Activity
From 03/21/2016 to 04/19/2016
04/19/2016
-
10:04 PM Bug #6173: /firewall_nat_edit.php: dsttype_selected wrong when edited w/VIPs defined
- I still cannot reproduce it. I copied all the things in your screen shot (filling in valid IP addresses where you red...
-
09:59 PM
Bug #6173: /firewall_nat_edit.php: dsttype_selected wrong when edited w/VIPs defined
- I have tested with the same setting you have in you MS-RDP rule, but was not able to reproduce the issue either.
U... -
09:12 PM Bug #6173: /firewall_nat_edit.php: dsttype_selected wrong when edited w/VIPs defined
- Phillip Davis wrote:
> @Jacob can you provide a screenshot of the whole NAT entry that has this problem.
> I have t... -
- @Jacob can you provide a screenshot of the whole NAT entry that has this problem.
I have tried various different NAT... -
- I am experiencing the same issue. My installation is an upgrade from 2.2-Release, installed from the ISO approximate...
-
08:26 PM Bug #5993: dhcp6c not started until an RA received
- The issue raised in this bug should certainly be addressed, but I urge careful review of the commentary in Issue 1 of...
-
08:02 PM Feature #6210 (Rejected): create user privilege for only DNS Host and Domain Overrides in DNS Resolver
- Currently, the only way to allow privilege to add/edit DNS overrides is to allow access to the entire DNS Resolver Op...
-
07:18 PM Revision ee092d36: (diag > edit file) page styling
-
-
-
07:10 PM Revision b4afe9df: Setup HTTP_PROXY environment variable for pkg when it's called from the GUI and also for pfSense-upgrade
-
-
06:50 PM Bug #6189: Boot up troubles with ramdisk and alias tables
- NOYB NOYB wrote:
> ky41083 - wrote:
> > NOYB NOYB... "But I don't know how to do create a commit for that from a Wi... -
03:51 AM Bug #6189: Boot up troubles with ramdisk and alias tables
-
ky41083 - wrote:
> NOYB NOYB... "But I don't know how to do create a commit for that from a Windows environment."... -
06:11 PM Bug #6209: nano + dashboard - lag issues in UI
- #6184 is basically "fix the mount issue", so it does cover everything here.
-
05:59 PM Bug #6209: nano + dashboard - lag issues in UI
- diag>nano> enable RW all the time. resolved the issue, apparently the first time it was tried, mount was locking the ...
-
- duplicate of #6184
-
- (3:18:35 PM) PiBa-NL: systemwidget seems to call conf_mount_rw() 12 times for a single page refresh..
(3:18:46 PM) P... -
- maybe if mount wasnt grinding away at 100% cpu for half an hour these wouldnt error either.
Crash report begi... -
- doing a ps auxwwf | grep mount take 6-12 seconds to return the following
[2.3-RELEASE][root@x]/root: ps auxwwf | g... -
- changed webui processes from 8 to 2, still having same problem with sys info widget active
-
- i attempted to remove all the widgets, and got some squirrely errors also. apparently that isnt possible?
-
- upgraded from 2.2.5 to 2.3, on a factory install the system slower than all getout, ui lag, network lag, appears that...
-
-
-
- duplicate of #6177
-
03:13 PM Bug #6208 (Duplicate): GUI becomes unavailable after ethernet loss-of-carrier
- If my WAN connection gets unplugged, or even if the DSL modem loses power or reboots, the pfSense GUI rapidly becomes...
-
03:19 PM
Feature #6199: NAT Disable does not match firewall disable method
- The NAT page(s) have more columns, hence slightly less room for icons. For that reason we don't display a second "dis...
-
09:14 AM Feature #6199: NAT Disable does not match firewall disable method
- On the NAT disable you use a checkbox on the left hand side
For firewall rules it looks like you have both the check... -
03:13 PM
Bug #6203 (Feedback): Error handling username with single quote in Captive Portal SQL Database
-
- And PR has already been merged while I was typing the redmine issue!
-
- PR https://github.com/pfsense/pfsense/pull/2887
-
- Forum: https://forum.pfsense.org/index.php?topic=110243.0
Single quotes in user names need to be escaped as 2 sing... -
03:11 PM Revision 628399a8: Make sure FreeBSD repo is disabled on a static file tracked by base package
-
-
- I pushed the last patch, commit:cb661db and commit:2bde5fb
-
- Better version of the patch after feedback from Renato
-
- Potential patch attached. Works for me here in a test setup, but needs some verification.
-
- I committed some styling changes to the Diagnostics > Edit File and Diagnostics > Command Prompt pages. Let me know i...
-
- Guessing issue is subject. Please report back what you find.
-
09:15 AM Bug #6205 (Resolved): VLAN tagging in Hyper-V guest not working?
- Hi,
after upgrading a virtualized (Hyper-V 2012R2) installation from 2.2.6 to 2.3, I am not able to access anythin... -
01:10 PM
Todo #6095 (Feedback): remove logo from wizard
- Applied in changeset commit:d1ee3405d2cfdfd3ee79743586655a8b999f770e.
-
- Thanks for the reminder Marco. The committed change should effect all wizards on the factory and community images.
-
- Seems sane. What about "debug lacp all" from the switch?
-
07:58 AM Bug #6200: LACP with em driver does not work with cisco active lacp setup
- Syslog attached.
-
- Yes, I am currently on 2.3. But this feature has never worked with any prior version I used, i.e. 2.x.x
-
- The original poster has started the forum thread https://forum.pfsense.org/index.php?topic=110326.msg0
The thread ... -
- Thanks Bill
-
10:09 AM pfSense Packages Bug #6098: Can't change/modify custom rules in Suricata pkg
- This bug was fixed in Suricata GUI package version 3.0_6 merged on April 18, 2016.
Bill - 12:08 PM Revision ab2f9684: Escape username before use in CP SQL
- A maybe "better" version to try.
(cherry picked from commit 0a02fc5eefb265e0684d4447bf0a7c2a9687a188) - 12:07 PM Revision 62487157: Merge branch 'patch-7' of https://github.com/phil-davis/pfsense
- * 'patch-7' of https://github.com/phil-davis/pfsense:
Escape username before use in CP SQL - 12:03 PM Revision a2c12f5d: Handle single quotes in user names for CP
- Forum: https://forum.pfsense.org/index.php?topic=110243.0
This is a trial - make sure it really works before committi... - 12:02 PM Revision 6104bd1c: Merge pull request #2886 from phil-davis/patch-6
-
12:00 PM Revision 0503e477: Fix trivial GUI typo.
- TRB should be TBR for "Token Bucket Regulator".
(cherry picked from commit e643627c833ce12fa00a682c66929aaad95760eb) - 12:00 PM Revision 513f20f9: Merge pull request #2885 from devnullity/patch-1
- 11:59 AM Revision 0f1332d6: Use English spelling for var name
- For future maintenance it might be easier if this var name is spelled with the usual English spelling.
(cherry picked... - 11:57 AM Revision bd186399: Merge pull request #2882 from phil-davis/patch-4
- 11:56 AM Revision 8d967cb2: Added back GET parameters support (as in pre-2.3)
- In version 2.3 the Traffic Graph page switched from GET to POST parameters to control the graph.
This patch restores ... - 11:56 AM Revision c673d0dd: Merge pull request #2880 from LucaTNT/patch-1
-
- (cherry picked from commit 14a7342391d8606f26168a7dddf2e0beb6a0c20a)
- 11:55 AM Revision 0a02fc5e: Escape username before use in CP SQL
- A maybe "better" version to try.
-
- Don't see the icon adding any value. Consumes space and clutters page. Make consistent with the firewall rules page.
... - 11:54 AM Revision c6494cfe: Merge pull request #2879 from NOYB/Firewall_NAT_-_Remove_Pencil_Icon_From_Aliases
-
- (cherry picked from commit b48f9816cd34bfee40825612a33f16215989a937)
- 11:52 AM Revision a9ba29a5: Merge pull request #2875 from NOYB/Interfaces_-_Punctuation
-
11:48 AM Feature #6207 (New): Please, add "THIS_IF broadcast" Macro for use in firewall rules
- Just a convinience alias, much like "LAN net", "LAN address", etc.
Primary usecase if for explicitly blocking targ... -
- ...
- 11:23 AM Revision 6fb36cdd: Handle single quotes in user names for CP
- Forum: https://forum.pfsense.org/index.php?topic=110243.0
This is a trial - make sure it really works before committing. -
- This bug is fixed in Snort GUI package version 3.2.9.1_11 that is currently awaiting review and merge of the pull req...
-
09:14 AM pfSense Packages Feature #6204 (Duplicate): Integrate ntopng with pfSense - assistance required by ntopng developer
- Hi
Apologies if this is doubling up (as I can see various threats on it on the pfSense forum), but Luca Deri who i... -
- TRB should be TBR for "Token Bucket Regulator".
- 02:58 AM Revision c049c15e: Use English spelling for var name
- For future maintenance it might be easier if this var name is spelled with the usual English spelling.
-
12:01 AM Bug #6201: Firewall log filter not filtering correctly
- Ah ok sorry for the confusion and thanks for the quick response
04/18/2016
-
- duplicate of #6132
-
11:34 PM Bug #6202 (Duplicate): OpenVPN bad state / pids do not allow clients to restart.
- I got into a state where the pfSense dashboard would tell me that it can't connect to my OpenVPN client instances ask...
-
- that's correct, it's a regex
-
- If you set a firewall filter to show only source ip 192.168.254.15, then any .15x source ip appears in the output, no...
-
- What version?
Add a tunable in System>Advanced, System Tunables, net.link.lagg.lacp.debug value 1. Post the syste... -
- LACP on the cisco switch does not get activated by LACP lagg on pfSense.
Using lagg with vlan on em nics. Hardware c... - 11:11 PM Revision 8b7ef76b: pfSenseHelpers white space formatting
- Just a bit of white space and formatting to standardize this code, and a couple of typos in comments.
(cherry picked ... - 11:10 PM Revision 2ca17c6c: Merge pull request #28881 from phil-davis/patch-4
- 11:07 PM Revision 8d13b675: Fixed #6175
- 11:05 PM Revision 726fdb61: pfSenseHelpers white space formatting
- Just a bit of white space and formatting to standardize this code, and a couple of typos in comments.
- 09:26 PM Revision 7eae8df9: chmod +x on rc.backup_aliastables.sh. Ticket #6189
- 09:26 PM Revision 93cbc65f: chmod +x on rc.backup_aliastables.sh. Ticket #6189
- 08:53 PM Revision 709309eb: Added back GET parameters support (as in pre-2.3)
- In version 2.3 the Traffic Graph page switched from GET to POST parameters to control the graph.
This patch restores ... - 08:39 PM Revision ca459215: Fixed GPS display sprintf => printf
- (cherry picked from commit ef268b48adfd07bb4771858990eb7ed79de90585)
- 08:39 PM Revision ef268b48: Fixed GPS display sprintf => printf
-
- NOYB NOYB... "But I don't know how to do create a commit for that from a Windows environment."
Use Cygwin CLI to c... -
- Not sure if it's possible to chmod +x on Windows. I just pushed the change to do that in both branches.
-
-
/etc/rc.backup_aliastables.sh needs rights set to 755. But I don't know how to do create a commit for that from a... -
10:43 AM
Bug #6189 (Feedback): Boot up troubles with ramdisk and alias tables
- PR https://github.com/pfsense/pfsense/pull/2878 merged.
Thank you. - 07:39 PM Revision 0cb39b48: Removing focus from the anchor gets rid of the annoying dotted box
- (cherry picked from commit 4c08c292408e3c5dea4c1832f1cc3ad07f6375bf)
- 07:38 PM Revision 4c08c292: Removing focus from the anchor gets rid of the annoying dotted box
- 07:15 PM Revision 4916343f: Update widget to POST link
-
07:04 PM Bug #4393: syslogd stops and fails to restart during boot in some cases
- Hi Chris Thank you for the reply when you say it clearly shows its starting again but why the syslogd: exiting on sig...
-
- Albert Yang wrote:
> Im not sure if it was fixed for 2.2.4? But seems to effect it also?
>
It does not, this ha... - 06:49 PM Revision 571e181c: COmment fix
- (cherry picked from commit 7f30df9a2d3ffca0ae32999b25aa2fe1b2265c6a)
- 06:49 PM Revision 7f30df9a: COmment fix
- 06:44 PM Revision 29fda3d3: Make services POST only by providing JS code in pfSenseHelpers.js
- 06:27 PM Revision dca4eadf: Convert status_services and widget to POST
-
06:20 PM
Bug #6175: firewall_rules_edit possible php warning - floating rules when input error
- Applied in changeset commit:8d13b6753c2b024002d3bbbd222cea33045c9741.
-
03:49 PM Bug #6175: firewall_rules_edit possible php warning - floating rules when input error
- seems fixed after gitsync. thanks all
-
10:35 AM
Bug #6175: firewall_rules_edit possible php warning - floating rules when input error
- Change suggested by Jorge M. Oliveira was found to be effective and has been merged.
Thanks Jeroen and Jorge.
... -
- Jorge M. Oliveira wrote:
> I wonder if this is as easy as
> [...]
>
> This will place the explode() call in a mo... -
- What do you mean by "two different visual techniques"?
-
- NAT disable and firewall disable use two different visual techniques. Would be nice if they matched.
-
- Ah there, thanks. I should have added a -i to my grep. Fixed that in all 3 branches. I didn't bump the version though...
-
- If ramdisk is enabled keep a copy of the alias tables to restore at boot time. Otherwise unpredictable behavior may ...
- 03:41 PM Revision bd81781e: Merge pull request #2878 from NOYB/Alias_Tables_RAM_Disk_Store
- 03:38 PM Revision 0e9cb2ab: Fix #6187 Handle Growl IP Address problems
- (cherry picked from commit 642c6023fea2957bb646b1290371ead508f5cc67)
- 03:37 PM Revision f14d5d5e: Merge pull request #2877 from phil-davis/dns_get_record
-
- Replace underscore with space in display text of certain fields to allow them to line wrap. ex: long alias names
(c... - 03:17 PM Revision c3ada3d5: Merge pull request #2866 from NOYB/Firewall_/_Rules_-_Underscore_Line_Wrap
-
-
-
- --show-tls is not the same thing as --show-ciphers. AES-GCM is not a supported cipher in currently-available OpenVPN ...
-
- Thanks
-
- William Bell wrote:
>
> Sounds to me as if you didn't even try to replicate this issue.
I closed this because D... -
- duplicate of #6161
-
01:18 AM Bug #6193 (Duplicate): Services/Captive Portal/PortalName/Allowed IP Addresses/Edit missing description entry
- Hi All,
On the previous version 2.2.x in "Services/Captive Portal/PortalName/Allowed IP Addresses/Edit" there was a ... -
- not sure this is a general issue, probably should post to the proxy board on the forum where more will see it to disc...
-
02:20 AM pfSense Packages Bug #6194 (Not a Bug): SSL inspection not working
- Hi
pfSense 2.3 Https SSL inspection does not work I'm putting together create a certificate to the computer, but ... -
- It works fine on stock FreeBSD 10.3.
-
- Applied in changeset commit:642c6023fea2957bb646b1290371ead508f5cc67.
-
10:39 AM
Bug #6187 (Feedback): Growl notifications emit PHP warnings if the specified name does not exist
- PR merged. Thanks Phil.
-
- Applied in changeset commit:c228156fc41eae97128dca078b518eb7b4e96b35.
-
- Putting a space at the start of the OpenVPN tunnel network on a Shared Key server causes the interface to be configur...
-
-
09:03 AM Feature #5813: Replacement of layer7 filter
- Any chance to see this Layer7 replacement in the roadmap?
-
- Fix pushed, new version will be up shortly.
-
- The Quagga_OSPF package can get stuck during sync if there is a problem with the Quagga configuration, leading to the...
-
- On 2.2.x the Quagga package is "Quagga OSPF" and on 2.3 it's "Quagga_OSPF". So the package still exists, but the spac...
-
08:05 AM pfSense Packages Feature #6196 (Closed): APU2 Thermal sensor
- Thermal sensor in new apu2 board.
This is the solution of OPNsense (Don't hate me for this! )
https://github.com/... -
08:03 AM Bug #6195 (Resolved): Cannot set Manual Outbound NAT when Language is pt_BR
When the language is set to pt_BR, outbound NAT cannot be set to Manual Outbound NAT. On save, it changes back to A...-
- Don't see the icon adding any value. Consumes space and clutters page. Make consistent with the firewall rules page.
04/17/2016
-
- Im not sure if it was fixed for 2.2.4? But seems to effect it also? Was trying to send syslogs to logstash seems to b...
-
10:49 PM Bug #4668: ID Column in Firewall Rules
- You may close this ticket. The ID column is no longer present in 2.3.
-
10:00 PM Todo #6095: remove logo from wizard
- Probably should remove logo from AWS VPC VPN Wizard (on factory image) as well.
-
09:02 PM Bug #6167: IPsec IPComp not working
- Test and config pushed here: https://github.com/gvnn3/netperf/tree/master/IPSEC/Tests/iperf-null-ipcomp-nopmc
What... -
- I'm testing stock FreeBSD 10.3 and will report back.
-
07:59 PM pfSense Packages Bug #3525: Dansguardian Writing Script Garbage (CsrfMagic.end)
- Kill Bill wrote:
> That page is a XML template and the textarea is base64-encoded. This bug doesn't make any sense a... -
03:48 PM Bug #6175: firewall_rules_edit possible php warning - floating rules when input error
- I wonder if this is as easy as...
-
12:52 PM Bug #6181: Updating url alias tables fails when remote server returns empty document.
- Just an FYI, this functionality (and more) already exists in the pfBlockerNG package.
-
10:46 AM Bug #6192 (Resolved): pfSense 2.3's status_graph.php no longer respects GET parameters
- Hi everyone,
on pfSense 2.2.x I had a bookmark saved that would take me to the status_graph.php page, already set to... -
08:47 AM Bug #6191: OpenVPN AES-GCM
- It is sometimes claimed that TLS-DHE-RSA-WITH-AES-256-GCM-SHA384 would only be available from OpenVPN 2.4 onwards. Th...
-
- When doing "openvpn --show-tls" in the shell of pfSense 2.3, it does post a long list including
TLS-DHE-RSA-WITH-A... -
08:20 AM Bug #6177: pkg update checking with no Internet access kills web GUI
- A quick suggestion for the routine which starts re-installing packages after the first reboot following the update:
... -
07:55 AM
Bug #6101: Alias/NTP/uPNP/other Edit add and then delete of new rows issue
- The fix will apply to all pages that use this construct, including UPnP.
-
07:47 AM Bug #6101: Alias/NTP/uPNP/other Edit add and then delete of new rows issue
- It may be worth noting that this affects other pages as well - I discovered it on the UPnP settings page.
I consider... - 07:23 AM Revision 642c6023: Fix #6187 Handle Growl IP Address problems
-
- If ramdisk is enabled keep a copy of the alias tables to restore at boot time. Otherwise unpredictable behavior may ...
- 07:07 AM Revision b3908dd7: Keep this on master for 2.4, keep for RELENG_2_3 only. Revert "Remove lua from nginx. Ticket #6185"
- This reverts commit bdd05750a76f44306333da87380b78fbd8d5bb16.
- 07:01 AM Revision 3b9caf69: Remove lua from nginx. Ticket #6185
- 07:00 AM Revision bdd05750: Remove lua from nginx. Ticket #6185
-
-
System has ramdisk enabled, so those logs are gone (rebooted).
re: the patch; Was afraid that might be the cas... -
- When you get into this scenario, the GUI will fail to start OpenVPN because it's already running, under a PID that do...
-
-
Out of the blue this just occurred again.
openvpn_server1.pid: 53960
openvpn_server2.pid: 57333
ps:
5072... -
03:19 AM pfSense Packages Todo #6190 (Resolved): Convert and add NUT package to pfsense 2.3
- Since 2.3 version of pfsense NUT is no longer exists in package list, but it should be added later.
I know that deve... -
03:15 AM Feature #6045: Updates that do not require a reboot should run reroot
- updates that do not require a reboot should probably call reroot ("reboot -r"), not completely thought through, but t...
-
-
I get that crash report too. About 1/3 of the time. No pppoe here. i386 full install. Ram disk enabled.
-
- the console menu's never had input validation there. Good to have though
-
-
PR submitted: https://github.com/pfsense/pfsense/pull/2878
-
-
Enabling ramdisk does not save/backup/restore the alias tables (/var/db/aliastables/).
Thus they have to be re-do... -
- Pull request https://github.com/pfsense/pfsense/pull/2877
-
- System->Advanced, Notifications
1) In the Growl section, "IP Address", put an invalid hostname (e.g. I put junk.inf.... -
- fixed
-
- reverted that change from master so it only applies to 2.3.x, so this is done.
-
- We removed LUA from nginx, because #6185.
Since 2.4 won't support i386, remember to re-enable it.
tools/conf/pf... -
- Removed lua from nginx, will be in next 2.3.1 snapshot run. Give it a shot and let us know, Kevin. I'm not going to g...
-
- Chris Buechler wrote:
> not supported hardware. The Soekris 5501 and newer have CMOV (I think even the 4801 does). T... -
-
- not supported hardware. The Soekris 5501 and newer have CMOV (I think even the 4801 does). Talking about ~20 year old...
-
01:21 AM Bug #6185 (Resolved): pfsense 2.3 w/luajit breaks on 586-class CPUs
- nginx is built with OPTIONS LUA, so the appliance wont start on 586-class CPUs starting with pfSense 2.3. These CPUs...
-
- works
-
- There have always been a variety of possibilities for race conditions in service startup because of the nature of how...
04/16/2016
-
- moved to 2.3.1, feel free to move this to 2.3.2
-
12:22 AM Bug #6179 (Resolved): Not obtaining update status on nanobsd when read-only mounted
- Good morning,
I update my alid2d13 from pfsense 2.2.6 to 2.3 two days ago. Before doing so, I uninstalled all packag... -
- may be dup
-
08:47 PM
Bug #6184: 2.3 NanoBSD issues with getting stuck read-only mounted
- Thanks, that seems to have solved it:...
-
- Try this: https://forum.pfsense.org/index.php?topic=109766.msg612108#msg612108
There is some issue here we haven't... -
08:28 PM
Bug #6184: 2.3 NanoBSD issues with getting stuck read-only mounted
- For what it's worth, I'm still in the second boot of the system (after the auto-reboot from the config.xml restore). ...
-
08:17 PM
Bug #6184 (Resolved): 2.3 NanoBSD issues with getting stuck read-only mounted
- Hi all,
I just did a new pfSense 2.3 NanoBSD install after getting a new CF card yesterday. I just skipped through... -
- Perhaps there could be a checkbox for URL table aliases that lets the user select what they want to do if the URL ret...
-
05:54 AM Bug #6181 (Resolved): Updating url alias tables fails when remote server returns empty document.
- Updated to 2.3 and it seems the url alias tables fails to update when one table contains no entry ("").
In my case I... -
10:19 PM Bug #6183: Assign Interfaces allows you to define multiples of the same VLAN
- Steve Beaver wrote:
> Just to be clear you are adding duplicate VLANs from option 2) (Assign Interfaces) of the TTY ... -
09:11 PM
Bug #6183 (Feedback): Assign Interfaces allows you to define multiples of the same VLAN
- Just to be clear you are adding duplicate VLANs from option 2) (Assign Interfaces) of the TTY console right, not the ...
-
- As a workaround in webConfigurator you can use the Diagnostics / Backup & Restore / Config History to remove the dupl...
-
- New install of 2.3 on RCC-VE 2440. While assigning interfaces at the console you are able to add the same VLAN (e.g. ...
- 08:47 PM Revision e6f2d95b: Remove redundant if check.
- 08:47 PM Revision 34515250: Remove redundant if check.
-
- Assigned to gnn, in case it's related to tryforward.
-
- I'm running the _10 package version now (and 2.3 RELEASE), and it's still saying "Deault is ON".
-
04:53 PM Bug #6164: IP aliases with CARP parent lose parent association post-2.3 upgrade
- This is also happening for GRE interfaces. Have to reselect the CARP address as source instead of "WAN"
-
- Also: workaround until ALPN is working again is going back to "npn HTTP/1.1,HTTP/1.0" instead of "alpn HTTP/1.1,HTTP/...
-
- ALPN is supposed to be superseding NPN, but for some reason ALPN is disabled in the libraries used by HAProxy on 2.3 ...
-
-
The system that was having the problem was fixed by restoring the openvpn section from vm dev machine that had the... -
- Jim Pingle wrote:
> That should probably append mode+vpnid (which I think is in $settings at that point) to the lock... -
- That should probably append mode+vpnid (which I think is in $settings at that point) to the lock name since two diffe...
-
- I think the issue is subject, similar to #6160 for strongswan. If you launch OpenVPN twice really close together you ...
-
-
- 06:37 AM Revision cc1bb85c: Merge pull request #2871 from NOYB/System_/_Advanced_-_Punctuation
- 06:36 AM Revision 971257cb: Force 4096 RSA keys
- Add option `-b 4096` to force the keys to 4096-bit.
This parameter is ignored for Ed25519 keys. - 06:36 AM Revision dca77360: Harden sshd_config
- The changes are better explained in the following article:
https://stribika.github.io/2015/01/04/secure-secure-shell... - 06:29 AM Revision 6bf5ed18: Fix sshd can't load key log spam
- Closes [6143](https://redmine.pfsense.org/issues/6143)
- 06:29 AM Revision 40d66b27: Merge pull request #2874 from jlduran/6143-fix-sshd-log-spam
- 06:23 AM Revision dce5a715: Unset dhcpdv6 for deleted interfaces on interfaces_assign.php. Ticket #6152
- 06:22 AM Revision ff3f0016: Unset dhcpdv6 for deleted interfaces on interfaces_assign.php. Ticket #6152
- 04:38 AM Revision 745eaa98: Allow 0 mask on Unbound ACLs. Ticket #6073
- 04:38 AM Revision e7fb2cfd: Allow 0 mask on Unbound ACLs. Ticket #6073
- 04:37 AM Revision e6344c75: Allow 0 mask on Unbound ACLs. Ticket #6073
- 04:19 AM Revision edf3031b: Avoid implode error if no interfaces are selected.
- 04:19 AM Revision 3b8085fc: Avoid implode error if no interfaces are selected.
- 04:18 AM Revision 130d4d4b: Avoid implode error if no interfaces are selected.
-
- that works, leaving to verify in snapshot
- 01:29 AM Revision fff3fe89: Fix sshd can't load key log spam
- Closes [6143](https://redmine.pfsense.org/issues/6143)
-
- pushed fix for same issue on interfaces_assign.php. That should cover it.
-
- If you have no Internet access on the reboot post-upgrade when the package reinstall runs, it ends up stuck in a neve...
-
-
- already fixed in 2.3, not fixing the PBI
-
- The system checks the ARP table to see what's live. Hosts with static ARP will always be "live" in that case. There i...
-
- works
-
- no apparent issues here.
-
-
- PBI crud that won't be an issue if Asterisk package comes back to 2.3
-
- there can be a variety of things you don't want to clone depending on specifics of your setup. If you're going to clo...
-
- fixed in monitoring graphs in 2.3
-
- will be resolved when ntopng comes back to 2.3, doesn't currently exist.
-
- 0.86 is in 2.3
-
- this still happen with 2.3? Haven't seen it on any of mine, but they're all 64 bit.
-
- PBI problem that no longer exists in 2.3+.
-
- dead package
-
-
-
-
04/15/2016
-
- works
-
10:21 AM Bug #6162: Bogon Networks -> Update Frequency setting not saved
- Working correctly now.
Thanks for the fast response. -
- Applied in changeset commit:d1acd5bb5723e66bc5871bdf4335208253f5a4bd.
-
07:06 AM
Bug #6162 (Feedback): Bogon Networks -> Update Frequency setting not saved
- PR merged. Thanks.
-
- Pull request https://github.com/pfsense/pfsense/pull/2870
-
-
- If you go to _SystemAdvancedFirewall & NAT -> Bogon Networks_ and change the _Update Frequency_ field to anything oth...
-
- works
-
- works
-
- works
-
- works
-
07:50 AM
Bug #6170: load_balancer_virtual_server.php: Unable to set "None" as fall-back pool
- Applied in changeset commit:a2050d386f99bf027b70de5aa4b4aa713a49e5b9.
-
07:45 AM
Bug #6170 (Feedback): load_balancer_virtual_server.php: Unable to set "None" as fall-back pool
- "None" option added to fall-back pool selector
Thanks! -
06:27 AM Bug #6170 (Resolved): load_balancer_virtual_server.php: Unable to set "None" as fall-back pool
- Can't set none as fall-back pool in virtual server. It does not exists in drop-down menu
-
- works
-
- Fixed.
Thanks Phil. -
- Thanks Phil, merged.
-
- fix pushed
-
- fixed
-
08:30 AM
Bug #6168: load_balancer_pool.php and load_balancer_virtual_server.php: Can't copy Load Balancer pool or virtual server
- Applied in changeset commit:91cd1923b133c57eaa9897ce4574ce19b7122dc4.
-
08:26 AM
Bug #6168 (Feedback): load_balancer_pool.php and load_balancer_virtual_server.php: Can't copy Load Balancer pool or virtual server
- If the form action is not explicitly specified, it uses the current GET arguments which broke the "dup" functionality...
-
- also true of virtual server.
-
- When I want to copy a pool in LB tab it's editing object that was taken as a source of copy and not create new one.
-
- fixed
-
10:10 AM
Bug #6169: load_balancer_virtual_server.php: Can't set alias as IP address
- Applied in changeset commit:0200db178ef225f796aea837e33ae438f5899ae3.
-
10:04 AM
Bug #6169 (Feedback): load_balancer_virtual_server.php: Can't set alias as IP address
- Changed element type to allow aliases
In testing I noticed that load_balancer_virtual_server.php did not display a... -
- When I want to sent alias as IP of Virtual server I receive "You must use this format:"
-
- works
-
02:10 PM
Bug #6171: load_balancer_monitor_edit.php - can't update monitor
- Applied in changeset commit:ed49fe7ae13c01ee083c3f205b86c6713e0d90a3.
-
02:03 PM
Bug #6171 (Feedback): load_balancer_monitor_edit.php - can't update monitor
- Fixed missing "=".
Thanks for the report. -
-
08:32 AM Bug #6171 (Resolved): load_balancer_monitor_edit.php - can't update monitor
- I can't modify a monitor, when I save, I have this message :...
-
- fixed
-
- Description is showing and saving the information correctly now.
Thank you. -
07:10 AM
Bug #6163: interfaces_lagg_edit.php: "Description" field not shown
- Applied in changeset commit:bcb3c9283e45eb4e741cbfa5d79e56d5f5bf678a.
-
07:03 AM
Bug #6163 (Feedback): interfaces_lagg_edit.php: "Description" field not shown
- Thanks for the report. Missing description field has been restored to its rightful place on the page.
-
-
- Interfaces / LAGGs shows the _Description_ field, as you can see in first screenshot, but if you go to edit the LAGG,...
-
- Aaron McDiarmid wrote:
> How come this problem keeps getting pushed back to later versions? Is there an underlying i... -
11:06 PM Bug #4326: Limiters on firewall rules where NAT applies drop all traffic
- How come this problem keeps getting pushed back to later versions? Is there an underlying issue that prevents it from...
-
- works
-
07:20 AM
Bug #6161: services_captiveportal_ip_edit.php: Description field dropped
- Applied in changeset commit:24828c63965b9be493db486fa5a46ab64c8091db.
-
07:13 AM
Bug #6161 (Feedback): services_captiveportal_ip_edit.php: Description field dropped
- Description field restored
-
07:08 AM
Bug #6161 (Assigned): services_captiveportal_ip_edit.php: Description field dropped
-
- multiple people seeing this issue confirmed fixed
-
- fixed
-
-
- It needs to completely ignore warnings in release versions (#6178) as it's a massive amount of useless noise.
For... -
- We need to change the crash reporter to not generate crash reports for PHP warning messages in stable releases. We're...
-
- When a system can't reach the Internet and is checking for updates, pkg processes start piling up, eventually killing...
-
- Yup. Looks like that fixes it.
Apply the code and no more error in the log.
Remove the code and error returns to th... -
- I've opened https://github.com/pfsense/pfsense/pull/2874.
I have not been able to replicate this, from the comment... - 07:41 PM Revision 5887788f: Fixed #6174
- (cherry picked from commit d1db3f366180e8df8042dbeb92fa12e5a661d23c)
- 07:40 PM Revision d1db3f36: Fixed #6174
- 07:03 PM Revision 3c74b48e: Fixed #6171
- (cherry picked from commit ed49fe7ae13c01ee083c3f205b86c6713e0d90a3)
- 07:02 PM Revision ed49fe7a: Fixed #6171
-
- I can't replicate it either.
Can you show a screen shot of the whole rule?
Maybe there is some unusual setting in s... -
- I tried on 2 OS : LinuxMint and Ubuntu Mate, with 2 browers : Chrome and Firefox. I have same issue.
I joined 2 pi... -
- don't think I'm seeing what you're referencing there. What OS and browser? Cleared your browser cache?
-
- When I edit a NAT rule, existing value for destination mask (alias IP for me) disappear and type is "any" even before...
-
06:06 PM pfSense Packages Feature #6176 (New): Privilege for OpenVPN Client Export
- Hello pfsense dev,
When creating a custom group with only "WebCfg - OpenVPN: Client Export Utility" , there is n... -
- i've just updated the thread after creating this ticket.
-
- See the thread. I can't reproduce it as-is. Needs more info before a ticket can be opened or a fix pursued, we have t...
-
- https://github.com/pfsense/pfsense/pull/2873
-
- https://forum.pfsense.org/index.php?topic=110081.0
-
- B. Derman wrote:
> But this wasn't about the issues with creating an alias table (which is why it's a separate repor... -
03:48 PM Feature #6130: Alias-table failures can easily lead to serious security degradation should be caught
- But this wasn't about the issues with creating an alias table (which is why it's a separate report). This is about h...
- 03:01 PM Revision e8dcc1dd: Fixed #6169
- and added alias pop-ups to load_balancer_virtual_server.php
(cherry picked from commit 0200db178ef225f796aea837e33ae... - 03:00 PM Revision 0200db17: Fixed #6169
- and added alias pop-ups to load_balancer_virtual_server.php
-
02:50 PM
Bug #6174: Firewall rules separator character support
- Applied in changeset commit:d1db3f366180e8df8042dbeb92fa12e5a661d23c.
-
02:42 PM
Bug #6174 (Feedback): Firewall rules separator character support
- Separator text now wrapped in CDATA block.
Thanks for the report. -
- Taken from: https://forum.pfsense.org/index.php?topic=110054.0
> I was playing around with the really neat firewal... -
02:47 PM Bug #6126: NAT issue unsure if inbound, outbound or both
- All confirmed working still, after approx 12 hours. Was obviously the IP Aliases being disassociated with the CARP V...
-
- worked with Andrew on this, the root cause is #6164
-
02:46 PM
Bug #6154: Notices are displaying raw html (interpreted by the browser), potential XSS vector
- Lowered priority since JimP has taken care of the immediate problem.
-
07:33 AM
Bug #6154: Notices are displaying raw html (interpreted by the browser), potential XSS vector
- It seems like in addition to fixing ACB, it would be good to sanitize notices as you suggest. A sanitiize_text() func...
- 01:24 PM Revision 994895f3: Fixed #6168
- Needed to override form action since it was inheriting the current GET arguments
(cherry picked from commit 91cd1923... - 01:23 PM Revision 91cd1923: Fixed #6168
- Needed to override form action since it was inheriting the current GET arguments
-
- David: your issue isn't related to this in that case. could you send me a copy of your config backup? cmb at pfsense ...
- 12:44 PM Revision c6195e36: Fixed #6170
- (cherry picked from commit a2050d386f99bf027b70de5aa4b4aa713a49e5b9)
- 12:44 PM Revision a2050d38: Fixed #6170
-
12:26 PM Feature #855: Ability to selectively kill states on gateway recovery
- Chris Buechler wrote:
> The current practice of killing all states when a connection goes down on that downed connec... - 12:23 PM Revision cc3b1cb5: Fixed #6158
- Really a temporary work-around. This issue requires a better solution in which the data is normalized and added to th...
- 12:22 PM Revision 106eb8d3: Fixed #6158
- Really a temporary work-around. This issue requires a better solution in which the data is normalized and added to th...
- 12:12 PM Revision f38c80b9: Fixed #6161
- (cherry picked from commit 24828c63965b9be493db486fa5a46ab64c8091db)
- 12:11 PM Revision 24828c63: Fixed #6161
- 12:05 PM Revision 0427acce: Fix #6162 saving of bogons update frequency
- Another easy fix of a "dumb bug".
(cherry picked from commit d1acd5bb5723e66bc5871bdf4335208253f5a4bd) - 12:05 PM Revision a7b131f1: Merge pull request #2870 from phil-davis/patch-4
- 12:01 PM Revision 31b14a70: Fixed #6163
- (cherry picked from commit bcb3c9283e45eb4e741cbfa5d79e56d5f5bf678a)
- 12:01 PM Revision bcb3c928: Fixed #6163
- 11:55 AM Revision f8f2eae4: Add checks in case there are dpinger param problems
- in 2.3 installations that were upgraded from 2.2.* when the apinger to
dpinger params conversion code in upgrade_130_... - 11:43 AM Revision 79e348e4: Fixed #6166
- (cherry picked from commit ebaf36ebe5b6f409887d2352db44aba45bf7e086)
- 11:41 AM Revision ebaf36eb: Fixed #6166
-
10:07 AM Bug #6159: Package Manager not up-to-date
- I decided to try again today, and it worked.
!http://i.imgur.com/umY1rk2.png!
So it finally updated the databas... -
-
08:50 AM Feature #6172 (Resolved): Restore the traffic totals previously displayed in RRD graphs data summary.
- The new graphing in 2.3, monitoring, no longer displays data totals for traffic per interface.
Restore this function... - 08:09 AM Revision 5e367fdd: Fix #6142 validate and adjust dpinger params on upgrade
- 1) The previous "down" value was being converted to msec and put into
"loss_interval". It should go into "time_period... - 08:09 AM Revision e2ddef9e: Fix #6142 validate and adjust dpinger params on upgrade
- 1) The previous "down" value was being converted to msec and put into
"loss_interval". It should go into "time_period... - 08:09 AM Revision 69ac0a88: Merge pull request #2869 from phil-davis/dpinger-upgrade
- 08:00 AM Revision d1acd5bb: Fix #6162 saving of bogons update frequency
- Another easy fix of a "dumb bug".
-
07:30 AM
Bug #6158 (Feedback): diag_dump_states.php & others: Prefixes not taken in to consideration while sorting
- Applied in changeset commit:106eb8d38db478616499f0c5ee220596dca9f57a.
-
07:29 AM
Bug #6158 (Assigned): diag_dump_states.php & others: Prefixes not taken in to consideration while sorting
- A temporary work-around has been provided. The packets, bytes and actions column have been set to be NOT sortable.
... - 07:20 AM Revision 177410c0: Use RFC-defined capitalization IPsec.
- 07:20 AM Revision d6bae4a3: Use RFC-defined capitalization IPsec.
- 07:20 AM Revision 5f5e97ee: Use RFC-defined capitalization IPsec.
- 07:12 AM Revision bb213758: Unset dhcpdv6 on LAN here as well. Ticket #6152
- 07:12 AM Revision 721dfedb: Unset dhcpdv6 on LAN here as well. Ticket #6152
- 07:11 AM Revision e0d4d773: Unset dhcpdv6 on LAN here as well. Ticket #6152
-
- Pull request https://github.com/pfsense/pfsense/pull/2872
Adds checks upgrade_150_to_151() that will double-check dp... -
- Applied in changeset commit:21300959d92cd0a2cbd8a756ee5ecf25f6193e09.
-
06:50 AM
Bug #6166: requests to diag_system_activity.php can pile up on slow systems
- Applied in changeset commit:ebaf36ebe5b6f409887d2352db44aba45bf7e086.
-
06:46 AM
Bug #6166 (Feedback): requests to diag_system_activity.php can pile up on slow systems
- AJAX function re-formatted to pfSense style
Added mutex to ensure only one AJAX call is made at a time -
06:01 AM
Bug #6166: requests to diag_system_activity.php can pile up on slow systems
- There are a number of problems here. setTimeout is the appropriate function but the call is not quite formatted corre...
-
- from mailing list:
https://lists.pfsense.org/pipermail/list/2016-April/009646.html... -
06:38 AM pfSense Packages Bug #6157: Freeradius OTP verify is missing the shebang
- We tried with pfSense 2.3 today and we couldn't even find the otpverify script but everything worked most of the time...
- 06:07 AM Revision 71d994e4: Allow to restore any ares of config
- If the existing config does not have a particular area in it, then the user should still be able to restore it from a...
- 06:06 AM Revision de407762: Allow to restore any ares of config
- If the existing config does not have a particular area in it, then the user should still be able to restore it from a...
- 06:06 AM Revision 56f8de9b: Merge pull request #2867 from phil-davis/patch-4
-
- those are all to be expected. Config issue
-
- Assigned to cmb for resolution
-
05:21 AM Bug #6165: Captive portal - SSL Extended Validation Certificates
- I have resolve this issue alone.
In Chrome help clear all browsing data and grean bar now appear.
In Firefox is... -
- I have now 2.3 version with nginx.
Nginx require only 2 files certificate and key file, but certificate file must ... -
- this is probably not something we can do anything with unless you can do some more leg work. Might be an issue with h...
-
- Captive portal with normal SSL certificate has green icon in Chrome, Firefox, IE and Edge.
With SSL EV certificate... -
- L
-
- IPsec connections that enable IPComp end up unable to pass traffic. Egress traffic goes out, ingress comes in, byte c...
-
- Netmap is used for the 3.0 IPS mode.
-
- FreeBSD port might need upgrading.
Not updating 2.2.6 pbi though -
- For the test scenario above, your change fixes the problem. I've tested in on a real box with 2.3-Release.
Thanks! -
- I pushed a change to unset dhcpdv6 on LAN when LAN's removed as I knew where that was offhand. I'm not sure if that's...
- 02:32 AM Revision 0201d917: Add lock in vpn_ipsec_configure. Ticket #6160
- 02:31 AM Revision 82ea06cb: Add lock in vpn_ipsec_configure. Ticket #6160
- 02:30 AM Revision c520e3e3: Add lock in vpn_ipsec_configure. Ticket #6160
-
- The config upgrade code for IP aliases on CARP IPs changing to the uniqid VIP isn't working. It's left with the old ID.
-
- The problem this causes is one of the old haproxy*.inc files make filter_configure_sync hang forever. So it kills the...
-
- Jim,
no there is no time zone change inbetween. In fact, if you notice, those 4 entries show exact minute and second...
04/14/2016
-
- The description field was inadvertently dropped on services_captiveportal_ip_edit.php in the Bootstrap conversion
-
- that change confirmed to work on a customer system hitting the problem.
-
- If vpn_ipsec_configure is called twice at almost exactly the same time, 'ipsec start' will run twice and it will star...
-
-
-
- When I run the force update it shows this..
http://i.imgur.com/ddXSlL6.png -
- I ran 'pkg update -f' and it downloaded stuff. But didn't fix it..
Still same errors
!http://i.imgur.com/DMI4Vii... -
- your metadata appears to be out of date. If you run 'pkg update -f' does it work?
-
- Packages listed in the UI still show the old version and fails to download.
Package List: http://i.imgur.com/bl9sY... -
- Let's look at bringing in the PR, as well.
-
-
- duplicate of several alias-related validation issues fixed in 2.3
-
- please re-test on 2.3, a lot of validation improvements there into aliases and some relevant filterdns changes.
-
03:03 PM Bug #6158 (Resolved): diag_dump_states.php & others: Prefixes not taken in to consideration while sorting
- Sorting states on packets or Bytes does not the prefixes in consideration.
Example: Sorting states on Bytes in des... -
- I was playing around with pfSense 2.2.6 and FreeRadius OTP authentication. What I found is, that the /usr/pbi/freerad...
-
- Your system clock must have changed time zones between times they were started. If you reboot, or restart them all ma...
-
- All @ pfsense: thanks for this new version. Works like a charm on my alix2d13. Just noticed a minor bug in the openvp...
-
- An empty tag with open and close is the same as a single tag that closes itself. I've tried adding OpenVPN servers an...
- 01:56 PM Revision 21300959: Fix #6142 validate and adjust dpinger params on upgrade
- 1) The previous "down" value was being converted to msec and put into
"loss_interval". It should go into "time_period... -
- xavier: that's how it's supposed to work at this point. Sounds like you want state killing on failback, which doesn't...
-
- Chris Buechler wrote:
> the issues here are attributable to issues in apinger, which has been replaced in 2.3 with d... - 12:17 PM Revision 6c23d363: Nuke srctrack default = 1400 per JimP
- (cherry picked from commit 509c089479525d69b714fef3f9d7770610719408)
- 12:16 PM Revision 509c0894: Nuke srctrack default = 1400 per JimP
-
- I've already marked it as Resolved, it's all set now. Thanks!
-
11:54 AM Bug #6148: Autoconfigbackup does not seem to function on 2.3-RELEASE and causes some aspects of GUI to become non functional
- I guess this can be closed or marked as not an issue then? I have no idea how to do that.
-
- I already opened a ticket for the display issue privately/internally. We'll get a fix in for that before long.
-
- OK, account subscription issue caused the initial failure, but the ACB module still seems to mess up the GUI if there...
-
- That's good enough info. I have a similar setup (except an 8860) and it's working fine here.
Can you drop us a not... -
- Jim Pingle wrote:
> ACB is working here on several test systems, can you provide some more information about your ha... -
- ACB is working here on several test systems, can you provide some more information about your hardware and pfSense co...
-
- AutoConfigBackup does not seem to work correctly on v2.3-RELEASE causing errors:
Apr 14 14:07:28 ishtar check_relo... - 12:01 PM Revision 273d15e1: Fixed #6146
- (cherry picked from commit b3fc5089d679d7d43fc1e00400af8038b65c8998)
-
12:00 PM Bug #6099: igmpproxy does not recognize upstream interface
- If mcproxy is not an alternative, here is the new home of igmpproxy:
https://github.com/pali/igmpproxy
There is a... -
- For me it's not important if the multicast part is done by igmpproxy or something else.
Actually thinking about an a... -
05:20 AM Bug #6099: igmpproxy does not recognize upstream interface
- Hi, yes indeed. This tool is needed by many IPTV users. So please fix it with a higer priority.
- 12:00 PM Revision b3fc5089: Fixed #6146
-
11:36 AM Feature #6155 (Closed): shipment of logs using e.g. filebeat
- Hi, first ever bug report, bare with me.
Running filebeat on a pfsense to ship logs to a elk stack over tls is giv... -
- The text of a notice is displayed as passed, presumably to allow for links in the notice text. At least one place tha...
-
10:12 AM Bug #6153 (Resolved): RFC 2136 Client fails to update more than 1 record
- I added a single RFC 2186 Client (name1.mydomain.com) and verified it worked. DNS was updated and 'cached IP' was gre...
- 10:08 AM Revision ce3eca6e: Allow to restore any ares of config
- If the existing config does not have a particular area in it, then the user should still be able to restore it from a...
-
09:46 AM Feature #5985: ntp pool command
- Jim Pingle wrote:
> I've tried this manually and couldn't get any working result from it. Does anyone happen to have... -
- I've tried this manually and couldn't get any working result from it. Does anyone happen to have a working example of...
-
- +1 for this
-
- Prerequisite: a system with a single NIC, freshly installed with pfSense 2.3-Release.
Boot pfSense normally, assign ... -
- +1 for this !!!!
-
- Part 1 of the fix: https://github.com/pfsense/pfsense/pull/2869
That will fix the upgrade_130_to_131() step, but wil... -
- Oh! Lost again.
Just watch me next time! ;-) -
- A little slow there, I just beat you to this one: #6149 :-)
-
- Critical for offline installs/upgrades, which can't access internet directly, or at the moment of the upgrade.
Versi... -
- Some more detail on #6151 and https://forum.pfsense.org/index.php?topic=109943
-
- The proxy settings entered on system_advanced_misc.php are not respected by pkg, at least when using pkg from the GUI...
-
- The StrongSWAN package that the pfSense IPSec implementation is based on supports naming of IPSec Phase 1 connection ...
-
- Replace underscore with space in display text of certain fields to allow them to line wrap. ex: long alias names
-
- When attempting to use S.M.A.R.T. on HyperV, either from the widget or Diag > S.M.A.R.T. Status, the VM will crash. I...
-
07:10 AM
Bug #6146: System / Advanced / Miscellaneous not save data
- Applied in changeset commit:b3fc5089d679d7d43fc1e00400af8038b65c8998.
-
- PR https://github.com/pfsense/pfsense/pull/2868
Oh - I see you did it already with more fancy stuff to disable the... -
06:59 AM
Bug #6146 (Feedback): System / Advanced / Miscellaneous not save data
- Thanks. There were a couple of issues with the source track timeout on that page. Now fixed.
-
06:07 AM Bug #6146 (Resolved): System / Advanced / Miscellaneous not save data
- In System / Advanced / Miscellaneous / Load Balancing, I I filled out the field 'Sticky connections timeout' with 60....
-
- That's a known problem with vmware/esx. When adding more than four interfaces, the hypervisor mixes up the order. You...
-
05:08 AM Bug #6145 (Not a Bug): unreachable when adding vNIC
- When i add an NIC to pfSense and reboot it so it will appear within pfSense the web-GUI becomes unreachable (after th...
-
05:50 AM
Todo #6123 (Resolved): Use consistent up and down arrow formats in dashboard widgets
- PR merged. Thanks.
-
- ... I was looking at the shellcmd package to see if I could add a start up command to force an update once the system...
-
- Looks easy to fix.
Pull request https://github.com/pfsense/pfsense/pull/2867
04/13/2016
-
- sshd tries to load those files even if they're not there unless HostKey is configured in sshd_config. It's just log s...
-
- You probably had connected previously to 192.168.2.21 as root and have a DSA public key in your @~/.ssh/known_hosts@ ...
-
-
https://forum.pfsense.org/index.php?topic=109815.0
@Apr 13 10:59:46 sshd 76036 error: Could not load host k... -
- Has suddenly stopped working again. Seemed to have been find for around 6 hours. Very interesting?
i should also... -
- A bit more of an update.
I have upgraded both nodes again directly from 2.2.6 to 2.3. Everything (as it has done ... -
- Sounds like an issue of some sort with the virtual IP. But IP aliases on CARP IPs works fine. It requires a config up...
-
- ok Glad that we found the issue :) I can't close the ticket, thats up to the Devs to decide :)
Even if I try to m... -
- Yes, sorry, I see what you mean. I'm indeed using RAM disks for /tmp and /var. While it's a full install, it's runn...
-
- When you see this message "New DNSBL Cert Created", something is deleting the DNSBL cert in the /var/unbound folder (...
-
- There's not a great deal to see.
The upgrade to 2.3 release was done around 20:30 yesterday.
You can see the un... -
-
If a section/area does not exist in the config then it is not available in the restore backup area pull down selec... -
-
Haven't checked with ps to see if it is actually running. I took the WebGUI's word for it because I didn't know t... -
09:27 AM Bug #6132: race condition in OpenVPN startup
- NOYB NOYB wrote:
> On a fresh install the first OpenVPN server instance won't start. Create a 2nd instance an it ru... -
- I can't replicate this as stated. Is there a forum thread with more info? Or do you have some more detail about the c...
-
-
On a fresh install the first OpenVPN server instance won't start. Create a 2nd instance an it runs fine. Or impo... -
-
-
- There are some problems reported with old apinger parameters not converting to dpinger parameters on upgrade from 2.2...
-
-
-
04:05 PM Bug #6099: igmpproxy does not recognize upstream interface
- Yea, very annoying bug.
-
02:12 PM Bug #6099: igmpproxy does not recognize upstream interface
- I hope this is resolved quickly, it affects all "Deutsche Telekom Entertain" users they use pfsense.
-
-
-
-
-
- Exactly.
I was using chrome on ubuntu. -
08:41 AM
Bug #6121: enabling "Use memory file system for /tmp and /var" and then save force a reboot right away
- So as soon as you click the "Save" button, the reboot starts without giving you a chance to choose "OK" or "Cancel" ?...
-
02:21 PM pfSense Packages Feature #6141 (Resolved): Convert apcupsd package to 2.3
- It would be nice to convert "apcupsd" package to bootstrap so it can be used in version 2.3.x Its a really useful pac...
- 01:44 PM Revision a21fa964: Put gateway name and group around the correct way
- Redmine #6134
Forum: https://forum.pfsense.org/index.php?topic=109781.0
Originally broken by commit: https://github.c... - 01:44 PM Revision 30014326: Merge pull request #2865 from phil-davis/patch-4
- 01:35 PM Revision ebcd8a30: Put gateway name and group around the correct way
- Redmine #6134
Forum: https://forum.pfsense.org/index.php?topic=109781.0
Originally broken by commit: https://github.c... -
- Correct units in conversion comments.
(cherry picked from commit 515887c3779519c37465aef55b22c8bd906d6f05) - 01:14 PM Revision 3510c788: Merge pull request #2864 from NOYB/Update_RRD_Script_-_Comments
- 01:13 PM Revision a0d8a2f4: Use consistent arrow colors on dashboard
- Interfaces widget and IPsec widget use text-success and text-danger to
make the up and down arrows be green and red.
... - 01:13 PM Revision f1a6c917: Merge pull request #2863 from phil-davis/widget-arrows
-
- Just pushed a fix. commit:eb2202c and commit:ccefcb0
-
- If the user set topology subnet on 2.2.x the value of the "topology_subnet" config option would be set to "yes". The ...
-
- When saving an OpenVPN server, the CSC files should be resynced in full to make sure they reflect the current server ...
- 12:34 PM Revision fee16977: Fixed #6128
- (cherry picked from commit e8d6c134fe44f0ad1756caa246a7c6efbbd27bbc)
- 12:33 PM Revision e8d6c134: Fixed #6128
-
- example: http://imgur.com/KHmNCeY
-
- Ok. You'll notice that the title of the actual page actually says "iOS IPsec Profile". Whatever is settled on, shou...
-
- it's not strictly iOS, also works for OS X. That does suggest it's more generic than it is though. Needs consideration
-
- This is apparently a fairly common problem, and I'm not sure how to address it. I didn't see anything in here or in ...
-
- Applied in changeset commit:7cb8fabc6ed56e4d182c662350d9e2f65a492d2d.
-
- Thanks for the confirmation, I just pushed the fix
-
11:04 AM Bug #6122: Hostname Field for NameCheap Dynamic DNS Rejects "@"
- With that patch applied, it accepted the "@" symbol for the hostname.
Additionally, I confirmed that it correctly ... -
- Attached patch should fix it, waiting on confirmation since none of my domains on Namecheap are setup in such a way t...
-
- Correct units in conversion comments.
-
09:51 AM Bug #6136 (Resolved): System Update settings page branch selection text is bogus on systems upgraded 2.3-RC to 2.3-RELEASE
- I upgraded from 2.3-RC to 2.3-RELEASE.
System Version
@
Current Base System 2.3
Latest Base System 2.3
@
If... -
- I took at look at DHCP leases, and everything that's a static lease (ARP entry enabled) is listed as online.
This in... -
09:35 AM Bug #6109: filterlog crash
- No need for a binary with symbols now. Got a nice core dump with my debug build....
-
09:10 AM
Bug #6134 (Resolved): Gateway down message has gateway name and group name switched
- PR merged. Thanks
-
- Pull request https://github.com/pfsense/pfsense/pull/2865
-
- Forum: https://forum.pfsense.org/index.php?topic=109781.0
Unfortunately I (Phil) messed this one when doing gettex... -
08:10 AM
pfSense Packages
Bug #6127 (Needs Patch): RRD Summary port: Status page shows OPT1, OPT2, etc ... instead of the interface name
- The RRD Summary package uses the raw RRD file names in the display. Converting a file name to a friendly interface na...
-
- RRD Summary shoes OPT1, OPT2, etc in the dropdown menu instead of the interface name.
under https://192.168.5.1/... -
07:41 AM
Bug #6128: firewall_rules.php: Moving a rule separator before naming/saving breaks it
- This is why developers shouldn't do QA. I would never have thought of trying that :)
Preventing the separator from... -
07:40 AM
Bug #6128 (Feedback): firewall_rules.php: Moving a rule separator before naming/saving breaks it
- Applied in changeset commit:e8d6c134fe44f0ad1756caa246a7c6efbbd27bbc.
-
01:20 AM Bug #6128 (Resolved): firewall_rules.php: Moving a rule separator before naming/saving breaks it
- Steps to reproduce:
1. Create a new separator
2. Drag separator from bottom of the page
3. Name and Save separat... -
-
Firewall rule using !LAN address in destination results in the following error.
@Notices
Filter Reload
•... -
06:11 AM Bug #6131 (Resolved): failed chown on startup in /etc/inc/rrd.inc
- Since updating to 2.3 I've got a strange problem after booting my pfSense.
This doesn't happen when the pppoe-interf... -
- Failures that result in empty alias-tables being created (e.g., https://redmine.pfsense.org/issues/6119) or tables fa...
-
- I'm not sure why we don't still have both of them. The GUI is identical with LTS which is already converted, and brin...
-
01:45 AM pfSense Packages Bug #6129 (Resolved): zabbix agent/proxy 2.4 not ported to pfSense 2.3
- Hey there,
I saw on https://doc.pfsense.org/index.php/2.3_Removed_Packages that zabbix-agent-2 and zabbix-proxy-2 ... - 12:09 AM Revision fa5f5136: Use consistent arrow colors on dashboard
- Interfaces widget and IPsec widget use text-success and text-danger to
make the up and down arrows be green and red.
...
04/12/2016
-
- thanks
-
- You are correct - my bad. Cleared cache and logo is now correct. Can be closed.
-
- guessing you haven't cleared your cache and had a system that was CE on that IP previously, that the case?
-
- Factory image is showing "Community Edition" underneath pfSense logo. I have confirmed that is factory image (pfSens...
- 11:07 PM Revision 4c84c124: Cosmetics
-
- On reflection I consider it a simple config, but in actual fact it perhaps isn't :)
I am running two node CARP wit... -
- going to have to give us something more than that. Inbound and outbound NAT in general all works fine. What specifica...
-
- I have a simple config whereby inbound NAT redirects tcp/443 traffic to a web server. Additionally I have an outboun...
- 11:06 PM Revision adaa4d03: Cosmetics
- 10:23 PM Revision ae74c26d: Fixed #6117
- 10:22 PM Revision 0cdf72ef: Fixed #6117
-
- Should probably say iOS IPsec Profile instead of IPsec profile under VPN menu.
See screenshot. -
-
It currently follows the forward/reverse setting of the firewall log.
It can be set by going to Status / Syste... -
- Pull request https://github.com/pfsense/pfsense/pull/2863
-
- In 2.3-RELEASE the Interfaces widget and IPsec widget show the up and down arrows in green and red.
OpenVPN and WoL ... -
- Steve Beaver wrote:
> The intended behavior is that if the "Use RAM Disks" setting is changed (with respect to the c... -
06:52 PM
Bug #6121 (Feedback): enabling "Use memory file system for /tmp and /var" and then save force a reboot right away
- The intended behavior is that if the "Use RAM Disks" setting is changed (with respect to the current configuration), ...
-
- When enabling this feature, and then save the config, instead of letting me press the reload button, it just rebooted...
-
- I installed System Patches OK on a full install test system in a VM.
Then I tried to install it on a real Alix 32-bi... -
- same system also had same issue for system-patches. Can't change title.
perhaps this is a general issue for more pac... -
- snippet of system log:...
-
- Can you check your pfblockerng.log? and send me those particular lines about Unbound at the time of your last update?
-
- It's a full CD/ISO install.
Yes, it did it on earlier snapshots but I wasn't sure whether it was because of upgrad... -
- Is this on a ramdisk or nano? I haven't heard any other issues so far? Have you seen this on any other 2.3 Snapshot?
-
- Thanks. Just to clarify, this happens when pfBlockerNG is installed. So, pfBlockerNG is installed, you upgrade the p...
-
- Unfortunately, if you create a backup with pfBlockerNG DNSBL installed and enabled, the backup config will contain th...
-
- If you're using DNS blocking on PfBlockerNG and update the system firmware, the pfb_dnsbl.conf doesn't exist when the...
-
- Affected Version: 2.3 release.
-
- The hostname field for NameCheap in dynamic DNS is rejecting the "@" character.
Error Below:
The following input ... -
- It reads as though the interfaces IP address is to be entered. Removing "use" makes it a little clearer.
- 06:10 PM Revision 5b460078: Merge pull request #2862 from NOYB/Services_/_DHCP_Server_-_DNS_Servers_Clarification
-
06:04 PM Bug #6120 (Resolved): Password protect, baud on console menu not initially set post-upgrade on nanobsd and 2.3->2.3
- Password protect the console menu, not effective after upgrade
After saving system/advanced settings again, the co... -
- The following is with pfSense 2.2.6 release AMD64 on a Core 2 Duo 3 GHz dual-core with 4 GB ram.
---
While creating... -
05:30 PM
Todo #6117: status_ntpd.php: Provide updates via AJAX
- Applied in changeset commit:0cdf72ef41000505cef78f58e86332b2701fa835.
-
05:25 PM
Todo #6117 (Feedback): status_ntpd.php: Provide updates via AJAX
- Page now updates dynamically every five seconds.
If GPS data is available it alternates between updating the NTP s... -
03:31 PM
Todo #6117 (Resolved): status_ntpd.php: Provide updates via AJAX
- 04:19 PM Revision 268daff5: Fixed #6114
- 04:18 PM Revision 662da7f3: Fixed #6114
-
04:05 PM Bug #3976: VLAN Interfaces on LAGG get orphaned on LAGG change
- Chris, this issue is still present for me on 2.3 nanobsd release (updated today). I can only reproduce this AFTER a r...
-
-
03:12 PM
Bug #6112 (Resolved): firewall_nat_out.php: "Do not NAT" setting lost on edit
-
09:20 AM
Bug #6112: firewall_nat_out.php: "Do not NAT" setting lost on edit
- Applied in changeset commit:79b02c77d26bebc506227c20ffb424dde7a196e0.
-
09:15 AM
Bug #6112 (Feedback): firewall_nat_out.php: "Do not NAT" setting lost on edit
- Added isset() to test for nonat control
-
08:56 AM
Bug #6112 (Resolved): firewall_nat_out.php: "Do not NAT" setting lost on edit
- https://forum.pfsense.org/index.php?topic=109660.0
-
- Before show current and latest version on widget and System -> Update screen, check if pfSense-repo needs to be updat...
- 02:14 PM Revision fb62a4ff: Fixed #6112
- by adding isset() to checkbox value
- 02:10 PM Revision 79b02c77: Fixed #6112
- by adding isset() to checkbox value
-
11:30 AM
Bug #6114: firewall_nat_1to1_edit.php: 'Internal IP' field is incorrectly labelled.
- Applied in changeset commit:662da7f36b3e01ce6ca211893c8a33db9942a749.
-
11:21 AM
Bug #6114 (Feedback): firewall_nat_1to1_edit.php: 'Internal IP' field is incorrectly labelled.
- Both issues fixed.
-
- It's labeled 'single host or alias' and cannot be an alias. In 2.2.X it's labelled single host only.
When selectin... -
10:40 AM
pfSense Packages
Bug #6113 (Feedback): AutoConfigBackup Restore Reboot points to wrong link
- Form revised to use diag_reboot.php with hidden input override=yes
-
10:14 AM pfSense Packages Bug #6113 (Resolved): AutoConfigBackup Restore Reboot points to wrong link
- When restoring a backup from ACB, the user is prompted to reboot the firewall. The reboot button on that screen link...
-
- Closing for lack of evidence and lack of feedback. Can be reopened if the situation changes.
Associated forum thre... -
- It reads as though the interfaces IP address is to be entered. Removing "use" makes it a little clearer.
-
07:05 AM
Bug #6107 (Resolved): VPN IPsec Pre-shared Keys Info Boxes do not use infoblock
- Applied. Thank you.
-
-
06:39 AM pfSense Packages Feature #6111 (Needs Patch): DNS Crypt
- A package for DNS Cryt will be nice:
https://forum.pfsense.org/index.php?topic=78446.0 -
-
-
04/11/2016
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
03:47 PM
Bug #6106 (Resolved): Status Monitoring Info Box Dismissal
-
- Verified.
-
07:57 AM
Bug #6106 (Feedback): Status Monitoring Info Box Dismissal
- https://github.com/pfsense/FreeBSD-ports/pull/103 applied. Thanks!
- 03:39 PM Revision 359b630c: Merged #2854 and updated to increment only the deleterow button
- 02:51 PM Revision d41132b1: Fixed #6096
- 02:50 PM Revision ccbfaf78: Fixed #6096
- 02:28 PM Revision e4751372: Fixed #6092
- 02:27 PM Revision d830a7f4: Fixed #6092
- 01:14 PM Revision ed66d182: Fixed #6104 by changing trash icon to trash-o icon so that the JA configmation is not triggered.
- 01:13 PM Revision b6786d45: Fixed #6104 by changing trash icon to trash-o icon so that the JA configmation is not triggered.
- 12:48 PM Revision 0a544256: Fix add delete of rows with buttons
- Redmine #6101
Forum https://forum.pfsense.org/index.php?topic=109554.0 - 12:42 PM Revision fe54669e: Merge branch 'patch-4' of https://github.com/phil-davis/pfsense
- * 'patch-4' of https://github.com/phil-davis/pfsense:
Fix add delete of rows with buttons - 12:40 PM Revision 5ed4eb30: Merged #2854 and updated to increment only the deleterow button
- 12:40 PM Revision dbe64b71: Fix add delete of rows with buttons
- Redmine #6101
Forum https://forum.pfsense.org/index.php?topic=109554.0 -
-
-
- Update firewall rule separators positions when adding an easyrule block.
- 12:24 PM Revision af12fdbc: Make VPN IPsec Keys messages proper infoblock
- Redmine #6107
Note: I made this text be open by default on the edit page (blockopen)
because maybe users should see i... - 12:24 PM Revision 9bf15239: Make forwarder info boxes consistent with resolver
- DNS Resolver just has a single info box at the bottom of its settings page.
DNS Forwarder has different print_callout... - 12:23 PM Revision 37971d9b: Fix the IPsec SPD arrows
- Currently, a `BLACK RIGHT-POINTING POINTER` and a `BLACK LEFT-POINTING
TRIANGLE` are used to display the direction.
... - 12:23 PM Revision cd34a32b: Always use sprintf with log_error
- I noticed this while looking at other stuff in notices.inc
If this log_error() call ever happened, it would not have ... - 12:22 PM Revision 326dc149: Fix extraneous chars in help texts - OpenVPN Server
- Redmine bug #6102
-
- Remove beta badge from Associated Panels Show/Hide options.
Remove beta badge from Left Column Labels option. -
- Remove "you" personalizations.
-
- Remove "you" personalizations.
- 12:20 PM Revision 52563f5d: Merge pull request #2861 from NOYB/Easyrule_Block_Firewall_Separators_Update
- 12:19 PM Revision 6fbdb36e: Merge pull request #2860 from phil-davis/ipsec-keys-infobox
- 12:19 PM Revision ba638346: Merge pull request #2859 from phil-davis/patch-7
- 12:18 PM Revision 9f623262: Merge pull request #2858 from jlduran/fix-ipsec-spd-arrow
- 12:17 PM Revision 32e114db: Merge pull request #2857 from phil-davis/patch-6
- 12:16 PM Revision 6a694baa: Merge pull request #2856 from phil-davis/patch-5
- 12:15 PM Revision 0d20c1c0: Merge pull request #2855 from NOYB/System_/_General_Setup_-_Remove_Beta_Badges
- 12:15 PM Revision c76c5c25: Merge pull request #2853 from NOYB/Miscellaneous_II_-_Remove_Personalizations
- 12:11 PM Revision 9e6bd50f: Merge pull request #2852 from NOYB/Miscellaneous_-_Remove_Personalizations
-
10:00 AM
Bug #6096: Gateway Status widget cut-off on right side
- Applied in changeset commit:ccbfaf78d56dbb565cb8a086377da311b7c3f685.
-
09:54 AM
Bug #6096 (Feedback): Gateway Status widget cut-off on right side
- Widget updated to avoid cut-off.
-
09:40 AM
Bug #6092: (multiple pages): Using the select+click anchor method of changing item order, there is no easy way to move an item to the bottom of the list
- Applied in changeset commit:d830a7f4ac09e47671d2c3cb08f49e428421abcc.
-
09:31 AM
Bug #6092 (Feedback): (multiple pages): Using the select+click anchor method of changing item order, there is no easy way to move an item to the bottom of the list
- Hold down the shift key to move checked items AFTER the row in which anchor icon is clicked.
Tool-tip changes from "... -
- I made some more edits to the wiki to reflect the changes for 2.3, so all that remains is to deploy the other updated...
-
- I fixed 3, 4 will be deployed once release is out.
-
08:18 AM
Bug #6102 (Resolved): typo - vpn_openvpn_server.php - line 1011
- PR applied. Thanks
-
08:15 AM
Bug #6104 (Resolved): Missing string after "Mark All as Read" confirmation
- Delete confirmation dialog suppressed.
-
07:58 AM
Bug #6105 (Resolved): Firewall Rules Separators & Easy Rule Addition
- PR tested and applied. Th[[]]anks!
-
- Fix PR submitted: https://github.com/pfsense/pfsense/pull/2861
-
07:52 AM
Bug #6101 (Feedback): Alias/NTP/uPNP/other Edit add and then delete of new rows issue
- Phil's patch has been tested and applied. Thanks!
-
07:06 AM Bug #6110 (Resolved): Default gateway switching not always working with PPP
- As per this post: https://forum.pfsense.org/index.php?topic=109285.0
System with 2 WAN connections, one DHCP and o... -
- Update firewall rule separators positions when adding an easyrule block.
-
- filterlog occasionally core dumps (@/filterlog.core@) since at least 2.2.4 and still does with 2.3 RC....
- 01:11 AM Revision d0c26f11: Make VPN IPsec Keys messages proper infoblock
- Redmine #6107
Note: I made this text be open by default on the edit page (blockopen)
because maybe users should see i... - 12:47 AM Revision bd3b483a: Make forwarder info boxes consistent with resolver
- DNS Resolver just has a single info box at the bottom of its settings page.
DNS Forwarder has different print_callout...
04/10/2016
-
- that could be added to the configurable options for that widget if someone would like to submit a pull request
-
09:07 PM Feature #6108 (Needs Patch): Dashboard - Firewallrules log
- Is it possible to show the latest Firewall rule match at the top instead of the bottom?
-
- Thanks Jose
-
- Added in https://github.com/pfsense/pfsense/pull/1585
-
- PR https://github.com/pfsense/pfsense/pull/2860
-
- The info that is displayed by vpn_ipsec_keys.php and vpn_ipsec_keys_edit.php is just printed with print_info_box. The...
-
- Info boxes should just be opened/closed from the "i" icon, they should not have an "x" close button.
PR https://gith... -
-
Dismissal of the info box make it unable to be opened again.
- 06:28 PM Revision 82f2b11a: Fix the IPsec SPD arrows
- Currently, a `BLACK RIGHT-POINTING POINTER` and a `BLACK LEFT-POINTING
TRIANGLE` are used to display the direction.
... -
-
Firewall rules separators not repositioned when adding a firewall log easy rule.
-
- that doesn't really need a confirmation, what it does when you click the text is ok.
-
- Also, if you click on the actual trash can then you get the popup. If you click on the text "Mark All as Read" then a...
-
04:54 PM Bug #6104: Missing string after "Mark All as Read" confirmation
- This was on the 3/31 release it seems. After applying updates failed and I had to rebuild it to recover the issue wen...
-
- I performed an in-place upgrade (via upload) to 2.3RC from the latest 2.2 (.1?). There were three unread notificatio...
-
-
- PR https://github.com/pfsense/pfsense/pull/2856
I found another stray double-quote in the same file. -
07:36 AM Bug #6102 (Resolved): typo - vpn_openvpn_server.php - line 1011
- There is "). at end of line 1.
is:... - 01:59 PM Revision 6d44231f: Always use sprintf with log_error
- I noticed this while looking at other stuff in notices.inc
If this log_error() call ever happened, it would not have ... - 12:55 PM Revision 517a4e11: Fix extraneous chars in help texts - OpenVPN Server
- Redmine bug #6102
-
10:21 AM
Feature #6103 (New): DNS Resolver Outgoing Interfaces should be able to use Gateway Groups
- If I use the default Outgoing Interface setting for Unbound (ALL), the DNS Resolver does not really use all interface...
-
- Remove beta badge from Associated Panels Show/Hide options.
Remove beta badge from Left Column Labels option. -
- There is a new home for igmpproxy at GitHub: https://github.com/pali/igmpproxy/
The "next" branch contains a lot o... - 02:59 AM Revision 60d619bd: Fix add delete of rows with buttons
- Redmine #6101
Forum https://forum.pfsense.org/index.php?topic=109554.0
04/09/2016
-
- Thanks, Phil.
-
- It is fixed by https://github.com/pfsense/pfsense/pull/2854
But Steve or someone should look to see if there are any... -
-
- Case 1:
a) Edit an existing Alias with n entries - rows 1 to n are displayed, good.
b) Press the Add button, enter... -
- we include from the quarterly ports, which only get security fixes and any serious bug fixes during that quarter. 1.5...
-
08:53 PM Bug #6100 (Not a Bug): Upgrade Unbound from 1.5.5 > 1.5.8
- The current Unbound on 2.3 RC is
unbound-1.5.5 Validating, recursive, and caching DNS resolver
wh... -
- Thanks, I had your forum thread up still to check and get a bug ticket opened. I believe it's the VLAN misinterpretat...
-
- igmpproxy does not start anymore with a working config from 2.2.6.
The reason seems to be that igmpproxy does not ... -
03:26 PM pfSense Packages Bug #6098 (Resolved): Can't change/modify custom rules in Suricata pkg
- I tried to modify my custom rulesets after upgrading PfSense from 2.2.5 to -> 2.3 RC and the latest version of surica...
-
-
- Crashreporter, should show php warnings, not only their stacktrace.
A php error like reported here https://forum.p... -
- I haven't seen it in a while, so we could assume its fixed. No guarantee's there though, behavior has always been lik...
-
- Remove "you" personalizations.
04/08/2016
-
-
-
-
- this was fixed some time ago
-
- I'm guessing there's a good chance this was fixed in recent work in that area with VIPs. You still see this happening...
-
-
the table needs to be wrapped in:...-
-
- This can be seen in 3-col mode with the Gateway Status widget in the center column of the Dashboard.
-
- The logo is no longer necessary in the wizard and looks out of place.
-
03:18 PM Bug #4784: IPsec mobile fails with VPNC and "Network List" after 2.2.x upgrade
- Hi,
Same problem on version 2.3-RC built on Wed Apr 06 05:34:38 CDT 2016
??It works fine if you leave the "Prov... -
-
02:58 PM Bug #6094 (Resolved): VIP Other subnet does not expand into NAT entries
- According to the documentation here:
https://doc.pfsense.org/index.php/What_are_Virtual_IP_Addresses
Virtual IP t... -
02:24 PM
Bug #6092: (multiple pages): Using the select+click anchor method of changing item order, there is no easy way to move an item to the bottom of the list
- We'll use Shift-click the anchor to move rules below, and add something to show where the rues will end up.
-
- On pages like firewall rules and IPsec, using the select-and-click-anchor method of relocating places the target posi...
-
- When installing 2.3 on a single nic machine without vlans the webgui asks for LAN settings, and then uses the same ni...
-
- Remove "you" personalizations.
04/07/2016
-
- Also could replicate before and not after. Fixed, thanks!
-
- Good to hear.
-
10:45 PM Bug #6089: PHP warning when saving client-specific override with no server selected.
Synced and no errors this time.
-
Ah- Hadn't synced that particular box... Your right.
Ill gitsync and go again.-
- I tried to reproduce that, but no success.
Are you sure that you have the new code on your system? Because the implo... -
- But when I deleted the override I got this-
Crash report details:
PHP Errors:
[07-Apr-2016 19:59:19 America/Va... -
Works for me as well.-
- It works for me, but some independent person should test it and then mark this resolved.
-
- merged, thanks Phil
-
- Pull request https://github.com/pfsense/pfsense/pull/2851
-
- Add an OpenVPN Client Specific Override, and do not select any server (so it should apply to all servers).
A crash r... -
- same likely applies to DNS Forwarder in same spot.
-
10:20 PM Bug #6091 (Resolved): DNS Resolver: Domain Override: Impossible to specify port
- It is impossible to specify a custom port for the resolver ip of a domain override in unbound. The new input pattern ...
- 09:32 PM Revision 9ef446c7: Merge pull request #2845 from NOYB/OpenVPN_Wizard_-_Remove_Personalizations
-
- Remove "you" personalizations.
(cherry picked from commit a0e3dab3a64aff6045eb3acf40706aead39c306a) - 09:30 PM Revision 9d913acd: Merge pull request #2850 from NOYB/Traffic_Shaper_Wizard_-_Remove_Personalizations
-
- Remove "you" personalizations.
(cherry picked from commit 1c43074ace32fc986cda93c4533d366080887381) -
- Remove "you" personalizations.
-
-
-
- 07:34 PM Revision 9d935a09: Avoid PHP warning if no server selected
- when saving a client specific override.
Forum report https://forum.pfsense.org/index.php?topic=109431.msg0
Redmine is... - 07:34 PM Revision 3685bec2: Avoid PHP warning if no server selected
- when saving a client specific override.
Forum report https://forum.pfsense.org/index.php?topic=109431.msg0
Redmine is... - 07:33 PM Revision 9a1297a5: Merge pull request #2851 from phil-davis/patch-4
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- Hi. Is it possible to add ntopng as a sub-task please, so that when there's time following the release of 2.3 it doe...
-
-
-
-
- 01:20 PM Revision 9f6d9e18: Avoid PHP warning if no server selected
- when saving a client specific override.
Forum report https://forum.pfsense.org/index.php?topic=109431.msg0
Redmine is... -
- Thanks for the additional testing
-
11:45 AM Bug #6088: RADIUS WebUI - Deny Config Write is not honored
- I wanted to confirm that this works. I created a custom patch to apply to my pfsense boxes that are running 2.2.6 and...
-
- Applied in changeset commit:0ef6fddce9a48e7e1abac04c5dc59c0d7a99e83d.
-
- Looking at the code, this is not a regression. It will be good to fix, but the fix is non-trivial so it's better to h...
-
- Confirmed, working on a fix now.
-
- For clarity, when the user is authenticated with RADIUS and the deny config write is set it is not enforced.
-
- After authenticating with a user that has been put into a group with "Deny Config Write" it is not enforced. If you c...
-
- Thanks for the additional testing
-
- I wanted to confirm that this works. I created a custom patch to apply to my pfsense boxes that are running 2.2.6 and...
-
- Ok thanks for your help. I will investigate further and open a separate ticket for adding another AVP.
Thanks -
- If an additional suitable attribute/AVP is available for this purpose, it would not be difficult to support. "filter_...
-
- Can you please add support for another AVP as well? In working systems where the Class AVP is not a string changing i...
-
- Applied in changeset commit:461bae6b08d883d232db853a21337e688c1defee.
-
- I was able to reproduce your original issue against an AD server but the fix is not correct. The correct fix is not t...
-
- Class does work when returned properly by the RADIUS server. If it doesn't work, the RADIUS server isn't returning it...
-
- After doing several packet capture and reviewing RFC 4372. It seems to be a normal operation to include the class 25 ...
-
-
- pfSense outputs what it receives from OpenVPN using the management interface.
I suggest opening a forum thread for... -
08:48 AM pfSense Packages Bug #6090 (Closed): OpenVPN Server Status does not show all client status
- I've got my server setup, I have a site to site configuration working. Everything is working fine, I can ping all de...
-
- Remove "you" personalizations.
-
- @cmb: you can also set the unit for an RRD-graph/file instead of setting it for an individual value, inside the rrd-f...
-
- I fixed the NTP portion.
Unless I'm missing some easier way, getting rid of the "null" in queues and queuedrops i... -
- yeah the description there was a copy/paste from FreeBSD docs, which doesn't match our default (which is correctly re...
-
- Description states "Randomize the ID field in IP packets (default is 0: sequential IP IDs)".
In reality the value de... -
- This reverts commit 0b4fa4b4dc0ef4cd9178e761f3d47d32f17413bd.
-
-
-
-
- 12:51 AM Revision 4422bdca: Deprecate references to modulate state. Remove rule allowing TCP 1723 inbound when PPTP client is in use, as that's unnecessary.
- 12:50 AM Revision dfaaa729: Deprecate references to modulate state. Remove rule allowing TCP 1723 inbound when PPTP client is in use, as that's unnecessary.
-
-
- fixed
-
- something else changed here outside the Unbound config and it's not clear what. That config doesn't bind to link loca...
04/06/2016
-
-
- that was already fixed in the _9 package version.
-
- Very minor typo on the "Blocked" page of Snort. Says "deault", should say "default".
Confirmed on 2.3.r.20160402.... - 10:21 PM Revision 00e4fa58: Redmine #6081 do not reuse index var
- The value of $i needs to be kept constant from the outer loop - do not reuse it here.
- 10:18 PM Revision e3acb913: Redmine #6081 do not reuse index var
- The value of $i needs to be kept constant from the outer loop - do not reuse it here.
- 10:18 PM Revision ae366af1: Merge pull request #2849 from phil-davis/patch-4
- 10:04 PM Revision 231197bb: Redmine #6081 do not reuse index var
- The value of $i needs to be kept constant from the outer loop - do not reuse it here.
-
- fixed
-
- Merged
-
- Yep, your guess was correct.
https://github.com/pfsense/pfsense/pull/2846 -
04:08 AM Bug #6079 (Resolved): Bad HTML-encodeding on status_dhcp_leases.php
- No big thing but the output in the description column on status_dhcp_leases.php is off. I see this in description:
... -
09:31 PM Bug #5649: bce0: Discard frame w/o leading ethernet header (len 0 pkt len 0)
- Well, it appears that this still happens...
I'm not sure if it's the hardware itself and the fact it's passed thro... -
- I thought about this a second time:
To avoid any confusion with this setting put always a "server:" in front of cu... -
-
-
-
- (cherry picked from commit 2a15cab9e3141b9812573c1161ab8ea2bd11f6c7)
-
-
08:27 PM Bug #6044: system>monitoring tooltip unit "null" for some graphs
- Unit "null" also showing for NTP metrics
As per https://forum.pfsense.org/index.php?topic=107790.msg608787#msg6087... -
- @jared don't forget the same applies to queues/queuedrops
-
-
- merged. Keyword "Redmine #xx" doesn't match redmine's ticket association. Commit 231197bbeb926323362918f8b27c20bb5705...
-
- Yes, a bug with reusing an index variable again in the inner loop for the aliases. If you enter lots of aliases then ...
-
- DNS Forwarder/Edit Host Override, alias edit buton does not edit correct alias
When 2 host overrides A and B are r... -
- If you try to update a custom rule in Snort, the page refreshes but the text of the custom rule remains exactly the s...
- 05:46 PM Revision 3220c801: Clarify log when skipping v6 bogons update.
- 05:45 PM Revision 06ac4c7f: Clarify log when skipping v6 bogons update.
-
04:49 PM Bug #5520: IPsec status seems to hang preventing access to the webgui.
- Oh my. These are exciting times.
-
- "Real soon now"
https://github.com/pfsense/pfsense/commit/e707bd5cca945e8cf26d3d5615c8cab97376855a -
09:50 AM Bug #5520: IPsec status seems to hang preventing access to the webgui.
- I'm also experiencing the GUI hang on the IPSec status page on 2.2.6-RELEASE.
If I read the above correct, the 2.3... -
03:55 PM pfSense Packages Bug #6083: Suqid Realtime Monitor / Squid Cache Table not diplaying correctly
- O, I tried a new pattern : "/\[|]+/" .. This split the line in 3. Using [0] and [2] fixed the display of the message.
-
- On the GUID under Package / Squid / Monitor the realtime tab have all the squid / squidguard logs displayed. The log...
-
03:07 PM Bug #6082 (Resolved): Add leftsendcert=always to ipsec.conf for mobile profiles using IKEv2 and RSA authentication
- The IKEv2 client on iOS 9 and OS X El Capitan wants strongSwan to use leftsendcert=always when using a manual configu...
-
-
- 01:14 PM Revision 6657804c: services_ntpd_pps remove bonus f
- (cherry picked from commit 0f191478bab18158a70439f279d7232855928afe)
-
- 12:38 PM Revision 0f191478: services_ntpd_pps remove bonus f
-
11:06 AM Revision 02697cb4: notify by email and in syslog when a channel goes up or down
-
- (cherry picked from commit 43cbe85544cf045db6e9f14b0ade547b239cbece)
-
-
- (cherry picked from commit eb3491d99e939ab21d84122ededf9e7e9462ed71)
-
-
- (cherry picked from commit e429ac7134ac2080af9117c11e2f294d4dd8c5d0)
-
- (cherry picked from commit 5caee0ba0f8782ea7bf1df54ad0848da1d5084d2)
-
- (cherry picked from commit f5edca6c481c72c063c7390afdececd54da10a6e)
-
- (cherry picked from commit 3e7c1ea74a8c0600c785e9588349afd927719d23)
-
-
-
-
- 10:01 AM Revision 4084bcf8: Only apply htmlentities() once on each data element
- Redmine #6079
(cherry picked from commit 82cde7f1067f527df5e902cf1bc7070612d039f4) -
-
- (cherry picked from commit 05bdceee8c8fd598cdf83dc57c4006e20612e26d)
-
-
- (cherry picked from commit cc1b7ddd0ba2d7eee6ee7ec1cae83efda91427d0)
- 09:37 AM Revision 82cde7f1: Only apply htmlentities() once on each data element
- Redmine #6079
-
-
- Duplicate of #972 -- feature is already in pfSense 2.3.
-
09:26 AM Feature #6080 (Duplicate): Enable setup a non "layer2" reachable Gateway on GUI
- Hi Guys.
We are working with pfsense as our default Virtual Router with great success... but there is something st... -
08:21 AM Bug #5993: dhcp6c not started until an RA received
- Attached are patches generated against 2.3.r.20160405.2024
interfaces.inc changes made to improve the logic around... -
- Remove "you" personalizations.
-
- Fixed
-
- seems like this may have regressed after the most recent repo change?
https://forum.pfsense.org/index.php?topic=109... -
-
03:29 AM Bug #6054: Unbound first run errors
- I've downloaded OLD build (201604*03*-1424) snapshot: Reproducing.
Newer build (201604*04*-1709): Not reproducing.... - 02:36 AM Revision 891c53b0: Add Unbound to license.php. Ticket #5903
- 02:36 AM Revision 4d03eba9: Add Unbound to license.php. Ticket #5903
-
- (cherry picked from commit 75cdfae39bff2b5ccc523cc32df7dde99f04eeed)
-
-
- (cherry picked from commit a491ec98d8ffc5663cca84df402c2d6274a78a07)
-
04/05/2016
-
- updated subject to issue that was fixed here.
OP's issue is the time was 3 hours into the future at some point, a... -
- - Distribute only a single pfSense-repo package containing all templates
- Create a symlink pointing to selected repo... -
- (cherry picked from commit a35bf546b57558535e3fc1958cf3fb2b4d18ade7)
-
- (cherry picked from commit b884641b1caa3d99d7966cb367c1f6dbfc1687f2)
-
- (cherry picked from commit e1deaf759ab9eadcdc60565ca5af142069172f3a)
-
- (cherry picked from commit 81bcdf9695b13cb89c8a0dfa8700189baaaad6ff)
-
- (cherry picked from commit e450f488ebd0443466ec1bcfad48ba0148cc0310)
-
- - Distribute only a single pfSense-repo package containing all templates
- Create a symlink pointing to selected repo... -
-
-
- fixed
-
- That is expected since the fix is on update script (pfSense-upgrade). If you gitsync before run the upgrade it won't ...
-
-
-
-
- Added Unbound, thanks Victor.
-
- I don't see Unbound in there.
-
- # With 2.2.x you won't see this error. Unbound even won't start.
# "access-control: 0.0.0.0/0 allow" is an right com... -
- Not seeing a problem here. Yeah that doesn't work as it's not valid. If you try to add that in a config where it will...
-
05:12 PM Bug #6075: diag_dns.php creates invalid alias for long hostnames
- Chris Buechler wrote:
> Pretty sure subject is where you ended up with the too-long alias name. Fixed that page to t... -
- works
- 04:49 PM Revision c7445ef5: Merge pull request #2843 from jlduran/fix-missing-space-status-ipsec
- (cherry picked from commit f332da5fbb0ca2018f1ff733208702bc5ad77b2d)
-
- This should have target version 2.3
-
- Looks good with the latest commits.
- 04:48 PM Revision f332da5f: Merge pull request #2843 from jlduran/fix-missing-space-status-ipsec
- 04:38 PM Revision e96b20f6: Fix missing space in status_ipsec.php
- Add a missing space before NAT-T
- 04:12 PM Revision cccb1e1a: Eliminate "onclick" from child SA buttons
- Revise recording of open children
(cherry picked from commit 067551a44058656cd980bd95f55c59399c5c36af) - 04:08 PM Revision 067551a4: Eliminate "onclick" from child SA buttons
- Revise recording of open children
-
- strongSwan doesn't get restarted in debug mode, it just changes the verbose level of log sections. Old terminology wa...
-
- strongSwan doesn't get restarted in debug mode, it just changes the verbose level of log sections. Old terminology wa...
-
-
- 12:39 PM Revision 11614bc9: Handle alias from CNAME in diag_dns
- If I resolve a CNAME with diag_dns, it gives back the translated FQDNs - e.g. www.inf.org translates to inf.org. Then...
-
- 11:59 AM Revision 73ff9530: Merge pull request #2841 from NOYB/System_-_Miscellaneous_-_Remove_Personalizations
- (cherry picked from commit 3061702cce23fcc5259f7d6d119a6fe05de84149)
- 11:59 AM Revision 3061702c: Merge pull request #2841 from NOYB/System_-_Miscellaneous_-_Remove_Personalizations
- 11:59 AM Revision 4d9a5d99: Merge pull request #2840 from phil-davis/patch-7
- (cherry picked from commit 64c3e9a58d426637fa91996d3a30695f10e01e70)
- 11:58 AM Revision 64c3e9a5: Merge pull request #2840 from phil-davis/patch-7
- 11:56 AM Revision f36a00f5: Merge pull request #2838 from phil-davis/patch-5
- (cherry picked from commit 4659cb1aad41c7b37f2c456ecd3ab665897e3a9a)
- 11:56 AM Revision 4659cb1a: Merge pull request #2838 from phil-davis/patch-5
- 11:55 AM Revision 12f22e9c: Merge pull request #2837 from phil-davis/we
- (cherry picked from commit f4d13d55d7b15449780b5eb521f54d76d8279df5)
- 11:55 AM Revision f4d13d55: Merge pull request #2837 from phil-davis/we
- 11:55 AM Revision e2fba23c: Merge pull request #2836 from phil-davis/patch-4
- (cherry picked from commit b102779f21ab50d3de3dc41a63ab5cffae378f78)
- 11:54 AM Revision b102779f: Merge pull request #2836 from phil-davis/patch-4
-
- Works
-
- Applied in changeset commit:6bdfbf3b06c9e3c1439f806d372c8bf440460ee1.
-
- The MAC address is missing from the output on status_interfaces.php
To me, I have a fix pending. -
- Works
-
- PR has been merged
-
- Proposed fix in https://github.com/pfsense/pfsense/pull/2839
-
- If I resolve a CNAME with diag_dns, it gives back the translated FQDNs - e.g. www.inf.org translates to inf.org. Then...
-
- Works
-
- PR has been merged
-
- PR has been merged, so status can be set to feedback and someone can test it. You should be able to:
1) Lookup some ... -
- It seemed easy and reasonable to do https://github.com/pfsense/pfsense/pull/2840
That sets the button text according... -
- 1) Resolve something in Diag DNS - e.g. www.inf.org
2) Press "Add Alias" - an alias www_inf_org is created - good.
... -
- Can you reproduce it with most recent snapshot? I couldn't
-
- I used default values for RAM disks on a 512MB RAM VM: 40MB for /tmp and 60MB for /var. HDD size is 5GB.
-
- Works
-
- Fixed
-
- Same here, all OK.
Thanks! -
08:34 AM Bug #6001: Not all packages are started during boot time
- All of my services are starting now as well.
-
- Looks to be fixed. The 3 cases I had, and one of JimP's, all work fine now. Same root cause likely fixed every other ...
-
- Remove "you" personalizations.
- 06:19 AM Revision a2d92b48: Allow to update existing alias from diag DNS
- See Redmine #6077
This seems the easy and reasonable thing to do. Make the button text reflect what is going to happe... - 05:49 AM Revision 607b785f: Handle alias from CNAME in diag_dns
- If I resolve a CNAME with diag_dns, it gives back the translated FQDNs - e.g. www.inf.org translates to inf.org. Then...
-
- igmpproxy has been quite idle for some time at https://sourceforge.net/projects/igmpproxy/
There seems to be a new... -
- This is rather a workaround for a buggy behavior in igmpproxy.
Maybe is is resolved by issue #4672. - 03:18 AM Revision 7bc19545: Truncate alias name at 31 characters to prevent creating an invalid ruleset. Ticket #6075
- 03:17 AM Revision d79ff71a: Truncate alias name at 31 characters to prevent creating an invalid ruleset. Ticket #6075
-
- Still not seeing any scenario with or without VLANs where it doesn't work.
Another VLAN (on lagg here) example, 5... -
- all fixed
- 12:25 AM Revision adb56dbd: Remove "we" personalizations from config.console.inc
- I changed "we" to "the system" - if someone thinks so, it could be changed to "pfSense" or $g["product_name"]\
If you... - 12:13 AM Revision 1e87fb3f: Remove "we" personalizations
04/04/2016
- 11:44 PM Revision 9e820b59: Status IPsec only show time if established
- When in the connecting state, this was showing "seconds (0:00:00) ago" - which seems odd.
I also fixed up the gettext... - 10:42 PM Revision 713f69e2: Merge pull request #2835 from phil-davis/patch-5
- (cherry picked from commit 146684ee657f0f146afad5aa9d74b89884ee4c53)
- 10:41 PM Revision 146684ee: Merge pull request #2835 from phil-davis/patch-5
- 10:41 PM Revision 9b6ea44e: Merge pull request #2832 from NewEraCracker/lang-fixes
- (cherry picked from commit c67308d9b8e36fc73cb3c4381861698aa73bee00)
- 10:41 PM Revision c67308d9: Merge pull request #2832 from NewEraCracker/lang-fixes
- 10:40 PM Revision 53fe857e: Merge pull request #2834 from phil-davis/patch-4
- (cherry picked from commit 2fdd07e9bbb5eda3c42c9d1cb4980d668f8dfcdf)
- 10:40 PM Revision 2fdd07e9: Merge pull request #2834 from phil-davis/patch-4
- 10:25 PM Revision dc99feef: Fixed #6068
- (cherry picked from commit 669343a2d37534fec4a41c3b2c6c8cd1bf4e1170)
- 10:22 PM Revision 4b5f2ab3: Prevent foreach crash if no IPsec
- On a system with no IPsec defined, this would crash with:
[04-Apr-2016 21:33:24 Etc/UTC] PHP Stack trace:
[04-Apr-201... -
- Pretty sure subject is where you ended up with the too-long alias name. Fixed that page to truncate hostnames that ar...
-
- That's not from adding an alternate hostname for DNS rebinding, that's from a pf table, which is unrelated to that. L...
-
- When attempting to enter "192-168-1-10.8ddbaeb8d2e446859c9d76e9474ee02a.plex.direct" as an alternate hostname in the ...
- 10:17 PM Revision 2507c8e9: Use ramdisk comment typos
- 10:07 PM Revision 017ca0c0: COrrected missing "<"
- (cherry picked from commit 9723b525a4ec62946248014747bfa1f4ed2ef8ae)
- 10:06 PM Revision 9723b525: COrrected missing "<"
- 10:00 PM Revision 669343a2: Fixed #6068
-
- - Do not call ntpdate before start ntpd, ntpd -g parameter is enough
- Deprecate /usr/local/sbin/ntpdate_sync_once.sh... -
- - Do not call ntpdate before start ntpd, ntpd -g parameter is enough
- Deprecate /usr/local/sbin/ntpdate_sync_once.sh... -
- (cherry picked from commit 67c934440521e8081d90850f4a10a40e82603db3)
-
-
-
Just ran update from the last beta to the most recent RC and the problem still exists.
Last beta:
2.3-BETA (i... -
- Applied in changeset commit:78aee67a9e8ddb40d10c965ee8ce1ad1389d25f6.
-
- Fixed in check_reload_status 0.0.7
-
-
-
- 06:46 PM Revision 9573afa8: Fixed #6049
- (cherry picked from commit 4260c32a42c6d0201737730a373e795703ca1141)
- 06:40 PM Revision 4260c32a: Fixed #6049
-
05:10 PM
Bug #6068: Cannot update with /var as RAM disk
- Applied in changeset commit:669343a2d37534fec4a41c3b2c6c8cd1bf4e1170.
-
05:03 PM
Bug #6068 (Feedback): Cannot update with /var as RAM disk
- Implemented as requested. If the "Use Ramdisk" setting is changed by the user they will be prompted to confirm on sav...
-
- The problem happens only when the 'Use RAM Disks' is changed in system_advanced_misc.php but box is not rebooted. The...
-
- When using /var as a RAM disk on a full install, you end up with "unable to check for updates".
-
- sortable table headers don't wrap in a uniform manner, leading to odd behavior:
!http://i.imgur.com/T3LG9dY.png!
... - 04:23 PM Revision 89854d71: Fixes to linguistic issues introduced by recent commits
- 1) encryption vs decryption typos. 2) unnecessary sprintf.
-
-
- Dmitriy,
The only possible cause for the rrdtool message you mentioned is the machine clock was set to the future ... -
- Remove "you" personalizations.
(cherry picked from commit dbe87243ffef17cc41f7fe3bc5fa02ed1372059d) -
- (cherry picked from commit 78aee67a9e8ddb40d10c965ee8ce1ad1389d25f6)
-
-
-
- fixed
-
- Interesting.
I will have to reattempt - I should note this is in a VM, using passed through hardware, but that sho... -
- not seeing either of those issues. 500K down, 128 up limiter on a VLAN and get: ...
-
- In "Services: DNS Resolver: Access Lists" it's only possible to add subnets with CIDR > 0.
If it makes sense or no... -
- Did you set any specific size for /var memory disk? I couldn't reproduce the problem following the steps you mentione...
-
- If you put "access-control: 0.0.0.0/0 allow" into advanced, unbound didn't start with:
>/var/unbound/unbound.conf:93... -
- Works
-
- Applied in changeset commit:1b2527f2935055da9233c5d617a4630e61c22496.
-
- On interfaces.php the auth_server_shared_secret and auth_server_shared_secret2 fields should allow text, not only num...
- 02:05 PM Revision 3cd510c5: Fixes corrupted display when special chars appear in the alias
- (cherry picked from commit f14ec73c66c341464b9bd893175732b188049d24)
- 02:03 PM Revision f14ec73c: Fixes corrupted display when special chars appear in the alias
-
- minicron is running but notifications were not being sent.
The status script lacked an execute bit. Fix is already... - 02:00 PM Revision 358b2884: Merge pull request #2808 from NOYB/Firewall_/_NAT_-_Remove_Personalizations
- (cherry picked from commit 4012d55c028ca1c4d449e7b80ba738d4dd5b2976)
- 02:00 PM Revision 4012d55c: Merge pull request #2808 from NOYB/Firewall_/_NAT_-_Remove_Personalizations
- 01:55 PM Revision 1c92c5b1: Merge pull request #2831 from NOYB/Includes_-_Remove_Personalizations
- (cherry picked from commit 7a2c15f527459cc82aadaf23d06895174c008320)
- 01:54 PM Revision 7a2c15f5: Merge pull request #2831 from NOYB/Includes_-_Remove_Personalizations
- 01:54 PM Revision ce871619: Merge pull request #2830 from NOYB/Diagnostics_-_Remove_Personalizations
- (cherry picked from commit 235d9db9da3f871d6daefa4130abb8fb960a0222)
- 01:54 PM Revision 235d9db9: Merge pull request #2830 from NOYB/Diagnostics_-_Remove_Personalizations
- 01:53 PM Revision 09cacd56: Merge pull request #2829 from phil-davis/openvpn-widget
- (cherry picked from commit 1dae6c0f4184ac72c252fb934d2bfa4fd3a967fe)
- 01:53 PM Revision 1dae6c0f: Merge pull request #2829 from phil-davis/openvpn-widget
- 01:53 PM Revision 0d55c04e: Merge pull request #2828 from phil-davis/widget-personalizations
- (cherry picked from commit e18fb7e8bbf8c26639d0598fa04320c5608ce660)
- 01:53 PM Revision e18fb7e8: Merge pull request #2828 from phil-davis/widget-personalizations
- 01:52 PM Revision 4a22d33f: Merge pull request #2827 from NOYB/Status_-_Remove_Personalizations
- (cherry picked from commit 94463e858131f23d44bfdb72cd3c8b053cf6ed28)
- 01:52 PM Revision 94463e85: Merge pull request #2827 from NOYB/Status_-_Remove_Personalizations
- 01:52 PM Revision a592bb27: Merge pull request #2826 from NOYB/VPN_/_OpenVPN_-_Remove_Personalizations
- (cherry picked from commit 28ca20bb51fb3002f89c026f160e7d6ea0c4d310)
- 01:51 PM Revision 28ca20bb: Merge pull request #2826 from NOYB/VPN_/_OpenVPN_-_Remove_Personalizations
- 01:51 PM Revision cbcea7e1: Merge pull request #2825 from NOYB/VPN_/_L2TP_-_Remove_Personalizations
- (cherry picked from commit 1505c1350e19c70a2ee4a2bf524497cede51eccf)
- 01:51 PM Revision 1505c135: Merge pull request #2825 from NOYB/VPN_/_L2TP_-_Remove_Personalizations
-
01:50 PM
Feature #6049: status_ipsec.php needs to be converted to update via AJAX
- Applied in changeset commit:4260c32a42c6d0201737730a373e795703ca1141.
-
01:42 PM
Feature #6049 (Feedback): status_ipsec.php needs to be converted to update via AJAX
- Pushed to master as 4260c32a42c6d0201737730a373e795703ca1141
Displaying any SA blocks the user had open on each re... - 01:49 PM Revision 075d3ff5: Merge pull request #2824 from NOYB/VPN_/_IPsec_-_Remove_Personalizations
-
- Remove "you" personalizations.
- 01:48 PM Revision b2118f7e: Merge pull request #2823 from derelict-pf/patch-1
- (cherry picked from commit b3d255deb16192ad33cbcd4cb157cf9acf1919fb)
-
- 01:46 PM Revision b3d255de: Merge pull request #2823 from derelict-pf/patch-1
- 01:31 PM Revision 356e973f: Merge pull request #2822 from NOYB/Services_/_Wake-on-LAN_-_Remove_Personalizations
- (cherry picked from commit 5ec4c7fda092991c3574f5857a0917d54613682b)
- 01:31 PM Revision 5ec4c7fd: Merge pull request #2822 from NOYB/Services_/_Wake-on-LAN_-_Remove_Personalizations
- 01:31 PM Revision 15642484: Merge pull request #2821 from NOYB/Services_/_PPPoE_Server_-_Remove_Personalizations
- (cherry picked from commit 378f989cdc07a61bc1a8c2964c249922a416f51c)
- 01:31 PM Revision 378f989c: Merge pull request #2821 from NOYB/Services_/_PPPoE_Server_-_Remove_Personalizations
- 01:30 PM Revision 02e6b537: Merge pull request #2820 from NOYB/Services_/_NTP_-_Remove_Personalizations
- (cherry picked from commit 72c57c3f09f483e747480e704e1b0090e32a728e)
- 01:30 PM Revision 72c57c3f: Merge pull request #2820 from NOYB/Services_/_NTP_-_Remove_Personalizations
- 01:29 PM Revision 71869412: Merge pull request #2819 from NOYB/Services_/_Load_Balancer_-_Remove_Personalizations
- (cherry picked from commit 6d105e8d5ded647dfc65cbc9625c41a3afc74a0e)
- 01:29 PM Revision 6d105e8d: Merge pull request #2819 from NOYB/Services_/_Load_Balancer_-_Remove_Personalizations
- 01:28 PM Revision 152d81c2: Merge pull request #2818 from NOYB/Services_/_IGMP_Proxy_-_Remove_Personalizations
- (cherry picked from commit 81513d46cb78834b2dbd4e9f585b0a8b38d75e07)
- 01:28 PM Revision 81513d46: Merge pull request #2818 from NOYB/Services_/_IGMP_Proxy_-_Remove_Personalizations
- 01:28 PM Revision 7194b250: Merge pull request #2817 from NOYB/Services_/_Dynamic_DNS_-_Remove_Personalizations
- (cherry picked from commit a6108e4983a8d9a75d5c607fff6538604df369a7)
- 01:28 PM Revision a6108e49: Merge pull request #2817 from NOYB/Services_/_Dynamic_DNS_-_Remove_Personalizations
- 01:27 PM Revision 2fabe5fa: Merge pull request #2816 from NOYB/Services_/_DNS_Resolver_-_Remove_Personalizations
- (cherry picked from commit 09aad9f8a6f190f4ca5cf2f08a824af695da6304)
- 01:27 PM Revision 09aad9f8: Merge pull request #2816 from NOYB/Services_/_DNS_Resolver_-_Remove_Personalizations
- 01:27 PM Revision a1d1ae4f: Merge pull request #2815 from NOYB/Services_/_DNS_Forwarder_-_Remove_Personalizations
- (cherry picked from commit 1301cc6700b4d8831aaa819dffb7f2f056ee3ac2)
- 01:27 PM Revision 1301cc67: Merge pull request #2815 from NOYB/Services_/_DNS_Forwarder_-_Remove_Personalizations
- 01:26 PM Revision 00ae93ff: Merge pull request #2814 from NOYB/Services_/_DHCP_-_Remove_Personalizations
- (cherry picked from commit b68e48f20c6ae99786e67372f802d16aacf22de3)
- 01:26 PM Revision b68e48f2: Merge pull request #2814 from NOYB/Services_/_DHCP_-_Remove_Personalizations
- 01:18 PM Revision fcefc856: Merge pull request #2813 from NOYB/Services_/_Captive_Portal_-_Remove_Personalizations
- (cherry picked from commit cbe2d30f3b69f35ee2a174e931209a49cee594c6)
- 01:17 PM Revision cbe2d30f: Merge pull request #2813 from NOYB/Services_/_Captive_Portal_-_Remove_Personalizations
- 01:17 PM Revision 075c6dfa: Merge pull request #2812 from NOYB/Firewall_/_Virtual_IPs_-_Remove_Personalizations
- (cherry picked from commit 70ecf3db0aa1c0ec04784a69942788f6fef29ec4)
- 01:16 PM Revision 70ecf3db: Merge pull request #2812 from NOYB/Firewall_/_Virtual_IPs_-_Remove_Personalizations
- 01:16 PM Revision 2a9559e1: Merge pull request #2811 from NOYB/Firewall_/_Traffic_Shaper_-_Remove_Personalizations
- (cherry picked from commit 7f824121528288fdcc493f36da25c61982f4e320)
- 01:16 PM Revision 7f824121: Merge pull request #2811 from NOYB/Firewall_/_Traffic_Shaper_-_Remove_Personalizations
-
- duplicate of #4209
-
- This is sometimes required by some ISP's and the freebsd dhclient doesn't do it, however I found a quick fix.
A copy... - 12:57 PM Revision a70ad883: Merge pull request #2810 from NOYB/Firewall_/_Schedules_-_Remove_Personalizations
- (cherry picked from commit d860e01631203bd50e41cf581566662f33031c6e)
-
12:57 PM pfSense Packages Bug #6069: modsecurity pfsense 2.3
- Sorry, im put this in the wrong place.
-
- Please keep questions such as this in the forum.
-
- Any plans to bring Mod_security reverse proxy to the 2.3 version ?
Thanks. - 12:57 PM Revision d860e016: Merge pull request #2810 from NOYB/Firewall_/_Schedules_-_Remove_Personalizations
- 12:51 PM Revision 106d4586: Merge pull request #2809 from NOYB/Firewall_/_Rules_-_Remove_Personalizations
- (cherry picked from commit 1cde3afb4c048f66ffd670c373a14d3d3cfa2a71)
- 12:50 PM Revision 1cde3afb: Merge pull request #2809 from NOYB/Firewall_/_Rules_-_Remove_Personalizations
- 12:28 PM Revision 5c87b716: Merge pull request #2808 from NOYB/Firewall_/_Aliases_-_Remove_Personalizations
- (cherry picked from commit e8ea99014a38450ae28d58a6daf0cc60a33ff1e0)
- 12:04 PM Revision e8ea9901: Merge pull request #2808 from NOYB/Firewall_/_Aliases_-_Remove_Personalizations
-
- Please read the ticket updates before yours. On pfSense 2.3 we are using nginx. That work isn't being backported to 2...
-
11:00 AM Bug #5715: Rare lighttpd crash, core dump, when loading login page or on initial visit
Since we updated our pfSense from 2.1.x to 2.2.x (currently 2.2.6),
lighttpd is crashing randomly when I try to e...-
- Remove "you" personalizations.
04/03/2016
-
-
- Remove "you" personalizations.
-
- > which is almost always true for domain overrides
I don't agree.
# I use domain overrides as an on-site alias to... -
- # As pfsense user/admin I wouldn't expect to have unbound entries in /etc/hosts
#* It's better to have a extra table... -
- I run the nightly builds, and updated today and was delighted to see 2.3-RELEASE.
I went ahead and setup some vlan...
04/02/2016
-
- No, arguing about the merits of a solution is not what Redmine bug reports are for, so I won't be, as it just makes m...
-
- Subject is the issue. You end up with a hosts file like: ...
-
- mydomain: my.private
add test.my.private 127.0.0.1
add test.yours.private 127.0.0.2... -
- fixed
-
- fix pushed
-
- It's not possible to configure RAs when DHCPv6 relay is enabled.
https://forum.pfsense.org/index.php?topic=108866.0 -
- It looks like it would be preferable to use forward-zone rather than stub-zone in all cases for domain overrides. The...
-
- I forgot. From man page:
> The servers listed as forward-host: and forward-addr: have to handle further recursion ... -
- The most time Domain Overrides are used for private networks:
# The used DNS servers are not authoritative
# The au... - 01:37 PM Revision 1aa20aa3: Remove dead note from OpenVPN widget
- This note is never going to display, because $DisplayNote is only set in
a function and is not global.
In any case, I... - 01:27 PM Revision 552503bf: Remove widget personalizations
- 10:07 AM Revision 40f00b73: Allow configuring RAs when DHCPv6 Relay is enabled. Ticket #6063
- 10:06 AM Revision 75173246: Allow configuring RAs when DHCPv6 Relay is enabled. Ticket #6063
-
- Remove "you" personalizations.
-
- Just done yet another run. Here are steps to reproduce:
1. Do fresh install.
2. Check "Use RAM disks".
3. Reboot.
... -
- Marc's going to pick up on this. We've discussed it at length.
TLDR version: The issue is when rc.start_packages ...
04/01/2016
-
- Like some other services and firewall/NAT settings you can choose "WAN IP" that's a dynamic value that will always be...
-
- If supported under 2.2.6 can the stunnel package be updated to the latest release? 5.31 (https://www.stunnel.org/down...
-
- under 2.2.6-RELEASE with stunnel 5.20.3 package installed the cert tab page never updates after adding a new cert. T...
-
- thanks, I'll check that.
-
03:16 PM Bug #6056: DNS Resover after upgrade to RC
- No, hadn't chosen "all" I had selected the specific interfaces.
i added a part of the 2.2.6 config (Hoping it is t... -
- Never bound to them specifically, that is. They were skipped in Unbound's config. #4021 has specifics on that.
If... -
- Never bound before? Strange.
My Samba 4 Server does DNS forwarding to the local-link IP of the pfsense interface. An... -
- Unbound never bound to link local IPs before. The fact they're there now and work is because of fixes in 2.3. I suspe...
-
- upgrade from 2.2.6 of course not 2.3.6 :-(
-
- after upgrade from 2.3.6 to RC, DNS resolving didn't work from my machines in the LAN anymore.
As i looked into it i... -
- That can happen with any package in that circumstance (and has always been the case).
-
02:01 PM Bug #6055 (Confirmed): Menu items may remain from packages no longer installed
- I just upgraded to 2.3 RC as described here: https://forum.pfsense.org/index.php?topic=109104.0
Under Services the... -
- Difference between timestamps is -9764. Assuming that's seconds, nearly 3 hours. Is it possible that NTP has come u...
-
- >rc.bootup: The command '/usr/bin/nice -n20 /usr/local/bin/rrdtool update /var/db/rrd/lan-traffic.rrd N:U:U:U:U:U:U:U...
-
-
- this is the issue: ...
-
- Server
Server Mode: Peer2Peer (SSL/TLS)
Protocol UDP -
- Client or server? What type of OpenVPN config? What was in the OpenVPN logs post-boot?
-
- OpenVPN only working after restarting the service after the upgrade to RC
-
- That's what will happen if you try to hit the GUI after most of the upgrade is complete but it hasn't rebooted into t...
-
- Performing upgrade from 2.2.6 amd64 to 2.3 RC amd64 using 'firmware update', after waiting enough time for a reboot t...
-
- Damn, you're fast.... I found it just now and was about to come back and delete/close this. Apologies.
-
- System>General Setup, "Top Navigation". You can change it there. It's as it is by default because that's the only way...
-
- The old GUI allowed you to always switch to another section easily by keeping the top navigation menu visible. The n...
-
- I finally managed to reproduce this in a 100% reliable fashion. In my test case, WAN is static, WAN2 is DHCP. If WAN2...
-
- Yeah, it was a fresh installation.
-
- Was it a fresh install or upgrade? I did a fresh install here and unbound is up after boot, with no error messages.
-
- >Apr 1 08:32:51 unbound 42511:0 error: Error for server-cert-file: /var/unbound/unbound_server.pem
>Apr 1 08:3... -
-
- Looks like fixed now.
-
- Remove "you" personalizations.
-
- Remove "you" personalizations.
-
- Remove "you" personalizations.
-
- Doesn't seem to be any bug here. If you find specifics showing otherwise, please follow up.
-
- It must be something with high priority because I am unable to operate a console. It just doesn't response to keyboar...
-
- appears that's related to the change of package repo URLs
-
02:38 AM Bug #6052: Update to RC: Error trying to get packages list. Aborting...
- Confirming same on amd64 following upgrade from 28 March beta to RC using the GUI.
03/31/2016
-
-
Update from 3/30 beta to 3/31 RC using console option 13.
Near the end of the auto reboot, just after generati... - 10:40 PM Revision 11a374ae: Bootstrap for outbound NAT port should accept a range.
- The form validation still exists for a port range here but the form itself will not accept anything but a number 1 - ...
-
-
05:51 PM Bug #6051 (New): DHCPv6 Client Failure for additional WAN Address causes 2-seconds-service-restart-loop
- When NOT setting "Request only an IPv6 prefix" with a provider that returns NoAddrAvail (see attached pcap), pfsense ...
-
- I fixed this in #5848
-
- On services_dhcp.php the "Network Booting" options are in their own separate section which defaults to collapsed. Unl...
-
- The information on status_ipsec.php should be updated via AJAX, rather than requiring the page to be reloaded.
-
- Thanks Chris, the difference in my case is that rebooting the device yields the same issue ie. the vlans interfaces a...
-
- David Farrugia wrote:
> Any one else manage to reproduce this?
It regressed in 2.3 and was fixed there on a separ... -
- I can reproduce this at will on embedded alix2d13 running 2.2.6-RELEASE (i386):...
-
- ...
-
-
-
- Remove "you" personalizations.
-
- Remove "you" personalizations.
-
- Remove "you" personalizations.
-
- Remove "you" personalizations.
-
- Remove "you" personalizations.
-
- Remove "you" personalizations.
-
- Remove "you" personalizations.
-
- Remove "you" personalizations.
-
- Remove "you" personalizations.
-
- Remove "you" personalizations.
-
03:28 AM pfSense Packages Bug #6047 (Resolved): syslog-ng does not logrotate
- Hello,
I have syslog-ng 1.1.2_1 installed and configured to rotate my logs, but it obviously doesn't.
Checking fo... -
- (cherry picked from commit 7761dab55cdad2eb501958798f686eeabb4bcbcb)
-
- (cherry picked from commit a2f49238700c0ab70c282673c2b7b70e4aa9bc03)
-
- (cherry picked from commit 1aa48975e32679eb87510a6d3337b63022417a17)
-
- Please post to forum.pfsense.org or use one of our other available support resources. https://pfsense.org/support
... -
12:47 AM Bug #6046 (Not a Bug): Remote Desktop Frequent disconnects on Azure RDP
- Dear All,
All is well when i connect RDP to an Azure Windows server. But it frequently disconnects every 5 minutes... -
-
-
- This reverts commit 280d48529670d68622de0c8be057c086fd28b55e.
03/30/2016
-
-
-
- fixed
-
-
-
- fixed
-
- all fixed, confirmed working on multiple systems. Will leave to feedback to check once it's in a snapshot.
-
- fixed
-
12:28 AM Bug #6042 (Feedback): Fatal error creating queues in traffic shaper settings
- Fixed! I missed this before, thanks!
-
- fixed
-
-
-
-
-
- Remove "you" personalizations.
-
- Remove "you" personalizations.
-
- Remove "you" personalizations.
-
- Remove "you" personalizations.
-
- Remove "you" personalizations.
-
- Hit a situation last night that seems like it might be rare but worth accounting for in the future: I updated a VM to...
-
- Remove "you" personalizations.
-
- https://github.com/pfsense/FreeBSD-ports/pull/88
-
- Fixes the shaper setup on fresh installs.
Ticket #6042 - 04:58 AM Revision fcac6e87: Bring back radvd start/stop to carpmaster/backup. Ticket #6043
- 04:39 AM Revision c0509674: Bring back rainterface, add config upgrade to convert to new _vip format. Ticket #6043
-
01:11 AM Bug #6039: Using DNS Lookup to create IPv6 alias
- Not sure if it is useful, but here is how I made it.
I am runnind a bind with ipv6 and ipv4 entries. In the dns look...
03/29/2016
- 09:16 PM Revision bdd284c3: fix style
-
- The rainterface field in services_router_advertisements.php lost its rainterface field.
The rc.carpmaster/backup ... -
07:52 PM Bug #6042 (Resolved): Fatal error creating queues in traffic shaper settings
- My version: 2.3.b.20160329.1925_1
On a fresh install. When attempting to configure an interface for the first time... - 07:47 PM Revision 82833610: Add translations for group type selector
- 07:33 PM Revision d7689b2c: Clarify error message by including group type
-
- the root issue here is addressed in 2.3 because it runs in a different PHP instance, so the breakage won't spread. Th...
- 07:19 PM Revision 23d09a2e: Preserve group name on input error
- 07:19 PM Revision 79ed8ce0: Revised scope handling to allow user to set to remote or local, but only if it is not currently "system"
- 06:23 PM Revision 792adb45: Don't modify the group file for scope remote. Ticket #6012
- 06:21 PM Revision f788b1e2: Rather than renaming groups with spaces, mark their scope as remote. Ticket #6012
-
- Got some basic functionality working.. Pullrequest send for hopefully the first working version of the acme package o...
-
-
- works. Not sure how you'd end up with an IPv6 IP there currently given drill is doing an A record lookup, had to manu...
-
- Applied in changeset commit:97f42a0590c0bad9bd233b84d6f3173f6bd38c11.
-
- When creating an alias using the DNS Lookup (Diagnostics menu, the IPV6 address is created using /32 instead of /128
-
- All good. Group scope "remote" is omitted from /etc/group, group names containing spaces are config upgraded to remot...
-
- We already have <scope> on groups for system groups. It'd be best to extend that to user-defined groups so they're co...
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- Applied in changeset commit:475f0b6dbd9d93e96e58b4b54870c9aa760e99f7.
-
- Some users are getting the following error in their crash reports:...
-
- Applied in changeset commit:5c948e5422e0b8d3ce8063e431727271a7dae8a1.
-
- For RRD and DHCP lease backup a value of 0 signified "disable" on 2.2.x, and the code on the page still accounts for ...
-
- I've been runnning various tests about this problem, and have updated to 2.3-BETA built on Tue Mar 29 01:50:40 CDT 20...
-
- Remove "you" personalizations.
-
- Remove "you" personalizations.
-
- Remove "you" personalizations.
-
- Remove "you" personalizations.
-
- Remove "you" personalizations.
-
- Remove "you" personalizations.
- 05:31 AM Revision 88ec4c6f: Merge pull request #2800 from phil-davis/r1
-
- Build 2.3-BETA (amd64) Tue Mar 29 01:50:40 CDT 2016 resolves my shapper issue with the queues sum being reported grea...
-
- Weird, all the calls to SetRoot() were removed from code, I'll double check. Thanks.
-
01:38 AM Bug #5721: ALTQ fails with "bandwidth for q... higher than interface" in some circumstance
- This was fresh pfSense-CE-memstick-ADI-2.3-BETA-amd64-20160328-1625.img.gz after uploading a 2.2.6 config.
Configu... - 01:17 AM Revision a1ec93a6: Specify the zone in the PORTAL_ACTION URL. Ticket #6037
- 01:14 AM Revision 1cdd354e: Add brackets for clarity
- Add some extra brackets for clarity, rather than relying on the operator
precedence rules. IMHO this makes it more re... -
-
"System Domain Local Zone Type" option was added to DNS Resolver in pfSense 2.3. This allows setting "The local-z... -
12:11 AM Feature #6038 (New): Add ability to configure which interface is chosen for defining hostname IP in /etc/hosts
- It would be useful to be able to define from which interface this hostname to IP mapping is defined, in the event tha...
03/28/2016
-
-
- Whenever possible set it to 1Gb, if the sum of child queues if higher than 1Gb, set it the correct value so we do not...
-
- With P2P catchall disabled, the qLink queue (using 20% of root bandwidth) was not taken into account.
Decrease 20% o... -
- Now percentages are correctly handled.
Remove commented and unused old code supposed to do the same.
Ticket #5721 -
-
-
-
- An oddity in how lighttpd did redirects for captive portal meant the $PORTAL_ZONE$ in the portal page was optional, a...
-
-
-
-
- 06:19 PM Revision cda1c23c: Merge pull request #2798 from NOYB/System_/_Advanced_/_Notifications_-_Remove_Personalizations
- 06:19 PM Revision 350244ce: Merge pull request #2797 from NOYB/System_/_Advanced_/_Miscellaneous_-_Remove_Personalizations
- 06:18 PM Revision e1e9803a: Merge pull request #2796 from NOYB/System_/_Advanced_/_Networking_-_Remove_Personalizations
- 06:17 PM Revision a5dcf2f9: Merge pull request #2795 from NOYB/System_/_Advanced_/_Firewall_&_NAT_-_Remove_Personalizations
- 06:11 PM Revision a59cc5ef: Merge pull request #2794 from NOYB/System_/_Advanced_/_Admin_Access_-_Remove_Personalizations
-
- New fixes were committed to address the issues from previous commits.
Please test. -
04:23 PM Bug #4326: Limiters on firewall rules where NAT applies drop all traffic
- Albert Yang wrote:
> Limiters work with squid proxy(transparent and WPAD)+squidguard
> Hopefully soon with Nat refl... -
- Limiters work with squid proxy(transparent and WPAD)+squidguard
Hopefully soon with Nat reflection :)
Thanks to R... -
- Thanks... I sent Steve a message a few mins ago to ignore those comments... Sorry! :)
-
- Resolved is a closed status, BBcan.
-
- This can be closed.
-
- This can be closed.
-
- This can be closed.
-
- This can be closed.
-
-
-
- No, read the other ticket and keep the discussion on the forum until something can be definitively identified.
-
- So, I have to start packages manually every time router restarts? That's nice!
-
- Duplicate of #6001
-
- pfSense 2.3.b.20160328.0641.
-
- The subject do not start after reboot. Logs are "clean".
-
- assigned for eval (this thing is 5 year old)
-
- seems outdated now. Close? assigned to Pingle
-
- not sure that we shouldn't just close this. Assigned to cmb.
-
- Assigned to Steve for eval
-
- Ermal -> Steve Beaver
-
- assigned to Renato for eval (maybe we already fixed this?)
-
-
- Duplicate of #6001
-
- The subject do not start after reboot. Logs are "clean".
pfSense 2.3.b.20160328.0641. -
- Looks good after a gitsync.
-
- Applied in changeset commit:205ae110403d6b9f6f73d31bbe148126b8f5dadf.
-
- Getting this on a recent snap that did not have problems on a snap from 2 weeks ago:...
-
- Thanks Phil.
-
- Remove "you" personalizations.
-
- Remove a bunch of "you" personalizations.
Typo and sentence spacing. -
- Remove a bunch of "you" personalizations.
-
- Remove a bunch of "you" personalizations.
-
- Remove a bunch of "you" personalizations.
-
- What you can do is, in the head of your custom captive portal page, add:...
-
- Great, no more 404 error logs! PR #2799 created :)
-
12:06 AM Feature #6033: ISO with enabled serial console.
- Chris Buechler wrote:
> You should be able to install from the serial memstick in that situation no problem.
I su...
03/27/2016
-
- You should be able to install from the serial memstick in that situation no problem.
-
- Chris Palmer wrote:
> During the HD install process, if you choose "custom" install then the option to do embedded i... -
- there's a serial memstick for this purpose. The ISO generally fine without serial console with Proxmox too, though th...
-
During the HD install process, if you choose "custom" install then the option to do embedded install exists which t...-
- An iso installer that uses serial console, and installs pfsense with serial console enabled by default would make it ...
-
09:51 AM Feature #6032 (Resolved): Show PPPoE uptime on the Dashboard - Interfaces Widget
- Presently where it would show the NIC speed of an interface, PPPoE connections show nothing.
Think it would be qui... - 06:48 AM Revision 2f004405: Don't log 404s for captive portal. Ticket #6027
- 05:29 AM Revision 7ca5d812: Merge pull request #2788 from phil-davis/patch-3
-
- It's never had one, lighttpd just didn't log 404s there where nginx does. Turning this ticket into that issue since t...
- 12:57 AM Revision 3098bbc4: Merge pull request #2791 from NOYB/Interfaces_-_Section_Title_-_Reserved_Networks
-
- works, thanks Phil!
-
- looks good
03/26/2016
-
-
LOL I'm not running block private or bogons on LAN. I was just looking at the firewall rules display order vs. th... -
- Yeah the order isn't ideal there. You're probably the only person in the world running block private or bogon on LAN....
-
-
The anti-lockout rule appears to be to low in the processing order to be effective against inadvertently enabling ... -
- Thanks for the follow up, Greg.
Phil: yes, RELENG_2_3 switch over isn't done yet, but when we switch to that we'l... -
- I guess that commit https://github.com/pfsense/pfsense/commit/c5d8cbe07c9646f34afebd2610ac34bed090ced0 to master shou...
-
- Hi Chris!
You are correct. Now with your additional fix to background the commands everything is really smooth, thanks! -
- Deadlock confirmed fixed on another system this week by upgrading to 2.3. That's the issue this ticket started with, ...
-
- regressed in cc2cff0b, because of the counters shown on firewall_rules.php rely on those being static. Not a big deal.
-
- they no longer have unique tracker IDs as they should and used to.
-
-
@Mar 26 15:16:27 WAN Block ULA networks from WAN block fc00::/7 (12000) 192.168.2.21 192.168.2.42 ICMP@
Shou... -
- https://github.com/analogic/lescript has been working for a while. The part that needs work is making it into a prope...
- 09:15 AM Revision c5d8cbe0: Background all the ipsec commands run from status_ipsec.php to make sure they don't hang up the entire GUI. Ticket #5520
-
-
- More accurate section title.
-
- this appears to be sane now. I still need to verify some additional data sets.
03/25/2016
-
- Ought to keep a "last known good" rules.debug and apply that if it fails, and if that fails/is unavailable, maybe jus...
-
-
Pet peeve of mine that the system seems to be wide open by default until firewall rules get applied. Think I brou... -
- not a single firewall rule loaded after reboot..
There should be some failsafe default ruleset that prohibits acce... -
03:39 PM pfSense Packages Bug #3530: TinyDNS creates incorrect NS records
- Not particularly weird, it's really the only way to do split DNS on one box.
The difficulty is how TinyDNS could k... -
-
- Pushing this out a bit -- not a huge concern for now. If someone hits it they can easily work around it by adjusting ...
-
02:41 PM Bug #6029 (New): Unhelpful error messages in xmlparse*.inc and generally
- Although it shouldn't happen, a quick forum check shows that errors used to arise some years ago with bare GUI error ...
-
- Fat finger here, rolling back for now
This reverts commit 30d9ba51d194600ccb7d474d998c7491d0ba61b6. -
-
-
- The interfaces.inc.patch attached was generated against 2.3.b.20160325.07**, I have applied it to my system and all ...
-
- Word smithing to remove a bunch of personalization ("You").
-
- Well lets assume quite some people will still use a mouse to configure their firewall through its webgui..
The iss... -
- Having the same issues here, with Beta 2.3 from 22 March.
I'd be glad to test fixes :) -
- Hello,
Minor bug here, when opening the captive portal, there's no favicon.ico so nginx complains:
> nginx: 201... - 05:06 AM Revision 66d78ebc: Do not allow empty elements in IPv6 addresses
- Redmine #6024
Upstream pull request https://github.com/pear/Net_IPv6/pull/14
At this point in the checkIPv6 processin... -
-
- I also submitted a couple of other PRs to PEAR for:
a) Cleanup some comments (some of which are fixed in the pfSense... -
- Proposed fix for PEAR library: https://github.com/pear/Net_IPv6/pull/14
Same fix to the pfSense copy: https://github...
03/24/2016
-
- Phillip Davis wrote:
> All the rules that you quote look OK, so are you saying that the code that generates the rule... -
- All the rules that you quote look OK, so are you saying that the code that generates the rules is OK, but somehow the...
-
- Strange one here:
Testing Load Balancing it seems there is an issue with weights. Given that there are two WANs ea... -
- Ticket #5721
- 09:08 PM Revision ce798e75: Show the full OpenVPN verb debug range same as 2.2.x.
- 09:06 PM Revision 507df66b: Clarify OpenVPN verb level descriptions
-
-
-
-
Use a touch screen so you don't have to scroll to the bottom for access to the horizontal scroll bar. Just swipe ... -
- with some rulesets the 'action buttons' dont show on the screen, so first need to scroll down, then right, then back ...
-
- Net_IPv6::checkIPv6 returns true where the IP ends or begins in : in that case. It's always done that.
Reported u... -
- Source and destination in webgui are both set to 1234:5678:90AB:CDEF:1234:5678:90AB:CDEF: please notice the last col...
-
- What is the actual IP address entered in the GUI?
And what is the actual rule found in /tmp/rules.debug that is fail... -
- Firewall rules, ip validation allows incorrect ip.
Webgui shows a error while rules are loaded..
There were error... -
- This change was reverted while I'm working on a proper fix.
Sorry for the breakage.
-
03:37 PM Bug #5721: ALTQ fails with "bandwidth for q... higher than interface" in some circumstance
- After making the wizard single Lan single Wan HFCS Scheduler type. Don't know if is related with this changes or not...
-
- Kicking this back open due to the problem above.
I'm tempted to make the LDAP/RADIUS group check both _ and ' ' wh... -
- Changing the group names with spaces to underscores breaks some working setups that relied on the groups to match ext...
- 01:57 PM Revision 84400156: Merge pull request #2787 from NOYB/HTML_Compliance_-_Firewall_/_Rules
-
01:34 PM pfSense Packages Bug #6023 (New): Traffic Shaper (pfsense 2.3) Suricata V3.0 Inline Mode Operation
- Gentleman:
Bill Meeks asked that I describe the issue. I have Pfsense 2.3 (beta) installed with the latest version... -
09:11 AM pfSense Packages Feature #6022: Consider MLVPN for bonded VPN
- Right - I've been looking for an open-source equivalent of Peplink's Speedfusion for some time, and MLVPN is just the...
-
- +1 for this functionality, whatever the actual solution used.
There are cases where a client office wants VPN conn... -
- In a few different situations, I've had clients require Peplink's Speedfusion for multiple-link VPN aggregation betwe...
-
- Stilez y wrote:
> And so it was. Thanks! I guess not a bug as it won't affect regular upgraders? Worth putting in no... -
- And so it was. Thanks! I guess not a bug as it won't affect regular upgraders? Worth putting in notes maybe?
-
- Error: Duplicate ID frrfc1918.
<tr id=frrfc1918>
03/23/2016
-
- Spotted by: Jorge Oliveira
Ticket #5721 -
-
- It was sorting alphabetically, instead of numerically, before calculating the percentile. It sorts appropriately now ...
-
- I have made a "huge" PR that may fix the problem.
See: https://github.com/pfsense/pfsense/pull/2785/files
It needs ... -
- Also getting this when running through the wizard on a different system:...
-
- That commit seems to have broken one of my test setups that I've noticed so far, in a rather fatal way (skips most of...
-
- 11:52 AM Revision 179196e4: Merge pull request #2781 from jlduran/fix-openvpn-client-typo
- 11:51 AM Revision 773d778b: Merge pull request #2780 from NOYB/HTML_Compliance_-_Vertical_Align
- 07:44 AM Revision b2e51160: Improve handling of source-hash key
- - Store the source-hash key in its own config field.
- Validate the provided source-hash key. Check that hex string i... - 07:07 AM Revision a7a430b8: Fix OpenVPN client additional options typo
- Should read client instead of server. Also remove the `push` example.
-
- pkg.php and functions.inc
- 05:40 AM Revision 8557d323: Add paren here for clarity, suggested by Phil Davis.
-
- If the bandwidth is not set the speed of root queue is set by media status.
In this case a ruleset which contains qu...
03/22/2016
-
- The correct fix is specify the root queue bandwidth in GUI.
This makes the ruleset functional with any kind of med... -
- guessing that's a system you upgraded before the full PBI removal fixes were put in place. run: ...
-
- Failed reinstall when initial; status was "configured but not installed" and "!". System is current 2.3b.
pkg manage... - 07:57 PM Revision af85fb0c: Remove ssl_stapling. Ticket #6020
- 06:32 PM Revision 162dfff9: One too many "!" in the "Advanced options" button javascript caused the Link parameters to be always hidden
-
-
- Thank you!
-
- that's more relevant for public web servers (which is where that got copy/pasted from), removed.
-
- Reviewing @/var/log/nginx-error.log@ I found the following message:
> "ssl_stapling" ignored, no OCSP responder UR... -
-
- Jose Luis Duran wrote:
>
> It used to "work" (as in the same way IPv4 does) in 2.2.x
No, ovpn-linkup has never ... -
- Thanks!
It used to "work" (as in the same way IPv4 does) in 2.2.x -
- I added a CSV export option so we can double check the numbers if you want to give that a shot.
-
-
10:03 AM Bug #5990: AES-GCM should be an allowed encryption algorithm for IKEv2 in P1
- strongswan also got a test configuration using GCM in both "IKE" and "ESP" parameter
https://www.strongswan.org/test... -
-
-
- Should have some sleep, forgot to mention essential:
Running 2.3-BETA (amd64) built on Tue Mar 22 02:17:00 CDT 2016 -
- I'm running captive portal too, which works great.
If I happen to disable transparent proxy and reboot pfSense, ever... -
- Hello,
Strange problem here. I'm running Squid + squidguard in transparent mode.
Everything works find until I re... -
- Text Align & Background Color
-
- New way to repolicate.
Establish ipsec.
Reboot box A and wait 15 seconds (needs to be 100% down).
Now on box B dis... -
- I can replicate this everytime I do step 1 and 2 from above post.
So this is definitly not fixed. -
- Hi!
It still happens for me, I can`t always replicate. restarting php brings webgui back.
I have 2 pfsenses.
W... - 03:33 AM Revision c640d60e: Fix syntax error in diag_traceroute
- The semi-colon is not needed here.
Reported by forum: https://forum.pfsense.org/index.php?topic=108643.0 - 02:44 AM Revision 54bbb646: Don't log to filter.log when local logging is disabled. Ticket #6018
- 12:47 AM Revision a337e809: Have recovery mode go to a shell as intended.
03/21/2016
- 09:57 PM Revision 5de2f30e: Merge pull request #2774 from heper/patch-1
-
-
- fixed
-
- The option to disable local logging skips filter.log.
- 08:49 PM Revision 9b48e538: Fixed #6017
-
-
-
-
-
- thanks
-
- It turns out "outblock6" was missing and might have thrown things off. I fixed that issue and it may have fixed the 9...
-
- post-upgrade fixed too.
-
- Looks good after gitsync and re-test.
-
03:51 PM
Bug #6017 (Feedback): system_gateway_groups_edit.php: Gateway group that includes a deleted gateway in the first entry becomes uneditable
- This was a combination of a old bug that continued to display group members that no longer exist, and a newer one tha...
-
- If a gateway group has a deleted gateway in the first position, no gateways are displayed when editing the group:
... -
- 01:56 PM Revision 91170f75: Bump default config ver to 14.8
-
- it never has populated the v6 gateway. Judging by my perusal of the OpenVPN bug tracker as part of #5835, there are i...
- 12:37 PM Revision 2ac8c295: Merge pull request #2773 from NewEraCracker/small-php-js-tweaks
- 12:36 PM Revision 6402307c: Merge pull request #2772 from NOYB/HTML_Compliance_-_Diagnostics_/_Test_Port
- 12:35 PM Revision c7e2c3e8: Merge pull request #2771 from stilez/patch-20
- 12:34 PM Revision 002fc0d0: Merge pull request #2769 from phil-davis/btnattr
- 12:33 PM Revision f15d0e1a: Merge pull request #2768 from phil-davis/patch-3
- 12:32 PM Revision 965ff2a7: Merge pull request #2767 from NOYB/HTML_Compliance_-_Firewall_/_Schedules_/_Edit
- 08:51 AM Revision 28e3d579: Echo boolean value instead of string
- Prior to this change, code would echo an empty string if false and 1 if true. In all other files, with similar code, ...
-
- Error: Start tag seen without seeing a doctype first.
Expected e.g. <!DOCTYPE html>.
Error: Stray doctype.
Error: Str... -
-
- Code loops through all return values of get_possible_traffic_source_addresses(true) to create a list of key=>descript...
Also available in: Atom