Activity
From 06/10/2016 to 07/09/2016
07/09/2016
- 11:40 PM Revision 48eb136f: Add configuration for Min and MaxRtrAdvInterval. Ticket #6533
- 11:40 PM Revision c3099b79: Add configuration for Min and MaxRtrAdvInterval. Ticket #6533
-
09:26 PM Bug #3069 (Resolved): traceroute6 fails to timeout and hangs the webconfigurator GUI
- works
-
09:11 PM Bug #4326: Limiters on firewall rules where NAT applies drop all traffic
- Since we are not getting a solution any time soon, i guess we can use 2 pfsense boxes in line one with limiter and t...
-
- If you restore a config, and upon reboot the system doesn't have Internet connectivity when trying to update metadata...
-
- works
-
-
02:40 AM Bug #6590: Services - NTP: leap seconds file upload does not work
- Works, thanks. ;)
-
02:30 AM Bug #6590: Services - NTP: leap seconds file upload does not work
- Applied in changeset commit:76763c4c5a3d537b778243524a15ee9204f68c6f.
-
- Thanks Phil, PR merged.
-
- This is easy to fix - just a bit of magic code is missing to enable file uploads on this page.
PR https://github.com... -
- Thanks Greg. Going to consider this fixed then, one of the other gateway-related tickets target 2.3.1 must have resol...
-
02:48 AM Bug #6110: Default gateway switching not always working with PPP
- Hi!
Nope, all fine here.
Tested multiple times... -
- I removed that directdispatch sysctl from 2.4 entirely since 32 bit is gone there, and changed RELENG_2_3 to net.isr....
-
11:59 AM Bug #4754: enabling net.inet.ipsec.directdispatch on 32 bit results in kernel panics
- Apparently this can also affect 2.3.x and that tunable is no longer present. To work around the issue, use @net.isr.d...
-
- added Min and MaxRtrAdvInterval as well as AdvDefaultLifetime.
Greg: if there are other options you'd like to see... -
- Hi Chris!
Great news, are those Router lifetime, Route lifetime etc.. also added to be able to configure them? -
- this mostly done, want to review with fresh eyes tomorrow before committing though.
-
02:31 PM pfSense Packages Bug #6592: squid does NOT use EDH and EECDH cipher suites because "tls-dh" is not configured and so these ciphers are silently dropped - see squid documentation
- Seems to focus oon reverse proxy only.
-
- Already covered by https://github.com/pfsense/FreeBSD-ports/pull/110 when someone gets to it.
-
- Here it is documented how "http_port" can be configured:
http://www.squid-cache.org/Doc/config/http_port/
EDH and... -
02:03 PM Feature #6569: Support Rockwell ZODIAC binary protocol (Jupiter receiver) for high precision
- I seem to have a stable fix with 5-6 PRNs now. This is comparable to the uBlox5 unit (pfSense 2.3.1, i386, ALIX 6D2) ...
-
- P.S. Those of us who are only using NTPD for reference clock support (and time distribution), and/or plan to run IEEE...
-
- I'm still having some receiver issues, however...
I can get the higher quality SHM refclock derived from PPS in GP... -
- Proceeding under the assumption that refclock_jupiter.c may have bitrotted, I discovered that there is not a snowball...
-
- Alexander Wilke wrote:
> For the user it would be good to have the possibility to modify "NO_SSLv3" using the WebUI ... -
- Squid has some additional options set like:
options=NO_SSLv2,NO_SSLv3,SINGLE_DH_USE (and should have "SINGLE_ECDH_... - 07:32 AM Revision 68de2169: Fix #6050 DHCP - provide Network Booting display/hide advanced button
- This one moves the "Network Booting" above the "Additional BOOTP/DHCP Options". That allows "Network Booting" to be a...
- 07:21 AM Revision bfc9741a: Fix #6590 NTPd Leapfile Upload
- 07:21 AM Revision f5495307: Merge pull request #3050 from phil-davis/patch-1
- 06:32 AM Revision 76763c4c: Fix #6590 NTPd Leapfile Upload
- 04:24 AM Revision cc4fc50b: Merge pull request #3037 from NOYB/Check_IP_Services
- 03:12 AM Revision 350a7001: Leave this to 2.4 only for now. Revert "Omit non-qualified hostnames from unbound's local-data. Ticket #6064"
- This reverts commit cde0ef17a60cffa4a54f3ab4922b77bc0447d068.
- 03:11 AM Revision 0fa68840: Exclude non-qualified hostnames from hosts file. Ticket #6064
- 03:04 AM Revision cde0ef17: Omit non-qualified hostnames from unbound's local-data. Ticket #6064
- 03:02 AM Revision f1db82ac: Omit non-qualified hostnames from unbound's local-data. Ticket #6064
- 02:58 AM Revision 6a8dc7bc: Call filter_configure in rc.linkup. Ticket #6297
- 02:57 AM Revision e3bda4fa: Call filter_configure in rc.linkup. Ticket #6297
- 02:54 AM Revision e2158306: Verify a valid IPv6 subnet is going to be used before including in radvd's config. Ticket #6581
- 02:52 AM Revision f8f8d131: Verify a valid IPv6 subnet is going to be used before including in radvd's config. Ticket #6581
-
- I have made 2 PRs with different ways to organize the page:
https://github.com/pfsense/pfsense/pull/3051
https://gi... -
01:19 AM Revision 84b6f05a: Missing closing quote
-
- works
-
- See https://redmine.pfsense.org/issues/6573
- 01:18 AM Revision a018cc36: Merge pull request #3049 from doktornotor/patch-2
07/08/2016
-
- Something in the mix keeps setting the baud rate to 4800, though -- overriding /dev/cuau0.lock settings. My guess is ...
-
- I have a shell script which configures the unit for 9600 baud binary operation. [[gpsdo-boot.sh]]
This requires th... -
- Swapping out the cables DID help. Always ensure you're using a high-quality, shielded serial cable for talking to a G...
-
-
- Grab the ftp://tycho.usno.navy.mil/pub/ntp/leap-seconds.list, try to upload it via Services - NTP - Leap seconds file...
-
- merged from PR 3037
https://github.com/pfsense/pfsense/pull/3037
ticket for tracking -
-
- the hierarchy is correct
-
- Armin: you still seeing this on 2.3.1_5 (or newer)?
-
- works
-
- The root cause here is likely that the SA that exists at the time of the IP change is still hanging around afterwards...
-
- The root issue can still be a problem. Probably ought to put a lock around it, but long-term needs a better service m...
-
- fix pushed to master/2.4 only, as that'll need more widespread testing than 2.3.2 will get before release.
-
- fix pushed
-
-
- fixed
-
- fix pushed
-
- Needs to verify it's a valid subnet and prefix before getting into this block, and skip it if it's not.
https://git... -
- works.
Whether systems show online or offline depends on whether the DHCPv6 leased IP is in the NDP cache. If the... -
05:28 PM Bug #6543: Some leases do not show up in DHCPv6 Lease status
- Renato Botelho wrote:
> You can install the package "System Patches" and then apply following patch to you system:
... -
03:21 PM Bug #6543: Some leases do not show up in DHCPv6 Lease status
- Axel Taferner wrote:
> Sorry, I can't confirm if the fix worked for me as I'm not running the snapshots. I'll open a... -
- Sorry, I can't confirm if the fix worked for me as I'm not running the snapshots. I'll open another bug for the separ...
-
- Axel Taferner wrote:
> Awesome. Should I open another bug for the problem I mentioned where hosts who have staticall... -
- Awesome. Should I open another bug for the problem I mentioned where hosts who have statically assigned dhcpv6 leases...
-
- Applied in changeset commit:1f9c2cb696f493aaaa3512f29c080b7e422b24f2.
-
- Pushed a fix on RELENG_2_3, 2.3.2 snapshots will be fine
-
- Greg M: does this still happen for you?
James M: you're referring to something entirely unrelated. -
- works
-
- PR merged
-
- https://github.com/pfsense/pfsense/pull/3049
-
- confirmed fixed on multiple upgrades
-
-
-
-
-
-
- See https://redmine.pfsense.org/issues/6573
- 03:30 PM Revision 9461d208: Fix #6582 Allow import of ports
- This change does:
1) Allow bulk import of a port alias. That happens when the Import
button is pressed from the Ports... -
-
-
-
10:37 AM Feature #6415 (Duplicate): Restore "Period" data summary column (Status > Monitoring) in pfSense 2.3
- This is a duplicate of #6172
-
- Closing by submitter's request
-
- Merged, thanks!
- 09:36 AM Revision d5861220: Fix #6585 Do not use [] syntax for lookups
- IPv6 address plus port is displayed with the format [1:2::3]:80 - the address is in square brackets followed by colon...
- 09:33 AM Revision 65231ec5: Merge pull request #3047 from phil-davis/patch-2
-
-
- This issue could be changed from "feature" to "bug".
-
- Applied in changeset commit:30df6b722d577fe8c1b38476244bfb797ec89b5a.
-
- Merged, thanks Phil.
-
- Thanks for testing.
The Firewall Log Dynamic view does not have the reverse lookup buton, so it won't be broken!
Th... -
02:19 AM Bug #6585: status_logs_filter.php ipv6 support (reverse lookup)
- It works!
Now for ipv6 addresses ptr records are returned,
and in case of no prt "Cannot resolve".
Great work, tha... -
- fixed, thanks NewEraCracker
- 01:34 AM Revision 30df6b72: Fix #6585 Do not use [] syntax for lookups
- IPv6 address plus port is displayed with the format [1:2::3]:80 - the address is in square brackets followed by colon...
-
- Steve: don't think this is extremely involved, if you can get it addressed in the next few days we can get it in for ...
- 12:51 AM Revision 3db367fb: Show "cannot delete alias" message as error
- If I try to delete an alias that is in use, the "cannot delete alias" message was being displayed as the "success" co...
-
- Since the upgrade to ISC dhcpd 4.3 in 2.3x, several users have reported missing hostnames in the dhcpd.leases file. T...
07/07/2016
-
08:58 PM Bug #6588 (Closed): PHP suhosin max value length prevents Quagga OSPF from storing a very large zebra.conf
- pfsense 2.3.1-RELEASE-p5 (amd64)
Quagga_OSPF net 0.6.14
I tried to add some static routes in Services>Quagga OSP... -
- The IPv6 addresses there are displayed using the [1:2::3]:80 format with [IPv6-address]:port which is good for displa...
-
- status_logs_filter.php reverse lookup lacks IPv6 support,
"i" click to resolve doesn't returs any info for IPv6 addr... -
- Forwarded it to you, Renato.
-
- Axel Taferner wrote:
> I sent the email last week, I hope you received it.
Hello Axel,
Can you also send it to... -
- That's correct. Upload is in on LAN, download is out on LAN.
-
06:31 AM Bug #6584 (Not a Bug): FirewallTraffic ShaperLimiters on in/out rule mixed up
- When apply traffic rule on the lan interface default any rule. the in and out is mixed up.
in= upstream (upload)
... -
- link0 is no longer supported on gif, it used to be multi-destination behavior, we had it labeled as "route caching" -...
-
- gre(4) in FreeBSD 10.3 (and 10.2) no longer appears to support the link0/link1/link2 tweaks it used to have for route...
-
-
-
- 12:53 PM Revision bada7f8b: Merge pull request #3045 from phil-davis/patch-2
-
-
- now works on 2.3.2.a.20160707.1019 : ipv4/ipv6 name lookup and reverse.
-
- Imported traceroute6 patch to FreeBSD-src repo. It'll be available on next round of snapshots
-
- I'll make some tests and import the patch to our tree
-
- Period data is now available in 2.3.2 snapshots in the new Traffic Totals package, based on the vnstat database.
h... -
- There is now a Traffic Totals package in 2.3.2 snapshots that shows traffic totals for hours/days/months, using the v...
-
- Bug in present patch: '$PRWIINIT,A,,,,,,,,,,,,,\r\n' is an absolute reset, losing the date. This may have caused inte...
-
11:39 AM Bug #5990: AES-GCM should be an allowed encryption algorithm for IKEv2 in P1
- Can I suggest that in the meantime, there shouldn't be a default selection made for encryption algorithm? And further...
-
-
10:05 AM Bug #6395: Comments are not removed from URL Table (Ports) links
- FYI - I need this update to be rolled up into 2.3.2 as I cannot upgrade to 2.3.1_5 directly without breaking firewall...
-
- 2.3.1_5 appears to have fixed it. Thank you.
-
- Alex Vergilis wrote:
> Phillip/Chris/Renato,
>
> I've noticed that I had to save the URL several times before the... -
- Applied in changeset commit:2a8849119c7c48976161faeaedc477c347e9b724.
-
- It was replaced by $g['enableserial_force']. I've pushed a fix for System Advanced page
-
- All updates are requiring reboot nowadays while we didn't test reroot accordingly. IMO it's a big change for 2.3 seri...
-
- Yes, agree. It is new functionality that does not need to risk breaking something in 2.3.1_*
-
- Such a big change for 2.3.1, pushing it to 2.3.2
-
- Suggested combination fix and enhancement pull request https://github.com/pfsense/pfsense/pull/3046
-
- Definitely works, no bug here.
Depending on your other selected options you may need to have a line before it for ... -
- I've added it to custom options without any problem. Make sure any extra char was not added by accident, check if unb...
-
02:22 AM Bug #6583 (Not a Bug): Unbound Query Logging
- It is not possible to configure query logging in the DNS Resolver UI page; adding "log-queries: yes" to the custom op...
-
- sshdcond package was deprecated in pfSense 2.3
- 06:57 AM Revision e4c784bf: Fix #6582 Allow import of ports
- This change does:
1) Allow bulk import of a port alias. That happens when the Import
button is pressed from the Ports... - 06:39 AM Revision 04b571e8: Show "cannot delete alias" message as error
- If I try to delete an alias that is in use, the "cannot delete alias" message was being displayed as the "success" co...
-
- thanks BBcan
07/06/2016
-
11:19 PM pfSense Packages Bug #6246: pfBlockerNG - filter rule error if all entries in a block list de-dupe out
- Can be closed
-
09:41 PM Bug #6582 (Resolved): Import on Firewall/Aliases Only Works for IPs
- In the firewall alias section, the import button only enters values into IP aliases despite the import button being p...
- 09:35 PM Revision c4045b79: Fix PTR lookups on diag_dns.php. Ticket #6561
- 09:34 PM Revision a9b6c19a: Fix PTR lookups on diag_dns.php. Ticket #6561
-
08:17 PM Revision 006409c6: Change group labels s/MAC controls/MAC Address/
-
- 08:16 PM Revision ce9130bc: Merge pull request #3043 from NOYB/Label_Rename
-
08:07 PM pfSense Packages Todo #6443 (Assigned): Add ntopng package back into pfSense 2.3.x
-
-
-
-
- fix pushed for the PTR lookups
-
03:57 PM Bug #6581: Router Advertisement forces (possibly empty) interface subnet contrary to GUI text, can crash radavd on boot.
- Might have got the version wrong there, this occurs on the latest release.
The patch I put in was:... -
- On the "Router Advertisements" page in the GUI we have:
RA Subnets: ... If no subnets are specified here, the Route... - 02:55 PM Revision 48396f02: Correct spacing
- (cherry picked from commit a0b0acd1540764d5221ea54ea596d569bbe2df2a)
- 02:55 PM Revision 4a4cf887: Correct spacing
- (cherry picked from commit a0b0acd1540764d5221ea54ea596d569bbe2df2a)
- 02:54 PM Revision a0b0acd1: Correct spacing
- 02:53 PM Revision 5aef6c8b: Remove debug
- (cherry picked from commit 5810f934472368f43942ea66820dc98e17143c19)
- 02:53 PM Revision f978691b: Remove debug
- (cherry picked from commit 5810f934472368f43942ea66820dc98e17143c19)
- 02:52 PM Revision 5810f934: Remove debug
- 02:51 PM Revision 1e686fe9: Fixed #6577 - Preserve user input on error
- (cherry picked from commit a654d899cd5d288501fea1ec52dba2e3f0e479ba)
- 02:51 PM Revision 07451ca8: Fixed #6577 - Preserve user input on error
- (cherry picked from commit a654d899cd5d288501fea1ec52dba2e3f0e479ba)
- 02:48 PM Revision a654d899: Fixed #6577 - Preserve user input on error
-
-
-
-
10:00 AM
Bug #6577: pkg_edit.php: rowhelper data not preserved on validation error
- Applied in changeset commit:a654d899cd5d288501fea1ec52dba2e3f0e479ba.
-
09:57 AM
Bug #6577 (Feedback): pkg_edit.php: rowhelper data not preserved on validation error
- Read values from POST data on validation error
Re-factor some duplicated code
-
- I sent the email last week, I hope you received it.
-
08:59 AM Bug #5993: dhcp6c not started until an RA received
- I finally managed to get back to this after several weeks having to work for a living. The first thing I did was to u...
-
-
- Applied in changeset commit:5fac13aafdc335864082fd2e3f5a843d33859fe4.
- 05:39 AM Revision 4c5cb2f6: Leave an empty file for URL Table aliases that return an empty file, and include it in the ruleset regardless so it doesn't generate any filter errors. Ticket #6181
- 05:37 AM Revision e5581024: Leave an empty file for URL Table aliases that return an empty file, and include it in the ruleset regardless so it doesn't generate any filter errors. Ticket #6181
-
- Thanks Bill
-
-
- NPT ought to allow specifying "LAN subnet", "OPT1 subnet", etc. like firewall rules and other NAT pages for source an...
-
- Even further back, this was fixed by Phil via PR in 2013 and works. ...
-
- fix pushed to prevent ruleset errors in that case. It just leaves an empty file there and still includes it in the ru...
07/05/2016
-
-
- 07:59 PM Revision 0a3ac6e8: Rationalize System Update GUI messages
- At present, when doing a System Update, there is a message box that says:
"Please wait while the installation of comp... - 07:58 PM Revision 936b4560: Protect get_dir from causing PHP errors
- https://forum.pfsense.org/index.php?topic=114570.0
- 07:58 PM Revision 68cf7ccb: Protect get_dir from causing PHP errors
- https://forum.pfsense.org/index.php?topic=114570.0
- 07:58 PM Revision 20dc1d7f: Merge pull request #3042 from NewEraCracker/master
-
- Phillip Davis wrote:
> Firstly the back-end implementation code should Net_IPv6:compress all IPv6 addresses in order... -
- Firstly the back-end implementation code should Net_IPv6:compress all IPv6 addresses in order to make sure the addres...
-
- If you have IPv6 CARP VIPs specified with non-significant zeros, such as fdaa:1234:0012::1, the secondary will see th...
-
-
-
-
- Take the scenario of:
LAN: bridge0
OPT1: igb1
OPT2: igb2
where bridge0 has igb1 and igb2 members. The LAN IP ... -
- If you have IPsec P1s configured with a FQDN as the remote endpoint, and those don't resolve, the filter reload proce...
-
03:49 PM Bug #5737: Traffic Graph Table and Graph Inverted Values
- I was just getting ready to report this as a bug myself.
I guess my question is: how is this not considered a bug... -
- Thanks Luke.
The delay there is from dyndns's checkip service being very slow to respond, there is another ticket... -
- works.
Thanks NOYB -
- This area could use some more work anyhow. I have to fight to get my USB GPS to be recognized at all. It appears we n...
-
- It was relocated because /var/run is a tiny memory disk used for some very volatile files to save disk writes, and th...
-
- The Python prototype we have internally is now plug-and-play as filebeat and topbeat are. It uses the bulk posting AP...
-
- We have Python pushing log records to ELK as a rough prototype. The code is dog simple, and should be relatively easy...
-
11:20 AM
Bug #6577 (Resolved): pkg_edit.php: rowhelper data not preserved on validation error
- e.g.: Install pfBlockerNG and visit pkg_edit.php?xml=/pfblockerng/pfblockerng_v4lists.xml&id=2
Add an IPV4 list sour... - 08:07 AM Revision e4eca5a3: Protect get_dir from causing PHP errors
- https://forum.pfsense.org/index.php?topic=114570.0
07/04/2016
-
02:06 PM Revision 81fb072c: webgui tables, doubleclick event to perform 'edit' action, part 2
- (cherry picked from commit 1c10ce9750f3702f433a91754f79e637e1c3369b)
-
- (cherry picked from commit 1c10ce9750f3702f433a91754f79e637e1c3369b)
- 02:05 PM Revision 86ac7cde: Merge pull request #3041 from PiBa-NL/webgui-table-dblclick
-
- We have a candidate library. [[https://github.com/QHedgeTech/cpp-elasticsearch]] requires only libcurl, already in ba...
-
- Not as such, but we've raised CCLAs with ESF so we can get onto it.
Also, the relatively large binary footprint of... -
09:54 AM Bug #6566: Cloudflare DnyDNS Update with subdomains
- Looking at this again - I don't think this would work for a subdomain such as ip.test.example.com.
It might be pos... -
02:18 AM Bug #6572: Config sync hangs php-fpm on secondary
- Hi Chris,
Also forgot to mention that both PFSense boxes are installed in a VMware environment. We followed the fo... -
- Hi Chris,
We would like to thank you for your reply, please find my replies in line. Do not hesitate to contact us... -
- The issue is php-fpm on the secondary is getting hung up on something. Going to need more info.
Does it happen on... -
- Hi!
Can we also set the:
Router lifetime (now 60 seconds, this is way too low)
Route lifetime, also 60 seconds a...
07/03/2016
-
-
- (cherry picked from commit 54691fc663eae7c6e92e4eaad596906758d7ebea)
-
- (cherry picked from commit 54691fc663eae7c6e92e4eaad596906758d7ebea)
-
08:34 PM Bug #6575 (Closed): GEOM Mirror Status Change Re-sync notices
- Every 1% re-sync creates a notice (and an email alert if configured as such).
Suggest re-sync start, re-sync error... - 08:34 PM Revision 6ad9271a: Merge pull request #3040 from PiBa-NL/webgui-table-dblclick
-
-
- (cherry picked from commit 658180daffe0fe5f005b6fe6b528c758309dffef)
-
- (cherry picked from commit 658180daffe0fe5f005b6fe6b528c758309dffef)
- 05:50 PM Revision 587be0aa: Merge pull request #3039 from PiBa-NL/ipsec-widget-arraycheck
-
-
- Here is the USB config descriptor as seen by Linux.
-
- TL;DR -- the FreeBSD urndis(4) driver needs some serious attention.
People cannot buy discrete ADSL2+ modem cards ... -
- Yup. I have the u-Blox 5 also in an ALIX 6D2 (older rev) and have the necessary leads soldered for 1PPS and UART. But...
-
11:22 AM Bug #6223: IPsec + OpenBGPD fails with "PF_KEY socket: No buffer space available"
- Chris Buechler wrote:
> Michael OBrien wrote:
> >
> > Still having this issue (running OpenBGPd + IPSec - transpo... -
09:41 AM Feature #6573 (Resolved): /var/run/dmesg.boot
- Is it possible to have a @ln -s /var/log/dmesg.boot /var/run/dmesg.boot@? The @vm-bhyve@ package expects the file at ...
- 08:45 AM Revision 9e899320: spdns.de renamed to spdyn.de
- Forgot to update the select description and values
- 08:45 AM Revision 17d422c1: Merge pull request #3038 from exii1988/master
07/02/2016
-
- Assigned to Pingle.
Note as well that we have a (I believe) U-blox GPS receiver that interfaces to the Minnowboard... -
- I notice that there is no way to set the termios bits directly w/o hacking code. It's a possibility I may have to do ...
-
- Swapped out PSU rail on my GPSDO for a discrete external PSU. I think it's still losing characters, however pfSense's...
-
- See NTPD refclock 31 page: [[https://www.eecis.udel.edu/~mills/ntp/html/drivers/driver31.html]]
-
- (This isn't working for me right now -- could be power or cabling issues)
This is just a quick and dirty patch to ... -
- NanoBSD won't be around for much longer, you're better off with a full install anyhow in the long run. If you activat...
-
- This isn't nearly as much of a problem for me right now -- the offending system has been upgraded to use mSATA, throu...
-
- Hi All,
We have 2x PFSense boxes with version 2.3.1-p5 configured with CARP protocol. We have noticed and this is ... -
12:11 PM pfSense Packages Bug #6571 (Resolved): NUT service can not start sometimes after boot when SNMP UPS interface is down
- If NUT is started with SNMP UPS configured and UPS network or card is currently down, an error message appears
"ER... - 10:22 AM Revision fb66c35f: spdns.de renamed to spdyn.de
- Forgot to update the select description and values
- 09:49 AM Revision 608090e8: spdns.de renamed to spdyn.de
- The service renamed there addresses
- 09:47 AM Revision ea301b1b: Merge pull request #3036 from exii1988/master
-
09:39 AM Bug #6260: Namecheap Dynamic DNS does not accept * for hostname even though it is valid
- Tested with pfSense-CE-2.3.2-DEVELOPMENT-amd64-20160702-0342 + Namecheap DDNS using `*` wildcard. Works! Testing was...
- 09:29 AM Revision 1c2c08bd: spdns.de renamed to spdyn.de
- The service renamed there addresses
- 09:20 AM Revision d35b6181: Clarify Negate option description on firewall_nat_out.php.
- 09:19 AM Revision ee3cc6d5: Clarify Negate option description on firewall_nat_out.php.
-
- Configurable check IP services.
Used by Dynamic DNS services to check IP addresses.
Configure as many check IP servic... - 08:41 AM Revision 65292972: Change button order on diag_dns.php so hitting enter in the field does a lookup rather than update alias. semi-related to Ticket #6561
- 08:40 AM Revision 7208f387: Change button order on diag_dns.php so hitting enter in the field does a lookup rather than update alias. semi-related to Ticket #6561
-
- It's fixed.
-
- PR was merged
-
- updated subject is the issue. That case shouldn't cause it to skip requesting PD, for cases where the PD is actually ...
-
- I believe this is the issue in FreeBSD PR 201519.
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=201519
Luiz ... -
- works
07/01/2016
-
- Use of undefined constant min - assumed 'min'
-
- Use of undefined constant min - assumed 'min'
Use of undefined constant max - assumed 'max' -
- Notice: Use of undefined constant min - assumed 'min'
Notice: Use of undefined constant max - assumed 'max' -
- Use of undefined constant min - assumed 'min'
-
- Use of undefined constant min - assumed 'min'
Use of undefined constant max - assumed 'max' -
- Notice: Use of undefined constant min - assumed 'min'
Notice: Use of undefined constant max - assumed 'max' - 09:48 PM Revision ea57c74b: Merge pull request #3035 from BBcan177/patch-1
-
- Use of undefined constant min - assumed 'min'
-
- Use of undefined constant min - assumed 'min'
Use of undefined constant max - assumed 'max' -
- Notice: Use of undefined constant min - assumed 'min'
Notice: Use of undefined constant max - assumed 'max' -
- It probably shouldn't write out anything to /etc/hosts or host_entries.conf for the host's own hostname if DHCP Regis...
-
05:14 AM Bug #6570 (Closed): Unbound breaks DNSSEC for pfSense's own hostname
- During config update, pfSense writes its own FQDN in /etc/hosts, such as:...
-
- appears to be a date/time issue within the VM in this case
-
- seems that now ipv4/ipv6 reverse lookup is broken
-
10:56 AM Feature #6546: pfSense should support logging to e.g. ELK stacks
- Have you made any progress on this? I am trying to get filebeat set up on pfsense right now and ran into CLOG. :-(
-
- Martin Hansen wrote:
> Hi, first ever bug report, bare with me.
>
> Running filebeat on a pfsense to ship logs to... -
- This is mentioned at [[http://support.ntp.org/bin/view/Support/ConfiguringJupiterRefclocks]]
-
- Resolved: now (tested on 2.3.2.a.20160630.1832) "Diagnostics / DNS Lookup" returns AAAA records.
Note: still on f... -
- Fixes hidding of custom individual settings when not in use on user manager page.
- 01:10 AM Revision 591b9184: Merge pull request #3034 from NOYB/startsWith_Polyfill
-
- Fixes hidding of custom individual settings when not in use on user manager page.
-
- I'm working on catching up on PRs, this one coming soon.
06/30/2016
-
11:49 PM pfSense Packages Feature #6141: Convert apcupsd package to 2.3
- Apparently someone has updated the package and it's been waiting on approval here for over a month: https://github.co...
-
- Use correct Thursday abbreviation (s/Thr/Thu/).
-
- Use correct Thursday abbreviation (s/Thr/Thu/).
- 11:31 PM Revision d2f32464: Merge pull request #3033 from NOYB/Diag_Tables_Last_Updated
-
- Use correct Thursday abbreviation (s/Thr/Thu/).
-
- fix pushed
-
- works
-
- looks good, validation is correct in those cases now, no apparent regressions. Thanks Phil!
-
- PR merged
-
- works
-
- works
-
- works
-
- (I will probably have a crack at doing this when time permits... I'm bedding in a GPSDO unit based on the Jupiter, wi...
-
- OK, first of all, I appreciate the hard work you guys have done on cleaning up the backend implementation.
However... -
- OK, so having run headfirst into the bsdconfig wall, I had a rethink about how to express what this ticket is really ...
-
- (From a strictly "consumer of tech" point of view, relying on the base system for this is probably going to cause mor...
-
- works
-
- works.
Thanks for the additional confirmation, Zeev. -
02:14 AM Bug #6364: PHP Fatal error: Allowed memory size of 268435456 bytes exhausted (tried to allocate 32 bytes) in /usr/local/www/status_carp.php on line 261
- Hello,
i added your changes and looks like it works. Chris you are the king :) -
- duplicate of #4766
-
03:54 AM Bug #6564 (Duplicate): Alias URL TABLE(IP) failed loading when WebGUI set to HTTPS
- After setting System -> Advanced -> Protocol to HTTPS
the download of Alias URL TABLES(ip) does not work anymore whe... -
- this was done in pieces across several releases since then, especially in 2.3x+.
-
- probably just need to set the ping payload.
https://forum.pfsense.org/index.php?topic=110043.0
no indication of ... -
10:20 AM Bug #6567 (Not a Bug): Dual Wan Gateway Monitor is offline
- Hello, i am running on pfsense 2.3.1_5_amd64 (latest) and when i switch on dual gateway, the gateways status is offli...
-
- The create alias stuff is still broken due to gethostbyname() usage.
- 12:24 PM Revision 48ebcd49: Fix firewall rules for PPPoE server
- 1) PPPoE Clients are located within 'Remote Address Range' (sa) and not Server Address (ip), see lines 1194 and 1195....
-
11:08 AM Bug #6495: No default route on PPPoE after reconnect or IP change in some cases
- Hi Chris,
system log added. :)
Thanks,
Mario (Marlenio) -
- See also [[https://redmine.pfsense.org/issues/6554]]
-
- Here is how I get around the lack of GUI integration at the moment.
(Requires mode7 support on loopback is re-enable... -
- See attached hack.
-
- If a host such as ip.example.co.uk is used for the cloudflare dynamic dns update the zone_id will fail to be returned...
- 06:43 AM Revision 337f8296: Fix Redmine #6011
- This will add linklocal fallback where no IPv6 is otherwise configured to allow login using this IPs
- 06:42 AM Revision f5ba05cb: Merge pull request #2764 from NewEraCracker/redmine-6011
- 06:20 AM Revision a1d059c2: Allow wildcard for hostname with Namecheap DDNS. Ticket #6260
- 06:20 AM Revision 84a67bf4: Allow wildcard for hostname with Namecheap DDNS. Ticket #6260
-
06:11 AM Revision de8882d6: Whitespace cleanup
-
-
- 06:10 AM Revision 0015e84c: Merge pull request #2729 from zevlag/BountyRequestTopic106193
-
- Diff Option
--diff
SSD Friendlier
Same as default but only copies files that are different, instead of every thing ev... - 06:05 AM Revision d691888e: Merge pull request #3031 from NOYB/GitSync_Diff_Only_Option
-
- Diff Option
--diff
SSD Friendlier
Same as default but only copies files that are different, instead of every thing ev... -
05:24 AM Revision add3c6c5: Get modulus keysize
- Useful utility function when it's necessary to verify that existing keys meets current practices
- 05:24 AM Revision 79299722: Merge pull request #2994 from stilez/patch-31
- 05:20 AM Revision 595b074d: Feature #6388 custom GUI preference settings per user
- 05:20 AM Revision 50d36974: Merge pull request #3018 from phil-davis/usersettings
- 05:01 AM Revision d0acb088: Handle more invalid IPv6 formats
- 05:00 AM Revision a77ed90d: Handle more invalid IPv6 formats
- 05:00 AM Revision 7685fd4e: Merge pull request #3029 from phil-davis/IPv6colons
- 04:58 AM Revision 75b8611e: Rationalize System Update GUI messages
- At present, when doing a System Update, there is a message box that says:
"Please wait while the installation of comp... - 04:57 AM Revision bb5d3a43: Merge pull request #3030 from phil-davis/patch-1
-
04:32 AM Bug #6565: OpenVPN calculates incorrect TCP checksums when running in bridged/tap mode with 'mode server'
- Chris Buechler wrote:
> with tap I'm guessing? That's not the case with tun. Any IP assigned to the server itself is... -
- with tap I'm guessing? That's not the case with tun. Any IP assigned to the server itself is affected (tap IP, LAN IP...
-
- When a connected OpenVPN client attempts to establish a TCP connection with a pfSense OpenVPN server, the server resp...
-
- 04:30 AM Revision f4803487: Merge pull request #3028 from PiBa-NL/2.3_dnsV6
- 04:30 AM Revision 6bc8621f: Rationalize System Update GUI messages
- At present, when doing a System Update, there is a message box that says:
"Please wait while the installation of comp... -
- Generated config:...
-
- Chris Buechler wrote:
> The config either ends up with "mode server" or "server-bridge" depending on the specifics o... - 03:26 AM Revision cd233828: Add playback files for disabling and enabling CARP maintenance mode. Ticket #6560
- 03:26 AM Revision a5297e81: Add playback files for disabling and enabling CARP maintenance mode. Ticket #6560
- 03:25 AM Revision 9a8b5401: Add playback files for disabling and enabling CARP maintenance mode. Ticket #6560
- 03:20 AM Revision 7e9349a5: Handle more invalid IPv6 formats
-
- works
-
- works
-
02:46 AM pfSense Packages Bug #6562: Bug/Wrong description in the squid settings
- Screenshot Author: http://docs.diladele.com/
-
- I think there is a wrong description or maybe a bug in the "certificate adapt" option in the squid https settings. He...
-
- Squid still accepts sha1 certificates.(Man in the middle proxy) I think this should be blocked by default for securit...
-
02:39 AM Bug #6558: Pf-sense 2.3 doesn't detect shutdow event with em driver and Intel Chipset 82574L
- Chris Buechler wrote:
> subject isn't true in general, 82574L in the FW-7541 correctly detects link down and up. e10... -
- exists and works in 2.4
-
- merged a slightly modified fix from PR 2770
https://github.com/pfsense/pfsense/pull/2770
Not sure that suffices t... - 12:49 AM Revision 5f37baed: Omit <secret> tags from L2TP in status.php config.xml dump.
- 12:49 AM Revision 1799a969: Omit <secret> tags from L2TP in status.php config.xml dump.
- 12:49 AM Revision 8d1a6065: Omit <secret> tags from L2TP in status.php config.xml dump.
- 12:42 AM Revision c6060e22: Restore 2.2.x and prior means of obtaining pfsync nodes to avoid exhausting memory on systems with large state tables. Ticket #6364
- 12:42 AM Revision e38e1efd: Restore 2.2.x and prior means of obtaining pfsync nodes to avoid exhausting memory on systems with large state tables. Ticket #6364
- 12:41 AM Revision eef555b9: Restore 2.2.x and prior means of obtaining pfsync nodes to avoid exhausting memory on systems with large state tables. Ticket #6364
-
- merged, thanks Phil
06/29/2016
-
- diag_dns.php lacks IPv6 support. Merged from PR 3028
https://github.com/pfsense/pfsense/pull/3028
Thought we had ... -
- Pull request https://github.com/pfsense/pfsense/pull/3029
Fixes handling of (what should be invalid) formats:
1:2... -
- added. Since it's a trivial addition and not a feature that can introduce regressions, merged to 2_3_1 as well.
-
07:15 PM Feature #6560 (Resolved): Add php shell sessions to enable and disable Persistent CARP Maintenance Mode
- It would be very useful to be able to do this from the CLI when the GUI is unavailable.
-
-
- restored 2.2.x and prior's method of obtaining the nodes, which will prevent it from running out of memory.
-
- This all looks good now. All the test cases that were wrong previously are correct now, and no apparent regressions.
-
- Hi Chris,
new update in thread-
--
Mario (Marlenio)
-
- subject isn't true in general, 82574L in the FW-7541 correctly detects link down and up. e1000 in VMware ESX and Work...
-
- Hi All,
as described in the title, with the 2.3 version of PF-Sense when you unplug an Ethernet cable from a gigab... -
- The config either ends up with "mode server" or "server-bridge" depending on the specifics of your config. That's in ...
-
- Jim Pingle wrote:
> What are the exact settings in use on the OpenVPN server that lead to it being omitted when yo... -
- It's not quite that simple. There are cases when it must be omitted as well, such as some tap bridge scenarios, or Op...
-
- Workaround is to set 'mode server' in the advanced options section.
-
- When creating a new OpenVPN server, the "server mode" web interface drop down does not influence the written configur...
-
- The situation where they fail is where DNS Forwarder or Resolver are not bound to localhost. If resolv.conf doesn't e...
-
- At the moment the user can input a "full" IPv6 address "uncompressed" and it is saved just like that, e.g.:
1:2:3:4:... - 05:57 AM Revision bfa8df8a: Flush link-local IPs so we do not get stale data and do not waste time deleting IP if it is already set to fe80::1:1
- 05:57 AM Revision 4400ad90: Merge pull request #2934 from k-paulius/patch-14
-
04:52 AM Feature #336: Option to create lagg under assign interfaces
- Just to chime in, we're in the process of upgrading loads of our pfSense installs to use LAGG from single links; this...
- 03:36 AM Revision 31df78a8: Merge pull request #2944 from stilez/patch-23
-
- The console menu item #12 (_"pfSense/$product developer shell"_) has a pointless title that doesn't help users much. ...
- 03:32 AM Revision 17315994: Merge pull request #3000 from stilez/patch-32
- 03:01 AM Revision 6dfb6b27: Update include() to include_once()
- For safety, use include_once() when including various "side" files.
There are a couple of instances of include("guico... - 03:01 AM Revision adcb1d08: Merge pull request #3024 from phil-davis/include_once
-
02:13 AM Revision 69eca02c: Shorten gwifip if whole socket path exceeds 100 chars
- dpinger stopps with an error when the socketname exceeds over
(around) 100 characters. The dpinger will not start and... -
- Currently underscores are used to seperate gwifip, monitorip, etc, but
underscors are also used in vlan subinterfaces... -
- dpinger stopps with an error when the socketname exceeds over
(around) 100 characters. The dpinger will not start and... -
- Currently underscores are used to seperate gwifip, monitorip, etc, but
underscors are also used in vlan subinterfaces... - 02:12 AM Revision 5f93d5f1: Merge pull request #3027 from dhoffend/ticket-6505
-
- PR confirmed and merged
06/28/2016
-
- dpinger stopps with an error when the socketname exceeds over
(around) 100 characters. The dpinger will not start and... -
- @Erik: If someone puts the validation code in place to check text-entries in those boxes for validity, then they coul...
-
04:07 PM Bug #6468: Firewall scheduler allows you to set invalid time range
- @Philip: Even if it was not an intention, it was best what happened. It was definitively easier to modify one single ...
-
- Currently underscores are used to seperate gwifip, monitorip, etc, but
underscors are also used in vlan subinterfaces... -
- Axel: could you email me an unsanitized copy of your dhcpd6.leases? cmb at pfsense dot org. Nothing immediately stick...
-
- I like to statically assign DHCPv6 addresses to some devices on my network. But finding the DUID can sometimes be cha...
-
- I'd have to get back to you on that -- e.g. putting a watch on the file contents. There have clearly been leases miss...
-
- Need some examples, what's shown in dhcpd6.leases that doesn't show on the status page?
-
- I've experienced this same issue, in my case it is not limited to mobile devices. I've had this happen with a Macbook...
-
- resolv.conf may not exist or be populated in the chroot of nanobsd upgrades on 2.3.x+. pkg uses that for fetching the...
-
- Thanks Daniel! Looks good, merged to all 3 branches.
-
- The bug has been traced down and fixed. Pull Request is up (ICLA already signed).
https://github.com/pfsense/pfsense... - 08:45 PM Revision ba2c8ed4: Set pipe_slot_limit to the maximum configured qlimit value. Move the set_sysctl out if the block where it only gets run if dummynet isn't already loaded. Ticket #6553
- 08:45 PM Revision fcd9f64c: Set pipe_slot_limit to the maximum configured qlimit value. Move the set_sysctl out if the block where it only gets run if dummynet isn't already loaded. Ticket #6553
- 08:44 PM Revision ef7c3a63: Set pipe_slot_limit to the maximum configured qlimit value. Move the set_sysctl out if the block where it only gets run if dummynet isn't already loaded. Ticket #6553
- 08:05 PM Revision 1b8aa9c8: Clean up limiter text. Remove old commented out bit.
- 08:05 PM Revision 3481524a: Clean up limiter text. Remove old commented out bit.
- 08:04 PM Revision cabb34e4: Clean up limiter text. Remove old commented out bit.
-
- We have started evaluating Duo Security, starting with the duo-unix PAM module package.
It would be extremely usef... -
- pfSense should include a package (and GUI) for driving IEEE 1588 PTPd. This is currently available as a FreeBSD packa...
-
- It should be possible to selectively re-enable Mode 7 packets. This allows PTPd to take time from NTPd on the node. T...
-
- fix pushed
-
- net.inet.ip.dummynet.pipe_slot_limit only exists after dummynet is kldloaded, which comes after the sysctls are appli...
-
-
- Pull request https://github.com/pfsense/pfsense/pull/3026 has a proposed fix and longer explanation.
-
- For example, add a host alias, in the IP Address or FQDN box of the 1st entry put:
1:2:3:xy:4:5:6:7:8
This is acc... - 12:52 PM Revision 426b7b0c: Fix matching of chars in IPv6 address segments
- The existing regex here is wrong, it matches 0 or more of the hex digits but then there can be other rubbish in the s...
- 12:51 PM Revision 3ba22abd: Fix matching of chars in IPv6 address segments
- The existing regex here is wrong, it matches 0 or more of the hex digits but then there can be other rubbish in the s...
- 12:51 PM Revision a495f6b3: Merge pull request #3026 from phil-davis/patch-2
- 12:49 PM Revision a88f0ee6: Remove a-f from IPv4 address pattern
- It seems to me that a through f should not be part of the pattern for the "V4" case.
(cherry picked from commit 1f49d... - 12:49 PM Revision e4c5b7d4: Remove a-f from IPv4 address pattern
- It seems to me that a through f should not be part of the pattern for the "V4" case.
(cherry picked from commit 1f49d... - 12:48 PM Revision d16eec1f: Merge pull request #3025 from phil-davis/patch-1
-
- Add a host alias, in the IP Address or FQDN box of the 1st entry put:
1:2:3:::4:5:6:8 or 1:2:3:4:5:6:::8 or simila... -
- As noted above, it is correct as-is.
-
- It is correct - there is ~10 MB/s of data (download) coming in WAN (from the internet) and then that ~10 MB/s is goin...
-
02:20 AM Bug #6550 (Not a Bug): Bandwidth LAN IN/OUT reversed
- See attached screen shot.
WAN IN 10.14 MB/s
LAN OUT 10.11 MB/s
LAN IN 292.99 KB/s
LAN IN should be 10.11 MB/s - 06:39 AM Revision 8a950b3c: Fix matching of chars in IPv6 address segments
- The existing regex here is wrong, it matches 0 or more of the hex digits but then there can be other rubbish in the s...
- 04:50 AM Revision 1f49dd8a: Remove a-f from IPv4 address pattern
- It seems to me that a through f should not be part of the pattern for the "V4" case.
06/27/2016
- 11:31 PM Revision 86573bb9: Update include() to include_once()
- For safety, use include_once() when including various "side" files.
There are a couple of instances of include("guico... -
-
-
-
-
-
-
-
-
- There is no /etc/fstab post-install on 2.4.
-
- I was already looking at those, taking
-
- Issue:
Interface advanced dhcp client configuration
https://forum.pfsense.org/index.php?topic=87570
Two Availabl... - 07:16 PM Revision 71d3c2f7: Always use require_once
- The usage of require() and require_once() throughout the system is
inconsistent, and "bugs" come up now and then when... - 07:16 PM Revision aceaf18c: Always use require_once
- The usage of require() and require_once() throughout the system is
inconsistent, and "bugs" come up now and then when... - 07:15 PM Revision 687a1879: Merge pull request #3022 from phil-davis/require_once
-
-
-
- Looking at the code from dpinger it seems that this is not something we really can count on.
https://github.com/de... -
- Manuelly applied the change to my system.inc file. Seems to work. The static routes using a dynamic IPv6 WAN Gateway ...
-
-
-
-
-
-
-
-
-
-
-
-
- Specific text is in https://tools.ietf.org/html/rfc5952#section-4.3
Kicking back to ISP (who may blame their IPAM ... -
- Good point re RFC -- I'll have to kick that back to them. It is a Standards Track RFC after all.
-
- RFC 5952, uppercase is forbidden. This is true in all the screens that accept IPv6 addresses or networks.
We ough... -
- I noticed that the address fields in the Virtual IPs edit screen reject upper-case hex digits in IPv6 addresses.
T... -
-
-
-
- we're working through them.
-
- subject isn't true, there is a separate ticket for the DNS lookup page not supporting IPv6.
-
01:53 PM pfSense Packages Feature #6537: Suricata does not autopopulate IP Reputation list from Emerging Threats on rules update
- Tried importing manually, this does not work the way one would expect. Please close.
-
- we ship what's included in the FreeBSD version used.
-
- The version of tcpdump/libpcap in 2.3.1-x is lagging; this makes debugging IPv6 turn-ups slightly more difficult.
... -
- The log browser in the package tab only shows the first few lines for each log target.
Right now, it's easier to u... -
- pfSense logging is based around the FreeBSD base system's syslogd logging daemon.
This can be tricky to integrate ... -
- As far as I can see, this is not currently possible with mpd. If you need this sort of functionality, you'll have to ...
-
06:57 AM Feature #6545 (Needs Patch): Show active sessions and manually disconnect option to PPPoE server
- Hello,
It will be great to have "Users Logged In" option to PPPoE server services as Captive portal.
It could h... -
- First two sentences above are reversed -- my bad.
TL;DR -- a Cisco will let you advertise 'M' *and only 'M'*, caus... -
- pfSense IPv6 RA support in 2.3.1-x correctly includes the 'M' (Managed) bit in its advertisements.
By contrast, Ci... -
- We use an HPE switch to implement MAC layer security. It is configured to snoop DHCP request & inject Option 82 (RFC ...
-
- I have noticed from time-to-time that some IPv6 devices have taken a DHCPv6 dynamic lease, and do not show up in the ...
-
- (We understand there's a fix in progress for this, at least for IPv4.)
The DHCPv6 lease status tab lacks an option... -
- (This may also be a shortcoming in PF itself).
Currently there is no way to specify an ICMPv6 type range in the GU... - 05:00 AM Revision c81ef6e2: Always use require_once
- The usage of require() and require_once() throughout the system is
inconsistent, and "bugs" come up now and then when...
06/26/2016
-
- oh.. maybe for the same reason is not possible to resolve ipv6 addresses in firewall log...
-
11:43 AM
Bug #6536 (Resolved): update + reboot, did not trigger the webgui 90 second countdown
-
- Oké thanks, confirmed fixed when i updated today to "built on Sun Jun 26 08:40:49 CDT 2016" it worked as expected.
- 11:31 AM Revision 264ca54e: simplify DHCP_Config_Option_Split, no loop needed for returning option array
06/25/2016
-
10:49 PM pfSense Packages Bug #6521: pfsense 2.3.1 squidguard -> Groups ACL -> Target Rules List missing...
- It works if I change
squidguard_before_form_acl($pkg); to squidguard_before_form_acl($pkg,false);
in
/usr/local/pk... -
- The snort rules update process auto-populates the ET IP reputation list into SNORT_IPREP_PATH on rules update. Suric...
-
05:58 PM
Bug #6536 (Feedback): update + reboot, did not trigger the webgui 90 second countdown
- Thanks. This was fixed earlier this week and should be good in any snapshot since then.
-
- update + reboot, did not trigger the webgui 90 second countdown
Coming from a snapshot about 5 days old i think now ... -
- Hi Chris,
i post in open thread, but in my setup the file you ask isn't present.
--
Mario (Marlenio) -
01:41 PM pfSense Packages Bug #6305: Quagga problems updating routes / mistakenly showing "kernel"-routes while they are not
- Okay ... I have to set-up already that if i upgrade the package back to the new one, the issue will happen. Jim ... ...
-
- github pullrequests, please pull or comment
There are quite a few pullrequests pending on github without any reaso... -
- Unbound returns AAAA records just perfectly fine as you can see from shell (using host, drill or whatever). That page...
-
- DNS resolver doesn't returns AAAA records.
From web gui: Diagnostics --> DNS Lookup
If FQDN has A and AAAA records ... - 06:34 AM Revision 57d6340b: bring back subnetv4_expand function used by pfblockerng
- 06:34 AM Revision 2208be8b: bring back subnetv4_expand function used by pfblockerng
- 04:02 AM Revision 51e30c40: Use the translated destination for kill_states if one exists. Ticket #6531
- 04:02 AM Revision 515f53a8: Use the translated destination for kill_states if one exists. Ticket #6531
- 04:01 AM Revision e6ddb55e: Use the translated destination for kill_states if one exists. Ticket #6531
- 03:23 AM Revision ebb1e0a5: Correct/clarify column header. Ticket #6530
- 03:23 AM Revision ea81ba1c: Correct/clarify column header. Ticket #6530
- 03:22 AM Revision 31f171e4: Correct/clarify column header. Ticket #6530
- 03:20 AM Revision d4f9997b: Fix style
- 03:20 AM Revision 51a3acee: Fix style
- 03:20 AM Revision 4e658db2: Fix style
- 03:19 AM Revision e565e949: pfSense_get_pf_states always returns source as src and dest as dst, this flipping based on direction is wrong. Ticket #6530
- 03:18 AM Revision ad5fb4a0: pfSense_get_pf_states always returns source as src and dest as dst, this flipping based on direction is wrong. Ticket #6530
- 03:18 AM Revision ab86e2d6: pfSense_get_pf_states always returns source as src and dest as dst, this flipping based on direction is wrong. Ticket #6530
- 02:59 AM Revision 84c7a8f3: Fix style
- 02:59 AM Revision e41468cf: Fix style
- 02:59 AM Revision 76933fc6: Fix style
-
- Sorry, but it shouldn't have been merged in the first place. There is discussion on the forum NOYB linked as to why. ...
-
- The RA page should allow configuration of Min and MaxRtrAdvInterval.
-
- works in Chrome, Firefox, Safari, Opera and IE.
-
- subject is definitely not true, please post to the forum for troubleshooting assistance.
-
12:10 AM Bug #6532 (Not a Bug): LAN rule with gateway left at default stops traffic.
- I have a LAN rule where a specific host goes over a VPN gateway.
The rule is super LAN simple - IPv4 *, source ho... -
12:07 AM Revision 2556e623: Add include of functions.inc for declaration of gettext
-
- 12:06 AM Revision 44308ac0: Merge pull request #3013 from dennypage/master
06/24/2016
-
- works
-
- fixed
-
- Nice catch, Harry.
Looks like this should be easy to fix, Luiz please review. -
- I've got a case that hangs every type as noted above. And I have a patch.
/cf/hc_filterlog:
#!/bin/tcsh
3>&-... -
- fix pushed
-
- diag_dump_states.php kill states passes the srcip and destip to pfSense_kill_states in all cases. That doesn't match ...
-
- also fixed the column header description.
-
- diag_dump_states.php gets source and destination wrong on the kill states option for the 'in' direction.
-
-
If you wish to discuss it, options, and alternatives.
New DNS Resolver Overrides Page
https://forum.pfsense.o... -
-
02:32 PM Bug #6529 (Duplicate): dhcp6c fails to start with track6 on a bridge interface
- I noticed today that IPv6 wasn't working, and found this in the dhcpd log....
-
-
- Hi Chris,
> > I'm not sure what circumstance triggers this, but judging by the number of reports in that thread t... -
- It's a specific 2.4 change, only in master branch
This reverts commit 00a7688401c15015c3f43735b2b1536ebfec7e92. -
07:51 AM Bug #6177: pkg update checking with no Internet access kills web GUI
- edit.
-
- edit
-
- Chris Buechler wrote:
> IPv6 works just fine on pkg.pfsense.org. You're not hitting the issue here, please start a... - 06:36 AM Revision 412a9cd0: Include interface scope on IPv6 static routes to link local gateway IPs. Ticket #6506
- 06:35 AM Revision 8e8108e6: Include interface scope on IPv6 static routes to link local gateway IPs. Ticket #6506
- 06:35 AM Revision eea84f0a: Include interface scope on IPv6 static routes to link local gateway IPs. Ticket #6506
-
05:46 AM Bug #6528 (Resolved): The captive portal cannot be used on interface lan since it is part of a bridge but works anyway
- Hello,
I've setup a captive portal on my LAN interface.
Later, I've setup a OpenVPN tap connection where the tap1... - 02:22 AM Revision 72a6e5d0: Comment typo
- (cherry picked from commit b069f77e0a5e355e811dd7bd4a4d17a802a3f682)
- 02:22 AM Revision 0bcda37b: Comment typo
- (cherry picked from commit b069f77e0a5e355e811dd7bd4a4d17a802a3f682)
- 02:21 AM Revision b069f77e: Comment typo
-
- fix pushed to always include interface scope on static routes to a link local v6 gateway IP.
06/23/2016
-
10:38 PM pfSense Packages Bug #6527: Squid 3.5 - Deprecated "ssl_bump server-first all" don't allow SNI in transparent mode with HTTPS/SSL Interception
- Edited in order to add more information about ssl peek and splice
http://wiki.squid-cache.org/Features/SslPeekAndS... -
- As described in the squid wiki, "ssl_bump server-first all" is deprecated in squid 3.5+
http://wiki.squid-cache.or... - 10:22 PM Revision 5a42473b: Revert "adding privileges and separating DNS Resolver overrides from general settings"
- This reverts commit fc76a1e390c8ce9579df31457c74d1d0e572b78d.
- 10:22 PM Revision 8b056044: Revert "adding privileges and separating DNS Resolver overrides from general settings"
- This reverts commit fc76a1e390c8ce9579df31457c74d1d0e572b78d.
- 10:21 PM Revision bc54d32d: Revert "adding privileges and separating DNS Resolver overrides from general settings"
- This reverts commit fc76a1e390c8ce9579df31457c74d1d0e572b78d.
-
05:55 PM Feature #6210: create user privilege for only DNS Host and Domain Overrides in DNS Resolver
- Chris Buechler wrote:
> This isn't desirable. We don't want to add yet another new menu item, for a use case that I ... -
- This isn't desirable. We don't want to add yet another new menu item, for a use case that I think you're the only per...
-
- (cherry picked from commit 5c403f843291bdc670dcdb45e1e097f2eb7f36ab)
-
- (cherry picked from commit 5c403f843291bdc670dcdb45e1e097f2eb7f36ab)
- 05:34 PM Revision 4db9f6d0: Merge pull request #3019 from NOYB/RFC2136_Client_Edit_Priv_Def
- 05:33 PM Revision c0b34e4c: Load actual value of webguihostnamemenu
- This is a string from a list of valid values (empty, "hostonly", "fqdn"). So it is not correct to just gather a true/...
- 05:33 PM Revision 0f6e77fd: Load actual value of webguihostnamemenu
- This is a string from a list of valid values (empty, "hostonly", "fqdn"). So it is not correct to just gather a true/...
- 05:32 PM Revision 6d62e15a: Merge pull request #3017 from phil-davis/patch-2
- 05:31 PM Revision 9c025aa5: Restored countdown functionality and menu refresh on successful update/remove/install
- Added comments to clarify operation of the page
(cherry picked from commit 18295ff2f907f638afa9f7c665cc16e4262e6899) - 05:31 PM Revision dbf01363: Restored countdown functionality and menu refresh on successful update/remove/install
- Added comments to clarify operation of the page
(cherry picked from commit 18295ff2f907f638afa9f7c665cc16e4262e6899) - 05:30 PM Revision 18295ff2: Restored countdown functionality and menu refresh on successful update/remove/install
- Added comments to clarify operation of the page
-
- Nicola Bressan wrote:
> I've experienced a similar issue.
>
> can you have a look in it?
> or maybe fix IPv6 ans... -
- hello,
I've experienced a similar issue.
pfSense 2.3.1_5
IPv6 tunnel configured
pfSense in GUI was checking ... -
-
-
-
-
-
-
-
-
-
- Maybe this is somehow related to https://redmine.pfsense.org/issues/6515
When submitting a change in interfaces_assi... -
06:46 AM Bug #6400: assign_interfaces.php issues with large numbers of interfaces
- We have been doing some testing on one of our sites.
Under 2.2.4 no issue with 100 vlans, under 2.3.1-RELEASE-p5 a... -
06:51 AM Feature #6526 (Closed): pfSense Update information via SNMP
- For automatic update checking with monitoring systems like Icinga it would be great to have the update status of the ...
-
- We have been doing some testing on one of our sites.
Under 2.2.4 no issue with 100 vlans, under 2.3.1-RELEASE-p5 a... -
05:53 AM Bug #6495: No default route on PPPoE after reconnect or IP change in some cases
- Same here. After reconnect (PPPoE) there was no default route set.
-
-
- ok let's wait for this then!
-
- I have some code under review that allows custom GUI preference settings per user.
https://redmine.pfsense.org/issue... -
- yes that solves the problem, but I find very handy to have it fixed when I use it with a normal web browser at home a...
-
- Try changing System->General Setup, webConfigurator section, Top Navigation. Set it to "Scrolls with page". That shou...
-
- When accessing pfSense web interface from mobile device and selecting a menu with long list of items (like "Services"...
-
- Note: New pull request https://github.com/pfsense/pfsense/pull/3018 has the proposed solution all in 1 commit that is...
- 02:53 AM Revision 8bab524e: Feature #6388 custom GUI preference settings per user
- 01:50 AM Revision e93242eb: Load actual value of webguihostnamemenu
- This is a string from a list of valid values (empty, "hostonly", "fqdn"). So it is not correct to just gather a true/...
- 01:07 AM Revision 0ce30f4a: Clarify ports alias hint. Ticket #6523
- 01:07 AM Revision 9e45ab6d: Clarify ports alias hint. Ticket #6523
- 01:06 AM Revision 9a17d293: Clarify ports alias hint. Ticket #6523
06/22/2016
-
- confirmed, thanks
-
- No, with pushed to the system i mean: When the static route that you've added using the WebUI is getting added to the...
- 10:55 PM Revision 332a64d0: Allow passing comma in string quoted DHCP client options
-
-
-
- clarified hint
-
- It works as it always has, and as intended. Each box can only contain a single port or range.
I'll clarify the de... -
08:11 AM Bug #6523 (Resolved): Firewall/Aliases/Ports: Unclear description and/or result of desired format
- Current hint is: "Enter as many ports as desired. Port ranges can be expressed by separating with a colon."
Expect... -
- it's workable just fine. You can't have the same subnet on two diff interfaces of any firewall/router. You have some ...
-
06:12 PM Bug #6524 (Not a Bug): 192.168.100.0/24 subnet with Cable Modem WAN un-workable
- So here is the scenario i ran into today.
Customer Subnet is 192.168.100.1/24
Customer WAN IP is 174.77.55.XX6/28... -
- No problem, thanks for checking. Marking as resolved.
-
- Thx, todays snap is OK.
-
04:42 PM Bug #6495: No default route on PPPoE after reconnect or IP change in some cases
- Just to let you know, unfortunately this hasn't solved my issue, and the line is dead again.
-
- Hi Chris,
> I'm not sure what circumstance triggers this, but judging by the number of reports in that thread ther... -
- Yep, it's static in as much as it's supposed not to alter, and is the way that most "static IP" addresses are dished ...
-
- Michael Knowles wrote:
> p.s. - The ADSL i'm using in this instance has a "static IP" delivered from the ISP via DHC... -
- p.s. - The ADSL i'm using in this instance has a "static IP" delivered from the ISP via DHCP (or whatever mechanism i...
-
- Hi,
I'm the author of Bug #6423. This bug sounds remarkably similar to my symptoms.
I'm going to get the onsit... -
-
-
- 03:57 PM Revision bb44b41a: Fix Bug #6394 - Incorrect Output of Translation
- Apparently gettext() does not behave correctly when passed an empty string, this commit ensures gettext() is called o...
- 03:57 PM Revision 94b5eb1f: Fix Bug #6394 - Incorrect Output of Translation
- Apparently gettext() does not behave correctly when passed an empty string, this commit ensures gettext() is called o...
- 03:57 PM Revision 44de9a2d: Merge pull request #3011 from NewEraCracker/redmine-6394
-
- (cherry picked from commit 40d7e4bee91246db09cc88141869abcd37390bc7)
-
- (cherry picked from commit 40d7e4bee91246db09cc88141869abcd37390bc7)
- 03:54 PM Revision c0643ee4: Merge pull request #3010 from NOYB/Remove_Duplicate_ListTags_Entry
-
- Function isn't used in main or packages repo, and in any case would need a complete rewrite to handle IPv6.
(cherry p... -
- Function isn't used in main or packages repo, and in any case would need a complete rewrite to handle IPv6.
(cherry p... - 03:47 PM Revision 24f97159: Merge pull request #3006 from stilez/patch-33
- 03:45 PM Revision 8c512801: Fix #6482 OpenVPN Redirect Gateway Option Causes GUI Issue
- This fixes the GUI inconsistency reported in the referenced bug. On edit of an OpenVPN server that has tun mode, not ...
- 03:45 PM Revision 8cec6ee6: Fix #6482 OpenVPN Redirect Gateway Option Causes GUI Issue
- This fixes the GUI inconsistency reported in the referenced bug. On edit of an OpenVPN server that has tun mode, not ...
- 03:44 PM Revision 8a63f7f0: Merge pull request #3005 from phil-davis/patch-4
- 03:43 PM Revision 4a89ba61: added missing div.content wrapper when reloading filters
- (cherry picked from commit e8406abe627675db2c2f77a81c1bb883f5158bb6)
- 03:43 PM Revision 73578b77: added missing div.content wrapper when reloading filters
- (cherry picked from commit e8406abe627675db2c2f77a81c1bb883f5158bb6)
- 03:43 PM Revision 6f054658: Merge pull request #3004 from hailthemelody/master
- 03:41 PM Revision 2031be9c: Fix PHP Warning about invalid argument supplied for foreach
- If _POST['members'] or _POST['groups'] is not set / none selected at GUI, it would give a warning on crash reporter (...
- 03:41 PM Revision 0e5ebefd: Fix PHP Warning about invalid argument supplied for foreach
- If _POST['members'] or _POST['groups'] is not set / none selected at GUI, it would give a warning on crash reporter (...
- 03:40 PM Revision 1705d6ed: Merge pull request #3002 from NewEraCracker/patch-invalid-foreach
- 03:39 PM Revision 50264b58: Fix bad escapeshellarg logic on mpd execution
- With this change single-quotes are applied in correct places
(cherry picked from commit 08cd022545be58a46b860500ff81... - 03:39 PM Revision 631c29af: Fix bad escapeshellarg logic on mpd execution
- With this change single-quotes are applied in correct places
(cherry picked from commit 08cd022545be58a46b860500ff81... - 03:38 PM Revision 6c94ebc3: Merge pull request #3001 from NewEraCracker/patch-pppoe-mpd
- 03:32 PM Revision 4125445f: Do not allow deleting your own user name
- Currently if you delete your own user name, then the config ends up with a blank user tag in it. Rather than fix that...
- 03:31 PM Revision 01a0385e: Do not allow deleting your own user name
- Currently if you delete your own user name, then the config ends up with a blank user tag in it. Rather than fix that...
- 03:31 PM Revision 5522c61f: Merge pull request #2989 from phil-davis/patch-2
-
- (cherry picked from commit 70381d4803b9424c1a3f3ef518d8243062452d77)
-
- (cherry picked from commit cf63f1638aab685cc956502f5ddd862a10bf3ff8)
-
- to match edit to util.inc
(cherry picked from commit c57e936a6596550619f7261e85b633ca5016cbf2) -
- 1) Function can be simplified and all "if" statements removed, using intdiv (or casting result as int for PHP < 7) an...
-
- (cherry picked from commit 70381d4803b9424c1a3f3ef518d8243062452d77)
-
- (cherry picked from commit cf63f1638aab685cc956502f5ddd862a10bf3ff8)
-
- to match edit to util.inc
(cherry picked from commit c57e936a6596550619f7261e85b633ca5016cbf2) -
- 1) Function can be simplified and all "if" statements removed, using intdiv (or casting result as int for PHP < 7) an...
- 03:22 PM Revision 2ed50d13: Merge pull request #2988 from stilez/patch-28
-
- Useful function in some circumstances - seems no reason not to have it.
Uses IP rather than hostname since not all A... -
- Useful function in some circumstances - seems no reason not to have it.
Uses IP rather than hostname since not all A... - 03:17 PM Revision dbef2183: Merge pull request #2987 from stilez/patch-27
- 03:15 PM Revision d1626706: Fix NTP PPS. It had 'None' option available on 2.2.x.
- (cherry picked from commit ceabd66d57f7199602d3a23cb8a60080bcfa67ea)
- 03:14 PM Revision 2a68fcd3: Fix "Unable to remove NTP GPS from configuration"
- https://forum.pfsense.org/index.php?topic=112771.msg627573
(cherry picked from commit 55de528cbb177b4a1f40554ad1a5671... - 03:14 PM Revision 74d0b334: Fix NTP PPS. It had 'None' option available on 2.2.x.
- (cherry picked from commit ceabd66d57f7199602d3a23cb8a60080bcfa67ea)
- 03:14 PM Revision 8d179341: Fix "Unable to remove NTP GPS from configuration"
- https://forum.pfsense.org/index.php?topic=112771.msg627573
(cherry picked from commit 55de528cbb177b4a1f40554ad1a5671... - 03:14 PM Revision e786d286: Merge pull request #2986 from NewEraCracker/patch-ntp-gps
-
- (cherry picked from commit f208e9690e2ec4089cf3d3fe5f5f03fed5a36e6f)
-
- (cherry picked from commit 01b5410ae8391998ba560d40f447c7f556472c5b)
-
- backups should be a numeric int.
text hint for number of backups can now refer to the global value for this platform ... -
- At the same time the platform is being detected for PHP/GUI purposes, set the default number of backups. Also handle ...
-
- (cherry picked from commit ca55edc39342865816feef390616be8b770c889b)
-
- (cherry picked from commit f208e9690e2ec4089cf3d3fe5f5f03fed5a36e6f)
-
- (cherry picked from commit 01b5410ae8391998ba560d40f447c7f556472c5b)
-
- backups should be a numeric int.
text hint for number of backups can now refer to the global value for this platform ... -
- At the same time the platform is being detected for PHP/GUI purposes, set the default number of backups. Also handle ...
-
- (cherry picked from commit ca55edc39342865816feef390616be8b770c889b)
- 03:11 PM Revision 4c93645c: Merge pull request #2982 from stilez/patch-26
-
- (cherry picked from commit b56769c30a23af9f575ee4a5f056558ef8322f95)
-
- Large keys are not "slower to use" in many cases, since they are only used to validate or set up a session. An ongoin...
-
- (cherry picked from commit 7c684f3b95f641134496bc1210cfb2d814468767)
-
- ...and add some useful info to guide the user.
(cherry picked from commit 49810252681df9bd553e2221c885ceffaa2c4c7f) -
- Add key lengths to the OpenVPN options, for asymmetric keys of size 3072 (for current use), 7680, 15360 (for long ter...
-
- (cherry picked from commit b56769c30a23af9f575ee4a5f056558ef8322f95)
-
- Large keys are not "slower to use" in many cases, since they are only used to validate or set up a session. An ongoin...
-
- (cherry picked from commit 7c684f3b95f641134496bc1210cfb2d814468767)
-
- ...and add some useful info to guide the user.
(cherry picked from commit 49810252681df9bd553e2221c885ceffaa2c4c7f) -
- Add key lengths to the OpenVPN options, for asymmetric keys of size 3072 (for current use), 7680, 15360 (for long ter...
- 03:05 PM Revision e98865a8: Merge pull request #2942 from stilez/patch-22
-
03:03 PM Revision ef609a57: Added option to System > General Setup > webConfigurator to change the title of the Help menu in the navbar to either the system hostname or fqdn.
- (cherry picked from commit 1d12996755ee6fb9b9e163d292bdba160a926e64)
-
- (cherry picked from commit 1d12996755ee6fb9b9e163d292bdba160a926e64)
- 03:02 PM Revision 612e27ac: Merge pull request #2935 from cfazendin/hostname_menu
-
02:55 PM Revision b8eb4e7f: Make QinQ interfaces work again
- (cherry picked from commit 1322ee22354f1a6e184819fb7009a2996b63de97)
-
- (cherry picked from commit 1322ee22354f1a6e184819fb7009a2996b63de97)
- 02:55 PM Revision 253919a5: Merge pull request #2906 from Chrisc-c-c/Fix-QinQ-Interfaces
- 02:50 PM Revision ab8c4106: Allow IGMP Proxy logging verbosity to be selected via system log settings (PR 2901)
- (cherry picked from commit 2bd0585e30e5ec8fc3b79ca3f579bf9a7c1bcbc8)
- 02:50 PM Revision 61d6a840: Allow IGMP Proxy logging verbosity to be selected via system log settings (PR 2901)
- (cherry picked from commit 2bd0585e30e5ec8fc3b79ca3f579bf9a7c1bcbc8)
- 02:49 PM Revision 2bd0585e: Allow IGMP Proxy logging verbosity to be selected via system log settings (PR 2901)
-
02:18 PM Revision 1ac8faed: adding privileges and separating DNS Resolver overrides from general settings
- (cherry picked from commit fc76a1e390c8ce9579df31457c74d1d0e572b78d)
-
- (cherry picked from commit fc76a1e390c8ce9579df31457c74d1d0e572b78d)
- 02:18 PM Revision dbab5a7e: Merge pull request #2891 from gottaloveit/dns-overrides-privs
-
02:14 PM Bug #6099: igmpproxy does not recognize upstream interface
- As said my provider is using IGMPv3 which I cannot get to work (so I will stay on 2.2.6 for the time being).
I've ... -
- Greg Myran wrote:
> I want to thank you again for your efforts.
You're welcome,
> I've moved my multicast traffic... - 02:07 PM Revision fe2b8de7: Force 4096 RSA keys
- Add option `-b 4096` to force the keys to 4096-bit.
This parameter is ignored for Ed25519 keys.
(cherry picked from... - 02:07 PM Revision 1ffd4c51: Harden sshd_config
- The changes are better explained in the following article:
https://stribika.github.io/2015/01/04/secure-secure-shell... - 02:06 PM Revision 088ffabc: Force 4096 RSA keys
- Add option `-b 4096` to force the keys to 4096-bit.
This parameter is ignored for Ed25519 keys.
(cherry picked from... - 02:06 PM Revision a9274a80: Harden sshd_config
- The changes are better explained in the following article:
https://stribika.github.io/2015/01/04/secure-secure-shell... - 02:05 PM Revision 90913bc7: Merge pull request #2783 from jlduran/harden-sshd_config
- 12:47 PM Revision 384ffced: Fixed #6504 by making table sortable
- (cherry picked from commit 55f67b5abd9b809807e328477779d97120908273)
- 12:47 PM Revision 4a4a4c41: Fixed #6504 by making table sortable
- (cherry picked from commit 55f67b5abd9b809807e328477779d97120908273)
- 12:45 PM Revision 55f67b5a: Fixed #6504 by making table sortable
- 11:45 AM Revision 76f6498f: jQuery datepicker added to interfaces.php and interfaces_ppps_edit.php for setting custom expirey date
- (cherry picked from commit d85d82b7686d5899948e6ec4b1587e74937820cf)
- 11:45 AM Revision df38ab93: jQuery datepicker added to interfaces.php and interfaces_ppps_edit.php for setting custom expirey date
- (cherry picked from commit d85d82b7686d5899948e6ec4b1587e74937820cf)
- 11:43 AM Revision d85d82b7: jQuery datepicker added to interfaces.php and interfaces_ppps_edit.php for setting custom expirey date
- 11:27 AM Revision 246be5d3: Fixed #6516 by replacing HTML5 datepicker with jQuery widget
- (cherry picked from commit 53c38ff16c1eb8743e69d506f69167c88cf34910)
- 11:27 AM Revision f11862a3: Fixed #6516 by replacing HTML5 datepicker with jQuery widget
- (cherry picked from commit 53c38ff16c1eb8743e69d506f69167c88cf34910)
- 11:26 AM Revision 53c38ff1: Fixed #6516 by replacing HTML5 datepicker with jQuery widget
-
08:23 AM Bug #6520: Time out when trying to look at interfaces_assign.php
- Here are the logs :
Jun 22 15:21:51 fw2.ds nginx: 2016/06/22 15:21:51 [error] 21284#0: *121 upstream timed out (60: ... -
- Hello,
Since the update in 2.3, I get a time out when trying to reach interfaces_assign.php. Then the whole web inte... -
07:50 AM
Feature #6504: services_dhcp.php: DHCP Static Mappings table should be sortable
- Applied in changeset commit:55f67b5abd9b809807e328477779d97120908273.
-
07:41 AM
Feature #6504 (Feedback): services_dhcp.php: DHCP Static Mappings table should be sortable
- Table is now sortable as requested
-
07:39 AM
Feature #6504 (Assigned): services_dhcp.php: DHCP Static Mappings table should be sortable
-
- With plain PSK auth you enter the Identifiers and keys on the PSK tab and/or in the PSK field on accounts in the user...
-
06:52 AM Bug #6522 (Not a Bug): Mobile IPSec with PSK does not supply option to provide PSK
- When I create the IPsec for the mobile clients, I choose PSK as Phase1 security. However, I cannot select any predefi...
-
- Hi Jim,
You made the right considerations. I'll continue to use the manual option.
Thanks in advance,
--
Mario -
- No, it is not. The option cannot be changed while the disk is mounted. Also, hardware support for TRIM is not univers...
-
- Hi,
It would be possible to add an option to enable TRIM SSD in the GUI instead of via command line? -
06:30 AM
Bug #6516: Calendar date picker on system_usermanager.php only works in Chrome
- Applied in changeset commit:53c38ff16c1eb8743e69d506f69167c88cf34910.
-
06:28 AM
Bug #6516 (Feedback): Calendar date picker on system_usermanager.php only works in Chrome
- HTML5 datepicker replaced with jQuery widget. It seems that Chrome and Opera are the only browsers that implement the...
-
06:23 AM Feature #2358: NAT64 support
- UPVOTE
-
- The clickable "Target Rules List" field in menu "Groups ACL" disappears if more than 3 "Target categories" are define...
-
02:58 AM Bug #6518 (Closed): IPsec phase 1 VPN not working with IPv6+DNS with "My IP Address" as identifier
- Hi,
I'm running pfSense : ... -
02:37 AM Revision 9e680116: fix rowhelper select_source empty combo
- while using $config['installedpackage']{['...'] as source
-
- while using $config['installedpackage']{['...'] as source
- 02:37 AM Revision bc8b18a9: Merge pull request #3015 from marcelloc/patch-4
- 01:25 AM Revision cb74937f: add htop to poudriere_bulk
- 01:25 AM Revision e388275c: add htop to poudriere_bulk
- 01:25 AM Revision e9ac4800: add htop to poudriere_bulk
- 12:40 AM Revision ac3e3baa: Only call interfaces_vips_configure once if it's needed, rather than doing the same thing over and over for every VIP on an interface. Ticket #6515
- 12:40 AM Revision 6fd9645e: Only call interfaces_vips_configure once if it's needed, rather than doing the same thing over and over for every VIP on an interface. Ticket #6515
- 12:40 AM Revision d75c55fb: Only call interfaces_vips_configure once if it's needed, rather than doing the same thing over and over for every VIP on an interface. Ticket #6515
-
- Dmitriy K wrote:
> This fix wont be pushed in current stable?
Needed to be confirmed in 2.3.2 snapshots first.
... -
- Waldo Nell wrote:
>
> string(10) "10.200.1.1"
> int(16)
that's correct, and exactly what it's checking for the... -
- a firewall isn't a NAS, trying to be one isn't of interest.
06/21/2016
-
- Daniel Hoffend wrote:
> when a static route gets pushed to the system
What do you mean by "pushed to", that via ... -
- It's probably similar to this: https://forum.pfsense.org/index.php?topic=112358.0.
It could be replaced with the ... -
- The calendar date picker on system_usermanager.php doesn't show up in any browser other than Chrome from the looks of...
-
-
- Tomas Ulicky wrote:
>
> Why deleted target version?
Duplicate closed tickets need that removed so it doesn't me... -
- works
-
- Applied in changeset commit:a08208f81bcb2812bdda07e21b501447fb350408.
-
- In some cases, a process can crash and the resulting core file fills /var/run/ if that was the working directory for ...
-
- works
-
05:00 PM
Bug #6514 (Feedback): services_captiveportal_zones_edit.php: Zone name cannot start with a number
- Applied in changeset commit:f0a053846d6cde2724c47b5553e1395cfd21445c.
-
- The zone name on services_captiveportal_zones_edit.php is used as an XML tag name and needs to follow the relevant st...
-
-
-
- It's likely not one NIC driver that's in question, as there definitely aren't any issues with e1000, and probably not...
-
04:30 PM Bug #6512: Upgrade to 2.3.1 causes network performance degradation (with High CPU usage by NIC kernel tasks)
- And perhaps this post has the same problem
https://forum.pfsense.org/index.php?topic=113529.0
-
- Obviously there's a performance regression. It may have to do with our hardware, but:
# This wasnt present on previ... -
- that's something to do with your combination of hardware, which isn't anything we support. There aren't any general p...
-
- Hi,
Currently we have a 2-node pfsense system working in active/passive HA. This cluster was running pfsense v2.2.... -
- strongswan doesn't pick up the new leftsubnet config (though it's correctly shown in statusall) when doing a reload. ...
-
10:06 PM Bug #6517 (Confirmed): Adding mobile IPsec phase 2 entries requires restart of strongswan
- Using mobile IPsec on 2.3.1-RELEASE-p1 and using OS X 10.11.4 on the client side, I find that when I add additional P...
-
-
- 10:23 PM Revision fb0ecb7a: Fix style
- 10:23 PM Revision 55a72d31: Fix style
- 10:23 PM Revision 616161d5: Fix style
- 10:11 PM Revision e08b45e4: require_once auth.inc in vpn.inc since it uses functions from there, though normal use of the system won't require that, those who run certain things manually/custom may require it
- 10:11 PM Revision e4f7da85: require_once auth.inc in vpn.inc since it uses functions from there, though normal use of the system won't require that, those who run certain things manually/custom may require it
- 10:10 PM Revision 87a898b1: require_once auth.inc in vpn.inc since it uses functions from there, though normal use of the system won't require that, those who run certain things manually/custom may require it
-
- works
-
01:40 PM
Bug #6498: firewall_nat_npt_edit.php: IPv4 addresses can be entered, but the page is only for IPv6
- Applied in changeset commit:3e4adb7139b4cddbb06a2aba7e0727d1762b35ee.
-
01:28 PM
Bug #6498 (Feedback): firewall_nat_npt_edit.php: IPv4 addresses can be entered, but the page is only for IPv6
- A new optional argument is supported for inputs of type IpAddress. $type can be "BOTH", "V4" or "V6" and will enforce...
-
10:24 AM
Bug #6498 (Assigned): firewall_nat_npt_edit.php: IPv4 addresses can be entered, but the page is only for IPv6
- 09:56 PM Revision c513ef24: Fixed #6514 by requiring string starts with letter ot underscore
- (cherry picked from commit f0a053846d6cde2724c47b5553e1395cfd21445c)
- 09:55 PM Revision 421431bc: Fixed #6514 by requiring string starts with letter ot underscore
- (cherry picked from commit f0a053846d6cde2724c47b5553e1395cfd21445c)
- 09:55 PM Revision f0a05384: Fixed #6514 by requiring string starts with letter ot underscore
-
- I'm not sure what circumstance triggers this, but judging by the number of reports in that thread there is something....
-
- while using $config['installedpackage']{['...'] as source
- 08:25 PM Revision 7253e407: Only omit aggressive line from ipsec.conf where IKEv2. Ticket #6513
- 08:25 PM Revision 201b24e7: Only omit aggressive line from ipsec.conf where IKEv2. Ticket #6513
- 08:24 PM Revision 03de0c24: Only omit aggressive line from ipsec.conf where IKEv2. Ticket #6513
-
- fix pushed. Confirmed that still does all the necessary actions, and eliminates the delays by not doing the same thin...
-
- link_interface_to_vips when called with the update parameter calls interfaces_vips_configure once per VIP on the inte...
- 06:49 PM Revision 0891d12f: Fixed #6498 by providing new address type argument to Form_IpAddress(). In this case it is specified as "V6".
- (cherry picked from commit 3e4adb7139b4cddbb06a2aba7e0727d1762b35ee)
- 06:47 PM Revision 2c4af48f: Fixed #6498 by providing new address type argument to Form_IpAddress(). In this case it is specified as "V6".
- (cherry picked from commit 3e4adb7139b4cddbb06a2aba7e0727d1762b35ee)
-
- (cherry picked from commit 5051739d72d31f8bd250148dfa65213723275310)
- 06:40 PM Revision 00a76884: Incorporated ssl changes
- 06:29 PM Revision 3e4adb71: Fixed #6498 by providing new address type argument to Form_IpAddress(). In this case it is specified as "V6".
-
- It's not just that - the clone/duplicate/whatnot button is borked in general. E.g., when you "duplicate" an ACL, the ...
-
- 1. The blank entries shouldn't be created.
2. The blank entries should be ignored on the backend.
See: RPL-94792 -
-
- Thanks for taking the time to make a detailed report!
It looks like I was able to fix both issues and just pushed ... -
- Hi!
On latest snaps monitoring is not displaying graphs correctly when both axes are selected.
See attached scree... -
- fix pushed
-
- IKE mode auto omits aggressive from ipsec.conf, leaving it always disabled
-
-
-
-
-
-
-
03:32 AM pfSense Packages Feature #6508 (Closed): OSPF v3 - Quagga OSPF6d
- Hi,
Can you implement, in a future release, the OSPFv3 for IPv6?
In advance tank you -
01:42 AM Bug #6496: Squid HTTPS Certificed enable Unable to determine IP address from host name http
- Chris Buechler wrote:
> pretty sure that's a config issue, not a bug.
So what is the solution of this
I think it... -
01:29 AM Bug #3022: OpenVPN does not failover to the 2nd configured LDAP auth.server
- Facing the same issue.
Currently we have 2 entries for 'Backend for authentication' selected (Active Directory domai...
06/20/2016
-
-
-
-
- My test setup contains 2 gre tunnels, but to reproduce the issue 1 gre tunnel is sufficient.
*Tunnel1*
* Local ... -
- *Setup*
The WAN Interface of my pfsense firewall is connected to our homenetwork. The "real" wan connection (dsl r... -
05:37 PM Bug #4479: Firewall rules won't match GRE interface after applying IPSEC transport encryption on GRE tunnel
- I can confirm this still happens with both GRE and GIF tunnels over IPsec on pfSense 2.3.1
-
- With redunced Gateway name (max 5 chars) I could make the dpinger work and start properly. I even can see the icmp6 r...
-
- The combination of gateway name + link-local dhcp6 address + vlan interface name create a very long socket name. In m...
-
05:02 PM Bug #6099: igmpproxy does not recognize upstream interface
- I want to thank you again for your efforts. I've moved my multicast traffic onto it's own physical interface on my P...
-
- Greg Myran wrote:
> [...] I am now starting to suspect the new method of finding network interfaces may see the addi... -
- When getting an address assigned from a DHCPv6 Server pfSense automatically creates a gateway to monitor using the li...
-
-
-
-
- Currently the `DHCP Static Mappings table` inside `Services->DHCP Server` isn't sortable where it should be.
Aside... -
- +1 for this feature -- it's pretty much essential for implementing PKI across an infrastructure.
So I wanted to en... -
-
-
-
-
-
-
-
-
-
- I'd like to request to reopen this issue.
IMHO it's not semantic to use different hostnames for the same host. A h... -
08:15 AM Bug #6503 (Resolved): rrd graph for ntp monitoring does not reflect freq when neg (-) value.
- Seems when frequency is negative (-) It is not graphed.
Thread here asking for confirmation
https://forum.pfsense... -
- Hi Chris,
> followed up in your forum thread.
In the past weekend i made more test with different ISP: i live i... -
06/19/2016
- 05:40 PM Revision 6ae99aba: Fix Bug #6394 - Incorrect Output of Translation
- Apparently gettext() does not behave correctly when passed an empty string, this commit ensures gettext() is called o...
-
04:33 PM pfSense Packages Feature #6502 (Closed): Add samba in the available packages
- Hello
I don't know if I'm writing this in the right place if not then I apologise.
My request is that add in the av... -
- 4. Is IPv6 catered for by its own functionality, if not does this need an IPv6 equivalent and what would that look li...
-
- A couple of days ago I put a PRE into Github to remove the subnet_expand() function. It isn't used anywhere in the co...
-
12:42 PM Bug #6394: INCORRECT OUTPUT OF TRANSLATION
- This PR should fix the issue:
https://github.com/pfsense/pfsense/pull/3011
Apparently gettext() does not behave c... -
- I did some more troubleshooting and here are some additional details.
If I start igmpproxy with IPv6 disabled, the... -
04:48 AM Feature #6365: Current images do not install on UEFI Machines
- Chris Buechler wrote:
> duplicate of #4044
Why deleted target version? -
- This fix wont be pushed in current stable?
06/18/2016
-
- I understand igmpproxy only supports IPv4 / IGMP. In both cases above the STB is IPv4 only and speaks IGMPv2. The ...
-
- It is not supposed to work! igmpproxy supports only IPv4 / IGMP.
Regarding multicast IGMP is for "pure" IPv4, MLD ... -
- Victor Toni wrote:
> Could you please give it one more try to avoid regressions?
This latest version has been wor... -
06/17/2016
-
- Data point: I'm seeing similar behaviour with daytime-dgram on 2.3.1-p1.
Why bring this up in 2016? Well, we need ... -
05:34 PM Feature #6500 (New): Should be a way to determine which packages are available without having to update/install
- Since one or more packages are often a "show-stopper" requirement for pfSense users, there should be a way to authori...
-
05:06 PM Bug #6476: Editing an IPSec phase 2 entry fails
- Chris Buechler wrote:
> go to Diag>Command, in PHP Commands box, paste in:
>
> [...]
>
> and hit Execute, wha... -
- fix pushed
-
- pf_purge_expired_fragments doesn't purge, leaving users with "PF frag entries limit reached" where fragmentation is c...
-
- pretty sure that's a config issue, not a bug.
-
- Squid HTTPS filitering enable and problem
The following error was encountered while trying to retrieve the URL: ... -
- followed up in your forum thread.
-
- Mario Lener wrote:
> Hi, i found a strange error from release 2.3 on default route on PPPoE interface. I write a pos... -
- Hi, i found a strange error from release 2.3 on default route on PPPoE interface. I write a post with print screen in...
-
-
-
02:10 PM pfSense Packages Bug #6182: HAProxy not supporting ALPN
- Right - openssl is now 1.0.1s where it is 1.0.2c on 2.2.6.
Openssl was downgraded at https://redmine.pfsense.org/p... -
10:46 AM Bug #6466: Host overrides do not appear to work with DNS Resolver in forwarding mode
- I'm having a similar issue. I just upgraded from a 2.2.x revision and have been unable to get the resolver to work. I...
-
- Both "Address" fields on firewall_nat_npt.php allow entry of IPv4 addresses, but they should be restricted to only IP...
-
10:18 AM pfSense Packages Bug #6497 (Closed): Squid3 web GUI page not saving settings for users in custom system privileged groups in v 2.2.2
- In v 2.2.2, if a web UI administrator is in a custom user group that has a subset of system privileges including the ...
-
06:14 AM Bug #6110: Default gateway switching not always working with PPP
- +1 for me on this issue.
Related to https://redmine.pfsense.org/issues/5090 I think
Multiple posts on this here:... -
- @Victor Toni
I'm not quite sure if this might be relevant. But it seems like there is a repository at Github attempt... -
- is_ipaddr() returns the type of IP if valid. Use this to simplify the function
-
- Function isn't used in main or packages repo, and in any case would need a complete rewrite to handle IPv6.
-
- Configurable check ip service solution to this can be found here.
https://github.com/pfsense/pfsense/pull/3008
Su...
06/16/2016
-
-
- you're doing something far more atypical than having a site to site VPN. GUI windows in the browser being left open c...
-
- The only thing I can think of that's unusual about this install is that it starts a site-site vpn client, which takes...
-
- Notice too that filterlog re-spawns on its own after having been killed.
-
- I haven't figured out yet why two php-fpm processes hold filter.lock open during the bootup. I wonder if it has som...
-
- Just happened again on a clean install of 2.3.1-p5
It deadlocks HARD on lock('filter.lock'). 100% of the time, to... -
- there's no magic about whether the lock file exists, its presence isn't a lock on its own. It's never deleted, outsid...
-
- Hang during bootup 3 of 5 tries on lock('filter.lock')
Why does filterlog hold /tmp/filter.lock open for writing?
... -
04:28 PM Bug #6422: PHP Fatal error: Call to undefined function gettext() in /etc/inc/rrd.inc on line 60
- I've also just come across this error.
*Call to undefined function gettext() in /etc/inc/rrd.inc on line 60*
S... -
- Hello,
Any ETA?
06/15/2016
- 10:53 PM Revision 9640f8b7: Correct value for 9600. Ticket #6416
- 10:52 PM Revision 9c403919: Correct value for 9600. Ticket #6416
-
-
Hard coded my service https://url... along with curl auth into services.inc and it works. Much faster too. Would... -
- yeah they don't reply to the first SYN (guessing the service is under near-constant DDoS, it's been that way for some...
-
-
Did some network sniffing and their is sporadic TCP retransmissions of the initial SYN to the various checkup.dynd... -
- Dynamic DNS RFC 2136 Clients page is slow to load with entries for interfaces that have private address and the optio...
-
08:06 PM Bug #6429: DHCP: makeing dynamic entry static does not work
- After rebooting it works.
I add an other Nexus 5X to static and it worked as expected.
I don't know why a reboot wa... -
- Remember I did restart DHCP without success....
-
- > delete the lease from the pool if you don't want it to appear in the list immediately, otherwise it'll go away on i...
-
- Is it normal to have a lot of such old entries:...
-
- I changed it 15 days ago and I still get the wrong IP.
If I do this with Windows dhcp and disable and enable WLAN I ... -
- works fine. ...
-
06:23 PM pfSense Packages Bug #6492 (Resolved): Syslog-ng configuration file warning is treated as syntax error
- The syslog-ng package is warning about an old configuration file format. Pfsense is interpreting any warning message ...
-
- fix pushed
-
- NOYB NOYB wrote:
> Umm, no it wasn't. Not sure where feedback was coming from that said it was fixed. But it is no... -
- Greg Myran wrote:
>
> IGMPv2 working for me with this latest version. Thanks for all your time and effort Victor ... -
- go to Diag>Command, in PHP Commands box, paste in: ...
-
- Chris Buechler wrote:
> Either get_interface_ip or get_interface_subnet has to return empty for that to happen. The ... -
- Chris Buechler wrote:
> guessing your LAN is set to IPv4 "none"?
Yes - IPv4 and no IPv6.
-
- you changed something that broke the libraries
-
- wasn't overlap because the interface assignment process isn't user-initiated in that case. Fixed to have that unset b...
-
- that is indeed the case. Appears it just doesn't work in dhcpd unless I'm missing something. Config is correct, and t...
-
-
- Adrien Carlyle wrote:
> Is there any way to manually correct this?
Edit the <menu> tag(s) out of the config manua... -
02:14 PM Bug #6055: Menu items may remain from packages no longer installed
- Is there any way to manually correct this?
-
-
- nothing to go on here and no such issues reported. Please post to the forum with specifics
-
- this was fixed in a later 2.3x release
-
- duplicate of #6055
-
- I believe this is the result of upgrading when packages are not available for a new version.
I am on 2.3.1-releas... -
- I too need this feature and the platform is unuseable for reliable VoIP traffic with failover without it.
I have co... -
- *Also* if you Kill the 2 States for each VoIP phone in the Diagnostics > States section, they re-appear straight away...
-
- Hi Chris
I note your previous comment. However, how would the state killing feature work? I don't fully understand... -
- This would be especially useful for VOIP, where there are often frequent registrations or other SIP traffic that keep...
-
- Julien REVERT wrote:
> Is it still plan to have "states killing" on gateway failback?
>
> I have the issue that U... - 08:56 AM Revision 08cd0225: Fix bad escapeshellarg logic on mpd execution
- With this change single-quotes are applied in correct places
- 08:12 AM Revision ceabd66d: Fix NTP PPS. It had 'None' option available on 2.2.x.
- 08:12 AM Revision 55de528c: Fix "Unable to remove NTP GPS from configuration"
- https://forum.pfsense.org/index.php?topic=112771.msg627573
- 08:11 AM Revision 6a53de6f: Fix Redmine #6011
- This will add linklocal fallback where no IPv6 is otherwise configured to allow login using this IPs
-
04:10 AM Bug #6488: HAProxy looses CARP VIPs
- Thanks, updated node1 and now it is working again
-
02:57 AM Bug #6383: Manual Update via WebGUI not working in 2.3.x
- ...is there a chance for getting this back in any way?
My problem is that I'm forced to keep some FWs in highly se... -
01:43 AM pfSense Packages Bug #6484: pfsense 2.3.1_1 does not accept haproxy advanced parameters
- Thank You.
- 01:15 AM Revision fa20dac1: Fix #6482 OpenVPN Redirect Gateway Option Causes GUI Issue
- This fixes the GUI inconsistency reported in the referenced bug. On edit of an OpenVPN server that has tun mode, not ...
06/14/2016
-
- Chris Buechler wrote:
> last of that fixed in
> https://github.com/pfsense/FreeBSD-ports/commit/6555d100423fc7b913f... -
- last of that fixed in
https://github.com/pfsense/FreeBSD-ports/commit/6555d100423fc7b913ff3976feba5c756fbb0251
-
- this definitely looks to have been fixed in 2.3.1 with the validation of config.cache
-
- this package has been deprecated
-
-
- this package has been deprecated
-
-
- fixed with >=2.3
-
- if someone would like to submit a pull request we can add it
-
- duplicate of #1337
-
-
-
- duplicate of #1337
-
- duplicate of #628
-
- it's user-configurable, and nano's on the way out
-
-
- if someone would like to submit a PR, we can add those and others
-
- been done for a while now.
-
-
-
- stub-zone was changed to forward-zone in 2.3
-
- added some time ago
-
- not a good idea
-
-
-
- duplicate of #4044
-
-
- not sure this is still an issue. if it is and anyone cares, report upstream to FreeBSD.
-
- available on 2.3.1+
-
- this package has been deprecated
-
- this package has been deprecated
-
- done some time ago
-
- not desirable, it's correct as-is.
-
- this package has been deprecated
-
- this package has been deprecated
-
- this package has been deprecated
-
- package has been removed
-
- appears to be a config problem
-
- package has been removed
-
- package has been removed
-
-
- package has been removed
-
- the packages in question have all been removed.
-
- merged several weeks ago
-
- this has been merged
-
- redistribution of TeamSpeak is not permitted, so we can't offer it as a package.
-
- BIND package has been back for a bit.
-
- this package has been deprecated
-
- this package has been deprecated
-
- our stunnel package has been deprecated
-
- fixed
-
- fixed
-
- Denny Page tracked down the source of this issue and opened this FreeBSD PR with a patch.
https://bugs.freebsd.or... -
- Either get_interface_ip or get_interface_subnet has to return empty for that to happen. The only way either of those ...
-
12:41 PM pfSense Packages Bug #6490 (Rejected): Squid Reverse Proxy: Disabling an entry on the "Redirects" tab creates duplicate entries for the previous entry in the squid config
- If you disable an redirect entry by disabling the "If checked, then this redirect will be available for reverse confi...
-
- Xander Venterus wrote:
> Confirming this has happenned again on my unit, and this time without any attacks having hi... -
- Deleting an entry on page "Package / Reverse Proxy Server: Redirects / Redirects" does not affect the running squid c...
-
- Greg M wrote:
>
> Not true.
> This is NOT working, you have to add *push "route-ipv6 2000::/3";* to get it workin... -
- Chris Buechler wrote:
> You can just add a 'push "redirect-gateway-ipv6 def1"' to the server's advanced options to a... -
- you're breaking your VIPs by config syncing between incompatible versions.
-
- Hi,
the second node of my pfsense HA-Cluster looses the VIPs in the HAProxy-Frontend config. I'm unable to add the... -
- >
> This version should work with IGMPv2 (which I cannot test myself because I am on IGMPv3).
> IGMPv3 is not expe... -
- There were some issue with the logging on startup in some corner cases. Hopefully these are fixed in:
https://github... -
- This is a configuration issue, not a bug. If your client protocol does not work properly, it's probably not speaking ...
-
07:35 AM pfSense Packages Bug #6486: Squid fails in transparent proxy mode
- I reread the forum articles about this bug. The general consensus was that Squid has been broken in the past. My beli...
-
04:32 AM Bug #6422: PHP Fatal error: Call to undefined function gettext() in /etc/inc/rrd.inc on line 60
- Hey Chris,
We've faced this issue as well.
We upgraded to 2.3.1 and we're seeing this error in menu:... -
03:26 AM Bug #6422: PHP Fatal error: Call to undefined function gettext() in /etc/inc/rrd.inc on line 60
- Hey Chris, I am running two R330 Dell server, bare metal. Anyway, I reinstalled the setup and for now I'm not seeing ...
-
- Thanks chris for pointing me on this!
I placed a little helper script that sends the program to the background:
<... -
03:41 AM Bug #6487: PfSense crashes during boot at configuring LAGG interfacess
- Kilian H wrote:
> Chris Buechler wrote:
> > subject certainly isn't true in any general sense. How is the lagg conf... -
- Chris Buechler wrote:
> subject certainly isn't true in any general sense. How is the lagg configured? How many are ... - 02:36 AM Revision e8406abe: added missing div.content wrapper when reloading filters
06/13/2016
-
- this was fixed in an earlier 2.3x version.
-
- fixed
-
- haven't seen any reports of this in >=2.3. The root cause is an issue in unbound itself, and several potential segfau...
-
- no longer the case in >= 2.3.
-
-
- duplicate of #2234
-
- no other reports of same, it's likely along the lines of any number of other reports of same issue with OpenVPN itsel...
-
- several confirmations this isn't an issue in >=2.3.
-
- not an issue in >=2.3
-
- are you running in Hyper-V or Azure by chance? That's the only place I've seen that, which occurs because it ends up ...
- 08:28 PM Revision 9f472202: Fix PHP Warning about invalid argument supplied for foreach
- If _POST['members'] or _POST['groups'] is not set / none selected at GUI, it would give a warning on crash reporter (...
-
- Appears to be fixed. Thanks.
-
- fixed here: https://github.com/pfsense/FreeBSD-ports/commit/364a0ddf7034f0b22681bbe3b82e0838c4d33a4e
-
- subject certainly isn't true in any general sense. How is the lagg configured? How many are there? What are the membe...
-
- PfSense crashes during boot at configuring LAGG interfacess. It stays for a few second there, then it just resets the...
-
- that is correct, though it should be protocol-specific. something to be addressed as part of #6483, added note there.
-
08:17 AM Bug #6482: OpenVPN Redirect Gateway Option Causes GUI Issue
- Yes, I'm using tun and Remote Access (SSL/TLS + User Auth).
It also appears that the redirect gateway option doesn... -
- I think it is right that the Local Network(s) boxes should be hidden.
From what I can see, the Local Network(s) boxe... -
- also should fix the show/hide of "remote networks" fields accordingly while doing this, so only v4 shows/hides with t...
-
- the existing option only adds the redirect-gateway def1, for IPv6 OpenVPN needs redirect-gateway-ipv6. That ought to ...
-
- If I add something like push "route-ipv6 2000::/3"; to my custom options it will get IPv6 to work though the tunnel, ...
-
- what you did prevented the system from completing bootup, and while the system is booting, it doesn't (and shouldn't)...
-
- Hi Chris,
I found the bug.
It's not directly Pfsense related, it happens when I start the 3rd party binary... -
- Yeah, it just does not belong there at all; put the stuff to "Advanced pass thru".
-
- Not enough information here about what are you putting where; the entire generated configuration is available under t...
-
- Hi!
pfsense 2.3.1_1 does not accept haproxy advanced parameters. I can use redirect in version 2.2.6-RELEASE.
(... -
- Confirmed still in 2.3_1. Use of ip alias in address field of virtual server cause " causes status "Unknown - relay...
-
- fixed here: https://github.com/pfsense/FreeBSD-ports/commit/e812a02a75518ec046d2b7f7606ae83fee7f6e65
-
-
- Not a bug. Post on the forum for help with your configuration.
-
- Squid 0.4.18 offers transparent proxy capability under 2.3.1-RELEASE-p1 (latest version) by checking a box - Enable t...
-
10:05 AM Bug #6099: igmpproxy does not recognize upstream interface
- Hello,
I tested the Version from ViToni that Stefan Heck posted in the ZIP.
And for me with old Telekom infrastru... -
08:11 AM pfSense Packages Bug #6485 (Rejected): Squid garbage collection is a blocking thread and stops all network traffic
- Squid garbage collection is a blocking thread and stops all network traffic when using ram cache.
https://forum.pf... -
02:09 AM Bug #4218: Bridge does not have AUTO_LINKLOCAL flag
- I have the same problem, i can't get IPv6 working (using 2.3.1-RELEASE-p1).
Can you please fix that?
06/12/2016
-
- When the OpenVPN Redirect Gateway (Force all client generated traffic through the tunnel) option is checked for an Op...
-
- When editing the settings for an OpenVPN server and checking off the Redirect Gateway (Force all client generated tra...
-
11:00 AM pfSense Packages Bug #6449: Email Reports not wait a long command end to send the report.
- hi guys ,
any questions or anything I can do to help solve this bug? -
06/11/2016
-
04:43 PM Bug #6481 (New): loading EAP_RADIUS method failed
- pfSense 2.3.1-RELEASE (i386)
Enabled EAP-MSCHAPv2 per https://doc.pfsense.org/index.php/IKEv2_with_EAP-MSCHAPv2, g... -
- Supposedly this exists, per https://doc.pfsense.org/index.php/IKEv2_with_EAP-RADIUS, but I'm not 100% convinced that ...
-
02:59 PM pfSense Packages Feature #6480: pfBlockerNG - add ability to force download of a list
- OK, got it. I don't think I would have found it had you not pointed me to it - but that's what I was looking for, th...
-
- Goto the "Log Browser" Tab and view the Feed in the "Deny" folder... There is a delete Icon there...
-
- At the moment, there's no way through the GUI to force a re-download of a particular list. The only way to do it is ...
-
- guessing your LAN is set to IPv4 "none"?
06/10/2016
-
- thanks for the feedback
-
- Blew away all GIF and interface configuration, re-configured on both of the affected firewalls. One now works, one s...
-
- Since 2.3-RELEASE, LADVD no longer crashes, but results on i386 are still inconsistent - one firewall sees the switch...
-
06:40 PM pfSense Packages Todo #6443: Add ntopng package back into pfSense 2.3.x
- I submitted a pull request to add GeoIP as a dependency of ntopng:
https://github.com/pfsense/FreeBSD-ports/pull/1... -
- There is a missing dependency on GeoIP-1.6.9.
I tried to restart the service, which failed.
Then logged in and tr... -
-
-
-
-
-
- 05:26 PM Revision 100dc6dd: Bump to revision _3
-
- Ah, I see. By "overlapping", I meant that igb0 had VLANs defined directly on it, *and* it was part of an LACP group ...
-
01:16 PM Bug #4637 (Assigned): system unreachable after deleting VLAN
- No problem, I'll keep the bug report open and check if we can reproduce it here.
I was misguided by 'Two overlappi... -
- Luiz,
You've misunderstood the problem, and it is definitely a bug.
I don't have the lab equipment or time to rep... - 04:10 PM Revision 5d4a0e84: Bump PRODUCT_REVISION to 2 for 2.3.1_2
-
- Confirming this has happenned again on my unit, and this time without any attacks having hit us, i just had to restar...
-
- Chris Buechler wrote:
> almost certainly not a bug. where no traffic, probably set to an IP other than what is corre... -
- almost certainly not a bug. where no traffic, probably set to an IP other than what is correct
-
- I noticed that my backup node is out of XML sync although it's activated on master.
State sync is working fine.
T... -
12:01 PM pfSense Packages Feature #6479 (Rejected): Add OpenBGPD config to High Availability Sync option to sync
- I believe this functionality would be very intersting in a high avaliabity environment.
-
- not a replicable problem outside problems writing to disk in general
-
08:06 AM Feature #855: Ability to selectively kill states on gateway recovery
- Is it still plan to have "states killing" on gateway failback?
I have the issue that UDP connections of ip phones ... -
- Goddammit, no, the rebuild of VMware wasn't the problem, as it's just gone down AGAIN.
Strangely enough, the RADIU... -
-
Feedback:
Time period is 1 resolution too long.
Using larger (later) of left/right updated, instead of sma...
Also available in: Atom