiz tracked down the root cause to actual memory allocation failures. "it uses memory from the uma allocator, the um...
- 01:08 PM Revision 65ebf415: Merge pull request #2706 from NOYB/System_/_User_Manager_/_Groups_/_Edit_/_Add_Privileges
-
- Not certain that the list needs to be sorted here. Looks like it is already in order. If it does then a valid callb...
-
- Duplicate of #4828
-
- Hi,
It will be nice to show the implicite block rule in the rules tab.
Best regards
Gaetan - 11:42 AM Revision 7d31c585: fix whitespace
- 11:23 AM Revision c6e8317d: Remove duplicated text/javascript
- 11:14 AM Revision 3a8a9028: Add track6 DHCP6 IPs back to interface when applying changes. Ticket #5945
- 09:30 AM Revision 6171add2: After recreating the VLAN interface, run interface_configure on it if it's assigned and enabled. Ticket #5951
-
09:16 AM Feature #5498: RRD needs a makeover
- I think 95th percentile would be useful in quality graph maybe not for systems that your familiar with but in a syste...
-
- ran into this on Friday, there is some kind of issue with dpinger on OpenVPN interfaces. I haven't had a chance to lo...
-
- Hello.
I have an openvpn TLS UDP TAP subnet client connection in pfSense 2.3.b.20160305.0255. After successful con... - 06:28 AM Revision 7c65816e: clean up description
- 06:23 AM Revision 715b62d2: Remove help text wrongly copy/pasted from elsewhere.
- 12:52 AM Revision 15c9c921: Update nginx gzip_types. Remove text/html since it's redundant, and add a few others. Particularly useful, json, since status_monitoring.php uses it. Reduces load time on slow connections to about 1/4th of what it is without gzip on json. Ticket #5498
03/04/2016
-
- Jeff Wischkaemper wrote:
> Is there some way we could get the old RRD put in as well, to do some side-by-side compar... -
09:49 PM Feature #5498: RRD needs a makeover
- Thanks for the reply, Chris. If this is still a work in progress, that makes me feel a lot better.
Is there some w... -
- Jeff Wischkaemper wrote:
>
> The new graphs appear to downsample significantly, particularly on larger time scales ... -
- some notes from things we were reviewing.
Quality graph: always show % values for fractions of a percent, rather tha... -
- While more aesthetically pleasing, this release is a serious regression in functionality from the old RRD graphing.
... -
- Thanks Greg. I removed the code, but unfortunately the builder already picked it up: https://github.com/pfsense/FreeB...
-
- Hello!
On last snap there is an issue, see attached image. -
- 09:16 PM Revision 4225416f: Always set ignore_acquire_ts = yes. No need for that in any of our use cases, and it fixes problems like Ticket #4719.
-
- fixed, thanks to Tobias Brunner on the strongswan ticket for pointing out a charon config option I missed.
-
-
-
- At this point unless it can be reproduced on the current version of FreeRADIUS on pfSense 2.3, it won't be addressed ...
-
12:48 PM pfSense Packages Bug #3343: (re)starting freeradius service throws "The command '/usr/local/etc/rc.d/radiusd.sh stop' returned exit code '1', the output was 'radiusd not running?'"
- I have the same problem as Adrian Lewis. pfsense 2.2.6 amd64 radiusd keeps crashing down. My pfsense setup ran very w...
-
-
-
-
-
- Sorry wrong log. Here is the correct one
-
- I have noticed this issue as well. We have to disable sync when using limiters because it's crashing the system. I ha...
-
- Bad character - after <. Probable cause: Unescaped <. Try escaping it as <.
-
- Works, all selections are populated with choices and appear to work (font changes once selected and so on)
-
-
-
02:54 AM pfSense Packages Bug #5594: Captive portal patch does not work anymore
- Hi,
We use this great functionnality to block access to our local squid before authentication.
We use pfsense2.2.6... - 01:44 AM Revision a5776226: A PD-obtained subnet is always a /64 on the interface, so should be shown as such here in DHCPv6 server. Ticket #3029
-
-
- This all works correctly now. The range and static mappings are supported.
prefix6 support for PD of PD-obtained ... -
- It should be possible to configure the DHCPv6 server to use PD-obtained networks for its PD config (prefix6). It curr...
03/03/2016
- 11:01 PM Revision 0d0f419e: pkg-utils typo in comment
-
- works
-
- Merged, seems fine. Leaving to feedback for more widespread testing once it hits a snapshot.
Thanks Anders! -
-
09:26 PM Feature #5949: Request to move some modules out of the kernel so that they can be replaced with newer versions...
- Jim,
I've asked the community to check how I compiled the driver to see where I made a mistake:
https://forum.p... -
- If you load the module in loader.conf.local you can override the built-in drivers, don't try to load it with kldload....
-
- Some recent skylake motherboards come with newer intel network interface chips.
https://forum.pfsense.org/index.ph... -
- Looks good on another system as well, can't seem to break the new code.
Also of note, likely due to changes in ntp... -
- Applied in changeset commit:31b151809d04c40fd915c129d28cc9b440a0eabe.
-
- I moved the default Access Restrictions to their own tab and then added a mechanism to define custom access restricti...
-
- 07:04 PM Revision 12d7d9e7: Revert "Always send a -HUP to dhcp6c in interfaces_track6_configure for DHCP6 WAN types. Doing so isn't any more disruptive than what it's already doing, and that ensures track6 interfaces don't lose their IPv6 IPs. Ticket #5945"
- This reverts commit 471b81f8f7b0a5fe22019aed955e5374e3411dbf.
-
-
-
-
- It needs a loading icon for slow connections.
Y axis not showing up (seen in Firefox on the Traffic Graph, but a r... -
- No option for NTP as an axis.
-
- Note to add graph title so screenshots make more sense.
-
- Units on the tooltip need some help displaying small values: !http://i.imgur.com/Uo5IwFK.png!
You can also see the... -
- Also the selection for System, States appears to be non-functional (nothing happens when chosen)
-
- The "end" of the graph (right side) always seems to fall to 0, it's more noticeable on the 1 hour graph choice. It mi...
-
- For the Traffic and Packets category selections, the provided interface names in the "Graph" drop-downs do not use th...
-
- I've imported the first version in Status -> Monitoring, it will be available on next snapshot.
What is missing at... -
-
-
12:30 PM pfSense Packages Bug #5947: After updating to latest 2.3, snort's SID management files are missing
- Bill Meeks wrote:
> George:
>
> Can you provide some clarification on the issue you are reporting? Did you have ... -
12:27 PM pfSense Packages Bug #5947: After updating to latest 2.3, snort's SID management files are missing
- George:
Can you provide some clarification on the issue you are reporting? Did you have customized SID management... -
- George Phillips wrote:
> The file disablesid-sample.conf file reverts to a default file.
This happened while upda... -
- The file disablesid-sample.conf file reverts to a default file.
-
-
I've done that several times already. The only difference is that I started receiving for this ticket.
-
- Try this:
* Click "My Account"
* Change nothing
* Click Save
Until I did that yesterday the messages I receive... -
- Email notifications is set for "Only for things I watch or I'm involved in".
In the past that apparently included ... -
-
- 01:15 PM Revision d5ef2e58: Merge pull request 2702 from NOYB/HTML_Compliance_-_Diagnostics_/_S.M.A.R.T._Status_/_Information_&_Tests
-
- Remove unused/duplicate ID's; action, device, submit.
-
-
- this is fixed, re-opened #5945 after reverting that change.
-
- I was looking at this earlier.
-
- I can reproduce this on three boxes, seems to be specific to DHCPv6. In my case it's pulling PD as well.
Log is fu... -
- that caused issues I didn't notice until later, reverted.
- 08:53 AM Revision 962603e6: Merge pull request #2700 from al-right/master
-
- Remove unused/duplicate ID's; action, device, submit.
- 07:45 AM Revision 37d41653: Shift the values to account for the removal of the gateways one. Ticket #5905
- 07:32 AM Revision b5fcc2b5: Remove the code block to "fake" DHCPv6 server, now that it's unnecessary. Ticket #3029
- also ref: https://forum.pfsense.org/index.php?topic=107537.msg600111#msg600111
-
- We are focusing on the packages we support for the initial release. After 2.3-RELEASE is out others may come back, bu...
-
- So, the bind package is dead, I suppose?
-
- Brice Figureau wrote:
> Chris Buechler wrote:
> > The change from strongswan's 1185-vici-action-unlock branch was b... -
03:31 AM Bug #5520: IPsec status seems to hang preventing access to the webgui.
- Chris Buechler wrote:
> The change from strongswan's 1185-vici-action-unlock branch was brought in this week in hope... -
04:32 AM Bug #4310: Limiters + HA results in hangs on secondary
- I have the same issue.
Panic on my HA-Backup between 10 minutes and 3 hours. I have send you several crash reports ... - 02:45 AM Revision 91aff739: Use correct variable. Ticket #5946
-
- He just missed shifting the values to account for the removal of [8], fixed now.
-
- Revision 3b53c227
Added by Jared Dillard about 9 hours ago
Ticket #5905 remove unused code
That commit break... - 01:38 AM Revision c32b4917: Clarify log, remove old commented out things that are unnecessary.
-
01:09 AM Bug #5649: bce0: Discard frame w/o leading ethernet header (len 0 pkt len 0)
- As of tonight's nightly build this issue seems to have gone away (pfSense snapshot).
- 01:00 AM Revision 8a85a809: Fix text for OpenVPN client that was copied from server, client's second.
-
- any chance this will be fixed in 2.3?
- 12:20 AM Revision 471b81f8: Always send a -HUP to dhcp6c in interfaces_track6_configure for DHCP6 WAN types. Doing so isn't any more disruptive than what it's already doing, and that ensures track6 interfaces don't lose their IPv6 IPs. Ticket #5945
03/02/2016
-
- Al right patch 1
-
- fixed
-
- should be fixed
-
- A save and apply on interfaces.php removes the IPv6 IP from track6 interfaces, until you either save and apply on the...
-
-
-
- Fix lacking of incrementation of index when two characters have been passed.
Fix check of $n so that the octal value... -
- works
-
-
- as described here.
https://forum.pfsense.org/index.php?topic=107745.0 -
- they're being sent, and your MX is accepting.
after the redmine upgrade there may be diffs in what it emails you,... -
- Hey. Finally received a notice form my updating of this ticket.
-
- Doesn't seem to be so. Still not receiving any Redmine bug update email notifications. Not even one for this bug re...
-
-
-
-
- Pull request for the mentioned issues are located here:
https://github.com/pfsense/pfsense/pull/2700
Many thanks ... -
- As a continuation of https://redmine.pfsense.org/issues/4206 I have made some bug fixes.
They address the following ... -
-
-
-
- Fixed the following files:
/src/usr/local/www/includes/functions.inc.php
/src/usr/local/www/status_gateway_groups... -
-
- Renato is busy at the moment, I'll see what I can do for this one.
-
-
- Thanks for the workaround it is added to base. Unfortunately on the firewall rules page you can't easily copy the dat...
-
01:15 PM Feature #4234: allow for strict user <> cn validation of mobile ipsec users when using rsa+xauth
- The backend code that exists in /etc/inc/ipsec.auth-user.php is not actually something that can be used. It looks lik...
-
-
-
-
-
-
- Works. Replicated the problem scenario with the code in place, no more errors.
-
- Applied in changeset commit:1c225a98555d1bfb7194e56d2283abfbb6b74663.
-
- In some rare edge cases (e.g. corrupted pkg db, forced pkg reinstall) duplicate entries can end up in /usr/local/etc/...
-
- Fixed in commits:
* 8fd55d388a09a737ad8facea0851f38065fd6415
* b18c31498e95ced3c55377a9e3f9197c973c8017 -
- It was missing a change on src.conf to re-enable syscons during build.
-
- Attribute width not allowed on element input at this point.
<input type=number id=gotoline width=6>
Width attribute i... - 01:51 AM Revision 5d314c0a: Fix DHCPv6 server check to allow track6. Ticket #3029
- 01:19 AM Revision 8332312b: Add function to return the physical interface(s) for a given parent. related to Ticket #5081
- 01:16 AM Revision c48401e7: Add code to handle DHCP leases in multiple pools
- 1) Add code from RELENG_2_2 https://github.com/pfsense/pfsense/commit/cf3aff59edfa4b101d69ddd694a59fdc580d2299 that c...
-
- it works.
03/01/2016
-
- After further thought, I am closing this because I don't think I'll be able to get a dropdown color option given the ...
-
-
-
-
- Fix missing check for $active to avoid creating a route to a released lease.
-
- /usr/share/syscons/keymaps still seems to be empty, which leaves it with no list to select from. The video font and s...
-
- Pushed a fix
-
-
- Chris Buechler wrote:
> Then it's definitely worth putting stock FreeBSD 10.2 in the same situation, and post to fre... - 08:16 PM Revision eb56633d: Show n/a for static mappings, as prior versions did. Ticket #5942
-
- the type of behavior linked in OP would be nicer, but it'd be no big deal to leave things as-is.
-
- works with the latest 1.2.1 package version. Note you have to upgrade the base system as well as it has a new functio...
-
- working for me with the changes I just pushed
-
-
- Made a silly mistake and overlooked an important difference between javascript substring() and php substr().
Tightene... -
- fixed earlier
-
-
- Remove "$entry['iaid'] . " from $mappings[] since the IAID of the IA_NA != IAID of the IA_PD, please see note in http...
-
-
- This seems to be fine, it no longer errors out with something like ...
-
- nothing needs to be done here for 2.3. Not sure anything needs to be done here at any point, though it wouldn't hurt ...
-
- fixed. the v6 equivalent still has the n/a
-
- that should restore the previous behavior
-
- status_dhcp_leases.php should just show n/a for start and end dates for static mappings, as it did prior. Otherwise c...
-
-
-
- 02:11 PM Revision b8f62ec2: print_callout class setting
- The last test here looks not good having just a single equals sign - if the interpreter evaluates this then $class wi...
- 01:41 PM Revision 28a05cf1: Use MiB units for memory disk size
- Forum: https://forum.pfsense.org/index.php?topic=106547.0
The underlying FreeBSD command seems to allocate space in M... -
- All subtasks are closed now
-
- Conversion is complete, individual bugs need to be treated on new tickets
- 01:16 PM Revision db653fc6: Merge pull request #2695 from derelict-pf/master
-
- I pushed a few fixes to the package and it's running OK now based on feedback from users and personal testing. New is...
- 01:12 PM Revision 684e251b: Merge pull request #2694 from NOYB/Diagnostics_/_Tables_-_URL_Table_Aliases
- 12:54 PM Revision a1183706: Fixed blank space caused by hidden input
-
- this is still easily replicable with the config I attached. Sent Luiz a system that's running it and still sees the i...
-
-
-
- Seems like maybe the the browser is not honoring something about the info block css, such as a width, or perhaps some...
- 08:06 AM Revision c2dbd6d7: Update system_certmanager.php
- Something felt off about the certificate icons. Particularly the fa-key + P12. I think this is better.
- 08:05 AM Revision eb2f4b88: Update system_camanager.php
- Something felt off about the Certificate/CA icons. Especially the fa-key and P12 being the same action. I think this ...
-
- Ivon confirmed the fix works
- 07:32 AM Revision a6d55c23: Only specify auth-user-pass for TLS mode. Ticket #5941
-
-
- I've not been on the same network and gateway that this was originally seen on and won't be again till later in the w...
-
- fixed
-
- If you create an OpenVPN client config specifying a username and password, then change it to shared key, the username...
02/29/2016
-
-
-
- We are changing the way RRD is being graphed by making it an interactive SVG using a popular javascript framework cal...
-
- we have a workaround, upstream hasn't touched root issue in nearly a year. If/when that changes upstream we can revis...
- 04:55 PM Revision 191136b3: Merge pull request #2693 from NOYB/Diagnostics_/_Tables_-_URL_Table_Aliases
- 04:51 PM Revision 4313cf55: Merge pull request #2692 from NOYB/HTML_Compliance_-_Services_Status_Widget
- 04:50 PM Revision 1d2c7476: Merge pull request #2689 from lukehamburg/patch-1
-
04:50 PM Revision f8a475f5: Fix unbound.inc so zero value for *_num_tcp is honored
- In the Unbound documentation, it is noted that setting "outgoing-num-tcp" to "0" disables TCP queries. In testing I n...
-
- The last two were fixed up today. There may be some bugs to shake out but those can be handled in additional tickets ...
-
- I just pushed version 3 of the lightsquid pfSense package which runs on its own separate port using lighttpd and has ...
-
- Back to me to find an alternate solution
-
- Bill finished conversion, it's available on version 3.2.9.1_2
-
- Basic edits have been made to the QSG and book to remove references to the LiveCD and to fix up the filename to refle...
-
- exactly, the bug in igmpproxy was fixed and now works fine with CARP and IP alias on upstream interface.
-
- Handle URL table aliases similar to bogons tables. Suppress record remove buttons.
Update (download) only the select... -
08:12 AM
pfSense Packages
Bug #5932: Suricata / Alerts - can't clear alerts
- Fixed
-
07:54 AM
pfSense Packages
Bug #5938 (Resolved): Link for Signing up for ETPro account got changed - Suricata
- Link changed as suggested. Thanks.
-
04:56 AM pfSense Packages Bug #5940: Squid Local Authentication fails with passwords >8 characters
- Additional note: The affected version is 2.2.6. I couldn´t select that from the dropdown.
-
- Hi,
I just upgraded some machines from 2.1.5 amd64 with Squid 3.1.20 pkg 2.1.4 to 2.2.6 amd64 with Squid3 0.4.7.
...
02/28/2016
-
- Found the problem with clearing the ALERTS tab and log file. Naming the form button with the ID "delete" seems to tr...
-
- For what it's worth, I now see this same error in the Snort package on Bootstrap. This was not happening in the rece...
-
07:24 PM
pfSense Packages
Bug #5932: Suricata / Alerts - can't clear alerts
- Thanks Ivor, that helps. This package is so complex I need very specific guidance :)
-
- I sometimes get the following 'error' when trying to login to the webgui. (Today after performing a firmware upgrade ...
-
- The link under Services / Suricata / Global Settings for signing up for an ETpro Account leads to "page not found". L...
-
-
- Looks complete to me
-
-
07:51 AM Bug #5935: firewall_rules.php - no schedule preview
- I added a description, which works fine for me. This probably provides more flexibility for most, so makes sense to ...
-
- The for attribute of the label element must refer to a non-hidden form control.
There is no corresponding target of t... -
- Updated to 1.10
02/27/2016
-
- Thanks for the quick turnaround. Don't care about the existing data. It's strictly a dev system. Maybe others do. ...
-
- The dpinger fix is pushed. It probably won't be in pfSense snapshots until Monday.
Please note that the fix will n... -
- It's an integer overflow on 32 bit. I'll have a fix up shortly.
-
- 2.3-BETA (i386)
built on Fri Feb 26 13:07:04 CST 2016
FreeBSD 10.3-BETA2
dpinger parameters:
Weight: 1
Dat... -
- Are you on 64 bit or 32 bit? What dpinger parameters are you using?
-
- Standard deviation is overwhelming the RRD quality graph scale. Rendering the graph not very useful. Can the standa...
-
- ICMPv6 logging was not being displayed in firewall log.
-
- For past couple days have not received any email notifications of created or updated bug reports.
-
05:10 PM
Bug #5935 (Feedback): firewall_rules.php - no schedule preview
-
05:09 PM
Bug #5935: firewall_rules.php - no schedule preview
- In my testing I find that the schedule pop-up is not blank, but shows the schedule name and the schedule description....
-
- Yes, exactly. See attached.
- 12:32 PM Revision b715db5d: Update license page. Ticket #5903
- 11:54 AM Revision 3c040719: Update license page. Ticket #5903
- 09:18 AM Revision 89a7331c: Merge pull request #2690 from NOYB/ICMPv6_Firewall_Log_Display_-_Fixes_5933
-
- ICMPv6 logging was not being displayed in firewall log.
-
-
- think I got everything here
-
- Hi
New Suricata installation. Nothing fancy.
Add Snort VRT Rules. Add 2 Interfaces configured with resolve flo... -
- In the Unbound documentation, it is noted that setting "outgoing-num-tcp" to "0" disables TCP queries. In testing I n...
-
- works, thanks NOYB
-
- Pull request to fix submitted.
https://github.com/pfsense/pfsense/pull/2690
-
- subject is definitely not an issue.
Guessing this is the one using AH (no encryption) rather than ESP that's affe...
02/26/2016
-
- File attachments fixed. You mean the hover over the schedule on firewall_rules.php? That looks to be blank where it s...
-
- we just upgraded redmine today and moved it to a new server, apparently file attachment issues. testing
-
- Picture not uploading here.
-
- I believe there is supposed to be a preview of the schedule when hovering over it in firewall rules. It doesn't show...
-
- going to need more than that to go on, it's certainly not replicable to freeze a machine when a gateway goes down. No...
-
-
- yeah this is all good, thanks! pointy hat to me for not thinking of this use case
-
08:40 PM Bug #5916: General Setup page cannot be saved with blank DNS server slots
- Tested in 2.3.b.20160226.1008 and everything looks good. I think this can be closed.
-
-
-
- fixed
-
- Fixed by commit:954202d03343e3bfbba9ada401ff7c54dad571f2
-
- On system_rotues_edit.php the "Destination Network" field does not allow an IPv6 address to be entered, it yields too...
-
-
04:53 PM
pfSense Packages
Bug #5932 (Feedback): Suricata / Alerts - can't clear alerts
- Screenshot please :)
-
- Under Suricata / Alerts I can't seem to clear alert entries. Clicking on Clear button shows two popups but doesn't cl...
-
-
-
-
-
- fixed
-
- should be good
-
- Regression after the recent IP function changes, OpenVPN ends up with: ...
-
-
-
- 01:42 PM Revision 02afb60b: Merge pull request #2688 from NOYB/Don't_Leave_Ancestor(s)_Selected
- 01:33 PM Revision c24d39e0: Remove callsto updateWidget since widget status is now saved explicitly via the save icon in hte breadcrumbbar.
-
12:50 PM Bug #5934: When two distinct Phase 1 are configured, only the first one connects ar startup
- Some clarification...
The two Phase 1 are not going out in the same Interface in the "Central Server" but through ... -
- As the attached files will illustrate if you have two distinct phase 1 entries with equally distinct and respective P...
-
- ICMPv6 logs are correct in filter.log, but missing from status_logs_filter.php. Other protocols with IPv6 don't seem ...
-
11:23 AM
Bug #5383: CODELQ Traffic Shaper Causes Panic and Reboot During Speed Test
- I upgraded to 150/150 as well, enabled CODELQ on all interfaces and experienced the same crashing. I've attached the...
-
- Looks good in general and with some basic testing. I fixed a problem listing the snort VRT rules in the category list...
-
08:02 AM
pfSense Packages
Todo #5588 (Feedback): Convert the pfSense package Suricata (security/pfSense-pkg-suricata) to Bootstrap
- All UI files (including the dashboard widget) have been converted and tested for appearance and control actions. This...
-
-
- Tested by JimP
-
07:55 AM
Feature #4905 (Needs Patch): Expose Curve25519 DH group to UI
- The Curve 25519 patch referenced here was never incorporated into StrongSwan. I have not been able to determine what ...
-
- Already in 2.3. Duplicate of #4535
- 07:50 AM Revision 636918c9: Fix OpenVPN ifconfig. Ticket #5930
-
07:28 AM
Bug #5926 (Feedback): Collapsible Sections generate JavaScript error when toggled
- Fixed in https://git.pfmechanics.com/pfsense/pfsense/commit/c24d39e07edce207537910e5424d3d178fb506cb
The updateWid... -
- once I got a scenario that presented an apply changes button, that was easily replicable. Fixed now
-
- all good
-
- all the circumstances that failed before are good on the latest 2.3 snapshot
Also available in: Atom