Activity
From 05/24/2016 to 06/22/2016
06/22/2016
-
11:56 PM Bug #6506 (Confirmed): IPv6 static routes omit interface scope of link-local gateways
- confirmed, thanks
-
05:47 PM Bug #6506: IPv6 static routes omit interface scope of link-local gateways
- No, with pushed to the system i mean: When the static route that you've added using the WebUI is getting added to the...
-
- clarified hint
-
- It works as it always has, and as intended. Each box can only contain a single port or range.
I'll clarify the de... -
08:11 AM Bug #6523 (Resolved): Firewall/Aliases/Ports: Unclear description and/or result of desired format
- Current hint is: "Enter as many ports as desired. Port ranges can be expressed by separating with a colon."
Expect... -
- it's workable just fine. You can't have the same subnet on two diff interfaces of any firewall/router. You have some ...
-
06:12 PM Bug #6524 (Not a Bug): 192.168.100.0/24 subnet with Cable Modem WAN un-workable
- So here is the scenario i ran into today.
Customer Subnet is 192.168.100.1/24
Customer WAN IP is 174.77.55.XX6/28... -
06:57 PM Bug #6509 (Resolved): Status monitoring not displaying graphs
- No problem, thanks for checking. Marking as resolved.
-
04:16 AM Bug #6509: Status monitoring not displaying graphs
- Thx, todays snap is OK.
-
04:42 PM Bug #6495: No default route on PPPoE after reconnect or IP change in some cases
- Just to let you know, unfortunately this hasn't solved my issue, and the line is dead again.
-
01:29 PM Bug #6495: No default route on PPPoE after reconnect or IP change in some cases
- Hi Chris,
> I'm not sure what circumstance triggers this, but judging by the number of reports in that thread ther... -
- Yep, it's static in as much as it's supposed not to alter, and is the way that most "static IP" addresses are dished ...
-
- Michael Knowles wrote:
> p.s. - The ADSL i'm using in this instance has a "static IP" delivered from the ISP via DHC... -
- p.s. - The ADSL i'm using in this instance has a "static IP" delivered from the ISP via DHCP (or whatever mechanism i...
-
- Hi,
I'm the author of Bug #6423. This bug sounds remarkably similar to my symptoms.
I'm going to get the onsit... -
02:14 PM Bug #6099: igmpproxy does not recognize upstream interface
- As said my provider is using IGMPv3 which I cannot get to work (so I will stay on 2.2.6 for the time being).
I've ... -
- Greg Myran wrote:
> I want to thank you again for your efforts.
You're welcome,
> I've moved my multicast traffic... -
08:23 AM Bug #6520: Time out when trying to look at interfaces_assign.php
- Here are the logs :
Jun 22 15:21:51 fw2.ds nginx: 2016/06/22 15:21:51 [error] 21284#0: *121 upstream timed out (60: ... -
- Hello,
Since the update in 2.3, I get a time out when trying to reach interfaces_assign.php. Then the whole web inte... -
07:50 AM
Feature #6504: services_dhcp.php: DHCP Static Mappings table should be sortable
- Applied in changeset commit:55f67b5abd9b809807e328477779d97120908273.
-
07:41 AM
Feature #6504 (Feedback): services_dhcp.php: DHCP Static Mappings table should be sortable
- Table is now sortable as requested
-
07:39 AM
Feature #6504 (Assigned): services_dhcp.php: DHCP Static Mappings table should be sortable
-
07:21 AM Bug #6522 (Not a Bug): Mobile IPSec with PSK does not supply option to provide PSK
- With plain PSK auth you enter the Identifiers and keys on the PSK tab and/or in the PSK field on accounts in the user...
-
06:52 AM Bug #6522 (Not a Bug): Mobile IPSec with PSK does not supply option to provide PSK
- When I create the IPsec for the mobile clients, I choose PSK as Phase1 security. However, I cannot select any predefi...
-
- Hi Jim,
You made the right considerations. I'll continue to use the manual option.
Thanks in advance,
--
Mario -
- No, it is not. The option cannot be changed while the disk is mounted. Also, hardware support for TRIM is not univers...
-
- Hi,
It would be possible to add an option to enable TRIM SSD in the GUI instead of via command line? -
06:30 AM
Bug #6516: Calendar date picker on system_usermanager.php only works in Chrome
- Applied in changeset commit:53c38ff16c1eb8743e69d506f69167c88cf34910.
-
06:28 AM
Bug #6516 (Feedback): Calendar date picker on system_usermanager.php only works in Chrome
- HTML5 datepicker replaced with jQuery widget. It seems that Chrome and Opera are the only browsers that implement the...
-
06:23 AM Feature #2358: NAT64 support
- UPVOTE
-
05:28 AM pfSense Packages Bug #6521 (New): pfsense 2.3.1 squidguard -> Groups ACL -> Target Rules List missing...
- The clickable "Target Rules List" field in menu "Groups ACL" disappears if more than 3 "Target categories" are define...
-
02:58 AM Bug #6518 (Closed): IPsec phase 1 VPN not working with IPv6+DNS with "My IP Address" as identifier
- Hi,
I'm running pfSense : ... -
- Dmitriy K wrote:
> This fix wont be pushed in current stable?
Needed to be confirmed in 2.3.2 snapshots first.
... -
- Waldo Nell wrote:
>
> string(10) "10.200.1.1"
> int(16)
that's correct, and exactly what it's checking for the... -
- a firewall isn't a NAS, trying to be one isn't of interest.
06/21/2016
-
- Daniel Hoffend wrote:
> when a static route gets pushed to the system
What do you mean by "pushed to", that via ... -
- It's probably similar to this: https://forum.pfsense.org/index.php?topic=112358.0.
It could be replaced with the ... -
- The calendar date picker on system_usermanager.php doesn't show up in any browser other than Chrome from the looks of...
-
-
- Tomas Ulicky wrote:
>
> Why deleted target version?
Duplicate closed tickets need that removed so it doesn't me... -
- works
-
- Applied in changeset commit:a08208f81bcb2812bdda07e21b501447fb350408.
-
- In some cases, a process can crash and the resulting core file fills /var/run/ if that was the working directory for ...
-
- works
-
05:00 PM
Bug #6514 (Feedback): services_captiveportal_zones_edit.php: Zone name cannot start with a number
- Applied in changeset commit:f0a053846d6cde2724c47b5553e1395cfd21445c.
-
- The zone name on services_captiveportal_zones_edit.php is used as an XML tag name and needs to follow the relevant st...
-
- It's likely not one NIC driver that's in question, as there definitely aren't any issues with e1000, and probably not...
-
04:30 PM Bug #6512: Upgrade to 2.3.1 causes network performance degradation (with High CPU usage by NIC kernel tasks)
- And perhaps this post has the same problem
https://forum.pfsense.org/index.php?topic=113529.0
-
- Obviously there's a performance regression. It may have to do with our hardware, but:
# This wasnt present on previ... -
- that's something to do with your combination of hardware, which isn't anything we support. There aren't any general p...
-
- Hi,
Currently we have a 2-node pfsense system working in active/passive HA. This cluster was running pfsense v2.2.... -
- strongswan doesn't pick up the new leftsubnet config (though it's correctly shown in statusall) when doing a reload. ...
-
10:06 PM Bug #6517 (Confirmed): Adding mobile IPsec phase 2 entries requires restart of strongswan
- Using mobile IPsec on 2.3.1-RELEASE-p1 and using OS X 10.11.4 on the client side, I find that when I add additional P...
-
- works
-
01:40 PM
Bug #6498: firewall_nat_npt_edit.php: IPv4 addresses can be entered, but the page is only for IPv6
- Applied in changeset commit:3e4adb7139b4cddbb06a2aba7e0727d1762b35ee.
-
01:28 PM
Bug #6498 (Feedback): firewall_nat_npt_edit.php: IPv4 addresses can be entered, but the page is only for IPv6
- A new optional argument is supported for inputs of type IpAddress. $type can be "BOTH", "V4" or "V6" and will enforce...
-
10:24 AM
Bug #6498 (Assigned): firewall_nat_npt_edit.php: IPv4 addresses can be entered, but the page is only for IPv6
-
- I'm not sure what circumstance triggers this, but judging by the number of reports in that thread there is something....
-
- fix pushed. Confirmed that still does all the necessary actions, and eliminates the delays by not doing the same thin...
-
- link_interface_to_vips when called with the update parameter calls interfaces_vips_configure once per VIP on the inte...
-
06:28 PM pfSense Packages Bug #6511: In some circumstances the HAProxy clone front-end button can add blank list entries to the front end being cloned resulting in a config that cannot be applied.
- It's not just that - the clone/duplicate/whatnot button is borked in general. E.g., when you "duplicate" an ACL, the ...
-
01:26 PM pfSense Packages Bug #6511 (Resolved): In some circumstances the HAProxy clone front-end button can add blank list entries to the front end being cloned resulting in a config that cannot be applied.
- 1. The blank entries shouldn't be created.
2. The blank entries should be ignored on the backend.
See: RPL-94792 -
- Thanks for taking the time to make a detailed report!
It looks like I was able to fix both issues and just pushed ... -
- Hi!
On latest snaps monitoring is not displaying graphs correctly when both axes are selected.
See attached scree... -
- fix pushed
-
- IKE mode auto omits aggressive from ipsec.conf, leaving it always disabled
-
03:32 AM pfSense Packages Feature #6508 (Closed): OSPF v3 - Quagga OSPF6d
- Hi,
Can you implement, in a future release, the OSPFv3 for IPv6?
In advance tank you -
01:42 AM Bug #6496: Squid HTTPS Certificed enable Unable to determine IP address from host name http
- Chris Buechler wrote:
> pretty sure that's a config issue, not a bug.
So what is the solution of this
I think it... -
01:29 AM Bug #3022: OpenVPN does not failover to the 2nd configured LDAP auth.server
- Facing the same issue.
Currently we have 2 entries for 'Backend for authentication' selected (Active Directory domai...
06/20/2016
-
- My test setup contains 2 gre tunnels, but to reproduce the issue 1 gre tunnel is sufficient.
*Tunnel1*
* Local ... -
- *Setup*
The WAN Interface of my pfsense firewall is connected to our homenetwork. The "real" wan connection (dsl r... -
05:37 PM Bug #4479: Firewall rules won't match GRE interface after applying IPSEC transport encryption on GRE tunnel
- I can confirm this still happens with both GRE and GIF tunnels over IPsec on pfSense 2.3.1
-
- With redunced Gateway name (max 5 chars) I could make the dpinger work and start properly. I even can see the icmp6 r...
-
- The combination of gateway name + link-local dhcp6 address + vlan interface name create a very long socket name. In m...
-
05:02 PM Bug #6099: igmpproxy does not recognize upstream interface
- I want to thank you again for your efforts. I've moved my multicast traffic onto it's own physical interface on my P...
-
- Greg Myran wrote:
> [...] I am now starting to suspect the new method of finding network interfaces may see the addi... -
- When getting an address assigned from a DHCPv6 Server pfSense automatically creates a gateway to monitor using the li...
-
- Currently the `DHCP Static Mappings table` inside `Services->DHCP Server` isn't sortable where it should be.
Aside... -
02:04 PM Feature #4606: PKI : CA signing external CSR
- +1 for this feature -- it's pretty much essential for implementing PKI across an infrastructure.
So I wanted to en... -
- I'd like to request to reopen this issue.
IMHO it's not semantic to use different hostnames for the same host. A h... -
08:15 AM Bug #6503 (Resolved): rrd graph for ntp monitoring does not reflect freq when neg (-) value.
- Seems when frequency is negative (-) It is not graphed.
Thread here asking for confirmation
https://forum.pfsense... -
- Hi Chris,
> followed up in your forum thread.
In the past weekend i made more test with different ISP: i live i...
06/19/2016
-
04:33 PM pfSense Packages Feature #6502 (Closed): Add samba in the available packages
- Hello
I don't know if I'm writing this in the right place if not then I apologise.
My request is that add in the av... -
03:01 PM Todo #6501: Tightening up subnet expansion
- 4. Is IPv6 catered for by its own functionality, if not does this need an IPv6 equivalent and what would that look li...
-
- A couple of days ago I put a PRE into Github to remove the subnet_expand() function. It isn't used anywhere in the co...
-
12:42 PM Bug #6394: INCORRECT OUTPUT OF TRANSLATION
- This PR should fix the issue:
https://github.com/pfsense/pfsense/pull/3011
Apparently gettext() does not behave c... -
- I did some more troubleshooting and here are some additional details.
If I start igmpproxy with IPv6 disabled, the... -
04:48 AM Feature #6365: Current images do not install on UEFI Machines
- Chris Buechler wrote:
> duplicate of #4044
Why deleted target version? -
01:48 AM Bug #6499: pf fragment states not purged
- This fix wont be pushed in current stable?
06/18/2016
-
- I understand igmpproxy only supports IPv4 / IGMP. In both cases above the STB is IPv4 only and speaks IGMPv2. The ...
-
- It is not supposed to work! igmpproxy supports only IPv4 / IGMP.
Regarding multicast IGMP is for "pure" IPv4, MLD ... -
- Victor Toni wrote:
> Could you please give it one more try to avoid regressions?
This latest version has been wor...
06/17/2016
-
- Data point: I'm seeing similar behaviour with daytime-dgram on 2.3.1-p1.
Why bring this up in 2016? Well, we need ... -
05:34 PM Feature #6500 (New): Should be a way to determine which packages are available without having to update/install
- Since one or more packages are often a "show-stopper" requirement for pfSense users, there should be a way to authori...
-
05:06 PM Bug #6476: Editing an IPSec phase 2 entry fails
- Chris Buechler wrote:
> go to Diag>Command, in PHP Commands box, paste in:
>
> [...]
>
> and hit Execute, wha... -
- fix pushed
-
- pf_purge_expired_fragments doesn't purge, leaving users with "PF frag entries limit reached" where fragmentation is c...
-
- pretty sure that's a config issue, not a bug.
-
- Squid HTTPS filitering enable and problem
The following error was encountered while trying to retrieve the URL: ... -
- followed up in your forum thread.
-
- Mario Lener wrote:
> Hi, i found a strange error from release 2.3 on default route on PPPoE interface. I write a pos... -
- Hi, i found a strange error from release 2.3 on default route on PPPoE interface. I write a post with print screen in...
-
02:10 PM pfSense Packages Bug #6182: HAProxy not supporting ALPN
- Right - openssl is now 1.0.1s where it is 1.0.2c on 2.2.6.
Openssl was downgraded at https://redmine.pfsense.org/p... -
10:46 AM Bug #6466: Host overrides do not appear to work with DNS Resolver in forwarding mode
- I'm having a similar issue. I just upgraded from a 2.2.x revision and have been unable to get the resolver to work. I...
-
- Both "Address" fields on firewall_nat_npt.php allow entry of IPv4 addresses, but they should be restricted to only IP...
-
10:18 AM pfSense Packages Bug #6497 (Closed): Squid3 web GUI page not saving settings for users in custom system privileged groups in v 2.2.2
- In v 2.2.2, if a web UI administrator is in a custom user group that has a subset of system privileges including the ...
-
06:14 AM Bug #6110: Default gateway switching not always working with PPP
- +1 for me on this issue.
Related to https://redmine.pfsense.org/issues/5090 I think
Multiple posts on this here:... -
- @Victor Toni
I'm not quite sure if this might be relevant. But it seems like there is a repository at Github attempt... -
03:43 AM Bug #6493: Dynamic DNS clients slow page load
- Configurable check ip service solution to this can be found here.
https://github.com/pfsense/pfsense/pull/3008
Su...
06/16/2016
-
- you're doing something far more atypical than having a site to site VPN. GUI windows in the browser being left open c...
-
04:54 PM Bug #6494: Hang during bootup on lock('filter.lock')
- The only thing I can think of that's unusual about this install is that it starts a site-site vpn client, which takes...
-
- Notice too that filterlog re-spawns on its own after having been killed.
-
- I haven't figured out yet why two php-fpm processes hold filter.lock open during the bootup. I wonder if it has som...
-
- Just happened again on a clean install of 2.3.1-p5
It deadlocks HARD on lock('filter.lock'). 100% of the time, to... -
- there's no magic about whether the lock file exists, its presence isn't a lock on its own. It's never deleted, outsid...
-
- Hang during bootup 3 of 5 tries on lock('filter.lock')
Why does filterlog hold /tmp/filter.lock open for writing?
... -
04:28 PM Bug #6422: PHP Fatal error: Call to undefined function gettext() in /etc/inc/rrd.inc on line 60
- I've also just come across this error.
*Call to undefined function gettext() in /etc/inc/rrd.inc on line 60*
S... -
12:47 AM Bug #6364: PHP Fatal error: Allowed memory size of 268435456 bytes exhausted (tried to allocate 32 bytes) in /usr/local/www/status_carp.php on line 261
- Hello,
Any ETA?
06/15/2016
-
-
Hard coded my service https://url... along with curl auth into services.inc and it works. Much faster too. Would... -
- yeah they don't reply to the first SYN (guessing the service is under near-constant DDoS, it's been that way for some...
-
-
Did some network sniffing and their is sporadic TCP retransmissions of the initial SYN to the various checkup.dynd... -
- Dynamic DNS RFC 2136 Clients page is slow to load with entries for interfaces that have private address and the optio...
-
08:06 PM Bug #6429: DHCP: makeing dynamic entry static does not work
- After rebooting it works.
I add an other Nexus 5X to static and it worked as expected.
I don't know why a reboot wa... -
- Remember I did restart DHCP without success....
-
- > delete the lease from the pool if you don't want it to appear in the list immediately, otherwise it'll go away on i...
-
- Is it normal to have a lot of such old entries:...
-
- I changed it 15 days ago and I still get the wrong IP.
If I do this with Windows dhcp and disable and enable WLAN I ... -
- works fine. ...
-
06:23 PM pfSense Packages Bug #6492 (Resolved): Syslog-ng configuration file warning is treated as syntax error
- The syslog-ng package is warning about an old configuration file format. Pfsense is interpreting any warning message ...
-
- fix pushed
-
- NOYB NOYB wrote:
> Umm, no it wasn't. Not sure where feedback was coming from that said it was fixed. But it is no... -
- Greg Myran wrote:
>
> IGMPv2 working for me with this latest version. Thanks for all your time and effort Victor ... -
- go to Diag>Command, in PHP Commands box, paste in: ...
-
- Chris Buechler wrote:
> Either get_interface_ip or get_interface_subnet has to return empty for that to happen. The ... -
- Chris Buechler wrote:
> guessing your LAN is set to IPv4 "none"?
Yes - IPv4 and no IPv6.
-
- you changed something that broke the libraries
-
- wasn't overlap because the interface assignment process isn't user-initiated in that case. Fixed to have that unset b...
-
- that is indeed the case. Appears it just doesn't work in dhcpd unless I'm missing something. Config is correct, and t...
-
-
- Adrien Carlyle wrote:
> Is there any way to manually correct this?
Edit the <menu> tag(s) out of the config manua... -
02:14 PM Bug #6055: Menu items may remain from packages no longer installed
- Is there any way to manually correct this?
-
-
- nothing to go on here and no such issues reported. Please post to the forum with specifics
-
- this was fixed in a later 2.3x release
-
- duplicate of #6055
-
- I believe this is the result of upgrading when packages are not available for a new version.
I am on 2.3.1-releas... -
- I too need this feature and the platform is unuseable for reliable VoIP traffic with failover without it.
I have co... -
- *Also* if you Kill the 2 States for each VoIP phone in the Diagnostics > States section, they re-appear straight away...
-
- Hi Chris
I note your previous comment. However, how would the state killing feature work? I don't fully understand... -
11:16 AM Feature #855: Ability to selectively kill states on gateway recovery
- This would be especially useful for VOIP, where there are often frequent registrations or other SIP traffic that keep...
-
- Julien REVERT wrote:
> Is it still plan to have "states killing" on gateway failback?
>
> I have the issue that U... -
04:10 AM Bug #6488: HAProxy looses CARP VIPs
- Thanks, updated node1 and now it is working again
-
02:57 AM Bug #6383: Manual Update via WebGUI not working in 2.3.x
- ...is there a chance for getting this back in any way?
My problem is that I'm forced to keep some FWs in highly se... -
01:43 AM pfSense Packages Bug #6484: pfsense 2.3.1_1 does not accept haproxy advanced parameters
- Thank You.
06/14/2016
-
- Chris Buechler wrote:
> last of that fixed in
> https://github.com/pfsense/FreeBSD-ports/commit/6555d100423fc7b913f... -
- last of that fixed in
https://github.com/pfsense/FreeBSD-ports/commit/6555d100423fc7b913ff3976feba5c756fbb0251
-
- this definitely looks to have been fixed in 2.3.1 with the validation of config.cache
-
- this package has been deprecated
-
-
- this package has been deprecated
-
-
- fixed with >=2.3
-
- if someone would like to submit a pull request we can add it
-
- duplicate of #1337
-
-
-
- duplicate of #1337
-
- duplicate of #628
-
- it's user-configurable, and nano's on the way out
-
-
- if someone would like to submit a PR, we can add those and others
-
- been done for a while now.
-
-
-
- stub-zone was changed to forward-zone in 2.3
-
- added some time ago
-
- not a good idea
-
-
-
- duplicate of #4044
-
-
- not sure this is still an issue. if it is and anyone cares, report upstream to FreeBSD.
-
- available on 2.3.1+
-
- this package has been deprecated
-
- this package has been deprecated
-
- done some time ago
-
- not desirable, it's correct as-is.
-
- this package has been deprecated
-
- this package has been deprecated
-
- this package has been deprecated
-
- package has been removed
-
- appears to be a config problem
-
- package has been removed
-
- package has been removed
-
-
- package has been removed
-
- the packages in question have all been removed.
-
- merged several weeks ago
-
- this has been merged
-
- redistribution of TeamSpeak is not permitted, so we can't offer it as a package.
-
- BIND package has been back for a bit.
-
- this package has been deprecated
-
- this package has been deprecated
-
- our stunnel package has been deprecated
-
- fixed
-
- fixed
-
- Denny Page tracked down the source of this issue and opened this FreeBSD PR with a patch.
https://bugs.freebsd.or... -
- Either get_interface_ip or get_interface_subnet has to return empty for that to happen. The only way either of those ...
-
12:41 PM pfSense Packages Bug #6490 (Rejected): Squid Reverse Proxy: Disabling an entry on the "Redirects" tab creates duplicate entries for the previous entry in the squid config
- If you disable an redirect entry by disabling the "If checked, then this redirect will be available for reverse confi...
-
- Xander Venterus wrote:
> Confirming this has happenned again on my unit, and this time without any attacks having hi... -
- Deleting an entry on page "Package / Reverse Proxy Server: Redirects / Redirects" does not affect the running squid c...
-
- Greg M wrote:
>
> Not true.
> This is NOT working, you have to add *push "route-ipv6 2000::/3";* to get it workin... -
- Chris Buechler wrote:
> You can just add a 'push "redirect-gateway-ipv6 def1"' to the server's advanced options to a... -
- you're breaking your VIPs by config syncing between incompatible versions.
-
- Hi,
the second node of my pfsense HA-Cluster looses the VIPs in the HAProxy-Frontend config. I'm unable to add the... -
- >
> This version should work with IGMPv2 (which I cannot test myself because I am on IGMPv3).
> IGMPv3 is not expe... -
- There were some issue with the logging on startup in some corner cases. Hopefully these are fixed in:
https://github... -
- This is a configuration issue, not a bug. If your client protocol does not work properly, it's probably not speaking ...
-
07:35 AM pfSense Packages Bug #6486: Squid fails in transparent proxy mode
- I reread the forum articles about this bug. The general consensus was that Squid has been broken in the past. My beli...
-
04:32 AM Bug #6422: PHP Fatal error: Call to undefined function gettext() in /etc/inc/rrd.inc on line 60
- Hey Chris,
We've faced this issue as well.
We upgraded to 2.3.1 and we're seeing this error in menu:... -
03:26 AM Bug #6422: PHP Fatal error: Call to undefined function gettext() in /etc/inc/rrd.inc on line 60
- Hey Chris, I am running two R330 Dell server, bare metal. Anyway, I reinstalled the setup and for now I'm not seeing ...
-
- Thanks chris for pointing me on this!
I placed a little helper script that sends the program to the background:
<... -
03:41 AM Bug #6487: PfSense crashes during boot at configuring LAGG interfacess
- Kilian H wrote:
> Chris Buechler wrote:
> > subject certainly isn't true in any general sense. How is the lagg conf... -
- Chris Buechler wrote:
> subject certainly isn't true in any general sense. How is the lagg configured? How many are ...
06/13/2016
-
- this was fixed in an earlier 2.3x version.
-
- fixed
-
- haven't seen any reports of this in >=2.3. The root cause is an issue in unbound itself, and several potential segfau...
-
- no longer the case in >= 2.3.
-
-
- duplicate of #2234
-
- no other reports of same, it's likely along the lines of any number of other reports of same issue with OpenVPN itsel...
-
- several confirmations this isn't an issue in >=2.3.
-
- not an issue in >=2.3
-
- are you running in Hyper-V or Azure by chance? That's the only place I've seen that, which occurs because it ends up ...
-
- Appears to be fixed. Thanks.
-
- fixed here: https://github.com/pfsense/FreeBSD-ports/commit/364a0ddf7034f0b22681bbe3b82e0838c4d33a4e
-
- subject certainly isn't true in any general sense. How is the lagg configured? How many are there? What are the membe...
-
- PfSense crashes during boot at configuring LAGG interfacess. It stays for a few second there, then it just resets the...
-
- that is correct, though it should be protocol-specific. something to be addressed as part of #6483, added note there.
-
08:17 AM Bug #6482: OpenVPN Redirect Gateway Option Causes GUI Issue
- Yes, I'm using tun and Remote Access (SSL/TLS + User Auth).
It also appears that the redirect gateway option doesn... -
07:14 AM Bug #6482: OpenVPN Redirect Gateway Option Causes GUI Issue
- I think it is right that the Local Network(s) boxes should be hidden.
From what I can see, the Local Network(s) boxe... -
- also should fix the show/hide of "remote networks" fields accordingly while doing this, so only v4 shows/hides with t...
-
- the existing option only adds the redirect-gateway def1, for IPv6 OpenVPN needs redirect-gateway-ipv6. That ought to ...
-
- If I add something like push "route-ipv6 2000::/3"; to my custom options it will get IPv6 to work though the tunnel, ...
-
- what you did prevented the system from completing bootup, and while the system is booting, it doesn't (and shouldn't)...
-
- Hi Chris,
I found the bug.
It's not directly Pfsense related, it happens when I start the 3rd party binary... -
- Yeah, it just does not belong there at all; put the stuff to "Advanced pass thru".
-
- Not enough information here about what are you putting where; the entire generated configuration is available under t...
-
- Hi!
pfsense 2.3.1_1 does not accept haproxy advanced parameters. I can use redirect in version 2.2.6-RELEASE.
(... -
- Confirmed still in 2.3_1. Use of ip alias in address field of virtual server cause " causes status "Unknown - relay...
-
- fixed here: https://github.com/pfsense/FreeBSD-ports/commit/e812a02a75518ec046d2b7f7606ae83fee7f6e65
-
-
- Not a bug. Post on the forum for help with your configuration.
-
- Squid 0.4.18 offers transparent proxy capability under 2.3.1-RELEASE-p1 (latest version) by checking a box - Enable t...
-
10:05 AM Bug #6099: igmpproxy does not recognize upstream interface
- Hello,
I tested the Version from ViToni that Stefan Heck posted in the ZIP.
And for me with old Telekom infrastru... -
08:11 AM pfSense Packages Bug #6485 (Rejected): Squid garbage collection is a blocking thread and stops all network traffic
- Squid garbage collection is a blocking thread and stops all network traffic when using ram cache.
https://forum.pf... -
02:09 AM Bug #4218: Bridge does not have AUTO_LINKLOCAL flag
- I have the same problem, i can't get IPv6 working (using 2.3.1-RELEASE-p1).
Can you please fix that?
06/12/2016
-
- When the OpenVPN Redirect Gateway (Force all client generated traffic through the tunnel) option is checked for an Op...
-
- When editing the settings for an OpenVPN server and checking off the Redirect Gateway (Force all client generated tra...
-
11:00 AM pfSense Packages Bug #6449: Email Reports not wait a long command end to send the report.
- hi guys ,
any questions or anything I can do to help solve this bug? -
06/11/2016
-
04:43 PM Bug #6481 (New): loading EAP_RADIUS method failed
- pfSense 2.3.1-RELEASE (i386)
Enabled EAP-MSCHAPv2 per https://doc.pfsense.org/index.php/IKEv2_with_EAP-MSCHAPv2, g... -
- Supposedly this exists, per https://doc.pfsense.org/index.php/IKEv2_with_EAP-RADIUS, but I'm not 100% convinced that ...
-
02:59 PM pfSense Packages Feature #6480: pfBlockerNG - add ability to force download of a list
- OK, got it. I don't think I would have found it had you not pointed me to it - but that's what I was looking for, th...
-
02:46 PM pfSense Packages Feature #6480: pfBlockerNG - add ability to force download of a list
- Goto the "Log Browser" Tab and view the Feed in the "Deny" folder... There is a delete Icon there...
-
- At the moment, there's no way through the GUI to force a re-download of a particular list. The only way to do it is ...
-
- guessing your LAN is set to IPv4 "none"?
06/10/2016
-
- thanks for the feedback
-
- Blew away all GIF and interface configuration, re-configured on both of the affected firewalls. One now works, one s...
-
- Since 2.3-RELEASE, LADVD no longer crashes, but results on i386 are still inconsistent - one firewall sees the switch...
-
06:40 PM pfSense Packages Todo #6443: Add ntopng package back into pfSense 2.3.x
- I submitted a pull request to add GeoIP as a dependency of ntopng:
https://github.com/pfsense/FreeBSD-ports/pull/1... -
- There is a missing dependency on GeoIP-1.6.9.
I tried to restart the service, which failed.
Then logged in and tr... -
- Ah, I see. By "overlapping", I meant that igb0 had VLANs defined directly on it, *and* it was part of an LACP group ...
-
01:16 PM Bug #4637 (Assigned): system unreachable after deleting VLAN
- No problem, I'll keep the bug report open and check if we can reproduce it here.
I was misguided by 'Two overlappi... -
- Luiz,
You've misunderstood the problem, and it is definitely a bug.
I don't have the lab equipment or time to rep... -
- Confirming this has happenned again on my unit, and this time without any attacks having hit us, i just had to restar...
-
- Chris Buechler wrote:
> almost certainly not a bug. where no traffic, probably set to an IP other than what is corre... -
- almost certainly not a bug. where no traffic, probably set to an IP other than what is correct
-
- I noticed that my backup node is out of XML sync although it's activated on master.
State sync is working fine.
T... -
12:01 PM pfSense Packages Feature #6479 (Rejected): Add OpenBGPD config to High Availability Sync option to sync
- I believe this functionality would be very intersting in a high avaliabity environment.
-
- not a replicable problem outside problems writing to disk in general
-
08:06 AM Feature #855: Ability to selectively kill states on gateway recovery
- Is it still plan to have "states killing" on gateway failback?
I have the issue that UDP connections of ip phones ... -
- Goddammit, no, the rebuild of VMware wasn't the problem, as it's just gone down AGAIN.
Strangely enough, the RADIU... -
-
Feedback:
Time period is 1 resolution too long.
Using larger (later) of left/right updated, instead of sma...
06/09/2016
-
- all looks good now
-
- Additional commits address the other uses of commands in auth.inc mentioned above (and some others). I also added inp...
-
- I pushed some input validation which prevents the reported vector but the backend code needs some more work. The foll...
-
- The members[] array in system_groupmanager.php is not properly validated, and is only protected by single quotes in a...
-
- works
-
10:15 PM Bug #6442: DNS Resolver - error
- Hi Chris,
Chris Buechler wrote:
> Rene: you running in Azure or Hyper-V by chance?
I run pfSense on a VMware 5... -
- I can make this happen in Azure reliably because it fails to write files in some circumstance(s). It might also be an...
-
- works
-
- I think there's overlap here with something I already fixed in a diff ticket but will verify.
-
- Applied in changeset commit:a9dafcba7543ee455bc3999f655010d9e2aa35ed.
-
- PR merged, thanks Phil
-
- I actually visited site today to deal with pfSense. I have a couple of interesting observations and did get partway ...
-
- no apparent issues here, awaiting feedback from OP
-
- I created a new ticket for the issues with the custom time period since they will require a little more tweaking than...
-
- something similar to that PR was merged
-
04:15 PM pfSense Packages Bug #6305: Quagga problems updating routes / mistakenly showing "kernel"-routes while they are not
- seems like someone has found a way to reproduce consistenly. (this is currently not verified by others)
https://fo... -
- Due to the way rrd_fetch tries to find the best fit for a time period, the custom time period can move around slightl...
-
- Thanks for working on this, It's good to have ntopng back.
I didn't have any install issues (though it looks from... -
02:49 PM pfSense Packages Todo #6443: Add ntopng package back into pfSense 2.3.x
- deleted
/usr/local/share/ntopng
that fixed install -
12:30 PM pfSense Packages Todo #6443: Add ntopng package back into pfSense 2.3.x
- Kill Bill wrote:
> Rich Murphey wrote:
> Every case of this I've seen on the 2.2.x ntopng package was a password m... -
- Rich Murphey wrote:
> After setting the password via the ntopng settings page in the pfsense UI, the ntopng admin pa... -
- Priority can be changed to medium
-
- I just set up an IPSec site to site bridge between two pfSense machines. It worked perfectly. However, editing the ...
-
- It appears to be fixed. I could exploit it before, but not after.
-
- To me for confirmation that it's fixed
-
- Command injection is possible using the id parameter on pkg_mgr_install.php...
-
- Adam Thompson wrote:
> If you have definite, concrete knowledge of 32-bit systems that had HE tunnels up and working... -
- This depends on p7zip version vulnerable to heap-buffer-overflow (CVE-2016-2334) and out-of-bounds read (CVE-2016-233...
-
- oh, for LAN. Every additional interface defaults to "none", which is most appropriate. Yeah #6457 will address the re...
06/08/2016
-
10:53 PM Feature #6457: Allow ability to configure AWS EC2 AMI via userdata
- Thinking through this, it may be easier to supply a userdata dictionary who's value is an S3 object that is a recorde...
-
- I believe that that was the case. I think that when I manually created the LAN interface, the addressing method was ...
-
- Danny Schuh wrote:
> Actually, I had skipped the initial setup wizard.
Then your WAN would be DHCP, that's the o... -
- Actually, I had skipped the initial setup wizard. I'm looking to eventually deploy this AMI w/o user interaction.
-
- Applied in changeset commit:d4d8f29373f8d7396dfd0d1ead8b50cb713b1208.
-
- merged, thanks!
-
03:19 AM Bug #6463: Firewall > NAT, Outbound Network destination field incorrectly displays port aliases
- Pre-Feedback feedback. Phil's fix seems to work for me. Thanks.
-
- that PR seems fine to merge. Luiz, please review and merge if agreed.
-
-
- It never has. Rule doesn't do anything since there's no matching NAT. I thought there was already a ticket for this, ...
-
- As per subject. Worked just fine with 2.2.x.
NAT:
!http://image.prntscr.com/image/d5f3d6fc93424ef69b9dff46be019ba... -
- Applied in changeset commit:f4ede22769baab85577ff95da98f544d1b67a9f1.
-
- PR merged, thanks!
-
05:31 PM Bug #4326: Limiters on firewall rules where NAT applies drop all traffic
- For me is that bug a big problem.
The traffic shaping feature was one decision to use pfsense.
I baught a XG-1540 w... -
- The clickable "Target Rules List" field in menu "common ACL" disappears if more than 7 "Target categories" are defined.
-
- I would be interested in assisting with the development of a super simple cloudflare integration module.
It would ... -
- fixed
-
10:45 AM Bug #6467: DNS Resolver in forwarder mode should automatically disable DNSSEC
- You are right Chris. OpenDNS are the upstream servers and they do not support DNSSEC, but Google DNS servers do. It...
-
09:30 AM pfSense Packages Feature #6462 (Feedback): Add the php-pgsql module to the pfSense repo.
- Applied in changeset pfsense:commit:4a374da4778f8d94bca07f19cdc37d40208833b9.
-
- install fails on 2.3.2a here is log
\>>> Installing pfSense-pkg-ntopng...
Updating pfSense-core repository catalo... -
- This is the expected behaviour for overlapping networks.
When you remove the IP from NIC/VLAN (this is not specifi... -
03:28 AM pfSense Packages Bug #6456: vm-bhyve not correctly detecting the modules in kernel
- This was fixed in vm-bhyve v0.12.3.
(https://github.com/churchers/vm-bhyve/commit/a74ef7e04a5fa5ce256fe2f213dec6f5... -
01:40 AM pfSense Packages Feature #6436: Add Stunnel binaries to the pfSense repository
- Latest package is in:
http://pkg.freebsd.org/freebsd:10:x86:64/latest/All/stunnel-5.31,1.txz
06/07/2016
-
-
- Pull request https://github.com/pfsense/pfsense/pull/2996
-
- Reported in the forum https://forum.pfsense.org/index.php?topic=113172.0
When restoring a configuration and the inte... -
-
- This is a genuine little bonus bug. Thanks for reporting.
Pull request https://github.com/pfsense/pfsense/pull/2998 -
- Sorry. Search fail. This is very similar to https://redmine.pfsense.org/issues/6287. This is still showing port alias...
-
- Create an outbound NAT rule with a source and destination network and save.
Re-edit the rule.
Type in the desti... -
-
07:44 AM Bug #6461 (Duplicate): firewall rules lose limiter association when limiter renamed
- this issue has been there since many older pfsense versions where suppose if u have some floating rules which had lim...
-
- I presume updated subject is what you're referring to, as it does default to DHCP. It ought to not prompt users in th...
-
- thanks for the follow up
-
11:06 PM
Bug #6465: No 'Apply Chnges' button in 2.3.1_1
- Experimented a bit and it seemed that for whatever reason I had a problem with uBlock origin. Apparently uBlock block...
-
- not seeing that here on Firefox on Windows or Linux, nor has anyone else reported same. At least hundreds and likely ...
-
02:16 PM
Bug #6465 (Not a Bug): No 'Apply Chnges' button in 2.3.1_1
- After upgrade to pfsense 2.3.1_p suddenly 'Apple Changes' button disappears in Firefox 46 and 47. Everything works gr...
-
- Strange - just did a test to override ca.yahoo.com to point to my local server and it is working. Now testing SafeSe...
-
- Shows the configured host override section. I have resolver disabled right now, but it was definitely checked and DN...
-
- Sorry - I should have been more clear: yes I put the overrides under the proper section under DNS Resolver. I have t...
-
- I have thought about putting a button to copy all overrides from Forwarder into Resolver (and vice-versa). It is part...
-
- What Phil said is exactly what I was writing when he posted it. Forwarder's overrides are for it only, Resolver's for...
-
- Did you put the host overrides into the DNS Resolver section?
Resolver won't use the Host Overrides from the DNS F... -
- I am using 2.3.1-RELEASE-p1 on SG-2440.
-
- I have a dedicated pfSense VM setup as a DNS server with packet filtering disabled and only one NIC, and I'm trying t...
-
- Thoughts on this:
# Expand the "help" function:
> help - _brief_ help and lists the options below
>
> help she... -
- It was never intended that users should be able to edit the day and time range in each of the rows of a schedule. If ...
-
- For example, it will accept 06:00-52:00. See screenshot
-
- only if your forwarding servers don't support DNSSEC. It isn't required and wouldn't be appropriate to automatically ...
-
- DNS Resolver configured in forwarding mode needs DNSSEC disabled to work correctly. Perhaps selecting forwarder chec...
-
- I've installed snapshot 2.3.2.a.20160606.1543, and ntopng via the web UI package manager.
I see only one possible ... -
- Hi Renato. Many thanks for adding it back. I suspect the answer may be no, but is there any way to run the package ...
-
- I've added it back to 2.3.2 snapshots, that can be downloaded at https://snapshots.pfsense.org
Note that it was no... -
- This should be fixed in PR141 https://github.com/pfsense/FreeBSD-ports/pull/141
-
01:03 PM Bug #4326: Limiters on firewall rules where NAT applies drop all traffic
- +1 I have dozens of 2.1.5 boxes because of this critical bug.
Crossed my fingers but seems 2.3 still not productio... -
- merged PR 137 for the fix. Thanks Justin Rittenhouse and NOYB!
-
- The X axis ticks don't respond to resolution for custom time periods. Possible fix to is to use the resolution that i...
-
- The php-pgsql module was previously installable in 2.2.X and earlier and some users are using it in custom captive po...
-
04:50 AM Bug #6167: IPsec IPComp not working
- Chris Buechler wrote:
> We'll leave this as-is for 2.3.1 to avoid introducing any regressions for something that's l... -
02:05 AM pfSense Packages Feature #6176: Privilege for OpenVPN Client Export
- it would be very cool to be able to limit access for users to their own client configs. users don't need to have acce...
-
- BBcan177 . wrote:
> By any chance, did you use the "view" button in the Update Tab? Something has recently changed t...
06/06/2016
-
- AWS EC2 instances should default to DHCP. EC2 instances are assigned IP addresses via DHCP. If you want to give the...
-
- The DHCPv6 service is enabled on the AWS EC2 instance. This normally wouldn't be an issue except when you attempt ad...
-
- Missed a pretty important one:
Interfaces - Allow the end-user to supply an array to configure the interfaces -
- Most AWS EC2 AMIs allow you to configure many aspects of the instances that you are launching via the 'userdata'. Cu...
-
- The issue is where you have a gateway that isn't within the interface's primary IP subnet (unusual), no VIPs within t...
-
05:27 PM Bug #6455: Can't delete Virtual IP "referenced by a least one gateway" if gateway outside interface subnet
- Hi @Tobi Miller Many of the firewall services use virtual IPs for load balancing. So suddenly removing the virtual IP...
-
02:50 PM Bug #6455: Can't delete Virtual IP "referenced by a least one gateway" if gateway outside interface subnet
- Okay, in case that this is better in the forum, I will open a thread there :-)
Just to answer your qestions:
* its ... -
- Not enough info to go by. Ideally this should be in a forum thread until a bug can be confirmed.
Is this an IP Ali... -
- I have pfsense 2.3.1 (amd64) running and the issue [[#3075]] seems to be present again. I have setup a main virtual I...
-
- Useful and detailed answer.
One way to resolve it that your comment _almost_ suggests but doesnt. Itr sounds like ... -
- The problem, as stated, is not a good idea, but could be handled better in a few separate tasks and not this directly...
-
- I happened to be checking the certs on my router, and noticed the main webconfigurator cert was 1024 bits, which has ...
-
03:16 PM pfSense Packages Bug #6456 (Not a Bug): vm-bhyve not correctly detecting the modules in kernel
- Trying to run bhyve in pfsense 2.3.1. I have install vm-bhyve. But I found it is not working properly when executing ...
-
- Kill Bill wrote:
> Well, while the original issue with the dashboard seems indeed gone, I managed to make the GUI co... -
09:23 AM Bug #6099: igmpproxy does not recognize upstream interface
- To be sure the 10.x address is not messing everything up I removed the address from the interface.
Sadly it didn't... -
08:35 AM Bug #6099: igmpproxy does not recognize upstream interface
- Just to compare with the same Version on my System:
MY router (192.168.1.254) periodily sends a Membership query (... -
- Just a hunch, but I suspect the second query coming from 10.10.10.1 is part of the problem. It's querying the same m...
-
- To check the IGMP Membership I made two traces on the firewall.
The first is made with the IGMP daemon I used on ver... -
- @Andrew
yes indeed
While the IP 192.168.1.35 sends a Membership request to 224.0.252.15211:56:36,591: Should ins... -
- It looks to me that, for whatever reason, the replies to the membership query aren't getting back to igmpproxy. Igmp...
-
- @Stefan Heck
The version you provided shows the same route exipration problem. See the log below.... -
- I'll check it today.
-
- @Andre Vink
Did you try the Version I have mentioned above? It is the same as the current Version from ViToni plus e... -
- In my opinion the mixup is a result of IGMPproxy not recognizing vlan and PPPoE interfaces.
The version from ViToni ... -
- Agree, it's what I see as well.
Looking at the logs you'll see the aging counter decrementing and the route removed ... -
- You mix up different issues in this thread.
The robustness if igmpproxy has nothing to do with "not recognize upst... -
02:33 AM Bug #6099: igmpproxy does not recognize upstream interface
- Andre Vink wrote:
> It looks like it has something to to with route aging.
Having looked at the code and at the l... -
- I have pfsense 2.3 (amd64) running and this issue seems to be present again. I have setup a main virtual IP which I u...
-
06:27 AM Bug #6454 (Resolved): services_ntpd_acls.php: Can't change default options without setting custom access restriction
- It's impossible to modify ONLY the 'Default Access Restriction' section without compiling the section 'Custom Access ...
-
- Hello,
Any news with this bug?
06/05/2016
-
- No, I can't - and I don't see *any* responses from HE if I sniff the WAN interface, either.
The last bug I ran into ... -
- subject is definitely not true. If it were even just true on 32 bit it's a certainty we would have heard of it by now...
-
- (Sorry, keep hitting Submit and *then* thinking of something else to add.)
Both connections do have a static IP ad... -
- Oh, and both connections support full 1500-byte packets; no PPoE or anything like that in either case.
-
- So far, my searching has only uncovered one other person complaining: https://www.reddit.com/r/PFSENSE/comments/4iupz...
-
- I've just confirmed that since upgrading from 2.2.x to 2.3-RELEASE (and subsequently to 2.3.x-whatever's current) non...
-
08:34 PM Feature #6452 (Rejected): Restrict Login by subnet
- Hi, I would like to suggest a feature on the user manager page, an option that you can restrict the created user to l...
-
- I am now experiencing this issue on 2.3.1-RELEASE-p1 (i386)
Ive been having intermittent Layer 7 DDoS Attacks for ... -
- Well, while the original issue with the dashboard seems indeed gone, I managed to make the GUI completely unresponsiv...
-
02:52 PM Bug #6099: igmpproxy does not recognize upstream interface
- It looks like it has something to to with route aging.
The IGMP join is processed neaty and the route is added to th... -
- To me, it seems dangerous to let users delete their own user name. Because if they (or others) do not know the passwo...
-
- Screen shot attached.
-
- 1) System->User Manager, create an account and give it membership of admins
2) Login to that account, go to System->... -
- fixed
-
- works
-
- fixed
-
- works
06/04/2016
-
10:44 PM Bug #6447: Interface allows dynamic gateway to be deleted
- I did not think I had made any changes to either of the default gateways, but I tried deleting it and it does work th...
-
- if you define any options outside the defaults, you can delete it (which brings back the fully default dynamic gateway)
-
- I have a SG-4860 appliance running 2.3.1-RELEASE-p1 (amd64). The WAN and LAN configurations are completely default. T...
-
- Thanks for the follow up. That makes this a duplicate of #6184
-
09:44 AM Bug #6245: Multi-WAN PPPoE not working
- Sorry for my late answer.
I could solve the problem. It was an problem with the nanobsd version. I've got an lot o... -
- how to repoduce :
-install speedtest-cli pkg install py27-speedtest-cli
-install email reports package ..
-ad... -
- Reading https://svnweb.freebsd.org/base?view=revision&revision=170613 suggests that the XORP project might be a/the s...
-
- Mousing over aliases and other elements in a firewall rule set pops up a hint showing the contents of the alias.
D... -
- the "runtime went backwards" is just log spam, but it was annoying me, and I tracked down where it was fixed in newer...
-
- fix pushed to RELENG_2_3, confirmed working when manually built.
-
- Hyper-V log spams a bunch of "runtime went backwards" logs during boot. This was fixed in FreeBSD in https://reviews....
06/03/2016
-
- can anyone try this on 2.3.1 and report back? It has a newer driver than anyone here has reported on.
-
07:33 PM Bug #6444: Monitoring graphs are down after reboot
- Hyper-V time sync is for pfSense VM disabled.
Hyper-V Server and pfSense are both synced with the same ntp servers.
... -
- your system clock was well into the future at some point. Disable Hyper-V's time sync to get rid of the runtime went ...
-
- If I type in: ps -axfw | grep updaterrd.sh it is running.
Here are the rrdtool erros from system logs:... -
- is updaterrd.sh running? any rrdtool errors in system log?
-
- Hello.
After I reboot the pfSense VM, all monitoring graphs are down. (Status/Monitoring)
I see the graph, but ev... -
06:20 PM pfSense Packages Bug #6368: pfBlockerNG General Settings - Erroneous Text
- Unfortunately the line break html code <br/> still exists after pfBlockerNG update to 2.0.17
-
02:12 PM pfSense Packages Feature #6445 (Rejected): Request: Zabbix 3.0 LTS proxy
- It would be nice to have the 3.0 LTS proxy for zabbix as it is not backwards compatible with the 2.2 or 2.4 version a...
-
- fixed
-
- @jimp
i've updated reply #7 to include the config of client side & server side
the status of before/after was ... -
- I see the routes sometimes (but not always) marked as Kernel routes in the Zebra routing table, but I have not seen t...
-
09:10 AM pfSense Packages Bug #6305: Quagga problems updating routes / mistakenly showing "kernel"-routes while they are not
- jeroen van breedam wrote:
> Any of the coredevs been able to replicate this?
I have ( but I'm not a Dev) And ever... -
- Yes, sorry, ntopng package is here: https://github.com/pfsense/FreeBSD-ports/tree/devel/net/pfSense-pkg-ntopng
-
- pfsense-packages repo on github is no longer in use (it was used before 2.3 )
New packages go straight into the Free... -
- "*pfSense* has now been added back into the FreeBSD-ports tree" ... sorry, meant ntopng obviously.
-
- The ntopng package was previously removed from pfSense 2.3.x because the ntopng port didn't build in FreeBSD.
pfSe... -
- Good catch, Chris. Fix pushed to disable the keepalive in captive portal's nginx instances. In that circumstance, the...
06/02/2016
-
- it no longer exists. Documentation updated.
-
- there were changes on other tickets forcing pkg updates which I believe fixed the original issue here in >=2.3.1.
-
-
- not seeing any issues here, and it seems to work for everyone else. Going to need an example config that doesn't work...
-
-
- fails because of the crypt using a base64_encode of the password as a salt in that case, plus also fails >8 character...
-
- that's the same root cause as #5940
-
- this is likely a duplicate of #6296. Some other things noted, like the GUI dying, are probably duplicates of other di...
-
- haven't seen any other such reports. Gave Pale Moon a shot myself, it behaves just fine. Granted this is on 2.3.1_1, ...
-
- fix pushed
-
-
-
- Resolved with https://github.com/pfsense/FreeBSD-ports/pull/140
-
-
- Resolved with https://github.com/pfsense/FreeBSD-ports/pull/140
-
-
- Resolved with https://github.com/pfsense/FreeBSD-ports/pull/140
-
05:21 PM Bug #6441: Unable to restrict access to management interface
- Chris Buechler wrote:
> no it isn't, it's protocol "any"
Yes, I see it now. This is NOT a bug and this IS a 100% ... -
- no it isn't, it's protocol "any"
-
- Chris Buechler wrote:
> It's not a bug, please post to the forum for assistance. You can't specify ports if the prot... -
- Using Google Chrome Version 51.0.2704.63 (64-bit) allows me to rearrange the order of the rules for the firewall.
... -
- It's not a bug, please post to the forum for assistance. You can't specify ports if the protocol isn't TCP and/or UDP.
-
- Jim Pingle wrote:
> I can't reproduce this. I am able to use a port type alias in the destination ports field when t... -
- I can't reproduce this. I am able to use a port type alias in the destination ports field when the destination is set...
-
- OS: FreeBSD 10.3-RELEASE-p3
Ver: 2.3.1-RELEASE-p1(amd64)
The goal: To restrict access from one of the subnets (OP... -
- works
-
09:53 AM Bug #6438: System Tunables refuses non-alphanumeric characters
- Yes, I agree that this should cover it. Thanks!
-
03:31 PM Bug #4418: IPsec mobile clients - bogus "p" appended to search domain
- I have just setup a new pfSense install and I am seeing this bug again on version 2.3.1-RELEASE-p1. Happens regardle...
-
- not a replicable problem. That file is auto-generated by unbound's unbound-control-setup, which is run prior to testi...
-
- Hello,
I'm getting the folowing error when I want to enable / save the DNS Resolver.
I've installed a fresh (VA) ... -
- Applied in changeset commit:9a9b000767749bcb54f3583cd6099dddb6d555db.
-
- merged, thanks! that works.
-
- Pull request: https://github.com/pfsense/pfsense/pull/2991
I think that is the only bug here, please test and report... -
- Box: 2.3.1-RELEASE
Steps to reproduce:
# Check *RADIUS issued IPs* checkbox and save
# Go to any other page
# G... -
- Any of the coredevs been able to replicate this?
-
01:53 PM Bug #4031: Notifications mail bomb in some gateway failure circumstances
- It would be nice if something similar could be baked in for CARP notifications as well. Our relatively small HA setu...
-
- Is this workaround no longer needed as of 2.2/2.3? I see that the "Force IPsec reload on failover" option was remove...
-
- Philipp Resch wrote:
> The issue still persists, I now get a picture right away with the new version, but it stops a...
06/01/2016
-
- some issues beyond that on that page as well.
-
- Hey,
since 2.3 it is no longer possible to edit a PPTP wan configuration using /interfaces_ppps_edit.php .
Any v... -
- I added - and _ as allowed characters. I believe that covers every usable sysctl value.
-
- Create system tunable 'kern.timecounter.hardware' with value 'TSC-low' through the web GUI of pfSense 2.3.1_1.
Try... -
- That wasn't the behavior I was seeing; but I was also knee deep in a dozen other fires most of the day, so I could be...
-
- You don't have to restart it. It only applies to new sessions, so you have to disconnect any existing if you want it ...
-
- Figured it out; when changing bandwidth limits, you seem to have to restart the captive portal instance/zone/service....
-
- no apparent issues. With no auth, on 2.3.1_1.
At 500 Kb up and down:
http://www.speedtest.net/my-result/53714747... -
- I have configured a captive portal and set download and upload speed limits. The downstream limit works as intended....
-
- fix pushed
-
- When changing the Link Type field on interfaces_ppps_edit.php, the page refreshes, and goes to the appropriate ?id=X&...
-
- Kill Bill: 2.3.1_1 fixed the bulk of remaining things there that 2.3.1 didn't. There's still something to this on occ...
-
- +1; seems pretty replicable here when you leave the dashboard page open in a browser for a couple of hours. (Not 2.3....
-
- fix pushed, thanks.
-
11:23 AM Bug #6433 (Resolved): "TFTP Server" field on DHCP server page does not allow hyphen character.
- Entering a host name with a "-" in it gives a generic "Please match the requested format" error, for the "TFTP Server...
-
- Child queues (not the interface itself) under interfaces set for CBQ are not showing options for bandwidth or borrowi...
-
12:46 PM pfSense Packages Feature #6436 (Resolved): Add Stunnel binaries to the pfSense repository
- Please consider adding the Stunnel binaries and its dependencies to the pfSense repository. The Stunnel package has d...
-
- Phillip
You may create a Account on
https://forum.pfsense.org/index.php?board=6.0
and send me your Email Adresse ... -
06:17 AM Bug #6099: igmpproxy does not recognize upstream interface
- The issue still persists, I now get a picture right away with the new version, but it stops after a few seconds.
H... -
- Philipp Resch wrote:
> Inserted route table entry for 232.0.20.35 on VIF #-1
> Inserted route table entry for 232.0... -
- Philipp Resch wrote:
> This might be of interest, if not, please remove.
>
> I am already on the "new" German Tel... -
- Updated the code at https://github.com/ViToni/igmpproxy/tree/getifaddrs
to get the correct value into @Dp->InVif@ an... -
- Stefan Heck wrote:
> @Victor Toni
> I did some Debugging today and finally got your Code working
>
> in mroute-... -
- Please try 1.1.2_3, I pushed a fix
-
- Looks like the dependency on sysutils/logrotate was listed in ports_before on the old 2.2.x package but that didn't g...
-
05:52 AM Bug #6432 (Resolved): Relative distinguished names should accept unicode during CA creation.
- Hi,
I found improper behavior during creation of CA.
Data that was used to create CA:
emailAddress=xxxxx@idium... -
04:16 AM Bug #6431 (Resolved): Cannot set queue bandwidth (CBQ)
- In CBQ mode when we would like to create or edit child queue there is no field to define the bandwidth.
And there ... -
- Over the years I have thought that this would be handy, but never got around to doing anything about it.
Pull reques...
05/31/2016
-
- It ought to ignore at least localhost and the system's own hostname.
the second suggestion is already done by dhc... -
08:57 PM Bug #6430 (Confirmed): pfsense should sanity-check hostnames when copying from dhcpd.leases to /etc/hosts
- Background - I was troubleshooting something and did a dig of localhost.
@aLinuxServer ~ $ dig localhost
...
;; ... -
- tolower needs to be on the username field, otherwise im sure a lot more bugs will be filed due to the username only w...
-
- it works fine, please get in touch via support for assistance.
-
- I saw that ACB was reported as resolved so i ran all updates, removed, and reinstalled ACB, well guess what its still...
-
- I have this entry:
10.32.12.246 64:bc:0c:80:52:89 2016/05/31 22:04:39 2016/06/01 00:04:39 online active
an... -
- fix pushed
-
- The link to edit a schedule on firewall_rules.php always links to the first schedule.
fix coming momentarily. -
- Just a piece of outside advise, do not rule out the Draytek, im a Network Engineer with 24 Certification, i have seen...
-
- Gateway monitoring has no relation to PPPoE reconnection.
mpd is retrying over and over to connect in your logs. ... -
- Hi,
I've been troubleshooting this issue for about a month solidly now, and am certain it's a bug after swapping o... -
03:59 PM Bug #6426 (Not a Bug): Regression Bug #3216
- I noticed that in version from 2.2.5 to 2.3.1 which I have tested there is a regression for this bug. If I want to cr...
-
-
- upgrade does not change that setting. Followed up in forum thread.
-
07:52 AM Bug #6425: serial terminal disabled after upgrading to 2.3.1_1
- forum link : https://forum.pfsense.org/index.php?topic=112812.msg627846
-
- pfSense on Alix APU1D (SSD 128, 4G RAM, AMD64), not the embedded version, the full version.
I was with pfSense 2.3... -
- Any news on this task? I'm deploying fiber internet on many pfsense APU2C4 and bandwith from wan is limited to 350 Mb...
-
- This works fine when properly configured. Please post to the forum for configuration assistance.
-
07:45 AM pfSense Packages Bug #6424 (Not a Bug): Proxy filter For HTTPS
- Not Able to Filter HTTPS traffic on 2.3.1-RELEASE-p1 (amd64).
-
- Victor,
the Change you have suggested does not work for me.
I also have the Problem that the streams stop respo... -
- Good catch!
While your are on it could you try to replace line https://github.com/ViToni/igmpproxy/blob/getifaddrs... -
- @Victor Toni
I did some Debugging today and finally got your Code working
in mroute-api.c function addMRoute the ... -
- HA Setup, fw2. Crash reporter multiple times, might be related with XMLRPC sync (which has been failing some times, w...
-
- Using nginx as the captive portal web server with keepalive_timeout 65 causes attempts to access sites after authenti...
-
-
When there is no RRD data sample for the current minute the graph, last, and minimum data values are zero in certa...
05/30/2016
-
- OS: 2.3.1-RELEASE (i386)
built on Tue May 17 18:46:37 CDT 2016 FreeBSD 10.3-RELEASE-p3
Platform: PC-Engines Alix... -
02:16 PM Bug #6418 (Resolved): NTP changes for system.inc
- There is a bug in system.inc in generating the custom access restrictions:...
-
12:54 PM Bug #6417 (Not a Bug): PHP startup errors
- Warning: PHP Startup: Unable to load dynamic library '/usr/local/lib/php/20131226/curl.so' - /usr/lib/libssl.so.7: Un...
-
10:06 AM pfSense Packages Bug #6274: Missing tabbar in HAProxy for restricted group
- Finally had time to update.
Yes it is fixed!
Thank you very much. -
- ...
-
- Philipp Resch wrote:
> Hi, your patched version does now also find the pppoe interfaces,
> although I was not yet a... -
- Hi, your patched version does now also find the pppoe interfaces,
although I was not yet able to get a picture.
H...
05/29/2016
-
10:48 AM Feature #6415 (Duplicate): Restore "Period" data summary column (Status > Monitoring) in pfSense 2.3
- pfSense versions prior to 2.3 included a period data _usage_ column under RRD Graphs. This was incredibly useful for ...
05/28/2016
-
- Victor Toni wrote:
> So I went for the getifaddrs() approach and integrated the patch into my branch. It seems to de... -
- I've created a pull request for this: https://github.com/pfsense/FreeBSD-ports/pull/138
Note that this is a diffe...
05/27/2016
-
- what I just pushed fixes
-
-
12:57 PM Bug #6413 (Resolved): dhcpd.conf DDNS PTR zone wrong with third octet of 0
- Reference Link:
https://forum.pfsense.org/index.php?topic=112607.0
______________________________________________... -
- Lars Karow wrote:
> Seems like, that ifvc.c (igmpproxy) does NOT create the full list of all interfaces in function ... -
- This might be of interest, if not, please remove.
I am already on the "new" German Telekom platform, where VLAN8 n... -
02:16 PM Feature #6414 (Rejected): SSHD listening on multiple ports
- Like it can be done on the sshd.conf allow multiples ports for SSHD listening socket.
-
12:53 PM
Bug #6158 (Resolved): diag_dump_states.php & others: Prefixes not taken in to consideration while sorting
-
04:35 AM Feature #6412 (New): Add includedir directive for /var/etc/xinet.d to xinetd configuration
- Dear pfsense developers,
is there a plan to add a check_mk agent package again ?
I use check_mk and have to fix... -
- Dear pfsense-developers,
i like your work to keep everything updated.
But would it be possible to classify if an ... -
04:24 AM pfSense Packages Bug #6410: when PFSENSE after server restart,openvpn+motp not login
- Chris Buechler wrote:
> is freeradius running at all before you do that?
1.i fund where pfsense server restart fr... -
- Chris Buechler wrote:
> is freeradius running at all before you do that?
1.i fund where pfsense server restart f... -
- is freeradius running at all before you do that?
05/26/2016
-
08:29 PM
Bug #6372 (Resolved): OpenVPN client page does not expose proxy port field
-
- when PFSENSE after server restart,openvpn+motp not login
the solution is :
click services->freeradius->users
... -
05:32 PM Bug #6409: hostname in alias does not work for port forwarding
- Tested versions: 2.3, 2.3.1_1
-
- I have a docker container running with dynamic DNS I am trying to portforward out.
The name registry-sysd.containers... -
- Lars Karow wrote:
> Seems like, that ifvc.c (igmpproxy) does NOT create the full list of all interfaces in function ... -
- One person on the ticket claims it wasn't fixed. Many on the forum and elsewhere have stated it's fixed for them. Eit...
-
- Jim Pingle wrote:
> Sounds like #6296 -- Update to 2.3.1 or 2.3.1_1 and it should be fixed.
It would seem accordi... -
- Sounds like #6296 -- Update to 2.3.1 or 2.3.1_1 and it should be fixed.
-
- I am seeing an issue where one of my interfaces completely drops offline. em2 to be precise, it is a e1000 interface ...
-
11:27 AM Bug #6408 (Duplicate): NTP ACL settings page can't be updated
- In 2.3.1 and 2.3.1_1, I am unable to save any changes to the Services/NTP/ACLs page (services_ntpd_acls.php). Just cl...
-
08:41 AM Bug #6406 (Resolved): Web process becomes unresponsive producing 502 Bad Gateway nginx
- Eventually the web process becomes unresponsive and produces...
-
06:23 AM Bug #6405 (Not a Bug): OpenVPN Server fails to start at boot when listening on v6
- On the latest update (2.3.1_1 - and also occurred on 2.3), when OpenVPN is set to listen on v6 only, it fails to star...
-
- There's also four typos on the same page.
defined alias, or a *commma seperated* list
Should be "comma separate... -
- I noticed that in version from 2.2.5 to 2.3.1 which I have tested there is a regression for this bug. If I want to cr...
-
- 502 Bad Gateway happened again.
-
- *on standby node:*...
-
- That's the "still some large number of states", just exhausting the larger limit. How many states do you have active?...
-
- after upgrade to 2.3.1_1 same problem
Crash report begins. Anonymous machine information:
amd64
10.3-RELEA...
05/25/2016
-
09:32 PM pfSense Packages Bug #6404 (Resolved): FreeRADIUS Does Not Start After Upgrade
- After applying an upgrade to pfSense the system reboots. When the system reboots the radiusd daemon does not restart ...
-
- fixed
-
- works
-
07:10 AM
Bug #6401: OS X and Chrome change js doesn't change field visibility correctly
- Applied in changeset commit:fe68a6a2b28c897cb3a8f8fda452c25f649556f1.
-
06:58 AM
Bug #6401 (Feedback): OS X and Chrome change js doesn't change field visibility correctly
- This issue is caused by the way Chrome handles "click" events bound to select inputs.
Changing the JQuery from "cl... -
- the 502 is something different and unrelated, cause wasn't apparent. Keeping an eye on it
-
- Chris,
That same system is now displaying the following message, and the UI is down:... -
- Zeev: that isn't a valid test, you have to require config.inc like all the pages in the GUI do to get the ini_set wit...
-
- So that is running out of memory in pfSense_get_pf_states() and/or it trying to create the return $states array.
-
- sorry i can't
i changed
@
<?php
$nodes = array();
$states = pfSense_get_pf_states();
fo... -
- Can you get the value of count($states) ?
It will be interesting to know if the count of states is really crazy high.
-
- i found that following code is cause the crash:
/usr/local/www/status_carp.php lines 258-268
@<?php
$nodes = arra... -
- even update to 1GB is not helped:
_ Crash report begins. Anonymous machine information:
amd64
10.3-RELEASE-... -
- change of config.inc didn't helped
Crash report begins. Anonymous machine information:
amd64
10.3-RELEAS... -
- result of *uname -a*
FreeBSD TLWV-FW1.EISLAB-IL.INTRA 10.3-RELEASE-p3 FreeBSD 10.3-RELEASE-p3 #1 3ef16fb(RELENG_2_3_... -
- This is incorrect. i run cluster of 64bit. each server 2x X5660 (6core) CPUs and 32GB ram and i have the problem.
-
- fixed
-
- fix pushed
-
- This just happened to me again on 2.3.1 - I've left the system in the locked up state in case you want (or want me) t...
-
- This is perhaps a better fix.
https://github.com/pfsense/FreeBSD-ports/pull/137
-
- This should fix it.
https://github.com/pfsense/FreeBSD-ports/pull/136
-
- From the tests we ran for the last couple of days we saw kernel panic using limiters in multiple vlans but no impact ...
-
03:05 AM Bug #6376: Settings can't be saved
- I can confirm Ph. T's finding.
Removing deny config-write solves the problem.
-
- A different forum member has came across this issue & has confirmed that reverting to 0.99.24.1 fixes the problem.
05/24/2016
-
- The change I made on #6318 resolves subject issue generally. I'll un-mark this as a duplicate for tracking purposes s...
-
- this is a duplicate of #6318 then. Yes if it's that easy to replicate, please email me so we can arrange access. thanks!
-
- Removing the IPsec widget appears to have prevented the eventual failure. This sounds like a different issue. Irrespe...
-
- there are limitless possible reasons for this to happen, just means php-fpm is hung up doing something. One I've hear...
-
- This is more widespread than just IPsec P1s. It appears to affect any page that has field changes from Javascript, fo...
-
- Choosing AES then 3DES on IKEv2 Phase 1 leaves key length selector active, resulting in a broken config.
I was abl... -
- fixed, thanks!
-
- that works, merging
-
- Aliases of the URL (IP) type are not available for selection in firewall rules.
This should fix it.
https://githu... -
- Thanks to Alex for getting me into an affected system. It's occasionally getting stuck in pfSense_ipsec_list_sa, with...
-
- Steve Beaver wrote:
> I have looked through the code again and nothing really stands out.
>
Ditto. Heard of rou... -
01:05 PM
Bug #6318: IPsec dashboard widget causes GUI failure
- I have looked through the code again and nothing really stands out.
It would be helpful to know:
* How many tun... -
-
07:36 PM Bug #6402 (Resolved): Monitoring won't save default configuration of 8 hours with 1 minute resolution, resets resolution to 5 minutes when switching from 1 hour, 1 minute resolution
- I can save the default to 1 hour, 1 minute resolution, but just changing the window to 8 hours auto-selects a 5 minut...
-
- This came about because I fixed #6352, so it's now doing things it should have been doing but wasn't previously in th...
-
03:55 PM Bug #6400 (Closed): assign_interfaces.php issues with large numbers of interfaces
- On a firewall running 2.3.1, after creating ~200 vlans, assign_interfaces.php gets _very_ slow while taking 100% cpu....
-
- It has nothing to do with the number of VLANs or interfaces, if the state table is really large, it runs out of memor...
-
- currently i can't enable CARP on my cluster and if active node will failed for some reason I'll be without network at...
-
- Need to pass alias type to process_alias_urltable() function when creating a new url table alias because it is not ye...
-
- That is a different issue. It has to do with the url table download and parsing. It occurs irrespective of this fix...
-
- Phillip/Chris/Renato,
I've noticed that I had to save the URL several times before the issue went away. It seemed ... -
- Merged. Thanks!
-
- Proposed fix.
https://github.com/pfsense/pfsense/pull/2980
Keeps full line comments of downloaded url table file,... -
- Well I guess we can both lay claim to ignorance.
Looking over the FreeBSD pfctl man page it seems to me that "addr... -
- it shows what RRD files are there. You can delete old ones from /var/db/rrd/ if you no longer want that data. I've co...
-
04:25 AM Bug #6397 (Not a Bug): Status-Monitoring-Quality allows selection of nonexistent GW
- When you create a new WAN gateway it is automatically added to the monitoring drop down menu (quality section). If yo...
-
- only two remaining in 2.3.x+ are PPPoE and L2TP servers.
-
-
08:25 AM pfSense Packages Bug #5839: Squid package loses all settings when upgrading from 2.2.2 to 2.2.6.
- As an added note on this, on one of my systems at least, the option defaulted to not save and cleared the config on u...
-
- Merged, thanks!
-
- If the current (and perhaps some recent) backup configs in the cache are unusable, due to failing checking on router ...
-
- I would like to support this request for an updated and more efficient support for multicast.
As a user of the IPTV... -
01:57 AM Bug #6372: OpenVPN client page does not expose proxy port field
- Legend!
Glad it was a simple fix, thanks!
Also available in: Atom