Activity
From 04/12/2016 to 05/11/2016
05/11/2016
-
11:52 PM Revision e7f9443c: Miscellaneous Textual Corrections - Services NTP PPS
-
10:50 PM pfSense Packages Bug #6346: Squid Proxy Server Service randomly stops
- this is everything before the restart
May 12 10:48:09 check_reload_status Syncing firewall
May 12 10:48:09 php... -
10:32 PM pfSense Packages Bug #6346: Squid Proxy Server Service randomly stops
- is there anything in the system log (Status>System logs) when it fails to start under Status>Services?
-
- I dont know how to get better logging for squid but this is everything in the cache file
2016/05/12 10:28:48 kid1|... -
- best to start a forum thread so others can help pinpoint the specific cause and whether it's actually a bug. Impossib...
-
- Squid Proxy Server Service stops from time to time and will not start from the services tab, requires a restart of th...
- 10:07 PM Revision 807e3bfc: Tweak upgrade - Remove unused code and document changes better
- This will ensure a smooth upgrade for those running config 15.4 to any next version.
- 10:07 PM Revision 586f5681: Merge pull request #2955 from NewEraCracker/upgrade-code-tweak
- 09:33 PM Revision 6c6e8e34: Prefer index.php over index.html where both exist.
- 09:32 PM Revision 3a643eb8: Prefer index.php over index.html where both exist.
- 08:49 PM Revision 374f8c51: Tweak upgrade - Remove unused code and document changes better
- This will ensure a smooth upgrade for those running config 15.4 to any next version.
-
08:07 PM Bug #6343: Old configs have interfaces with IPv6 link local addresses in the config
- Yep, fair enough. If tgharold in the forum can explain the history of his system so we can understand how FE80 got in...
-
- We've never set anything other than user-defined input there. The described config wouldn't pass input validation in ...
-
- It has been reported that ipaddrv6 tag for an interface has just "FE80" in it in some pre-2.3 configs:
https://forum... - 07:15 PM Revision cb6c20a9: Miscellanous Textual Corrections - Add missing dots, normalize case
-
06:37 PM Revision 9b7cfb3f: Only execute remote search operation on first call of get_pkg_info(), this should fix #6177
-
-
-
-
- that appears to be 2.3.0, as the 2.3.1 URLs would have 2_3 not 2_3_0 in them. Is that definitely 2.3.1? Looks like a ...
-
02:01 PM Bug #6345 (Duplicate): boot fails due to "update -f" loop
- When internet connectivity is unavailable, pfsenese 2.3.1 will not boot due to 'update -f' failing and retrying indef...
-
- Applied in changeset commit:24d2e48271a6b48227268de9216edd66572ed77c.
-
- There were some at least somewhat relevant changes to that in 2.3.1, particularly with having a separator at the bott...
-
11:00 AM Bug #6344 (Resolved): Firewall rules being deleted when separators are added
- I'm seeing an issue where separators are causing rules to disappear. Doing a config restore removes the separators an...
- 12:34 PM Revision 48d321ca: Miscellanous Textual Corrections - Add missing dots to phrases
- (cherry picked from commit e4c7d45fc7a294817325354e13f4d5bc4987739e)
- 12:34 PM Revision 4296459a: Merge pull request #2953 from NewEraCracker/textual-corrections
- 12:33 PM Revision 289233b9: Merge branch 'master' of git.pfmechanics.com:pfsense/pfsense
-
- (cherry picked from commit 1c4e2ed053a04f7768a21129171a27e6804dbb0c)
- 12:31 PM Revision 61a0217e: Merge pull request #2950 from NOYB/Miscellaneous_Textual_Corrections_-_Services_Dynamic_DNS
-
11:43 AM Bug #6340: fsck hangs boot in background, fails to produce any action, resulting in broken firewall
- Chris Buechler wrote:
> doktornotor: welcome back. What's your wireless config like on there? What type of card and ... -
07:08 AM Bug #6340: fsck hangs boot in background, fails to produce any action, resulting in broken firewall
- Chris Buechler wrote:
> He's referring to the web installer, which was removed in one of the 2.2.x versions.
Ah, ... -
- I struck out on attempting with various wireless configs in a few dozen power cycles. Also tried writing out a slew o...
- 08:43 AM Revision e4c7d45f: Miscellanous Textual Corrections - Add missing dots to phrases
-
07:28 AM Bug #6154: Notices are displaying raw html (interpreted by the browser), potential XSS vector
- Changing ACB directly was the quickest way to get a fix for everyone without updating pfSense itself, but looking thr...
-
- ACB is good now. But head.inc probably should sanitize $id and $notice unconditionally. Any reason we couldn't always...
- 06:56 AM Revision 3f398f0d: Hide CIDR for alias types that do not use it
- Suggested/discussed in forum
https://forum.pfsense.org/index.php?topic=111593.0 - 06:56 AM Revision f212adc8: hideMask only modify input-group on first parent
- Otherwise when unhiding (e.g. for Network type alias), input-group gets
added to every div up the DM hierarchy and th... - 06:52 AM Revision 4d6914a1: Merge pull request #2952 from phil-davis/hidemask
-
06:00 AM Bug #5993: dhcp6c not started until an RA received
- Chris Buechler wrote:
> David Wood wrote:
> > The precautionary principle suggests that changing the current behavi... - 05:52 AM Revision 60ec2d7a: Rename OSPF and System Patches packages in pre_upgrade_command. Ticket #6118
- 05:51 AM Revision ab2060d9: Rename OSPF and System Patches packages in pre_upgrade_command. Ticket #6118
- 05:30 AM Revision 6086293b: Revert "Add config upgrade code to update package names. Ticket #6118"
- This reverts commit 297ace668e4a4ffbf1fb1581e7c765e2ed158e29.
- 05:29 AM Revision 538a3c04: Revert "Add config upgrade code to update package names. Ticket #6118"
- This reverts commit 291fad43870bdb39ef0ab32125b022e268a29cf7.
- 04:19 AM Revision 685a06f2: Hide CIDR for alias types that do not use it
- Suggested/discussed in forum
https://forum.pfsense.org/index.php?topic=111593.0 - 04:14 AM Revision 01142f51: hideMask only modify input-group on first parent
- Otherwise when unhiding (e.g. for Network type alias), input-group gets
added to every div up the DM hierarchy and th... - 03:55 AM Revision 381b8f1c: Check for is_array here to avoid possible issues if the config.cache is invalid. Adapted from PR 2925
- 03:53 AM Revision adb6925e: Check for is_array here to avoid possible issues if the config.cache is invalid. Adapted from PR 2925
- 03:44 AM Revision 5925b419: Spaces->tabs
- (cherry picked from commit e1caefc74fba6cbbb680288c1f8d930e4f0ad474)
- 03:42 AM Revision e1caefc7: Spaces->tabs
-
- this works both in GUI and CLI.
-
- that's #6296
-
02:57 AM Bug #6342 (Duplicate): Pf-Sense use lots of CPU time and all connections is down
- Hi,
I have many Pf-sense firewalls in VM-ware esx-i 5.5 enviroment. I Upgrade all Pf-senses to 2.3 version.
I ha... -
- What I committed takes things back to 2.2.x and earlier behavior, plus retaining the fix for #5952. That's confirmed ...
- 03:16 AM Revision 25a96ffb: Added hideMask() function
-
- all works now
-
- looks good, thanks!
-
- fixed
-
- that works. leaving to test once it hits a snapshot.
-
- the config upgrade code worked, or would have if it were actually in the config at that point. The pre_upgrade_comman...
05/10/2016
-
-
- doktornotor: welcome back. What's your wireless config like on there? What type of card and config. Not that it shoul...
-
- Kill Bill wrote:
> The only stable thing for me was ZFS - which, sadly, ain't doable any more with 2.3
Why wouldn... -
- Yeah, I understand it's not recommended or supported or whatever, however the stable solution (which was in place whe...
-
03:59 PM Bug #6340: fsck hangs boot in background, fails to produce any action, resulting in broken firewall
- Kill Bill wrote:
> No, this was not any old upgraded install. Happened on a fresh 2.3 full install with SU+J being... -
- Renato Botelho wrote:
> So you have SUJ off, but you have Soft Updates enabled, right? Did you disabled SUJ for any ... -
- Renato Botelho wrote:
> So you have SUJ off, but you have Soft Updates enabled, right? Did you disabled SUJ for any ... -
- So you have SUJ off, but you have Soft Updates enabled, right? Did you disabled SUJ for any reason or is it an old in...
-
- Kill Bill wrote:
> it hangs reliably on every second reboot, no matter the troubleshooting steps above. It's repeata... -
- Jim Pingle wrote:
> He's alive! :-)
Yeah, indeed... :-)
> This sounds like a different failure mode with poten... -
- He's alive! :-)
This sounds like a different failure mode with potentially the same root cause as #5592, which app... -
-
- Hi, guys! (Yeah, still alive, eventually might get back to fixing something in pfSense. :-P)
Meanwhile - this fsck... -
- works
-
- Applied in changeset commit:16203db3766d694c22a49ff25353e1109bf64c6d.
-
- When editing a Mobile P1, the "Mobile Clients" tab is highlighted, though it's not really a function of that tab.
... -
-
-
07:04 PM Bug #6177: pkg update checking with no Internet access kills web GUI
- Steve Beaver wrote:
> Which widgets are enabled on you dashboard?
- System Information
- Interfaces
- Firewall ... -
03:56 PM
Bug #6177: pkg update checking with no Internet access kills web GUI
- Which widgets are enabled on you dashboard?
-
- Disabling the 'automatic dashboard auto-update check' at /system_update_settings.php seems to mitigate the issue for ...
-
- something is wrong in your network, probably an IP conflict from the sounds of that.
- 01:10 PM Revision d515da75: Adding missing spaces between punctuation
- (cherry picked from commit 0e63fe1f372584a03a6c84aeb6268fde8de75b3a)
- 01:10 PM Revision 0161bbb4: Merge pull request #2949 from NewEraCracker/textual-corrections
-
- (cherry picked from commit f3817766671915583074465aa725152c7a293568)
- 01:09 PM Revision da1fdf78: Merge pull request #2948 from NOYB/Miscellaneous_Textual_Corrections_-_Services_Load_Balancer
- 09:39 AM Revision 0e63fe1f: Adding missing spaces between punctuation
-
02:52 AM Bug #6099: igmpproxy does not recognize upstream interface
- For testing I copied the igmpproxy from version 2.2.6 to latest pfsense Version. Then I had to Link /tmp/igmpproxy.co...
-
12:18 AM pfSense Packages Bug #6339 (Resolved): OpenVPN Client Export package option for "Use Microsoft Certificate Storage" does not specify which certificate to use
- Just spent a while tracking this down, please disregard if it's a PEBKAC issue. :)
I tried the option in the clie...
05/09/2016
-
-
11:20 PM Bug #6338 (Not a Bug): virtual ip
- hi
i had a pfsense by wan ip address:172.16.1.10 and GW:172.16.1.11
i add 6 more IPs(x.x.155.129/32,x.x.155.130/32,... -
10:16 PM Revision 533f5895: theme Compact-RED, added a few more tweaks to look a bit more aligned.
- (cherry picked from commit ec18e589f123595c34cf8e1a84313394bb909250)
- 10:15 PM Revision 974dee46: Merge pull request #2947 from PiBa-NL/css_compact_red
-
- 09:13 PM Revision 96122f60: just exit for v6, gateways setup above.
- 09:13 PM Revision 07b45576: just exit for v6, gateways setup above.
- 09:11 PM Revision 0eb97c7c: fix booting check
- 09:10 PM Revision b8735779: fix booting check
- 06:45 PM Revision ed80365b: Add Compact-RED theme and update system.php to sort available themes by pfSense, then BETA, then user supplied themes.
- (cherry picked from commit 6a5c6661960e1cd39e3caf66a3caaeb2678d27b1)
- 06:44 PM Revision 6a5c6661: Add Compact-RED theme and update system.php to sort available themes by pfSense, then BETA, then user supplied themes.
-
05:45 PM Bug #6285: Stability issue with w/ OpenVPN Server on pfSense 2.3
- Just to wrap this up. I had a chance over the weekend to install 2.3 from the iso and restore my configuration. Ope...
-
- This reverts commit 4cbe0b132f0d60b71a20052fae1155210a1f5a16.
-
- This reverts commit 32f0ee884632aba5ab38485a7c25c190bb5bccce.
-
-
04:52 PM pfSense Packages Bug #6116: pfBlockerNG doesn't automatically update after firmware upgrade, meaning that unbound doesn't start and users don't have internet connection
- Devs:
Do you have any concerns with restoring the DNSBL database in the **/var/unbound** folder on **reboot**... -
- - Retire system_console_configure()
- Replace above call on rc.bootup by setup_serial_port() -
- - Retire system_console_configure()
- Replace above call on rc.bootup by setup_serial_port() -
- This reverts commit 1831d3486317a6ac8a8bfd034bb133f9b0dc55e7.
-
- (cherry picked from commit 0cb4d4a63585f500329616be6ee2bbb2274975c6)
- 01:23 PM Revision 54f03f07: Merge pull request #2946 from NOYB/Miscellaneous_Textual_Corrections_-_Services_DNS_Resolver
-
- (cherry picked from commit 3d7aaa1a3fac45271bfa50190496be6d70d7f296)
- 01:22 PM Revision 7fc5435b: Merge pull request #2945 from NOYB/Miscellaneous_Textual_Corrections_-_Services_DNS_Forwarder
-
- - Do not include /etc/ttys on base package, it's not supposed to be
replaced during upgrade
- Create a script /etc/rc... -
- - Do not include /etc/ttys on base package, it's not supposed to be
replaced during upgrade
- Create a script /etc/rc... -
12:45 PM Bug #6120: Password protect, baud on console menu not initially set post-upgrade on nanobsd and 2.3->2.3
- Thanks, I can confirm working...
-
- Greg M wrote:
> See attached screen..
> This happens on latest snap, maybe related?
Yes, I reverted a commit on ... -
- See attached screen..
This happens on latest snap, maybe related? -
- Applied in changeset commit:4cbe0b132f0d60b71a20052fae1155210a1f5a16.
-
11:23 AM Bug #6337 (Closed): Pfsense 2.3 on MS hyperV
- Pfsense 2.3 looses network connectivity on Hyper-V.
After upgrade from 2.2.6 to 2.3 the network connectivity got los... -
08:54 AM Feature #6336 (Duplicate): link to release notes on update page
- On the system update page where it lists the current version, new version, and the "confirm" button, there should be ...
-
01:19 AM pfSense Packages Bug #6305: Quagga problems updating routes / mistakenly showing "kernel"-routes while they are not
- for me, downgrading to older version seems to solve all issues. no confirmation if this is the case for the OP of the...
05/08/2016
-
-
-
01:21 PM pfSense Packages Todo #6190: Convert and add NUT package to pfsense 2.3
- Looks like feature implemented and it works for me at least.
- 08:14 AM Revision 96ca32a2: Update L7 config upgrade code removal. Only file notice if it was actually in use, otherwise it just confuses people.
- 08:14 AM Revision ad9b77f9: Update L7 config upgrade code removal. Only file notice if it was actually in use, otherwise it just confuses people.
- 08:11 AM Revision 297ace66: Add config upgrade code to update package names. Ticket #6118
- 08:10 AM Revision 291fad43: Add config upgrade code to update package names. Ticket #6118
-
07:32 AM Todo #6332: Upgrade encryption options to cover current range of recommendations
- Also noting
* captiveportal.inc uses MD5 to generate randomness for the session id (and probably shouldn't?)
* aut... -
04:37 AM Bug #6335: Status > IPsec shows both connected and disconnected with Split Connections enabled
- Appears to require a complete stop and restart of strongswan after enabling or disabling split connections to toggle ...
-
- If an IPsec connection has split connections enabled, it shows both connected and disconnected in Status > IPsec. Dis...
-
-
-
-
- Add key lengths to user manager options
-
-
- Large keys are not "slower to use" in many cases, since they are only used to validate or set up a session. An ongoin...
-
-
- ...and add some useful info to guide the user.
-
- Add key lengths to the OpenVPN options, for asymmetric keys of size 3072 (for current use), 7680, 15360 (for long ter...
-
- pushed config upgrade code to rename those packages in the config. It looks like OSPF and System Patches are the only...
-
- This is only an issue upgrading from 2.1.x (and likely earlier but haven't tried).
-
- It needs a way to differentiate 0 and n/a. Not sure how difficult that might be offhand.
-
- No data periods in monitoring are represented as 0 (zero). Skewing averages.
- 01:00 AM Revision d239edd1: Setup gateway monitors and exit in rc.newwanip(v6) if system is booting. Ticket #6186
- 12:59 AM Revision c4b5c8be: Setup gateway monitors and exit in rc.newwanip(v6) if system is booting. Ticket #6186
- 12:29 AM Revision adff3136: Log if rc.newwanip(v6) is called with empty interface.
- 12:28 AM Revision ef945b86: Log if rc.newwanip(v6) is called with empty interface.
-
-
The setup_gateways_monitor function is called multiple times during boot up by rc.boot, rc.newwanip, and rc.newwan... -
- The issue I turned this into is now fixed by fixing #6184.
M S: if you're still having issues permanently rw moun...
05/07/2016
-
- this isn't something Renato or I have been able to replicate. It does a pkg update before showing the GUI, and that w...
-
- Several packages, as well as base, have GUI where the user can specify a cipher, digest, or other encryption-related ...
- 10:10 PM Revision 55a9ca07: status_queues.php, default packet_s to 0 if it falls through to that point. Ticket #6329
- 10:09 PM Revision 6f069e92: status_queues.php, default packet_s to 0 if it falls through to that point. Ticket #6329
-
08:24 PM Bug #3450: DHCPv6 Lease Status shows no Leases
- Nonsense. Sorry to bother. Just had anactual lease com in. And it works.
-
- Hi,
See attached screen dump.
A lease file with a lease but nothing showing on the leases page.
Being an absolut... - 07:46 PM Revision f2c719c9: Experimentally fixed #6327
- (cherry picked from commit 54fc9503ff550d04d1253c41c1fd49da1b64c07e)
- 07:45 PM Revision 54fc9503: Experimentally fixed #6327
-
- (cherry picked from commit c3ebf3470402080bbddb709325611e7120eb3c0f)
- 07:08 PM Revision cb4300cb: Merge pull request #2941 from NOYB/Miscellaneous_Textual_Correction_-_Firewall_/_Shaper
-
- (cherry picked from commit 1fd8a5520602803108ef8bbb56b8ffd6493f2a00)
- 07:06 PM Revision 59bc4784: Merge pull request #2939 from NOYB/Miscellaneous_Textual_Correction_-_Firewall_/_Rules
-
- 05:49 PM Revision 0a52ea65: Fixed #6331
- (cherry picked from commit 7e653b50c4a25b045121c026cd09ac4e567c0c42)
- 05:48 PM Revision 7e653b50: Fixed #6331
- 05:43 PM Revision 413a52a0: Workaound fixes #6320
- (cherry picked from commit d1c57eb8e1699f36a3ccda53cef2e28b10eeca92)
- 05:42 PM Revision d1c57eb8: Workaound fixes #6320
-
- Another crash, another completely diff bt. ...
-
- the two backtraces: ...
-
01:32 AM Bug #6330 (Not a Bug): Freeze with
- I had two kernel panics in the past 20 hours after upgrading to a newer 2.3.1 version (2.3.1.a.20160506.0040). Stack ...
-
- fixed
-
04:56 PM Bug #6331: Unable to set speed and duplex on interface
- works for me
-
01:00 PM
Bug #6331: Unable to set speed and duplex on interface
- Applied in changeset commit:7e653b50c4a25b045121c026cd09ac4e567c0c42.
-
12:49 PM
Bug #6331 (Feedback): Unable to set speed and duplex on interface
- Fixed. Thanks for the report.
-
12:16 PM Bug #6331 (Resolved): Unable to set speed and duplex on interface
- I'm unable to set speed and duplex on interface. When i set it, the "apply changes" appears on top of the screen but ...
-
- Michael OBrien wrote:
>
> Still having this issue (running OpenBGPd + IPSec - transport phase 2 with GRE tunnels) ... -
11:25 AM Bug #6223: IPsec + OpenBGPD fails with "PF_KEY socket: No buffer space available"
- Chris Buechler wrote:
> I set it as committed on "shthead"'s system and it seems to be fine.
Still having this is... -
- Kay Ringmann wrote:
>
> What was changed in the new Release? I dont think i'm the only one with this Problem.
U... -
- I Did a Plain install, but the problem persists.
The behavior of listed Interfaces changes unpredictable if i Chan... -
07:16 AM Bug #6099: igmpproxy does not recognize upstream interface
- Kay Ringmann wrote:
> i read this. So I played a little around. It seems that it's depending from upstream interface... -
- didn't notice this, I duplicated it in #6329. it was fixed there
-
05:06 PM
Bug #6327: Alignment defect in forms
- Thanks for your fix. It was effective but I realized that it could be applied in a way that fixed alignment issues in...
-
- Your change break my PR https://github.com/pfsense/pfsense/pull/2940 :) which can be replaced by your fix
-
- it remains the checkbox that are not aligned for me :)
-
04:16 PM
Bug #6327: Alignment defect in forms
- It may, but lets see how this turns out while I research other possibilities.
-
- There's more, but I'm afraid of change ".col-sm-10" breaks the overall style, especially in the additional packages
-
02:50 PM
Bug #6327: Alignment defect in forms
- Applied in changeset commit:54fc9503ff550d04d1253c41c1fd49da1b64c07e.
-
02:49 PM
Bug #6327 (Feedback): Alignment defect in forms
- I have added some top padding to revise the vertical alignment but marked it as "experimental". If no anomalies arise...
-
08:34 AM
Bug #6327: Alignment defect in forms
- This particularly affects instances of the Form_Statictext() class but can be seen elsewhere as shown here. It affect...
-
- Hi,
Same problem on 2.3_1 - Tested on Safari
Thx -
04:57 PM
Bug #5999: IPv6 IP Alias prevents Track Interface from working with DHCPv6 and RA
- Another issue that seems to be related to this is that firewall rules using "LAN net" and similar are not obeyed if y...
-
-
- Works
!Sélection_017.png! -
12:50 PM
Bug #6320: pkg_mgr_install.php?id=firmware displays incorrect firmware version
- Work-around put in place pending revision of this section
-
12:50 PM
Bug #6320 (Feedback): pkg_mgr_install.php?id=firmware displays incorrect firmware version
- Applied in changeset commit:d1c57eb8e1699f36a3ccda53cef2e28b10eeca92.
-
- @Renato, for your reference yesterday evening i was testing and discussing with Chris with a fresh installation of pf...
- 10:11 AM Revision af06931c: Add nut package to poudriere
- 10:11 AM Revision aec067d1: Add nut package to poudriere
- 10:11 AM Revision 5cfd5492: Add nut package to poudriere
-
- works
fixed in -src repo in:
4a578420216361b8acfb7296dd0b68c805e5121b
3938f6f800c9999a8a88141284b1841b71cd8af0 -
- all good.
-
- works, thanks Phil!
-
- fixed
- 03:00 AM Revision 88377787: Don't divide by 0. Ticket #6329
- 02:59 AM Revision 17be206e: Don't divide by 0. Ticket #6329
-
- works
05/06/2016
- 11:46 PM Revision 8ad194c0: Clear xmlrpc.lock when restarting php-fpm. Ticket #6328
- 11:46 PM Revision 9fabe2c7: Bump net.inet.raw.recvspace and net.inet.raw.maxdgram by default. Ticket #6223
- 11:44 PM Revision 48a8235e: Bump net.inet.raw.recvspace and net.inet.raw.maxdgram by default. Ticket #6223
- 11:43 PM Revision 96a399cb: Clear xmlrpc.lock when restarting php-fpm. Ticket #6328
-
- merged, thanks BBcan.
-
- I have posted a PR https://github.com/pfsense/FreeBSD-ports/pull/125 for this issue.
When $pfb['interval'] is ... -
- Pushed a fix to make sure it's an array before it hits that line. BBcan might want to check that thread to find root ...
-
- I misread that as it having been fixed previously. Still being reported as an issue.
https://forum.pfsense.org/inde... -
- fixed
-
- status_queues.php can divide by zero with $bigger_stat.
-
- It happens on full installs going from 2.3->2.3.1 as well, just not from 2.2.x or earlier to 2.3.x.
-
- Greg M wrote:
> Hi!
>
> It happens also on full install just tested it.
> I have to save advanced settings then ... -
- Hi!
It happens also on full install just tested it.
I have to save advanced settings then it prompts for login (o... -
-
- fix pushed
-
- If anything prevents unlock($xmlrpclockkey); in xmlrpc.php from being hit, the config sync will stop functioning unti...
-
-
-
-
- Hi,
I have a small general misalignment in forms (see attachments)
* Current Base System 2.3.1.a.20160505.1243
... -
-
-
- It's much better, works perfectly for me
-
-
-
-
-
- Adam Thompson wrote:
> I think I have two firewalls still running 2.2.x, so I should be able to test in a "real worl... -
11:44 AM Bug #6137: Old package inc files may cause problems post-upgrade
- I think I have two firewalls still running 2.2.x, so I should be able to test in a "real world" scenario.
Can yo... -
- Applied in changeset commit:18bd1ccb8770fc656e80d0cdc0c8900b8a960a18.
-
- It was my fault, I forgot part of the code commented out. Fixed now.
-
- The upgrade log shows it doing the package uninstall as configured, and it's correctly reinstalled post-upgrade, but ...
-
- pkg.php displays lists of items saved by some packages. In the list, the item data entered by users is printed withou...
-
07:27 AM Bug #6304: Incorrect Queue assigment of ESP traffic with DSCP floating rule
- Ok, I never paid attention before.
Thanks for your answer.
You can close this topic. -
- If you have an existing state for the traffic, it won't utilize new shaper rules until the state is killed or expired...
-
- In fact, it is working now but I needed to shut my link for few minutes to activate correct assignment, is it normal?...
-
- Duplicate of #6134, already fixed on 2.3.1
-
- I have a routing group CMST_Failover on which I have my main comcast router and an LTE fallback modem attached as WAN...
-
- Chris Buechler wrote:
> I setup a test with 2.2.6 with Quagga OSPF and System Patches installed, upgraded it to 2.3.... -
- I setup a test with 2.2.6 with Quagga OSPF and System Patches installed, upgraded it to 2.3.0 via auto-update (thinki...
- 06:54 AM Revision 4bb39810: Add authorizedkeys to exclusion in status.php, and fix. While these are public keys and hence not sensitive, they're also of no diagnostic value. Suggested-by: Denny Page
- 06:53 AM Revision abb48814: Add authorizedkeys to exclusion in status.php, and fix. While these are public keys and hence not sensitive, they're also of no diagnostic value. Suggested-by: Denny Page
- 06:14 AM Revision 0972379a: Update diag_nanobsd.php now that permanent rw is default. Ticket #6184
- 06:13 AM Revision 3bb5e399: Update diag_nanobsd.php now that permanent rw is default. Ticket #6184
-
05:42 AM Bug #6296: Interface dies with IPsec and SMP
- Hi,
I hit also the troubles. 100% kern, I ran ddb by hand disabling ddb.conf scripts to make a minidump and to try... -
04:22 AM Bug #6296: Interface dies with IPsec and SMP
- This has been happening to me, the OUTBOUND traffic on the LAN interface continues to work but the driver or somethin...
- 04:52 AM Revision 8e23a630: Only try to chown files that still exist. Ticket #6131
- 04:52 AM Revision 96860e98: Only try to chown files that still exist. Ticket #6131
- 04:29 AM Revision aeb81f5b: Fix #6322 Allow expanded forms of alias entry
- Forum: https://forum.pfsense.org/index.php?topic=111361.0
- 04:29 AM Revision 176a139b: Merge pull request #2937 from phil-davis/patch-1
-
- The GUI should be as described so it's more clear what you're actually configuring.
-
03:38 AM Feature #6324 (Closed): Improve IKEv2 multiple traffic selector per SA configuration GUI
- On IPsec IKEv2 tunnels, by default all defined Ph2s are configured within a single SA.
This could end up with undesi... -
- fixed
-
- What's been done so far all works and definitely helps.
But, pkg processes will still pile up and hang the GUI, i... -
- all works. Thanks Phil!
-
- works
- 02:05 AM Revision aa3890c7: Fix #6322 Allow expanded forms of alias entry
- Forum: https://forum.pfsense.org/index.php?topic=111361.0
-
- I think we've narrowed this down via email to something traffic shaping config-related rather than a bug.
-
- fixed
-
-
- I set it as committed on "shthead"'s system and it seems to be fine.
-
- pushed clean up of diag_nanobsd.php now that things are always rw. That should take care of this for 2.3.1
- 12:54 AM Revision f8e730bb: Remove bcrypt-hash from status.php config dump. Noticed by Denny Page
- 12:54 AM Revision ecf8ef64: Remove bcrypt-hash from status.php config dump. Noticed by Denny Page
-
- patch broke the build of cryptostats so was reverted.
-
- looks good
-
- works
05/05/2016
-
- fixed
-
- works
-
- duplicate of #6305
-
11:53 PM Bug #6323 (Duplicate): Quagga ospf doesn't work with static routes
- OSPFd is ignoring static routes in zebra.conf.
It began after router has been updated to v2.3(Quagga_OSPF ver. 0.6.... -
- happened upon this. With RAM disk enabled, there can be file changes between the glob and chown. Fix pushed
- 11:44 PM Revision a9626fd1: Display Ports/Address based on tab name
- (cherry picked from commit bef0e5ae3ec592d0e28b0b7bbb49591cce7cd218)
- 11:43 PM Revision bef0e5ae: Display Ports/Address based on tab name
-
- Applied in changeset commit:aa3890c75ef104597664b1ba1d2d326aaa1e25f7.
-
- merged, thanks Phil!
-
- Pull Request https://github.com/pfsense/pfsense/pull/2937
-
- In 2.2.* it was possible to enter various strings into the "address" field of an alias detail line. The data would be...
-
- fix pushed
-
- (cherry picked from commit 51decff4c2a9da179773b32f951fb73ee967866a)
- 08:55 PM Revision 46933bc3: Merge pull request #2936 from NOYB/Miscellaneous_Textual_Correction_-_Firewall_/_NAT
-
- 08:35 PM Revision 7c4d5b9b: Revert "Added option to System > General Setup > webConfigurator to change the title of the Help menu in the navbar to either the system hostname or fqdn."
- This reverts commit e3c5006b819063863f44fd2314dd635bd26e8a8c.
-
08:29 PM Revision e3c5006b: Added option to System > General Setup > webConfigurator to change the title of the Help menu in the navbar to either the system hostname or fqdn.
-
- that's by design, you don't want those mismatched.
-
-
-
04:04 PM Bug #6321 (New): Problem with connecting l2tp over ipsec from android and windows
- Hi,
Cannot connect to vpn l2tp over ipsec from android behide of NAT (Its working ok in same L2 network) (On this ... -
-
-
-
-
01:07 PM Bug #6295: Crash upon applying CODELQ to untagged parent interface when also applied to daughter VLAN
- I can confirm I have been fighting this issue too today, but with a dual (actually a triple) NIC ESXi host.
In my ... -
- Pi Ba wrote:
> Will it help for 'full' installs?
I couldn't reproduce it on full install. I had a 2.2.5 VM with s... -
- I'm testing full install right now and will let you know
-
- Will it help for 'full' installs?
-
- Applied in changeset commit:14277cd6a309f73a9339344d688e220d5f3cb0d3.
-
09:34 AM Bug #6314: pfsense 2.3 Captive Portal - no file loaded
- my previous post had a typo: I meant uppercase WIFI_TEST and non WIFI_ZONE, as everyone may have noticed.
The tests ... -
- Hi Jim,
thanks a lot for your hint.
As you notice, it seems the same bug as #6278.
My zone was defined all upper... -
- Note the differences in your zone name in the URL and in the form tag. Is your zone name actually all lower case or a...
-
- Hi Chris,
I tried to simplify the .js lib according to your suggestion, but the problem still persist to me.
I do... -
- same portal page works for me in Firefox on Ubuntu and Windows. Changing the js to just one line, "alert("test ok")",...
-
08:44 AM
Bug #6320 (Resolved): pkg_mgr_install.php?id=firmware displays incorrect firmware version
- The function pkg-utils.inc: get_system_pkg_version() replaces the base version strings with meta version strings if t...
- 08:21 AM Revision 0120cad8: Remove calls which rely in uninitizalized vars
- After analyzing implementations in RELENG_2_1 and RELENG_2_2, this code seems to be a left over after code rewrite
A... -
08:06 AM Bug #6319 (Resolved): DHCP6 DDNS tsig key missing from dhcpv6.conf for reverse zone
- Reverse v6 dynamic zone doesn't get updated despite having "Add reverse dynamic DNS entries." checked. Found out that...
- 07:15 AM Revision e4ea0073: This was right to begin with. Revert "Allow uppercase letters in is_unqualified_hostname as well."
- This reverts commit 3d5fb131796ba6d9c5d53efe77080d7ddb334f22.
- 07:14 AM Revision 8fdddd51: This was correct already. Revert "Allow uppercase letters in is_unqualified_hostname as well."
- This reverts commit 94ccdcb8a4d6f7789fd39c4b6e9876bb689de9a4.
- 06:25 AM Revision fcf77526: Flush link-local IPs so we do not get stale data and do not waste time deleting IP if it is already set to fe80::1:1
- 06:20 AM Revision 3ce8097f: Fix Redmine #6097
- Replace '/usr/bin/grep -vi warning' with '/bin/cat'
- 06:19 AM Revision 8f534d5d: Merge pull request #2922 from NewEraCracker/redmine-6097
- 06:03 AM Revision 94ccdcb8: Allow uppercase letters in is_unqualified_hostname as well.
- 06:03 AM Revision 3d5fb131: Allow uppercase letters in is_unqualified_hostname as well.
-
- 05:36 AM Revision a576ae5b: Merge pull request #2933 from NOYB/Miscellaneous_Textual_Correction_-_Aliases_Import
-
04:55 AM Bug #6318 (Resolved): IPsec dashboard widget causes GUI failure
- Since 2.3_1 the webconfigurator is continually being non responsive. Attempting to access my https website on port 44...
-
- works, thanks!
-
-
01:41 AM Bug #6317: vlan/track interface generates error "Can't assign requested address" during boot
- PR: https://github.com/pfsense/pfsense/pull/2934
-
- I have LAN interface that is a vlan and is configured to track my WAN interface. After upgrading to 2.3 I started see...
-
02:27 AM
Bug #6184: 2.3 NanoBSD issues with getting stuck read-only mounted
- Thanks. I just did a reboot, ran:
@umount -f /cf; fsck -t ufs -y /cf; mount -f -o rw /cf@
and tried an upgrade ... -
- Thanks for the follow up. I don't see an open bug in OpenVPN's bug tracker on that, it's worth opening one.
Maybe... -
- Issue fixed in 918f0a9469aa05a9300a25c2ca60e2be83411226.
That won't end up doing anything differently in 2.3.1 si...
05/04/2016
-
-
-
-
-
-
-
-
- I built a VM to do some additional testing with 2.3. I was unable to recreate the OpenVPN connection reset problem. ...
- 02:35 PM Revision d4af7f9e: Removed global variables used on the version 2.2
- 01:41 PM Revision 0cd22307: Fixed #6306
- Please enter the commit message for your changes. Lines starting
(cherry picked from commit 6cde850b8903f0330c5023f7... - 01:39 PM Revision 6cde850b: Fixed #6306
- Please enter the commit message for your changes. Lines starting
-
01:24 PM Bug #6311: pfSense 2.3 locking up
- Jim Pingle wrote:
> Are you using IPsec? Look at #6296 and see if that might be the same condition you are hitting.
... -
- Are you using IPsec? Look at #6296 and see if that might be the same condition you are hitting.
-
- Hi pfSense team,
since upgrading from 2.2.6 to 2.3 we have had a series of weird lock-ups on our pfSense clusters.
... -
- (cherry picked from commit a6a344d8dfad5f2b8199a0cef6c8f401f5e06db8)
- 12:17 PM Revision 2b8f21d0: Merge pull request #2930 from NOYB/Miscellaneous_Textual_Correction_-_Interfaces
-
12:16 PM Revision 23cc8797: Bug fixes to Route53 DynDNS
- Fixed a bug regarding a leading space in $ZoneID that causes an AWS 505 error. Also adds support for updating DNS if ...
- 12:16 PM Revision 06f1f5ab: Merge pull request #2929 from george-gwu/master
- 12:15 PM Revision 6102c368: Fix form submission fields
- Submitting one form may lead to any other filled forms to be also submitted. This commit fixes this flaw
(cherry pic... - 12:14 PM Revision 5ea93948: Merge pull request #2928 from NewEraCracker/exec-sec-fix
- 12:03 PM Revision 794534b4: Fixed #6310 by adding cusom validation pattern
- (cherry picked from commit 1929ff88e91b2e495f8d22c74138721133afbd1f)
- 12:00 PM Revision 1929ff88: Fixed #6310 by adding cusom validation pattern
-
- Client on LAN, TFTP server on WAN, TFTP proxy enabled on LAN. Client on LAN cannot get files from the TFTP server. Th...
-
- Well well well :)
https://forum.pfsense.org/index.php?topic=107471.msg602590#msg602590
See last message: https://... -
- Hi everybody,
I just made a brand new installation of pfsense-2.3-amd64.
I configured and enabled the Captive Por... -
- Hi everybody,
I just made a brand new installation of pfsense-2.3-amd64.
I configured and enabled the Captive Por... -
08:50 AM
Feature #6306: Bring back hostname infobox in menu bar
- Applied in changeset commit:6cde850b8903f0330c5023f7090caabea6ae6438.
-
08:44 AM
Feature #6306 (Feedback): Bring back hostname infobox in menu bar
- The new UI design makes this difficult, so for now I have added the information as a tool tip to the pfSense logo. Ho...
-
08:45 AM pfSense Packages Bug #6313 (Duplicate): Squid 0.4.16_2 Local Authentication fails with passwords +8 characters
- Hi,
I just made a fresh install of 2.3 amd64 with Squid 0.4.16_2 (squid-3.5.16).
Adding local Squid users with pa... - 08:44 AM Revision 7a5ab9e2: Skip ro mounting to make nanobsd permanent rw mode regardless of config. Ticket #6184
- 08:44 AM Revision 3cc5a386: Skip ro mounting to make nanobsd permanent rw mode regardless of config. Ticket #6184
-
07:10 AM
Bug #6310: services_dnsmasq_domainoverride_edit.php doesn't allow # and !
- Applied in changeset commit:1929ff88e91b2e495f8d22c74138721133afbd1f.
-
07:04 AM
Bug #6310 (Feedback): services_dnsmasq_domainoverride_edit.php doesn't allow # and !
- Knocked out as requested.
-
- IP Address field on services_dnsmasq_domainoverride_edit.php should permit IP addresses or # or ! (as noted in the te...
-
- Yes, that is expected. The difference is that the wizard does not have support for those additional types which would...
-
05:44 AM Bug #6312 (Not a Bug): Traffic Shaper Wizards Schedulers list differs from Interface Schedulers list
- Any *Traffic Shaper Wizard* has the following Schedulers:
* PRIQ
* CBQ
* HFSC
But *By Interface - Scheduler ... -
- pushed change so conf_mount_ro does nothing, so things will stay rw.
-
- already done for 2.3.1
-
02:44 AM Todo #6309 (Resolved): Show Patchlevel in Dashboard
- After the switch from monolithic updates to modular ones the patchlevel should be shown on the Dashboard next to Vers...
-
- Thanks Patrik. We're very near release, but if you can get us a fix in the next couple days it should make 2.3.1.
-
12:55 AM Bug #6109: filterlog crash
- I'm working on a fix that I'd like to be included in 2.3.1. It affects all architectures.
05/03/2016
-
-
09:27 PM Bug #6179: Not obtaining update status on nanobsd when read-only mounted
- I mounted rw and the issue is addressed for me. pkg update via shell updated the package repository. Update check is ...
-
02:35 AM Bug #6179: Not obtaining update status on nanobsd when read-only mounted
- Hello,
anyone here who reported the same issue and managed to resolve it based on Chris' advice (mount rw) ?
-
- Not saying it's not a bug, just that it's always been that way.
-
08:51 PM Bug #6308: TFTP Proxy can't be turned off
- So I see. I just loaded the old 2.2.4 ova to look. As this isn't a bug it seems, I would appreciate if it was kept as...
-
- The enable/disable only determines whether traffic will ever reach it, it's always ran in the background
-
- I happened to notice this in the forum, so I figured I would add it here, though it doesn't fit my situation, it seem...
-
- my system log is being spammed with messages such as:
May 3 15:15:44 xinetd 7815 Reconfigured: new=0 old=1 dropped=0... -
- Fixed a bug regarding a leading space in $ZoneID that causes an AWS 505 error. Also adds support for updating DNS if ...
-
-
-
-
-
- the reconnect issue, what OpenVPN logs do you get at the time?
if there's an issue with manually connecting to th... -
- I don't think this is specific to nanobsd as I always used -full and have seen the same problem on all 4 firewalls I ...
-
-
-
-
- Applied in changeset commit:4057a15383009f57d793466e2997e997165c410b.
-
- array_merge() fails on filter.inc line 1934 when $nat_if_list is not an array
!http://i.imgur.com/VPAnbnF.png!
... -
01:00 PM pfSense Packages Bug #6294: Squid and "Bypass Proxy for These Source IPs"
- Thank you, Jim. That worked.
-
-
- 10:01 AM Revision 59255714: Fix form submission fields
- Submitting one form may lead to any other filled forms to be also submitted. This commit fixes this flaw
-
- This is a request to bring back the hostname displayed in the menu bar as it was up to the 2.2.x releases.
I'm adm... -
- It's definitely not that simple, it has to be in combination with something else you have configured. Could you go to...
-
- please see https://forum.pfsense.org/index.php?topic=111108.0
-
- there is no nano_use_vga.txt in 2.3. Not sure offhand if that's intentional
-
05/02/2016
- 11:41 PM Revision c81678f4: Bump net.raw.recvspace and sendspace defaults. Ticket #6223
- 11:39 PM Revision ef885517: Bump net.raw.recvspace and sendspace defaults. Ticket #6223
-
- Hi,
I have a problem with my pfsense, version 2.3 and trafic shapping (PRIQ).
In fact, the pfsense is VPN Passt... - 08:56 PM Revision ac072ab3: Fix missing interface in pool edit. Ticket #6303
- 08:56 PM Revision 96ab6943: Fix missing interface in pool edit. Ticket #6303
- 05:10 PM Revision 30f984fd: Hide freelogins_resettimeout on disable
- (cherry picked from commit 87d6244a5a998447ce1cc7642813ac668f0e1f1b)
- 05:08 PM Revision 87d6244a: Hide freelogins_resettimeout on disable
-
- no replicable test case for this. it fixes itself by the time the system finishes booting so not a huge deal, but ugly.
-
- fixed
-
- "fixing" the alignment had no impact on this issue on flash that's slow to rw->ro mount. we'll go permanent rw for 2....
-
-
-
-
- fix pushed
-
- Missing the interface in the edit link. Fix coming momentarily.
-
02:39 PM
Bug #6302 (Closed): Throughput and responsiveness issues when routing a small number of connections across local subnets
- I have a SG-4860 running pfSense 2.3.0. If I create a single connection from one local subnet to another and attempt...
-
- Should be fixed on next round of 2.3.1-devel snapshots
-
02:32 PM
Bug #6287 (Resolved): firewall_nat_out_edit.php: Destination (Type: Network) field auto-complete does not show aliases with networks
-
- 2.3.1.a.20160502.0743: Fixed.
-
01:47 PM pfSense Packages Bug #6301 (Closed): Error on squidGuard's Common ACL tab after enabling blacklists
- After enabling blacklists in squidGuard on 2.3, I see this error above the Target Rules on the Common ACL tab:
War... -
- yes, it's among the removed packages list
-
- Hi,
I had pfsense 2.2.6 and in package list there is bind DNS package
Now its disappeared.
It was removed or it w... -
12:41 PM Bug #6300 (Duplicate): status_queues.php can cause php errors when queues are on disconnected interfaces
- I set up a bridge with 3 interfaces and put HFSC queues on each interface. With the two 'internal' interfaces disconn...
-
- (cherry picked from commit 7a5e499901d86edad0c4e653da39dc2a42bbc33c)
- 12:32 PM Revision 5c8b2864: Merge pull request #2927 from NOYB/Miscellaneous_Textual_Corrections
-
12:11 PM
Bug #6290 (Resolved): services_captiveportal.php: Waiting period InputBox not available.
- Element now hidden on CP disabled
-
10:21 AM Bug #6290: services_captiveportal.php: Waiting period InputBox not available.
- It works @ 2.3.1-DEVELOPMENT (amd64) built on Mon May 02 06:31:49 CDT 2016
Just a minor bug, if you disable capti... -
09:35 AM Bug #6258: Default gateway switching issue with IPv6 and link local gateways
- Is there anything else I can do to help debug this? Currently my system log is 50-60% comprised of these messages. Ma...
-
-
-
- 04:36 AM Revision d102e2d5: Add menu item for freeDNS v6
- 04:34 AM Revision ac16181a: Add freeDNS v6 support
- FreeDNS IPv6 support confirmed working using same method as v4 with v6 source address. Simple second service with _us...
-
- (cherry picked from commit bb80af580c5a4408e42c76c39c67d173540897db)
- 01:48 AM Revision 69658669: Merge pull request #2924 from NOYB/Miscellaneous_Textual_Corrections
-
01:26 AM Bug #6099: igmpproxy does not recognize upstream interface
- Kay Ringmann wrote:
> i read this. So I played a little around. It seems that it's depending from upstream interface...
05/01/2016
-
- OpenVPN Server - Tunnel Settings - IPv4 Local network(s) and IPv6 Local network(s) sections. Initial display state i...
-
11:08 PM Bug #6297 (Resolved): rc.linkup doesn't trigger filter reload
- I've come cross an odd bug. Interfaces that have IPv6 enabled (6rd on WAN, track WAN interface on internal interfaces...
-
10:02 PM Bug #6223: IPsec + OpenBGPD fails with "PF_KEY socket: No buffer space available"
- Chris Buechler wrote:
> setting net.raw.recvspace=16384, twice the default, has been confirmed to fix this and one o... -
- setting net.raw.recvspace=16384, twice the default, has been confirmed to fix this and one other unrelated IPsec fail...
-
- When pushing a stream of UDP traffic over IPsec, an issue can be hit that leaves an interface dead chewing 100% of on...
-
- John Hood wrote:
> This issue seems to have reappeared
No, this was DHCPv6 client, you're referring to server. Un... -
03:01 PM Bug #3395: DHCPv6 client pass rules need to come before bogons
- Oh, yes: 2.3-RELEASE amd64, originally installed with 2.2.1 or so and upgraded, and finally deployed after the upgrade.
-
- This issue seems to have reappeared, though the separation of the rules involves suggests the exact cause might be di...
-
- When you put a hostname into that field it is only resolved when the ruleset is loaded. If the hostnames cannot be re...
-
- i read this. So I played a little around. It seems that it's depending from upstream interface.
In my earlier posts ... -
08:59 AM Bug #6295 (New): Crash upon applying CODELQ to untagged parent interface when also applied to daughter VLAN
- On a single NIC system / VM using VLANs pfsense 2.3 crashes and can no longer reboot to a functional state when CODEL...
-
- 06:09 AM Revision a9ea552f: add xe-guest-utilities
- 06:09 AM Revision 0487483f: add xe-guest-utilities
- 06:08 AM Revision e751559b: add xe-guest-utilities
- 05:53 AM Revision 64ec463c: Skip LAN properly with static IP WAN and one interface. Ticket #6093
- 05:53 AM Revision 5330efe9: Skip LAN properly with static IP WAN and one interface. Ticket #6093
-
- happened upon this, only affects static IP WAN. fixed
- 12:03 AM Revision 741e8592: Remove stray colon
- (cherry picked from commit cd084ee0e371429b8e30f9fd7be17d1c093a4280)
- 12:02 AM Revision 0a5096fc: Merge pull request #2923 from NewEraCracker/patch-1
-
- (cherry picked from commit 9f563e371d0ce630f551de19c4263fe5c1686de6)
- 12:00 AM Revision 0a6b3079: Merge pull request #2921 from NOYB/System_Menu_-_Textual_and_Punctuation_Corrections
04/30/2016
- 11:44 PM Revision cd084ee0: Remove stray colon
-
- It might be a Squid issue and please let me know if I need to file this issue at Squid upstream.
Following is what... -
10:14 PM Feature #6293 (Duplicate): Include 'if_urndis.ko' kernel module for USB network tethering
- This is a request to compile/include the 'if_urndis.ko' FreeBSH kernel module to allow the connection of generic (i.e...
-
- that's being replaced, so not something we're going to fix (pull request welcome if someone wants to fix it)
-
07:46 PM Bug #6292 (Needs Patch): Status Traffic Graph Long Interface name overlaps header
- Long interface name (Red aligned top right hand side) overlaps rest of graph header
Suggest above graph header align... - 05:33 PM Revision 918f0a94: Fix Redmine #6097
- Replace '/usr/bin/grep -vi warning' with '/bin/cat'
-
-
05:43 AM Bug #6099: igmpproxy does not recognize upstream interface
- Kay Ringmann wrote:
>
> While reading many posts related to this problem, i'dont think it's a problem of naming th... -
- I have a APU1D4.
re0 = WAN
re1,re2 = LAGG0
LAGG0 = VLAN1,VLAN10,VLAN20,VLAN30,VLAN40,VLAN50,VLAN60
So the inter... -
- Stefan Heck wrote:
> Basically the thread starter is Entertain-Customer of the Deutsche Telekom, so I am –
> IPTV...
04/29/2016
- 09:29 PM Revision a18a67d7: Fix extrat return statement
- (cherry picked from commit 09c7fae46d2757815c1e4e5ead7c9896783e7013)
- 09:28 PM Revision 09c7fae4: Fix extrat return statement
-
-
-
- - Uninstall all packages on current system before upgrade using
pre_upgrade_command script
- Create a file containing... -
-
- - Uninstall all packages on current system before upgrade using
pre_upgrade_command script
- Create a file containing... -
-
- fixed
-
- Reported in forum: https://forum.pfsense.org/index.php?topic=111006.0
In system_advanced_admin.php the fileds enab... - 03:59 PM Revision 85a96e14: Fixed #6920 - Missing input element
- (cherry picked from commit 01232142532562e4ce108346910e6e0a3249e738)
- 03:58 PM Revision 01232142: Fixed #6920 - Missing input element
-
- I have the same problem, my ISP use VLAN 838, 840, 839 for IPTV. I have made a bridge with thoes vlans, i have an ip ...
-
- Applied in changeset commit:a07d27e544882076e17da718a3dd98a403761b5c.
-
- Applied in changeset commit:17b31252fa105f473ac4c77fc200baf9dcb5f51b.
-
- (cherry picked from commit 177ed3f66f2d5759f5b821d79aa97021b9daba9d)
- 01:06 PM Revision 630103c3: Merge pull request #2920 from NOYB/System_/_Update_-_Textual_Alteration
-
- Clean up some punctuation.
(cherry picked from commit 7ceae332c529bfce6cdd47907b1b71da4fddc2a3) - 01:04 PM Revision 56403d17: Merge pull request #2919 from NOYB/System_/_Update_-_Punctuation
- 01:04 PM Revision c91e8374: Comment typos in pkg_mgr_install.php
- (cherry picked from commit 70cd4b96c637d483c4ddefa822db44bb2fe4a792)
- 01:03 PM Revision db1030f8: Merge pull request #2918 from phil-davis/patch-4
- 12:59 PM Revision 99ace4fc: Fixed #6287
- (cherry picked from commit 2342972531265771e65b69b810de0c9d98c69b94)
- 12:57 PM Revision 23429725: Fixed #6287
-
- Chris,
thanks. I checked this when I got home. But: my system already was mounted r/w (see att'd picture). I have ... -
- I believe new subject is the root cause of everyone's issue here. Where 'pkg update' just returns with no output, tha...
-
11:00 AM
Bug #6290 (Feedback): services_captiveportal.php: Waiting period InputBox not available.
- Missing input element restored. Thanks!
-
- Version 2.3.1-DEVELOPMENT (amd64)
built on Thu Apr 28 03:20:14 CDT 2016
FreeBSD 10.3-RELEASE -
- When adding "Pass-through credits per MAC address.", there is no inputbox to insert the "waiting period".
When savin... -
10:59 AM
Bug #6289: IPv6 address not given to track6 interfaces on create
- Here is the system log output I get when adding an interface:
Apr 29 11:56:30 check_reload_status Restarting ip... -
10:46 AM
Bug #6289: IPv6 address not given to track6 interfaces on create
- It is the default WAN configuration in pfSense with DHCPv6 for IPv6. I have it configured to request a /56 and send ...
-
- what type of WAN are you tracking? I fixed that for DHCP6 tracking in 2.3, at least for the circumstance where I was ...
-
09:25 AM
Bug #6289 (New): IPv6 address not given to track6 interfaces on create
- If you create a new LAN-type interface with the IPv6 set to track another interface, the new interface does not get a...
-
08:10 AM
Bug #6287: firewall_nat_out_edit.php: Destination (Type: Network) field auto-complete does not show aliases with networks
- Applied in changeset commit:2342972531265771e65b69b810de0c9d98c69b94.
-
08:00 AM
Bug #6287 (Feedback): firewall_nat_out_edit.php: Destination (Type: Network) field auto-complete does not show aliases with networks
- Autocomplete needed to be re-applied to the element after each enable/disable action
-
07:37 AM
Bug #6287: firewall_nat_out_edit.php: Destination (Type: Network) field auto-complete does not show aliases with networks
- Looks like it is actually using port aliases instead of addresses. Looking at it now.
-
-
- The "Source" field auto-complete works as expected, but "Destination" is not.
Current Base System: 2.3.1.a.2016042... -
-
- Clean up some punctuation.
-
07:12 AM Bug #6288: Remote Config Backup Not Working in 2.3.0 version
- Sorry I didn't notice the change on the last wget command.
Kind regards,
Julien R. -
- It works fine against 2.3, I have tried it against over a dozen 2.3 systems and they all work.
The page was edited... -
- It was perfectly backuping all pfsenses before this upgrade.
The script stopped working the day after the upgrade ... -
- Did you updated the script after 2.3 go live?
I have 25 pfsense upgraded to 2.3 with no more working backup script... -
- that page is correct for 2.3 as listed in "2.2.6 and newer"
-
- Same as https://redmine.pfsense.org/issues/5688 in release 2.2.6
Remote backup as described in the wiki https://do... - 04:34 AM Revision 70cd4b96: Comment typos in pkg_mgr_install.php
- 01:20 AM Revision 96bf55d9: Omit local identifier for mobile PSKs. Ticket #6286
- 01:19 AM Revision b3b9c811: Omit local identifier for mobile PSKs. Ticket #6286
04/28/2016
-
11:03 PM Bug #6179: Not obtaining update status on nanobsd when read-only mounted
- Same issue as Ken Theime with my ALIX box. Also takes a long time for the page to come up.
-
- not true, they're same as they always were. 1 was always the WAN. The APU never factory reset to assigned interfaces ...
-
- My Alix cases have OPT1 - WAN - LAN printed on them, left to right, which is vr2 - vr1 - vr0
My APU cases have the s... -
02:43 PM Bug #6282 (Not a Bug): APU, ALIX default interface assignments changed from 2.2.6 to 2.3
- Default port assignments for PC Engines platforms prior to 2.3 were always:
ALIX: WAN=vr0, LAN=vr1
APU: WAN=re0... -
- fix pushed
-
- The mobile IPsec PSKs are added to ipsec.secrets like the following. ...
- 05:37 PM Revision d817c90b: Retrieve firmware versions via Ajax so we don't hang the GUI if unable to reach the server
- (cherry picked from commit cb6f87f3bf3b616133414ac2863d24892544b828)
- 05:36 PM Revision cb6f87f3: Retrieve firmware versions via Ajax so we don't hang the GUI if unable to reach the server
-
- First, thank you for building a awesome piece of software! This is my first bug report. I hope the information is ...
-
- Please discuss this on the forum before opening a bug report.
Also, this is mostly duplicated from #6281 from just a... -
03:32 PM pfSense Packages Bug #6284 (Not a Bug): Firewall Rules change order automatically
- I have created a *pfB_Top_v4 auto rule* to basically block ALL traffic from the Top 20 Spamming countries, using the ...
-
03:07 PM
Feature #6283 (New): Register DHCPv6 leases with DNS resolver
- It would be great if pfSense could register DHCPv6 leases with the DNS resolver in the same manner that it can curren...
-
- Please post in the forum to discuss unless a bug is definitely found.
pfBlocker has its own internal rule ordering... -
- I have created a *pfB_Top_v4 auto rule* to basically block ALL traffic from the Top 20 Spamming countries, using the ...
-
- Stefan Heck wrote:
> phyint re0_vlan8 upstream ratelimit 0 threshold 1
> ...
> altnet 224.0.0.0/4
Matthias Lan... -
- Stefan Heck wrote:
> After a complete reinstall, it is now working. Maybe some wrong parameter left after the updat... -
11:33 AM Bug #6099: igmpproxy does not recognize upstream interface
- @Matthias Lange
you have mail -
11:28 AM Bug #6099: igmpproxy does not recognize upstream interface
- ok, can we talk offline? here is my email: matthias@lange-sd.de
-
- Unfortunately, I cannot provide my previous config, I have started with pfSense two weeks ago und struggled directly ...
-
- Hi Stefan,
this is exactly my config since month for IPTV with DeTelekom and Entertain.
So maybe the config from ... -
- Basically the thread starter is Entertain-Customer of the Deutsche Telekom, so I am –
IPTV Entertain is using Media... -
- Hello Stefan,
could you please go more in detail on this? Maybe some screenshots. I don't know what you mean with "r... -
- It works even with pfSense 2.3 after I joined Receiver and
other Network Hardware to the same LAN-Subnet.
So pfSen... -
- GUI also fixed by sbeaver, should be fine now
- 12:35 PM Revision d9f90dfb: Fix #6251 Brackets around Mbuf figures
- (cherry picked from commit 97f930d1e3af593b20ed56ca951a2109a853a28d)
- 12:35 PM Revision cac808f0: Merge pull request #2917 from phil-davis/patch-4
- 12:34 PM Revision d72e6feb: Provide better messages for invalid alias name errors
- (cherry picked from commit e1f5381f4ecae20922a379b75820af1c9e57927e)
- 12:34 PM Revision 5431a785: Merge pull request #2916 from phil-davis/validaliasmsg
-
- (cherry picked from commit a45a72355ef322c76408d73b930a92a5e765b2ca)
- 12:33 PM Revision 3f3df45b: Merge pull request #2915 from NOYB/HTML_Compliance_-_Setup_Wizard
-
- Clean up some punctuation.
(cherry picked from commit 65d3ebb2250da7ba4cfef7e840beb2c24cdbbda7) - 12:32 PM Revision 0d77eed4: Merge pull request #2914 from NOYB/Setup_Wizard_-_Punctuation
- 10:42 AM Revision 97f930d1: Fix #6251 Brackets around Mbuf figures
-
- Jim Pingle wrote:
> On 2.2.x the Quagga package is "Quagga OSPF" and on 2.3 it's "Quagga_OSPF". So the package still... -
- You're right, Phillip, coloring were done in thermal sensor widget only. That's my mistake, sorry for misleading you :(
-
07:59 AM
Bug #6251: "System Information" widget formatting breaks after on widget refresh
- This is the code the SI widget uses:...
-
07:14 AM
Bug #6251: "System Information" widget formatting breaks after on widget refresh
- I have to wonder why we need a temperature graph in the SI widget when we have a temperature widget to do that, and i...
-
- I just looked on a 2.2.6 system. The Thermal Sensors widget shows a color scale green, yellow, red depending on the t...
-
- Awesome!! Thanks, Phil.
-
- Brackets around the MBUF usage are fixed by pull request https://github.com/pfsense/pfsense/pull/2917
-
- Fixed:
* Temperature progress bar.
Not Fixed:
* "MBUF Usage" value parenthesis is lost on widget refresh.
Los... - 07:46 AM Revision e1f5381f: Provide better messages for invalid alias name errors
-
-
- Clean up some punctuation.
-
03:51 AM Bug #6280 (Not a Bug): OpenVPN issue after upgrade to 2.3 version
- After upgrade remote pfSense box to 2.3 version we can't access remote oVirt Web Console.
We can access to login scr... -
03:29 AM Bug #4326: Limiters on firewall rules where NAT applies drop all traffic
- Arab world
________________
definitive solution
https://forum.pfsense.org/index.php?topic=106640.0
enjoy ... -
- Suggested improved and standardized messages in response to invalid alias, schedule, gateway and gateway group names ...
-
- The validation is actually done by calling is_validaliasname() and the main criteria is at:
https://github.com/pfsen... -
- there's still inconsistency here. Some correctly show Stable and Development there, some on latest 2.3.1 even show as...
-
02:25 AM pfSense Packages Bug #6276: Squid non-functional in transparent mode in 2.3 and 2.3.1
- Dear Jim,
maybe you are right, I put my pfsense config file in forum.
https://forum.pfsense.org/index.php?topic=110... -
- fixed
04/27/2016
-
11:45 PM Bug #6179: Not obtaining update status on nanobsd when read-only mounted
- I'm experiencing the exact same issue. Never obtaining update status, high CPU usage, timeouts when browsing the web ...
-
- thanks Phil
-
- This is already done for 2.3.1
https://github.com/pfsense/pfsense/commit/709309eb91bab632957829a389721a800f984d64
T... -
- Here's a patch that does that... need to apply it to /usr/local/www/status_graph.php
-
-
-
10:20 PM Bug #6273: gateway group will not accept "openvpn" as a group name
- sorry I didn't finished my last sentence -> by the way the gateway group's name "ipsec" works
I understand but I... -
- It would be a bug if it did. Those cannot be used as a group name, as they're used internally.
-
- here's the error message
The following input errors were detected:
The gateway name must not contain invali... -
09:15 PM pfSense Packages Bug #6279 (Rejected): squidguard blacklist update not working after initial update
- squidguard is not able to download from http://www.shallalist.de/Downloads/shallalist.tar.gz or from http://urlblackl...
-
-
-
-
-
-
-
- Johannes Wanink wrote:
> * Why is the target version now 2.3.2? :-( Is there a workaround?
Because there is no fi... -
- Johannes Wanink wrote:
> * Another stupid question: Is "Affected Architecture" set correct? Should it changed to "al... -
- Tried to compile the version from the "next" branch: https://github.com/pali/igmpproxy
Compilation failed due to a... -
01:43 PM Bug #6099: igmpproxy does not recognize upstream interface
- * Why is the target version now 2.3.2? :-( Is there a workaround?
* Another stupid question: Is "Affected Architectu... -
- A few textual alterations.
(cherry picked from commit 80857665b96e542427965b66d51914d88f1e67e1) - 02:30 PM Revision 3f1aa290: Merge pull request #2913 from NOYB/Diagnostics_/_Packet_Capture
-
- There are a couple cases that show problems with Captive Portal with respect to the zone name on 2.3 which were worki...
-
- If a user sets an interface queue to CODELQ, errors appear in the logs from RRD:
Creating:... -
- The conclusions you have reached are incorrect. It is working for others (and myself), and if something is broken it ...
-
- In fresh new installation:
Squid non-functional in transparent mode in 2.3 and 2.3.1
I did this solution: https... -
- A bunch of other places cast various numbers to (unsigned long long) - that might be all that is needed, and perhaps ...
-
07:41 AM Bug #6272: Wrong numbers in state column of /firewall_rules.php
- Seems to be there:
https://github.com/pfsense/FreeBSD-ports/blob/devel/devel/php56-pfSense-module/files/pfSense.c#... -
- I tried adding integers on a 32-bit system until they got too big - they happily change into float, and format_bytes(...
-
- Yes it's the i386 release
-
- That is a wraparound of a 32-bit signed integer for 2,290,434,228 bytes.
@Jo S - is this on a 32-bit system? -
- Here is the output for this rule:
@78(1422127143) pass in quick on em0 reply-to (em0 192.168.10.1) inet proto tcp ... -
- what does the output of 'pfctl -vvsr' show?
-
- Hello,
I have a firewall rule which have weird numbers on the state column, not sure why. Attached is a screenshot... - 08:27 AM Revision fe13359e: Fix Hyper-V SMART disable on widget. Ticket #6147
- 08:25 AM Revision 7de3b9b1: Fix Hyper-V SMART disable on widget. Ticket #6147
-
- A few textual alterations.
-
06:29 AM Bug #6275 (Resolved): Disconnected IPsec phase 2 entries are not shown in IPsec status
- Hi,
First, many thanks for making this great tool.
I have an IPsec phase 1 containing three phase 2 entries. Th... -
05:49 AM pfSense Packages Bug #6274 (Resolved): Missing tabbar in HAProxy for restricted group
- The HAProxy tabbar is missing (Settings, Frontend, Backend, etc.) for users of a group, where the users are only allo...
- 05:04 AM Revision f8e865e3: add znc from user request
- 05:04 AM Revision 9761e686: add znc from user request
- 05:04 AM Revision e15d0ba2: add znc from user request
-
04:41 AM pfSense Packages Feature #6141: Convert apcupsd package to 2.3
- Sergio Handal wrote:
> It would be nice to convert "apcupsd" package to bootstrap so it can be used in version 2.3.x... - 04:32 AM Revision ebe2129d: Fix input validation check. Ticket #6231
- 04:30 AM Revision 78d8dd47: Fix input validation check. Ticket #6231
- 03:31 AM Revision 021b429d: Add trafshow to poudriere list
- 03:31 AM Revision d6fc5739: Add trafshow to poudriere list
- 03:30 AM Revision 994e862e: Add trafshow to poudriere list
-
- fixed
- 03:19 AM Revision d1654153: Add dnstop to build list at user request.
- 03:19 AM Revision e46d9443: Add dnstop to build list at user request.
- 03:19 AM Revision 3b74ae81: Add dnstop to build list at user request.
-
- works, thanks!
04/26/2016
-
- fixed
-
- works
-
- fix pushed
-
- Good catch. Not sure what input you had there which caused the issue, the default character set was fine. Fix pushed
- 10:43 PM Revision 1f269674: PPP here, not L2TP. noticed by https://forum.pfsense.org/index.php?topic=110686.0
- 10:42 PM Revision 17580434: PPP here, not L2TP. noticed by https://forum.pfsense.org/index.php?topic=110686.0
-
- duplicate of #6101
-
09:12 PM Bug #6271 (Duplicate): wrong entry deleted in GUI when editing alias
- Browser: Firefox 46.0 (Windows)
Steps to reproduce:
1) In the web GUI, go to Firewall / Aliases / IP and click Ad... -
- Chris Buechler wrote:
> Do you see that log "ROUTING: setting IPv6 default route to" at the time as well? There isn'... -
08:36 PM Revision 5eb82498: darken background colors
-
-
- Running Alix box and experiencing same issues. Update gear never stops in dashboard. System->Update results in 504 er...
-
03:51 PM Bug #6270: [2.3.1] pfSense Traffic Shaper
- Chris Buechler wrote:
> lagg doesn't support ALTQ
well that explains it, Feature request?! ? -
- lagg doesn't support ALTQ
-
- Setup Lagg0(2 interfaces) set to LAN connection
1 interface assigned to Wan connection
Going to Firewall -> Traff... -
- That is not a valid test. You cannot restore a 2.3 configuration to 2.2.x or any earlier version.
I have a test sy... -
02:49 PM Bug #6245: Multi-WAN PPPoE not working
- Because you said it should work I reinstalled the firewall with 2.3 and tested it again. The same Problem here. Becau...
- 02:24 PM Revision 46f3216e: Fix #6267 Load value of direction on edit
- (cherry picked from commit 2aaa473e4fab47d1a4f704ebb568f88d59b7ec3e)
- 02:23 PM Revision 8364c00d: Merge pull request #2912 from phil-davis/patch-4
-
- Clean up some punctuation.
(cherry picked from commit 3728bbe5a5340a770ebe3feb526485c28888cdde) - 02:22 PM Revision de2a20a9: Merge pull request #2911 from NOYB/Diagnostics_-_Menu_-_Punctuation
-
- Removed an extra comma - more correct IMO
(cherry picked from commit 90968c493922bd9d80a37fe90d1b9440ca7a2333) - 02:20 PM Revision 110668be: Merge pull request #2910 from lukehamburg/patch-2
- 01:17 PM Revision 2aaa473e: Fix #6267 Load value of direction on edit
-
- already fixed in #6134
-
12:03 PM Bug #6269 (Duplicate): SMTP alerts have reversed entry names
- The emails that the SMTP alerter sends out now have the wrong entity names in the wrong places.
Example:
v2.2:
... -
12:09 PM Bug #6268: Install package over pfSsh.php it freeze
- Jim Pingle wrote:
> It works here, though it is really not necessary any more. Everything uses pkg
Thanks Jim, It... -
- It works here, though it is really not necessary any more. Everything uses pkg
To show that it works, I tried mtr-... -
- When trying to install using pfSsh.php (pfSense developer shell) it freezes and does not return anything.
pfSense ... -
10:00 AM Bug #6233: Bootloop with Alix after 2.3 upgrade
- > Do you have any hardware other than the board itself connected? mini-PCI cards, USB devices.
Well, the only hard... -
- Applied in changeset commit:2aaa473e4fab47d1a4f704ebb568f88d59b7ec3e.
-
- Setting the existing value on edit seems to have been missed.
PR https://github.com/pfsense/pfsense/pull/2912 -
02:51 AM Bug #6267: Captive Portal Allowed IP Addresses direction not correctly loaded on edit
- Sorry, forgot to include Affected version - this is in 2.3
the corresponding "Allowed Hostnames" site (services_ca... -
- Captive Portal "Allowed IP Addresses" (services_captiveportal_ip.php): When specifying direction "to" or "from" and s...
-
08:59 AM Bug #6223: IPsec + OpenBGPD fails with "PF_KEY socket: No buffer space available"
- Chris Buechler wrote:
> I'm looking into a good repeatable test case for this.
hi, i'm affected by this bug too. ... -
- Adam Thompson wrote:
> No longer crashes, but also doesn't detect any peers. Same behaviour on two different i386 f... -
- No longer crashes, but also doesn't detect any peers. Same behaviour on two different i386 firewalls.
-
- Clean up some punctuation.
-
06:06 AM pfSense Packages Bug #6047: syslog-ng does not logrotate
- I can word this, logs ain't getting rotated.
- 05:45 AM Revision 2ec9afb7: Allow port specification for Unbound domain overrides. Also fix display of input errors. Ticket #6091
- 05:45 AM Revision d051bdd1: Allow port specification for Unbound domain overrides. Also fix display of input errors. Ticket #6091
- 05:34 AM Revision d931d66d: Fix text.
- 05:34 AM Revision 50fa04bb: Fix text.
-
04:40 AM Feature #6038: Add ability to configure which interface is chosen for defining hostname IP in /etc/hosts
- I stumbled over this problem also. In my case I have several LAN interfaces and the wrong one gets registered in /etc...
- 04:01 AM Revision c8bf35c9: Add validation to prohibit IPv6 on firewall_nat_edit.php, where it will generate invalid ruleset. Ticket #6265
- 04:00 AM Revision 776b6190: Add validation to prohibit IPv6 on firewall_nat_edit.php, where it will generate invalid ruleset. Ticket #6265
-
03:46 AM pfSense Packages Bug #6116: pfBlockerNG doesn't automatically update after firmware upgrade, meaning that unbound doesn't start and users don't have internet connection
- ... I've posted a forum query re trying to get pfBlockerNG to update on reboot so I can continue to use RAM disks.
... -
- duplicate of #6251, commit was done on that one so closing this.
-
- fixed
-
- A reboot didn't change anything in the advanced box or CSC. Only admin actions determine what's in both of those. Tha...
-
02:11 AM Bug #6266 (Not a Bug): OpenVPN configuration mix-up
- Hi!
A few days ago, my PfSense's Openvpn section make a mistake. i have a server with tunnel mode and client speci... -
- Please come to https://forum.pfsense.org/index.php?topic=110731.0
- 12:12 AM Revision d5ba66fa: localip and gateway aren't used when type is PPP, remove here. Ticket #6264
- 12:12 AM Revision 67ac44ae: localip and gateway aren't used when type is PPP, remove here. Ticket #6264
04/25/2016
- 11:50 PM Revision 6b086a3b: localip and gateway aren't used when type is PPP, remove here. Ticket #6264
-
- It's not likely specific to your config, rather the environment, but yeah send me a backup. cmb at pfsense dot org
... -
- Chris, would it help to send my config file (without the personal data) ? If so, to what address ?
-
- Chris,
yes, checking the box and preferring IPv4 over IPv6 doesn't help. I rebooted but can't see System/Update. And... -
- that one's not as straight forward as changing the input validation, since the * needs changes in the back-end handli...
-
- OK I revised the ticket to be only for the * character.
-
- That patch addresses the @ but not the *
Still does not work for *
-
- @ is already fixed -- see #6122
Try the fix on the ticket, if it works, this can be closed, if it still doesn't wo... -
- Namecheap DDNS allows '*' (wildcard), but the page does not accept this value.
-
- now clear which button goes with which text
-
03:00 PM
Bug #6259: Gateways Dashboard Widget - weird radio button placement when Wrench is clicked
- Applied in changeset commit:f5ee7cfd7c2e3f9e7383fb41c47f77bad3507cfc.
-
02:52 PM
Bug #6259 (Feedback): Gateways Dashboard Widget - weird radio button placement when Wrench is clicked
- Layout corrected (improved at least)
-
- This is on Chrome 50 (Mac)
If you click the wrench (aka spanner by some), the Radio buttons pop up in an odd arrange... -
- fixed
-
- Marco Novielli wrote:
> You mean this (see attachment)? It's definitely under System-->Advanced-->Firewall & NAT fo... -
- it's there the same as it always was. it only displays if you have > 1 interface, same as always, as it has no releva...
-
05:22 PM Bug #6256: Network Address Translation section is removed in Advance NAT menu
- You mean this (see attachment)? It's definitely under System-->Advanced-->Firewall & NAT for me. Right under Bogon ...
-
- Hi,
System -> Advanced -> Firewall & NAT -> Network Address Translation was removed in new version of pfsense (2.3)... -
- fixed
-
- works
-
- always been that way (well, w/strongswan, >=2.2.0). Doesn't hurt anything, not worth risking at this stage for 2.3.1.
-
- When multiple Phase 2 entries exist, the encryption options for every P2 inside a given P1 are added to every split c...
-
- all works now
-
- fix pushed
-
- firewall_nat_edit.php lists IPv6 VIPs and allows entering IPv6 IPs manually, where those aren't valid and result in a...
-
- fixed
-
- fix pushed
-
- ...
-
- PR merged.
-
- This issue is fixed in: PR # 121 https://github.com/pfsense/FreeBSD-ports/pull/121/files
-
- that does work in general but sounds like there is some edge case there.
Alexander: could you get me into the sys... -
05:47 AM Bug #6245: Multi-WAN PPPoE not working
- I have a working setup on 2.3 with this configuration (but with second WAN on OPT1): 2 PPPoE connections, same provid...
-
- fixed
- 07:51 PM Revision d3e5a4ff: Fixed #6259 (Gateway widget form layout)
- (cherry picked from commit f5ee7cfd7c2e3f9e7383fb41c47f77bad3507cfc)
- 07:50 PM Revision f5ee7cfd: Fixed #6259 (Gateway widget form layout)
-
- moved the PHP error to #6264.
The advanced options are only expanded if you have one of them configured, they're ... -
04:30 AM Bug #6255 (Confirmed): PPP Country/Provider/Plan configuration not saved
- Using a Huawei E220 modem, but I don't think it's related to this specific model.
Go to Interfaces (assign) / PPPs... -
-
-
- just cut out all of <dhcpdv6> through </dhcpdv6> or yeah ramode to disabled.
-
12:49 PM Bug #6262: radvd
- "You can manually edit that out of your config."
I'm having trouble finding that ticket. Is it something other than... -
- I looked a bit harder at this because my last results were confusing. With no WAN interface and LAN via SLAAC the sy...
-
- where you have a single interface assigned, it didn't unset the dhcpdv6/RA config there for the LAN. That was fixed i...
-
- Do you mean something other than this:
ServicesDHCPv6 Server & RA
The DHCPv6 Server can only be enabled on inte... -
- it runs where it's enabled. Disable it if you don't want it to run.
-
- (This bug tracker is too sensitive to typos)
RADVD runs when it shouldn't. I have a 2.3-Release test system without ... -
- RADVD runs when it shouldn't. I have a test system without a WAN interface and IPv6 via SLAAC. RADVD starts and if ...
-
-
02:50 PM Feature #5897: Make Alias url table persistent after reboot without internet
- Yes it's nanobsd on full installs works fine!
nanobsd is EOL
Oscar -
- Removed an extra comma - more correct IMO
-
- Hi!
See https://forum.pfsense.org/index.php?topic=108432.msg603891#msg603891
I had dozens of above messages until... -
- the interface scope is included where the gateway is link local, and doesn't already contain %.
https://github.co... -
- Doing my best to describe this perceived bug in 2.3. Running on an SG-2440. I have 2 WAN interfaces, both of them D...
-
-
-
- 12:59 PM Revision ffc6d169: Fix #6251 Temperature on System Information Widget
- It just seems that some infrastructure for a temperature bar had been put in place, but the code never finished to ac...
- 12:58 PM Revision 8067ebef: Merge pull request #2909 from phil-davis/patch-4
-
- Clean up some punctuation.
(cherry picked from commit c9b462825b0b2c53aa3701cd7824ceb82926a754) - 12:57 PM Revision 842fb493: Merge pull request #2908 from NOYB/Status_/_System_Logs_-_Punctuation
-
- 1) If there is no IPsec status response display an info box wrapped in table tags to prevent horizontal scroll bar.
2... - 12:56 PM Revision 74a28f9e: Merge pull request #2904 from NOYB/Status_/_IPsec_/_Overview_-_Few_Fixes
-
- Clean up some VPN menu punctuation.
(cherry picked from commit be4cebbf13b28cbcce289e96fb22f0355c945be8) - 12:53 PM Revision b6beeb34: Merge pull request #2900 from NOYB/VPN_Menu_-_Punctuation
-
- Applied in changeset commit:45c4bc38c9d3aa9e1bd164d79cb47d03395e12c3.
-
-
07:40 AM Bug #6257 (Resolved): Kernel panic with ALTQ
- Kernel panic with ALTQ being used on 2.2.6 and now on 2.3. Only happens with ALTQ active, does not happen when the sh...
-
- no buffer space available (55), and no route to host (65). Neither of those is a bug in itself. Start a thread on the...
-
10:37 AM Bug #6261 (Not a Bug): error socket: GW:XXX.XXX.XXX.XXX sendto error: 55
- Hi Team,
I use pfSense v2.3 release for my local network (about 350 users connected with 2 LAN and 3 WAN interface... -
11:50 AM Bug #6232: Weird temperature bar in Status / Dashboard
- Displaying fine now.
Thanks! -
- Note: Also reported by issue https://redmine.pfsense.org/issues/6251 which I happened to notice first.
Pull request:... -
- Done
-
- If that didn't work, this is not your issue. Please start a forum thread to discuss and troubleshoot.
-
- Jim Pingle wrote:
> Looks good now, others on the forum and here have also confirmed it is working now. Closing.
... -
- I installed new pfsense 2.3 and installed squid.
I did this command: chgrp squid /dev/pf
problem is same exist: Squ... -
- Applied in changeset commit:eb442fec8bd079760a53372bd9eaed7c502f2e98.
-
- I was a bit surprised that decent code to do the temperature was just not there in the bootstrap-converted code, and ...
-
- See attachment.
- 08:05 AM Revision eb442fec: Fix #6251 Temperature on System Information Widget
- It just seems that some infrastructure for a temperature bar had been put in place, but the code never finished to ac...
-
- Clean up some punctuation.
-
- in 2), I mean the "mouse hover", not the popup, of course.
-
- Hello,
1)
On the homepage, in the firewall logs section, there is a mouse hover on the red cross which display wi... -
03:23 AM Bug #6254 (Resolved): status_lb_pool.php Save and Reset buttons don't work
- When I want to managed servers (enable or disable) via status_lb_pool.php nothing happens.
-
- 0. Make sure WebGUI is on HTTPS.
1. Install Darkstat.
2. Configure Darkstat and try to access it.
3. "Access Darks...
04/24/2016
-
10:55 PM Revision 1322ee22: Make QinQ interfaces work again
-
10:30 PM Bug #6202: OpenVPN bad state / pids do not allow clients to restart.
- I'm not sure if this is a duplicate of 6132 because
1. I different errors in the vpn log - device busy - none of ... -
-
09:08 PM Bug #4590: Nat Reflection bug when using limiters
- any updates on this?
-
- Hi,
I was wondering if someone had this or is there a fix when i want to see the denied reports? pfSense 2.2.4 64BIT... -
09:03 PM Todo #4847: NanoBSD Image Flash Block Misalignment
- ky41083 - wrote:
>
> gpart add -t freebsd-ufs -a4k -s20g ada0s1
>
Note that for mbr partitions kern.geom.part... -
06:32 PM Bug #6167: IPsec IPComp not working
- Is this already in the snapshots? Last I checked dataflow is still blocked when I enable IPComp...
-
- Thanks. The edit to the pfblockerng.sh file seems to have worked - will report back if I have any issues.
Thanks ... -
- Hi Andrew,
"Occasionally, the content of the various lists means that one of the lists completely de-dupes out"
"... -
- Thanks. I'll try that edit.
I'm probably being slow, but I didn't follow your comment in relation to the original... -
- Thanks for the report, please add the following line to */usr/local/pkg/pfblockerng/pfblockerng.sh*
Add this line... -
- I have a number of IPv4 block lists active in pfBlockerNG. Occasionally, the content of the various lists means that...
-
- Pull request submitted. https://github.com/pfsense/pfsense/pull/2905
-
04:10 PM Bug #6179: Not obtaining update status on nanobsd when read-only mounted
- I am experiencing the same issue on my alix2d13. I checked the "prefer IPv4 over IPv6"-box in advanced settings, clea...
-
- FYI, I have had no one else report this issue in the Forum or via PM... I can't reproduce this issue either... The on...
-
- See attachment.
-
07:19 AM pfSense Packages Bug #6248 (Resolved): Feedback for NUT package
- I have created a merge request (https://github.com/pfsense/FreeBSD-ports/pull/120) for the NUT package for PFSense. P...
-
- I have created a merge request (https://github.com/pfsense/FreeBSD-ports/pull/119) for the TeamSpeak 3 package for PF...
-
- 1) If there is no IPsec status response display an info box wrapped in table tags to prevent horizontal scroll bar.
2... - 06:17 AM Revision bb37a6c5: Add some available packages from user requests.
- 06:17 AM Revision c4ab0e8d: Add some available packages from user requests.
- 06:16 AM Revision 641b5618: Add some available packages from user requests.
- 05:21 AM Revision ae84d7ca: Fix #6244 Put back byte counts on Status Interfaces
- 05:21 AM Revision cef2555b: Merge pull request #2903 from phil-davis/patch-4
- 05:03 AM Revision 34446ef7: Fix #6244 Put back byte counts on Status Interfaces
-
- I updated to 2.3 and I have 2 PPPoE connections. One setup on WAN and one setup on OPT4. The first works without any ...
-
- Something broke cryptostats building, seems like maybe the ipcomp patch. Trying now with that reverted.
In the me... -
- duplicate of #3334
-
- Applied in changeset commit:34446ef79a45b476d783e36a480cdf41226de9d4.
-
- merged to master and 2_3, thanks Phil!
-
- Pull request https://github.com/pfsense/pfsense/pull/2903
-
- In 2.2.* Status->Interfaces showed the In and Out byte counts in brackets after the packet counts.
That bit of code ...
04/23/2016
-
10:01 PM Bug #6185: pfsense 2.3 w/luajit breaks on 586-class CPUs
- Chris Buechler wrote:
> Removed lua from nginx, will be in next 2.3.1 snapshot run. Give it a shot and let us know, ... -
- Well, it's not only the GUI that wasn't working any more. I could not get an IP with DHCP from pfSense. Look at the l...
-
01:35 PM Feature #6243 (Duplicate): Traffic Graph include IPv6 addresses
- This pictures shows a computer downloading something and then also an upload.
The download worked via legacy Interne... -
10:32 AM Feature #6242 (Rejected): Use local user datebase for IKEv2 EAP-Charpv2
- Now its possible to use Pre-shared keys as login information for IKEv2 EAP-Charpv2, but would be nice to use Local Us...
- 09:33 AM Revision a39e519b: Don't foreach unless it's an array. Ticket #6142
- Similar thing to https://github.com/pfsense/pfsense/commit/13dab3538fe8b6c1688142c89a017520ad0aaac6 should be done he...
- 09:32 AM Revision 44ffb627: Merge pull request #2899 from phil-davis/patch-4
- 08:40 AM Revision ae568465: Use leftsendcert=always where leftcert is defined. Ticket #6082
- 08:39 AM Revision 7951cab4: Use leftsendcert=always where leftcert is defined. Ticket #6082
- 08:15 AM Revision b700d79e: Hyper-V SMART - didn't intend to commit that part. Ticket #6147
- 08:14 AM Revision 35c8b891: Hyper-V SMART - didn't intend to commit that part. Ticket #6147
- 07:52 AM Revision b4594d39: Add Hyper-V support to system_identify_specific_platform, and disable S.M.A.R.T. actions in Hyper-V guests. Ticket #6147
- 07:52 AM Revision df5c2c73: Add Hyper-V support to system_identify_specific_platform, and disable S.M.A.R.T. actions in Hyper-V guests. Ticket #6147
-
- Not all packages are shown under 'Installed Packages' (System > Package Manager) when a package is removed from the p...
- 06:33 AM Revision fe86a663: fix indent on dhcpdv6 sntp-servers
- 06:32 AM Revision 2605e6d7: fix indent on dhcpdv6 sntp-servers
- 06:25 AM Revision 2f15f373: Hostnames are valid for NTP servers in DHCP Server. Ticket #6239
- 06:24 AM Revision 39bfb267: Hostnames are valid for NTP servers in DHCP Server. Ticket #6239
-
- not sure what to suggest, haven't seen that and went through another ALIX 2.2.6->2.3 upgrade with no issue today.
... -
- Andrew: please start a thread on the forum and we can help troubleshoot. There might be some root cause problem there...
-
04:05 AM Feature #1811: Monitor PPP for connections stuck in "initial" state
- I just experienced this issue.
PPPOE connection went down and failed to re-establish itself, becoming stuck at "LCP:... -
- Renamed to Apple IPsec Profile. leaving to confirm in a build
-
- fix pushed.
-
- What triggers the kernel panic is: ...
-
02:14 AM Feature #6240 (Resolved): vxlan driver
- The vxlan driver "has been added":https://www.freebsd.org/releases/10.2R/relnotes.html#drivers-network since FreeBSD ...
-
- works
-
-
- NTP server fields on DHCP Server config page only allow IPs. That works fine with FQDNs now, IIRC it didn't in the pa...
-
- fixed
-
- works
-
- works
-
- all correct now
-
- upgrades correctly in those cases now
04/22/2016
-
11:44 PM pfSense Packages Bug #6235: Snort sometimes crashes during rule update process (specifically related to VRT .so rule update?)
- This happens fairly frequently for me - it crashed again on Apr. 22nd when pulling in the latest VRT rules (SIGSEGV)....
-
05:57 PM pfSense Packages Bug #6235: Snort sometimes crashes during rule update process (specifically related to VRT .so rule update?)
- The rules update process will restart any running Snort processes at the end of the update. However, I guess it is p...
-
- Snort occasionally crashes during the rule update process and doesn't start again until I manually restart it via the...
-
- Pulled in the patch on https://reviews.freebsd.org/D6062 which gnn has confirmed fixes the issue.
-
- If you go to System>Advanced, Networking tab, and check the box to prefer IPv4 over IPv6 then reboot, does it still d...
-
- Chris, it just sticks there. I use Opera 36 as my standard browser and have cleared the browser's cache. Same happens...
- 05:10 PM Revision 2e4ae1eb: Further fix for tun/tap and topology
- (cherry picked from commit 2284daf2986124fc7786641774fbc3064e001465)
- 05:09 PM Revision 2284daf2: Further fix for tun/tap and topology
-
- duplicate of #6101, that same fix applies across all use of that control
-
05:00 PM Bug #6238: Delete button
- It appears I can't edit the title to be more descriptive. Apologies in advance.
-
- The NTP configuration GUI appears to have an issue in which ALL/ANY of the delete buttons associated with time server...
-
- Pull-request is send, needs some testing though. https://github.com/pfsense/FreeBSD-ports/pull/111
-
- Likely related to haproxy being build against openssl 1.0.1, where it used to be against 1.0.2. Can see that in hapro...
-
- the root cause of this is the same as #6120, added baud there.
-
04:03 PM
Bug #6234: Console serial speed not respected after 2.3 upgrade
- The speed is correctly updated in the config file:
$ grep serialspeed /cf/conf/config.xml
<serialspeed>38... -
- Hello,
after the 2.3Release upgrade, at the reboot, the console of my Alix works at 115200bps, even if in the ser... - 04:10 PM Revision 5918c644: Fixed #6236
- (cherry picked from commit b63f52433ef8429a521833c9345c4c0ebd7a4d83)
- 04:09 PM Revision b63f5243: Fixed #6236
-
- Looks good now, a lot more intuitive/user-friendly.
-
- Works, for this case anyhow.
-
11:20 AM
Bug #6236: vpn_openvpn_client.php: Topology settings showing for Peer to Peer Shared Key, should only show for SSL/TLS
- Applied in changeset commit:b63f52433ef8429a521833c9345c4c0ebd7a4d83.
-
11:11 AM
Bug #6236 (Feedback): vpn_openvpn_client.php: Topology settings showing for Peer to Peer Shared Key, should only show for SSL/TLS
-
- For OpenVPN clients, the topology setting should only show for SSL/TLS, but also shows in Shared Key mode, where it's...
-
11:18 AM Bug #6237 (Resolved): RADVD, Route Information Option type 24, Multiple IPv6 gateways
- hi,
I just noted that, when radvd is enabled, it always advertises Route Information Option type 24 (illustrated i... - 08:05 AM Revision ff4665f0: Prevent configuring the same parent and VLAN ID multiple times. Ticket #6183
- 08:04 AM Revision 4ff83670: Prevent configuring the same parent and VLAN ID multiple times. Ticket #6183
-
07:43 AM Bug #6186: race conditions in service startup
- yes that would be a good idea. Forced restart on unbound after VPN success. However, it can be a good idea to then de...
-
- VPN and DNS is not that clear a solution. You have a chicken-and-egg scenario there. In plenty of cases you need work...
-
- Clean up some VPN menu punctuation.
- 06:43 AM Revision be09e9e8: Don't foreach unless it's an array. Ticket #6142
- Similar thing to https://github.com/pfsense/pfsense/commit/13dab3538fe8b6c1688142c89a017520ad0aaac6 should be done he...
- 06:34 AM Revision a81deb39: Add config upgrade code for CARP IPs on gateway groups, GRE and gif. Ticket #6222
- 06:33 AM Revision aa31bad6: Add config upgrade code for CARP IPs on gateway groups, GRE and gif. Ticket #6222
- 05:41 AM Revision 13dab353: Don't foreach unless it's an array. Ticket #6142
- 05:40 AM Revision 1d616571: Don't foreach unless it's an array. Ticket #6142
- 05:02 AM Revision c9d58166: Update VIPs CARP parent on upgrade. Ticket #6164
- 05:01 AM Revision 8175a2a8: Update VIPs CARP parent on upgrade. Ticket #6164
-
-
-
- Remove these cron jobs on full install if not using ramdisk.
- 04:38 AM Revision 6c7be435: Merge pull request #2883 from NOYB/Periodic_RRD_&_DHCP_Leases_RAM_Disk_Backup
- 04:28 AM Revision 2f5b3dcd: Add 200000 to max cache while we're at it. Ticket #6230
- 04:27 AM Revision b1966925: Add 200000 to max cache while we're at it. Ticket #6230
- 04:24 AM Revision c676c472: Feature #6230 Increase Unbound Host Cache
- This is very easy to do, if people are happy to have 100,000 as an option.
- 04:24 AM Revision bbc32e31: Merge pull request #2897 from phil-davis/patch-4
-
- This is specific to nanobsd, and looks like it may have always happened in that situation. You end up with the defaul...
-
- Chris Buechler wrote:
> Is it always after "Generating RRD graphs"?
Yes, always there
> If you haven't tried th... -
- Quite a few ALIX systems upgraded with no issue along those lines. Is it always after "Generating RRD graphs"? If you...
-
- After upgrading from 2.2.6 to 2.3Release on my Alix, on the next boot I see from the console:
====================... -
- Figured out how to make a diff file of the changes, attached.
-
- fix pushed
-
- Fixed.
Daniel Weeber wrote:
> Had a hard time figuring out I had to insert "domain-insure :"domain.local" for a ... -
- The temperature bar in Status / Dashboard - System Information widget have other appearance than the other bars.
Thi... -
- this was fixed long ago and didn't get marked as such. The PR was merged in May 2013, so fixed in 2.1.0+. Confirmed s...
-
- works, thanks Phil
-
- Sam: added same issue with GRE and gif to #6222, that's fixed there.
-
- fix pushed
-
- adding GRE and gif with same issue here.
fix pushed -
01:09 AM Revision 783ca2b2: Add options to build zabbix3 packages
-
- forgot filename too, services_captiveportal_vouchers.php
-
- Found the bug. misplaced parenthis:
if ($_POST['charset'] && (strlen($_POST['charset'] < 2))) {
This causes the... -
- Attempting to change the charset to anything just render the error:
"The following input errors were detected:
Need... - 12:33 AM Revision 83e3240b: Add vnstat to poudriere_bulk
- 12:33 AM Revision aeca6354: Add vnstat to poudriere_bulk
- 12:33 AM Revision 1047232c: Add vnstat to poudriere_bulk
- 12:25 AM Revision 102446a2: Feature #6230 Increase Unbound Host Cache
- This is very easy to do, if people are happy to have 100,000 as an option.
-
- The code here (and in other places around the system) has lots of repeated stuff (e.g. that array of known values app...
04/21/2016
-
- Thanks Phil, merged. While we're at it, I added 200000 to the list as well.
-
- It is very easy to add 100,000 as an option.
PR https://github.com/pfsense/pfsense/pull/2897 -
05:15 PM Feature #6230 (Resolved): Increase Unbound Host Cache
- Versions 2.* have a drop-down option under DNS Resolver -> Advanced:
"Number of Hosts to cache"
The maximum numbe... -
- Same applies for services that start up in the wrong order. So if a VPN client interface is slow to start up, and a u...
-
10:32 PM Bug #6173: /firewall_nat_edit.php: dsttype_selected wrong when edited w/VIPs defined
- The situation I'm working with is a bit strange:
I have a block of publicly routable IPs routed toward my pfSense'... -
- PR https://github.com/pfsense/pfsense/pull/2895
1) Delete some unused code
2) Make the src type matching work simil... -
- Applied in changeset commit:8fd700c59004638e6061d64e5145bd0df9170532.
-
- Thanks Phil! I was expecting some kind of edge case from fixing that, and hadn't yet had a chance to review every pos...
-
- Note: The code for the src fields that uses $specialsrcdst and is_specialnet() works OK. But build_srctype_list() bui...
-
- That fixes the problem reported here. But now if you have selected a VIP from the dropdown of special destinations, t...
-
- It's a trivially small portion of the total PHP warning crash reports, no need for a rush fix for purposes of reducin...
-
- I can submit a Rush patch if that makes it less "Noisy" for you? :) But I still need to see why this tag is missing....
-
- BBcan177 . wrote:
> Are these crash reports from multiple IPs?
>
Yes, at least a dozen different systems, diffe... -
- Are these crash reports from multiple IPs?
I had one user PM me with this issue (Full Install in a KVM VM w/o Ramd... -
- getting a number of crash reports with: ...
- 08:59 PM Revision ee7c0a00: WArn user on selecting non pfSense theme/css
- (cherry picked from commit 7bb301eb4d99c13784d6753ad3b39b651655b40f)
- 08:58 PM Revision 7bb301eb: WArn user on selecting non pfSense theme/css
-
-
-
-
- 05:44 PM Revision 51247e93: Fix #6173 Refactor NAT Edit src type matching
- 1) Remove a couple of unused calls to is_specialnet()
2) Change srctype_selected() to use a similar scheme to dsttype... - 05:42 PM Revision 73a2d9ce: Merge pull request #2895 from phil-davis/patch-4
- 05:42 PM Revision 047890de: Fix #6173 Refactor NAT Edit src type matching
- 1) Remove a couple of unused calls to is_specialnet()
2) Change srctype_selected() to use a similar scheme to dsttype... -
-
- 04:53 PM Revision 6a817d41: Show insertion point icons only if one or more rules have been selected
- (cherry picked from commit c6a8ddf8135881d6e11bd4f17fe4e5d827eea73d)
- 04:52 PM Revision c6a8ddf8: Show insertion point icons only if one or more rules have been selected
- 04:19 PM Revision 348270c3: ALternative fix for #6092 uses icon to indicate insertion point rather than cell border.
- (cherry picked from commit 995454f305ac46606af0e3a289d98c7519a41498)
- 04:18 PM Revision 995454f3: ALternative fix for #6092 uses icon to indicate insertion point rather than cell border.
-
- Multicast support gets more important as people are switching to IPTV.
For FreeBSD and pfSense there seems to be sup... -
-
- 02:06 PM Revision ed54644b: Updated #6092 as requested
- (cherry picked from commit a7893b72fe9405293ad23d29d03e8985ede796d4)
- 02:04 PM Revision a7893b72: Updated #6092 as requested
-
- Issue number 2786 (https://redmine.pfsense.org/issues/2786) describes an issue where the MTU on the parent interfaces...
-
-
-
-
-
-
- I'm looking into a good repeatable test case for this.
-
- When using pfSense 2.3 with the OpenBGPD package, IPSEC tunnels will drop out and never reconnect again until the ser...
-
- Pierre POMES wrote:
> We had the same issue after upgrading.
>
> As a workaround (we did not notice this redmine ... -
09:48 AM Bug #6220: state mismatch with host-initiated traffic matching binat to IP not locally assigned
- We had the same issue after upgrading.
As a workaround (we did not notice this redmine entry), we replaced binat r... -
-
- Nevermind this was already fixed in the upcoming 2.3.1: https://github.com/pfsense/pfsense/pull/2870
-
- > After upgrading to 2.3 the System>Advanced>Firewall & NAT>Bogon Networks>Update Frequency will not save.
Taken f... -
- Having usb_modeswitch and it's dependencies available in the pfSense default package repo will allow people to use 3g...
-
-
-
-
- Clean up some services menu punctuation.
(cherry picked from commit e78ecb9681106889f94b5c7f7b1dbf7b46f54766) -
-
- Note: This behavior is seen with the 2.3-RELEASE code, and with subsequent changes related to https://redmine.pfsense...
-
- Example:
1) Start with a NAT port forward that has some special source type and destination type - e.g. just for fun... - 09:33 AM Revision 74ac8b7a: Fix #6173 Refactor NAT Edit src type matching
- 1) Remove a couple of unused calls to is_specialnet()
2) Change srctype_selected() to use a similar scheme to dsttype... -
09:07 AM
Bug #6092 (Feedback): (multiple pages): Using the select+click anchor method of changing item order, there is no easy way to move an item to the bottom of the list
- Updated as requested
-
- It does work, though I'd be happier if there were some other visual indicator of where the rule will drop. At least w...
-
- This looks good to me, but want JimP to confirm.
- 08:52 AM Revision 08067906: Fix #6173 Use correct list of special nets
- is_specialnet() was only using a smaller list of "special nets", so when you have a VIP as the selected special desti...
- 08:52 AM Revision 70480719: Merge pull request #2893 from phil-davis/patch-4
- 08:23 AM Revision 6ecf66a9: Switch domain overrides from stub-zone to forward-zone. Ticket #6065
- 08:22 AM Revision 0bde07b7: Switch domain overrides from stub-zone to forward-zone. Ticket #6065
-
07:56 AM Bug #6065: unbound: Domain Overrides are not always working if using stub-zones
- Had a hard time figuring out I had to insert "domain-insure :"domain.local" for a domain I had a Domain Override for ...
-
- ran into a situation with a support customer where forward-zone was necessary. stub-zone can be problematic in a vari...
-
- Clean up some services menu punctuation.
- 06:03 AM Revision 8fd700c5: Fix #6173 Use correct list of special nets
- is_specialnet() was only using a smaller list of "special nets", so when you have a VIP as the selected special desti...
- 05:42 AM Revision 8e53c298: Password isn't required for growl. Ticket #6221
- 05:41 AM Revision 95459439: Password isn't required for growl. Ticket #6221
-
- This is still broken in 2.3 though the exact form of the problem seems to have changed slightly.
See: https://forum.... - 04:40 AM Revision d114f81b: Add validation of address family and protocol combinations. Ticket #6219
- 04:40 AM Revision bf8b6787: Add validation of address family and protocol combinations. Ticket #6219
- 04:29 AM Revision c0358d44: Add validation of address family on IP aliases with CARP parent. Ticket #6218
- 04:29 AM Revision 58b33af6: Add validation of address family on IP aliases with CARP parent. Ticket #6218
-
- M S: Does it just stick there at "obtaining update status"? That makes it seem like the javascript is failing browser...
-
- David Wood wrote:
> The precautionary principle suggests that changing the current behaviour for the vast majority o... -
03:19 AM Bug #5993: dhcp6c not started until an RA received
- Richard Patterson wrote:
> David Wood wrote:
> > Maybe a clearer description is:
> >
> > Do not wait for a RA [ ... -
- works
-
- works
-
- Thanks, that shows the issue.
I thought that private box showed up on comments for everyone, as I know people use... -
01:53 AM Bug #6222: CARP VIP config upgrade problem in gateway groups, GRE and gif
- I cannot find 'Private' box :)...
-
- Grzegorz: could you please post the diff from your config history? Diag>Backup/restore, Config history tab. Choose th...
-
- Problem SOLVED.
After upgrade to 2.3 Gateway Entry at Gateway Groups was changed from GW_Wan1 : 1.1.1.1 (WAN1 CARP... -
- I had worked configuration: 2clusters PeerToPeer 2cluster CARP OpenVPN. Interface: GW GROUP Wan1FailoverWan2.
After ... -
01:30 AM Bug #5317: CSR signed certificates shows issuer as external
- I did some further research with my pfSense boxes. When the external CA is added after the locally generated CSRs are...
-
- works.
-
- looks good
-
- fixed
-
- The growl notification test doesn't work if a password isn't set. One isn't strictly necessary.
-
- fixed
-
- works
-
- looks good on both.
-
- fixed
-
- fixed
-
- works
04/20/2016
-
- fixed
-
- fixed
-
- fix pushed
-
- If only one of source or destination is configured as an IP or subnet, the address family input validation doesn't wo...
-
- confirmed, checked prior to update when disabled, doesn't now. Thanks Phil!
-
- Good user feedback here https://forum.pfsense.org/index.php?topic=110424.msg614994#msg614994
-
- Applied in changeset commit:d3f7004d96c274f117a0264094595c9fbe85b6f7.
-
- Pull request https://github.com/pfsense/pfsense/pull/2890
-
- If "Disable the automatic dashboard auto-update check" is checked in update settings, the code is still doing the che...
-
- fix pushed
-
- There are combinations of protocol and Address Family on diag_packet_capture.php that should trigger input_errors.
... -
-
- fix pushed
-
- It's not possible to configure an IP alias with a CARP parent where one is IPv6 and the other is IPv4. Input validati...
-
-
-
-
-
- Replies to traffic initiated from the host itself, translated by binat, to a target IP that isn't locally assigned on...
-
-
-
- Remove these cron jobs on full install if not using ramdisk.
- 05:54 PM Revision 3d4d00f3: Fix text style
- (cherry picked from commit 0f99071f5d8cc6fe2a8d6c267dae0008ec0f8575)
- 05:54 PM Revision 0f99071f: Fix text style
- 05:52 PM Revision d16798b7: Fixed #6214 by splitting the "Client settings" section into "Client settings" and "Advanced client settings"
- (cherry picked from commit 71f1f25bd3f9b5a1a3a9a6a55b06cbaf7d164bc0)
- 05:51 PM Revision 71f1f25b: Fixed #6214 by splitting the "Client settings" section into "Client settings" and "Advanced client settings"
-
- that's by design, so you can override with floating rules if desired
-
03:44 PM Bug #6217 (Not a Bug): lo0 default pass rules missing quick flag
- ...
-
- that's a bug in something upstream on your network (probably a modem), not in anything we can control. Payload isn't ...
-
03:42 PM Bug #6216 (Not a Bug): Gateway Status detected as down when it is not.
- This has happened with several installs now. I am a user not a programmer but I think I found the problem.
On new ... -
03:19 PM Bug #5993: dhcp6c not started until an RA received
- David Wood wrote:
> *What should the flag be called?*
>
> I dislike the proposed description of the flag in int... -
03:05 PM Feature #6215 (New): Create consistent UI for admin access security
- I have probably filled in this page thousands of times, but every time I have to double check each box to make sure I...
-
- I can confirm that this bug si still present in pfSense 2.3.
-
02:12 PM Revision c045e352: Allow upload of favicon.ico without prefix adding
- (cherry picked from commit 3f3fce19318d1677020adcac742c0bfb5e25f967)
- 02:11 PM Revision 16dc65d5: Merge pull request #2892 from deajan/captive-portal-favicon2
-
-
- sync with upstream
-
- Looks good to me
-
01:00 PM
Bug #6214 (Feedback): vpn_openvpn_server.php: Topology drop-down is not showing for Peer to Peer SSL/TLS
- Applied in changeset commit:71f1f25bd3f9b5a1a3a9a6a55b06cbaf7d164bc0.
-
- The topology option should be present for Peer to Peer SSL/TLS as it does for the Remote Access SSL/TLS options, but ...
- 12:00 PM Revision 23a6f29b: Comment out no longer used function. Remove after next release.
- (cherry picked from commit 69b8328d8596392d9d6049f304dd6da6ecbe1622)
- 11:59 AM Revision 69b8328d: Comment out no longer used function. Remove after next release.
- 11:53 AM Revision af69e4d6: Add checks in case there are dpinger param problems
- in 2.3 installations that were upgraded from 2.2.* when the apinger to
dpinger params conversion code in upgrade_130_... - 11:52 AM Revision 03172507: Merge pull request #2872 from phil-davis/dpinger-params-check
-
11:43 AM Revision fc76a1e3: adding privileges and separating DNS Resolver overrides from general settings
- 11:35 AM Revision 048f29dc: Fix #6212 Really disable checks
- Belts and braces here - I the setTimeout is not done then the other bits of code do not get called anyway, but I took...
- 11:35 AM Revision 64a52d27: Merge pull request #2890 from phil-davis/patch-4
-
- Some punctuation clean up.
(cherry picked from commit 4a75d129df0c6eee2540d885c951e9ae72a0ed5e) - 11:32 AM Revision 61dbbe6f: Merge pull request #2889 from NOYB/Firewall_-_Punctuation_-_Clean_-_Up
- 09:18 AM Revision d3f7004d: Fix #6212 Really disable checks
- Belts and braces here - I the setTimeout is not done then the other bits of code do not get called anyway, but I took...
-
07:48 AM Feature #6213 (New): IPSEC: IPV4/IPV6 dual-interface-stack support for Mobile IKE
- The way how the UI is designed in pfsense-2.3.0, the MobileIke Phase-1 entry can only be bound on a single physical i...
- 07:31 AM Revision 4743ee32: Fix validation of v4 in v6 rules and vice versa. Ticket #6211
- 07:30 AM Revision e5a1ddb5: Fix validation of v4 in v6 rules and vice versa. Ticket #6211
- 07:09 AM Revision 0f2fd77a: Fix selection of dsttype in configs with VIPs defined. Ticket #6173
- 07:08 AM Revision 70854dac: Fix selection of dsttype in configs with VIPs defined. Ticket #6173
-
- Some punctuation clean up.
-
07:03 AM Bug #6200: LACP with em driver does not work with cisco active lacp setup
- The problem is on Gi0/23 and Gi0/24. These are the teamed ports connected to pfSense.
-
- Apr 20 11:58:49.512: %SW_MATM-4-MACFLAP_NOTIF: Host 0015.1735.9462 in vlan 1 is flapping between port Gi0/24 and port...
-
06:59 AM Feature #6210: create user privilege for only DNS Host and Domain Overrides in DNS Resolver
- I submitted a pull request https://github.com/pfsense/pfsense/pull/2891
-
05:23 AM Bug #6205: VLAN tagging in Hyper-V guest not working?
- Update:
Just faced a very weird issue: Whenever I do a reboot from within the VM (# reboot, for example), virtual N... -
- Thanks for getting back Chris.
I've checked all the configuration and everything is fine on the hypervisor and upl... -
- Finally found a way to replicate this. Fix pushed. Just because $config['virtualip']['vip'] is an array in your confi...
-
- Phillip Davis wrote:
> I still cannot reproduce it. I copied all the things in your screen shot (filling in valid IP...
04/19/2016
-
- I still cannot reproduce it. I copied all the things in your screen shot (filling in valid IP addresses where you red...
-
09:59 PM
Bug #6173: /firewall_nat_edit.php: dsttype_selected wrong when edited w/VIPs defined
- I have tested with the same setting you have in you MS-RDP rule, but was not able to reproduce the issue either.
U... -
- Phillip Davis wrote:
> @Jacob can you provide a screenshot of the whole NAT entry that has this problem.
> I have t... -
- @Jacob can you provide a screenshot of the whole NAT entry that has this problem.
I have tried various different NAT... -
- I am experiencing the same issue. My installation is an upgrade from 2.2-Release, installed from the ISO approximate...
-
- The issue raised in this bug should certainly be addressed, but I urge careful review of the commentary in Issue 1 of...
-
- Currently, the only way to allow privilege to add/edit DNS overrides is to allow access to the entire DNS Resolver Op...
-
-
-
-
-
-
06:50 PM Bug #6189: Boot up troubles with ramdisk and alias tables
- NOYB NOYB wrote:
> ky41083 - wrote:
> > NOYB NOYB... "But I don't know how to do create a commit for that from a Wi... -
-
ky41083 - wrote:
> NOYB NOYB... "But I don't know how to do create a commit for that from a Windows environment."... -
- #6184 is basically "fix the mount issue", so it does cover everything here.
-
05:59 PM Bug #6209: nano + dashboard - lag issues in UI
- diag>nano> enable RW all the time. resolved the issue, apparently the first time it was tried, mount was locking the ...
-
- duplicate of #6184
-
- (3:18:35 PM) PiBa-NL: systemwidget seems to call conf_mount_rw() 12 times for a single page refresh..
(3:18:46 PM) P... -
- maybe if mount wasnt grinding away at 100% cpu for half an hour these wouldnt error either.
Crash report begi... -
- doing a ps auxwwf | grep mount take 6-12 seconds to return the following
[2.3-RELEASE][root@x]/root: ps auxwwf | g... -
- changed webui processes from 8 to 2, still having same problem with sys info widget active
-
- i attempted to remove all the widgets, and got some squirrely errors also. apparently that isnt possible?
-
- upgraded from 2.2.5 to 2.3, on a factory install the system slower than all getout, ui lag, network lag, appears that...
-
-
-
- duplicate of #6177
-
- If my WAN connection gets unplugged, or even if the DSL modem loses power or reboots, the pfSense GUI rapidly becomes...
-
03:19 PM
Feature #6199: NAT Disable does not match firewall disable method
- The NAT page(s) have more columns, hence slightly less room for icons. For that reason we don't display a second "dis...
-
09:14 AM Feature #6199: NAT Disable does not match firewall disable method
- On the NAT disable you use a checkbox on the left hand side
For firewall rules it looks like you have both the check... -
03:13 PM
Bug #6203 (Feedback): Error handling username with single quote in Captive Portal SQL Database
-
- And PR has already been merged while I was typing the redmine issue!
-
- PR https://github.com/pfsense/pfsense/pull/2887
-
- Forum: https://forum.pfsense.org/index.php?topic=110243.0
Single quotes in user names need to be escaped as 2 sing... -
-
-
- I pushed the last patch, commit:cb661db and commit:2bde5fb
-
- Better version of the patch after feedback from Renato
-
- Potential patch attached. Works for me here in a test setup, but needs some verification.
-
- I committed some styling changes to the Diagnostics > Edit File and Diagnostics > Command Prompt pages. Let me know i...
-
- Guessing issue is subject. Please report back what you find.
-
- Hi,
after upgrading a virtualized (Hyper-V 2012R2) installation from 2.2.6 to 2.3, I am not able to access anythin... -
01:10 PM
Todo #6095 (Feedback): remove logo from wizard
- Applied in changeset commit:d1ee3405d2cfdfd3ee79743586655a8b999f770e.
-
- Thanks for the reminder Marco. The committed change should effect all wizards on the factory and community images.
-
- Seems sane. What about "debug lacp all" from the switch?
-
- Syslog attached.
-
- Yes, I am currently on 2.3. But this feature has never worked with any prior version I used, i.e. 2.x.x
-
- The original poster has started the forum thread https://forum.pfsense.org/index.php?topic=110326.msg0
The thread ... -
- Thanks Bill
-
- This bug was fixed in Suricata GUI package version 3.0_6 merged on April 18, 2016.
Bill - 12:08 PM Revision ab2f9684: Escape username before use in CP SQL
- A maybe "better" version to try.
(cherry picked from commit 0a02fc5eefb265e0684d4447bf0a7c2a9687a188) - 12:07 PM Revision 62487157: Merge branch 'patch-7' of https://github.com/phil-davis/pfsense
- * 'patch-7' of https://github.com/phil-davis/pfsense:
Escape username before use in CP SQL - 12:03 PM Revision a2c12f5d: Handle single quotes in user names for CP
- Forum: https://forum.pfsense.org/index.php?topic=110243.0
This is a trial - make sure it really works before committi... - 12:02 PM Revision 6104bd1c: Merge pull request #2886 from phil-davis/patch-6
-
12:00 PM Revision 0503e477: Fix trivial GUI typo.
- TRB should be TBR for "Token Bucket Regulator".
(cherry picked from commit e643627c833ce12fa00a682c66929aaad95760eb) - 12:00 PM Revision 513f20f9: Merge pull request #2885 from devnullity/patch-1
- 11:59 AM Revision 0f1332d6: Use English spelling for var name
- For future maintenance it might be easier if this var name is spelled with the usual English spelling.
(cherry picked... - 11:57 AM Revision bd186399: Merge pull request #2882 from phil-davis/patch-4
- 11:56 AM Revision 8d967cb2: Added back GET parameters support (as in pre-2.3)
- In version 2.3 the Traffic Graph page switched from GET to POST parameters to control the graph.
This patch restores ... - 11:56 AM Revision c673d0dd: Merge pull request #2880 from LucaTNT/patch-1
-
- (cherry picked from commit 14a7342391d8606f26168a7dddf2e0beb6a0c20a)
- 11:55 AM Revision 0a02fc5e: Escape username before use in CP SQL
- A maybe "better" version to try.
-
- Don't see the icon adding any value. Consumes space and clutters page. Make consistent with the firewall rules page.
... - 11:54 AM Revision c6494cfe: Merge pull request #2879 from NOYB/Firewall_NAT_-_Remove_Pencil_Icon_From_Aliases
-
- (cherry picked from commit b48f9816cd34bfee40825612a33f16215989a937)
- 11:52 AM Revision a9ba29a5: Merge pull request #2875 from NOYB/Interfaces_-_Punctuation
-
- Just a convinience alias, much like "LAN net", "LAN address", etc.
Primary usecase if for explicitly blocking targ... -
- ...
- 11:23 AM Revision 6fb36cdd: Handle single quotes in user names for CP
- Forum: https://forum.pfsense.org/index.php?topic=110243.0
This is a trial - make sure it really works before committing. -
- This bug is fixed in Snort GUI package version 3.2.9.1_11 that is currently awaiting review and merge of the pull req...
-
- Hi
Apologies if this is doubling up (as I can see various threats on it on the pfSense forum), but Luca Deri who i... -
- TRB should be TBR for "Token Bucket Regulator".
- 02:58 AM Revision c049c15e: Use English spelling for var name
- For future maintenance it might be easier if this var name is spelled with the usual English spelling.
-
12:01 AM Bug #6201: Firewall log filter not filtering correctly
- Ah ok sorry for the confusion and thanks for the quick response
04/18/2016
-
- duplicate of #6132
-
- I got into a state where the pfSense dashboard would tell me that it can't connect to my OpenVPN client instances ask...
-
- that's correct, it's a regex
-
- If you set a firewall filter to show only source ip 192.168.254.15, then any .15x source ip appears in the output, no...
-
- What version?
Add a tunable in System>Advanced, System Tunables, net.link.lagg.lacp.debug value 1. Post the syste... -
- LACP on the cisco switch does not get activated by LACP lagg on pfSense.
Using lagg with vlan on em nics. Hardware c... - 11:11 PM Revision 8b7ef76b: pfSenseHelpers white space formatting
- Just a bit of white space and formatting to standardize this code, and a couple of typos in comments.
(cherry picked ... - 11:10 PM Revision 2ca17c6c: Merge pull request #28881 from phil-davis/patch-4
- 11:07 PM Revision 8d13b675: Fixed #6175
- 11:05 PM Revision 726fdb61: pfSenseHelpers white space formatting
- Just a bit of white space and formatting to standardize this code, and a couple of typos in comments.
- 09:26 PM Revision 7eae8df9: chmod +x on rc.backup_aliastables.sh. Ticket #6189
- 09:26 PM Revision 93cbc65f: chmod +x on rc.backup_aliastables.sh. Ticket #6189
- 08:53 PM Revision 709309eb: Added back GET parameters support (as in pre-2.3)
- In version 2.3 the Traffic Graph page switched from GET to POST parameters to control the graph.
This patch restores ... - 08:39 PM Revision ca459215: Fixed GPS display sprintf => printf
- (cherry picked from commit ef268b48adfd07bb4771858990eb7ed79de90585)
- 08:39 PM Revision ef268b48: Fixed GPS display sprintf => printf
-
- NOYB NOYB... "But I don't know how to do create a commit for that from a Windows environment."
Use Cygwin CLI to c... -
- Not sure if it's possible to chmod +x on Windows. I just pushed the change to do that in both branches.
-
-
/etc/rc.backup_aliastables.sh needs rights set to 755. But I don't know how to do create a commit for that from a... -
10:43 AM
Bug #6189 (Feedback): Boot up troubles with ramdisk and alias tables
- PR https://github.com/pfsense/pfsense/pull/2878 merged.
Thank you. - 07:39 PM Revision 0cb39b48: Removing focus from the anchor gets rid of the annoying dotted box
- (cherry picked from commit 4c08c292408e3c5dea4c1832f1cc3ad07f6375bf)
- 07:38 PM Revision 4c08c292: Removing focus from the anchor gets rid of the annoying dotted box
- 07:15 PM Revision 4916343f: Update widget to POST link
-
- Hi Chris Thank you for the reply when you say it clearly shows its starting again but why the syslogd: exiting on sig...
-
- Albert Yang wrote:
> Im not sure if it was fixed for 2.2.4? But seems to effect it also?
>
It does not, this ha... - 06:49 PM Revision 571e181c: COmment fix
- (cherry picked from commit 7f30df9a2d3ffca0ae32999b25aa2fe1b2265c6a)
- 06:49 PM Revision 7f30df9a: COmment fix
- 06:44 PM Revision 29fda3d3: Make services POST only by providing JS code in pfSenseHelpers.js
- 06:27 PM Revision dca4eadf: Convert status_services and widget to POST
-
06:20 PM
Bug #6175: firewall_rules_edit possible php warning - floating rules when input error
- Applied in changeset commit:8d13b6753c2b024002d3bbbd222cea33045c9741.
-
- seems fixed after gitsync. thanks all
-
10:35 AM
Bug #6175: firewall_rules_edit possible php warning - floating rules when input error
- Change suggested by Jorge M. Oliveira was found to be effective and has been merged.
Thanks Jeroen and Jorge.
... -
- Jorge M. Oliveira wrote:
> I wonder if this is as easy as
> [...]
>
> This will place the explode() call in a mo... -
- What do you mean by "two different visual techniques"?
-
- NAT disable and firewall disable use two different visual techniques. Would be nice if they matched.
-
- Ah there, thanks. I should have added a -i to my grep. Fixed that in all 3 branches. I didn't bump the version though...
-
- If ramdisk is enabled keep a copy of the alias tables to restore at boot time. Otherwise unpredictable behavior may ...
- 03:41 PM Revision bd81781e: Merge pull request #2878 from NOYB/Alias_Tables_RAM_Disk_Store
- 03:38 PM Revision 0e9cb2ab: Fix #6187 Handle Growl IP Address problems
- (cherry picked from commit 642c6023fea2957bb646b1290371ead508f5cc67)
- 03:37 PM Revision f14d5d5e: Merge pull request #2877 from phil-davis/dns_get_record
-
- Replace underscore with space in display text of certain fields to allow them to line wrap. ex: long alias names
(c... - 03:17 PM Revision c3ada3d5: Merge pull request #2866 from NOYB/Firewall_/_Rules_-_Underscore_Line_Wrap
-
-
-
- --show-tls is not the same thing as --show-ciphers. AES-GCM is not a supported cipher in currently-available OpenVPN ...
-
- Thanks
-
- William Bell wrote:
>
> Sounds to me as if you didn't even try to replicate this issue.
I closed this because D... -
- duplicate of #6161
-
01:18 AM Bug #6193 (Duplicate): Services/Captive Portal/PortalName/Allowed IP Addresses/Edit missing description entry
- Hi All,
On the previous version 2.2.x in "Services/Captive Portal/PortalName/Allowed IP Addresses/Edit" there was a ... -
- not sure this is a general issue, probably should post to the proxy board on the forum where more will see it to disc...
-
02:20 AM pfSense Packages Bug #6194 (Not a Bug): SSL inspection not working
- Hi
pfSense 2.3 Https SSL inspection does not work I'm putting together create a certificate to the computer, but ... -
- It works fine on stock FreeBSD 10.3.
-
- Applied in changeset commit:642c6023fea2957bb646b1290371ead508f5cc67.
-
10:39 AM
Bug #6187 (Feedback): Growl notifications emit PHP warnings if the specified name does not exist
- PR merged. Thanks Phil.
-
- Applied in changeset commit:c228156fc41eae97128dca078b518eb7b4e96b35.
-
- Putting a space at the start of the OpenVPN tunnel network on a Shared Key server causes the interface to be configur...
-
-
09:03 AM Feature #5813: Replacement of layer7 filter
- Any chance to see this Layer7 replacement in the roadmap?
-
- Fix pushed, new version will be up shortly.
-
- The Quagga_OSPF package can get stuck during sync if there is a problem with the Quagga configuration, leading to the...
-
- On 2.2.x the Quagga package is "Quagga OSPF" and on 2.3 it's "Quagga_OSPF". So the package still exists, but the spac...
-
- Thermal sensor in new apu2 board.
This is the solution of OPNsense (Don't hate me for this! )
https://github.com/... -
08:03 AM Bug #6195 (Resolved): Cannot set Manual Outbound NAT when Language is pt_BR
When the language is set to pt_BR, outbound NAT cannot be set to Manual Outbound NAT. On save, it changes back to A...-
- Don't see the icon adding any value. Consumes space and clutters page. Make consistent with the firewall rules page.
04/17/2016
-
- Im not sure if it was fixed for 2.2.4? But seems to effect it also? Was trying to send syslogs to logstash seems to b...
-
- You may close this ticket. The ID column is no longer present in 2.3.
-
- Probably should remove logo from AWS VPC VPN Wizard (on factory image) as well.
-
09:02 PM Bug #6167: IPsec IPComp not working
- Test and config pushed here: https://github.com/gvnn3/netperf/tree/master/IPSEC/Tests/iperf-null-ipcomp-nopmc
What... -
- I'm testing stock FreeBSD 10.3 and will report back.
-
07:59 PM pfSense Packages Bug #3525: Dansguardian Writing Script Garbage (CsrfMagic.end)
- Kill Bill wrote:
> That page is a XML template and the textarea is base64-encoded. This bug doesn't make any sense a... -
03:48 PM Bug #6175: firewall_rules_edit possible php warning - floating rules when input error
- I wonder if this is as easy as...
-
- Just an FYI, this functionality (and more) already exists in the pfBlockerNG package.
-
10:46 AM Bug #6192 (Resolved): pfSense 2.3's status_graph.php no longer respects GET parameters
- Hi everyone,
on pfSense 2.2.x I had a bookmark saved that would take me to the status_graph.php page, already set to... -
08:47 AM Bug #6191: OpenVPN AES-GCM
- It is sometimes claimed that TLS-DHE-RSA-WITH-AES-256-GCM-SHA384 would only be available from OpenVPN 2.4 onwards. Th...
-
- When doing "openvpn --show-tls" in the shell of pfSense 2.3, it does post a long list including
TLS-DHE-RSA-WITH-A... -
- A quick suggestion for the routine which starts re-installing packages after the first reboot following the update:
... -
07:55 AM
Bug #6101: Alias/NTP/uPNP/other Edit add and then delete of new rows issue
- The fix will apply to all pages that use this construct, including UPnP.
-
07:47 AM Bug #6101: Alias/NTP/uPNP/other Edit add and then delete of new rows issue
- It may be worth noting that this affects other pages as well - I discovered it on the UPnP settings page.
I consider... - 07:23 AM Revision 642c6023: Fix #6187 Handle Growl IP Address problems
-
- If ramdisk is enabled keep a copy of the alias tables to restore at boot time. Otherwise unpredictable behavior may ...
- 07:07 AM Revision b3908dd7: Keep this on master for 2.4, keep for RELENG_2_3 only. Revert "Remove lua from nginx. Ticket #6185"
- This reverts commit bdd05750a76f44306333da87380b78fbd8d5bb16.
- 07:01 AM Revision 3b9caf69: Remove lua from nginx. Ticket #6185
- 07:00 AM Revision bdd05750: Remove lua from nginx. Ticket #6185
-
-
System has ramdisk enabled, so those logs are gone (rebooted).
re: the patch; Was afraid that might be the cas... -
- When you get into this scenario, the GUI will fail to start OpenVPN because it's already running, under a PID that do...
-
-
Out of the blue this just occurred again.
openvpn_server1.pid: 53960
openvpn_server2.pid: 57333
ps:
5072... -
- Since 2.3 version of pfsense NUT is no longer exists in package list, but it should be added later.
I know that deve... -
- updates that do not require a reboot should probably call reroot ("reboot -r"), not completely thought through, but t...
-
-
I get that crash report too. About 1/3 of the time. No pppoe here. i386 full install. Ram disk enabled.
-
- the console menu's never had input validation there. Good to have though
-
-
PR submitted: https://github.com/pfsense/pfsense/pull/2878
-
-
Enabling ramdisk does not save/backup/restore the alias tables (/var/db/aliastables/).
Thus they have to be re-do... -
- Pull request https://github.com/pfsense/pfsense/pull/2877
-
- System->Advanced, Notifications
1) In the Growl section, "IP Address", put an invalid hostname (e.g. I put junk.inf.... -
- fixed
-
- reverted that change from master so it only applies to 2.3.x, so this is done.
-
- We removed LUA from nginx, because #6185.
Since 2.4 won't support i386, remember to re-enable it.
tools/conf/pf... -
- Removed lua from nginx, will be in next 2.3.1 snapshot run. Give it a shot and let us know, Kevin. I'm not going to g...
-
- Chris Buechler wrote:
> not supported hardware. The Soekris 5501 and newer have CMOV (I think even the 4801 does). T... -
-
- not supported hardware. The Soekris 5501 and newer have CMOV (I think even the 4801 does). Talking about ~20 year old...
-
- nginx is built with OPTIONS LUA, so the appliance wont start on 586-class CPUs starting with pfSense 2.3. These CPUs...
-
- works
-
- There have always been a variety of possibilities for race conditions in service startup because of the nature of how...
04/16/2016
-
- moved to 2.3.1, feel free to move this to 2.3.2
-
- Good morning,
I update my alid2d13 from pfsense 2.2.6 to 2.3 two days ago. Before doing so, I uninstalled all packag... -
- may be dup
-
08:47 PM
Bug #6184: 2.3 NanoBSD issues with getting stuck read-only mounted
- Thanks, that seems to have solved it:...
-
- Try this: https://forum.pfsense.org/index.php?topic=109766.msg612108#msg612108
There is some issue here we haven't... -
08:28 PM
Bug #6184: 2.3 NanoBSD issues with getting stuck read-only mounted
- For what it's worth, I'm still in the second boot of the system (after the auto-reboot from the config.xml restore). ...
-
08:17 PM
Bug #6184 (Resolved): 2.3 NanoBSD issues with getting stuck read-only mounted
- Hi all,
I just did a new pfSense 2.3 NanoBSD install after getting a new CF card yesterday. I just skipped through... -
- Perhaps there could be a checkbox for URL table aliases that lets the user select what they want to do if the URL ret...
-
05:54 AM Bug #6181 (Resolved): Updating url alias tables fails when remote server returns empty document.
- Updated to 2.3 and it seems the url alias tables fails to update when one table contains no entry ("").
In my case I... -
- Steve Beaver wrote:
> Just to be clear you are adding duplicate VLANs from option 2) (Assign Interfaces) of the TTY ... -
09:11 PM
Bug #6183 (Feedback): Assign Interfaces allows you to define multiples of the same VLAN
- Just to be clear you are adding duplicate VLANs from option 2) (Assign Interfaces) of the TTY console right, not the ...
-
- As a workaround in webConfigurator you can use the Diagnostics / Backup & Restore / Config History to remove the dupl...
-
- New install of 2.3 on RCC-VE 2440. While assigning interfaces at the console you are able to add the same VLAN (e.g. ...
- 08:47 PM Revision e6f2d95b: Remove redundant if check.
- 08:47 PM Revision 34515250: Remove redundant if check.
-
- Assigned to gnn, in case it's related to tryforward.
-
- I'm running the _10 package version now (and 2.3 RELEASE), and it's still saying "Deault is ON".
-
- This is also happening for GRE interfaces. Have to reselect the CARP address as source instead of "WAN"
-
- Also: workaround until ALPN is working again is going back to "npn HTTP/1.1,HTTP/1.0" instead of "alpn HTTP/1.1,HTTP/...
-
- ALPN is supposed to be superseding NPN, but for some reason ALPN is disabled in the libraries used by HAProxy on 2.3 ...
-
-
The system that was having the problem was fixed by restoring the openvpn section from vm dev machine that had the... -
- Jim Pingle wrote:
> That should probably append mode+vpnid (which I think is in $settings at that point) to the lock... -
- That should probably append mode+vpnid (which I think is in $settings at that point) to the lock name since two diffe...
-
- I think the issue is subject, similar to #6160 for strongswan. If you launch OpenVPN twice really close together you ...
-
-
- 06:37 AM Revision cc1bb85c: Merge pull request #2871 from NOYB/System_/_Advanced_-_Punctuation
- 06:36 AM Revision 971257cb: Force 4096 RSA keys
- Add option `-b 4096` to force the keys to 4096-bit.
This parameter is ignored for Ed25519 keys. - 06:36 AM Revision dca77360: Harden sshd_config
- The changes are better explained in the following article:
https://stribika.github.io/2015/01/04/secure-secure-shell... - 06:29 AM Revision 6bf5ed18: Fix sshd can't load key log spam
- Closes [6143](https://redmine.pfsense.org/issues/6143)
- 06:29 AM Revision 40d66b27: Merge pull request #2874 from jlduran/6143-fix-sshd-log-spam
- 06:23 AM Revision dce5a715: Unset dhcpdv6 for deleted interfaces on interfaces_assign.php. Ticket #6152
- 06:22 AM Revision ff3f0016: Unset dhcpdv6 for deleted interfaces on interfaces_assign.php. Ticket #6152
- 04:38 AM Revision 745eaa98: Allow 0 mask on Unbound ACLs. Ticket #6073
- 04:38 AM Revision e7fb2cfd: Allow 0 mask on Unbound ACLs. Ticket #6073
- 04:37 AM Revision e6344c75: Allow 0 mask on Unbound ACLs. Ticket #6073
- 04:19 AM Revision edf3031b: Avoid implode error if no interfaces are selected.
- 04:19 AM Revision 3b8085fc: Avoid implode error if no interfaces are selected.
- 04:18 AM Revision 130d4d4b: Avoid implode error if no interfaces are selected.
-
- that works, leaving to verify in snapshot
- 01:29 AM Revision fff3fe89: Fix sshd can't load key log spam
- Closes [6143](https://redmine.pfsense.org/issues/6143)
-
- pushed fix for same issue on interfaces_assign.php. That should cover it.
-
- If you have no Internet access on the reboot post-upgrade when the package reinstall runs, it ends up stuck in a neve...
-
-
- already fixed in 2.3, not fixing the PBI
-
- The system checks the ARP table to see what's live. Hosts with static ARP will always be "live" in that case. There i...
-
- works
-
- no apparent issues here.
-
-
- PBI crud that won't be an issue if Asterisk package comes back to 2.3
-
- there can be a variety of things you don't want to clone depending on specifics of your setup. If you're going to clo...
-
- fixed in monitoring graphs in 2.3
-
- will be resolved when ntopng comes back to 2.3, doesn't currently exist.
-
- 0.86 is in 2.3
-
- this still happen with 2.3? Haven't seen it on any of mine, but they're all 64 bit.
-
- PBI problem that no longer exists in 2.3+.
-
- dead package
-
-
-
-
04/15/2016
-
- works
-
- Working correctly now.
Thanks for the fast response. -
- Applied in changeset commit:d1acd5bb5723e66bc5871bdf4335208253f5a4bd.
-
07:06 AM
Bug #6162 (Feedback): Bogon Networks -> Update Frequency setting not saved
- PR merged. Thanks.
-
- Pull request https://github.com/pfsense/pfsense/pull/2870
-
-
- If you go to _SystemAdvancedFirewall & NAT -> Bogon Networks_ and change the _Update Frequency_ field to anything oth...
-
- works
-
- works
-
- works
-
- works
-
07:50 AM
Bug #6170: load_balancer_virtual_server.php: Unable to set "None" as fall-back pool
- Applied in changeset commit:a2050d386f99bf027b70de5aa4b4aa713a49e5b9.
-
07:45 AM
Bug #6170 (Feedback): load_balancer_virtual_server.php: Unable to set "None" as fall-back pool
- "None" option added to fall-back pool selector
Thanks! -
- Can't set none as fall-back pool in virtual server. It does not exists in drop-down menu
-
- works
-
- Fixed.
Thanks Phil. -
- Thanks Phil, merged.
-
- fix pushed
-
- fixed
-
08:30 AM
Bug #6168: load_balancer_pool.php and load_balancer_virtual_server.php: Can't copy Load Balancer pool or virtual server
- Applied in changeset commit:91cd1923b133c57eaa9897ce4574ce19b7122dc4.
-
08:26 AM
Bug #6168 (Feedback): load_balancer_pool.php and load_balancer_virtual_server.php: Can't copy Load Balancer pool or virtual server
- If the form action is not explicitly specified, it uses the current GET arguments which broke the "dup" functionality...
-
- also true of virtual server.
-
- When I want to copy a pool in LB tab it's editing object that was taken as a source of copy and not create new one.
-
- fixed
-
10:10 AM
Bug #6169: load_balancer_virtual_server.php: Can't set alias as IP address
- Applied in changeset commit:0200db178ef225f796aea837e33ae438f5899ae3.
-
10:04 AM
Bug #6169 (Feedback): load_balancer_virtual_server.php: Can't set alias as IP address
- Changed element type to allow aliases
In testing I noticed that load_balancer_virtual_server.php did not display a... -
- When I want to sent alias as IP of Virtual server I receive "You must use this format:"
-
- works
-
02:10 PM
Bug #6171: load_balancer_monitor_edit.php - can't update monitor
- Applied in changeset commit:ed49fe7ae13c01ee083c3f205b86c6713e0d90a3.
-
02:03 PM
Bug #6171 (Feedback): load_balancer_monitor_edit.php - can't update monitor
- Fixed missing "=".
Thanks for the report. -
-
08:32 AM Bug #6171 (Resolved): load_balancer_monitor_edit.php - can't update monitor
- I can't modify a monitor, when I save, I have this message :...
-
- fixed
-
- Description is showing and saving the information correctly now.
Thank you. -
07:10 AM
Bug #6163: interfaces_lagg_edit.php: "Description" field not shown
- Applied in changeset commit:bcb3c9283e45eb4e741cbfa5d79e56d5f5bf678a.
-
07:03 AM
Bug #6163 (Feedback): interfaces_lagg_edit.php: "Description" field not shown
- Thanks for the report. Missing description field has been restored to its rightful place on the page.
-
-
- Interfaces / LAGGs shows the _Description_ field, as you can see in first screenshot, but if you go to edit the LAGG,...
-
- Aaron McDiarmid wrote:
> How come this problem keeps getting pushed back to later versions? Is there an underlying i... -
11:06 PM Bug #4326: Limiters on firewall rules where NAT applies drop all traffic
- How come this problem keeps getting pushed back to later versions? Is there an underlying issue that prevents it from...
-
- works
-
07:20 AM
Bug #6161: services_captiveportal_ip_edit.php: Description field dropped
- Applied in changeset commit:24828c63965b9be493db486fa5a46ab64c8091db.
-
07:13 AM
Bug #6161 (Feedback): services_captiveportal_ip_edit.php: Description field dropped
- Description field restored
-
07:08 AM
Bug #6161 (Assigned): services_captiveportal_ip_edit.php: Description field dropped
-
- multiple people seeing this issue confirmed fixed
-
- fixed
-
-
- It needs to completely ignore warnings in release versions (#6178) as it's a massive amount of useless noise.
For... -
- We need to change the crash reporter to not generate crash reports for PHP warning messages in stable releases. We're...
-
- When a system can't reach the Internet and is checking for updates, pkg processes start piling up, eventually killing...
-
- Yup. Looks like that fixes it.
Apply the code and no more error in the log.
Remove the code and error returns to th... -
- I've opened https://github.com/pfsense/pfsense/pull/2874.
I have not been able to replicate this, from the comment... - 07:41 PM Revision 5887788f: Fixed #6174
- (cherry picked from commit d1db3f366180e8df8042dbeb92fa12e5a661d23c)
- 07:40 PM Revision d1db3f36: Fixed #6174
- 07:03 PM Revision 3c74b48e: Fixed #6171
- (cherry picked from commit ed49fe7ae13c01ee083c3f205b86c6713e0d90a3)
- 07:02 PM Revision ed49fe7a: Fixed #6171
-
- I can't replicate it either.
Can you show a screen shot of the whole rule?
Maybe there is some unusual setting in s... -
- I tried on 2 OS : LinuxMint and Ubuntu Mate, with 2 browers : Chrome and Firefox. I have same issue.
I joined 2 pi... -
- don't think I'm seeing what you're referencing there. What OS and browser? Cleared your browser cache?
-
- When I edit a NAT rule, existing value for destination mask (alias IP for me) disappear and type is "any" even before...
-
06:06 PM pfSense Packages Feature #6176 (New): Privilege for OpenVPN Client Export
- Hello pfsense dev,
When creating a custom group with only "WebCfg - OpenVPN: Client Export Utility" , there is n... -
- i've just updated the thread after creating this ticket.
-
- See the thread. I can't reproduce it as-is. Needs more info before a ticket can be opened or a fix pursued, we have t...
-
- https://github.com/pfsense/pfsense/pull/2873
-
- https://forum.pfsense.org/index.php?topic=110081.0
-
- B. Derman wrote:
> But this wasn't about the issues with creating an alias table (which is why it's a separate repor... -
03:48 PM Feature #6130: Alias-table failures can easily lead to serious security degradation should be caught
- But this wasn't about the issues with creating an alias table (which is why it's a separate report). This is about h...
- 03:01 PM Revision e8dcc1dd: Fixed #6169
- and added alias pop-ups to load_balancer_virtual_server.php
(cherry picked from commit 0200db178ef225f796aea837e33ae... - 03:00 PM Revision 0200db17: Fixed #6169
- and added alias pop-ups to load_balancer_virtual_server.php
-
02:50 PM
Bug #6174: Firewall rules separator character support
- Applied in changeset commit:d1db3f366180e8df8042dbeb92fa12e5a661d23c.
-
02:42 PM
Bug #6174 (Feedback): Firewall rules separator character support
- Separator text now wrapped in CDATA block.
Thanks for the report. -
- Taken from: https://forum.pfsense.org/index.php?topic=110054.0
> I was playing around with the really neat firewal... -
02:47 PM Bug #6126: NAT issue unsure if inbound, outbound or both
- All confirmed working still, after approx 12 hours. Was obviously the IP Aliases being disassociated with the CARP V...
-
- worked with Andrew on this, the root cause is #6164
-
02:46 PM
Bug #6154: Notices are displaying raw html (interpreted by the browser), potential XSS vector
- Lowered priority since JimP has taken care of the immediate problem.
-
07:33 AM
Bug #6154: Notices are displaying raw html (interpreted by the browser), potential XSS vector
- It seems like in addition to fixing ACB, it would be good to sanitize notices as you suggest. A sanitiize_text() func...
- 01:24 PM Revision 994895f3: Fixed #6168
- Needed to override form action since it was inheriting the current GET arguments
(cherry picked from commit 91cd1923... - 01:23 PM Revision 91cd1923: Fixed #6168
- Needed to override form action since it was inheriting the current GET arguments
-
- David: your issue isn't related to this in that case. could you send me a copy of your config backup? cmb at pfsense ...
- 12:44 PM Revision c6195e36: Fixed #6170
- (cherry picked from commit a2050d386f99bf027b70de5aa4b4aa713a49e5b9)
- 12:44 PM Revision a2050d38: Fixed #6170
-
12:26 PM Feature #855: Ability to selectively kill states on gateway recovery
- Chris Buechler wrote:
> The current practice of killing all states when a connection goes down on that downed connec... - 12:23 PM Revision cc3b1cb5: Fixed #6158
- Really a temporary work-around. This issue requires a better solution in which the data is normalized and added to th...
- 12:22 PM Revision 106eb8d3: Fixed #6158
- Really a temporary work-around. This issue requires a better solution in which the data is normalized and added to th...
- 12:12 PM Revision f38c80b9: Fixed #6161
- (cherry picked from commit 24828c63965b9be493db486fa5a46ab64c8091db)
- 12:11 PM Revision 24828c63: Fixed #6161
- 12:05 PM Revision 0427acce: Fix #6162 saving of bogons update frequency
- Another easy fix of a "dumb bug".
(cherry picked from commit d1acd5bb5723e66bc5871bdf4335208253f5a4bd) - 12:05 PM Revision a7b131f1: Merge pull request #2870 from phil-davis/patch-4
- 12:01 PM Revision 31b14a70: Fixed #6163
- (cherry picked from commit bcb3c9283e45eb4e741cbfa5d79e56d5f5bf678a)
- 12:01 PM Revision bcb3c928: Fixed #6163
- 11:55 AM Revision f8f2eae4: Add checks in case there are dpinger param problems
- in 2.3 installations that were upgraded from 2.2.* when the apinger to
dpinger params conversion code in upgrade_130_... - 11:43 AM Revision 79e348e4: Fixed #6166
- (cherry picked from commit ebaf36ebe5b6f409887d2352db44aba45bf7e086)
- 11:41 AM Revision ebaf36eb: Fixed #6166
-
10:07 AM Bug #6159: Package Manager not up-to-date
- I decided to try again today, and it worked.
!http://i.imgur.com/umY1rk2.png!
So it finally updated the databas... -
-
- The new graphing in 2.3, monitoring, no longer displays data totals for traffic per interface.
Restore this function... - 08:09 AM Revision 5e367fdd: Fix #6142 validate and adjust dpinger params on upgrade
- 1) The previous "down" value was being converted to msec and put into
"loss_interval". It should go into "time_period... - 08:09 AM Revision e2ddef9e: Fix #6142 validate and adjust dpinger params on upgrade
- 1) The previous "down" value was being converted to msec and put into
"loss_interval". It should go into "time_period... - 08:09 AM Revision 69ac0a88: Merge pull request #2869 from phil-davis/dpinger-upgrade
- 08:00 AM Revision d1acd5bb: Fix #6162 saving of bogons update frequency
- Another easy fix of a "dumb bug".
-
07:30 AM
Bug #6158 (Feedback): diag_dump_states.php & others: Prefixes not taken in to consideration while sorting
- Applied in changeset commit:106eb8d38db478616499f0c5ee220596dca9f57a.
-
07:29 AM
Bug #6158 (Assigned): diag_dump_states.php & others: Prefixes not taken in to consideration while sorting
- A temporary work-around has been provided. The packets, bytes and actions column have been set to be NOT sortable.
... - 07:20 AM Revision 177410c0: Use RFC-defined capitalization IPsec.
- 07:20 AM Revision d6bae4a3: Use RFC-defined capitalization IPsec.
- 07:20 AM Revision 5f5e97ee: Use RFC-defined capitalization IPsec.
- 07:12 AM Revision bb213758: Unset dhcpdv6 on LAN here as well. Ticket #6152
- 07:12 AM Revision 721dfedb: Unset dhcpdv6 on LAN here as well. Ticket #6152
- 07:11 AM Revision e0d4d773: Unset dhcpdv6 on LAN here as well. Ticket #6152
-
- Pull request https://github.com/pfsense/pfsense/pull/2872
Adds checks upgrade_150_to_151() that will double-check dp... -
- Applied in changeset commit:21300959d92cd0a2cbd8a756ee5ecf25f6193e09.
-
06:50 AM
Bug #6166: requests to diag_system_activity.php can pile up on slow systems
- Applied in changeset commit:ebaf36ebe5b6f409887d2352db44aba45bf7e086.
-
06:46 AM
Bug #6166 (Feedback): requests to diag_system_activity.php can pile up on slow systems
- AJAX function re-formatted to pfSense style
Added mutex to ensure only one AJAX call is made at a time -
06:01 AM
Bug #6166: requests to diag_system_activity.php can pile up on slow systems
- There are a number of problems here. setTimeout is the appropriate function but the call is not quite formatted corre...
-
- from mailing list:
https://lists.pfsense.org/pipermail/list/2016-April/009646.html... -
06:38 AM pfSense Packages Bug #6157: Freeradius OTP verify is missing the shebang
- We tried with pfSense 2.3 today and we couldn't even find the otpverify script but everything worked most of the time...
- 06:07 AM Revision 71d994e4: Allow to restore any ares of config
- If the existing config does not have a particular area in it, then the user should still be able to restore it from a...
- 06:06 AM Revision de407762: Allow to restore any ares of config
- If the existing config does not have a particular area in it, then the user should still be able to restore it from a...
- 06:06 AM Revision 56f8de9b: Merge pull request #2867 from phil-davis/patch-4
-
- those are all to be expected. Config issue
-
- Assigned to cmb for resolution
-
05:21 AM Bug #6165: Captive portal - SSL Extended Validation Certificates
- I have resolve this issue alone.
In Chrome help clear all browsing data and grean bar now appear.
In Firefox is... -
- I have now 2.3 version with nginx.
Nginx require only 2 files certificate and key file, but certificate file must ... -
- this is probably not something we can do anything with unless you can do some more leg work. Might be an issue with h...
-
- Captive portal with normal SSL certificate has green icon in Chrome, Firefox, IE and Edge.
With SSL EV certificate... -
- L
-
- IPsec connections that enable IPComp end up unable to pass traffic. Egress traffic goes out, ingress comes in, byte c...
-
- Netmap is used for the 3.0 IPS mode.
-
- FreeBSD port might need upgrading.
Not updating 2.2.6 pbi though -
- For the test scenario above, your change fixes the problem. I've tested in on a real box with 2.3-Release.
Thanks! -
- I pushed a change to unset dhcpdv6 on LAN when LAN's removed as I knew where that was offhand. I'm not sure if that's...
- 02:32 AM Revision 0201d917: Add lock in vpn_ipsec_configure. Ticket #6160
- 02:31 AM Revision 82ea06cb: Add lock in vpn_ipsec_configure. Ticket #6160
- 02:30 AM Revision c520e3e3: Add lock in vpn_ipsec_configure. Ticket #6160
-
- The config upgrade code for IP aliases on CARP IPs changing to the uniqid VIP isn't working. It's left with the old ID.
-
- The problem this causes is one of the old haproxy*.inc files make filter_configure_sync hang forever. So it kills the...
-
- Jim,
no there is no time zone change inbetween. In fact, if you notice, those 4 entries show exact minute and second...
04/14/2016
-
- The description field was inadvertently dropped on services_captiveportal_ip_edit.php in the Bootstrap conversion
-
- that change confirmed to work on a customer system hitting the problem.
-
- If vpn_ipsec_configure is called twice at almost exactly the same time, 'ipsec start' will run twice and it will star...
-
-
-
- When I run the force update it shows this..
http://i.imgur.com/ddXSlL6.png -
- I ran 'pkg update -f' and it downloaded stuff. But didn't fix it..
Still same errors
!http://i.imgur.com/DMI4Vii... -
- your metadata appears to be out of date. If you run 'pkg update -f' does it work?
-
- Packages listed in the UI still show the old version and fails to download.
Package List: http://i.imgur.com/bl9sY... -
- Let's look at bringing in the PR, as well.
-
-
- duplicate of several alias-related validation issues fixed in 2.3
-
- please re-test on 2.3, a lot of validation improvements there into aliases and some relevant filterdns changes.
-
03:03 PM Bug #6158 (Resolved): diag_dump_states.php & others: Prefixes not taken in to consideration while sorting
- Sorting states on packets or Bytes does not the prefixes in consideration.
Example: Sorting states on Bytes in des... -
- I was playing around with pfSense 2.2.6 and FreeRadius OTP authentication. What I found is, that the /usr/pbi/freerad...
-
- Your system clock must have changed time zones between times they were started. If you reboot, or restart them all ma...
-
- All @ pfsense: thanks for this new version. Works like a charm on my alix2d13. Just noticed a minor bug in the openvp...
-
- An empty tag with open and close is the same as a single tag that closes itself. I've tried adding OpenVPN servers an...
- 01:56 PM Revision 21300959: Fix #6142 validate and adjust dpinger params on upgrade
- 1) The previous "down" value was being converted to msec and put into
"loss_interval". It should go into "time_period... -
- xavier: that's how it's supposed to work at this point. Sounds like you want state killing on failback, which doesn't...
-
- Chris Buechler wrote:
> the issues here are attributable to issues in apinger, which has been replaced in 2.3 with d... - 12:17 PM Revision 6c23d363: Nuke srctrack default = 1400 per JimP
- (cherry picked from commit 509c089479525d69b714fef3f9d7770610719408)
- 12:16 PM Revision 509c0894: Nuke srctrack default = 1400 per JimP
-
- I've already marked it as Resolved, it's all set now. Thanks!
-
11:54 AM Bug #6148: Autoconfigbackup does not seem to function on 2.3-RELEASE and causes some aspects of GUI to become non functional
- I guess this can be closed or marked as not an issue then? I have no idea how to do that.
-
- I already opened a ticket for the display issue privately/internally. We'll get a fix in for that before long.
-
- OK, account subscription issue caused the initial failure, but the ACB module still seems to mess up the GUI if there...
-
- That's good enough info. I have a similar setup (except an 8860) and it's working fine here.
Can you drop us a not... -
- Jim Pingle wrote:
> ACB is working here on several test systems, can you provide some more information about your ha... -
- ACB is working here on several test systems, can you provide some more information about your hardware and pfSense co...
-
- AutoConfigBackup does not seem to work correctly on v2.3-RELEASE causing errors:
Apr 14 14:07:28 ishtar check_relo... - 12:01 PM Revision 273d15e1: Fixed #6146
- (cherry picked from commit b3fc5089d679d7d43fc1e00400af8038b65c8998)
-
- If mcproxy is not an alternative, here is the new home of igmpproxy:
https://github.com/pali/igmpproxy
There is a... -
- For me it's not important if the multicast part is done by igmpproxy or something else.
Actually thinking about an a... -
- Hi, yes indeed. This tool is needed by many IPTV users. So please fix it with a higer priority.
- 12:00 PM Revision b3fc5089: Fixed #6146
-
- Hi, first ever bug report, bare with me.
Running filebeat on a pfsense to ship logs to a elk stack over tls is giv... -
- The text of a notice is displayed as passed, presumably to allow for links in the notice text. At least one place tha...
-
10:12 AM Bug #6153 (Resolved): RFC 2136 Client fails to update more than 1 record
- I added a single RFC 2186 Client (name1.mydomain.com) and verified it worked. DNS was updated and 'cached IP' was gre...
- 10:08 AM Revision ce3eca6e: Allow to restore any ares of config
- If the existing config does not have a particular area in it, then the user should still be able to restore it from a...
-
09:46 AM Feature #5985: ntp pool command
- Jim Pingle wrote:
> I've tried this manually and couldn't get any working result from it. Does anyone happen to have... -
- I've tried this manually and couldn't get any working result from it. Does anyone happen to have a working example of...
-
- +1 for this
-
- Prerequisite: a system with a single NIC, freshly installed with pfSense 2.3-Release.
Boot pfSense normally, assign ... -
- +1 for this !!!!
-
- Part 1 of the fix: https://github.com/pfsense/pfsense/pull/2869
That will fix the upgrade_130_to_131() step, but wil... -
- Oh! Lost again.
Just watch me next time! ;-) -
- A little slow there, I just beat you to this one: #6149 :-)
-
- Critical for offline installs/upgrades, which can't access internet directly, or at the moment of the upgrade.
Versi... -
- Some more detail on #6151 and https://forum.pfsense.org/index.php?topic=109943
-
- The proxy settings entered on system_advanced_misc.php are not respected by pkg, at least when using pkg from the GUI...
-
- The StrongSWAN package that the pfSense IPSec implementation is based on supports naming of IPSec Phase 1 connection ...
-
- Replace underscore with space in display text of certain fields to allow them to line wrap. ex: long alias names
-
- When attempting to use S.M.A.R.T. on HyperV, either from the widget or Diag > S.M.A.R.T. Status, the VM will crash. I...
-
07:10 AM
Bug #6146: System / Advanced / Miscellaneous not save data
- Applied in changeset commit:b3fc5089d679d7d43fc1e00400af8038b65c8998.
-
- PR https://github.com/pfsense/pfsense/pull/2868
Oh - I see you did it already with more fancy stuff to disable the... -
06:59 AM
Bug #6146 (Feedback): System / Advanced / Miscellaneous not save data
- Thanks. There were a couple of issues with the source track timeout on that page. Now fixed.
-
06:07 AM Bug #6146 (Resolved): System / Advanced / Miscellaneous not save data
- In System / Advanced / Miscellaneous / Load Balancing, I I filled out the field 'Sticky connections timeout' with 60....
-
- That's a known problem with vmware/esx. When adding more than four interfaces, the hypervisor mixes up the order. You...
-
05:08 AM Bug #6145 (Not a Bug): unreachable when adding vNIC
- When i add an NIC to pfSense and reboot it so it will appear within pfSense the web-GUI becomes unreachable (after th...
-
05:50 AM
Todo #6123 (Resolved): Use consistent up and down arrow formats in dashboard widgets
- PR merged. Thanks.
-
- ... I was looking at the shellcmd package to see if I could add a start up command to force an update once the system...
-
- Looks easy to fix.
Pull request https://github.com/pfsense/pfsense/pull/2867
04/13/2016
-
- sshd tries to load those files even if they're not there unless HostKey is configured in sshd_config. It's just log s...
-
- You probably had connected previously to 192.168.2.21 as root and have a DSA public key in your @~/.ssh/known_hosts@ ...
-
-
https://forum.pfsense.org/index.php?topic=109815.0
@Apr 13 10:59:46 sshd 76036 error: Could not load host k... -
- Has suddenly stopped working again. Seemed to have been find for around 6 hours. Very interesting?
i should also... -
- A bit more of an update.
I have upgraded both nodes again directly from 2.2.6 to 2.3. Everything (as it has done ... -
- Sounds like an issue of some sort with the virtual IP. But IP aliases on CARP IPs works fine. It requires a config up...
-
- ok Glad that we found the issue :) I can't close the ticket, thats up to the Devs to decide :)
Even if I try to m... -
- Yes, sorry, I see what you mean. I'm indeed using RAM disks for /tmp and /var. While it's a full install, it's runn...
-
- When you see this message "New DNSBL Cert Created", something is deleting the DNSBL cert in the /var/unbound folder (...
-
- There's not a great deal to see.
The upgrade to 2.3 release was done around 20:30 yesterday.
You can see the un... -
-
If a section/area does not exist in the config then it is not available in the restore backup area pull down selec... -
-
Haven't checked with ps to see if it is actually running. I took the WebGUI's word for it because I didn't know t... -
09:27 AM Bug #6132: race condition in OpenVPN startup
- NOYB NOYB wrote:
> On a fresh install the first OpenVPN server instance won't start. Create a 2nd instance an it ru... -
- I can't replicate this as stated. Is there a forum thread with more info? Or do you have some more detail about the c...
-
-
On a fresh install the first OpenVPN server instance won't start. Create a 2nd instance an it runs fine. Or impo... -
-
-
- There are some problems reported with old apinger parameters not converting to dpinger parameters on upgrade from 2.2...
-
-
-
- Yea, very annoying bug.
-
02:12 PM Bug #6099: igmpproxy does not recognize upstream interface
- I hope this is resolved quickly, it affects all "Deutsche Telekom Entertain" users they use pfsense.
-
-
-
-
-
- Exactly.
I was using chrome on ubuntu. -
08:41 AM
Bug #6121: enabling "Use memory file system for /tmp and /var" and then save force a reboot right away
- So as soon as you click the "Save" button, the reboot starts without giving you a chance to choose "OK" or "Cancel" ?...
-
02:21 PM pfSense Packages Feature #6141 (Resolved): Convert apcupsd package to 2.3
- It would be nice to convert "apcupsd" package to bootstrap so it can be used in version 2.3.x Its a really useful pac...
- 01:44 PM Revision a21fa964: Put gateway name and group around the correct way
- Redmine #6134
Forum: https://forum.pfsense.org/index.php?topic=109781.0
Originally broken by commit: https://github.c... - 01:44 PM Revision 30014326: Merge pull request #2865 from phil-davis/patch-4
- 01:35 PM Revision ebcd8a30: Put gateway name and group around the correct way
- Redmine #6134
Forum: https://forum.pfsense.org/index.php?topic=109781.0
Originally broken by commit: https://github.c... -
- Correct units in conversion comments.
(cherry picked from commit 515887c3779519c37465aef55b22c8bd906d6f05) - 01:14 PM Revision 3510c788: Merge pull request #2864 from NOYB/Update_RRD_Script_-_Comments
- 01:13 PM Revision a0d8a2f4: Use consistent arrow colors on dashboard
- Interfaces widget and IPsec widget use text-success and text-danger to
make the up and down arrows be green and red.
... - 01:13 PM Revision f1a6c917: Merge pull request #2863 from phil-davis/widget-arrows
-
- Just pushed a fix. commit:eb2202c and commit:ccefcb0
-
- If the user set topology subnet on 2.2.x the value of the "topology_subnet" config option would be set to "yes". The ...
-
- When saving an OpenVPN server, the CSC files should be resynced in full to make sure they reflect the current server ...
- 12:34 PM Revision fee16977: Fixed #6128
- (cherry picked from commit e8d6c134fe44f0ad1756caa246a7c6efbbd27bbc)
- 12:33 PM Revision e8d6c134: Fixed #6128
-
- example: http://imgur.com/KHmNCeY
-
- Ok. You'll notice that the title of the actual page actually says "iOS IPsec Profile". Whatever is settled on, shou...
-
- it's not strictly iOS, also works for OS X. That does suggest it's more generic than it is though. Needs consideration
-
- This is apparently a fairly common problem, and I'm not sure how to address it. I didn't see anything in here or in ...
-
- Applied in changeset commit:7cb8fabc6ed56e4d182c662350d9e2f65a492d2d.
-
- Thanks for the confirmation, I just pushed the fix
-
11:04 AM Bug #6122: Hostname Field for NameCheap Dynamic DNS Rejects "@"
- With that patch applied, it accepted the "@" symbol for the hostname.
Additionally, I confirmed that it correctly ... -
- Attached patch should fix it, waiting on confirmation since none of my domains on Namecheap are setup in such a way t...
-
- Correct units in conversion comments.
-
09:51 AM Bug #6136 (Resolved): System Update settings page branch selection text is bogus on systems upgraded 2.3-RC to 2.3-RELEASE
- I upgraded from 2.3-RC to 2.3-RELEASE.
System Version
@
Current Base System 2.3
Latest Base System 2.3
@
If... -
- I took at look at DHCP leases, and everything that's a static lease (ARP entry enabled) is listed as online.
This in... -
- No need for a binary with symbols now. Got a nice core dump with my debug build....
-
09:10 AM
Bug #6134 (Resolved): Gateway down message has gateway name and group name switched
- PR merged. Thanks
-
- Pull request https://github.com/pfsense/pfsense/pull/2865
-
- Forum: https://forum.pfsense.org/index.php?topic=109781.0
Unfortunately I (Phil) messed this one when doing gettex... -
08:10 AM
pfSense Packages
Bug #6127 (Needs Patch): RRD Summary port: Status page shows OPT1, OPT2, etc ... instead of the interface name
- The RRD Summary package uses the raw RRD file names in the display. Converting a file name to a friendly interface na...
-
- RRD Summary shoes OPT1, OPT2, etc in the dropdown menu instead of the interface name.
under https://192.168.5.1/... -
07:41 AM
Bug #6128: firewall_rules.php: Moving a rule separator before naming/saving breaks it
- This is why developers shouldn't do QA. I would never have thought of trying that :)
Preventing the separator from... -
07:40 AM
Bug #6128 (Feedback): firewall_rules.php: Moving a rule separator before naming/saving breaks it
- Applied in changeset commit:e8d6c134fe44f0ad1756caa246a7c6efbbd27bbc.
-
01:20 AM Bug #6128 (Resolved): firewall_rules.php: Moving a rule separator before naming/saving breaks it
- Steps to reproduce:
1. Create a new separator
2. Drag separator from bottom of the page
3. Name and Save separat... -
-
Firewall rule using !LAN address in destination results in the following error.
@Notices
Filter Reload
•... -
06:11 AM Bug #6131 (Resolved): failed chown on startup in /etc/inc/rrd.inc
- Since updating to 2.3 I've got a strange problem after booting my pfSense.
This doesn't happen when the pppoe-interf... -
- Failures that result in empty alias-tables being created (e.g., https://redmine.pfsense.org/issues/6119) or tables fa...
-
- I'm not sure why we don't still have both of them. The GUI is identical with LTS which is already converted, and brin...
-
01:45 AM pfSense Packages Bug #6129 (Resolved): zabbix agent/proxy 2.4 not ported to pfSense 2.3
- Hey there,
I saw on https://doc.pfsense.org/index.php/2.3_Removed_Packages that zabbix-agent-2 and zabbix-proxy-2 ... - 12:09 AM Revision fa5f5136: Use consistent arrow colors on dashboard
- Interfaces widget and IPsec widget use text-success and text-danger to
make the up and down arrows be green and red.
...
04/12/2016
-
- thanks
-
- You are correct - my bad. Cleared cache and logo is now correct. Can be closed.
-
- guessing you haven't cleared your cache and had a system that was CE on that IP previously, that the case?
-
- Factory image is showing "Community Edition" underneath pfSense logo. I have confirmed that is factory image (pfSens...
- 11:07 PM Revision 4c84c124: Cosmetics
-
- On reflection I consider it a simple config, but in actual fact it perhaps isn't :)
I am running two node CARP wit... -
- going to have to give us something more than that. Inbound and outbound NAT in general all works fine. What specifica...
-
- I have a simple config whereby inbound NAT redirects tcp/443 traffic to a web server. Additionally I have an outboun...
- 11:06 PM Revision adaa4d03: Cosmetics
- 10:23 PM Revision ae74c26d: Fixed #6117
- 10:22 PM Revision 0cdf72ef: Fixed #6117
-
- Should probably say iOS IPsec Profile instead of IPsec profile under VPN menu.
See screenshot. -
-
It currently follows the forward/reverse setting of the firewall log.
It can be set by going to Status / Syste... -
- Pull request https://github.com/pfsense/pfsense/pull/2863
-
- In 2.3-RELEASE the Interfaces widget and IPsec widget show the up and down arrows in green and red.
OpenVPN and WoL ... -
- Steve Beaver wrote:
> The intended behavior is that if the "Use RAM Disks" setting is changed (with respect to the c... -
06:52 PM
Bug #6121 (Feedback): enabling "Use memory file system for /tmp and /var" and then save force a reboot right away
- The intended behavior is that if the "Use RAM Disks" setting is changed (with respect to the current configuration), ...
-
- When enabling this feature, and then save the config, instead of letting me press the reload button, it just rebooted...
-
- I installed System Patches OK on a full install test system in a VM.
Then I tried to install it on a real Alix 32-bi... -
- same system also had same issue for system-patches. Can't change title.
perhaps this is a general issue for more pac... -
- snippet of system log:...
-
- Can you check your pfblockerng.log? and send me those particular lines about Unbound at the time of your last update?
-
- It's a full CD/ISO install.
Yes, it did it on earlier snapshots but I wasn't sure whether it was because of upgrad... -
- Is this on a ramdisk or nano? I haven't heard any other issues so far? Have you seen this on any other 2.3 Snapshot?
-
- Thanks. Just to clarify, this happens when pfBlockerNG is installed. So, pfBlockerNG is installed, you upgrade the p...
-
- Unfortunately, if you create a backup with pfBlockerNG DNSBL installed and enabled, the backup config will contain th...
-
- If you're using DNS blocking on PfBlockerNG and update the system firmware, the pfb_dnsbl.conf doesn't exist when the...
-
- Affected Version: 2.3 release.
-
- The hostname field for NameCheap in dynamic DNS is rejecting the "@" character.
Error Below:
The following input ... -
- It reads as though the interfaces IP address is to be entered. Removing "use" makes it a little clearer.
- 06:10 PM Revision 5b460078: Merge pull request #2862 from NOYB/Services_/_DHCP_Server_-_DNS_Servers_Clarification
-
- Password protect the console menu, not effective after upgrade
After saving system/advanced settings again, the co... -
- The following is with pfSense 2.2.6 release AMD64 on a Core 2 Duo 3 GHz dual-core with 4 GB ram.
---
While creating... -
05:30 PM
Todo #6117: status_ntpd.php: Provide updates via AJAX
- Applied in changeset commit:0cdf72ef41000505cef78f58e86332b2701fa835.
-
05:25 PM
Todo #6117 (Feedback): status_ntpd.php: Provide updates via AJAX
- Page now updates dynamically every five seconds.
If GPS data is available it alternates between updating the NTP s... -
03:31 PM
Todo #6117 (Resolved): status_ntpd.php: Provide updates via AJAX
- 04:19 PM Revision 268daff5: Fixed #6114
- 04:18 PM Revision 662da7f3: Fixed #6114
-
04:05 PM Bug #3976: VLAN Interfaces on LAGG get orphaned on LAGG change
- Chris, this issue is still present for me on 2.3 nanobsd release (updated today). I can only reproduce this AFTER a r...
-
-
03:12 PM
Bug #6112 (Resolved): firewall_nat_out.php: "Do not NAT" setting lost on edit
-
09:20 AM
Bug #6112: firewall_nat_out.php: "Do not NAT" setting lost on edit
- Applied in changeset commit:79b02c77d26bebc506227c20ffb424dde7a196e0.
-
09:15 AM
Bug #6112 (Feedback): firewall_nat_out.php: "Do not NAT" setting lost on edit
- Added isset() to test for nonat control
-
08:56 AM
Bug #6112 (Resolved): firewall_nat_out.php: "Do not NAT" setting lost on edit
- https://forum.pfsense.org/index.php?topic=109660.0
-
- Before show current and latest version on widget and System -> Update screen, check if pfSense-repo needs to be updat...
- 02:14 PM Revision fb62a4ff: Fixed #6112
- by adding isset() to checkbox value
- 02:10 PM Revision 79b02c77: Fixed #6112
- by adding isset() to checkbox value
-
11:30 AM
Bug #6114: firewall_nat_1to1_edit.php: 'Internal IP' field is incorrectly labelled.
- Applied in changeset commit:662da7f36b3e01ce6ca211893c8a33db9942a749.
-
11:21 AM
Bug #6114 (Feedback): firewall_nat_1to1_edit.php: 'Internal IP' field is incorrectly labelled.
- Both issues fixed.
-
- It's labeled 'single host or alias' and cannot be an alias. In 2.2.X it's labelled single host only.
When selectin... -
10:40 AM
pfSense Packages
Bug #6113 (Feedback): AutoConfigBackup Restore Reboot points to wrong link
- Form revised to use diag_reboot.php with hidden input override=yes
-
10:14 AM pfSense Packages Bug #6113 (Resolved): AutoConfigBackup Restore Reboot points to wrong link
- When restoring a backup from ACB, the user is prompted to reboot the firewall. The reboot button on that screen link...
-
- Closing for lack of evidence and lack of feedback. Can be reopened if the situation changes.
Associated forum thre... -
- It reads as though the interfaces IP address is to be entered. Removing "use" makes it a little clearer.
-
07:05 AM
Bug #6107 (Resolved): VPN IPsec Pre-shared Keys Info Boxes do not use infoblock
- Applied. Thank you.
-
-
06:39 AM pfSense Packages Feature #6111 (Needs Patch): DNS Crypt
- A package for DNS Cryt will be nice:
https://forum.pfsense.org/index.php?topic=78446.0 -
-
-
Also available in: Atom