Activity
From 06/06/2016 to 07/05/2016
07/05/2016
-
11:10 PM Revision 42d9ae11: Modernize make.conf
-
- 07:59 PM Revision 0a3ac6e8: Rationalize System Update GUI messages
- At present, when doing a System Update, there is a message box that says:
"Please wait while the installation of comp... - 07:58 PM Revision 936b4560: Protect get_dir from causing PHP errors
- https://forum.pfsense.org/index.php?topic=114570.0
- 07:58 PM Revision 68cf7ccb: Protect get_dir from causing PHP errors
- https://forum.pfsense.org/index.php?topic=114570.0
- 07:58 PM Revision 20dc1d7f: Merge pull request #3042 from NewEraCracker/master
-
06:10 PM Bug #6579: IPv6 CARP VIPs lost upon config sync where they include non-significant zeros
- Phillip Davis wrote:
> Firstly the back-end implementation code should Net_IPv6:compress all IPv6 addresses in order... -
05:48 PM Bug #6579: IPv6 CARP VIPs lost upon config sync where they include non-significant zeros
- Firstly the back-end implementation code should Net_IPv6:compress all IPv6 addresses in order to make sure the addres...
-
- If you have IPv6 CARP VIPs specified with non-significant zeros, such as fdaa:1234:0012::1, the secondary will see th...
-
-
-
-
- Take the scenario of:
LAN: bridge0
OPT1: igb1
OPT2: igb2
where bridge0 has igb1 and igb2 members. The LAN IP ... -
- If you have IPsec P1s configured with a FQDN as the remote endpoint, and those don't resolve, the filter reload proce...
-
03:49 PM Bug #5737: Traffic Graph Table and Graph Inverted Values
- I was just getting ready to report this as a bug myself.
I guess my question is: how is this not considered a bug... -
- Thanks Luke.
The delay there is from dyndns's checkip service being very slow to respond, there is another ticket... -
- works.
Thanks NOYB -
01:05 PM Feature #6569: Support Rockwell ZODIAC binary protocol (Jupiter receiver) for high precision
- This area could use some more work anyhow. I have to fight to get my USB GPS to be recognized at all. It appears we n...
-
- It was relocated because /var/run is a tiny memory disk used for some very volatile files to save disk writes, and th...
-
12:59 PM Feature #6546: pfSense should support logging to e.g. ELK stacks
- The Python prototype we have internally is now plug-and-play as filebeat and topbeat are. It uses the bulk posting AP...
-
- We have Python pushing log records to ELK as a rough prototype. The code is dog simple, and should be relatively easy...
-
11:20 AM
Bug #6577 (Resolved): pkg_edit.php: rowhelper data not preserved on validation error
- e.g.: Install pfBlockerNG and visit pkg_edit.php?xml=/pfblockerng/pfblockerng_v4lists.xml&id=2
Add an IPV4 list sour... - 08:07 AM Revision e4eca5a3: Protect get_dir from causing PHP errors
- https://forum.pfsense.org/index.php?topic=114570.0
07/04/2016
-
02:06 PM Revision 81fb072c: webgui tables, doubleclick event to perform 'edit' action, part 2
- (cherry picked from commit 1c10ce9750f3702f433a91754f79e637e1c3369b)
-
- (cherry picked from commit 1c10ce9750f3702f433a91754f79e637e1c3369b)
- 02:05 PM Revision 86ac7cde: Merge pull request #3041 from PiBa-NL/webgui-table-dblclick
-
- We have a candidate library. [[https://github.com/QHedgeTech/cpp-elasticsearch]] requires only libcurl, already in ba...
-
- Not as such, but we've raised CCLAs with ESF so we can get onto it.
Also, the relatively large binary footprint of... -
09:54 AM Bug #6566: Cloudflare DnyDNS Update with subdomains
- Looking at this again - I don't think this would work for a subdomain such as ip.test.example.com.
It might be pos... -
02:18 AM Bug #6572: Config sync hangs php-fpm on secondary
- Hi Chris,
Also forgot to mention that both PFSense boxes are installed in a VMware environment. We followed the fo... -
- Hi Chris,
We would like to thank you for your reply, please find my replies in line. Do not hesitate to contact us... -
- The issue is php-fpm on the secondary is getting hung up on something. Going to need more info.
Does it happen on... -
01:18 AM Feature #6533: Allow configuration of Min and MaxRtrAdvInterval, AdvDefaultLifetime
- Hi!
Can we also set the:
Router lifetime (now 60 seconds, this is way too low)
Route lifetime, also 60 seconds a...
07/03/2016
-
-
- (cherry picked from commit 54691fc663eae7c6e92e4eaad596906758d7ebea)
-
- (cherry picked from commit 54691fc663eae7c6e92e4eaad596906758d7ebea)
-
08:34 PM Bug #6575 (Closed): GEOM Mirror Status Change Re-sync notices
- Every 1% re-sync creates a notice (and an email alert if configured as such).
Suggest re-sync start, re-sync error... - 08:34 PM Revision 6ad9271a: Merge pull request #3040 from PiBa-NL/webgui-table-dblclick
-
-
- (cherry picked from commit 658180daffe0fe5f005b6fe6b528c758309dffef)
-
- (cherry picked from commit 658180daffe0fe5f005b6fe6b528c758309dffef)
- 05:50 PM Revision 587be0aa: Merge pull request #3039 from PiBa-NL/ipsec-widget-arraycheck
-
-
- Here is the USB config descriptor as seen by Linux.
-
- TL;DR -- the FreeBSD urndis(4) driver needs some serious attention.
People cannot buy discrete ADSL2+ modem cards ... -
- Yup. I have the u-Blox 5 also in an ALIX 6D2 (older rev) and have the necessary leads soldered for 1PPS and UART. But...
-
11:22 AM Bug #6223: IPsec + OpenBGPD fails with "PF_KEY socket: No buffer space available"
- Chris Buechler wrote:
> Michael OBrien wrote:
> >
> > Still having this issue (running OpenBGPd + IPSec - transpo... -
09:41 AM Feature #6573 (Resolved): /var/run/dmesg.boot
- Is it possible to have a @ln -s /var/log/dmesg.boot /var/run/dmesg.boot@? The @vm-bhyve@ package expects the file at ...
- 08:45 AM Revision 9e899320: spdns.de renamed to spdyn.de
- Forgot to update the select description and values
- 08:45 AM Revision 17d422c1: Merge pull request #3038 from exii1988/master
07/02/2016
-
11:25 PM Feature #6569: Support Rockwell ZODIAC binary protocol (Jupiter receiver) for high precision
- Assigned to Pingle.
Note as well that we have a (I believe) U-blox GPS receiver that interfaces to the Minnowboard... -
- I notice that there is no way to set the termios bits directly w/o hacking code. It's a possibility I may have to do ...
-
- Swapped out PSU rail on my GPSDO for a discrete external PSU. I think it's still losing characters, however pfSense's...
-
- See NTPD refclock 31 page: [[https://www.eecis.udel.edu/~mills/ntp/html/drivers/driver31.html]]
-
- (This isn't working for me right now -- could be power or cabling issues)
This is just a quick and dirty patch to ... -
- NanoBSD won't be around for much longer, you're better off with a full install anyhow in the long run. If you activat...
-
- This isn't nearly as much of a problem for me right now -- the offending system has been upgraded to use mSATA, throu...
-
- Hi All,
We have 2x PFSense boxes with version 2.3.1-p5 configured with CARP protocol. We have noticed and this is ... -
12:11 PM pfSense Packages Bug #6571 (Resolved): NUT service can not start sometimes after boot when SNMP UPS interface is down
- If NUT is started with SNMP UPS configured and UPS network or card is currently down, an error message appears
"ER... - 10:22 AM Revision fb66c35f: spdns.de renamed to spdyn.de
- Forgot to update the select description and values
- 09:49 AM Revision 608090e8: spdns.de renamed to spdyn.de
- The service renamed there addresses
- 09:47 AM Revision ea301b1b: Merge pull request #3036 from exii1988/master
-
09:39 AM Bug #6260: Namecheap Dynamic DNS does not accept * for hostname even though it is valid
- Tested with pfSense-CE-2.3.2-DEVELOPMENT-amd64-20160702-0342 + Namecheap DDNS using `*` wildcard. Works! Testing was...
- 09:29 AM Revision 1c2c08bd: spdns.de renamed to spdyn.de
- The service renamed there addresses
- 09:20 AM Revision d35b6181: Clarify Negate option description on firewall_nat_out.php.
- 09:19 AM Revision ee3cc6d5: Clarify Negate option description on firewall_nat_out.php.
-
09:13 AM Revision 39d2f39d: Check IP Services
- Configurable check IP services.
Used by Dynamic DNS services to check IP addresses.
Configure as many check IP servic... - 08:41 AM Revision 65292972: Change button order on diag_dns.php so hitting enter in the field does a lookup rather than update alias. semi-related to Ticket #6561
- 08:40 AM Revision 7208f387: Change button order on diag_dns.php so hitting enter in the field does a lookup rather than update alias. semi-related to Ticket #6561
-
- It's fixed.
-
- PR was merged
-
- updated subject is the issue. That case shouldn't cause it to skip requesting PD, for cases where the PD is actually ...
-
- I believe this is the issue in FreeBSD PR 201519.
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=201519
Luiz ... -
- works
07/01/2016
-
09:49 PM Revision cba6dcbb: Update system_usermanager_settings.php
- Use of undefined constant min - assumed 'min'
-
- Use of undefined constant min - assumed 'min'
Use of undefined constant max - assumed 'max' -
- Notice: Use of undefined constant min - assumed 'min'
Notice: Use of undefined constant max - assumed 'max' -
- Use of undefined constant min - assumed 'min'
-
- Use of undefined constant min - assumed 'min'
Use of undefined constant max - assumed 'max' -
- Notice: Use of undefined constant min - assumed 'min'
Notice: Use of undefined constant max - assumed 'max' - 09:48 PM Revision ea57c74b: Merge pull request #3035 from BBcan177/patch-1
-
- Use of undefined constant min - assumed 'min'
-
- Use of undefined constant min - assumed 'min'
Use of undefined constant max - assumed 'max' -
- Notice: Use of undefined constant min - assumed 'min'
Notice: Use of undefined constant max - assumed 'max' -
- It probably shouldn't write out anything to /etc/hosts or host_entries.conf for the host's own hostname if DHCP Regis...
-
05:14 AM Bug #6570 (Closed): Unbound breaks DNSSEC for pfSense's own hostname
- During config update, pfSense writes its own FQDN in /etc/hosts, such as:...
-
- appears to be a date/time issue within the VM in this case
-
12:25 PM Feature #6561: diag_dns.php IPv6 support
- seems that now ipv4/ipv6 reverse lookup is broken
-
10:56 AM Feature #6546: pfSense should support logging to e.g. ELK stacks
- Have you made any progress on this? I am trying to get filebeat set up on pfsense right now and ran into CLOG. :-(
-
- Martin Hansen wrote:
> Hi, first ever bug report, bare with me.
>
> Running filebeat on a pfsense to ship logs to... -
- This is mentioned at [[http://support.ntp.org/bin/view/Support/ConfiguringJupiterRefclocks]]
-
- Resolved: now (tested on 2.3.2.a.20160630.1832) "Diagnostics / DNS Lookup" returns AAAA records.
Note: still on f... -
- Fixes hidding of custom individual settings when not in use on user manager page.
- 01:10 AM Revision 591b9184: Merge pull request #3034 from NOYB/startsWith_Polyfill
-
- Fixes hidding of custom individual settings when not in use on user manager page.
-
- I'm working on catching up on PRs, this one coming soon.
06/30/2016
-
11:49 PM pfSense Packages Feature #6141: Convert apcupsd package to 2.3
- Apparently someone has updated the package and it's been waiting on approval here for over a month: https://github.co...
-
- Use correct Thursday abbreviation (s/Thr/Thu/).
-
- Use correct Thursday abbreviation (s/Thr/Thu/).
- 11:31 PM Revision d2f32464: Merge pull request #3033 from NOYB/Diag_Tables_Last_Updated
-
- Use correct Thursday abbreviation (s/Thr/Thu/).
-
- fix pushed
-
- works
-
- looks good, validation is correct in those cases now, no apparent regressions. Thanks Phil!
-
- PR merged
-
- works
-
- works
-
- works
-
- (I will probably have a crack at doing this when time permits... I'm bedding in a GPSDO unit based on the Jupiter, wi...
-
- OK, first of all, I appreciate the hard work you guys have done on cleaning up the backend implementation.
However... -
- OK, so having run headfirst into the bsdconfig wall, I had a rethink about how to express what this ticket is really ...
-
- (From a strictly "consumer of tech" point of view, relying on the base system for this is probably going to cause mor...
-
- works
-
- works.
Thanks for the additional confirmation, Zeev. -
02:14 AM Bug #6364: PHP Fatal error: Allowed memory size of 268435456 bytes exhausted (tried to allocate 32 bytes) in /usr/local/www/status_carp.php on line 261
- Hello,
i added your changes and looks like it works. Chris you are the king :) -
- duplicate of #4766
-
03:54 AM Bug #6564 (Duplicate): Alias URL TABLE(IP) failed loading when WebGUI set to HTTPS
- After setting System -> Advanced -> Protocol to HTTPS
the download of Alias URL TABLES(ip) does not work anymore whe... -
- this was done in pieces across several releases since then, especially in 2.3x+.
-
- probably just need to set the ping payload.
https://forum.pfsense.org/index.php?topic=110043.0
no indication of ... -
10:20 AM Bug #6567 (Not a Bug): Dual Wan Gateway Monitor is offline
- Hello, i am running on pfsense 2.3.1_5_amd64 (latest) and when i switch on dual gateway, the gateways status is offli...
-
01:09 PM Feature #6561: diag_dns.php IPv6 support
- The create alias stuff is still broken due to gethostbyname() usage.
- 12:24 PM Revision 48ebcd49: Fix firewall rules for PPPoE server
- 1) PPPoE Clients are located within 'Remote Address Range' (sa) and not Server Address (ip), see lines 1194 and 1195....
-
11:08 AM Bug #6495: No default route on PPPoE after reconnect or IP change in some cases
- Hi Chris,
system log added. :)
Thanks,
Mario (Marlenio) -
- See also [[https://redmine.pfsense.org/issues/6554]]
-
- Here is how I get around the lack of GUI integration at the moment.
(Requires mode7 support on loopback is re-enable... -
- See attached hack.
-
- If a host such as ip.example.co.uk is used for the cloudflare dynamic dns update the zone_id will fail to be returned...
- 06:43 AM Revision 337f8296: Fix Redmine #6011
- This will add linklocal fallback where no IPv6 is otherwise configured to allow login using this IPs
- 06:42 AM Revision f5ba05cb: Merge pull request #2764 from NewEraCracker/redmine-6011
- 06:20 AM Revision a1d059c2: Allow wildcard for hostname with Namecheap DDNS. Ticket #6260
- 06:20 AM Revision 84a67bf4: Allow wildcard for hostname with Namecheap DDNS. Ticket #6260
-
06:11 AM Revision de8882d6: Whitespace cleanup
-
-
- 06:10 AM Revision 0015e84c: Merge pull request #2729 from zevlag/BountyRequestTopic106193
-
- Diff Option
--diff
SSD Friendlier
Same as default but only copies files that are different, instead of every thing ev... - 06:05 AM Revision d691888e: Merge pull request #3031 from NOYB/GitSync_Diff_Only_Option
-
- Diff Option
--diff
SSD Friendlier
Same as default but only copies files that are different, instead of every thing ev... -
05:24 AM Revision add3c6c5: Get modulus keysize
- Useful utility function when it's necessary to verify that existing keys meets current practices
- 05:24 AM Revision 79299722: Merge pull request #2994 from stilez/patch-31
- 05:20 AM Revision 595b074d: Feature #6388 custom GUI preference settings per user
- 05:20 AM Revision 50d36974: Merge pull request #3018 from phil-davis/usersettings
- 05:01 AM Revision d0acb088: Handle more invalid IPv6 formats
- 05:00 AM Revision a77ed90d: Handle more invalid IPv6 formats
- 05:00 AM Revision 7685fd4e: Merge pull request #3029 from phil-davis/IPv6colons
- 04:58 AM Revision 75b8611e: Rationalize System Update GUI messages
- At present, when doing a System Update, there is a message box that says:
"Please wait while the installation of comp... - 04:57 AM Revision bb5d3a43: Merge pull request #3030 from phil-davis/patch-1
-
04:32 AM Bug #6565: OpenVPN calculates incorrect TCP checksums when running in bridged/tap mode with 'mode server'
- Chris Buechler wrote:
> with tap I'm guessing? That's not the case with tun. Any IP assigned to the server itself is... -
- with tap I'm guessing? That's not the case with tun. Any IP assigned to the server itself is affected (tap IP, LAN IP...
-
- When a connected OpenVPN client attempts to establish a TCP connection with a pfSense OpenVPN server, the server resp...
-
- 04:30 AM Revision f4803487: Merge pull request #3028 from PiBa-NL/2.3_dnsV6
- 04:30 AM Revision 6bc8621f: Rationalize System Update GUI messages
- At present, when doing a System Update, there is a message box that says:
"Please wait while the installation of comp... -
- Generated config:...
-
- Chris Buechler wrote:
> The config either ends up with "mode server" or "server-bridge" depending on the specifics o... - 03:26 AM Revision cd233828: Add playback files for disabling and enabling CARP maintenance mode. Ticket #6560
- 03:26 AM Revision a5297e81: Add playback files for disabling and enabling CARP maintenance mode. Ticket #6560
- 03:25 AM Revision 9a8b5401: Add playback files for disabling and enabling CARP maintenance mode. Ticket #6560
- 03:20 AM Revision 7e9349a5: Handle more invalid IPv6 formats
-
- works
-
- works
-
02:46 AM pfSense Packages Bug #6562: Bug/Wrong description in the squid settings
- Screenshot Author: http://docs.diladele.com/
-
- I think there is a wrong description or maybe a bug in the "certificate adapt" option in the squid https settings. He...
-
- Squid still accepts sha1 certificates.(Man in the middle proxy) I think this should be blocked by default for securit...
-
02:39 AM Bug #6558: Pf-sense 2.3 doesn't detect shutdow event with em driver and Intel Chipset 82574L
- Chris Buechler wrote:
> subject isn't true in general, 82574L in the FW-7541 correctly detects link down and up. e10... -
- exists and works in 2.4
-
- merged a slightly modified fix from PR 2770
https://github.com/pfsense/pfsense/pull/2770
Not sure that suffices t... - 12:49 AM Revision 5f37baed: Omit <secret> tags from L2TP in status.php config.xml dump.
- 12:49 AM Revision 1799a969: Omit <secret> tags from L2TP in status.php config.xml dump.
- 12:49 AM Revision 8d1a6065: Omit <secret> tags from L2TP in status.php config.xml dump.
- 12:42 AM Revision c6060e22: Restore 2.2.x and prior means of obtaining pfsync nodes to avoid exhausting memory on systems with large state tables. Ticket #6364
- 12:42 AM Revision e38e1efd: Restore 2.2.x and prior means of obtaining pfsync nodes to avoid exhausting memory on systems with large state tables. Ticket #6364
- 12:41 AM Revision eef555b9: Restore 2.2.x and prior means of obtaining pfsync nodes to avoid exhausting memory on systems with large state tables. Ticket #6364
-
- merged, thanks Phil
06/29/2016
-
- diag_dns.php lacks IPv6 support. Merged from PR 3028
https://github.com/pfsense/pfsense/pull/3028
Thought we had ... -
- Pull request https://github.com/pfsense/pfsense/pull/3029
Fixes handling of (what should be invalid) formats:
1:2... -
- added. Since it's a trivial addition and not a feature that can introduce regressions, merged to 2_3_1 as well.
-
07:15 PM Feature #6560 (Resolved): Add php shell sessions to enable and disable Persistent CARP Maintenance Mode
- It would be very useful to be able to do this from the CLI when the GUI is unavailable.
-
-
- restored 2.2.x and prior's method of obtaining the nodes, which will prevent it from running out of memory.
-
- This all looks good now. All the test cases that were wrong previously are correct now, and no apparent regressions.
-
- Hi Chris,
new update in thread-
--
Mario (Marlenio)
-
- subject isn't true in general, 82574L in the FW-7541 correctly detects link down and up. e1000 in VMware ESX and Work...
-
- Hi All,
as described in the title, with the 2.3 version of PF-Sense when you unplug an Ethernet cable from a gigab... -
- The config either ends up with "mode server" or "server-bridge" depending on the specifics of your config. That's in ...
-
- Jim Pingle wrote:
> What are the exact settings in use on the OpenVPN server that lead to it being omitted when yo... -
- It's not quite that simple. There are cases when it must be omitted as well, such as some tap bridge scenarios, or Op...
-
- Workaround is to set 'mode server' in the advanced options section.
-
- When creating a new OpenVPN server, the "server mode" web interface drop down does not influence the written configur...
-
- The situation where they fail is where DNS Forwarder or Resolver are not bound to localhost. If resolv.conf doesn't e...
-
- At the moment the user can input a "full" IPv6 address "uncompressed" and it is saved just like that, e.g.:
1:2:3:4:... - 05:57 AM Revision bfa8df8a: Flush link-local IPs so we do not get stale data and do not waste time deleting IP if it is already set to fe80::1:1
- 05:57 AM Revision 4400ad90: Merge pull request #2934 from k-paulius/patch-14
-
04:52 AM Feature #336: Option to create lagg under assign interfaces
- Just to chime in, we're in the process of upgrading loads of our pfSense installs to use LAGG from single links; this...
- 03:36 AM Revision 31df78a8: Merge pull request #2944 from stilez/patch-23
-
- The console menu item #12 (_"pfSense/$product developer shell"_) has a pointless title that doesn't help users much. ...
- 03:32 AM Revision 17315994: Merge pull request #3000 from stilez/patch-32
- 03:01 AM Revision 6dfb6b27: Update include() to include_once()
- For safety, use include_once() when including various "side" files.
There are a couple of instances of include("guico... - 03:01 AM Revision adcb1d08: Merge pull request #3024 from phil-davis/include_once
-
02:13 AM Revision 69eca02c: Shorten gwifip if whole socket path exceeds 100 chars
- dpinger stopps with an error when the socketname exceeds over
(around) 100 characters. The dpinger will not start and... -
- Currently underscores are used to seperate gwifip, monitorip, etc, but
underscors are also used in vlan subinterfaces... -
- dpinger stopps with an error when the socketname exceeds over
(around) 100 characters. The dpinger will not start and... -
- Currently underscores are used to seperate gwifip, monitorip, etc, but
underscors are also used in vlan subinterfaces... - 02:12 AM Revision 5f93d5f1: Merge pull request #3027 from dhoffend/ticket-6505
-
- PR confirmed and merged
06/28/2016
-
- dpinger stopps with an error when the socketname exceeds over
(around) 100 characters. The dpinger will not start and... -
- @Erik: If someone puts the validation code in place to check text-entries in those boxes for validity, then they coul...
-
04:07 PM Bug #6468: Firewall scheduler allows you to set invalid time range
- @Philip: Even if it was not an intention, it was best what happened. It was definitively easier to modify one single ...
-
- Currently underscores are used to seperate gwifip, monitorip, etc, but
underscors are also used in vlan subinterfaces... -
- Axel: could you email me an unsanitized copy of your dhcpd6.leases? cmb at pfsense dot org. Nothing immediately stick...
-
04:26 PM Bug #6543: Some leases do not show up in DHCPv6 Lease status
- I like to statically assign DHCPv6 addresses to some devices on my network. But finding the DUID can sometimes be cha...
-
- I'd have to get back to you on that -- e.g. putting a watch on the file contents. There have clearly been leases miss...
-
- Need some examples, what's shown in dhcpd6.leases that doesn't show on the status page?
-
- I've experienced this same issue, in my case it is not limited to mobile devices. I've had this happen with a Macbook...
-
- resolv.conf may not exist or be populated in the chroot of nanobsd upgrades on 2.3.x+. pkg uses that for fetching the...
-
- Thanks Daniel! Looks good, merged to all 3 branches.
-
- The bug has been traced down and fixed. Pull Request is up (ICLA already signed).
https://github.com/pfsense/pfsense... - 08:45 PM Revision ba2c8ed4: Set pipe_slot_limit to the maximum configured qlimit value. Move the set_sysctl out if the block where it only gets run if dummynet isn't already loaded. Ticket #6553
- 08:45 PM Revision fcd9f64c: Set pipe_slot_limit to the maximum configured qlimit value. Move the set_sysctl out if the block where it only gets run if dummynet isn't already loaded. Ticket #6553
- 08:44 PM Revision ef7c3a63: Set pipe_slot_limit to the maximum configured qlimit value. Move the set_sysctl out if the block where it only gets run if dummynet isn't already loaded. Ticket #6553
- 08:05 PM Revision 1b8aa9c8: Clean up limiter text. Remove old commented out bit.
- 08:05 PM Revision 3481524a: Clean up limiter text. Remove old commented out bit.
- 08:04 PM Revision cabb34e4: Clean up limiter text. Remove old commented out bit.
-
- We have started evaluating Duo Security, starting with the duo-unix PAM module package.
It would be extremely usef... -
- pfSense should include a package (and GUI) for driving IEEE 1588 PTPd. This is currently available as a FreeBSD packa...
-
- It should be possible to selectively re-enable Mode 7 packets. This allows PTPd to take time from NTPd on the node. T...
-
- fix pushed
-
- net.inet.ip.dummynet.pipe_slot_limit only exists after dummynet is kldloaded, which comes after the sysctls are appli...
-
-
- Pull request https://github.com/pfsense/pfsense/pull/3026 has a proposed fix and longer explanation.
-
- For example, add a host alias, in the IP Address or FQDN box of the 1st entry put:
1:2:3:xy:4:5:6:7:8
This is acc... - 12:52 PM Revision 426b7b0c: Fix matching of chars in IPv6 address segments
- The existing regex here is wrong, it matches 0 or more of the hex digits but then there can be other rubbish in the s...
- 12:51 PM Revision 3ba22abd: Fix matching of chars in IPv6 address segments
- The existing regex here is wrong, it matches 0 or more of the hex digits but then there can be other rubbish in the s...
- 12:51 PM Revision a495f6b3: Merge pull request #3026 from phil-davis/patch-2
- 12:49 PM Revision a88f0ee6: Remove a-f from IPv4 address pattern
- It seems to me that a through f should not be part of the pattern for the "V4" case.
(cherry picked from commit 1f49d... - 12:49 PM Revision e4c5b7d4: Remove a-f from IPv4 address pattern
- It seems to me that a through f should not be part of the pattern for the "V4" case.
(cherry picked from commit 1f49d... - 12:48 PM Revision d16eec1f: Merge pull request #3025 from phil-davis/patch-1
-
- Add a host alias, in the IP Address or FQDN box of the 1st entry put:
1:2:3:::4:5:6:8 or 1:2:3:4:5:6:::8 or simila... -
- As noted above, it is correct as-is.
-
- It is correct - there is ~10 MB/s of data (download) coming in WAN (from the internet) and then that ~10 MB/s is goin...
-
02:20 AM Bug #6550 (Not a Bug): Bandwidth LAN IN/OUT reversed
- See attached screen shot.
WAN IN 10.14 MB/s
LAN OUT 10.11 MB/s
LAN IN 292.99 KB/s
LAN IN should be 10.11 MB/s - 06:39 AM Revision 8a950b3c: Fix matching of chars in IPv6 address segments
- The existing regex here is wrong, it matches 0 or more of the hex digits but then there can be other rubbish in the s...
- 04:50 AM Revision 1f49dd8a: Remove a-f from IPv4 address pattern
- It seems to me that a through f should not be part of the pattern for the "V4" case.
06/27/2016
- 11:31 PM Revision 86573bb9: Update include() to include_once()
- For safety, use include_once() when including various "side" files.
There are a couple of instances of include("guico... -
-
-
-
-
-
-
-
-
- There is no /etc/fstab post-install on 2.4.
-
- I was already looking at those, taking
-
- Issue:
Interface advanced dhcp client configuration
https://forum.pfsense.org/index.php?topic=87570
Two Availabl... - 07:16 PM Revision 71d3c2f7: Always use require_once
- The usage of require() and require_once() throughout the system is
inconsistent, and "bugs" come up now and then when... - 07:16 PM Revision aceaf18c: Always use require_once
- The usage of require() and require_once() throughout the system is
inconsistent, and "bugs" come up now and then when... - 07:15 PM Revision 687a1879: Merge pull request #3022 from phil-davis/require_once
-
-
-
- Looking at the code from dpinger it seems that this is not something we really can count on.
https://github.com/de... -
- Manuelly applied the change to my system.inc file. Seems to work. The static routes using a dynamic IPv6 WAN Gateway ...
-
-
-
-
-
-
-
-
-
-
-
-
- Specific text is in https://tools.ietf.org/html/rfc5952#section-4.3
Kicking back to ISP (who may blame their IPAM ... -
- Good point re RFC -- I'll have to kick that back to them. It is a Standards Track RFC after all.
-
- RFC 5952, uppercase is forbidden. This is true in all the screens that accept IPv6 addresses or networks.
We ough... -
- I noticed that the address fields in the Virtual IPs edit screen reject upper-case hex digits in IPv6 addresses.
T... -
-
-
-
- we're working through them.
-
- subject isn't true, there is a separate ticket for the DNS lookup page not supporting IPv6.
-
01:53 PM pfSense Packages Feature #6537: Suricata does not autopopulate IP Reputation list from Emerging Threats on rules update
- Tried importing manually, this does not work the way one would expect. Please close.
-
- we ship what's included in the FreeBSD version used.
-
- The version of tcpdump/libpcap in 2.3.1-x is lagging; this makes debugging IPv6 turn-ups slightly more difficult.
... -
- The log browser in the package tab only shows the first few lines for each log target.
Right now, it's easier to u... -
- pfSense logging is based around the FreeBSD base system's syslogd logging daemon.
This can be tricky to integrate ... -
- As far as I can see, this is not currently possible with mpd. If you need this sort of functionality, you'll have to ...
-
06:57 AM Feature #6545 (Needs Patch): Show active sessions and manually disconnect option to PPPoE server
- Hello,
It will be great to have "Users Logged In" option to PPPoE server services as Captive portal.
It could h... -
- First two sentences above are reversed -- my bad.
TL;DR -- a Cisco will let you advertise 'M' *and only 'M'*, caus... -
- pfSense IPv6 RA support in 2.3.1-x correctly includes the 'M' (Managed) bit in its advertisements.
By contrast, Ci... -
- We use an HPE switch to implement MAC layer security. It is configured to snoop DHCP request & inject Option 82 (RFC ...
-
- I have noticed from time-to-time that some IPv6 devices have taken a DHCPv6 dynamic lease, and do not show up in the ...
-
- (We understand there's a fix in progress for this, at least for IPv4.)
The DHCPv6 lease status tab lacks an option... -
- (This may also be a shortcoming in PF itself).
Currently there is no way to specify an ICMPv6 type range in the GU... - 05:00 AM Revision c81ef6e2: Always use require_once
- The usage of require() and require_once() throughout the system is
inconsistent, and "bugs" come up now and then when...
06/26/2016
-
- oh.. maybe for the same reason is not possible to resolve ipv6 addresses in firewall log...
-
11:43 AM
Bug #6536 (Resolved): update + reboot, did not trigger the webgui 90 second countdown
-
- Oké thanks, confirmed fixed when i updated today to "built on Sun Jun 26 08:40:49 CDT 2016" it worked as expected.
- 11:31 AM Revision 264ca54e: simplify DHCP_Config_Option_Split, no loop needed for returning option array
06/25/2016
-
10:49 PM pfSense Packages Bug #6521: pfsense 2.3.1 squidguard -> Groups ACL -> Target Rules List missing...
- It works if I change
squidguard_before_form_acl($pkg); to squidguard_before_form_acl($pkg,false);
in
/usr/local/pk... -
- The snort rules update process auto-populates the ET IP reputation list into SNORT_IPREP_PATH on rules update. Suric...
-
05:58 PM
Bug #6536 (Feedback): update + reboot, did not trigger the webgui 90 second countdown
- Thanks. This was fixed earlier this week and should be good in any snapshot since then.
-
- update + reboot, did not trigger the webgui 90 second countdown
Coming from a snapshot about 5 days old i think now ... -
- Hi Chris,
i post in open thread, but in my setup the file you ask isn't present.
--
Mario (Marlenio) -
01:41 PM pfSense Packages Bug #6305: Quagga problems updating routes / mistakenly showing "kernel"-routes while they are not
- Okay ... I have to set-up already that if i upgrade the package back to the new one, the issue will happen. Jim ... ...
-
- github pullrequests, please pull or comment
There are quite a few pullrequests pending on github without any reaso... -
- Unbound returns AAAA records just perfectly fine as you can see from shell (using host, drill or whatever). That page...
-
- DNS resolver doesn't returns AAAA records.
From web gui: Diagnostics --> DNS Lookup
If FQDN has A and AAAA records ... - 06:34 AM Revision 57d6340b: bring back subnetv4_expand function used by pfblockerng
- 06:34 AM Revision 2208be8b: bring back subnetv4_expand function used by pfblockerng
- 04:02 AM Revision 51e30c40: Use the translated destination for kill_states if one exists. Ticket #6531
- 04:02 AM Revision 515f53a8: Use the translated destination for kill_states if one exists. Ticket #6531
- 04:01 AM Revision e6ddb55e: Use the translated destination for kill_states if one exists. Ticket #6531
- 03:23 AM Revision ebb1e0a5: Correct/clarify column header. Ticket #6530
- 03:23 AM Revision ea81ba1c: Correct/clarify column header. Ticket #6530
- 03:22 AM Revision 31f171e4: Correct/clarify column header. Ticket #6530
- 03:20 AM Revision d4f9997b: Fix style
- 03:20 AM Revision 51a3acee: Fix style
- 03:20 AM Revision 4e658db2: Fix style
- 03:19 AM Revision e565e949: pfSense_get_pf_states always returns source as src and dest as dst, this flipping based on direction is wrong. Ticket #6530
- 03:18 AM Revision ad5fb4a0: pfSense_get_pf_states always returns source as src and dest as dst, this flipping based on direction is wrong. Ticket #6530
- 03:18 AM Revision ab86e2d6: pfSense_get_pf_states always returns source as src and dest as dst, this flipping based on direction is wrong. Ticket #6530
- 02:59 AM Revision 84c7a8f3: Fix style
- 02:59 AM Revision e41468cf: Fix style
- 02:59 AM Revision 76933fc6: Fix style
-
- Sorry, but it shouldn't have been merged in the first place. There is discussion on the forum NOYB linked as to why. ...
-
- The RA page should allow configuration of Min and MaxRtrAdvInterval.
-
- works in Chrome, Firefox, Safari, Opera and IE.
-
- subject is definitely not true, please post to the forum for troubleshooting assistance.
-
12:10 AM Bug #6532 (Not a Bug): LAN rule with gateway left at default stops traffic.
- I have a LAN rule where a specific host goes over a VPN gateway.
The rule is super LAN simple - IPv4 *, source ho... -
12:07 AM Revision 2556e623: Add include of functions.inc for declaration of gettext
-
- 12:06 AM Revision 44308ac0: Merge pull request #3013 from dennypage/master
06/24/2016
-
- works
-
- fixed
-
- Nice catch, Harry.
Looks like this should be easy to fix, Luiz please review. -
09:22 PM Bug #6494: Hang during bootup on lock('filter.lock')
- I've got a case that hangs every type as noted above. And I have a patch.
/cf/hc_filterlog:
#!/bin/tcsh
3>&-... -
- fix pushed
-
- diag_dump_states.php kill states passes the srcip and destip to pfSense_kill_states in all cases. That doesn't match ...
-
- also fixed the column header description.
-
- diag_dump_states.php gets source and destination wrong on the kill states option for the 'in' direction.
-
-
If you wish to discuss it, options, and alternatives.
New DNS Resolver Overrides Page
https://forum.pfsense.o... -
-
02:32 PM Bug #6529 (Duplicate): dhcp6c fails to start with track6 on a bridge interface
- I noticed today that IPv6 wasn't working, and found this in the dhcpd log....
-
-
- Hi Chris,
> > I'm not sure what circumstance triggers this, but judging by the number of reports in that thread t... -
- It's a specific 2.4 change, only in master branch
This reverts commit 00a7688401c15015c3f43735b2b1536ebfec7e92. -
07:51 AM Bug #6177: pkg update checking with no Internet access kills web GUI
- edit.
-
- edit
-
- Chris Buechler wrote:
> IPv6 works just fine on pkg.pfsense.org. You're not hitting the issue here, please start a... - 06:36 AM Revision 412a9cd0: Include interface scope on IPv6 static routes to link local gateway IPs. Ticket #6506
- 06:35 AM Revision 8e8108e6: Include interface scope on IPv6 static routes to link local gateway IPs. Ticket #6506
- 06:35 AM Revision eea84f0a: Include interface scope on IPv6 static routes to link local gateway IPs. Ticket #6506
-
05:46 AM Bug #6528 (Resolved): The captive portal cannot be used on interface lan since it is part of a bridge but works anyway
- Hello,
I've setup a captive portal on my LAN interface.
Later, I've setup a OpenVPN tap connection where the tap1... - 02:22 AM Revision 72a6e5d0: Comment typo
- (cherry picked from commit b069f77e0a5e355e811dd7bd4a4d17a802a3f682)
- 02:22 AM Revision 0bcda37b: Comment typo
- (cherry picked from commit b069f77e0a5e355e811dd7bd4a4d17a802a3f682)
- 02:21 AM Revision b069f77e: Comment typo
-
- fix pushed to always include interface scope on static routes to a link local v6 gateway IP.
06/23/2016
-
10:38 PM pfSense Packages Bug #6527: Squid 3.5 - Deprecated "ssl_bump server-first all" don't allow SNI in transparent mode with HTTPS/SSL Interception
- Edited in order to add more information about ssl peek and splice
http://wiki.squid-cache.org/Features/SslPeekAndS... -
- As described in the squid wiki, "ssl_bump server-first all" is deprecated in squid 3.5+
http://wiki.squid-cache.or... - 10:22 PM Revision 5a42473b: Revert "adding privileges and separating DNS Resolver overrides from general settings"
- This reverts commit fc76a1e390c8ce9579df31457c74d1d0e572b78d.
- 10:22 PM Revision 8b056044: Revert "adding privileges and separating DNS Resolver overrides from general settings"
- This reverts commit fc76a1e390c8ce9579df31457c74d1d0e572b78d.
- 10:21 PM Revision bc54d32d: Revert "adding privileges and separating DNS Resolver overrides from general settings"
- This reverts commit fc76a1e390c8ce9579df31457c74d1d0e572b78d.
-
05:55 PM Feature #6210: create user privilege for only DNS Host and Domain Overrides in DNS Resolver
- Chris Buechler wrote:
> This isn't desirable. We don't want to add yet another new menu item, for a use case that I ... -
- This isn't desirable. We don't want to add yet another new menu item, for a use case that I think you're the only per...
-
- (cherry picked from commit 5c403f843291bdc670dcdb45e1e097f2eb7f36ab)
-
- (cherry picked from commit 5c403f843291bdc670dcdb45e1e097f2eb7f36ab)
- 05:34 PM Revision 4db9f6d0: Merge pull request #3019 from NOYB/RFC2136_Client_Edit_Priv_Def
- 05:33 PM Revision c0b34e4c: Load actual value of webguihostnamemenu
- This is a string from a list of valid values (empty, "hostonly", "fqdn"). So it is not correct to just gather a true/...
- 05:33 PM Revision 0f6e77fd: Load actual value of webguihostnamemenu
- This is a string from a list of valid values (empty, "hostonly", "fqdn"). So it is not correct to just gather a true/...
- 05:32 PM Revision 6d62e15a: Merge pull request #3017 from phil-davis/patch-2
- 05:31 PM Revision 9c025aa5: Restored countdown functionality and menu refresh on successful update/remove/install
- Added comments to clarify operation of the page
(cherry picked from commit 18295ff2f907f638afa9f7c665cc16e4262e6899) - 05:31 PM Revision dbf01363: Restored countdown functionality and menu refresh on successful update/remove/install
- Added comments to clarify operation of the page
(cherry picked from commit 18295ff2f907f638afa9f7c665cc16e4262e6899) - 05:30 PM Revision 18295ff2: Restored countdown functionality and menu refresh on successful update/remove/install
- Added comments to clarify operation of the page
-
- Nicola Bressan wrote:
> I've experienced a similar issue.
>
> can you have a look in it?
> or maybe fix IPv6 ans... -
- hello,
I've experienced a similar issue.
pfSense 2.3.1_5
IPv6 tunnel configured
pfSense in GUI was checking ... -
-
-
-
-
-
-
-
-
-
- Maybe this is somehow related to https://redmine.pfsense.org/issues/6515
When submitting a change in interfaces_assi... -
06:46 AM Bug #6400: assign_interfaces.php issues with large numbers of interfaces
- We have been doing some testing on one of our sites.
Under 2.2.4 no issue with 100 vlans, under 2.3.1-RELEASE-p5 a... -
06:51 AM Feature #6526 (Closed): pfSense Update information via SNMP
- For automatic update checking with monitoring systems like Icinga it would be great to have the update status of the ...
-
- We have been doing some testing on one of our sites.
Under 2.2.4 no issue with 100 vlans, under 2.3.1-RELEASE-p5 a... -
05:53 AM Bug #6495: No default route on PPPoE after reconnect or IP change in some cases
- Same here. After reconnect (PPPoE) there was no default route set.
-
-
- ok let's wait for this then!
-
- I have some code under review that allows custom GUI preference settings per user.
https://redmine.pfsense.org/issue... -
- yes that solves the problem, but I find very handy to have it fixed when I use it with a normal web browser at home a...
-
- Try changing System->General Setup, webConfigurator section, Top Navigation. Set it to "Scrolls with page". That shou...
-
- When accessing pfSense web interface from mobile device and selecting a menu with long list of items (like "Services"...
-
- Note: New pull request https://github.com/pfsense/pfsense/pull/3018 has the proposed solution all in 1 commit that is...
- 02:53 AM Revision 8bab524e: Feature #6388 custom GUI preference settings per user
- 01:50 AM Revision e93242eb: Load actual value of webguihostnamemenu
- This is a string from a list of valid values (empty, "hostonly", "fqdn"). So it is not correct to just gather a true/...
- 01:07 AM Revision 0ce30f4a: Clarify ports alias hint. Ticket #6523
- 01:07 AM Revision 9e45ab6d: Clarify ports alias hint. Ticket #6523
- 01:06 AM Revision 9a17d293: Clarify ports alias hint. Ticket #6523
06/22/2016
-
- confirmed, thanks
-
- No, with pushed to the system i mean: When the static route that you've added using the WebUI is getting added to the...
- 10:55 PM Revision 332a64d0: Allow passing comma in string quoted DHCP client options
-
08:37 PM Revision 4be27df6: add traffic totals package
-
-
- clarified hint
-
- It works as it always has, and as intended. Each box can only contain a single port or range.
I'll clarify the de... -
08:11 AM Bug #6523 (Resolved): Firewall/Aliases/Ports: Unclear description and/or result of desired format
- Current hint is: "Enter as many ports as desired. Port ranges can be expressed by separating with a colon."
Expect... -
- it's workable just fine. You can't have the same subnet on two diff interfaces of any firewall/router. You have some ...
-
06:12 PM Bug #6524 (Not a Bug): 192.168.100.0/24 subnet with Cable Modem WAN un-workable
- So here is the scenario i ran into today.
Customer Subnet is 192.168.100.1/24
Customer WAN IP is 174.77.55.XX6/28... -
- No problem, thanks for checking. Marking as resolved.
-
- Thx, todays snap is OK.
-
04:42 PM Bug #6495: No default route on PPPoE after reconnect or IP change in some cases
- Just to let you know, unfortunately this hasn't solved my issue, and the line is dead again.
-
- Hi Chris,
> I'm not sure what circumstance triggers this, but judging by the number of reports in that thread ther... -
- Yep, it's static in as much as it's supposed not to alter, and is the way that most "static IP" addresses are dished ...
-
- Michael Knowles wrote:
> p.s. - The ADSL i'm using in this instance has a "static IP" delivered from the ISP via DHC... -
- p.s. - The ADSL i'm using in this instance has a "static IP" delivered from the ISP via DHCP (or whatever mechanism i...
-
- Hi,
I'm the author of Bug #6423. This bug sounds remarkably similar to my symptoms.
I'm going to get the onsit... -
-
-
- 03:57 PM Revision bb44b41a: Fix Bug #6394 - Incorrect Output of Translation
- Apparently gettext() does not behave correctly when passed an empty string, this commit ensures gettext() is called o...
- 03:57 PM Revision 94b5eb1f: Fix Bug #6394 - Incorrect Output of Translation
- Apparently gettext() does not behave correctly when passed an empty string, this commit ensures gettext() is called o...
- 03:57 PM Revision 44de9a2d: Merge pull request #3011 from NewEraCracker/redmine-6394
-
- (cherry picked from commit 40d7e4bee91246db09cc88141869abcd37390bc7)
-
- (cherry picked from commit 40d7e4bee91246db09cc88141869abcd37390bc7)
- 03:54 PM Revision c0643ee4: Merge pull request #3010 from NOYB/Remove_Duplicate_ListTags_Entry
-
- Function isn't used in main or packages repo, and in any case would need a complete rewrite to handle IPv6.
(cherry p... -
- Function isn't used in main or packages repo, and in any case would need a complete rewrite to handle IPv6.
(cherry p... - 03:47 PM Revision 24f97159: Merge pull request #3006 from stilez/patch-33
- 03:45 PM Revision 8c512801: Fix #6482 OpenVPN Redirect Gateway Option Causes GUI Issue
- This fixes the GUI inconsistency reported in the referenced bug. On edit of an OpenVPN server that has tun mode, not ...
- 03:45 PM Revision 8cec6ee6: Fix #6482 OpenVPN Redirect Gateway Option Causes GUI Issue
- This fixes the GUI inconsistency reported in the referenced bug. On edit of an OpenVPN server that has tun mode, not ...
- 03:44 PM Revision 8a63f7f0: Merge pull request #3005 from phil-davis/patch-4
- 03:43 PM Revision 4a89ba61: added missing div.content wrapper when reloading filters
- (cherry picked from commit e8406abe627675db2c2f77a81c1bb883f5158bb6)
- 03:43 PM Revision 73578b77: added missing div.content wrapper when reloading filters
- (cherry picked from commit e8406abe627675db2c2f77a81c1bb883f5158bb6)
- 03:43 PM Revision 6f054658: Merge pull request #3004 from hailthemelody/master
- 03:41 PM Revision 2031be9c: Fix PHP Warning about invalid argument supplied for foreach
- If _POST['members'] or _POST['groups'] is not set / none selected at GUI, it would give a warning on crash reporter (...
- 03:41 PM Revision 0e5ebefd: Fix PHP Warning about invalid argument supplied for foreach
- If _POST['members'] or _POST['groups'] is not set / none selected at GUI, it would give a warning on crash reporter (...
- 03:40 PM Revision 1705d6ed: Merge pull request #3002 from NewEraCracker/patch-invalid-foreach
- 03:39 PM Revision 50264b58: Fix bad escapeshellarg logic on mpd execution
- With this change single-quotes are applied in correct places
(cherry picked from commit 08cd022545be58a46b860500ff81... - 03:39 PM Revision 631c29af: Fix bad escapeshellarg logic on mpd execution
- With this change single-quotes are applied in correct places
(cherry picked from commit 08cd022545be58a46b860500ff81... - 03:38 PM Revision 6c94ebc3: Merge pull request #3001 from NewEraCracker/patch-pppoe-mpd
- 03:32 PM Revision 4125445f: Do not allow deleting your own user name
- Currently if you delete your own user name, then the config ends up with a blank user tag in it. Rather than fix that...
- 03:31 PM Revision 01a0385e: Do not allow deleting your own user name
- Currently if you delete your own user name, then the config ends up with a blank user tag in it. Rather than fix that...
- 03:31 PM Revision 5522c61f: Merge pull request #2989 from phil-davis/patch-2
-
- (cherry picked from commit 70381d4803b9424c1a3f3ef518d8243062452d77)
-
- (cherry picked from commit cf63f1638aab685cc956502f5ddd862a10bf3ff8)
-
- to match edit to util.inc
(cherry picked from commit c57e936a6596550619f7261e85b633ca5016cbf2) -
- 1) Function can be simplified and all "if" statements removed, using intdiv (or casting result as int for PHP < 7) an...
-
- (cherry picked from commit 70381d4803b9424c1a3f3ef518d8243062452d77)
-
- (cherry picked from commit cf63f1638aab685cc956502f5ddd862a10bf3ff8)
-
- to match edit to util.inc
(cherry picked from commit c57e936a6596550619f7261e85b633ca5016cbf2) -
- 1) Function can be simplified and all "if" statements removed, using intdiv (or casting result as int for PHP < 7) an...
- 03:22 PM Revision 2ed50d13: Merge pull request #2988 from stilez/patch-28
-
- Useful function in some circumstances - seems no reason not to have it.
Uses IP rather than hostname since not all A... -
- Useful function in some circumstances - seems no reason not to have it.
Uses IP rather than hostname since not all A... - 03:17 PM Revision dbef2183: Merge pull request #2987 from stilez/patch-27
- 03:15 PM Revision d1626706: Fix NTP PPS. It had 'None' option available on 2.2.x.
- (cherry picked from commit ceabd66d57f7199602d3a23cb8a60080bcfa67ea)
- 03:14 PM Revision 2a68fcd3: Fix "Unable to remove NTP GPS from configuration"
- https://forum.pfsense.org/index.php?topic=112771.msg627573
(cherry picked from commit 55de528cbb177b4a1f40554ad1a5671... - 03:14 PM Revision 74d0b334: Fix NTP PPS. It had 'None' option available on 2.2.x.
- (cherry picked from commit ceabd66d57f7199602d3a23cb8a60080bcfa67ea)
- 03:14 PM Revision 8d179341: Fix "Unable to remove NTP GPS from configuration"
- https://forum.pfsense.org/index.php?topic=112771.msg627573
(cherry picked from commit 55de528cbb177b4a1f40554ad1a5671... - 03:14 PM Revision e786d286: Merge pull request #2986 from NewEraCracker/patch-ntp-gps
-
- (cherry picked from commit f208e9690e2ec4089cf3d3fe5f5f03fed5a36e6f)
-
- (cherry picked from commit 01b5410ae8391998ba560d40f447c7f556472c5b)
-
- backups should be a numeric int.
text hint for number of backups can now refer to the global value for this platform ... -
- At the same time the platform is being detected for PHP/GUI purposes, set the default number of backups. Also handle ...
-
- (cherry picked from commit ca55edc39342865816feef390616be8b770c889b)
-
- (cherry picked from commit f208e9690e2ec4089cf3d3fe5f5f03fed5a36e6f)
-
- (cherry picked from commit 01b5410ae8391998ba560d40f447c7f556472c5b)
-
- backups should be a numeric int.
text hint for number of backups can now refer to the global value for this platform ... -
- At the same time the platform is being detected for PHP/GUI purposes, set the default number of backups. Also handle ...
-
- (cherry picked from commit ca55edc39342865816feef390616be8b770c889b)
- 03:11 PM Revision 4c93645c: Merge pull request #2982 from stilez/patch-26
-
- (cherry picked from commit b56769c30a23af9f575ee4a5f056558ef8322f95)
-
- Large keys are not "slower to use" in many cases, since they are only used to validate or set up a session. An ongoin...
-
- (cherry picked from commit 7c684f3b95f641134496bc1210cfb2d814468767)
-
- ...and add some useful info to guide the user.
(cherry picked from commit 49810252681df9bd553e2221c885ceffaa2c4c7f) -
- Add key lengths to the OpenVPN options, for asymmetric keys of size 3072 (for current use), 7680, 15360 (for long ter...
-
- (cherry picked from commit b56769c30a23af9f575ee4a5f056558ef8322f95)
-
- Large keys are not "slower to use" in many cases, since they are only used to validate or set up a session. An ongoin...
-
- (cherry picked from commit 7c684f3b95f641134496bc1210cfb2d814468767)
-
- ...and add some useful info to guide the user.
(cherry picked from commit 49810252681df9bd553e2221c885ceffaa2c4c7f) -
- Add key lengths to the OpenVPN options, for asymmetric keys of size 3072 (for current use), 7680, 15360 (for long ter...
- 03:05 PM Revision e98865a8: Merge pull request #2942 from stilez/patch-22
-
03:03 PM Revision ef609a57: Added option to System > General Setup > webConfigurator to change the title of the Help menu in the navbar to either the system hostname or fqdn.
- (cherry picked from commit 1d12996755ee6fb9b9e163d292bdba160a926e64)
-
- (cherry picked from commit 1d12996755ee6fb9b9e163d292bdba160a926e64)
- 03:02 PM Revision 612e27ac: Merge pull request #2935 from cfazendin/hostname_menu
-
02:55 PM Revision b8eb4e7f: Make QinQ interfaces work again
- (cherry picked from commit 1322ee22354f1a6e184819fb7009a2996b63de97)
-
- (cherry picked from commit 1322ee22354f1a6e184819fb7009a2996b63de97)
- 02:55 PM Revision 253919a5: Merge pull request #2906 from Chrisc-c-c/Fix-QinQ-Interfaces
- 02:50 PM Revision ab8c4106: Allow IGMP Proxy logging verbosity to be selected via system log settings (PR 2901)
- (cherry picked from commit 2bd0585e30e5ec8fc3b79ca3f579bf9a7c1bcbc8)
- 02:50 PM Revision 61d6a840: Allow IGMP Proxy logging verbosity to be selected via system log settings (PR 2901)
- (cherry picked from commit 2bd0585e30e5ec8fc3b79ca3f579bf9a7c1bcbc8)
- 02:49 PM Revision 2bd0585e: Allow IGMP Proxy logging verbosity to be selected via system log settings (PR 2901)
-
02:18 PM Revision 1ac8faed: adding privileges and separating DNS Resolver overrides from general settings
- (cherry picked from commit fc76a1e390c8ce9579df31457c74d1d0e572b78d)
-
- (cherry picked from commit fc76a1e390c8ce9579df31457c74d1d0e572b78d)
- 02:18 PM Revision dbab5a7e: Merge pull request #2891 from gottaloveit/dns-overrides-privs
-
02:14 PM Bug #6099: igmpproxy does not recognize upstream interface
- As said my provider is using IGMPv3 which I cannot get to work (so I will stay on 2.2.6 for the time being).
I've ... -
- Greg Myran wrote:
> I want to thank you again for your efforts.
You're welcome,
> I've moved my multicast traffic... - 02:07 PM Revision fe2b8de7: Force 4096 RSA keys
- Add option `-b 4096` to force the keys to 4096-bit.
This parameter is ignored for Ed25519 keys.
(cherry picked from... - 02:07 PM Revision 1ffd4c51: Harden sshd_config
- The changes are better explained in the following article:
https://stribika.github.io/2015/01/04/secure-secure-shell... - 02:06 PM Revision 088ffabc: Force 4096 RSA keys
- Add option `-b 4096` to force the keys to 4096-bit.
This parameter is ignored for Ed25519 keys.
(cherry picked from... - 02:06 PM Revision a9274a80: Harden sshd_config
- The changes are better explained in the following article:
https://stribika.github.io/2015/01/04/secure-secure-shell... - 02:05 PM Revision 90913bc7: Merge pull request #2783 from jlduran/harden-sshd_config
- 12:47 PM Revision 384ffced: Fixed #6504 by making table sortable
- (cherry picked from commit 55f67b5abd9b809807e328477779d97120908273)
- 12:47 PM Revision 4a4a4c41: Fixed #6504 by making table sortable
- (cherry picked from commit 55f67b5abd9b809807e328477779d97120908273)
- 12:45 PM Revision 55f67b5a: Fixed #6504 by making table sortable
- 11:45 AM Revision 76f6498f: jQuery datepicker added to interfaces.php and interfaces_ppps_edit.php for setting custom expirey date
- (cherry picked from commit d85d82b7686d5899948e6ec4b1587e74937820cf)
- 11:45 AM Revision df38ab93: jQuery datepicker added to interfaces.php and interfaces_ppps_edit.php for setting custom expirey date
- (cherry picked from commit d85d82b7686d5899948e6ec4b1587e74937820cf)
- 11:43 AM Revision d85d82b7: jQuery datepicker added to interfaces.php and interfaces_ppps_edit.php for setting custom expirey date
- 11:27 AM Revision 246be5d3: Fixed #6516 by replacing HTML5 datepicker with jQuery widget
- (cherry picked from commit 53c38ff16c1eb8743e69d506f69167c88cf34910)
- 11:27 AM Revision f11862a3: Fixed #6516 by replacing HTML5 datepicker with jQuery widget
- (cherry picked from commit 53c38ff16c1eb8743e69d506f69167c88cf34910)
- 11:26 AM Revision 53c38ff1: Fixed #6516 by replacing HTML5 datepicker with jQuery widget
-
08:23 AM Bug #6520: Time out when trying to look at interfaces_assign.php
- Here are the logs :
Jun 22 15:21:51 fw2.ds nginx: 2016/06/22 15:21:51 [error] 21284#0: *121 upstream timed out (60: ... -
- Hello,
Since the update in 2.3, I get a time out when trying to reach interfaces_assign.php. Then the whole web inte... -
07:50 AM
Feature #6504: services_dhcp.php: DHCP Static Mappings table should be sortable
- Applied in changeset commit:55f67b5abd9b809807e328477779d97120908273.
-
07:41 AM
Feature #6504 (Feedback): services_dhcp.php: DHCP Static Mappings table should be sortable
- Table is now sortable as requested
-
07:39 AM
Feature #6504 (Assigned): services_dhcp.php: DHCP Static Mappings table should be sortable
-
- With plain PSK auth you enter the Identifiers and keys on the PSK tab and/or in the PSK field on accounts in the user...
-
06:52 AM Bug #6522 (Not a Bug): Mobile IPSec with PSK does not supply option to provide PSK
- When I create the IPsec for the mobile clients, I choose PSK as Phase1 security. However, I cannot select any predefi...
-
- Hi Jim,
You made the right considerations. I'll continue to use the manual option.
Thanks in advance,
--
Mario -
- No, it is not. The option cannot be changed while the disk is mounted. Also, hardware support for TRIM is not univers...
-
- Hi,
It would be possible to add an option to enable TRIM SSD in the GUI instead of via command line? -
06:30 AM
Bug #6516: Calendar date picker on system_usermanager.php only works in Chrome
- Applied in changeset commit:53c38ff16c1eb8743e69d506f69167c88cf34910.
-
06:28 AM
Bug #6516 (Feedback): Calendar date picker on system_usermanager.php only works in Chrome
- HTML5 datepicker replaced with jQuery widget. It seems that Chrome and Opera are the only browsers that implement the...
-
06:23 AM Feature #2358: NAT64 support
- UPVOTE
-
- The clickable "Target Rules List" field in menu "Groups ACL" disappears if more than 3 "Target categories" are define...
-
02:58 AM Bug #6518 (Closed): IPsec phase 1 VPN not working with IPv6+DNS with "My IP Address" as identifier
- Hi,
I'm running pfSense : ... -
02:37 AM Revision 9e680116: fix rowhelper select_source empty combo
- while using $config['installedpackage']{['...'] as source
-
- while using $config['installedpackage']{['...'] as source
- 02:37 AM Revision bc8b18a9: Merge pull request #3015 from marcelloc/patch-4
- 01:25 AM Revision cb74937f: add htop to poudriere_bulk
- 01:25 AM Revision e388275c: add htop to poudriere_bulk
- 01:25 AM Revision e9ac4800: add htop to poudriere_bulk
- 12:40 AM Revision ac3e3baa: Only call interfaces_vips_configure once if it's needed, rather than doing the same thing over and over for every VIP on an interface. Ticket #6515
- 12:40 AM Revision 6fd9645e: Only call interfaces_vips_configure once if it's needed, rather than doing the same thing over and over for every VIP on an interface. Ticket #6515
- 12:40 AM Revision d75c55fb: Only call interfaces_vips_configure once if it's needed, rather than doing the same thing over and over for every VIP on an interface. Ticket #6515
-
- Dmitriy K wrote:
> This fix wont be pushed in current stable?
Needed to be confirmed in 2.3.2 snapshots first.
... -
- Waldo Nell wrote:
>
> string(10) "10.200.1.1"
> int(16)
that's correct, and exactly what it's checking for the... -
- a firewall isn't a NAS, trying to be one isn't of interest.
06/21/2016
-
- Daniel Hoffend wrote:
> when a static route gets pushed to the system
What do you mean by "pushed to", that via ... -
- It's probably similar to this: https://forum.pfsense.org/index.php?topic=112358.0.
It could be replaced with the ... -
- The calendar date picker on system_usermanager.php doesn't show up in any browser other than Chrome from the looks of...
-
-
- Tomas Ulicky wrote:
>
> Why deleted target version?
Duplicate closed tickets need that removed so it doesn't me... -
- works
-
- Applied in changeset commit:a08208f81bcb2812bdda07e21b501447fb350408.
-
- In some cases, a process can crash and the resulting core file fills /var/run/ if that was the working directory for ...
-
- works
-
05:00 PM
Bug #6514 (Feedback): services_captiveportal_zones_edit.php: Zone name cannot start with a number
- Applied in changeset commit:f0a053846d6cde2724c47b5553e1395cfd21445c.
-
- The zone name on services_captiveportal_zones_edit.php is used as an XML tag name and needs to follow the relevant st...
-
-
-
- It's likely not one NIC driver that's in question, as there definitely aren't any issues with e1000, and probably not...
-
04:30 PM Bug #6512: Upgrade to 2.3.1 causes network performance degradation (with High CPU usage by NIC kernel tasks)
- And perhaps this post has the same problem
https://forum.pfsense.org/index.php?topic=113529.0
-
- Obviously there's a performance regression. It may have to do with our hardware, but:
# This wasnt present on previ... -
- that's something to do with your combination of hardware, which isn't anything we support. There aren't any general p...
-
- Hi,
Currently we have a 2-node pfsense system working in active/passive HA. This cluster was running pfsense v2.2.... -
- strongswan doesn't pick up the new leftsubnet config (though it's correctly shown in statusall) when doing a reload. ...
-
10:06 PM Bug #6517 (Confirmed): Adding mobile IPsec phase 2 entries requires restart of strongswan
- Using mobile IPsec on 2.3.1-RELEASE-p1 and using OS X 10.11.4 on the client side, I find that when I add additional P...
-
-
- 10:23 PM Revision fb0ecb7a: Fix style
- 10:23 PM Revision 55a72d31: Fix style
- 10:23 PM Revision 616161d5: Fix style
- 10:11 PM Revision e08b45e4: require_once auth.inc in vpn.inc since it uses functions from there, though normal use of the system won't require that, those who run certain things manually/custom may require it
- 10:11 PM Revision e4f7da85: require_once auth.inc in vpn.inc since it uses functions from there, though normal use of the system won't require that, those who run certain things manually/custom may require it
- 10:10 PM Revision 87a898b1: require_once auth.inc in vpn.inc since it uses functions from there, though normal use of the system won't require that, those who run certain things manually/custom may require it
-
- works
-
01:40 PM
Bug #6498: firewall_nat_npt_edit.php: IPv4 addresses can be entered, but the page is only for IPv6
- Applied in changeset commit:3e4adb7139b4cddbb06a2aba7e0727d1762b35ee.
-
01:28 PM
Bug #6498 (Feedback): firewall_nat_npt_edit.php: IPv4 addresses can be entered, but the page is only for IPv6
- A new optional argument is supported for inputs of type IpAddress. $type can be "BOTH", "V4" or "V6" and will enforce...
-
10:24 AM
Bug #6498 (Assigned): firewall_nat_npt_edit.php: IPv4 addresses can be entered, but the page is only for IPv6
- 09:56 PM Revision c513ef24: Fixed #6514 by requiring string starts with letter ot underscore
- (cherry picked from commit f0a053846d6cde2724c47b5553e1395cfd21445c)
- 09:55 PM Revision 421431bc: Fixed #6514 by requiring string starts with letter ot underscore
- (cherry picked from commit f0a053846d6cde2724c47b5553e1395cfd21445c)
- 09:55 PM Revision f0a05384: Fixed #6514 by requiring string starts with letter ot underscore
-
- I'm not sure what circumstance triggers this, but judging by the number of reports in that thread there is something....
-
- while using $config['installedpackage']{['...'] as source
- 08:25 PM Revision 7253e407: Only omit aggressive line from ipsec.conf where IKEv2. Ticket #6513
- 08:25 PM Revision 201b24e7: Only omit aggressive line from ipsec.conf where IKEv2. Ticket #6513
- 08:24 PM Revision 03de0c24: Only omit aggressive line from ipsec.conf where IKEv2. Ticket #6513
-
- fix pushed. Confirmed that still does all the necessary actions, and eliminates the delays by not doing the same thin...
-
- link_interface_to_vips when called with the update parameter calls interfaces_vips_configure once per VIP on the inte...
- 06:49 PM Revision 0891d12f: Fixed #6498 by providing new address type argument to Form_IpAddress(). In this case it is specified as "V6".
- (cherry picked from commit 3e4adb7139b4cddbb06a2aba7e0727d1762b35ee)
- 06:47 PM Revision 2c4af48f: Fixed #6498 by providing new address type argument to Form_IpAddress(). In this case it is specified as "V6".
- (cherry picked from commit 3e4adb7139b4cddbb06a2aba7e0727d1762b35ee)
-
- (cherry picked from commit 5051739d72d31f8bd250148dfa65213723275310)
- 06:40 PM Revision 00a76884: Incorporated ssl changes
- 06:29 PM Revision 3e4adb71: Fixed #6498 by providing new address type argument to Form_IpAddress(). In this case it is specified as "V6".
-
- It's not just that - the clone/duplicate/whatnot button is borked in general. E.g., when you "duplicate" an ACL, the ...
-
- 1. The blank entries shouldn't be created.
2. The blank entries should be ignored on the backend.
See: RPL-94792 -
-
- Thanks for taking the time to make a detailed report!
It looks like I was able to fix both issues and just pushed ... -
- Hi!
On latest snaps monitoring is not displaying graphs correctly when both axes are selected.
See attached scree... -
- fix pushed
-
- IKE mode auto omits aggressive from ipsec.conf, leaving it always disabled
-
-
-
-
-
-
-
03:32 AM pfSense Packages Feature #6508 (Closed): OSPF v3 - Quagga OSPF6d
- Hi,
Can you implement, in a future release, the OSPFv3 for IPv6?
In advance tank you -
01:42 AM Bug #6496: Squid HTTPS Certificed enable Unable to determine IP address from host name http
- Chris Buechler wrote:
> pretty sure that's a config issue, not a bug.
So what is the solution of this
I think it... -
01:29 AM Bug #3022: OpenVPN does not failover to the 2nd configured LDAP auth.server
- Facing the same issue.
Currently we have 2 entries for 'Backend for authentication' selected (Active Directory domai...
06/20/2016
-
-
-
-
- My test setup contains 2 gre tunnels, but to reproduce the issue 1 gre tunnel is sufficient.
*Tunnel1*
* Local ... -
- *Setup*
The WAN Interface of my pfsense firewall is connected to our homenetwork. The "real" wan connection (dsl r... -
05:37 PM Bug #4479: Firewall rules won't match GRE interface after applying IPSEC transport encryption on GRE tunnel
- I can confirm this still happens with both GRE and GIF tunnels over IPsec on pfSense 2.3.1
-
- With redunced Gateway name (max 5 chars) I could make the dpinger work and start properly. I even can see the icmp6 r...
-
- The combination of gateway name + link-local dhcp6 address + vlan interface name create a very long socket name. In m...
-
05:02 PM Bug #6099: igmpproxy does not recognize upstream interface
- I want to thank you again for your efforts. I've moved my multicast traffic onto it's own physical interface on my P...
-
- Greg Myran wrote:
> [...] I am now starting to suspect the new method of finding network interfaces may see the addi... -
- When getting an address assigned from a DHCPv6 Server pfSense automatically creates a gateway to monitor using the li...
-
-
-
-
- Currently the `DHCP Static Mappings table` inside `Services->DHCP Server` isn't sortable where it should be.
Aside... -
- +1 for this feature -- it's pretty much essential for implementing PKI across an infrastructure.
So I wanted to en... -
-
-
-
-
-
-
-
-
-
- I'd like to request to reopen this issue.
IMHO it's not semantic to use different hostnames for the same host. A h... -
08:15 AM Bug #6503 (Resolved): rrd graph for ntp monitoring does not reflect freq when neg (-) value.
- Seems when frequency is negative (-) It is not graphed.
Thread here asking for confirmation
https://forum.pfsense... -
- Hi Chris,
> followed up in your forum thread.
In the past weekend i made more test with different ISP: i live i... -
06/19/2016
- 05:40 PM Revision 6ae99aba: Fix Bug #6394 - Incorrect Output of Translation
- Apparently gettext() does not behave correctly when passed an empty string, this commit ensures gettext() is called o...
-
04:33 PM pfSense Packages Feature #6502 (Closed): Add samba in the available packages
- Hello
I don't know if I'm writing this in the right place if not then I apologise.
My request is that add in the av... -
- 4. Is IPv6 catered for by its own functionality, if not does this need an IPv6 equivalent and what would that look li...
-
- A couple of days ago I put a PRE into Github to remove the subnet_expand() function. It isn't used anywhere in the co...
-
12:42 PM Bug #6394: INCORRECT OUTPUT OF TRANSLATION
- This PR should fix the issue:
https://github.com/pfsense/pfsense/pull/3011
Apparently gettext() does not behave c... -
- I did some more troubleshooting and here are some additional details.
If I start igmpproxy with IPv6 disabled, the... -
04:48 AM Feature #6365: Current images do not install on UEFI Machines
- Chris Buechler wrote:
> duplicate of #4044
Why deleted target version? -
- This fix wont be pushed in current stable?
06/18/2016
-
- I understand igmpproxy only supports IPv4 / IGMP. In both cases above the STB is IPv4 only and speaks IGMPv2. The ...
-
- It is not supposed to work! igmpproxy supports only IPv4 / IGMP.
Regarding multicast IGMP is for "pure" IPv4, MLD ... -
- Victor Toni wrote:
> Could you please give it one more try to avoid regressions?
This latest version has been wor... -
06/17/2016
-
- Data point: I'm seeing similar behaviour with daytime-dgram on 2.3.1-p1.
Why bring this up in 2016? Well, we need ... -
05:34 PM Feature #6500 (New): Should be a way to determine which packages are available without having to update/install
- Since one or more packages are often a "show-stopper" requirement for pfSense users, there should be a way to authori...
-
05:06 PM Bug #6476: Editing an IPSec phase 2 entry fails
- Chris Buechler wrote:
> go to Diag>Command, in PHP Commands box, paste in:
>
> [...]
>
> and hit Execute, wha... -
- fix pushed
-
- pf_purge_expired_fragments doesn't purge, leaving users with "PF frag entries limit reached" where fragmentation is c...
-
- pretty sure that's a config issue, not a bug.
-
- Squid HTTPS filitering enable and problem
The following error was encountered while trying to retrieve the URL: ... -
- followed up in your forum thread.
-
- Mario Lener wrote:
> Hi, i found a strange error from release 2.3 on default route on PPPoE interface. I write a pos... -
- Hi, i found a strange error from release 2.3 on default route on PPPoE interface. I write a post with print screen in...
-
-
-
02:10 PM pfSense Packages Bug #6182: HAProxy not supporting ALPN
- Right - openssl is now 1.0.1s where it is 1.0.2c on 2.2.6.
Openssl was downgraded at https://redmine.pfsense.org/p... -
10:46 AM Bug #6466: Host overrides do not appear to work with DNS Resolver in forwarding mode
- I'm having a similar issue. I just upgraded from a 2.2.x revision and have been unable to get the resolver to work. I...
-
- Both "Address" fields on firewall_nat_npt.php allow entry of IPv4 addresses, but they should be restricted to only IP...
-
10:18 AM pfSense Packages Bug #6497 (Closed): Squid3 web GUI page not saving settings for users in custom system privileged groups in v 2.2.2
- In v 2.2.2, if a web UI administrator is in a custom user group that has a subset of system privileges including the ...
-
06:14 AM Bug #6110: Default gateway switching not always working with PPP
- +1 for me on this issue.
Related to https://redmine.pfsense.org/issues/5090 I think
Multiple posts on this here:... -
- @Victor Toni
I'm not quite sure if this might be relevant. But it seems like there is a repository at Github attempt... -
- is_ipaddr() returns the type of IP if valid. Use this to simplify the function
-
- Function isn't used in main or packages repo, and in any case would need a complete rewrite to handle IPv6.
-
- Configurable check ip service solution to this can be found here.
https://github.com/pfsense/pfsense/pull/3008
Su...
06/16/2016
-
-
- you're doing something far more atypical than having a site to site VPN. GUI windows in the browser being left open c...
-
- The only thing I can think of that's unusual about this install is that it starts a site-site vpn client, which takes...
-
- Notice too that filterlog re-spawns on its own after having been killed.
-
- I haven't figured out yet why two php-fpm processes hold filter.lock open during the bootup. I wonder if it has som...
-
- Just happened again on a clean install of 2.3.1-p5
It deadlocks HARD on lock('filter.lock'). 100% of the time, to... -
- there's no magic about whether the lock file exists, its presence isn't a lock on its own. It's never deleted, outsid...
-
- Hang during bootup 3 of 5 tries on lock('filter.lock')
Why does filterlog hold /tmp/filter.lock open for writing?
... -
04:28 PM Bug #6422: PHP Fatal error: Call to undefined function gettext() in /etc/inc/rrd.inc on line 60
- I've also just come across this error.
*Call to undefined function gettext() in /etc/inc/rrd.inc on line 60*
S... -
- Hello,
Any ETA?
06/15/2016
- 10:53 PM Revision 9640f8b7: Correct value for 9600. Ticket #6416
- 10:52 PM Revision 9c403919: Correct value for 9600. Ticket #6416
-
-
Hard coded my service https://url... along with curl auth into services.inc and it works. Much faster too. Would... -
- yeah they don't reply to the first SYN (guessing the service is under near-constant DDoS, it's been that way for some...
-
-
Did some network sniffing and their is sporadic TCP retransmissions of the initial SYN to the various checkup.dynd... -
- Dynamic DNS RFC 2136 Clients page is slow to load with entries for interfaces that have private address and the optio...
-
08:06 PM Bug #6429: DHCP: makeing dynamic entry static does not work
- After rebooting it works.
I add an other Nexus 5X to static and it worked as expected.
I don't know why a reboot wa... -
- Remember I did restart DHCP without success....
-
- > delete the lease from the pool if you don't want it to appear in the list immediately, otherwise it'll go away on i...
-
- Is it normal to have a lot of such old entries:...
-
- I changed it 15 days ago and I still get the wrong IP.
If I do this with Windows dhcp and disable and enable WLAN I ... -
- works fine. ...
-
06:23 PM pfSense Packages Bug #6492 (Resolved): Syslog-ng configuration file warning is treated as syntax error
- The syslog-ng package is warning about an old configuration file format. Pfsense is interpreting any warning message ...
-
- fix pushed
-
- NOYB NOYB wrote:
> Umm, no it wasn't. Not sure where feedback was coming from that said it was fixed. But it is no... -
- Greg Myran wrote:
>
> IGMPv2 working for me with this latest version. Thanks for all your time and effort Victor ... -
- go to Diag>Command, in PHP Commands box, paste in: ...
-
- Chris Buechler wrote:
> Either get_interface_ip or get_interface_subnet has to return empty for that to happen. The ... -
- Chris Buechler wrote:
> guessing your LAN is set to IPv4 "none"?
Yes - IPv4 and no IPv6.
-
- you changed something that broke the libraries
-
- wasn't overlap because the interface assignment process isn't user-initiated in that case. Fixed to have that unset b...
-
- that is indeed the case. Appears it just doesn't work in dhcpd unless I'm missing something. Config is correct, and t...
-
-
- Adrien Carlyle wrote:
> Is there any way to manually correct this?
Edit the <menu> tag(s) out of the config manua... -
02:14 PM Bug #6055: Menu items may remain from packages no longer installed
- Is there any way to manually correct this?
-
-
- nothing to go on here and no such issues reported. Please post to the forum with specifics
-
- this was fixed in a later 2.3x release
-
- duplicate of #6055
-
- I believe this is the result of upgrading when packages are not available for a new version.
I am on 2.3.1-releas... -
- I too need this feature and the platform is unuseable for reliable VoIP traffic with failover without it.
I have co... -
- *Also* if you Kill the 2 States for each VoIP phone in the Diagnostics > States section, they re-appear straight away...
-
- Hi Chris
I note your previous comment. However, how would the state killing feature work? I don't fully understand... -
- This would be especially useful for VOIP, where there are often frequent registrations or other SIP traffic that keep...
-
- Julien REVERT wrote:
> Is it still plan to have "states killing" on gateway failback?
>
> I have the issue that U... - 08:56 AM Revision 08cd0225: Fix bad escapeshellarg logic on mpd execution
- With this change single-quotes are applied in correct places
- 08:12 AM Revision ceabd66d: Fix NTP PPS. It had 'None' option available on 2.2.x.
- 08:12 AM Revision 55de528c: Fix "Unable to remove NTP GPS from configuration"
- https://forum.pfsense.org/index.php?topic=112771.msg627573
- 08:11 AM Revision 6a53de6f: Fix Redmine #6011
- This will add linklocal fallback where no IPv6 is otherwise configured to allow login using this IPs
-
04:10 AM Bug #6488: HAProxy looses CARP VIPs
- Thanks, updated node1 and now it is working again
-
02:57 AM Bug #6383: Manual Update via WebGUI not working in 2.3.x
- ...is there a chance for getting this back in any way?
My problem is that I'm forced to keep some FWs in highly se... -
01:43 AM pfSense Packages Bug #6484: pfsense 2.3.1_1 does not accept haproxy advanced parameters
- Thank You.
- 01:15 AM Revision fa20dac1: Fix #6482 OpenVPN Redirect Gateway Option Causes GUI Issue
- This fixes the GUI inconsistency reported in the referenced bug. On edit of an OpenVPN server that has tun mode, not ...
06/14/2016
-
- Chris Buechler wrote:
> last of that fixed in
> https://github.com/pfsense/FreeBSD-ports/commit/6555d100423fc7b913f... -
- last of that fixed in
https://github.com/pfsense/FreeBSD-ports/commit/6555d100423fc7b913ff3976feba5c756fbb0251
-
- this definitely looks to have been fixed in 2.3.1 with the validation of config.cache
-
- this package has been deprecated
-
-
- this package has been deprecated
-
-
- fixed with >=2.3
-
- if someone would like to submit a pull request we can add it
-
- duplicate of #1337
-
-
-
- duplicate of #1337
-
- duplicate of #628
-
- it's user-configurable, and nano's on the way out
-
-
- if someone would like to submit a PR, we can add those and others
-
- been done for a while now.
-
-
-
- stub-zone was changed to forward-zone in 2.3
-
- added some time ago
-
- not a good idea
-
-
-
- duplicate of #4044
-
-
- not sure this is still an issue. if it is and anyone cares, report upstream to FreeBSD.
-
- available on 2.3.1+
-
- this package has been deprecated
-
- this package has been deprecated
-
- done some time ago
-
- not desirable, it's correct as-is.
-
- this package has been deprecated
-
- this package has been deprecated
-
- this package has been deprecated
-
- package has been removed
-
- appears to be a config problem
-
- package has been removed
-
- package has been removed
-
-
- package has been removed
-
- the packages in question have all been removed.
-
- merged several weeks ago
-
- this has been merged
-
- redistribution of TeamSpeak is not permitted, so we can't offer it as a package.
-
- BIND package has been back for a bit.
-
- this package has been deprecated
-
- this package has been deprecated
-
- our stunnel package has been deprecated
-
- fixed
-
- fixed
-
- Denny Page tracked down the source of this issue and opened this FreeBSD PR with a patch.
https://bugs.freebsd.or... -
- Either get_interface_ip or get_interface_subnet has to return empty for that to happen. The only way either of those ...
-
12:41 PM pfSense Packages Bug #6490 (Rejected): Squid Reverse Proxy: Disabling an entry on the "Redirects" tab creates duplicate entries for the previous entry in the squid config
- If you disable an redirect entry by disabling the "If checked, then this redirect will be available for reverse confi...
-
- Xander Venterus wrote:
> Confirming this has happenned again on my unit, and this time without any attacks having hi... -
- Deleting an entry on page "Package / Reverse Proxy Server: Redirects / Redirects" does not affect the running squid c...
-
- Greg M wrote:
>
> Not true.
> This is NOT working, you have to add *push "route-ipv6 2000::/3";* to get it workin... -
- Chris Buechler wrote:
> You can just add a 'push "redirect-gateway-ipv6 def1"' to the server's advanced options to a... -
- you're breaking your VIPs by config syncing between incompatible versions.
-
- Hi,
the second node of my pfsense HA-Cluster looses the VIPs in the HAProxy-Frontend config. I'm unable to add the... -
- >
> This version should work with IGMPv2 (which I cannot test myself because I am on IGMPv3).
> IGMPv3 is not expe... -
- There were some issue with the logging on startup in some corner cases. Hopefully these are fixed in:
https://github... -
- This is a configuration issue, not a bug. If your client protocol does not work properly, it's probably not speaking ...
-
07:35 AM pfSense Packages Bug #6486: Squid fails in transparent proxy mode
- I reread the forum articles about this bug. The general consensus was that Squid has been broken in the past. My beli...
-
04:32 AM Bug #6422: PHP Fatal error: Call to undefined function gettext() in /etc/inc/rrd.inc on line 60
- Hey Chris,
We've faced this issue as well.
We upgraded to 2.3.1 and we're seeing this error in menu:... -
03:26 AM Bug #6422: PHP Fatal error: Call to undefined function gettext() in /etc/inc/rrd.inc on line 60
- Hey Chris, I am running two R330 Dell server, bare metal. Anyway, I reinstalled the setup and for now I'm not seeing ...
-
- Thanks chris for pointing me on this!
I placed a little helper script that sends the program to the background:
<... -
03:41 AM Bug #6487: PfSense crashes during boot at configuring LAGG interfacess
- Kilian H wrote:
> Chris Buechler wrote:
> > subject certainly isn't true in any general sense. How is the lagg conf... -
- Chris Buechler wrote:
> subject certainly isn't true in any general sense. How is the lagg configured? How many are ... - 02:36 AM Revision e8406abe: added missing div.content wrapper when reloading filters
06/13/2016
-
- this was fixed in an earlier 2.3x version.
-
- fixed
-
- haven't seen any reports of this in >=2.3. The root cause is an issue in unbound itself, and several potential segfau...
-
- no longer the case in >= 2.3.
-
-
- duplicate of #2234
-
- no other reports of same, it's likely along the lines of any number of other reports of same issue with OpenVPN itsel...
-
- several confirmations this isn't an issue in >=2.3.
-
- not an issue in >=2.3
-
- are you running in Hyper-V or Azure by chance? That's the only place I've seen that, which occurs because it ends up ...
- 08:28 PM Revision 9f472202: Fix PHP Warning about invalid argument supplied for foreach
- If _POST['members'] or _POST['groups'] is not set / none selected at GUI, it would give a warning on crash reporter (...
-
- Appears to be fixed. Thanks.
-
- fixed here: https://github.com/pfsense/FreeBSD-ports/commit/364a0ddf7034f0b22681bbe3b82e0838c4d33a4e
-
- subject certainly isn't true in any general sense. How is the lagg configured? How many are there? What are the membe...
-
- PfSense crashes during boot at configuring LAGG interfacess. It stays for a few second there, then it just resets the...
-
- that is correct, though it should be protocol-specific. something to be addressed as part of #6483, added note there.
-
08:17 AM Bug #6482: OpenVPN Redirect Gateway Option Causes GUI Issue
- Yes, I'm using tun and Remote Access (SSL/TLS + User Auth).
It also appears that the redirect gateway option doesn... -
- I think it is right that the Local Network(s) boxes should be hidden.
From what I can see, the Local Network(s) boxe... -
- also should fix the show/hide of "remote networks" fields accordingly while doing this, so only v4 shows/hides with t...
-
- the existing option only adds the redirect-gateway def1, for IPv6 OpenVPN needs redirect-gateway-ipv6. That ought to ...
-
- If I add something like push "route-ipv6 2000::/3"; to my custom options it will get IPv6 to work though the tunnel, ...
-
- what you did prevented the system from completing bootup, and while the system is booting, it doesn't (and shouldn't)...
-
- Hi Chris,
I found the bug.
It's not directly Pfsense related, it happens when I start the 3rd party binary... -
- Yeah, it just does not belong there at all; put the stuff to "Advanced pass thru".
-
- Not enough information here about what are you putting where; the entire generated configuration is available under t...
-
- Hi!
pfsense 2.3.1_1 does not accept haproxy advanced parameters. I can use redirect in version 2.2.6-RELEASE.
(... -
- Confirmed still in 2.3_1. Use of ip alias in address field of virtual server cause " causes status "Unknown - relay...
-
- fixed here: https://github.com/pfsense/FreeBSD-ports/commit/e812a02a75518ec046d2b7f7606ae83fee7f6e65
-
-
- Not a bug. Post on the forum for help with your configuration.
-
- Squid 0.4.18 offers transparent proxy capability under 2.3.1-RELEASE-p1 (latest version) by checking a box - Enable t...
-
10:05 AM Bug #6099: igmpproxy does not recognize upstream interface
- Hello,
I tested the Version from ViToni that Stefan Heck posted in the ZIP.
And for me with old Telekom infrastru... -
08:11 AM pfSense Packages Bug #6485 (Rejected): Squid garbage collection is a blocking thread and stops all network traffic
- Squid garbage collection is a blocking thread and stops all network traffic when using ram cache.
https://forum.pf... -
02:09 AM Bug #4218: Bridge does not have AUTO_LINKLOCAL flag
- I have the same problem, i can't get IPv6 working (using 2.3.1-RELEASE-p1).
Can you please fix that?
06/12/2016
-
- When the OpenVPN Redirect Gateway (Force all client generated traffic through the tunnel) option is checked for an Op...
-
- When editing the settings for an OpenVPN server and checking off the Redirect Gateway (Force all client generated tra...
-
11:00 AM pfSense Packages Bug #6449: Email Reports not wait a long command end to send the report.
- hi guys ,
any questions or anything I can do to help solve this bug? -
06/11/2016
-
04:43 PM Bug #6481 (New): loading EAP_RADIUS method failed
- pfSense 2.3.1-RELEASE (i386)
Enabled EAP-MSCHAPv2 per https://doc.pfsense.org/index.php/IKEv2_with_EAP-MSCHAPv2, g... -
- Supposedly this exists, per https://doc.pfsense.org/index.php/IKEv2_with_EAP-RADIUS, but I'm not 100% convinced that ...
-
02:59 PM pfSense Packages Feature #6480: pfBlockerNG - add ability to force download of a list
- OK, got it. I don't think I would have found it had you not pointed me to it - but that's what I was looking for, th...
-
- Goto the "Log Browser" Tab and view the Feed in the "Deny" folder... There is a delete Icon there...
-
- At the moment, there's no way through the GUI to force a re-download of a particular list. The only way to do it is ...
-
- guessing your LAN is set to IPv4 "none"?
06/10/2016
-
- thanks for the feedback
-
- Blew away all GIF and interface configuration, re-configured on both of the affected firewalls. One now works, one s...
-
- Since 2.3-RELEASE, LADVD no longer crashes, but results on i386 are still inconsistent - one firewall sees the switch...
-
06:40 PM pfSense Packages Todo #6443: Add ntopng package back into pfSense 2.3.x
- I submitted a pull request to add GeoIP as a dependency of ntopng:
https://github.com/pfsense/FreeBSD-ports/pull/1... -
- There is a missing dependency on GeoIP-1.6.9.
I tried to restart the service, which failed.
Then logged in and tr... -
-
-
-
-
-
- 05:26 PM Revision 100dc6dd: Bump to revision _3
-
- Ah, I see. By "overlapping", I meant that igb0 had VLANs defined directly on it, *and* it was part of an LACP group ...
-
01:16 PM Bug #4637 (Assigned): system unreachable after deleting VLAN
- No problem, I'll keep the bug report open and check if we can reproduce it here.
I was misguided by 'Two overlappi... -
- Luiz,
You've misunderstood the problem, and it is definitely a bug.
I don't have the lab equipment or time to rep... - 04:10 PM Revision 5d4a0e84: Bump PRODUCT_REVISION to 2 for 2.3.1_2
-
- Confirming this has happenned again on my unit, and this time without any attacks having hit us, i just had to restar...
-
- Chris Buechler wrote:
> almost certainly not a bug. where no traffic, probably set to an IP other than what is corre... -
- almost certainly not a bug. where no traffic, probably set to an IP other than what is correct
-
- I noticed that my backup node is out of XML sync although it's activated on master.
State sync is working fine.
T... -
12:01 PM pfSense Packages Feature #6479 (Rejected): Add OpenBGPD config to High Availability Sync option to sync
- I believe this functionality would be very intersting in a high avaliabity environment.
-
- not a replicable problem outside problems writing to disk in general
-
08:06 AM Feature #855: Ability to selectively kill states on gateway recovery
- Is it still plan to have "states killing" on gateway failback?
I have the issue that UDP connections of ip phones ... -
- Goddammit, no, the rebuild of VMware wasn't the problem, as it's just gone down AGAIN.
Strangely enough, the RADIU... -
-
Feedback:
Time period is 1 resolution too long.
Using larger (later) of left/right updated, instead of sma...
06/09/2016
-
- all looks good now
-
- Additional commits address the other uses of commands in auth.inc mentioned above (and some others). I also added inp...
-
- I pushed some input validation which prevents the reported vector but the backend code needs some more work. The foll...
-
- The members[] array in system_groupmanager.php is not properly validated, and is only protected by single quotes in a...
-
- works
-
10:15 PM Bug #6442: DNS Resolver - error
- Hi Chris,
Chris Buechler wrote:
> Rene: you running in Azure or Hyper-V by chance?
I run pfSense on a VMware 5... -
- I can make this happen in Azure reliably because it fails to write files in some circumstance(s). It might also be an...
-
- works
- 09:07 PM Revision bcd856f5: Fix #6468 Do not allow edit of day and times
- in rows of time ranges for a schedule.
The code was always intended that the user uses the calendar pad and start hou... - 09:07 PM Revision 09cd43a8: Fix #6468 Do not allow edit of day and times
- in rows of time ranges for a schedule.
The code was always intended that the user uses the calendar pad and start hou... - 09:07 PM Revision 480100df: Merge pull request #2999 from phil-davis/patch-6
-
- I think there's overlap here with something I already fixed in a diff ticket but will verify.
-
- Applied in changeset commit:a9dafcba7543ee455bc3999f655010d9e2aa35ed.
-
- PR merged, thanks Phil
-
- I actually visited site today to deal with pfSense. I have a couple of interesting observations and did get partway ...
-
- no apparent issues here, awaiting feedback from OP
-
- I created a new ticket for the issues with the custom time period since they will require a little more tweaking than...
-
- something similar to that PR was merged
-
04:15 PM pfSense Packages Bug #6305: Quagga problems updating routes / mistakenly showing "kernel"-routes while they are not
- seems like someone has found a way to reproduce consistenly. (this is currently not verified by others)
https://fo... -
- Due to the way rrd_fetch tries to find the best fit for a time period, the custom time period can move around slightl...
-
- Thanks for working on this, It's good to have ntopng back.
I didn't have any install issues (though it looks from... -
02:49 PM pfSense Packages Todo #6443: Add ntopng package back into pfSense 2.3.x
- deleted
/usr/local/share/ntopng
that fixed install -
12:30 PM pfSense Packages Todo #6443: Add ntopng package back into pfSense 2.3.x
- Kill Bill wrote:
> Rich Murphey wrote:
> Every case of this I've seen on the 2.2.x ntopng package was a password m... -
- Rich Murphey wrote:
> After setting the password via the ntopng settings page in the pfsense UI, the ntopng admin pa... -
-
-
-
-
-
-
-
- Priority can be changed to medium
-
- I just set up an IPSec site to site bridge between two pfSense machines. It worked perfectly. However, editing the ...
-
-
-
-
- It appears to be fixed. I could exploit it before, but not after.
-
- To me for confirmation that it's fixed
-
- Command injection is possible using the id parameter on pkg_mgr_install.php...
-
- Adam Thompson wrote:
> If you have definite, concrete knowledge of 32-bit systems that had HE tunnels up and working... -
- This depends on p7zip version vulnerable to heap-buffer-overflow (CVE-2016-2334) and out-of-bounds read (CVE-2016-233...
-
- oh, for LAN. Every additional interface defaults to "none", which is most appropriate. Yeah #6457 will address the re...
06/08/2016
- 11:29 PM Revision 00ad6390: Fix #6463 Dest net alias matching on page load
- Do not set destination field to use customarray
Note: dstbeginport_cust does not exist on this page, so I got removed... - 11:29 PM Revision 8a6261b3: Fix #6463 Dest net alias matching on page load
- Do not set destination field to use customarray
Note: dstbeginport_cust does not exist on this page, so I got removed... - 11:29 PM Revision 33872ac0: Merge pull request #2998 from phil-davis/patch-5
- 11:15 PM Revision bee62d27: Add resetwebgui to developer shell
- This might be helpful to people if they have set the theme to something
that they are having trouble displaying, read... - 11:15 PM Revision 50957283: Merge pull request #2997 from phil-davis/resetwebgui
- 11:15 PM Revision 21c18c3d: Fix #6460 Interface mismatch apply changes button
- 11:12 PM Revision d9f088f5: Fix #6460 Interface mismatch apply changes button
- 11:12 PM Revision f4ede227: Fix #6460 Interface mismatch apply changes button
-
- - Stop using id parameter for additional packages, keep using it only
for firmware upgrades
- Created to control va... -
-
-
-
-
-
-
-
-
- - Stop using id parameter for additional packages, keep using it only
for firmware upgrades
- Created to control va... -
-
-
-
-
-
-
-
-
10:53 PM Feature #6457: Allow ability to configure AWS EC2 AMI via userdata
- Thinking through this, it may be easier to supply a userdata dictionary who's value is an S3 object that is a recorde...
-
- - Stop using id parameter for additional packages, keep using it only
for firmware upgrades
- Created to control va... -
- I believe that that was the case. I think that when I manually created the LAN interface, the addressing method was ...
-
- Danny Schuh wrote:
> Actually, I had skipped the initial setup wizard.
Then your WAN would be DHCP, that's the o... -
- Actually, I had skipped the initial setup wizard. I'm looking to eventually deploy this AMI w/o user interaction.
-
-
-
- Applied in changeset commit:d4d8f29373f8d7396dfd0d1ead8b50cb713b1208.
-
- merged, thanks!
-
03:19 AM Bug #6463: Firewall > NAT, Outbound Network destination field incorrectly displays port aliases
- Pre-Feedback feedback. Phil's fix seems to work for me. Thanks.
-
-
- that PR seems fine to merge. Luiz, please review and merge if agreed.
-
-
-
- It never has. Rule doesn't do anything since there's no matching NAT. I thought there was already a ticket for this, ...
-
- As per subject. Worked just fine with 2.2.x.
NAT:
!http://image.prntscr.com/image/d5f3d6fc93424ef69b9dff46be019ba... -
- Applied in changeset commit:f4ede22769baab85577ff95da98f544d1b67a9f1.
-
- PR merged, thanks!
-
-
-
-
-
05:31 PM Bug #4326: Limiters on firewall rules where NAT applies drop all traffic
- For me is that bug a big problem.
The traffic shaping feature was one decision to use pfsense.
I baught a XG-1540 w... -
- The clickable "Target Rules List" field in menu "common ACL" disappears if more than 7 "Target categories" are defined.
-
-
-
-
- I would be interested in assisting with the development of a super simple cloudflare integration module.
It would ... -
- fixed
-
10:45 AM Bug #6467: DNS Resolver in forwarder mode should automatically disable DNSSEC
- You are right Chris. OpenDNS are the upstream servers and they do not support DNSSEC, but Google DNS servers do. It...
-
- Applied in changeset pfsense:commit:4a374da4778f8d94bca07f19cdc37d40208833b9.
-
- install fails on 2.3.2a here is log
\>>> Installing pfSense-pkg-ntopng...
Updating pfSense-core repository catalo... -
- This is the expected behaviour for overlapping networks.
When you remove the IP from NIC/VLAN (this is not specifi... -
- This was fixed in vm-bhyve v0.12.3.
(https://github.com/churchers/vm-bhyve/commit/a74ef7e04a5fa5ce256fe2f213dec6f5... -
- The console menu item #12 (_"pfSense/$product developer shell"_) has a pointless title that doesn't help users much. ...
- 02:34 AM Revision a9dafcba: Fix #6468 Do not allow edit of day and times
- in rows of time ranges for a schedule.
The code was always intended that the user uses the calendar pad and start hou... - 01:53 AM Revision d4d8f293: Fix #6463 Dest net alias matching on page load
- Do not set destination field to use customarray
Note: dstbeginport_cust does not exist on this page, so I got removed... -
01:40 AM pfSense Packages Feature #6436: Add Stunnel binaries to the pfSense repository
- Latest package is in:
http://pkg.freebsd.org/freebsd:10:x86:64/latest/All/stunnel-5.31,1.txz
06/07/2016
-
-
- Pull request https://github.com/pfsense/pfsense/pull/2996
-
- Reported in the forum https://forum.pfsense.org/index.php?topic=113172.0
When restoring a configuration and the inte... -
-
- This is a genuine little bonus bug. Thanks for reporting.
Pull request https://github.com/pfsense/pfsense/pull/2998 -
- Sorry. Search fail. This is very similar to https://redmine.pfsense.org/issues/6287. This is still showing port alias...
-
- Create an outbound NAT rule with a source and destination network and save.
Re-edit the rule.
Type in the desti... -
-
07:44 AM Bug #6461 (Duplicate): firewall rules lose limiter association when limiter renamed
- this issue has been there since many older pfsense versions where suppose if u have some floating rules which had lim...
-
- I presume updated subject is what you're referring to, as it does default to DHCP. It ought to not prompt users in th...
-
- thanks for the follow up
-
11:06 PM
Bug #6465: No 'Apply Chnges' button in 2.3.1_1
- Experimented a bit and it seemed that for whatever reason I had a problem with uBlock origin. Apparently uBlock block...
-
- not seeing that here on Firefox on Windows or Linux, nor has anyone else reported same. At least hundreds and likely ...
-
02:16 PM
Bug #6465 (Not a Bug): No 'Apply Chnges' button in 2.3.1_1
- After upgrade to pfsense 2.3.1_p suddenly 'Apple Changes' button disappears in Firefox 46 and 47. Everything works gr...
-
- Strange - just did a test to override ca.yahoo.com to point to my local server and it is working. Now testing SafeSe...
-
- Shows the configured host override section. I have resolver disabled right now, but it was definitely checked and DN...
-
- Sorry - I should have been more clear: yes I put the overrides under the proper section under DNS Resolver. I have t...
-
- I have thought about putting a button to copy all overrides from Forwarder into Resolver (and vice-versa). It is part...
-
- What Phil said is exactly what I was writing when he posted it. Forwarder's overrides are for it only, Resolver's for...
-
- Did you put the host overrides into the DNS Resolver section?
Resolver won't use the Host Overrides from the DNS F... -
- I am using 2.3.1-RELEASE-p1 on SG-2440.
-
- I have a dedicated pfSense VM setup as a DNS server with packet filtering disabled and only one NIC, and I'm trying t...
-
- Thoughts on this:
# Expand the "help" function:
> help - _brief_ help and lists the options below
>
> help she... -
- It was never intended that users should be able to edit the day and time range in each of the rows of a schedule. If ...
-
- For example, it will accept 06:00-52:00. See screenshot
-
- only if your forwarding servers don't support DNSSEC. It isn't required and wouldn't be appropriate to automatically ...
-
- DNS Resolver configured in forwarding mode needs DNSSEC disabled to work correctly. Perhaps selecting forwarder chec...
-
- I've installed snapshot 2.3.2.a.20160606.1543, and ntopng via the web UI package manager.
I see only one possible ... -
- Hi Renato. Many thanks for adding it back. I suspect the answer may be no, but is there any way to run the package ...
-
- I've added it back to 2.3.2 snapshots, that can be downloaded at https://snapshots.pfsense.org
Note that it was no... -
- This should be fixed in PR141 https://github.com/pfsense/FreeBSD-ports/pull/141
-
01:03 PM Bug #4326: Limiters on firewall rules where NAT applies drop all traffic
- +1 I have dozens of 2.1.5 boxes because of this critical bug.
Crossed my fingers but seems 2.3 still not productio... -
- merged PR 137 for the fix. Thanks Justin Rittenhouse and NOYB!
-
- The X axis ticks don't respond to resolution for custom time periods. Possible fix to is to use the resolution that i...
-
- The php-pgsql module was previously installable in 2.2.X and earlier and some users are using it in custom captive po...
- 07:27 AM Revision 9202151e: Add resetwebgui to developer shell
- This might be helpful to people if they have set the theme to something
that they are having trouble displaying, read... -
04:50 AM Bug #6167: IPsec IPComp not working
- Chris Buechler wrote:
> We'll leave this as-is for 2.3.1 to avoid introducing any regressions for something that's l... -
02:05 AM pfSense Packages Feature #6176: Privilege for OpenVPN Client Export
- it would be very cool to be able to limit access for users to their own client configs. users don't need to have acce...
-
- BBcan177 . wrote:
> By any chance, did you use the "view" button in the Update Tab? Something has recently changed t...
06/06/2016
-
- AWS EC2 instances should default to DHCP. EC2 instances are assigned IP addresses via DHCP. If you want to give the...
-
- The DHCPv6 service is enabled on the AWS EC2 instance. This normally wouldn't be an issue except when you attempt ad...
-
- Missed a pretty important one:
Interfaces - Allow the end-user to supply an array to configure the interfaces -
- Most AWS EC2 AMIs allow you to configure many aspects of the instances that you are launching via the 'userdata'. Cu...
-
- The issue is where you have a gateway that isn't within the interface's primary IP subnet (unusual), no VIPs within t...
-
05:27 PM Bug #6455: Can't delete Virtual IP "referenced by a least one gateway" if gateway outside interface subnet
- Hi @Tobi Miller Many of the firewall services use virtual IPs for load balancing. So suddenly removing the virtual IP...
-
02:50 PM Bug #6455: Can't delete Virtual IP "referenced by a least one gateway" if gateway outside interface subnet
- Okay, in case that this is better in the forum, I will open a thread there :-)
Just to answer your qestions:
* its ... -
- Not enough info to go by. Ideally this should be in a forum thread until a bug can be confirmed.
Is this an IP Ali... -
- I have pfsense 2.3.1 (amd64) running and the issue [[#3075]] seems to be present again. I have setup a main virtual I...
-
-
-
- Useful and detailed answer.
One way to resolve it that your comment _almost_ suggests but doesnt. Itr sounds like ... -
- The problem, as stated, is not a good idea, but could be handled better in a few separate tasks and not this directly...
-
- I happened to be checking the certs on my router, and noticed the main webconfigurator cert was 1024 bits, which has ...
-
03:16 PM pfSense Packages Bug #6456 (Not a Bug): vm-bhyve not correctly detecting the modules in kernel
- Trying to run bhyve in pfsense 2.3.1. I have install vm-bhyve. But I found it is not working properly when executing ...
-
- Kill Bill wrote:
> Well, while the original issue with the dashboard seems indeed gone, I managed to make the GUI co... -
-
-
09:23 AM Bug #6099: igmpproxy does not recognize upstream interface
- To be sure the 10.x address is not messing everything up I removed the address from the interface.
Sadly it didn't... -
- Just to compare with the same Version on my System:
MY router (192.168.1.254) periodily sends a Membership query (... -
- Just a hunch, but I suspect the second query coming from 10.10.10.1 is part of the problem. It's querying the same m...
-
- To check the IGMP Membership I made two traces on the firewall.
The first is made with the IGMP daemon I used on ver... -
- @Andrew
yes indeed
While the IP 192.168.1.35 sends a Membership request to 224.0.252.15211:56:36,591: Should ins... -
- It looks to me that, for whatever reason, the replies to the membership query aren't getting back to igmpproxy. Igmp...
-
- @Stefan Heck
The version you provided shows the same route exipration problem. See the log below.... -
- I'll check it today.
-
- @Andre Vink
Did you try the Version I have mentioned above? It is the same as the current Version from ViToni plus e... -
- In my opinion the mixup is a result of IGMPproxy not recognizing vlan and PPPoE interfaces.
The version from ViToni ... -
- Agree, it's what I see as well.
Looking at the logs you'll see the aging counter decrementing and the route removed ... -
- You mix up different issues in this thread.
The robustness if igmpproxy has nothing to do with "not recognize upst... -
02:33 AM Bug #6099: igmpproxy does not recognize upstream interface
- Andre Vink wrote:
> It looks like it has something to to with route aging.
Having looked at the code and at the l... -
- I have pfsense 2.3 (amd64) running and this issue seems to be present again. I have setup a main virtual IP which I u...
-
06:27 AM Bug #6454 (Resolved): services_ntpd_acls.php: Can't change default options without setting custom access restriction
- It's impossible to modify ONLY the 'Default Access Restriction' section without compiling the section 'Custom Access ...
-
- Useful utility function when it's necessary to verify that existing keys meets current practices
-
- Hello,
Any news with this bug?
Also available in: Atom