Activity
From 04/19/2016 to 05/18/2016
05/18/2016
-
11:46 PM Bug #6132: race condition in OpenVPN startup
-
Haven't seen this yet on 2.3.1 but because it is so inconsistent/sporadic, it is too soon to tell really. But so ... -
-
Have not seen this so far on 2.3.1. It's not been long and only a few reboots, but previously it was every boot. ... -
09:18 PM Bug #6367 (Resolved): Long delays with LDAP enabled w/local users during boot at "Synchronizing user settings..."
- This occurs when:
* an LDAP authentication server is selected under User Manager > Settings > Authentication Server
... - 07:40 PM Revision 8d0b16a1: Add the function gettext
-
05:45 PM Bug #6233: Bootloop with Alix after 2.3 upgrade
- Same on version 2.3.1 unfortunately. :(
-
- Never mind. My bad. Other than the resolution terminology which a PR has already be submitted for.
-
-
Initial selection of custom time period sets the resolution to "Lowest Possible" (should be "Highest Possible"; su... - 01:29 PM Revision 1168634b: Merge pull request #2968 from NewEraCracker/patch-gettext-maxlen
- 01:28 PM Revision 83c7a421: Initialize output var in firewall_shaper_queues
- To clear any previous use of the var elsewhere in included files.
Forum: https://forum.pfsense.org/index.php?topic=11... - 01:06 PM Revision 293c90fb: Merge pull request #2967 from phil-davis/patch-2
-
11:58 AM Bug #6311: pfSense 2.3 locking up
- Markus Strangl wrote:
> System info:
> SuperMicro Intel Westmere rack boxes, 2 each in HA Cluster with CARP and p... -
11:55 AM Revision 5de5a708: Do not use makefs to create / partition since it fails badly sometimes
-
-
11:49 AM Feature #6365 (Duplicate): Current images do not install on UEFI Machines
- There is already request for that feature [[https://redmine.pfsense.org/issues/4044]].
But I think is better to exte... -
-
-
10:45 AM Bug #6364: PHP Fatal error: Allowed memory size of 268435456 bytes exhausted (tried to allocate 32 bytes) in /usr/local/www/status_carp.php on line 261
- adding ini_set('memory_limit', '490M'); to the top of status_carp.php file help to display upper part of page but at ...
-
- Crash report begins. Anonymous machine information:
amd64
10.3-RELEASE
FreeBSD 10.3-RELEASE #6 05adf0a(REL... -
- Hello,
i have pretty big carp cluster with:
WAN@1 10.165.128.254 BACKUP
VLAN20@2 10.161.20.210 BACKUP
VLA... -
03:12 AM Bug #6296: Interface dies with IPsec and SMP
- Thanks guys!
For the official boxes (ADI image) there is no 2.3.1 development branch that we could upgrade to corr...
05/17/2016
-
- On a backup firewall in an HA cluster, when the backup has been triggered by a merged-in config the "Configuration Ch...
- 08:38 PM Revision 95f46512: Reduce maximum length of string to gettext()
- This limit is set at 4096 on PHP 5.6: http://lxr.php.net/xref/PHP_5_6/ext/gettext/gettext.c#139
Bug report on forum:... -
05:09 PM Bug #6296: Interface dies with IPsec and SMP
- Brent Kerlin wrote:
> Chris Buechler wrote:
> > This has lasted over 3 days now in multiple scenarios that wouldn't... -
11:39 AM Bug #6296: Interface dies with IPsec and SMP
- Chris Buechler wrote:
> This has lasted over 3 days now in multiple scenarios that wouldn't last 4 hours on affected... -
> Restarting the webconfigurator from the console does not resolve the issue.
> Other than the web not functioning...-
- Chris Buechler wrote:
> that's 2.3(.0)_1 rather than 2.3.1. It wasn't 2.3->2.3_1 that did it, since that only upgrad... -
10:43 AM Bug #6177: pkg update checking with no Internet access kills web GUI
- this fixed my issue on 2.3, thanks
-
- this patched worked for me, but only after changing the uppercase HTTP_PROXY to lowercase http_proxy
-
09:21 AM Bug #5990: AES-GCM should be an allowed encryption algorithm for IKEv2 in P1
- Testing confirms that it does not work with IKEv1, as expected, but that it does work with IKEv2 following that stron...
-
08:15 AM Bug #6245: Multi-WAN PPPoE not working
- We have 3 setups with multi-wan and the terminating on the same AC. One we are even using ourselves with dual t-busin...
-
07:20 AM Bug #6099: igmpproxy does not recognize upstream interface
- Hi, I have some news.
Someone have made a commit on the pali/igmpproxy git: https://github.com/pali/igmpproxy/pull/2... -
07:12 AM Feature #6103: DNS Resolver Outgoing Interfaces should be able to use Gateway Groups
- Don't think this is viable at this point because of a larger issue that prevents traffic originating from the firewal...
- 01:24 AM Revision 49701df3: Initialize output var in firewall_shaper_queues
- To clear any previous use of the var elsewhere in included files.
Forum: https://forum.pfsense.org/index.php?topic=11... -
12:36 AM Bug #6297: rc.linkup doesn't trigger filter reload
- Hi Chris!
Thanks for your response. I've applied your change to /etc/rc.linkup as requested. So far, I haven't run...
05/16/2016
-
11:35 PM Feature #6362 (New): Allow specifying the client identifier hardware type
- Situation: Mac OS X 10.11 client, wireless. DHCP is specified with 'myhostname' in DHCP Client ID.
In pfSense, DHC... -
-
-
-
-
-
-
-
-
02:19 PM Bug #6154 (Resolved): Notices are displaying raw html (interpreted by the browser), potential XSS vector
- fixed
-
- added sanitation of the output in head.inc as well
-
-
-
12:09 PM Bug #6361 (Not a Bug): Responsive Mobile Menu issue
- This is only applicable when you have the General | webConfigurator | Top Navigation set to Fixed.
Once logged in ... -
- This reverts commit f5a9bb1f2180e6b9fcc9e81006524c2f6813e037.
-
- Section panel header title.
(cherry picked from commit 5414794c12fbcd6455a48f81428e0457a9cf0c95) - 11:41 AM Revision d736d861: Merge pull request #2965 from NOYB/Miscellaneous_Textual_Corrections_-_System_/_Advanced_/_Firewall_&_NAT
- 11:40 AM Revision d72312ef: Make limiters info box work same as By Interface
- The info box displayed on Firewall->Shaper, By Interface come down the bottom with and info icon and can be shown/hid...
- 11:39 AM Revision 890bd153: Merge pull request #2964 from phil-davis/patch-3
- 11:39 AM Revision 170fbb18: Customize limiter info message
- The $dn_default_shaper_msg is what is displayed on the Limiters tab. It needs to talk about "limiter" rather than "qu...
- 11:38 AM Revision 973a2d45: Merge pull request #2963 from phil-davis/patch-2
-
- (cherry picked from commit 542d14be063e0a90b9182ee3dac9dc3fdb52d04d)
- 11:37 AM Revision 5543a460: Merge pull request #2961 from NOYB/Miscellaneous_Textual_Corrections_-_System_/_Advanced_/_Networking
-
- (cherry picked from commit 850211423b3486353b2419b02211213196d8c36e)
- 11:36 AM Revision 8185eabc: Merge pull request #2960 from NOYB/Miscellaneous_Textual_Corrections_-_System_/_User_Manager_/_Settings
- 11:36 AM Revision c6c8cfea: Miscellanous Textual Corrections - Add missing dots, normalize case
- (cherry picked from commit cb6c20a997eeb77b3529e157cd512fabb4ff69f0)
- 11:35 AM Revision 2c6faa05: Merge pull request #2954 from NewEraCracker/textual-corrections
- 11:24 AM Revision 0f1304ee: Sanitize notice output here as well. Ticket #6154
- 11:23 AM Revision e4710ed5: Sanitize notice output here as well. Ticket #6154
-
10:48 AM pfSense Packages Bug #2591: Squid3 can't listen on a CARP VIP
- For those getting bit by the missing CARP interfaces, a viable workaround is to
* Bind Squid to Loopback (127.0.0... -
- it's definitely replicable, ran into it a couple days ago myself but haven't had time to get back to it yet.
-
09:24 AM Bug #6360: Choosing IKE mode auto on the mobile IPSec config can result in an invalid config.
- See: CPY-83269
-
- It's possible to end up in situation where neither the IKE mode or Negotiation mode are defined in the config file or...
-
- there in latest snapshot.
-
- Done
-
- 06:02 AM Revision 31872607: Correct force updates when chosen. Ticket #6359
- 06:01 AM Revision c2b51a45: Correct force updates when chosen. Ticket #6359
-
- that's 2.3(.0)_1 rather than 2.3.1. It wasn't 2.3->2.3_1 that did it, since that only upgraded ntpd, rather something...
-
- rc.linkup doesn't trigger a filter reload. It probably should, though that has the potential for introducing other is...
-
- it ought to do a better job of reloading, rather than the "kill them all and restart" currently.
- 01:34 AM Revision 0876ed6c: Fix script name in error log
- 01:33 AM Revision 92674d7f: Fix script name in error log
- 01:32 AM Revision 223ebd3f: Fix misspellings.
- 01:31 AM Revision 38edc490: Fix misspellings.
-
- works
-
- fixed
-
- The "Save & Force Update" button for RFC 2136 DDNS doesn't actually force updates.
fix coming -
- Couple different issues here. One I opened up #6359 to cover and fixed that there, so the force update actually force...
05/15/2016
-
- if someone can get me access to a box that exhibits this issue, that would help greatly (email cmb at pfsense dot org...
-
12:01 PM Bug #6132: race condition in OpenVPN startup
- Sorry for my english
-
- After i upgraded 2.3 -> 2.3.1, i have same issue.
After Pfsense boot, Widget doesn't show OpenVpn connection, but tu... -
- Need to upgrade OpenVPN to 2.3.11.
https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn23
-
- Those changes helped some instance of this, but definitely doesn't fix the problem for all.
-
- works
- 10:54 PM Revision b4f400a4: Update openvpn.inc
-
- Section panel header title.
- 10:21 PM Revision bc5ab7af: Update openvpn.inc
-
- This has lasted over 3 days now in multiple scenarios that wouldn't last 4 hours on affected kernels. Multiple outsid...
-
06:19 PM Bug #6357 (Resolved): Dynamic DNS (RFC2136) updates always considered successful
- Architecture: amd64
Installed version: 2.3
I've set the Priority as High, because the functionality isn't working... -
06:19 PM pfSense Packages Bug #6356: Snort - missing protocol in port scan detection
- Thanks. Just to make sure we're not at cross purposes, this is a different issue to the one I posted about here: ht...
-
03:16 PM pfSense Packages Bug #6356: Snort - missing protocol in port scan detection
- There is a PR for this already. Waiting for approval from the Devs...
https://github.com/pfsense/FreeBSD-ports/pul... -
04:01 PM pfSense Packages Bug #6346: Squid Proxy Server Service randomly stops
- I have the same experience and would like to learn how to fix this.
Everything else I have tried in pfsense works O... - 05:25 AM Revision a79dfdaa: Make limiters info box work same as By Interface
- The info box displayed on Firewall->Shaper, By Interface come down the bottom with and info icon and can be shown/hid...
- 05:04 AM Revision aadc1358: Customize limiter info message
- The $dn_default_shaper_msg is what is displayed on the Limiters tab. It needs to talk about "limiter" rather than "qu...
05/14/2016
-
-
- On the Snort > Snort Interfaces > WAN Preprocs > Portscan detection tab, the UDP protocol is missing from the Protoco...
05/13/2016
-
-
04:21 PM Bug #6099: igmpproxy does not recognize upstream interface
- ioctl( Sock, SIOCGIFCONF, &IoCtlReq ) returns a lot more interfaces in FreeBSD 10.3 than my tests under Debian showed...
- 01:22 PM Revision a23600ef: Disable ipcomp regardless of config setting to avoid problem. Ticket #6167
- 01:21 PM Revision c7759e4e: Disable ipcomp regardless of config setting to avoid problem. Ticket #6167
- 12:04 PM Revision a8872fdb: Silence mwexec output. Now that the groupdel actually works, it spams the log when group isn't found. Ticket #6352
- 12:03 PM Revision 535634e5: Silence mwexec output. Now that the groupdel actually works, it spams the log when group isn't found. Ticket #6352
-
- The dhcp relay will relay dhcp requests that arrive on it's upstream interface, where the dhcp server is, resulting i...
- 09:01 AM Revision 4680f6bf: Make rule_columns_with_alias end params optional
- Stops PHP warnings like reported in forum https://forum.pfsense.org/index.php?topic=111768.0
- 09:01 AM Revision 6d49499d: Merge pull request #2959 from phil-davis/patch-2
-
- We'll leave this as-is for 2.3.1 to avoid introducing any regressions for something that's little-used and off by def...
-
- Kill Bill wrote:
> Kindly provide a *choice* of filesystem on install - every single Linux distro can do that, why's... -
- Thanks for the confirmation. Also confirmed in another setup here, looks good.
-
- Confirmed! I did a gitsync and the bug seems to have been squashed! Went through a couple of reboot cycles and firew...
-
- fix pushed, works here.
-
- Now I see what's happening. If you have default gateway switching enabled and a link local gateway, this happens.
-
- been through multiple upgrades to 2.3.1 with no connectivity post-upgrade with no issue. Duplicate of #6180
Rich:... - 07:16 AM Revision 7e752d72: Make rule_columns_with_alias end params optional
- Stops PHP warnings like reported in forum https://forum.pfsense.org/index.php?topic=111768.0
-
- works
-
- that exposed another issue, just pushed a fix for that. All works now.
- 06:30 AM Revision 361b388b: Unbound and dnsmasq can both be enabled so restart both if need be
- 06:30 AM Revision 6d642137: Merge pull request #2958 from k-paulius/patch-16
- 05:44 AM Revision 3ded329e: Fix scope for IPv6 link local gateway IPs. Ticket #6353
- 05:43 AM Revision a4b55d11: Fix scope for IPv6 link local gateway IPs. Ticket #6353
- 05:34 AM Revision ea940381: Handle link local IPv6 gateways and default gateway switching correctly. Ticket #6258
- 05:34 AM Revision 857f3490: Handle link local IPv6 gateways and default gateway switching correctly. Ticket #6258
- 04:24 AM Revision 1a444f88: Unbound and dnsmasq can both be enabled so restart both if need be
-
- 03:52 AM Revision e02a2756: Merge pull request #2957 from NOYB/Miscellaneous_Textual_Corrections_-_System_Advanced
-
- 03:50 AM Revision ce252674: Merge pull request #2956 from NOYB/Miscellaneous_Textual_Corrections_-_Services_NTP_PPS
- 03:40 AM Revision b460c43b: Don't start unbound in track6 config if system is booting. Add dnsmasq here as well. Based on PR 2943. Ticket #6186
- 03:39 AM Revision 6d4fd80b: Don't start unbound in track6 config if system is booting. Add dnsmasq here as well. Based on PR 2943. Ticket #6186
-
- It could be fixed as a consequence of one of the other fixes in 2.3.1. It didn't seem like it was reliably replicable...
-
03:06 AM Bug #6110: Default gateway switching not always working with PPP
- Yeah it`s for ipv4.
I don`t get it what changed. We can close it? -
- Greg M wrote:
> Hi!
> Has this been fixed with latest snap?
> I can`t repro it anymore and it works correctly now.... -
- Hi!
Has this been fixed with latest snap?
I can`t repro it anymore and it works correctly now. - 03:20 AM Revision cd227001: Use -g with groupdel when passing a GID. Ticket #6352
- 03:20 AM Revision 34d58bad: Use -g with groupdel when passing a GID. Ticket #6352
-
- works
-
- fix pushed
-
- The static route for IPv6 monitor IPs with link local gateways isn't added correctly, missing the scope.
-
- Some parts of the code made the assumption dnsmasq and unbound wouldn't run simultaneously, which isn't necessarily t...
-
- all still running fine after around 11 hours. That's more than 7 hours longer than any affected kernel has lasted in ...
- 12:35 AM Revision 22f9e40f: Fixed #6349
- (cherry picked from commit c032a89a890a350540df12a9d2e41b9c7d8efda5)
05/12/2016
-
- all works now
-
- It passed on all my tests too
-
- the removal part was fine. The reinstall post-upgrade wasn't working until my last commit. Leaving to verify once tha...
-
- works now
-
- Package list now correct, the package reinstall was skipped until my last commit on #6137. This succeeded with that c...
-
- Update: I have decided to test 2.3.1 snapshots. I am now on 2.3.1.a.20160512.1401 and there hasn't been any change a...
-
- fix pushed
-
- one of the pw groupdel commands passes a GID without -g, resulting in bootup log like: ...
-
- (cherry picked from commit 44b30d595f41d69b0a4db7c032f57ca3e5d338c9)
- 09:53 PM Revision c032a89a: Fixed #6349
-
- my test setups are past 4 hours run time now, in a scenario where they never exceeded 4 hours before the fix.
One... -
- latest available snapshot has the fix merged. Test environments running now to verify.
-
-
-
-
-
-
-
05:00 PM
Bug #6349: system_advanced_misc.php - Reboot when changing RAM disk option happens even when input validation error occurs and the change isn't saved
- Applied in changeset commit:c032a89a890a350540df12a9d2e41b9c7d8efda5.
-
04:57 PM
Bug #6349 (Feedback): system_advanced_misc.php - Reboot when changing RAM disk option happens even when input validation error occurs and the change isn't saved
- reboot flag now unset on validation errors
-
- When checking the RAM disk option and clicking Save, the user is prompted to approve a reboot. If the input validatio...
-
- Luiz merged the upstream fix for this in 384ae63efc9d676414c45591c9b6095197919513. With the note: "I changed the IPv6...
-
04:40 PM pfSense Packages Bug #6274: Missing tabbar in HAProxy for restricted group
- Thanks for your report.
Fix send for both packages: https://github.com/pfsense/FreeBSD-ports/pull/127 -
- Seems like, that ifvc.c (igmpproxy) does NOT create the full list of all interfaces in function "buildIfVc()".
May... - 03:41 PM Revision 60ebb473: Add alias display to target host and target port columns
- (cherry picked from commit 474e70a2d178de50060c6e5f1114bb5b6963a6b6)
- 03:41 PM Revision 474e70a2: Add alias display to target host and target port columns
-
- fixed. Verified that was the last remaining instance of that enable flag.
-
- Applied in changeset commit:88cce82b304cd9e0e253f29a9bd3fdc9241260a7.
-
- In /etc/rc.newipsecdns it tests to see if IPsec is enabled by checking:...
-
- that was already fixed in #6303
-
06:05 AM Bug #6348 (Duplicate): DHCP Server - Delete Additional Pools
- Hi,
After creating an additional pool, trash can to delete it have a wrong url, the interface is missing.
https... -
12:10 PM Bug #6340: fsck hangs boot in background, fails to produce any action, resulting in broken firewall
- All this took to cause apparently fatal damage to the "robust" UFS was a *single* power failure. Since the SSD is jus...
-
- 1000+ power cycles later in above described case, no issues. This isn't any worse than it's been in any 10.x base ver...
-
11:42 AM pfSense Packages Bug #6350 (Closed): Auto Config Backup - Uncaught Exception
- When attempting to "Show Info" and unable to decrypt the backup, the following warning is generated:...
-
-
- $cpzone is always in lowercase, it's used as the array key used in
config.xml. Use it in two cases where the $cp['zon... -
-
- $cpzone is always in lowercase, it's used as the array key used in
config.xml. Use it in two cases where the $cp['zon... - 09:31 AM Revision 78012791: Store notices safely to prevent potential XSS when notices are displayed locally or by remote systems where they're shipped. Ticket #6154
- 09:29 AM Revision e392cc2b: Store notices safely to prevent potential XSS when notices are displayed locally or by remote systems where they're shipped. Ticket #6154
-
08:39 AM Bug #5990: AES-GCM should be an allowed encryption algorithm for IKEv2 in P1
- Took the initiative and asked the strongswan mailing list if the AES-GCM was supported in IKEv2. The response is in t...
- 07:14 AM Revision 7b31a030: Fix package_reinstall_all post-upgrade when packages have been removed in pre_upgrade. Ticket #6137
- 07:09 AM Revision 4458ed6b: Fix package_reinstall_all post-upgrade when packages have been removed in pre_upgrade. Ticket #6137
-
- Applied in changeset commit:0c388fefae197d481c8c1a85fe1dd802d5ead400.
-
- I'd rather store it safely, as there's less chance it'll become a security issue in our code, or outside of it where ...
-
- Thanks for the feedback
-
02:40 AM Bug #6347: Stop / Restarting Service (/status_services.php)
- Ok, sorry, it was indeed a Cache Problem and I haven't realized the changed behavior
-
- also works fine here. That was changed to AJAX updating in 2.3.1 rather than the old reload the page and show "x serv...
-
01:02 AM Bug #6347: Stop / Restarting Service (/status_services.php)
- I just updated to that build also, and those buttons are working for me.
Exactly what does not work?
What are the s... -
- on WEB Interface: Status - Services
The Action Buttons "Restart", "Stop" and "Start" are not functioning after upda... -
- all fixed now
05/11/2016
-
-
10:50 PM pfSense Packages Bug #6346: Squid Proxy Server Service randomly stops
- this is everything before the restart
May 12 10:48:09 check_reload_status Syncing firewall
May 12 10:48:09 php... -
- is there anything in the system log (Status>System logs) when it fails to start under Status>Services?
-
- I dont know how to get better logging for squid but this is everything in the cache file
2016/05/12 10:28:48 kid1|... -
- best to start a forum thread so others can help pinpoint the specific cause and whether it's actually a bug. Impossib...
-
- Squid Proxy Server Service stops from time to time and will not start from the services tab, requires a restart of th...
- 10:07 PM Revision 807e3bfc: Tweak upgrade - Remove unused code and document changes better
- This will ensure a smooth upgrade for those running config 15.4 to any next version.
- 10:07 PM Revision 586f5681: Merge pull request #2955 from NewEraCracker/upgrade-code-tweak
- 09:33 PM Revision 6c6e8e34: Prefer index.php over index.html where both exist.
- 09:32 PM Revision 3a643eb8: Prefer index.php over index.html where both exist.
- 08:49 PM Revision 374f8c51: Tweak upgrade - Remove unused code and document changes better
- This will ensure a smooth upgrade for those running config 15.4 to any next version.
-
- Yep, fair enough. If tgharold in the forum can explain the history of his system so we can understand how FE80 got in...
-
- We've never set anything other than user-defined input there. The described config wouldn't pass input validation in ...
-
- It has been reported that ipaddrv6 tag for an interface has just "FE80" in it in some pre-2.3 configs:
https://forum... - 07:15 PM Revision cb6c20a9: Miscellanous Textual Corrections - Add missing dots, normalize case
-
-
-
-
-
- that appears to be 2.3.0, as the 2.3.1 URLs would have 2_3 not 2_3_0 in them. Is that definitely 2.3.1? Looks like a ...
-
02:01 PM Bug #6345 (Duplicate): boot fails due to "update -f" loop
- When internet connectivity is unavailable, pfsenese 2.3.1 will not boot due to 'update -f' failing and retrying indef...
-
- Applied in changeset commit:24d2e48271a6b48227268de9216edd66572ed77c.
-
- There were some at least somewhat relevant changes to that in 2.3.1, particularly with having a separator at the bott...
-
11:00 AM Bug #6344 (Resolved): Firewall rules being deleted when separators are added
- I'm seeing an issue where separators are causing rules to disappear. Doing a config restore removes the separators an...
- 12:34 PM Revision 48d321ca: Miscellanous Textual Corrections - Add missing dots to phrases
- (cherry picked from commit e4c7d45fc7a294817325354e13f4d5bc4987739e)
- 12:34 PM Revision 4296459a: Merge pull request #2953 from NewEraCracker/textual-corrections
- 12:33 PM Revision 289233b9: Merge branch 'master' of git.pfmechanics.com:pfsense/pfsense
-
- (cherry picked from commit 1c4e2ed053a04f7768a21129171a27e6804dbb0c)
- 12:31 PM Revision 61a0217e: Merge pull request #2950 from NOYB/Miscellaneous_Textual_Corrections_-_Services_Dynamic_DNS
-
- Chris Buechler wrote:
> doktornotor: welcome back. What's your wireless config like on there? What type of card and ... -
07:08 AM Bug #6340: fsck hangs boot in background, fails to produce any action, resulting in broken firewall
- Chris Buechler wrote:
> He's referring to the web installer, which was removed in one of the 2.2.x versions.
Ah, ... -
- I struck out on attempting with various wireless configs in a few dozen power cycles. Also tried writing out a slew o...
- 08:43 AM Revision e4c7d45f: Miscellanous Textual Corrections - Add missing dots to phrases
-
- Changing ACB directly was the quickest way to get a fix for everyone without updating pfSense itself, but looking thr...
-
- ACB is good now. But head.inc probably should sanitize $id and $notice unconditionally. Any reason we couldn't always...
- 06:56 AM Revision 3f398f0d: Hide CIDR for alias types that do not use it
- Suggested/discussed in forum
https://forum.pfsense.org/index.php?topic=111593.0 - 06:56 AM Revision f212adc8: hideMask only modify input-group on first parent
- Otherwise when unhiding (e.g. for Network type alias), input-group gets
added to every div up the DM hierarchy and th... - 06:52 AM Revision 4d6914a1: Merge pull request #2952 from phil-davis/hidemask
-
06:00 AM Bug #5993: dhcp6c not started until an RA received
- Chris Buechler wrote:
> David Wood wrote:
> > The precautionary principle suggests that changing the current behavi... - 05:52 AM Revision 60ec2d7a: Rename OSPF and System Patches packages in pre_upgrade_command. Ticket #6118
- 05:51 AM Revision ab2060d9: Rename OSPF and System Patches packages in pre_upgrade_command. Ticket #6118
- 05:30 AM Revision 6086293b: Revert "Add config upgrade code to update package names. Ticket #6118"
- This reverts commit 297ace668e4a4ffbf1fb1581e7c765e2ed158e29.
- 05:29 AM Revision 538a3c04: Revert "Add config upgrade code to update package names. Ticket #6118"
- This reverts commit 291fad43870bdb39ef0ab32125b022e268a29cf7.
- 04:19 AM Revision 685a06f2: Hide CIDR for alias types that do not use it
- Suggested/discussed in forum
https://forum.pfsense.org/index.php?topic=111593.0 - 04:14 AM Revision 01142f51: hideMask only modify input-group on first parent
- Otherwise when unhiding (e.g. for Network type alias), input-group gets
added to every div up the DM hierarchy and th... - 03:55 AM Revision 381b8f1c: Check for is_array here to avoid possible issues if the config.cache is invalid. Adapted from PR 2925
- 03:53 AM Revision adb6925e: Check for is_array here to avoid possible issues if the config.cache is invalid. Adapted from PR 2925
- 03:44 AM Revision 5925b419: Spaces->tabs
- (cherry picked from commit e1caefc74fba6cbbb680288c1f8d930e4f0ad474)
- 03:42 AM Revision e1caefc7: Spaces->tabs
-
- this works both in GUI and CLI.
-
- that's #6296
-
02:57 AM Bug #6342 (Duplicate): Pf-Sense use lots of CPU time and all connections is down
- Hi,
I have many Pf-sense firewalls in VM-ware esx-i 5.5 enviroment. I Upgrade all Pf-senses to 2.3 version.
I ha... -
- What I committed takes things back to 2.2.x and earlier behavior, plus retaining the fix for #5952. That's confirmed ...
- 03:16 AM Revision 25a96ffb: Added hideMask() function
-
- all works now
-
- looks good, thanks!
-
- fixed
-
- that works. leaving to test once it hits a snapshot.
-
- the config upgrade code worked, or would have if it were actually in the config at that point. The pre_upgrade_comman...
05/10/2016
-
-
- doktornotor: welcome back. What's your wireless config like on there? What type of card and config. Not that it shoul...
-
- Kill Bill wrote:
> The only stable thing for me was ZFS - which, sadly, ain't doable any more with 2.3
Why wouldn... -
- Yeah, I understand it's not recommended or supported or whatever, however the stable solution (which was in place whe...
-
03:59 PM Bug #6340: fsck hangs boot in background, fails to produce any action, resulting in broken firewall
- Kill Bill wrote:
> No, this was not any old upgraded install. Happened on a fresh 2.3 full install with SU+J being... -
- Renato Botelho wrote:
> So you have SUJ off, but you have Soft Updates enabled, right? Did you disabled SUJ for any ... -
- Renato Botelho wrote:
> So you have SUJ off, but you have Soft Updates enabled, right? Did you disabled SUJ for any ... -
- So you have SUJ off, but you have Soft Updates enabled, right? Did you disabled SUJ for any reason or is it an old in...
-
- Kill Bill wrote:
> it hangs reliably on every second reboot, no matter the troubleshooting steps above. It's repeata... -
- Jim Pingle wrote:
> He's alive! :-)
Yeah, indeed... :-)
> This sounds like a different failure mode with poten... -
- He's alive! :-)
This sounds like a different failure mode with potentially the same root cause as #5592, which app... -
-
- Hi, guys! (Yeah, still alive, eventually might get back to fixing something in pfSense. :-P)
Meanwhile - this fsck... -
- works
-
- Applied in changeset commit:16203db3766d694c22a49ff25353e1109bf64c6d.
-
- When editing a Mobile P1, the "Mobile Clients" tab is highlighted, though it's not really a function of that tab.
... -
-
-
07:04 PM Bug #6177: pkg update checking with no Internet access kills web GUI
- Steve Beaver wrote:
> Which widgets are enabled on you dashboard?
- System Information
- Interfaces
- Firewall ... -
03:56 PM
Bug #6177: pkg update checking with no Internet access kills web GUI
- Which widgets are enabled on you dashboard?
-
- Disabling the 'automatic dashboard auto-update check' at /system_update_settings.php seems to mitigate the issue for ...
-
- something is wrong in your network, probably an IP conflict from the sounds of that.
- 01:10 PM Revision d515da75: Adding missing spaces between punctuation
- (cherry picked from commit 0e63fe1f372584a03a6c84aeb6268fde8de75b3a)
- 01:10 PM Revision 0161bbb4: Merge pull request #2949 from NewEraCracker/textual-corrections
-
- (cherry picked from commit f3817766671915583074465aa725152c7a293568)
- 01:09 PM Revision da1fdf78: Merge pull request #2948 from NOYB/Miscellaneous_Textual_Corrections_-_Services_Load_Balancer
- 09:39 AM Revision 0e63fe1f: Adding missing spaces between punctuation
-
02:52 AM Bug #6099: igmpproxy does not recognize upstream interface
- For testing I copied the igmpproxy from version 2.2.6 to latest pfsense Version. Then I had to Link /tmp/igmpproxy.co...
-
12:18 AM pfSense Packages Bug #6339 (Resolved): OpenVPN Client Export package option for "Use Microsoft Certificate Storage" does not specify which certificate to use
- Just spent a while tracking this down, please disregard if it's a PEBKAC issue. :)
I tried the option in the clie...
05/09/2016
-
-
11:20 PM Bug #6338 (Not a Bug): virtual ip
- hi
i had a pfsense by wan ip address:172.16.1.10 and GW:172.16.1.11
i add 6 more IPs(x.x.155.129/32,x.x.155.130/32,... -
- (cherry picked from commit ec18e589f123595c34cf8e1a84313394bb909250)
- 10:15 PM Revision 974dee46: Merge pull request #2947 from PiBa-NL/css_compact_red
-
- 09:13 PM Revision 96122f60: just exit for v6, gateways setup above.
- 09:13 PM Revision 07b45576: just exit for v6, gateways setup above.
- 09:11 PM Revision 0eb97c7c: fix booting check
- 09:10 PM Revision b8735779: fix booting check
- 06:45 PM Revision ed80365b: Add Compact-RED theme and update system.php to sort available themes by pfSense, then BETA, then user supplied themes.
- (cherry picked from commit 6a5c6661960e1cd39e3caf66a3caaeb2678d27b1)
- 06:44 PM Revision 6a5c6661: Add Compact-RED theme and update system.php to sort available themes by pfSense, then BETA, then user supplied themes.
-
05:45 PM Bug #6285: Stability issue with w/ OpenVPN Server on pfSense 2.3
- Just to wrap this up. I had a chance over the weekend to install 2.3 from the iso and restore my configuration. Ope...
-
- This reverts commit 4cbe0b132f0d60b71a20052fae1155210a1f5a16.
-
- This reverts commit 32f0ee884632aba5ab38485a7c25c190bb5bccce.
-
-
- Devs:
Do you have any concerns with restoring the DNSBL database in the **/var/unbound** folder on **reboot**... -
- - Retire system_console_configure()
- Replace above call on rc.bootup by setup_serial_port() -
- - Retire system_console_configure()
- Replace above call on rc.bootup by setup_serial_port() -
- This reverts commit 1831d3486317a6ac8a8bfd034bb133f9b0dc55e7.
-
- (cherry picked from commit 0cb4d4a63585f500329616be6ee2bbb2274975c6)
- 01:23 PM Revision 54f03f07: Merge pull request #2946 from NOYB/Miscellaneous_Textual_Corrections_-_Services_DNS_Resolver
-
- (cherry picked from commit 3d7aaa1a3fac45271bfa50190496be6d70d7f296)
- 01:22 PM Revision 7fc5435b: Merge pull request #2945 from NOYB/Miscellaneous_Textual_Corrections_-_Services_DNS_Forwarder
-
- - Do not include /etc/ttys on base package, it's not supposed to be
replaced during upgrade
- Create a script /etc/rc... -
- - Do not include /etc/ttys on base package, it's not supposed to be
replaced during upgrade
- Create a script /etc/rc... -
- Thanks, I can confirm working...
-
- Greg M wrote:
> See attached screen..
> This happens on latest snap, maybe related?
Yes, I reverted a commit on ... -
- See attached screen..
This happens on latest snap, maybe related? -
- Applied in changeset commit:4cbe0b132f0d60b71a20052fae1155210a1f5a16.
-
11:23 AM Bug #6337 (Closed): Pfsense 2.3 on MS hyperV
- Pfsense 2.3 looses network connectivity on Hyper-V.
After upgrade from 2.2.6 to 2.3 the network connectivity got los... -
08:54 AM Feature #6336 (Duplicate): link to release notes on update page
- On the system update page where it lists the current version, new version, and the "confirm" button, there should be ...
-
- for me, downgrading to older version seems to solve all issues. no confirmation if this is the case for the OP of the...
05/08/2016
-
-
-
01:21 PM pfSense Packages Todo #6190: Convert and add NUT package to pfsense 2.3
- Looks like feature implemented and it works for me at least.
- 08:14 AM Revision 96ca32a2: Update L7 config upgrade code removal. Only file notice if it was actually in use, otherwise it just confuses people.
- 08:14 AM Revision ad9b77f9: Update L7 config upgrade code removal. Only file notice if it was actually in use, otherwise it just confuses people.
- 08:11 AM Revision 297ace66: Add config upgrade code to update package names. Ticket #6118
- 08:10 AM Revision 291fad43: Add config upgrade code to update package names. Ticket #6118
-
07:32 AM Todo #6332: Upgrade encryption options to cover current range of recommendations
- Also noting
* captiveportal.inc uses MD5 to generate randomness for the session id (and probably shouldn't?)
* aut... -
04:37 AM Bug #6335: Status > IPsec shows both connected and disconnected with Split Connections enabled
- Appears to require a complete stop and restart of strongswan after enabling or disabling split connections to toggle ...
-
- If an IPsec connection has split connections enabled, it shows both connected and disconnected in Status > IPsec. Dis...
-
-
-
-
- Add key lengths to user manager options
-
-
- Large keys are not "slower to use" in many cases, since they are only used to validate or set up a session. An ongoin...
-
-
- ...and add some useful info to guide the user.
-
- Add key lengths to the OpenVPN options, for asymmetric keys of size 3072 (for current use), 7680, 15360 (for long ter...
-
- pushed config upgrade code to rename those packages in the config. It looks like OSPF and System Patches are the only...
-
- This is only an issue upgrading from 2.1.x (and likely earlier but haven't tried).
-
- It needs a way to differentiate 0 and n/a. Not sure how difficult that might be offhand.
-
- No data periods in monitoring are represented as 0 (zero). Skewing averages.
- 01:00 AM Revision d239edd1: Setup gateway monitors and exit in rc.newwanip(v6) if system is booting. Ticket #6186
- 12:59 AM Revision c4b5c8be: Setup gateway monitors and exit in rc.newwanip(v6) if system is booting. Ticket #6186
- 12:29 AM Revision adff3136: Log if rc.newwanip(v6) is called with empty interface.
- 12:28 AM Revision ef945b86: Log if rc.newwanip(v6) is called with empty interface.
-
-
The setup_gateways_monitor function is called multiple times during boot up by rc.boot, rc.newwanip, and rc.newwan... -
- The issue I turned this into is now fixed by fixing #6184.
M S: if you're still having issues permanently rw moun...
05/07/2016
-
- this isn't something Renato or I have been able to replicate. It does a pkg update before showing the GUI, and that w...
-
- Several packages, as well as base, have GUI where the user can specify a cipher, digest, or other encryption-related ...
- 10:10 PM Revision 55a9ca07: status_queues.php, default packet_s to 0 if it falls through to that point. Ticket #6329
- 10:09 PM Revision 6f069e92: status_queues.php, default packet_s to 0 if it falls through to that point. Ticket #6329
-
08:24 PM Bug #3450: DHCPv6 Lease Status shows no Leases
- Nonsense. Sorry to bother. Just had anactual lease com in. And it works.
-
- Hi,
See attached screen dump.
A lease file with a lease but nothing showing on the leases page.
Being an absolut... - 07:46 PM Revision f2c719c9: Experimentally fixed #6327
- (cherry picked from commit 54fc9503ff550d04d1253c41c1fd49da1b64c07e)
- 07:45 PM Revision 54fc9503: Experimentally fixed #6327
-
- (cherry picked from commit c3ebf3470402080bbddb709325611e7120eb3c0f)
- 07:08 PM Revision cb4300cb: Merge pull request #2941 from NOYB/Miscellaneous_Textual_Correction_-_Firewall_/_Shaper
-
- (cherry picked from commit 1fd8a5520602803108ef8bbb56b8ffd6493f2a00)
- 07:06 PM Revision 59bc4784: Merge pull request #2939 from NOYB/Miscellaneous_Textual_Correction_-_Firewall_/_Rules
-
- 05:49 PM Revision 0a52ea65: Fixed #6331
- (cherry picked from commit 7e653b50c4a25b045121c026cd09ac4e567c0c42)
- 05:48 PM Revision 7e653b50: Fixed #6331
- 05:43 PM Revision 413a52a0: Workaound fixes #6320
- (cherry picked from commit d1c57eb8e1699f36a3ccda53cef2e28b10eeca92)
- 05:42 PM Revision d1c57eb8: Workaound fixes #6320
-
- Another crash, another completely diff bt. ...
-
- the two backtraces: ...
-
- I had two kernel panics in the past 20 hours after upgrading to a newer 2.3.1 version (2.3.1.a.20160506.0040). Stack ...
-
- fixed
-
04:56 PM Bug #6331: Unable to set speed and duplex on interface
- works for me
-
01:00 PM
Bug #6331: Unable to set speed and duplex on interface
- Applied in changeset commit:7e653b50c4a25b045121c026cd09ac4e567c0c42.
-
12:49 PM
Bug #6331 (Feedback): Unable to set speed and duplex on interface
- Fixed. Thanks for the report.
-
12:16 PM Bug #6331 (Resolved): Unable to set speed and duplex on interface
- I'm unable to set speed and duplex on interface. When i set it, the "apply changes" appears on top of the screen but ...
-
- Michael OBrien wrote:
>
> Still having this issue (running OpenBGPd + IPSec - transport phase 2 with GRE tunnels) ... -
11:25 AM Bug #6223: IPsec + OpenBGPD fails with "PF_KEY socket: No buffer space available"
- Chris Buechler wrote:
> I set it as committed on "shthead"'s system and it seems to be fine.
Still having this is... -
- Kay Ringmann wrote:
>
> What was changed in the new Release? I dont think i'm the only one with this Problem.
U... -
- I Did a Plain install, but the problem persists.
The behavior of listed Interfaces changes unpredictable if i Chan... -
- Kay Ringmann wrote:
> i read this. So I played a little around. It seems that it's depending from upstream interface... -
- didn't notice this, I duplicated it in #6329. it was fixed there
-
05:06 PM
Bug #6327: Alignment defect in forms
- Thanks for your fix. It was effective but I realized that it could be applied in a way that fixed alignment issues in...
-
- Your change break my PR https://github.com/pfsense/pfsense/pull/2940 :) which can be replaced by your fix
-
- it remains the checkbox that are not aligned for me :)
-
04:16 PM
Bug #6327: Alignment defect in forms
- It may, but lets see how this turns out while I research other possibilities.
-
- There's more, but I'm afraid of change ".col-sm-10" breaks the overall style, especially in the additional packages
-
02:50 PM
Bug #6327: Alignment defect in forms
- Applied in changeset commit:54fc9503ff550d04d1253c41c1fd49da1b64c07e.
-
02:49 PM
Bug #6327 (Feedback): Alignment defect in forms
- I have added some top padding to revise the vertical alignment but marked it as "experimental". If no anomalies arise...
-
08:34 AM
Bug #6327: Alignment defect in forms
- This particularly affects instances of the Form_Statictext() class but can be seen elsewhere as shown here. It affect...
-
- Hi,
Same problem on 2.3_1 - Tested on Safari
Thx -
04:57 PM
Bug #5999: IPv6 IP Alias prevents Track Interface from working with DHCPv6 and RA
- Another issue that seems to be related to this is that firewall rules using "LAN net" and similar are not obeyed if y...
-
-
- Works
!Sélection_017.png! -
12:50 PM
Bug #6320: pkg_mgr_install.php?id=firmware displays incorrect firmware version
- Work-around put in place pending revision of this section
-
12:50 PM
Bug #6320 (Feedback): pkg_mgr_install.php?id=firmware displays incorrect firmware version
- Applied in changeset commit:d1c57eb8e1699f36a3ccda53cef2e28b10eeca92.
-
- @Renato, for your reference yesterday evening i was testing and discussing with Chris with a fresh installation of pf...
- 10:11 AM Revision af06931c: Add nut package to poudriere
- 10:11 AM Revision aec067d1: Add nut package to poudriere
- 10:11 AM Revision 5cfd5492: Add nut package to poudriere
-
- works
fixed in -src repo in:
4a578420216361b8acfb7296dd0b68c805e5121b
3938f6f800c9999a8a88141284b1841b71cd8af0 -
- all good.
-
- works, thanks Phil!
-
- fixed
- 03:00 AM Revision 88377787: Don't divide by 0. Ticket #6329
- 02:59 AM Revision 17be206e: Don't divide by 0. Ticket #6329
-
- works
05/06/2016
- 11:46 PM Revision 8ad194c0: Clear xmlrpc.lock when restarting php-fpm. Ticket #6328
- 11:46 PM Revision 9fabe2c7: Bump net.inet.raw.recvspace and net.inet.raw.maxdgram by default. Ticket #6223
- 11:44 PM Revision 48a8235e: Bump net.inet.raw.recvspace and net.inet.raw.maxdgram by default. Ticket #6223
- 11:43 PM Revision 96a399cb: Clear xmlrpc.lock when restarting php-fpm. Ticket #6328
-
- merged, thanks BBcan.
-
- I have posted a PR https://github.com/pfsense/FreeBSD-ports/pull/125 for this issue.
When $pfb['interval'] is ... -
- Pushed a fix to make sure it's an array before it hits that line. BBcan might want to check that thread to find root ...
-
- I misread that as it having been fixed previously. Still being reported as an issue.
https://forum.pfsense.org/inde... -
- fixed
-
- status_queues.php can divide by zero with $bigger_stat.
-
- It happens on full installs going from 2.3->2.3.1 as well, just not from 2.2.x or earlier to 2.3.x.
-
- Greg M wrote:
> Hi!
>
> It happens also on full install just tested it.
> I have to save advanced settings then ... -
- Hi!
It happens also on full install just tested it.
I have to save advanced settings then it prompts for login (o... -
-
- fix pushed
-
- If anything prevents unlock($xmlrpclockkey); in xmlrpc.php from being hit, the config sync will stop functioning unti...
-
-
-
-
- Hi,
I have a small general misalignment in forms (see attachments)
* Current Base System 2.3.1.a.20160505.1243
... -
-
-
- It's much better, works perfectly for me
-
-
-
-
-
- Adam Thompson wrote:
> I think I have two firewalls still running 2.2.x, so I should be able to test in a "real worl... -
11:44 AM Bug #6137: Old package inc files may cause problems post-upgrade
- I think I have two firewalls still running 2.2.x, so I should be able to test in a "real world" scenario.
Can yo... -
- Applied in changeset commit:18bd1ccb8770fc656e80d0cdc0c8900b8a960a18.
-
- It was my fault, I forgot part of the code commented out. Fixed now.
-
- The upgrade log shows it doing the package uninstall as configured, and it's correctly reinstalled post-upgrade, but ...
-
- pkg.php displays lists of items saved by some packages. In the list, the item data entered by users is printed withou...
-
07:27 AM Bug #6304: Incorrect Queue assigment of ESP traffic with DSCP floating rule
- Ok, I never paid attention before.
Thanks for your answer.
You can close this topic. -
- If you have an existing state for the traffic, it won't utilize new shaper rules until the state is killed or expired...
-
- In fact, it is working now but I needed to shut my link for few minutes to activate correct assignment, is it normal?...
-
- Duplicate of #6134, already fixed on 2.3.1
-
- I have a routing group CMST_Failover on which I have my main comcast router and an LTE fallback modem attached as WAN...
-
- Chris Buechler wrote:
> I setup a test with 2.2.6 with Quagga OSPF and System Patches installed, upgraded it to 2.3.... -
- I setup a test with 2.2.6 with Quagga OSPF and System Patches installed, upgraded it to 2.3.0 via auto-update (thinki...
- 06:54 AM Revision 4bb39810: Add authorizedkeys to exclusion in status.php, and fix. While these are public keys and hence not sensitive, they're also of no diagnostic value. Suggested-by: Denny Page
- 06:53 AM Revision abb48814: Add authorizedkeys to exclusion in status.php, and fix. While these are public keys and hence not sensitive, they're also of no diagnostic value. Suggested-by: Denny Page
- 06:14 AM Revision 0972379a: Update diag_nanobsd.php now that permanent rw is default. Ticket #6184
- 06:13 AM Revision 3bb5e399: Update diag_nanobsd.php now that permanent rw is default. Ticket #6184
-
05:42 AM Bug #6296: Interface dies with IPsec and SMP
- Hi,
I hit also the troubles. 100% kern, I ran ddb by hand disabling ddb.conf scripts to make a minidump and to try... -
04:22 AM Bug #6296: Interface dies with IPsec and SMP
- This has been happening to me, the OUTBOUND traffic on the LAN interface continues to work but the driver or somethin...
- 04:52 AM Revision 8e23a630: Only try to chown files that still exist. Ticket #6131
- 04:52 AM Revision 96860e98: Only try to chown files that still exist. Ticket #6131
- 04:29 AM Revision aeb81f5b: Fix #6322 Allow expanded forms of alias entry
- Forum: https://forum.pfsense.org/index.php?topic=111361.0
- 04:29 AM Revision 176a139b: Merge pull request #2937 from phil-davis/patch-1
-
- The GUI should be as described so it's more clear what you're actually configuring.
-
03:38 AM Feature #6324 (Closed): Improve IKEv2 multiple traffic selector per SA configuration GUI
- On IPsec IKEv2 tunnels, by default all defined Ph2s are configured within a single SA.
This could end up with undesi... -
- fixed
-
- What's been done so far all works and definitely helps.
But, pkg processes will still pile up and hang the GUI, i... -
- all works. Thanks Phil!
-
- works
- 02:05 AM Revision aa3890c7: Fix #6322 Allow expanded forms of alias entry
- Forum: https://forum.pfsense.org/index.php?topic=111361.0
-
- I think we've narrowed this down via email to something traffic shaping config-related rather than a bug.
-
- fixed
-
-
- I set it as committed on "shthead"'s system and it seems to be fine.
-
- pushed clean up of diag_nanobsd.php now that things are always rw. That should take care of this for 2.3.1
- 12:54 AM Revision f8e730bb: Remove bcrypt-hash from status.php config dump. Noticed by Denny Page
- 12:54 AM Revision ecf8ef64: Remove bcrypt-hash from status.php config dump. Noticed by Denny Page
-
- patch broke the build of cryptostats so was reverted.
-
- looks good
-
- works
05/05/2016
-
- fixed
-
- works
-
- duplicate of #6305
-
11:53 PM Bug #6323 (Duplicate): Quagga ospf doesn't work with static routes
- OSPFd is ignoring static routes in zebra.conf.
It began after router has been updated to v2.3(Quagga_OSPF ver. 0.6.... -
- happened upon this. With RAM disk enabled, there can be file changes between the glob and chown. Fix pushed
- 11:44 PM Revision a9626fd1: Display Ports/Address based on tab name
- (cherry picked from commit bef0e5ae3ec592d0e28b0b7bbb49591cce7cd218)
- 11:43 PM Revision bef0e5ae: Display Ports/Address based on tab name
-
- Applied in changeset commit:aa3890c75ef104597664b1ba1d2d326aaa1e25f7.
-
- merged, thanks Phil!
-
- Pull Request https://github.com/pfsense/pfsense/pull/2937
-
- In 2.2.* it was possible to enter various strings into the "address" field of an alias detail line. The data would be...
-
- fix pushed
-
- (cherry picked from commit 51decff4c2a9da179773b32f951fb73ee967866a)
- 08:55 PM Revision 46933bc3: Merge pull request #2936 from NOYB/Miscellaneous_Textual_Correction_-_Firewall_/_NAT
-
- 08:35 PM Revision 7c4d5b9b: Revert "Added option to System > General Setup > webConfigurator to change the title of the Help menu in the navbar to either the system hostname or fqdn."
- This reverts commit e3c5006b819063863f44fd2314dd635bd26e8a8c.
-
08:29 PM Revision e3c5006b: Added option to System > General Setup > webConfigurator to change the title of the Help menu in the navbar to either the system hostname or fqdn.
-
- that's by design, you don't want those mismatched.
-
-
-
04:04 PM Bug #6321 (New): Problem with connecting l2tp over ipsec from android and windows
- Hi,
Cannot connect to vpn l2tp over ipsec from android behide of NAT (Its working ok in same L2 network) (On this ... -
-
-
-
-
01:07 PM Bug #6295: Crash upon applying CODELQ to untagged parent interface when also applied to daughter VLAN
- I can confirm I have been fighting this issue too today, but with a dual (actually a triple) NIC ESXi host.
In my ... -
- Pi Ba wrote:
> Will it help for 'full' installs?
I couldn't reproduce it on full install. I had a 2.2.5 VM with s... -
- I'm testing full install right now and will let you know
-
- Will it help for 'full' installs?
-
- Applied in changeset commit:14277cd6a309f73a9339344d688e220d5f3cb0d3.
-
09:34 AM Bug #6314: pfsense 2.3 Captive Portal - no file loaded
- my previous post had a typo: I meant uppercase WIFI_TEST and non WIFI_ZONE, as everyone may have noticed.
The tests ... -
- Hi Jim,
thanks a lot for your hint.
As you notice, it seems the same bug as #6278.
My zone was defined all upper... -
- Note the differences in your zone name in the URL and in the form tag. Is your zone name actually all lower case or a...
-
- Hi Chris,
I tried to simplify the .js lib according to your suggestion, but the problem still persist to me.
I do... -
- same portal page works for me in Firefox on Ubuntu and Windows. Changing the js to just one line, "alert("test ok")",...
-
08:44 AM
Bug #6320 (Resolved): pkg_mgr_install.php?id=firmware displays incorrect firmware version
- The function pkg-utils.inc: get_system_pkg_version() replaces the base version strings with meta version strings if t...
- 08:21 AM Revision 0120cad8: Remove calls which rely in uninitizalized vars
- After analyzing implementations in RELENG_2_1 and RELENG_2_2, this code seems to be a left over after code rewrite
A... -
08:06 AM Bug #6319 (Resolved): DHCP6 DDNS tsig key missing from dhcpv6.conf for reverse zone
- Reverse v6 dynamic zone doesn't get updated despite having "Add reverse dynamic DNS entries." checked. Found out that...
- 07:15 AM Revision e4ea0073: This was right to begin with. Revert "Allow uppercase letters in is_unqualified_hostname as well."
- This reverts commit 3d5fb131796ba6d9c5d53efe77080d7ddb334f22.
- 07:14 AM Revision 8fdddd51: This was correct already. Revert "Allow uppercase letters in is_unqualified_hostname as well."
- This reverts commit 94ccdcb8a4d6f7789fd39c4b6e9876bb689de9a4.
- 06:25 AM Revision fcf77526: Flush link-local IPs so we do not get stale data and do not waste time deleting IP if it is already set to fe80::1:1
- 06:20 AM Revision 3ce8097f: Fix Redmine #6097
- Replace '/usr/bin/grep -vi warning' with '/bin/cat'
- 06:19 AM Revision 8f534d5d: Merge pull request #2922 from NewEraCracker/redmine-6097
- 06:03 AM Revision 94ccdcb8: Allow uppercase letters in is_unqualified_hostname as well.
- 06:03 AM Revision 3d5fb131: Allow uppercase letters in is_unqualified_hostname as well.
-
- 05:36 AM Revision a576ae5b: Merge pull request #2933 from NOYB/Miscellaneous_Textual_Correction_-_Aliases_Import
-
04:55 AM Bug #6318 (Resolved): IPsec dashboard widget causes GUI failure
- Since 2.3_1 the webconfigurator is continually being non responsive. Attempting to access my https website on port 44...
-
- works, thanks!
-
-
01:41 AM Bug #6317: vlan/track interface generates error "Can't assign requested address" during boot
- PR: https://github.com/pfsense/pfsense/pull/2934
-
- I have LAN interface that is a vlan and is configured to track my WAN interface. After upgrading to 2.3 I started see...
-
02:27 AM
Bug #6184: 2.3 NanoBSD issues with getting stuck read-only mounted
- Thanks. I just did a reboot, ran:
@umount -f /cf; fsck -t ufs -y /cf; mount -f -o rw /cf@
and tried an upgrade ... -
- Thanks for the follow up. I don't see an open bug in OpenVPN's bug tracker on that, it's worth opening one.
Maybe... -
- Issue fixed in 918f0a9469aa05a9300a25c2ca60e2be83411226.
That won't end up doing anything differently in 2.3.1 si...
05/04/2016
-
-
-
-
-
-
-
-
- I built a VM to do some additional testing with 2.3. I was unable to recreate the OpenVPN connection reset problem. ...
- 02:35 PM Revision d4af7f9e: Removed global variables used on the version 2.2
- 01:41 PM Revision 0cd22307: Fixed #6306
- Please enter the commit message for your changes. Lines starting
(cherry picked from commit 6cde850b8903f0330c5023f7... - 01:39 PM Revision 6cde850b: Fixed #6306
- Please enter the commit message for your changes. Lines starting
-
01:24 PM Bug #6311: pfSense 2.3 locking up
- Jim Pingle wrote:
> Are you using IPsec? Look at #6296 and see if that might be the same condition you are hitting.
... -
- Are you using IPsec? Look at #6296 and see if that might be the same condition you are hitting.
-
- Hi pfSense team,
since upgrading from 2.2.6 to 2.3 we have had a series of weird lock-ups on our pfSense clusters.
... -
- (cherry picked from commit a6a344d8dfad5f2b8199a0cef6c8f401f5e06db8)
- 12:17 PM Revision 2b8f21d0: Merge pull request #2930 from NOYB/Miscellaneous_Textual_Correction_-_Interfaces
-
12:16 PM Revision 23cc8797: Bug fixes to Route53 DynDNS
- Fixed a bug regarding a leading space in $ZoneID that causes an AWS 505 error. Also adds support for updating DNS if ...
- 12:16 PM Revision 06f1f5ab: Merge pull request #2929 from george-gwu/master
- 12:15 PM Revision 6102c368: Fix form submission fields
- Submitting one form may lead to any other filled forms to be also submitted. This commit fixes this flaw
(cherry pic... - 12:14 PM Revision 5ea93948: Merge pull request #2928 from NewEraCracker/exec-sec-fix
- 12:03 PM Revision 794534b4: Fixed #6310 by adding cusom validation pattern
- (cherry picked from commit 1929ff88e91b2e495f8d22c74138721133afbd1f)
- 12:00 PM Revision 1929ff88: Fixed #6310 by adding cusom validation pattern
-
- Client on LAN, TFTP server on WAN, TFTP proxy enabled on LAN. Client on LAN cannot get files from the TFTP server. Th...
-
- Well well well :)
https://forum.pfsense.org/index.php?topic=107471.msg602590#msg602590
See last message: https://... -
- Hi everybody,
I just made a brand new installation of pfsense-2.3-amd64.
I configured and enabled the Captive Por... -
- Hi everybody,
I just made a brand new installation of pfsense-2.3-amd64.
I configured and enabled the Captive Por... -
08:50 AM
Feature #6306: Bring back hostname infobox in menu bar
- Applied in changeset commit:6cde850b8903f0330c5023f7090caabea6ae6438.
-
08:44 AM
Feature #6306 (Feedback): Bring back hostname infobox in menu bar
- The new UI design makes this difficult, so for now I have added the information as a tool tip to the pfSense logo. Ho...
-
08:45 AM pfSense Packages Bug #6313 (Duplicate): Squid 0.4.16_2 Local Authentication fails with passwords +8 characters
- Hi,
I just made a fresh install of 2.3 amd64 with Squid 0.4.16_2 (squid-3.5.16).
Adding local Squid users with pa... - 08:44 AM Revision 7a5ab9e2: Skip ro mounting to make nanobsd permanent rw mode regardless of config. Ticket #6184
- 08:44 AM Revision 3cc5a386: Skip ro mounting to make nanobsd permanent rw mode regardless of config. Ticket #6184
-
07:10 AM
Bug #6310: services_dnsmasq_domainoverride_edit.php doesn't allow # and !
- Applied in changeset commit:1929ff88e91b2e495f8d22c74138721133afbd1f.
-
07:04 AM
Bug #6310 (Feedback): services_dnsmasq_domainoverride_edit.php doesn't allow # and !
- Knocked out as requested.
-
- IP Address field on services_dnsmasq_domainoverride_edit.php should permit IP addresses or # or ! (as noted in the te...
-
- Yes, that is expected. The difference is that the wizard does not have support for those additional types which would...
-
05:44 AM Bug #6312 (Not a Bug): Traffic Shaper Wizards Schedulers list differs from Interface Schedulers list
- Any *Traffic Shaper Wizard* has the following Schedulers:
* PRIQ
* CBQ
* HFSC
But *By Interface - Scheduler ... -
- pushed change so conf_mount_ro does nothing, so things will stay rw.
-
- already done for 2.3.1
-
02:44 AM Todo #6309 (Resolved): Show Patchlevel in Dashboard
- After the switch from monolithic updates to modular ones the patchlevel should be shown on the Dashboard next to Vers...
-
- Thanks Patrik. We're very near release, but if you can get us a fix in the next couple days it should make 2.3.1.
-
12:55 AM Bug #6109: filterlog crash
- I'm working on a fix that I'd like to be included in 2.3.1. It affects all architectures.
05/03/2016
-
-
09:27 PM Bug #6179: Not obtaining update status on nanobsd when read-only mounted
- I mounted rw and the issue is addressed for me. pkg update via shell updated the package repository. Update check is ...
-
02:35 AM Bug #6179: Not obtaining update status on nanobsd when read-only mounted
- Hello,
anyone here who reported the same issue and managed to resolve it based on Chris' advice (mount rw) ?
-
- Not saying it's not a bug, just that it's always been that way.
-
08:51 PM Bug #6308: TFTP Proxy can't be turned off
- So I see. I just loaded the old 2.2.4 ova to look. As this isn't a bug it seems, I would appreciate if it was kept as...
-
- The enable/disable only determines whether traffic will ever reach it, it's always ran in the background
-
- I happened to notice this in the forum, so I figured I would add it here, though it doesn't fit my situation, it seem...
-
- my system log is being spammed with messages such as:
May 3 15:15:44 xinetd 7815 Reconfigured: new=0 old=1 dropped=0... -
- Fixed a bug regarding a leading space in $ZoneID that causes an AWS 505 error. Also adds support for updating DNS if ...
-
-
-
-
-
- the reconnect issue, what OpenVPN logs do you get at the time?
if there's an issue with manually connecting to th... -
- I don't think this is specific to nanobsd as I always used -full and have seen the same problem on all 4 firewalls I ...
-
-
-
-
- Applied in changeset commit:4057a15383009f57d793466e2997e997165c410b.
-
- array_merge() fails on filter.inc line 1934 when $nat_if_list is not an array
!http://i.imgur.com/VPAnbnF.png!
... -
01:00 PM pfSense Packages Bug #6294: Squid and "Bypass Proxy for These Source IPs"
- Thank you, Jim. That worked.
-
-
- 10:01 AM Revision 59255714: Fix form submission fields
- Submitting one form may lead to any other filled forms to be also submitted. This commit fixes this flaw
-
- This is a request to bring back the hostname displayed in the menu bar as it was up to the 2.2.x releases.
I'm adm... -
- It's definitely not that simple, it has to be in combination with something else you have configured. Could you go to...
-
- please see https://forum.pfsense.org/index.php?topic=111108.0
-
- there is no nano_use_vga.txt in 2.3. Not sure offhand if that's intentional
-
05/02/2016
- 11:41 PM Revision c81678f4: Bump net.raw.recvspace and sendspace defaults. Ticket #6223
- 11:39 PM Revision ef885517: Bump net.raw.recvspace and sendspace defaults. Ticket #6223
-
- Hi,
I have a problem with my pfsense, version 2.3 and trafic shapping (PRIQ).
In fact, the pfsense is VPN Passt... - 08:56 PM Revision ac072ab3: Fix missing interface in pool edit. Ticket #6303
- 08:56 PM Revision 96ab6943: Fix missing interface in pool edit. Ticket #6303
- 05:10 PM Revision 30f984fd: Hide freelogins_resettimeout on disable
- (cherry picked from commit 87d6244a5a998447ce1cc7642813ac668f0e1f1b)
- 05:08 PM Revision 87d6244a: Hide freelogins_resettimeout on disable
-
- no replicable test case for this. it fixes itself by the time the system finishes booting so not a huge deal, but ugly.
-
- fixed
-
- "fixing" the alignment had no impact on this issue on flash that's slow to rw->ro mount. we'll go permanent rw for 2....
-
-
-
-
- fix pushed
-
- Missing the interface in the edit link. Fix coming momentarily.
-
02:39 PM
Bug #6302 (Closed): Throughput and responsiveness issues when routing a small number of connections across local subnets
- I have a SG-4860 running pfSense 2.3.0. If I create a single connection from one local subnet to another and attempt...
-
- Should be fixed on next round of 2.3.1-devel snapshots
-
02:32 PM
Bug #6287 (Resolved): firewall_nat_out_edit.php: Destination (Type: Network) field auto-complete does not show aliases with networks
-
- 2.3.1.a.20160502.0743: Fixed.
-
01:47 PM pfSense Packages Bug #6301 (Closed): Error on squidGuard's Common ACL tab after enabling blacklists
- After enabling blacklists in squidGuard on 2.3, I see this error above the Target Rules on the Common ACL tab:
War... -
- yes, it's among the removed packages list
-
- Hi,
I had pfsense 2.2.6 and in package list there is bind DNS package
Now its disappeared.
It was removed or it w... -
- I set up a bridge with 3 interfaces and put HFSC queues on each interface. With the two 'internal' interfaces disconn...
-
- (cherry picked from commit 7a5e499901d86edad0c4e653da39dc2a42bbc33c)
- 12:32 PM Revision 5c8b2864: Merge pull request #2927 from NOYB/Miscellaneous_Textual_Corrections
-
12:11 PM
Bug #6290 (Resolved): services_captiveportal.php: Waiting period InputBox not available.
- Element now hidden on CP disabled
-
- It works @ 2.3.1-DEVELOPMENT (amd64) built on Mon May 02 06:31:49 CDT 2016
Just a minor bug, if you disable capti... -
- Is there anything else I can do to help debug this? Currently my system log is 50-60% comprised of these messages. Ma...
-
-
-
- 04:36 AM Revision d102e2d5: Add menu item for freeDNS v6
- 04:34 AM Revision ac16181a: Add freeDNS v6 support
- FreeDNS IPv6 support confirmed working using same method as v4 with v6 source address. Simple second service with _us...
-
- (cherry picked from commit bb80af580c5a4408e42c76c39c67d173540897db)
- 01:48 AM Revision 69658669: Merge pull request #2924 from NOYB/Miscellaneous_Textual_Corrections
-
01:26 AM Bug #6099: igmpproxy does not recognize upstream interface
- Kay Ringmann wrote:
> i read this. So I played a little around. It seems that it's depending from upstream interface...
05/01/2016
-
- OpenVPN Server - Tunnel Settings - IPv4 Local network(s) and IPv6 Local network(s) sections. Initial display state i...
-
- I've come cross an odd bug. Interfaces that have IPv6 enabled (6rd on WAN, track WAN interface on internal interfaces...
-
10:02 PM Bug #6223: IPsec + OpenBGPD fails with "PF_KEY socket: No buffer space available"
- Chris Buechler wrote:
> setting net.raw.recvspace=16384, twice the default, has been confirmed to fix this and one o... -
- setting net.raw.recvspace=16384, twice the default, has been confirmed to fix this and one other unrelated IPsec fail...
-
- When pushing a stream of UDP traffic over IPsec, an issue can be hit that leaves an interface dead chewing 100% of on...
-
- John Hood wrote:
> This issue seems to have reappeared
No, this was DHCPv6 client, you're referring to server. Un... -
03:01 PM Bug #3395: DHCPv6 client pass rules need to come before bogons
- Oh, yes: 2.3-RELEASE amd64, originally installed with 2.2.1 or so and upgraded, and finally deployed after the upgrade.
-
- This issue seems to have reappeared, though the separation of the rules involves suggests the exact cause might be di...
-
- When you put a hostname into that field it is only resolved when the ruleset is loaded. If the hostnames cannot be re...
-
- i read this. So I played a little around. It seems that it's depending from upstream interface.
In my earlier posts ... -
08:59 AM Bug #6295 (New): Crash upon applying CODELQ to untagged parent interface when also applied to daughter VLAN
- On a single NIC system / VM using VLANs pfsense 2.3 crashes and can no longer reboot to a functional state when CODEL...
-
- 06:09 AM Revision a9ea552f: add xe-guest-utilities
- 06:09 AM Revision 0487483f: add xe-guest-utilities
- 06:08 AM Revision e751559b: add xe-guest-utilities
- 05:53 AM Revision 64ec463c: Skip LAN properly with static IP WAN and one interface. Ticket #6093
- 05:53 AM Revision 5330efe9: Skip LAN properly with static IP WAN and one interface. Ticket #6093
-
- happened upon this, only affects static IP WAN. fixed
- 12:03 AM Revision 741e8592: Remove stray colon
- (cherry picked from commit cd084ee0e371429b8e30f9fd7be17d1c093a4280)
- 12:02 AM Revision 0a5096fc: Merge pull request #2923 from NewEraCracker/patch-1
-
- (cherry picked from commit 9f563e371d0ce630f551de19c4263fe5c1686de6)
- 12:00 AM Revision 0a6b3079: Merge pull request #2921 from NOYB/System_Menu_-_Textual_and_Punctuation_Corrections
04/30/2016
- 11:44 PM Revision cd084ee0: Remove stray colon
-
- It might be a Squid issue and please let me know if I need to file this issue at Squid upstream.
Following is what... -
10:14 PM Feature #6293 (Duplicate): Include 'if_urndis.ko' kernel module for USB network tethering
- This is a request to compile/include the 'if_urndis.ko' FreeBSH kernel module to allow the connection of generic (i.e...
-
- that's being replaced, so not something we're going to fix (pull request welcome if someone wants to fix it)
-
07:46 PM Bug #6292 (Needs Patch): Status Traffic Graph Long Interface name overlaps header
- Long interface name (Red aligned top right hand side) overlaps rest of graph header
Suggest above graph header align... - 05:33 PM Revision 918f0a94: Fix Redmine #6097
- Replace '/usr/bin/grep -vi warning' with '/bin/cat'
-
-
05:43 AM Bug #6099: igmpproxy does not recognize upstream interface
- Kay Ringmann wrote:
>
> While reading many posts related to this problem, i'dont think it's a problem of naming th... -
- I have a APU1D4.
re0 = WAN
re1,re2 = LAGG0
LAGG0 = VLAN1,VLAN10,VLAN20,VLAN30,VLAN40,VLAN50,VLAN60
So the inter... -
- Stefan Heck wrote:
> Basically the thread starter is Entertain-Customer of the Deutsche Telekom, so I am –
> IPTV...
04/29/2016
- 09:29 PM Revision a18a67d7: Fix extrat return statement
- (cherry picked from commit 09c7fae46d2757815c1e4e5ead7c9896783e7013)
- 09:28 PM Revision 09c7fae4: Fix extrat return statement
-
-
-
- - Uninstall all packages on current system before upgrade using
pre_upgrade_command script
- Create a file containing... -
-
- - Uninstall all packages on current system before upgrade using
pre_upgrade_command script
- Create a file containing... -
-
- fixed
-
- Reported in forum: https://forum.pfsense.org/index.php?topic=111006.0
In system_advanced_admin.php the fileds enab... - 03:59 PM Revision 85a96e14: Fixed #6920 - Missing input element
- (cherry picked from commit 01232142532562e4ce108346910e6e0a3249e738)
- 03:58 PM Revision 01232142: Fixed #6920 - Missing input element
-
- I have the same problem, my ISP use VLAN 838, 840, 839 for IPTV. I have made a bridge with thoes vlans, i have an ip ...
-
- Applied in changeset commit:a07d27e544882076e17da718a3dd98a403761b5c.
-
- Applied in changeset commit:17b31252fa105f473ac4c77fc200baf9dcb5f51b.
-
- (cherry picked from commit 177ed3f66f2d5759f5b821d79aa97021b9daba9d)
- 01:06 PM Revision 630103c3: Merge pull request #2920 from NOYB/System_/_Update_-_Textual_Alteration
-
- Clean up some punctuation.
(cherry picked from commit 7ceae332c529bfce6cdd47907b1b71da4fddc2a3) - 01:04 PM Revision 56403d17: Merge pull request #2919 from NOYB/System_/_Update_-_Punctuation
- 01:04 PM Revision c91e8374: Comment typos in pkg_mgr_install.php
- (cherry picked from commit 70cd4b96c637d483c4ddefa822db44bb2fe4a792)
- 01:03 PM Revision db1030f8: Merge pull request #2918 from phil-davis/patch-4
- 12:59 PM Revision 99ace4fc: Fixed #6287
- (cherry picked from commit 2342972531265771e65b69b810de0c9d98c69b94)
- 12:57 PM Revision 23429725: Fixed #6287
-
- Chris,
thanks. I checked this when I got home. But: my system already was mounted r/w (see att'd picture). I have ... -
- I believe new subject is the root cause of everyone's issue here. Where 'pkg update' just returns with no output, tha...
-
11:00 AM
Bug #6290 (Feedback): services_captiveportal.php: Waiting period InputBox not available.
- Missing input element restored. Thanks!
-
- Version 2.3.1-DEVELOPMENT (amd64)
built on Thu Apr 28 03:20:14 CDT 2016
FreeBSD 10.3-RELEASE -
- When adding "Pass-through credits per MAC address.", there is no inputbox to insert the "waiting period".
When savin... -
10:59 AM
Bug #6289: IPv6 address not given to track6 interfaces on create
- Here is the system log output I get when adding an interface:
Apr 29 11:56:30 check_reload_status Restarting ip... -
10:46 AM
Bug #6289: IPv6 address not given to track6 interfaces on create
- It is the default WAN configuration in pfSense with DHCPv6 for IPv6. I have it configured to request a /56 and send ...
-
- what type of WAN are you tracking? I fixed that for DHCP6 tracking in 2.3, at least for the circumstance where I was ...
-
09:25 AM
Bug #6289 (New): IPv6 address not given to track6 interfaces on create
- If you create a new LAN-type interface with the IPv6 set to track another interface, the new interface does not get a...
-
08:10 AM
Bug #6287: firewall_nat_out_edit.php: Destination (Type: Network) field auto-complete does not show aliases with networks
- Applied in changeset commit:2342972531265771e65b69b810de0c9d98c69b94.
-
08:00 AM
Bug #6287 (Feedback): firewall_nat_out_edit.php: Destination (Type: Network) field auto-complete does not show aliases with networks
- Autocomplete needed to be re-applied to the element after each enable/disable action
-
07:37 AM
Bug #6287: firewall_nat_out_edit.php: Destination (Type: Network) field auto-complete does not show aliases with networks
- Looks like it is actually using port aliases instead of addresses. Looking at it now.
-
-
- The "Source" field auto-complete works as expected, but "Destination" is not.
Current Base System: 2.3.1.a.2016042... -
-
- Clean up some punctuation.
-
07:12 AM Bug #6288: Remote Config Backup Not Working in 2.3.0 version
- Sorry I didn't notice the change on the last wget command.
Kind regards,
Julien R. -
- It works fine against 2.3, I have tried it against over a dozen 2.3 systems and they all work.
The page was edited... -
- It was perfectly backuping all pfsenses before this upgrade.
The script stopped working the day after the upgrade ... -
- Did you updated the script after 2.3 go live?
I have 25 pfsense upgraded to 2.3 with no more working backup script... -
- that page is correct for 2.3 as listed in "2.2.6 and newer"
-
- Same as https://redmine.pfsense.org/issues/5688 in release 2.2.6
Remote backup as described in the wiki https://do... - 04:34 AM Revision 70cd4b96: Comment typos in pkg_mgr_install.php
- 01:20 AM Revision 96bf55d9: Omit local identifier for mobile PSKs. Ticket #6286
- 01:19 AM Revision b3b9c811: Omit local identifier for mobile PSKs. Ticket #6286
04/28/2016
-
11:03 PM Bug #6179: Not obtaining update status on nanobsd when read-only mounted
- Same issue as Ken Theime with my ALIX box. Also takes a long time for the page to come up.
-
- not true, they're same as they always were. 1 was always the WAN. The APU never factory reset to assigned interfaces ...
-
- My Alix cases have OPT1 - WAN - LAN printed on them, left to right, which is vr2 - vr1 - vr0
My APU cases have the s... -
02:43 PM Bug #6282 (Not a Bug): APU, ALIX default interface assignments changed from 2.2.6 to 2.3
- Default port assignments for PC Engines platforms prior to 2.3 were always:
ALIX: WAN=vr0, LAN=vr1
APU: WAN=re0... -
- fix pushed
-
- The mobile IPsec PSKs are added to ipsec.secrets like the following. ...
- 05:37 PM Revision d817c90b: Retrieve firmware versions via Ajax so we don't hang the GUI if unable to reach the server
- (cherry picked from commit cb6f87f3bf3b616133414ac2863d24892544b828)
- 05:36 PM Revision cb6f87f3: Retrieve firmware versions via Ajax so we don't hang the GUI if unable to reach the server
-
- First, thank you for building a awesome piece of software! This is my first bug report. I hope the information is ...
-
- Please discuss this on the forum before opening a bug report.
Also, this is mostly duplicated from #6281 from just a... -
03:32 PM pfSense Packages Bug #6284 (Not a Bug): Firewall Rules change order automatically
- I have created a *pfB_Top_v4 auto rule* to basically block ALL traffic from the Top 20 Spamming countries, using the ...
-
03:07 PM
Feature #6283 (New): Register DHCPv6 leases with DNS resolver
- It would be great if pfSense could register DHCPv6 leases with the DNS resolver in the same manner that it can curren...
-
- Please post in the forum to discuss unless a bug is definitely found.
pfBlocker has its own internal rule ordering... -
- I have created a *pfB_Top_v4 auto rule* to basically block ALL traffic from the Top 20 Spamming countries, using the ...
-
- Stefan Heck wrote:
> phyint re0_vlan8 upstream ratelimit 0 threshold 1
> ...
> altnet 224.0.0.0/4
Matthias Lan... -
- Stefan Heck wrote:
> After a complete reinstall, it is now working. Maybe some wrong parameter left after the updat... -
- @Matthias Lange
you have mail -
11:28 AM Bug #6099: igmpproxy does not recognize upstream interface
- ok, can we talk offline? here is my email: matthias@lange-sd.de
-
- Unfortunately, I cannot provide my previous config, I have started with pfSense two weeks ago und struggled directly ...
-
- Hi Stefan,
this is exactly my config since month for IPTV with DeTelekom and Entertain.
So maybe the config from ... -
- Basically the thread starter is Entertain-Customer of the Deutsche Telekom, so I am –
IPTV Entertain is using Media... -
- Hello Stefan,
could you please go more in detail on this? Maybe some screenshots. I don't know what you mean with "r... -
- It works even with pfSense 2.3 after I joined Receiver and
other Network Hardware to the same LAN-Subnet.
So pfSen... -
- GUI also fixed by sbeaver, should be fine now
- 12:35 PM Revision d9f90dfb: Fix #6251 Brackets around Mbuf figures
- (cherry picked from commit 97f930d1e3af593b20ed56ca951a2109a853a28d)
- 12:35 PM Revision cac808f0: Merge pull request #2917 from phil-davis/patch-4
- 12:34 PM Revision d72e6feb: Provide better messages for invalid alias name errors
- (cherry picked from commit e1f5381f4ecae20922a379b75820af1c9e57927e)
- 12:34 PM Revision 5431a785: Merge pull request #2916 from phil-davis/validaliasmsg
-
- (cherry picked from commit a45a72355ef322c76408d73b930a92a5e765b2ca)
- 12:33 PM Revision 3f3df45b: Merge pull request #2915 from NOYB/HTML_Compliance_-_Setup_Wizard
-
- Clean up some punctuation.
(cherry picked from commit 65d3ebb2250da7ba4cfef7e840beb2c24cdbbda7) - 12:32 PM Revision 0d77eed4: Merge pull request #2914 from NOYB/Setup_Wizard_-_Punctuation
- 10:42 AM Revision 97f930d1: Fix #6251 Brackets around Mbuf figures
-
- Jim Pingle wrote:
> On 2.2.x the Quagga package is "Quagga OSPF" and on 2.3 it's "Quagga_OSPF". So the package still... -
- You're right, Phillip, coloring were done in thermal sensor widget only. That's my mistake, sorry for misleading you :(
-
07:59 AM
Bug #6251: "System Information" widget formatting breaks after on widget refresh
- This is the code the SI widget uses:...
-
07:14 AM
Bug #6251: "System Information" widget formatting breaks after on widget refresh
- I have to wonder why we need a temperature graph in the SI widget when we have a temperature widget to do that, and i...
-
- I just looked on a 2.2.6 system. The Thermal Sensors widget shows a color scale green, yellow, red depending on the t...
-
- Awesome!! Thanks, Phil.
-
- Brackets around the MBUF usage are fixed by pull request https://github.com/pfsense/pfsense/pull/2917
-
- Fixed:
* Temperature progress bar.
Not Fixed:
* "MBUF Usage" value parenthesis is lost on widget refresh.
Los... - 07:46 AM Revision e1f5381f: Provide better messages for invalid alias name errors
-
-
- Clean up some punctuation.
-
03:51 AM Bug #6280 (Not a Bug): OpenVPN issue after upgrade to 2.3 version
- After upgrade remote pfSense box to 2.3 version we can't access remote oVirt Web Console.
We can access to login scr... -
03:29 AM Bug #4326: Limiters on firewall rules where NAT applies drop all traffic
- Arab world
________________
definitive solution
https://forum.pfsense.org/index.php?topic=106640.0
enjoy ... -
- Suggested improved and standardized messages in response to invalid alias, schedule, gateway and gateway group names ...
-
- The validation is actually done by calling is_validaliasname() and the main criteria is at:
https://github.com/pfsen... -
- there's still inconsistency here. Some correctly show Stable and Development there, some on latest 2.3.1 even show as...
-
02:25 AM pfSense Packages Bug #6276: Squid non-functional in transparent mode in 2.3 and 2.3.1
- Dear Jim,
maybe you are right, I put my pfsense config file in forum.
https://forum.pfsense.org/index.php?topic=110... -
- fixed
04/27/2016
-
11:45 PM Bug #6179: Not obtaining update status on nanobsd when read-only mounted
- I'm experiencing the exact same issue. Never obtaining update status, high CPU usage, timeouts when browsing the web ...
-
- thanks Phil
-
- This is already done for 2.3.1
https://github.com/pfsense/pfsense/commit/709309eb91bab632957829a389721a800f984d64
T... -
- Here's a patch that does that... need to apply it to /usr/local/www/status_graph.php
-
-
-
10:20 PM Bug #6273: gateway group will not accept "openvpn" as a group name
- sorry I didn't finished my last sentence -> by the way the gateway group's name "ipsec" works
I understand but I... -
- It would be a bug if it did. Those cannot be used as a group name, as they're used internally.
-
- here's the error message
The following input errors were detected:
The gateway name must not contain invali... -
09:15 PM pfSense Packages Bug #6279 (Rejected): squidguard blacklist update not working after initial update
- squidguard is not able to download from http://www.shallalist.de/Downloads/shallalist.tar.gz or from http://urlblackl...
-
-
-
-
-
-
-
- Johannes Wanink wrote:
> * Why is the target version now 2.3.2? :-( Is there a workaround?
Because there is no fi... -
- Johannes Wanink wrote:
> * Another stupid question: Is "Affected Architecture" set correct? Should it changed to "al... -
- Tried to compile the version from the "next" branch: https://github.com/pali/igmpproxy
Compilation failed due to a... -
01:43 PM Bug #6099: igmpproxy does not recognize upstream interface
- * Why is the target version now 2.3.2? :-( Is there a workaround?
* Another stupid question: Is "Affected Architectu... -
- A few textual alterations.
(cherry picked from commit 80857665b96e542427965b66d51914d88f1e67e1) - 02:30 PM Revision 3f1aa290: Merge pull request #2913 from NOYB/Diagnostics_/_Packet_Capture
-
- There are a couple cases that show problems with Captive Portal with respect to the zone name on 2.3 which were worki...
-
- If a user sets an interface queue to CODELQ, errors appear in the logs from RRD:
Creating:... -
- The conclusions you have reached are incorrect. It is working for others (and myself), and if something is broken it ...
-
- In fresh new installation:
Squid non-functional in transparent mode in 2.3 and 2.3.1
I did this solution: https... -
- A bunch of other places cast various numbers to (unsigned long long) - that might be all that is needed, and perhaps ...
-
07:41 AM Bug #6272: Wrong numbers in state column of /firewall_rules.php
- Seems to be there:
https://github.com/pfsense/FreeBSD-ports/blob/devel/devel/php56-pfSense-module/files/pfSense.c#... -
- I tried adding integers on a 32-bit system until they got too big - they happily change into float, and format_bytes(...
-
- Yes it's the i386 release
-
- That is a wraparound of a 32-bit signed integer for 2,290,434,228 bytes.
@Jo S - is this on a 32-bit system? -
- Here is the output for this rule:
@78(1422127143) pass in quick on em0 reply-to (em0 192.168.10.1) inet proto tcp ... -
- what does the output of 'pfctl -vvsr' show?
-
- Hello,
I have a firewall rule which have weird numbers on the state column, not sure why. Attached is a screenshot... - 08:27 AM Revision fe13359e: Fix Hyper-V SMART disable on widget. Ticket #6147
- 08:25 AM Revision 7de3b9b1: Fix Hyper-V SMART disable on widget. Ticket #6147
-
- A few textual alterations.
-
06:29 AM Bug #6275 (Resolved): Disconnected IPsec phase 2 entries are not shown in IPsec status
- Hi,
First, many thanks for making this great tool.
I have an IPsec phase 1 containing three phase 2 entries. Th... -
05:49 AM pfSense Packages Bug #6274 (Resolved): Missing tabbar in HAProxy for restricted group
- The HAProxy tabbar is missing (Settings, Frontend, Backend, etc.) for users of a group, where the users are only allo...
- 05:04 AM Revision f8e865e3: add znc from user request
- 05:04 AM Revision 9761e686: add znc from user request
- 05:04 AM Revision e15d0ba2: add znc from user request
-
04:41 AM pfSense Packages Feature #6141: Convert apcupsd package to 2.3
- Sergio Handal wrote:
> It would be nice to convert "apcupsd" package to bootstrap so it can be used in version 2.3.x... - 04:32 AM Revision ebe2129d: Fix input validation check. Ticket #6231
- 04:30 AM Revision 78d8dd47: Fix input validation check. Ticket #6231
- 03:31 AM Revision 021b429d: Add trafshow to poudriere list
- 03:31 AM Revision d6fc5739: Add trafshow to poudriere list
- 03:30 AM Revision 994e862e: Add trafshow to poudriere list
-
- fixed
- 03:19 AM Revision d1654153: Add dnstop to build list at user request.
- 03:19 AM Revision e46d9443: Add dnstop to build list at user request.
- 03:19 AM Revision 3b74ae81: Add dnstop to build list at user request.
-
- works, thanks!
04/26/2016
-
- fixed
-
- works
-
- fix pushed
-
- Good catch. Not sure what input you had there which caused the issue, the default character set was fine. Fix pushed
- 10:43 PM Revision 1f269674: PPP here, not L2TP. noticed by https://forum.pfsense.org/index.php?topic=110686.0
- 10:42 PM Revision 17580434: PPP here, not L2TP. noticed by https://forum.pfsense.org/index.php?topic=110686.0
-
- duplicate of #6101
-
09:12 PM Bug #6271 (Duplicate): wrong entry deleted in GUI when editing alias
- Browser: Firefox 46.0 (Windows)
Steps to reproduce:
1) In the web GUI, go to Firewall / Aliases / IP and click Ad... -
- Chris Buechler wrote:
> Do you see that log "ROUTING: setting IPv6 default route to" at the time as well? There isn'... -
08:36 PM Revision 5eb82498: darken background colors
-
-
- Running Alix box and experiencing same issues. Update gear never stops in dashboard. System->Update results in 504 er...
-
03:51 PM Bug #6270: [2.3.1] pfSense Traffic Shaper
- Chris Buechler wrote:
> lagg doesn't support ALTQ
well that explains it, Feature request?! ? -
- lagg doesn't support ALTQ
-
- Setup Lagg0(2 interfaces) set to LAN connection
1 interface assigned to Wan connection
Going to Firewall -> Traff... -
- That is not a valid test. You cannot restore a 2.3 configuration to 2.2.x or any earlier version.
I have a test sy... -
02:49 PM Bug #6245: Multi-WAN PPPoE not working
- Because you said it should work I reinstalled the firewall with 2.3 and tested it again. The same Problem here. Becau...
- 02:24 PM Revision 46f3216e: Fix #6267 Load value of direction on edit
- (cherry picked from commit 2aaa473e4fab47d1a4f704ebb568f88d59b7ec3e)
- 02:23 PM Revision 8364c00d: Merge pull request #2912 from phil-davis/patch-4
-
- Clean up some punctuation.
(cherry picked from commit 3728bbe5a5340a770ebe3feb526485c28888cdde) - 02:22 PM Revision de2a20a9: Merge pull request #2911 from NOYB/Diagnostics_-_Menu_-_Punctuation
-
- Removed an extra comma - more correct IMO
(cherry picked from commit 90968c493922bd9d80a37fe90d1b9440ca7a2333) - 02:20 PM Revision 110668be: Merge pull request #2910 from lukehamburg/patch-2
- 01:17 PM Revision 2aaa473e: Fix #6267 Load value of direction on edit
-
- already fixed in #6134
-
12:03 PM Bug #6269 (Duplicate): SMTP alerts have reversed entry names
- The emails that the SMTP alerter sends out now have the wrong entity names in the wrong places.
Example:
v2.2:
... -
12:09 PM Bug #6268: Install package over pfSsh.php it freeze
- Jim Pingle wrote:
> It works here, though it is really not necessary any more. Everything uses pkg
Thanks Jim, It... -
- It works here, though it is really not necessary any more. Everything uses pkg
To show that it works, I tried mtr-... -
- When trying to install using pfSsh.php (pfSense developer shell) it freezes and does not return anything.
pfSense ... -
- > Do you have any hardware other than the board itself connected? mini-PCI cards, USB devices.
Well, the only hard... -
- Applied in changeset commit:2aaa473e4fab47d1a4f704ebb568f88d59b7ec3e.
-
- Setting the existing value on edit seems to have been missed.
PR https://github.com/pfsense/pfsense/pull/2912 -
02:51 AM Bug #6267: Captive Portal Allowed IP Addresses direction not correctly loaded on edit
- Sorry, forgot to include Affected version - this is in 2.3
the corresponding "Allowed Hostnames" site (services_ca... -
- Captive Portal "Allowed IP Addresses" (services_captiveportal_ip.php): When specifying direction "to" or "from" and s...
-
08:59 AM Bug #6223: IPsec + OpenBGPD fails with "PF_KEY socket: No buffer space available"
- Chris Buechler wrote:
> I'm looking into a good repeatable test case for this.
hi, i'm affected by this bug too. ... -
- Adam Thompson wrote:
> No longer crashes, but also doesn't detect any peers. Same behaviour on two different i386 f... -
- No longer crashes, but also doesn't detect any peers. Same behaviour on two different i386 firewalls.
-
- Clean up some punctuation.
-
06:06 AM pfSense Packages Bug #6047: syslog-ng does not logrotate
- I can word this, logs ain't getting rotated.
- 05:45 AM Revision 2ec9afb7: Allow port specification for Unbound domain overrides. Also fix display of input errors. Ticket #6091
- 05:45 AM Revision d051bdd1: Allow port specification for Unbound domain overrides. Also fix display of input errors. Ticket #6091
- 05:34 AM Revision d931d66d: Fix text.
- 05:34 AM Revision 50fa04bb: Fix text.
-
04:40 AM Feature #6038: Add ability to configure which interface is chosen for defining hostname IP in /etc/hosts
- I stumbled over this problem also. In my case I have several LAN interfaces and the wrong one gets registered in /etc...
- 04:01 AM Revision c8bf35c9: Add validation to prohibit IPv6 on firewall_nat_edit.php, where it will generate invalid ruleset. Ticket #6265
- 04:00 AM Revision 776b6190: Add validation to prohibit IPv6 on firewall_nat_edit.php, where it will generate invalid ruleset. Ticket #6265
-
- ... I've posted a forum query re trying to get pfBlockerNG to update on reboot so I can continue to use RAM disks.
... -
- duplicate of #6251, commit was done on that one so closing this.
-
- fixed
-
- A reboot didn't change anything in the advanced box or CSC. Only admin actions determine what's in both of those. Tha...
-
02:11 AM Bug #6266 (Not a Bug): OpenVPN configuration mix-up
- Hi!
A few days ago, my PfSense's Openvpn section make a mistake. i have a server with tunnel mode and client speci... -
- Please come to https://forum.pfsense.org/index.php?topic=110731.0
- 12:12 AM Revision d5ba66fa: localip and gateway aren't used when type is PPP, remove here. Ticket #6264
- 12:12 AM Revision 67ac44ae: localip and gateway aren't used when type is PPP, remove here. Ticket #6264
04/25/2016
- 11:50 PM Revision 6b086a3b: localip and gateway aren't used when type is PPP, remove here. Ticket #6264
-
- It's not likely specific to your config, rather the environment, but yeah send me a backup. cmb at pfsense dot org
... -
- Chris, would it help to send my config file (without the personal data) ? If so, to what address ?
-
- Chris,
yes, checking the box and preferring IPv4 over IPv6 doesn't help. I rebooted but can't see System/Update. And... -
- that one's not as straight forward as changing the input validation, since the * needs changes in the back-end handli...
-
- OK I revised the ticket to be only for the * character.
-
- That patch addresses the @ but not the *
Still does not work for *
-
- @ is already fixed -- see #6122
Try the fix on the ticket, if it works, this can be closed, if it still doesn't wo... -
- Namecheap DDNS allows '*' (wildcard), but the page does not accept this value.
-
- now clear which button goes with which text
-
03:00 PM
Bug #6259: Gateways Dashboard Widget - weird radio button placement when Wrench is clicked
- Applied in changeset commit:f5ee7cfd7c2e3f9e7383fb41c47f77bad3507cfc.
-
02:52 PM
Bug #6259 (Feedback): Gateways Dashboard Widget - weird radio button placement when Wrench is clicked
- Layout corrected (improved at least)
-
- This is on Chrome 50 (Mac)
If you click the wrench (aka spanner by some), the Radio buttons pop up in an odd arrange... -
- fixed
-
- Marco Novielli wrote:
> You mean this (see attachment)? It's definitely under System-->Advanced-->Firewall & NAT fo... -
- it's there the same as it always was. it only displays if you have > 1 interface, same as always, as it has no releva...
-
05:22 PM Bug #6256: Network Address Translation section is removed in Advance NAT menu
- You mean this (see attachment)? It's definitely under System-->Advanced-->Firewall & NAT for me. Right under Bogon ...
-
- Hi,
System -> Advanced -> Firewall & NAT -> Network Address Translation was removed in new version of pfsense (2.3)... -
- fixed
-
- works
-
- always been that way (well, w/strongswan, >=2.2.0). Doesn't hurt anything, not worth risking at this stage for 2.3.1.
-
- When multiple Phase 2 entries exist, the encryption options for every P2 inside a given P1 are added to every split c...
-
- all works now
-
- fix pushed
-
- firewall_nat_edit.php lists IPv6 VIPs and allows entering IPv6 IPs manually, where those aren't valid and result in a...
-
- fixed
-
- fix pushed
-
- ...
-
- PR merged.
-
- This issue is fixed in: PR # 121 https://github.com/pfsense/FreeBSD-ports/pull/121/files
-
- that does work in general but sounds like there is some edge case there.
Alexander: could you get me into the sys... -
05:47 AM Bug #6245: Multi-WAN PPPoE not working
- I have a working setup on 2.3 with this configuration (but with second WAN on OPT1): 2 PPPoE connections, same provid...
-
- fixed
- 07:51 PM Revision d3e5a4ff: Fixed #6259 (Gateway widget form layout)
- (cherry picked from commit f5ee7cfd7c2e3f9e7383fb41c47f77bad3507cfc)
- 07:50 PM Revision f5ee7cfd: Fixed #6259 (Gateway widget form layout)
-
- moved the PHP error to #6264.
The advanced options are only expanded if you have one of them configured, they're ... -
04:30 AM Bug #6255 (Confirmed): PPP Country/Provider/Plan configuration not saved
- Using a Huawei E220 modem, but I don't think it's related to this specific model.
Go to Interfaces (assign) / PPPs... -
-
-
- just cut out all of <dhcpdv6> through </dhcpdv6> or yeah ramode to disabled.
-
12:49 PM Bug #6262: radvd
- "You can manually edit that out of your config."
I'm having trouble finding that ticket. Is it something other than... -
- I looked a bit harder at this because my last results were confusing. With no WAN interface and LAN via SLAAC the sy...
-
- where you have a single interface assigned, it didn't unset the dhcpdv6/RA config there for the LAN. That was fixed i...
-
- Do you mean something other than this:
ServicesDHCPv6 Server & RA
The DHCPv6 Server can only be enabled on inte... -
- it runs where it's enabled. Disable it if you don't want it to run.
-
- (This bug tracker is too sensitive to typos)
RADVD runs when it shouldn't. I have a 2.3-Release test system without ... -
- RADVD runs when it shouldn't. I have a test system without a WAN interface and IPv6 via SLAAC. RADVD starts and if ...
-
-
02:50 PM Feature #5897: Make Alias url table persistent after reboot without internet
- Yes it's nanobsd on full installs works fine!
nanobsd is EOL
Oscar -
- Removed an extra comma - more correct IMO
-
- Hi!
See https://forum.pfsense.org/index.php?topic=108432.msg603891#msg603891
I had dozens of above messages until... -
- the interface scope is included where the gateway is link local, and doesn't already contain %.
https://github.co... -
- Doing my best to describe this perceived bug in 2.3. Running on an SG-2440. I have 2 WAN interfaces, both of them D...
-
-
-
- 12:59 PM Revision ffc6d169: Fix #6251 Temperature on System Information Widget
- It just seems that some infrastructure for a temperature bar had been put in place, but the code never finished to ac...
- 12:58 PM Revision 8067ebef: Merge pull request #2909 from phil-davis/patch-4
-
- Clean up some punctuation.
(cherry picked from commit c9b462825b0b2c53aa3701cd7824ceb82926a754) - 12:57 PM Revision 842fb493: Merge pull request #2908 from NOYB/Status_/_System_Logs_-_Punctuation
-
- 1) If there is no IPsec status response display an info box wrapped in table tags to prevent horizontal scroll bar.
2... - 12:56 PM Revision 74a28f9e: Merge pull request #2904 from NOYB/Status_/_IPsec_/_Overview_-_Few_Fixes
-
- Clean up some VPN menu punctuation.
(cherry picked from commit be4cebbf13b28cbcce289e96fb22f0355c945be8) - 12:53 PM Revision b6beeb34: Merge pull request #2900 from NOYB/VPN_Menu_-_Punctuation
-
- Applied in changeset commit:45c4bc38c9d3aa9e1bd164d79cb47d03395e12c3.
-
-
07:40 AM Bug #6257 (Resolved): Kernel panic with ALTQ
- Kernel panic with ALTQ being used on 2.2.6 and now on 2.3. Only happens with ALTQ active, does not happen when the sh...
-
- no buffer space available (55), and no route to host (65). Neither of those is a bug in itself. Start a thread on the...
-
10:37 AM Bug #6261 (Not a Bug): error socket: GW:XXX.XXX.XXX.XXX sendto error: 55
- Hi Team,
I use pfSense v2.3 release for my local network (about 350 users connected with 2 LAN and 3 WAN interface... -
11:50 AM Bug #6232: Weird temperature bar in Status / Dashboard
- Displaying fine now.
Thanks! -
- Note: Also reported by issue https://redmine.pfsense.org/issues/6251 which I happened to notice first.
Pull request:... -
- Done
-
- If that didn't work, this is not your issue. Please start a forum thread to discuss and troubleshoot.
-
- Jim Pingle wrote:
> Looks good now, others on the forum and here have also confirmed it is working now. Closing.
... -
- I installed new pfsense 2.3 and installed squid.
I did this command: chgrp squid /dev/pf
problem is same exist: Squ... -
- Applied in changeset commit:eb442fec8bd079760a53372bd9eaed7c502f2e98.
-
- I was a bit surprised that decent code to do the temperature was just not there in the bootstrap-converted code, and ...
-
- See attachment.
- 08:05 AM Revision eb442fec: Fix #6251 Temperature on System Information Widget
- It just seems that some infrastructure for a temperature bar had been put in place, but the code never finished to ac...
-
- Clean up some punctuation.
-
- in 2), I mean the "mouse hover", not the popup, of course.
-
- Hello,
1)
On the homepage, in the firewall logs section, there is a mouse hover on the red cross which display wi... -
03:23 AM Bug #6254 (Resolved): status_lb_pool.php Save and Reset buttons don't work
- When I want to managed servers (enable or disable) via status_lb_pool.php nothing happens.
-
- 0. Make sure WebGUI is on HTTPS.
1. Install Darkstat.
2. Configure Darkstat and try to access it.
3. "Access Darks...
04/24/2016
-
10:55 PM Revision 1322ee22: Make QinQ interfaces work again
-
10:30 PM Bug #6202: OpenVPN bad state / pids do not allow clients to restart.
- I'm not sure if this is a duplicate of 6132 because
1. I different errors in the vpn log - device busy - none of ... -
-
09:08 PM Bug #4590: Nat Reflection bug when using limiters
- any updates on this?
-
- Hi,
I was wondering if someone had this or is there a fix when i want to see the denied reports? pfSense 2.2.4 64BIT... -
09:03 PM Todo #4847: NanoBSD Image Flash Block Misalignment
- ky41083 - wrote:
>
> gpart add -t freebsd-ufs -a4k -s20g ada0s1
>
Note that for mbr partitions kern.geom.part... -
06:32 PM Bug #6167: IPsec IPComp not working
- Is this already in the snapshots? Last I checked dataflow is still blocked when I enable IPComp...
-
- Thanks. The edit to the pfblockerng.sh file seems to have worked - will report back if I have any issues.
Thanks ... -
- Hi Andrew,
"Occasionally, the content of the various lists means that one of the lists completely de-dupes out"
"... -
- Thanks. I'll try that edit.
I'm probably being slow, but I didn't follow your comment in relation to the original... -
- Thanks for the report, please add the following line to */usr/local/pkg/pfblockerng/pfblockerng.sh*
Add this line... -
- I have a number of IPv4 block lists active in pfBlockerNG. Occasionally, the content of the various lists means that...
-
- Pull request submitted. https://github.com/pfsense/pfsense/pull/2905
-
04:10 PM Bug #6179: Not obtaining update status on nanobsd when read-only mounted
- I am experiencing the same issue on my alix2d13. I checked the "prefer IPv4 over IPv6"-box in advanced settings, clea...
-
- FYI, I have had no one else report this issue in the Forum or via PM... I can't reproduce this issue either... The on...
-
- See attachment.
-
07:19 AM pfSense Packages Bug #6248 (Resolved): Feedback for NUT package
- I have created a merge request (https://github.com/pfsense/FreeBSD-ports/pull/120) for the NUT package for PFSense. P...
-
- I have created a merge request (https://github.com/pfsense/FreeBSD-ports/pull/119) for the TeamSpeak 3 package for PF...
-
- 1) If there is no IPsec status response display an info box wrapped in table tags to prevent horizontal scroll bar.
2... - 06:17 AM Revision bb37a6c5: Add some available packages from user requests.
- 06:17 AM Revision c4ab0e8d: Add some available packages from user requests.
- 06:16 AM Revision 641b5618: Add some available packages from user requests.
- 05:21 AM Revision ae84d7ca: Fix #6244 Put back byte counts on Status Interfaces
- 05:21 AM Revision cef2555b: Merge pull request #2903 from phil-davis/patch-4
- 05:03 AM Revision 34446ef7: Fix #6244 Put back byte counts on Status Interfaces
-
- I updated to 2.3 and I have 2 PPPoE connections. One setup on WAN and one setup on OPT4. The first works without any ...
-
- Something broke cryptostats building, seems like maybe the ipcomp patch. Trying now with that reverted.
In the me... -
- duplicate of #3334
-
- Applied in changeset commit:34446ef79a45b476d783e36a480cdf41226de9d4.
-
- merged to master and 2_3, thanks Phil!
-
- Pull request https://github.com/pfsense/pfsense/pull/2903
-
- In 2.2.* Status->Interfaces showed the In and Out byte counts in brackets after the packet counts.
That bit of code ...
04/23/2016
-
10:01 PM Bug #6185: pfsense 2.3 w/luajit breaks on 586-class CPUs
- Chris Buechler wrote:
> Removed lua from nginx, will be in next 2.3.1 snapshot run. Give it a shot and let us know, ... -
- Well, it's not only the GUI that wasn't working any more. I could not get an IP with DHCP from pfSense. Look at the l...
-
01:35 PM Feature #6243 (Duplicate): Traffic Graph include IPv6 addresses
- This pictures shows a computer downloading something and then also an upload.
The download worked via legacy Interne... -
10:32 AM Feature #6242 (Rejected): Use local user datebase for IKEv2 EAP-Charpv2
- Now its possible to use Pre-shared keys as login information for IKEv2 EAP-Charpv2, but would be nice to use Local Us...
- 09:33 AM Revision a39e519b: Don't foreach unless it's an array. Ticket #6142
- Similar thing to https://github.com/pfsense/pfsense/commit/13dab3538fe8b6c1688142c89a017520ad0aaac6 should be done he...
- 09:32 AM Revision 44ffb627: Merge pull request #2899 from phil-davis/patch-4
- 08:40 AM Revision ae568465: Use leftsendcert=always where leftcert is defined. Ticket #6082
- 08:39 AM Revision 7951cab4: Use leftsendcert=always where leftcert is defined. Ticket #6082
- 08:15 AM Revision b700d79e: Hyper-V SMART - didn't intend to commit that part. Ticket #6147
- 08:14 AM Revision 35c8b891: Hyper-V SMART - didn't intend to commit that part. Ticket #6147
- 07:52 AM Revision b4594d39: Add Hyper-V support to system_identify_specific_platform, and disable S.M.A.R.T. actions in Hyper-V guests. Ticket #6147
- 07:52 AM Revision df5c2c73: Add Hyper-V support to system_identify_specific_platform, and disable S.M.A.R.T. actions in Hyper-V guests. Ticket #6147
-
- Not all packages are shown under 'Installed Packages' (System > Package Manager) when a package is removed from the p...
- 06:33 AM Revision fe86a663: fix indent on dhcpdv6 sntp-servers
- 06:32 AM Revision 2605e6d7: fix indent on dhcpdv6 sntp-servers
- 06:25 AM Revision 2f15f373: Hostnames are valid for NTP servers in DHCP Server. Ticket #6239
- 06:24 AM Revision 39bfb267: Hostnames are valid for NTP servers in DHCP Server. Ticket #6239
-
- not sure what to suggest, haven't seen that and went through another ALIX 2.2.6->2.3 upgrade with no issue today.
... -
- Andrew: please start a thread on the forum and we can help troubleshoot. There might be some root cause problem there...
-
04:05 AM Feature #1811: Monitor PPP for connections stuck in "initial" state
- I just experienced this issue.
PPPOE connection went down and failed to re-establish itself, becoming stuck at "LCP:... -
- Renamed to Apple IPsec Profile. leaving to confirm in a build
-
- fix pushed.
-
- What triggers the kernel panic is: ...
-
02:14 AM Feature #6240 (Resolved): vxlan driver
- The vxlan driver "has been added":https://www.freebsd.org/releases/10.2R/relnotes.html#drivers-network since FreeBSD ...
-
- works
-
-
- NTP server fields on DHCP Server config page only allow IPs. That works fine with FQDNs now, IIRC it didn't in the pa...
-
- fixed
-
- works
-
- works
-
- all correct now
-
- upgrades correctly in those cases now
04/22/2016
-
11:44 PM pfSense Packages Bug #6235: Snort sometimes crashes during rule update process (specifically related to VRT .so rule update?)
- This happens fairly frequently for me - it crashed again on Apr. 22nd when pulling in the latest VRT rules (SIGSEGV)....
-
05:57 PM pfSense Packages Bug #6235: Snort sometimes crashes during rule update process (specifically related to VRT .so rule update?)
- The rules update process will restart any running Snort processes at the end of the update. However, I guess it is p...
-
- Snort occasionally crashes during the rule update process and doesn't start again until I manually restart it via the...
-
- Pulled in the patch on https://reviews.freebsd.org/D6062 which gnn has confirmed fixes the issue.
-
- If you go to System>Advanced, Networking tab, and check the box to prefer IPv4 over IPv6 then reboot, does it still d...
-
- Chris, it just sticks there. I use Opera 36 as my standard browser and have cleared the browser's cache. Same happens...
- 05:10 PM Revision 2e4ae1eb: Further fix for tun/tap and topology
- (cherry picked from commit 2284daf2986124fc7786641774fbc3064e001465)
- 05:09 PM Revision 2284daf2: Further fix for tun/tap and topology
-
- duplicate of #6101, that same fix applies across all use of that control
-
05:00 PM Bug #6238: Delete button
- It appears I can't edit the title to be more descriptive. Apologies in advance.
-
- The NTP configuration GUI appears to have an issue in which ALL/ANY of the delete buttons associated with time server...
-
- Pull-request is send, needs some testing though. https://github.com/pfsense/FreeBSD-ports/pull/111
-
- Likely related to haproxy being build against openssl 1.0.1, where it used to be against 1.0.2. Can see that in hapro...
-
- the root cause of this is the same as #6120, added baud there.
-
04:03 PM
Bug #6234: Console serial speed not respected after 2.3 upgrade
- The speed is correctly updated in the config file:
$ grep serialspeed /cf/conf/config.xml
<serialspeed>38... -
- Hello,
after the 2.3Release upgrade, at the reboot, the console of my Alix works at 115200bps, even if in the ser... - 04:10 PM Revision 5918c644: Fixed #6236
- (cherry picked from commit b63f52433ef8429a521833c9345c4c0ebd7a4d83)
- 04:09 PM Revision b63f5243: Fixed #6236
-
- Looks good now, a lot more intuitive/user-friendly.
-
- Works, for this case anyhow.
-
11:20 AM
Bug #6236: vpn_openvpn_client.php: Topology settings showing for Peer to Peer Shared Key, should only show for SSL/TLS
- Applied in changeset commit:b63f52433ef8429a521833c9345c4c0ebd7a4d83.
-
11:11 AM
Bug #6236 (Feedback): vpn_openvpn_client.php: Topology settings showing for Peer to Peer Shared Key, should only show for SSL/TLS
-
- For OpenVPN clients, the topology setting should only show for SSL/TLS, but also shows in Shared Key mode, where it's...
-
11:18 AM Bug #6237 (Resolved): RADVD, Route Information Option type 24, Multiple IPv6 gateways
- hi,
I just noted that, when radvd is enabled, it always advertises Route Information Option type 24 (illustrated i... - 08:05 AM Revision ff4665f0: Prevent configuring the same parent and VLAN ID multiple times. Ticket #6183
- 08:04 AM Revision 4ff83670: Prevent configuring the same parent and VLAN ID multiple times. Ticket #6183
-
07:43 AM Bug #6186: race conditions in service startup
- yes that would be a good idea. Forced restart on unbound after VPN success. However, it can be a good idea to then de...
-
- VPN and DNS is not that clear a solution. You have a chicken-and-egg scenario there. In plenty of cases you need work...
-
- Clean up some VPN menu punctuation.
- 06:43 AM Revision be09e9e8: Don't foreach unless it's an array. Ticket #6142
- Similar thing to https://github.com/pfsense/pfsense/commit/13dab3538fe8b6c1688142c89a017520ad0aaac6 should be done he...
- 06:34 AM Revision a81deb39: Add config upgrade code for CARP IPs on gateway groups, GRE and gif. Ticket #6222
- 06:33 AM Revision aa31bad6: Add config upgrade code for CARP IPs on gateway groups, GRE and gif. Ticket #6222
- 05:41 AM Revision 13dab353: Don't foreach unless it's an array. Ticket #6142
- 05:40 AM Revision 1d616571: Don't foreach unless it's an array. Ticket #6142
- 05:02 AM Revision c9d58166: Update VIPs CARP parent on upgrade. Ticket #6164
- 05:01 AM Revision 8175a2a8: Update VIPs CARP parent on upgrade. Ticket #6164
-
-
-
- Remove these cron jobs on full install if not using ramdisk.
- 04:38 AM Revision 6c7be435: Merge pull request #2883 from NOYB/Periodic_RRD_&_DHCP_Leases_RAM_Disk_Backup
- 04:28 AM Revision 2f5b3dcd: Add 200000 to max cache while we're at it. Ticket #6230
- 04:27 AM Revision b1966925: Add 200000 to max cache while we're at it. Ticket #6230
- 04:24 AM Revision c676c472: Feature #6230 Increase Unbound Host Cache
- This is very easy to do, if people are happy to have 100,000 as an option.
- 04:24 AM Revision bbc32e31: Merge pull request #2897 from phil-davis/patch-4
-
- This is specific to nanobsd, and looks like it may have always happened in that situation. You end up with the defaul...
-
- Chris Buechler wrote:
> Is it always after "Generating RRD graphs"?
Yes, always there
> If you haven't tried th... -
- Quite a few ALIX systems upgraded with no issue along those lines. Is it always after "Generating RRD graphs"? If you...
-
- After upgrading from 2.2.6 to 2.3Release on my Alix, on the next boot I see from the console:
====================... -
- Figured out how to make a diff file of the changes, attached.
-
- fix pushed
-
- Fixed.
Daniel Weeber wrote:
> Had a hard time figuring out I had to insert "domain-insure :"domain.local" for a ... -
- The temperature bar in Status / Dashboard - System Information widget have other appearance than the other bars.
Thi... -
- this was fixed long ago and didn't get marked as such. The PR was merged in May 2013, so fixed in 2.1.0+. Confirmed s...
-
- works, thanks Phil
-
- Sam: added same issue with GRE and gif to #6222, that's fixed there.
-
- fix pushed
-
- adding GRE and gif with same issue here.
fix pushed -
01:09 AM Revision 783ca2b2: Add options to build zabbix3 packages
-
- forgot filename too, services_captiveportal_vouchers.php
-
- Found the bug. misplaced parenthis:
if ($_POST['charset'] && (strlen($_POST['charset'] < 2))) {
This causes the... -
- Attempting to change the charset to anything just render the error:
"The following input errors were detected:
Need... - 12:33 AM Revision 83e3240b: Add vnstat to poudriere_bulk
- 12:33 AM Revision aeca6354: Add vnstat to poudriere_bulk
- 12:33 AM Revision 1047232c: Add vnstat to poudriere_bulk
- 12:25 AM Revision 102446a2: Feature #6230 Increase Unbound Host Cache
- This is very easy to do, if people are happy to have 100,000 as an option.
-
- The code here (and in other places around the system) has lots of repeated stuff (e.g. that array of known values app...
04/21/2016
-
- Thanks Phil, merged. While we're at it, I added 200000 to the list as well.
-
- It is very easy to add 100,000 as an option.
PR https://github.com/pfsense/pfsense/pull/2897 -
05:15 PM Feature #6230 (Resolved): Increase Unbound Host Cache
- Versions 2.* have a drop-down option under DNS Resolver -> Advanced:
"Number of Hosts to cache"
The maximum numbe... -
- Same applies for services that start up in the wrong order. So if a VPN client interface is slow to start up, and a u...
-
10:32 PM Bug #6173: /firewall_nat_edit.php: dsttype_selected wrong when edited w/VIPs defined
- The situation I'm working with is a bit strange:
I have a block of publicly routable IPs routed toward my pfSense'... -
- PR https://github.com/pfsense/pfsense/pull/2895
1) Delete some unused code
2) Make the src type matching work simil... -
- Applied in changeset commit:8fd700c59004638e6061d64e5145bd0df9170532.
-
- Thanks Phil! I was expecting some kind of edge case from fixing that, and hadn't yet had a chance to review every pos...
-
- Note: The code for the src fields that uses $specialsrcdst and is_specialnet() works OK. But build_srctype_list() bui...
-
- That fixes the problem reported here. But now if you have selected a VIP from the dropdown of special destinations, t...
-
- It's a trivially small portion of the total PHP warning crash reports, no need for a rush fix for purposes of reducin...
-
- I can submit a Rush patch if that makes it less "Noisy" for you? :) But I still need to see why this tag is missing....
-
- BBcan177 . wrote:
> Are these crash reports from multiple IPs?
>
Yes, at least a dozen different systems, diffe... -
- Are these crash reports from multiple IPs?
I had one user PM me with this issue (Full Install in a KVM VM w/o Ramd... -
- getting a number of crash reports with: ...
- 08:59 PM Revision ee7c0a00: WArn user on selecting non pfSense theme/css
- (cherry picked from commit 7bb301eb4d99c13784d6753ad3b39b651655b40f)
- 08:58 PM Revision 7bb301eb: WArn user on selecting non pfSense theme/css
-
-
-
-
- 05:44 PM Revision 51247e93: Fix #6173 Refactor NAT Edit src type matching
- 1) Remove a couple of unused calls to is_specialnet()
2) Change srctype_selected() to use a similar scheme to dsttype... - 05:42 PM Revision 73a2d9ce: Merge pull request #2895 from phil-davis/patch-4
- 05:42 PM Revision 047890de: Fix #6173 Refactor NAT Edit src type matching
- 1) Remove a couple of unused calls to is_specialnet()
2) Change srctype_selected() to use a similar scheme to dsttype... -
-
- 04:53 PM Revision 6a817d41: Show insertion point icons only if one or more rules have been selected
- (cherry picked from commit c6a8ddf8135881d6e11bd4f17fe4e5d827eea73d)
- 04:52 PM Revision c6a8ddf8: Show insertion point icons only if one or more rules have been selected
- 04:19 PM Revision 348270c3: ALternative fix for #6092 uses icon to indicate insertion point rather than cell border.
- (cherry picked from commit 995454f305ac46606af0e3a289d98c7519a41498)
- 04:18 PM Revision 995454f3: ALternative fix for #6092 uses icon to indicate insertion point rather than cell border.
-
- Multicast support gets more important as people are switching to IPTV.
For FreeBSD and pfSense there seems to be sup... -
-
- 02:06 PM Revision ed54644b: Updated #6092 as requested
- (cherry picked from commit a7893b72fe9405293ad23d29d03e8985ede796d4)
- 02:04 PM Revision a7893b72: Updated #6092 as requested
-
- Issue number 2786 (https://redmine.pfsense.org/issues/2786) describes an issue where the MTU on the parent interfaces...
-
-
-
-
-
-
- I'm looking into a good repeatable test case for this.
-
- When using pfSense 2.3 with the OpenBGPD package, IPSEC tunnels will drop out and never reconnect again until the ser...
-
- Pierre POMES wrote:
> We had the same issue after upgrading.
>
> As a workaround (we did not notice this redmine ... -
09:48 AM Bug #6220: state mismatch with host-initiated traffic matching binat to IP not locally assigned
- We had the same issue after upgrading.
As a workaround (we did not notice this redmine entry), we replaced binat r... -
-
- Nevermind this was already fixed in the upcoming 2.3.1: https://github.com/pfsense/pfsense/pull/2870
-
- > After upgrading to 2.3 the System>Advanced>Firewall & NAT>Bogon Networks>Update Frequency will not save.
Taken f... -
- Having usb_modeswitch and it's dependencies available in the pfSense default package repo will allow people to use 3g...
-
-
-
-
- Clean up some services menu punctuation.
(cherry picked from commit e78ecb9681106889f94b5c7f7b1dbf7b46f54766) -
-
- Note: This behavior is seen with the 2.3-RELEASE code, and with subsequent changes related to https://redmine.pfsense...
-
- Example:
1) Start with a NAT port forward that has some special source type and destination type - e.g. just for fun... - 09:33 AM Revision 74ac8b7a: Fix #6173 Refactor NAT Edit src type matching
- 1) Remove a couple of unused calls to is_specialnet()
2) Change srctype_selected() to use a similar scheme to dsttype... -
09:07 AM
Bug #6092 (Feedback): (multiple pages): Using the select+click anchor method of changing item order, there is no easy way to move an item to the bottom of the list
- Updated as requested
-
- It does work, though I'd be happier if there were some other visual indicator of where the rule will drop. At least w...
-
- This looks good to me, but want JimP to confirm.
- 08:52 AM Revision 08067906: Fix #6173 Use correct list of special nets
- is_specialnet() was only using a smaller list of "special nets", so when you have a VIP as the selected special desti...
- 08:52 AM Revision 70480719: Merge pull request #2893 from phil-davis/patch-4
- 08:23 AM Revision 6ecf66a9: Switch domain overrides from stub-zone to forward-zone. Ticket #6065
- 08:22 AM Revision 0bde07b7: Switch domain overrides from stub-zone to forward-zone. Ticket #6065
-
07:56 AM Bug #6065: unbound: Domain Overrides are not always working if using stub-zones
- Had a hard time figuring out I had to insert "domain-insure :"domain.local" for a domain I had a Domain Override for ...
-
- ran into a situation with a support customer where forward-zone was necessary. stub-zone can be problematic in a vari...
-
- Clean up some services menu punctuation.
- 06:03 AM Revision 8fd700c5: Fix #6173 Use correct list of special nets
- is_specialnet() was only using a smaller list of "special nets", so when you have a VIP as the selected special desti...
- 05:42 AM Revision 8e53c298: Password isn't required for growl. Ticket #6221
- 05:41 AM Revision 95459439: Password isn't required for growl. Ticket #6221
-
- This is still broken in 2.3 though the exact form of the problem seems to have changed slightly.
See: https://forum.... - 04:40 AM Revision d114f81b: Add validation of address family and protocol combinations. Ticket #6219
- 04:40 AM Revision bf8b6787: Add validation of address family and protocol combinations. Ticket #6219
- 04:29 AM Revision c0358d44: Add validation of address family on IP aliases with CARP parent. Ticket #6218
- 04:29 AM Revision 58b33af6: Add validation of address family on IP aliases with CARP parent. Ticket #6218
-
- M S: Does it just stick there at "obtaining update status"? That makes it seem like the javascript is failing browser...
-
- David Wood wrote:
> The precautionary principle suggests that changing the current behaviour for the vast majority o... -
03:19 AM Bug #5993: dhcp6c not started until an RA received
- Richard Patterson wrote:
> David Wood wrote:
> > Maybe a clearer description is:
> >
> > Do not wait for a RA [ ... -
- works
-
- works
-
- Thanks, that shows the issue.
I thought that private box showed up on comments for everyone, as I know people use... -
01:53 AM Bug #6222: CARP VIP config upgrade problem in gateway groups, GRE and gif
- I cannot find 'Private' box :)...
-
- Grzegorz: could you please post the diff from your config history? Diag>Backup/restore, Config history tab. Choose th...
-
- Problem SOLVED.
After upgrade to 2.3 Gateway Entry at Gateway Groups was changed from GW_Wan1 : 1.1.1.1 (WAN1 CARP... -
- I had worked configuration: 2clusters PeerToPeer 2cluster CARP OpenVPN. Interface: GW GROUP Wan1FailoverWan2.
After ... -
01:30 AM Bug #5317: CSR signed certificates shows issuer as external
- I did some further research with my pfSense boxes. When the external CA is added after the locally generated CSRs are...
-
- works.
-
- looks good
-
- fixed
-
- The growl notification test doesn't work if a password isn't set. One isn't strictly necessary.
-
- fixed
-
- works
-
- looks good on both.
-
- fixed
-
- fixed
-
- works
04/20/2016
-
- fixed
-
- fixed
-
- fix pushed
-
- If only one of source or destination is configured as an IP or subnet, the address family input validation doesn't wo...
-
- confirmed, checked prior to update when disabled, doesn't now. Thanks Phil!
-
- Good user feedback here https://forum.pfsense.org/index.php?topic=110424.msg614994#msg614994
-
- Applied in changeset commit:d3f7004d96c274f117a0264094595c9fbe85b6f7.
-
- Pull request https://github.com/pfsense/pfsense/pull/2890
-
- If "Disable the automatic dashboard auto-update check" is checked in update settings, the code is still doing the che...
-
- fix pushed
-
- There are combinations of protocol and Address Family on diag_packet_capture.php that should trigger input_errors.
... -
-
- fix pushed
-
- It's not possible to configure an IP alias with a CARP parent where one is IPv6 and the other is IPv4. Input validati...
-
-
-
-
-
- Replies to traffic initiated from the host itself, translated by binat, to a target IP that isn't locally assigned on...
-
-
-
- Remove these cron jobs on full install if not using ramdisk.
- 05:54 PM Revision 3d4d00f3: Fix text style
- (cherry picked from commit 0f99071f5d8cc6fe2a8d6c267dae0008ec0f8575)
- 05:54 PM Revision 0f99071f: Fix text style
- 05:52 PM Revision d16798b7: Fixed #6214 by splitting the "Client settings" section into "Client settings" and "Advanced client settings"
- (cherry picked from commit 71f1f25bd3f9b5a1a3a9a6a55b06cbaf7d164bc0)
- 05:51 PM Revision 71f1f25b: Fixed #6214 by splitting the "Client settings" section into "Client settings" and "Advanced client settings"
-
- that's by design, so you can override with floating rules if desired
-
03:44 PM Bug #6217 (Not a Bug): lo0 default pass rules missing quick flag
- ...
-
- that's a bug in something upstream on your network (probably a modem), not in anything we can control. Payload isn't ...
-
03:42 PM Bug #6216 (Not a Bug): Gateway Status detected as down when it is not.
- This has happened with several installs now. I am a user not a programmer but I think I found the problem.
On new ... -
03:19 PM Bug #5993: dhcp6c not started until an RA received
- David Wood wrote:
> *What should the flag be called?*
>
> I dislike the proposed description of the flag in int... -
03:05 PM Feature #6215 (New): Create consistent UI for admin access security
- I have probably filled in this page thousands of times, but every time I have to double check each box to make sure I...
-
- I can confirm that this bug si still present in pfSense 2.3.
-
02:12 PM Revision c045e352: Allow upload of favicon.ico without prefix adding
- (cherry picked from commit 3f3fce19318d1677020adcac742c0bfb5e25f967)
- 02:11 PM Revision 16dc65d5: Merge pull request #2892 from deajan/captive-portal-favicon2
-
-
- sync with upstream
-
- Looks good to me
-
01:00 PM
Bug #6214 (Feedback): vpn_openvpn_server.php: Topology drop-down is not showing for Peer to Peer SSL/TLS
- Applied in changeset commit:71f1f25bd3f9b5a1a3a9a6a55b06cbaf7d164bc0.
-
- The topology option should be present for Peer to Peer SSL/TLS as it does for the Remote Access SSL/TLS options, but ...
- 12:00 PM Revision 23a6f29b: Comment out no longer used function. Remove after next release.
- (cherry picked from commit 69b8328d8596392d9d6049f304dd6da6ecbe1622)
- 11:59 AM Revision 69b8328d: Comment out no longer used function. Remove after next release.
- 11:53 AM Revision af69e4d6: Add checks in case there are dpinger param problems
- in 2.3 installations that were upgraded from 2.2.* when the apinger to
dpinger params conversion code in upgrade_130_... - 11:52 AM Revision 03172507: Merge pull request #2872 from phil-davis/dpinger-params-check
-
11:43 AM Revision fc76a1e3: adding privileges and separating DNS Resolver overrides from general settings
- 11:35 AM Revision 048f29dc: Fix #6212 Really disable checks
- Belts and braces here - I the setTimeout is not done then the other bits of code do not get called anyway, but I took...
- 11:35 AM Revision 64a52d27: Merge pull request #2890 from phil-davis/patch-4
-
- Some punctuation clean up.
(cherry picked from commit 4a75d129df0c6eee2540d885c951e9ae72a0ed5e) - 11:32 AM Revision 61dbbe6f: Merge pull request #2889 from NOYB/Firewall_-_Punctuation_-_Clean_-_Up
- 09:18 AM Revision d3f7004d: Fix #6212 Really disable checks
- Belts and braces here - I the setTimeout is not done then the other bits of code do not get called anyway, but I took...
-
07:48 AM Feature #6213 (New): IPSEC: IPV4/IPV6 dual-interface-stack support for Mobile IKE
- The way how the UI is designed in pfsense-2.3.0, the MobileIke Phase-1 entry can only be bound on a single physical i...
- 07:31 AM Revision 4743ee32: Fix validation of v4 in v6 rules and vice versa. Ticket #6211
- 07:30 AM Revision e5a1ddb5: Fix validation of v4 in v6 rules and vice versa. Ticket #6211
- 07:09 AM Revision 0f2fd77a: Fix selection of dsttype in configs with VIPs defined. Ticket #6173
- 07:08 AM Revision 70854dac: Fix selection of dsttype in configs with VIPs defined. Ticket #6173
-
- Some punctuation clean up.
-
07:03 AM Bug #6200: LACP with em driver does not work with cisco active lacp setup
- The problem is on Gi0/23 and Gi0/24. These are the teamed ports connected to pfSense.
-
- Apr 20 11:58:49.512: %SW_MATM-4-MACFLAP_NOTIF: Host 0015.1735.9462 in vlan 1 is flapping between port Gi0/24 and port...
-
06:59 AM Feature #6210: create user privilege for only DNS Host and Domain Overrides in DNS Resolver
- I submitted a pull request https://github.com/pfsense/pfsense/pull/2891
-
05:23 AM Bug #6205: VLAN tagging in Hyper-V guest not working?
- Update:
Just faced a very weird issue: Whenever I do a reboot from within the VM (# reboot, for example), virtual N... -
- Thanks for getting back Chris.
I've checked all the configuration and everything is fine on the hypervisor and upl... -
- Finally found a way to replicate this. Fix pushed. Just because $config['virtualip']['vip'] is an array in your confi...
-
- Phillip Davis wrote:
> I still cannot reproduce it. I copied all the things in your screen shot (filling in valid IP...
04/19/2016
-
- I still cannot reproduce it. I copied all the things in your screen shot (filling in valid IP addresses where you red...
-
09:59 PM
Bug #6173: /firewall_nat_edit.php: dsttype_selected wrong when edited w/VIPs defined
- I have tested with the same setting you have in you MS-RDP rule, but was not able to reproduce the issue either.
U... -
- Phillip Davis wrote:
> @Jacob can you provide a screenshot of the whole NAT entry that has this problem.
> I have t... -
- @Jacob can you provide a screenshot of the whole NAT entry that has this problem.
I have tried various different NAT... -
- I am experiencing the same issue. My installation is an upgrade from 2.2-Release, installed from the ISO approximate...
-
- The issue raised in this bug should certainly be addressed, but I urge careful review of the commentary in Issue 1 of...
-
- Currently, the only way to allow privilege to add/edit DNS overrides is to allow access to the entire DNS Resolver Op...
-
-
-
-
-
-
06:50 PM Bug #6189: Boot up troubles with ramdisk and alias tables
- NOYB NOYB wrote:
> ky41083 - wrote:
> > NOYB NOYB... "But I don't know how to do create a commit for that from a Wi... -
-
ky41083 - wrote:
> NOYB NOYB... "But I don't know how to do create a commit for that from a Windows environment."... -
- #6184 is basically "fix the mount issue", so it does cover everything here.
-
05:59 PM Bug #6209: nano + dashboard - lag issues in UI
- diag>nano> enable RW all the time. resolved the issue, apparently the first time it was tried, mount was locking the ...
-
- duplicate of #6184
-
- (3:18:35 PM) PiBa-NL: systemwidget seems to call conf_mount_rw() 12 times for a single page refresh..
(3:18:46 PM) P... -
- maybe if mount wasnt grinding away at 100% cpu for half an hour these wouldnt error either.
Crash report begi... -
- doing a ps auxwwf | grep mount take 6-12 seconds to return the following
[2.3-RELEASE][root@x]/root: ps auxwwf | g... -
- changed webui processes from 8 to 2, still having same problem with sys info widget active
-
- i attempted to remove all the widgets, and got some squirrely errors also. apparently that isnt possible?
-
- upgraded from 2.2.5 to 2.3, on a factory install the system slower than all getout, ui lag, network lag, appears that...
-
-
-
- duplicate of #6177
-
- If my WAN connection gets unplugged, or even if the DSL modem loses power or reboots, the pfSense GUI rapidly becomes...
-
03:19 PM
Feature #6199: NAT Disable does not match firewall disable method
- The NAT page(s) have more columns, hence slightly less room for icons. For that reason we don't display a second "dis...
-
09:14 AM Feature #6199: NAT Disable does not match firewall disable method
- On the NAT disable you use a checkbox on the left hand side
For firewall rules it looks like you have both the check... -
03:13 PM
Bug #6203 (Feedback): Error handling username with single quote in Captive Portal SQL Database
-
- And PR has already been merged while I was typing the redmine issue!
-
- PR https://github.com/pfsense/pfsense/pull/2887
-
- Forum: https://forum.pfsense.org/index.php?topic=110243.0
Single quotes in user names need to be escaped as 2 sing... -
-
-
- I pushed the last patch, commit:cb661db and commit:2bde5fb
-
- Better version of the patch after feedback from Renato
-
- Potential patch attached. Works for me here in a test setup, but needs some verification.
-
- I committed some styling changes to the Diagnostics > Edit File and Diagnostics > Command Prompt pages. Let me know i...
-
- Guessing issue is subject. Please report back what you find.
-
- Hi,
after upgrading a virtualized (Hyper-V 2012R2) installation from 2.2.6 to 2.3, I am not able to access anythin... -
01:10 PM
Todo #6095 (Feedback): remove logo from wizard
- Applied in changeset commit:d1ee3405d2cfdfd3ee79743586655a8b999f770e.
-
- Thanks for the reminder Marco. The committed change should effect all wizards on the factory and community images.
-
- Seems sane. What about "debug lacp all" from the switch?
-
- Syslog attached.
-
- Yes, I am currently on 2.3. But this feature has never worked with any prior version I used, i.e. 2.x.x
-
- The original poster has started the forum thread https://forum.pfsense.org/index.php?topic=110326.msg0
The thread ... -
- Thanks Bill
-
- This bug was fixed in Suricata GUI package version 3.0_6 merged on April 18, 2016.
Bill - 12:08 PM Revision ab2f9684: Escape username before use in CP SQL
- A maybe "better" version to try.
(cherry picked from commit 0a02fc5eefb265e0684d4447bf0a7c2a9687a188) - 12:07 PM Revision 62487157: Merge branch 'patch-7' of https://github.com/phil-davis/pfsense
- * 'patch-7' of https://github.com/phil-davis/pfsense:
Escape username before use in CP SQL - 12:03 PM Revision a2c12f5d: Handle single quotes in user names for CP
- Forum: https://forum.pfsense.org/index.php?topic=110243.0
This is a trial - make sure it really works before committi... - 12:02 PM Revision 6104bd1c: Merge pull request #2886 from phil-davis/patch-6
-
12:00 PM Revision 0503e477: Fix trivial GUI typo.
- TRB should be TBR for "Token Bucket Regulator".
(cherry picked from commit e643627c833ce12fa00a682c66929aaad95760eb) - 12:00 PM Revision 513f20f9: Merge pull request #2885 from devnullity/patch-1
- 11:59 AM Revision 0f1332d6: Use English spelling for var name
- For future maintenance it might be easier if this var name is spelled with the usual English spelling.
(cherry picked... - 11:57 AM Revision bd186399: Merge pull request #2882 from phil-davis/patch-4
- 11:56 AM Revision 8d967cb2: Added back GET parameters support (as in pre-2.3)
- In version 2.3 the Traffic Graph page switched from GET to POST parameters to control the graph.
This patch restores ... - 11:56 AM Revision c673d0dd: Merge pull request #2880 from LucaTNT/patch-1
-
- (cherry picked from commit 14a7342391d8606f26168a7dddf2e0beb6a0c20a)
- 11:55 AM Revision 0a02fc5e: Escape username before use in CP SQL
- A maybe "better" version to try.
-
- Don't see the icon adding any value. Consumes space and clutters page. Make consistent with the firewall rules page.
... - 11:54 AM Revision c6494cfe: Merge pull request #2879 from NOYB/Firewall_NAT_-_Remove_Pencil_Icon_From_Aliases
-
- (cherry picked from commit b48f9816cd34bfee40825612a33f16215989a937)
- 11:52 AM Revision a9ba29a5: Merge pull request #2875 from NOYB/Interfaces_-_Punctuation
-
- Just a convinience alias, much like "LAN net", "LAN address", etc.
Primary usecase if for explicitly blocking targ... -
- ...
- 11:23 AM Revision 6fb36cdd: Handle single quotes in user names for CP
- Forum: https://forum.pfsense.org/index.php?topic=110243.0
This is a trial - make sure it really works before committing. -
- This bug is fixed in Snort GUI package version 3.2.9.1_11 that is currently awaiting review and merge of the pull req...
-
- Hi
Apologies if this is doubling up (as I can see various threats on it on the pfSense forum), but Luca Deri who i... -
- TRB should be TBR for "Token Bucket Regulator".
- 02:58 AM Revision c049c15e: Use English spelling for var name
- For future maintenance it might be easier if this var name is spelled with the usual English spelling.
-
12:01 AM Bug #6201: Firewall log filter not filtering correctly
- Ah ok sorry for the confusion and thanks for the quick response
Also available in: Atom