Activity
From 06/21/2016 to 07/20/2016
07/20/2016
-
07:59 PM Bug #6633 (Feedback): redirect-gateway duplicated in client specific overrides
- fix pushed
-
- as reported here.
https://forum.pfsense.org/index.php?topic=115429.0 -
- if you open siproxd on WAN in firewall rules, you get what you're asking for security-wise. No shortage of potential ...
-
05:09 PM pfSense Packages Bug #6632 (Resolved): siproxd hosts_allow_reg should be configurable
- siproxd is providing a configuration option "hosts_allow_reg" which
implements a positive access control list for ho... -
- this is from the use of dummynet in pf, which doesn't exist in stock FreeBSD. And the implementation apparently leave...
-
02:23 PM Bug #4326: Limiters on firewall rules where NAT applies drop all traffic
- Chris Buechler wrote:
> There isn't one because the code/feature in question doesn't exist there.
Now I'm confuse... -
- Andrew Maslin wrote:
> Can someone share the FreeBSD bug # so we can track the progress of the root of the issue? L... -
11:29 AM Bug #4326: Limiters on firewall rules where NAT applies drop all traffic
- Can someone share the FreeBSD bug # so we can track the progress of the root of the issue? Like Luke, I would like t...
-
06:48 AM Bug #4326: Limiters on firewall rules where NAT applies drop all traffic
- Have you guys tried using a queue inside the limiter instead of the limiter itself? It could make a difference since ...
-
- No, it's not a bug in our code and doesn't affect any of the hardware we sell or have sold, so not something we'll ad...
-
06:15 AM Bug #6558: Pf-sense 2.3 doesn't detect shutdow event with em driver and Intel Chipset 82574L
- Atlante Informatica wrote:
> Chris Buechler wrote:
> > subject isn't true in general, 82574L in the FW-7541 correc... -
- which is correct, guessing it's no longer showing as described? As that output would give you 2.3.1_5 as an update av...
-
08:13 AM Bug #6629: Can't update to "update" update (e.g. 2.3.1_5)
- Chris Buechler wrote:
> not replicable. Those two pages use the same function to obtain their data, so no apparent m... -
- The change that's in reference to was only in 11, what you're seeing there isn't the same thing. Not a bug in our cod...
-
01:03 PM Bug #6631 (Closed): vesa_configure error on boot
- I have the same issue as this FreeBSD Mailing List thread: http://markmail.org/message/aoq6ub636ainxcxe#query:+page:1...
-
10:44 AM pfSense Packages Todo #6443 (Resolved): Add ntopng package back into pfSense 2.3.x
- ntopng will be in the pfSense 2.3.2 release. New tickets should be opened if there are issues with the package upon r...
- 10:37 AM Revision b89bc607: Backport Check IP Services
- Original pull request to master was #3037
- 10:15 AM Revision 30505ba6: Backport Remove input_errors2Ajax calls
- Original commit to master was
https://github.com/pfsense/pfsense/commit/86d431a89d920f64dda5e7e1821f720daf6e067b - 10:01 AM Revision 9cf9f30f: Backport Fix issue with QinQ on LAGG interfaces where MTU doesn't apply to parent
- Original pull request to master was #2905
- 09:50 AM Revision f24e175e: Backport simplify subnet_size()
- Original pull request to master was #3007
- 08:02 AM Revision eafd9cfb: Backport Use all certificates in the chain when creating the ca-file for server-side OpenVPN configuration
- Original pull request to master was #2966
- 07:55 AM Revision 197cd6c0: Backport notify by email and in syslog when a channel goes up or down
- Original pull request to master was #2847
- 07:39 AM Revision 10d4fe2e: Backport Radius auth server to detect openVPN
- Original pull request to master was #3057
- 07:11 AM Revision b18e885c: Backport IPv6 support for CloudFlare
- Original code for master in pull request #3061
- 06:54 AM Revision f50f74a4: Backport DHCP6 init before RA
- Original PR to master was #3055
- 06:37 AM Revision 1cdf2c91: Formatting tidy of interfaces.inc
- After #3055
07/19/2016
-
08:51 PM Bug #5993: dhcp6c not started until an RA received
- Chris Buechler wrote:
> merged this for 2.4 as it needs more baking time in snapshots than we're going to have for 2... -
08:12 PM
Bug #6629: Can't update to "update" update (e.g. 2.3.1_5)
- I observed the same thing about a week ago. Performing an update from the console resolved the issue.
-
- not replicable. Those two pages use the same function to obtain their data, so no apparent means for one to show an u...
-
- It appears that there is an update available, but when I try to install it, pfSense says it's up-to-date.
I just i... -
08:01 PM Revision eeddd261: Fix variable name
-
-
-
-
-
-
-
05:39 PM Bug #6630 (Resolved): Set Defaults for Graphs - Traffic/WAN + Packets/WAN doesn't work
- Tested on two installations.
2.3.2-DEVELOPMENT (amd64)
built on Mon Jul 18 13:42:01 CDT 2016
FreeBSD 10.3-RELE... -
- In some currently-unknown edge case, extensions.ini can end up missing lines, breaking things.
One example post-2... -
- This gets very ugly in circumstances where DNS servers aren't reachable at all. resolve_retry takes extremely long in...
-
-
-
- Now that the target version bumped to 2.4 (FREEBSD-11) can anyone at least say whether the bug has been fixed in Free...
-
04:27 AM Bug #5990: AES-GCM should be an allowed encryption algorithm for IKEv2 in P1
- Confirmed that it works with IKEv2 PSK mobile client using:
ike = aes256gcm128-sha512-ecp512bp!
esp = aes256gcm... -
02:11 AM Bug #6625: firewall forwards all traffic through wan interface, via default gateway, even if alternative route had been installed
- Chris Buechler wrote:
> Hi Remko,
> This seems like a duplicate of #1136, is the VPN in this case reachable via a s... -
- Hi Remko,
This seems like a duplicate of #1136, is the VPN in this case reachable via a static route? -
- works, thanks Steve
07/18/2016
-
07:44 PM pfSense Packages Bug #6571: NUT service can not start sometimes after boot when SNMP UPS interface is down
- The new NUT package allows for a nut supported way to retry the startup of the driver.
-
-
-
-
-
- Jose Luis Duran wrote:
> Is this going to be backported?
>
> As this was a breaking change from 2.2 to 2.3 (not a... -
- fixed
Nothing to back port it to, 2.3.2 is the next release. -
03:16 PM Bug #5990: AES-GCM should be an allowed encryption algorithm for IKEv2 in P1
- Is this going to be backported?
As this was a breaking change from 2.2 to 2.3 (not appearing in the Change log). -
- Lars Pedersen wrote:
> Chris Buechler wrote:
> > fix pushed
>
> Looks good. Will verify it when the next snapsho... -
- Chris Buechler wrote:
> fix pushed
Looks good. Will verify it when the next snapshot is being build. - 03:44 PM Revision fe179ed6: Allow section header to be omitted by specifying "NOTITLE" as the section title.
- (cherry picked from commit 9ce54773be5e02235e3be7d2b970f61fbb27ba86)
- 03:43 PM Revision 9ce54773: Allow section header to be omitted by specifying "NOTITLE" as the section title.
- 03:11 PM Revision 2e2ffafc: Fixed #6437
- (cherry picked from commit 7bba13e8d53adfe4beb03c8444e60848ae6e25e9)
- 03:09 PM Revision 7bba13e8: Fixed #6437
- 03:07 PM Revision 5be7a5bf: Show "cannot delete alias" message as error
- If I try to delete an alias that is in use, the "cannot delete alias" message was being displayed as the "success" co...
- 03:06 PM Revision b6bd4012: Show "cannot delete alias" message as error
- If I try to delete an alias that is in use, the "cannot delete alias" message was being displayed as the "success" co...
-
11:45 AM Feature #6569: Support Rockwell ZODIAC binary protocol (Jupiter receiver) for high precision
- And now I've had gpsmon SIGSEGV on me. It doesn't happen often, but it has happened from time to time.
gpsd itself... -
- I think there may also be (benign) bugs in the gpsmon monitor for UBX in gpsd.
I just swapped out a car antenna (S... -
10:20 AM
Bug #6437: CBQ queues are not displaying options for bandwidth or borrowing
- Applied in changeset commit:2e2ffafc35f73282f0a40132de4949cae2dbf4bf.
-
10:13 AM
Bug #6437: CBQ queues are not displaying options for bandwidth or borrowing
- Form section containing bandwidth and borrow was not being added to the composed form.
-
10:10 AM
Bug #6437 (Feedback): CBQ queues are not displaying options for bandwidth or borrowing
- Applied in changeset commit:7bba13e8d53adfe4beb03c8444e60848ae6e25e9.
-
- I posted "over on the forum":https://forum.pfsense.org/index.php?topic=108895.msg639527#msg639527 but I am not sure w...
-
08:22 AM Bug #6627 (New): floating tab match rules ignore quick action so should be removed
- i noticed since queue rules in floating tab was removed and just match in list or maybe queue renamed to match, the q...
-
07:51 AM
Feature #6626 (Closed): Support for IPv6 firewall entries with dynamic delegated prefix and static host address
- When using an ISP with dynamic prefix delegation, the prefix may change at any time, resulting in a change of the IP ...
-
- We have setup a new pfSense box that will route our VPN traffic between endpoints.
That goes out on our WAN interfac... -
06:02 AM Bug #6487: PfSense crashes during boot at configuring LAGG interfacess
- Possibly related:
* https://forum.pfsense.org/index.php?topic=112042.msg623929#msg623929
* https://forum.pfsense.or... - 04:19 AM Revision 76a0eecb: Allow AES-GCM for P1 where using IKEv2. Ticket #5990
- 04:18 AM Revision a46e0d74: Allow AES-GCM for P1 where using IKEv2. Ticket #5990
- 02:25 AM Revision cadcc898: Clarify that HMAC-MD5 key is required. Ticket #6622
- 02:24 AM Revision 4d55ef96: Clarify that HMAC-MD5 key is required. Ticket #6622
- 02:20 AM Revision 6061a7a9: Merge pull request #3061 from thoughtpolice/cloudflarev6
- 02:15 AM Revision 655fb9df: Merge pull request #3055 from marjohn56/master
-
- when this started, it was a much bigger issue. The worst of it was fixed, but the remaining part with the SAD is stil...
-
- The fact that strongswan doesn't take down an established connection after changing the config has lead to a number o...
07/17/2016
-
- fix pushed
-
- Thanks, committed clarification to description.
-
01:10 PM Bug #6622 (Resolved): DHCP Server: Dynamic DNS required fields are ambiguous
- This is a screenshot of the current DHCP Server's advanced Dynamic DNS options, as of 2.3.1-p5:
!http://i.imgur.co... -
- merged to master from PR 3061.
https://github.com/pfsense/pfsense/pull/3061
-
- merged this for 2.4 as it needs more baking time in snapshots than we're going to have for 2.3.2.
-
- works
-
- works
-
- the stable version of Opera works fine. They broke something in the development release, report it there.
-
10:16 AM Bug #6619: NAT - Outbound - Edit/Add: Can't enter alias in source/destination network field
- This happens in Opera 40. In Edge everything works fine.
-
- The same "bug" goes for Firewall rule Add/Edit page: There is no way to use an alias.
Looks like a certain commit... -
- Mayday mayday: There is no way to use network(s) alias in network field on the Outbound NAT Add/Edit page.
Tested... -
- fixed
-
- Related bug report on the ambiguity of the algorithm currently needed for the DNS secret key: #6622 (https://redmine....
-
- Under the DHCP Server page, you are able to do advanced configuration of Dynamic DNS with an internal nameserver (not...
-
10:01 AM Feature #6620 (Resolved): CoDel, FQ-CoDel, PIE and FQ-PIE AQMs
- Patches for new AQMs CoDel, FQ-CoDel, PIE and FQ-PIE were submitted to CURRENT a few months ago and are now in 10-STA...
- 09:41 AM Revision 3a05e4c3: dyndns: add IPv6 support for CloudFlare
- Signed-off-by: Austin Seipp <aseipp@pobox.com>
-
- well i hit into this today
07/16/2016
-
- duplicate of #6411
-
04:41 PM Feature #6618 (Duplicate): Alert when reboot required for updates
- Hi,
When new updates, the user is not notified if the reboot is required to complete the update.
Why not add a ... -
- An apparently identical uBlox5 MiniPCIe module (on site at a client's0 stops responding after CFG-PRT to UBX only.
... -
- I noticed recently that many packages do not have the 'www' field in the database filled, or have it set to UNKNOWN ...
- 05:29 AM Revision 8f70ba67: Merge pull request #3060 from lukehamburg/patch-2
-
- I noticed recently that many packages do not have the 'www' field in the database filled, or have it set to UNKNOWN ...
-
- It's still the package reinstall that gets hung up, regardless of whether or not you have packages installed. It sets...
-
- From Luke Hamburg on PR 3060:
"I noticed recently that many packages do not have the 'www' field in the database f... -
- fixed
-
- works, now doesn't allow applying until after you save, so people can't get confused.
This same bug actually goes...
07/15/2016
- 11:28 PM Revision 4e0f1a1e: fix typo
- 11:27 PM Revision 1d653e86: fix typo
-
- Pretty sure this overlaps with PR 201519, which is confirmed fixed.
Daniel: if you're still seeing issues on 2.3.... -
- Thanks Phil, setting the target was overlooked after the merge. Just double checked 2.3.2 and it's good.
-
08:33 PM Bug #6450: Deleting yourself in User Manager results in an empty user tag in the config
- This was committed to master, RELENG_2_3 and RELENG_2_3_1 around 23 June 2016.
That looks like it is later than the ... -
-
-
-
- 07:38 PM Revision cbf5f75e: Fix xml syntax after license update
- (cherry picked from commit f7057140af3a98af925f76b6b0bb544dc7bfc418)
-
-
-
07:19 PM Revision 0eef97aa: Make a function to resync all OpenVPN CSCs and use it when saving an OpenVPN server. Fixes #6139
- 07:14 PM Revision f7057140: Fix xml syntax after license update
-
- 06:53 PM Revision 64bac84e: dse was under contract with BSDP for all the work he did, we own (c)
- 06:49 PM Revision f0314a2a: dse was under contract with BSDP for all the work he did, we own (c)
-
-
- 06:14 PM Revision 318e0383: Set dhcp-cache-threshold to 0 to avoid a bug in dhcpd 4.3.x where it omits client-hostname where the cache threshold is reached. Ticket #6589
- 06:13 PM Revision 9dacff7f: Set dhcp-cache-threshold to 0 to avoid a bug in dhcpd 4.3.x where it omits client-hostname where the cache threshold is reached. Ticket #6589
-
- Wow, this would be incredible (being able to mark traffic based on ntop filters) - did not even know that was theoret...
-
- Applied in changeset commit:1f954318266fc0da7ee41bb532da969ec9da8b95.
-
- this is a bug with the dhcp-cache-threshold feature.
https://lists.isc.org/pipermail/dhcp-users/2016-July/020183.ht... -
11:18 AM Bug #6495: No default route on PPPoE after reconnect or IP change in some cases
- Hi Chris,
> I brought back the behavior of 2.2.6 and earlier here, as the root cause isn't readily apparent. The rou... -
- I brought back the behavior of 2.2.6 and earlier here, as the root cause isn't readily apparent. The router file ends...
- 05:09 AM Revision 5bd2dd83: Bring back the "set iface route default" used in 2.2.6 and earlier versions, which works around the root problem in Ticket #6495
- 05:08 AM Revision 258f1f11: Bring back the "set iface route default" used in 2.2.6 and earlier versions, which works around the root problem in Ticket #6495
-
05:04 AM pfSense Packages Bug #6616 (Duplicate): Client Export list empty when using intermediate CA
- Certificate setup:
A Root CA which has signed a VPN CA certificate.
This VPN CA signed the VPN server certificate... -
04:29 AM pfSense Packages Bug #6571: NUT service can not start sometimes after boot when SNMP UPS interface is down
- I think the reason why this feature is not implemented by NUT team is because it should be implemented on the OS side...
-
03:50 AM Feature #6615 (New): new DHCP server option
- Some hardware can't receive a dhcp lease until they has been configured with a valid IP address.
In that circumstanc... - 03:24 AM Revision 42f47efc: Fix #6613 Do not show Aply Changes button when Save needed
- I got a bit carried away in the fix for #6460 https://github.com/pfsense/pfsense/commit/21c18c3df11547aba172c10f95872...
- 03:24 AM Revision 47e3809d: Merge pull request #3058 from phil-davis/patch-1
07/14/2016
-
- "The way it worked in 2.2.X was when you hit apply changes it saved and rebooted the pfsense at the same time."
Hm... -
- Applied in changeset commit:1602106bf511e91c8d8f371ff8d5a92cfa70879a.
-
- merged, thanks Phil.
-
09:17 PM Bug #6613: Interface mismatch allows applying changes without saving them
- Phillip Davis wrote:
> The Apply Changes button is being shown too early in the workflow.
> PR https://github.com/p... -
- The Apply Changes button is being shown too early in the workflow.
PR https://github.com/pfsense/pfsense/pull/3058 s... -
- When selecting Apply Changes after fixing a interface mismatch. The button does not save the changes, and asks again ...
-
- I've taken a look at this, and this behavior appears to be an intentional choice on the part of the NUT team. I agree...
- 11:14 PM Revision 1602106b: Fix #6613 Do not show Aply Changes button when Save needed
- I got a bit carried away in the fix for #6460 https://github.com/pfsense/pfsense/commit/21c18c3df11547aba172c10f95872...
-
- this was addressed in 2.3
-
- this was implemented in 2.3.2 on a diff ticket
-
-
- this was done quite some time ago
-
-
-
-
-
-
-
-
-
-
-
-
-
- happened to encounter this with a support customer today. It appears a reload of strongswan doesn't correctly enable ...
-
-
- thanks for the feedback
-
11:57 AM Bug #6494: Hang during bootup on lock('filter.lock')
- I've never tried a 'snapshot' before this.
So... here goes.... While I'm waiting for 2.3.2.a.20160714.0044:
T... -
-
- the number of things that dynamically update is significantly higher than it was in 2.2.x and prior. Still, something...
-
- I visit the package manager listing, loads hover around 1, processor 98% idle. Back to the dashboard: wait 20 sec fo...
-
- In a very low traffic sandbox environment, the new 2.3.2 snapshot of today hums along with a load average of 0.48 or ...
-
- Rich Murphey wrote:
> I've installed snapshot 2.3.2.a.20160606.1543, and ntopng via the web UI package manager.
>
... -
- Once i fix the interface mismatch, and hit *apply changes* it reboots, and asks again at boot. Apply changes is not s...
- 05:09 AM Revision a90d497d: Merge pull request #3057 from wokis/master
-
03:48 AM Bug #6607: OpenVPN server won't start after reboot, when set to a Gateway Group specifing CARP VIPs
- See: VPA-15570
-
- Using gpsctl to initialize the GPS is rather slow, due to the repeated auto-detection (even when the device type is f...
-
- uBlox5 1PPS modifications. From memory, I believe green is TX data (at 3.3V level), grey is 1PPS (also 3.3V; configur...
-
- Woops. Forgot to update the comment about 1PPS. We need it to supply only UTC seconds, and that's what the blob does....
-
- This !ublox5-boot.sh! is a bit ugly to embed in Shellcmd, but good enough to copy to /root and invoke from there.
-
- I now have a fix. I traced this back to an error in the NAVX5 message.
There is a 2-byte version (0000) in front wh... -
- The code here is at fault.
https://github.com/pfsense/pfsense/blob/master/src/etc/inc/interfaces.inc#L3927
It sh... -
- Thanks, merged to master for 2.4.
07/13/2016
-
- bumping net.inet.raw.maxdgram, net.inet.raw.recvspace, net.raw.recvspace and net.raw.sendspace even further seems to ...
-
- Success pushing uBlox5 into binary mode; but don't let gpsd write to
the GPS (-b switch) just in case. I got NMEA a... -
- I hate little endian. Endian little hate I. This is the endian-fixed CFG-PRT packet. I get only UBX now, but I don't ...
-
- According to Pg. 10 of [[http://www.pcengines.ch/schema/alix6b.pdf]], there is no way to power-cycle the MiniPCIe USB...
-
- Indeed, UBX messages are little-endian by definition. I'll have to revisit this -- being dragged into other things at...
-
- OK. I'm having trouble with the uBlox5. Specifically, it is difficult to force the unit into a binary-only mode; it d...
-
- Picture of modified u-Blox5 unit -- pictures of modification (on lower side PCB) to follow !P1010540.jpeg!
-
- I am pivoting back to working on u-Blox 5 with GPSD, now that the SUT for Rockwell Jupiter is being soak-tested with ...
-
- works
-
- PR #3020 merged, thanks!
-
- I'll handle this
-
- That seems to work.
Harry: could you please try the latest 2.3.2 snapshot ASAP (we're looking to build release on... -
03:30 PM Bug #6494 (Feedback): Hang during bootup on lock('filter.lock')
- Yes, this looks correct. In addition to this fix I would like to open the files with FD_CLOEXEC set, but I could not ...
- 10:01 PM Revision c323224d: Fix #6050 DHCP - provide Network Booting display/hide advanced button
- This one moves the "Network Booting" above the "Additional BOOTP/DHCP Options". That allows "Network Booting" to be a...
-
-
09:18 PM Revision a409a857: Added and modified functions to send correct Radius attributes to the Radius authenticator.
- 07:56 PM Revision c34b069e: simplify DHCP_Config_Option_Split, no loop needed for returning option array
- (cherry picked from commit 264ca54e406eee7c01b01f748aabd4a29e9c4872)
- 07:56 PM Revision 489091dc: Allow passing comma in string quoted DHCP client options
- (cherry picked from commit 332a64d0c8a6486d40c6295351ca3068a77a216a)
-
-
- likely an issue in squid itself that should be reported there. They don't seem fond of download managers
-
07:22 PM pfSense Packages Bug #6612 (Closed): squid Multi segmented downloading is broken
- it looks like that squid Multi segmented downloading is broken again in squid.
TCP_MISS_ABORTED/206
It was fixe... -
- subject isn't true. That was all fully verified in 2.3.1, and just checked again to verify on 2.3.1_5 and 2.3.2, and ...
-
02:17 AM Bug #6607: OpenVPN server won't start after reboot, when set to a Gateway Group specifing CARP VIPs
- Affected version is 2.3.1-RELEASE-p1. I am using SG-4860 hardware.
-
- No problem for OpenVPN clients.
When OpenVPN server is set to a simple CARP VIP, it will start after reboot.
Wh... -
07:02 PM Bug #6611: Kernel panic when running PPPoE Server on tun/tap interface
- Setting it to ovpn interface was just an attempt to see the result.
-
- also makes no sense to run on OpenVPN. That should be prohibited. other ticket is #4510
-
- I've seen the other ticket. The first attempt was on wan interface, which has a fixed ip (no PPPoE client). The secon...
-
- what's the parent interface of the PPPoE? only way I know of doing something like this is making a PPPoE server inter...
-
- 2.3.1-RELEASE-p5, running in 64 bit kvm vm.
After updating PPPoE settings and confirmation by clicking the green s... -
- Looks good, thanks Phil
-
- Merged, thanks Phil!
-
- I fixed the lines that reverted the recent changes. My bad for committing things that really aren't part of the patch...
-
- Thanks Kacper. Looks reasonable, outside the one line I left a comment on where a recent change was reverted, but som...
-
- I've submitted a github pull request (#3057) fixing this issue.
-
-
- OpenVPN Radius auth doesn't send NAS Port-Type (which should be "Virtual") and NAS Port (which preferably should be t...
-
-
11:06 AM Bug #4804: PPPoE Restart won't update IPv6 routing table with gif
- Chris,
no, I''m afraid as I don't use pfSense anymore! -
- only if you didn't correct the interface mismatch and save that change. That only comes up when there are assigned in...
-
- When restoring a config with a interface mismatch, it prompts to fix the mismatch, after this it reboots the system. ...
-
- works
-
- Luiz pushed a fix fot xinetd - https://github.com/pfsense/FreeBSD-ports/commit/eeb3abaa71905ccaec35b0bee7bc4dcc40cfc306
-
- This happens even without packages installed. I restored a config without any package information in it. Even selecte...
-
- works
-
10:02 AM Bug #4031: Notifications mail bomb in some gateway failure circumstances
- I too have seen this I shut off emails cause it makes gui inaccessible when it starts bombing no coding skills here b...
-
09:47 AM Bug #4031: Notifications mail bomb in some gateway failure circumstances
- Luke Hamburg wrote:
> I noticed the target version was bumped to 2.4.0 and the assignee is still cmb — this one bit ... -
- I noticed the target version was bumped to 2.4.0 and the assignee is still cmb — this one bit me again this morning s...
- 07:53 AM Revision 1a8e5f2f: Some tweaks to improve alignment in table with checkbox
- 1) If a checkbox does not have a description (even if it is empty), layout will be broken as checkbox won't be aligne...
-
05:52 AM Feature #6608 (New): backup and restore dhcp
- good morning people,
I'm with a problem in dhcp backup restoration, I will explain the case.
My client has 3 ... -
01:49 AM pfSense Packages Todo #6443: Add ntopng package back into pfSense 2.3.x
- I'm still having the issue with ntopng not restarting after a reboot, with the following errors in the log.
Jul 13... -
- Hi
I think this ticket is different to #6443.
#6443 is simply about getting ntopng back into pfSense 2.3, follo... - 01:18 AM Revision 0d9fc91c: Merge pull request #2847 from jazzl0ver/patch-1
- 01:14 AM Revision 9046c581: Merge pull request #2966 from scipiojr/master
- 01:11 AM Revision 6c947c1d: Merge pull request #3007 from stilez/patch-34
07/12/2016
-
-
-
-
- fixed last year
-
-
-
-
- package no longer exists, and Dansguardian itself is not maintained
-
- package no longer exists
-
-
-
- duplicate of #1825
-
- duplicate of #6443
-
- Merged PR 2966 for 2.4 to address this.
https://github.com/pfsense/pfsense/pull/2966
If OpenVPN Client Export ne... - 08:12 PM Revision e1f0ea2e: Merge pull request #2905 from Chrisc-c-c/LAGG-MTU
-
- Captive portal needs to be adapted to work minus the multi-instance ipfw capabilities.
-
- The actions taken by rc.linkup differ depending on whether the interface has a static or no IPv4 and IPv6 IP, and eve...
-
- I added a CSS nowrap property and a "table-responsive" div to the captive portal widget as well as styled the sortabl...
-
- PR merged
-
03:06 PM Bug #6507: GRE and GIF tunnels on dynamic IPv6 interface are not brought up during boot
- Any idea? Is there any hook we can bind to? Like change of interface ip addresses? Which could get our tunnels reconf...
-
- works
-
- fixed
-
- works
-
- works
-
- I reproduced it on stock FreeBSD and opened a ticket on FreeBSD's bugzilla - https://bugs.freebsd.org/bugzilla/show_b...
-
-
- works
-
05:23 AM pfSense Packages Bug #6603: pfblockerng's Unbound modifications leave system broken post-config restore
- Oh, and - the original problem is much worse on nanobsd - no config restore needed. This breaks on every system upgra...
-
- Rather than such ad hoc hacks - cannot we get something like the sanity checking from pfBNG to Unbound itself? Like, ...
-
03:57 AM Bug #6572: Config sync hangs php-fpm on secondary
- Hi Chris,
Any updates please? Kindly ask should you require further information if needed from our end, thanks.
... - 02:57 AM Revision d368b298: write_config before openvpn_resync here as well. Ticket #6139
- 02:57 AM Revision 5a9c3449: write_config before openvpn_resync here as well. Ticket #6139
07/11/2016
-
11:19 PM pfSense Packages Bug #6603: pfblockerng's Unbound modifications leave system broken post-config restore
- It can get complicated if a user adds other *include: /blah/blah.conf* lines, but splits it into two lines.... For th...
-
- Yes, this is a known issue... I can't fix it in the package as it needs to be addressed in unbound.inc.
I can add ... -
- pfblocker's "include: /var/unbound/pfb_dnsbl.conf" in the Unbound config leaves you with a broken system after config...
-
- works
-
-
04:04 PM Bug #6601 (Resolved): Horizontal scroll bar on Installed Packages
- On Installed Packages page horizontal bottom scroll bar appears. Jared has all the information.
-
10:20 PM Feature #6604: Allow NTP server list to be overridden by DHCP/PPP
- Enabling this option would of course enable the ntp service to use the DHCP supplied NTP servers (section 8.3 of http...
-
- In the System / General Setup page, there is a DNS Server Settings option to "Allow DNS server list to be overridden ...
-
- works
-
- Tested OK here. Leaving open for another run once it's in snapshots.
-
- all good
-
- Tested OK here. Leaving open for another run once it's in snapshots.
-
- fixed
-
- fixed
-
-
- same order change made on vpn_openvpn_client.php
JimP: can you confirm whether this fixed the issue you were seein... -
- works
-
09:41 PM Bug #5993: dhcp6c not started until an RA received
- Martin Wasley wrote:
> I finally managed to get back to this after several weeks having to work for a living. The fi... -
- Not seeing any issues with 200 assigned interfaces (somewhat slower than 2.2.x, but still usable), but take it up to ...
-
- same as #6400
-
- If you have a group set with the deny config write privilege, its config saves look to the user to have been successf...
-
-
-
-
-
-
-
- the way that field is used, it must be an IPv4 IP. 'primary' is where it's specified in dhcpd.conf, which must be IPv...
-
10:04 AM Feature #6600 (Resolved): DHCP Server - Primary DDNS Address won't accept IPv6 address
- For the DDNS feature in the DHCP Server one cannot enter an IPv6 address. The error message is: ...
-
- working on that
-
- Patch imported from debian, also submitted the fix for FreeBSD at https://reviews.freebsd.org/D7190 and opened a bug ...
-
- Working on it
-
- Status_Traffic_Totals package is now available
-
07:29 AM Bug #5934: When two distinct Phase 1 are configured, only the first one connects ar startup
- Hi Chris,
I said to Renato that 2.3.x fixed the issue, but forgot to update the ticket here, my bad!
But just f... -
02:32 AM Bug #4326: Limiters on firewall rules where NAT applies drop all traffic
- OMG.
The NAT 1:1 problem using limiters persist.
Works well on 2.1.5, 2.2.x = BAD, 2.3.x = BAD sigh ! We are forc... - 01:21 AM Revision b1be0cdc: write_config before calling openvpn_resync. Ticket #6319
- 01:21 AM Revision 82b8011b: write_config before calling openvpn_resync. Ticket #6319
- 12:40 AM Revision 89f140d3: Fix firewall rules for PPPoE server
- 1) PPPoE Clients are located within 'Remote Address Range' (sa) and not Server Address (ip), see lines 1194 and 1195....
- 12:39 AM Revision 9850771f: Merge pull request #3032 from NewEraCracker/patch-pppoe-rules
-
12:21 AM Revision 8f1a91f7: Properly follow style guidelines.
-
- 12:20 AM Revision 497a0358: Merge pull request #3054 from nkaminski/master
07/10/2016
-
- Minor description correction: ...is no longer included in the actual DHCP server config file.. should read ...is no ...
-
- PR fixes, merged. leaving to confirm once it hits a snapshot
-
-
- This bug also appears to a regression from 2.2.x since the "DHCP Advanced configuration" option did not exist and the...
-
- When the advanced DHCP configuration option checkbox is checked for an interface setup as a DHCP client, such as the ...
-
- Please post to the forum for assistance, this isn't a bug.
-
09:00 PM Bug #6599 (Not a Bug): Routing problem with IKE v2
- Following a suggestion to use IKE v2 instead of L2TP/IPsec, I have set up an IKE v2 IPsec connection following https:...
-
- Saving a server triggers openvpn_resync_all which runs openvpn_resync_csc: ...
-
- there aren't any general performance regressions in OpenVPN.
-
- The "PPPoE clients" placeholder in firewall rules only includes the client subnet of the first instance of the PPPoE ...
-
- Couple issues with firewall rules and PPPoE server.
1) the "PPPoE Clients" network wrongly fills in the server IP... -
-
04:58 PM Revision 8c661bc8: DHCP6 init before RA
- Some ISP BNG's require that a dhcp6c init is sent before RA. The
additions to interfaces.php adds a new option flag ... -
- Corrected patch (ln -s terms swapped)...
-
- Thanks. The strongswan ticket seems to indicate the issue was fixed 4 years ago though so I am not quite sure what I ...
-
- There isn't anything we can do for that. It's an issue in Windows when connecting to strongSwan. https://wiki.strongs...
-
- Log for IPsec is displayed in ipsec_log0.png. Tcpdump log is in tcpdump_enc0.png
Do not hesitate to contact me if ... -
- Hello,
First, thanks for all your work. This is a fine product that I have used numerous times and it usually works ... -
-
- It may be that the best way forward is to go with GPSD instead of NTPD refclock_nmea. The NTPsec people broadly overl...
-
- Ironically, IEEE 1588 provides for this loss of fix by allowing a clock to advertise that it's lost its primary refer...
-
- Here's a picture of the Rockwell-based SUT: !P1010521.jpeg!
It is occasionally losing the fix. That's kind of a pr... -
- Perfect.
Thank you! -
- works
- 05:56 AM Revision 86d431a8: Remove input_errors2Ajax calls, was never implemented. Ticket #3027
- 04:36 AM Revision 0cb7999c: fix typo. noticed-by: phil.davis
- 04:35 AM Revision 9da9b523: fix typo. noticed-by: phil.davis
-
-
- works
-
- PR was merged for this a couple weeks ago
-
- fixed
-
- fixed
-
- works
-
- removed all references to input_errors2Ajax.
-
- the "rescue config" option in the installer works for this.
-
- the fix for #4066 also addresses this
-
- addressed in #6585
-
- duplicates #6357
-
- It's correct that it does so. There is another ticket to improve which packages restart on dynamic WAN reconnection
-
-
-
- Likely this is fine on 2.3.x with the latest driver. If not, should be reported upstream to FreeBSD.
-
- duplicate of other that was fixed in 2.3.x
-
- fixed in 2.3.0 and newer
-
- no apparent issues here, and no feedback
- 12:14 AM Revision 1a33a597: set net.isr.dispatch instead since net.inet.ipsec.directdispatch no longer exists. Ticket #4754
-
- Pre-strongswan, each P2 showed as its own entry on status_ipsec.php, so you could see which defined P2s were up and d...
- 12:12 AM Revision 9a330eff: Remove workaround for Ticket #4754 in 2.4 since 32 bit is dead.
- 12:07 AM Revision d12fc6cd: Add config option for AdvDefaultLifetime, clean up descriptions on other. Ticket #6533
- 12:06 AM Revision d37bd612: Add config option for AdvDefaultLifetime, clean up descriptions on other. Ticket #6533
07/09/2016
- 11:40 PM Revision 48eb136f: Add configuration for Min and MaxRtrAdvInterval. Ticket #6533
- 11:40 PM Revision c3099b79: Add configuration for Min and MaxRtrAdvInterval. Ticket #6533
-
- works
-
09:11 PM Bug #4326: Limiters on firewall rules where NAT applies drop all traffic
- Since we are not getting a solution any time soon, i guess we can use 2 pfsense boxes in line one with limiter and t...
-
- If you restore a config, and upon reboot the system doesn't have Internet connectivity when trying to update metadata...
-
- works
-
-
- Works, thanks. ;)
-
- Applied in changeset commit:76763c4c5a3d537b778243524a15ee9204f68c6f.
-
- Thanks Phil, PR merged.
-
- This is easy to fix - just a bit of magic code is missing to enable file uploads on this page.
PR https://github.com... -
- Thanks Greg. Going to consider this fixed then, one of the other gateway-related tickets target 2.3.1 must have resol...
-
02:48 AM Bug #6110: Default gateway switching not always working with PPP
- Hi!
Nope, all fine here.
Tested multiple times... -
- I removed that directdispatch sysctl from 2.4 entirely since 32 bit is gone there, and changed RELENG_2_3 to net.isr....
-
- Apparently this can also affect 2.3.x and that tunable is no longer present. To work around the issue, use @net.isr.d...
-
- added Min and MaxRtrAdvInterval as well as AdvDefaultLifetime.
Greg: if there are other options you'd like to see... -
- Hi Chris!
Great news, are those Router lifetime, Route lifetime etc.. also added to be able to configure them? -
- this mostly done, want to review with fresh eyes tomorrow before committing though.
-
02:31 PM pfSense Packages Bug #6592: squid does NOT use EDH and EECDH cipher suites because "tls-dh" is not configured and so these ciphers are silently dropped - see squid documentation
- Seems to focus oon reverse proxy only.
-
- Already covered by https://github.com/pfsense/FreeBSD-ports/pull/110 when someone gets to it.
-
- Here it is documented how "http_port" can be configured:
http://www.squid-cache.org/Doc/config/http_port/
EDH and... -
- I seem to have a stable fix with 5-6 PRNs now. This is comparable to the uBlox5 unit (pfSense 2.3.1, i386, ALIX 6D2) ...
-
- P.S. Those of us who are only using NTPD for reference clock support (and time distribution), and/or plan to run IEEE...
-
- I'm still having some receiver issues, however...
I can get the higher quality SHM refclock derived from PPS in GP... -
- Proceeding under the assumption that refclock_jupiter.c may have bitrotted, I discovered that there is not a snowball...
-
- Alexander Wilke wrote:
> For the user it would be good to have the possibility to modify "NO_SSLv3" using the WebUI ... -
- Squid has some additional options set like:
options=NO_SSLv2,NO_SSLv3,SINGLE_DH_USE (and should have "SINGLE_ECDH_... - 07:32 AM Revision 68de2169: Fix #6050 DHCP - provide Network Booting display/hide advanced button
- This one moves the "Network Booting" above the "Additional BOOTP/DHCP Options". That allows "Network Booting" to be a...
- 07:21 AM Revision bfc9741a: Fix #6590 NTPd Leapfile Upload
- 07:21 AM Revision f5495307: Merge pull request #3050 from phil-davis/patch-1
- 06:32 AM Revision 76763c4c: Fix #6590 NTPd Leapfile Upload
- 04:24 AM Revision cc4fc50b: Merge pull request #3037 from NOYB/Check_IP_Services
- 03:12 AM Revision 350a7001: Leave this to 2.4 only for now. Revert "Omit non-qualified hostnames from unbound's local-data. Ticket #6064"
- This reverts commit cde0ef17a60cffa4a54f3ab4922b77bc0447d068.
- 03:11 AM Revision 0fa68840: Exclude non-qualified hostnames from hosts file. Ticket #6064
- 03:04 AM Revision cde0ef17: Omit non-qualified hostnames from unbound's local-data. Ticket #6064
- 03:02 AM Revision f1db82ac: Omit non-qualified hostnames from unbound's local-data. Ticket #6064
- 02:58 AM Revision 6a8dc7bc: Call filter_configure in rc.linkup. Ticket #6297
- 02:57 AM Revision e3bda4fa: Call filter_configure in rc.linkup. Ticket #6297
- 02:54 AM Revision e2158306: Verify a valid IPv6 subnet is going to be used before including in radvd's config. Ticket #6581
- 02:52 AM Revision f8f8d131: Verify a valid IPv6 subnet is going to be used before including in radvd's config. Ticket #6581
-
- I have made 2 PRs with different ways to organize the page:
https://github.com/pfsense/pfsense/pull/3051
https://gi... -
01:19 AM Revision 84b6f05a: Missing closing quote
-
- works
-
- See https://redmine.pfsense.org/issues/6573
- 01:18 AM Revision a018cc36: Merge pull request #3049 from doktornotor/patch-2
07/08/2016
-
- Something in the mix keeps setting the baud rate to 4800, though -- overriding /dev/cuau0.lock settings. My guess is ...
-
- I have a shell script which configures the unit for 9600 baud binary operation. [[gpsdo-boot.sh]]
This requires th... -
- Swapping out the cables DID help. Always ensure you're using a high-quality, shielded serial cable for talking to a G...
-
-
- Grab the ftp://tycho.usno.navy.mil/pub/ntp/leap-seconds.list, try to upload it via Services - NTP - Leap seconds file...
-
- merged from PR 3037
https://github.com/pfsense/pfsense/pull/3037
ticket for tracking -
-
- the hierarchy is correct
-
- Armin: you still seeing this on 2.3.1_5 (or newer)?
-
- works
-
- The root cause here is likely that the SA that exists at the time of the IP change is still hanging around afterwards...
-
- The root issue can still be a problem. Probably ought to put a lock around it, but long-term needs a better service m...
-
- fix pushed to master/2.4 only, as that'll need more widespread testing than 2.3.2 will get before release.
-
- fix pushed
-
-
- fixed
-
- fix pushed
-
- Needs to verify it's a valid subnet and prefix before getting into this block, and skip it if it's not.
https://git... -
- works.
Whether systems show online or offline depends on whether the DHCPv6 leased IP is in the NDP cache. If the... -
05:28 PM Bug #6543: Some leases do not show up in DHCPv6 Lease status
- Renato Botelho wrote:
> You can install the package "System Patches" and then apply following patch to you system:
... -
- Axel Taferner wrote:
> Sorry, I can't confirm if the fix worked for me as I'm not running the snapshots. I'll open a... -
- Sorry, I can't confirm if the fix worked for me as I'm not running the snapshots. I'll open another bug for the separ...
-
- Axel Taferner wrote:
> Awesome. Should I open another bug for the problem I mentioned where hosts who have staticall... -
- Awesome. Should I open another bug for the problem I mentioned where hosts who have statically assigned dhcpv6 leases...
-
- Applied in changeset commit:1f9c2cb696f493aaaa3512f29c080b7e422b24f2.
-
- Pushed a fix on RELENG_2_3, 2.3.2 snapshots will be fine
-
- Greg M: does this still happen for you?
James M: you're referring to something entirely unrelated. -
- works
-
- PR merged
-
- https://github.com/pfsense/pfsense/pull/3049
-
- confirmed fixed on multiple upgrades
-
-
-
-
-
-
- See https://redmine.pfsense.org/issues/6573
- 03:30 PM Revision 9461d208: Fix #6582 Allow import of ports
- This change does:
1) Allow bulk import of a port alias. That happens when the Import
button is pressed from the Ports... -
-
-
-
- This is a duplicate of #6172
-
- Closing by submitter's request
-
- Merged, thanks!
- 09:36 AM Revision d5861220: Fix #6585 Do not use [] syntax for lookups
- IPv6 address plus port is displayed with the format [1:2::3]:80 - the address is in square brackets followed by colon...
- 09:33 AM Revision 65231ec5: Merge pull request #3047 from phil-davis/patch-2
-
-
- This issue could be changed from "feature" to "bug".
-
- Applied in changeset commit:30df6b722d577fe8c1b38476244bfb797ec89b5a.
-
- Merged, thanks Phil.
-
- Thanks for testing.
The Firewall Log Dynamic view does not have the reverse lookup buton, so it won't be broken!
Th... -
02:19 AM Bug #6585: status_logs_filter.php ipv6 support (reverse lookup)
- It works!
Now for ipv6 addresses ptr records are returned,
and in case of no prt "Cannot resolve".
Great work, tha... -
- fixed, thanks NewEraCracker
- 01:34 AM Revision 30df6b72: Fix #6585 Do not use [] syntax for lookups
- IPv6 address plus port is displayed with the format [1:2::3]:80 - the address is in square brackets followed by colon...
-
- Steve: don't think this is extremely involved, if you can get it addressed in the next few days we can get it in for ...
- 12:51 AM Revision 3db367fb: Show "cannot delete alias" message as error
- If I try to delete an alias that is in use, the "cannot delete alias" message was being displayed as the "success" co...
-
- Since the upgrade to ISC dhcpd 4.3 in 2.3x, several users have reported missing hostnames in the dhcpd.leases file. T...
07/07/2016
-
08:58 PM Bug #6588 (Closed): PHP suhosin max value length prevents Quagga OSPF from storing a very large zebra.conf
- pfsense 2.3.1-RELEASE-p5 (amd64)
Quagga_OSPF net 0.6.14
I tried to add some static routes in Services>Quagga OSP... -
- The IPv6 addresses there are displayed using the [1:2::3]:80 format with [IPv6-address]:port which is good for displa...
-
- status_logs_filter.php reverse lookup lacks IPv6 support,
"i" click to resolve doesn't returs any info for IPv6 addr... -
- Forwarded it to you, Renato.
-
- Axel Taferner wrote:
> I sent the email last week, I hope you received it.
Hello Axel,
Can you also send it to... -
- That's correct. Upload is in on LAN, download is out on LAN.
-
06:31 AM Bug #6584 (Not a Bug): FirewallTraffic ShaperLimiters on in/out rule mixed up
- When apply traffic rule on the lan interface default any rule. the in and out is mixed up.
in= upstream (upload)
... -
- link0 is no longer supported on gif, it used to be multi-destination behavior, we had it labeled as "route caching" -...
-
- gre(4) in FreeBSD 10.3 (and 10.2) no longer appears to support the link0/link1/link2 tweaks it used to have for route...
-
-
-
- 12:53 PM Revision bada7f8b: Merge pull request #3045 from phil-davis/patch-2
-
-
- now works on 2.3.2.a.20160707.1019 : ipv4/ipv6 name lookup and reverse.
-
- Imported traceroute6 patch to FreeBSD-src repo. It'll be available on next round of snapshots
-
- I'll make some tests and import the patch to our tree
-
- Period data is now available in 2.3.2 snapshots in the new Traffic Totals package, based on the vnstat database.
h... -
- There is now a Traffic Totals package in 2.3.2 snapshots that shows traffic totals for hours/days/months, using the v...
-
- Bug in present patch: '$PRWIINIT,A,,,,,,,,,,,,,\r\n' is an absolute reset, losing the date. This may have caused inte...
-
11:39 AM Bug #5990: AES-GCM should be an allowed encryption algorithm for IKEv2 in P1
- Can I suggest that in the meantime, there shouldn't be a default selection made for encryption algorithm? And further...
-
-
10:05 AM Bug #6395: Comments are not removed from URL Table (Ports) links
- FYI - I need this update to be rolled up into 2.3.2 as I cannot upgrade to 2.3.1_5 directly without breaking firewall...
-
- 2.3.1_5 appears to have fixed it. Thank you.
-
- Alex Vergilis wrote:
> Phillip/Chris/Renato,
>
> I've noticed that I had to save the URL several times before the... -
- Applied in changeset commit:2a8849119c7c48976161faeaedc477c347e9b724.
-
- It was replaced by $g['enableserial_force']. I've pushed a fix for System Advanced page
-
- All updates are requiring reboot nowadays while we didn't test reroot accordingly. IMO it's a big change for 2.3 seri...
-
- Yes, agree. It is new functionality that does not need to risk breaking something in 2.3.1_*
-
- Such a big change for 2.3.1, pushing it to 2.3.2
-
- Suggested combination fix and enhancement pull request https://github.com/pfsense/pfsense/pull/3046
-
- Definitely works, no bug here.
Depending on your other selected options you may need to have a line before it for ... -
- I've added it to custom options without any problem. Make sure any extra char was not added by accident, check if unb...
-
02:22 AM Bug #6583 (Not a Bug): Unbound Query Logging
- It is not possible to configure query logging in the DNS Resolver UI page; adding "log-queries: yes" to the custom op...
-
- sshdcond package was deprecated in pfSense 2.3
- 06:57 AM Revision e4c784bf: Fix #6582 Allow import of ports
- This change does:
1) Allow bulk import of a port alias. That happens when the Import
button is pressed from the Ports... - 06:39 AM Revision 04b571e8: Show "cannot delete alias" message as error
- If I try to delete an alias that is in use, the "cannot delete alias" message was being displayed as the "success" co...
-
- thanks BBcan
07/06/2016
-
- Can be closed
-
09:41 PM Bug #6582 (Resolved): Import on Firewall/Aliases Only Works for IPs
- In the firewall alias section, the import button only enters values into IP aliases despite the import button being p...
- 09:35 PM Revision c4045b79: Fix PTR lookups on diag_dns.php. Ticket #6561
- 09:34 PM Revision a9b6c19a: Fix PTR lookups on diag_dns.php. Ticket #6561
-
08:17 PM Revision 006409c6: Change group labels s/MAC controls/MAC Address/
-
- 08:16 PM Revision ce9130bc: Merge pull request #3043 from NOYB/Label_Rename
-
-
-
-
-
- fix pushed for the PTR lookups
-
- Might have got the version wrong there, this occurs on the latest release.
The patch I put in was:... -
- On the "Router Advertisements" page in the GUI we have:
RA Subnets: ... If no subnets are specified here, the Route... - 02:55 PM Revision 48396f02: Correct spacing
- (cherry picked from commit a0b0acd1540764d5221ea54ea596d569bbe2df2a)
- 02:55 PM Revision 4a4cf887: Correct spacing
- (cherry picked from commit a0b0acd1540764d5221ea54ea596d569bbe2df2a)
- 02:54 PM Revision a0b0acd1: Correct spacing
- 02:53 PM Revision 5aef6c8b: Remove debug
- (cherry picked from commit 5810f934472368f43942ea66820dc98e17143c19)
- 02:53 PM Revision f978691b: Remove debug
- (cherry picked from commit 5810f934472368f43942ea66820dc98e17143c19)
- 02:52 PM Revision 5810f934: Remove debug
- 02:51 PM Revision 1e686fe9: Fixed #6577 - Preserve user input on error
- (cherry picked from commit a654d899cd5d288501fea1ec52dba2e3f0e479ba)
- 02:51 PM Revision 07451ca8: Fixed #6577 - Preserve user input on error
- (cherry picked from commit a654d899cd5d288501fea1ec52dba2e3f0e479ba)
- 02:48 PM Revision a654d899: Fixed #6577 - Preserve user input on error
-
-
-
-
10:00 AM
Bug #6577: pkg_edit.php: rowhelper data not preserved on validation error
- Applied in changeset commit:a654d899cd5d288501fea1ec52dba2e3f0e479ba.
-
09:57 AM
Bug #6577 (Feedback): pkg_edit.php: rowhelper data not preserved on validation error
- Read values from POST data on validation error
Re-factor some duplicated code
-
- I sent the email last week, I hope you received it.
-
- I finally managed to get back to this after several weeks having to work for a living. The first thing I did was to u...
-
-
- Applied in changeset commit:5fac13aafdc335864082fd2e3f5a843d33859fe4.
- 05:39 AM Revision 4c5cb2f6: Leave an empty file for URL Table aliases that return an empty file, and include it in the ruleset regardless so it doesn't generate any filter errors. Ticket #6181
- 05:37 AM Revision e5581024: Leave an empty file for URL Table aliases that return an empty file, and include it in the ruleset regardless so it doesn't generate any filter errors. Ticket #6181
-
- Thanks Bill
-
-
- NPT ought to allow specifying "LAN subnet", "OPT1 subnet", etc. like firewall rules and other NAT pages for source an...
-
- Even further back, this was fixed by Phil via PR in 2013 and works. ...
-
- fix pushed to prevent ruleset errors in that case. It just leaves an empty file there and still includes it in the ru...
07/05/2016
-
-
- 07:59 PM Revision 0a3ac6e8: Rationalize System Update GUI messages
- At present, when doing a System Update, there is a message box that says:
"Please wait while the installation of comp... - 07:58 PM Revision 936b4560: Protect get_dir from causing PHP errors
- https://forum.pfsense.org/index.php?topic=114570.0
- 07:58 PM Revision 68cf7ccb: Protect get_dir from causing PHP errors
- https://forum.pfsense.org/index.php?topic=114570.0
- 07:58 PM Revision 20dc1d7f: Merge pull request #3042 from NewEraCracker/master
-
- Phillip Davis wrote:
> Firstly the back-end implementation code should Net_IPv6:compress all IPv6 addresses in order... -
- Firstly the back-end implementation code should Net_IPv6:compress all IPv6 addresses in order to make sure the addres...
-
- If you have IPv6 CARP VIPs specified with non-significant zeros, such as fdaa:1234:0012::1, the secondary will see th...
-
-
-
-
- Take the scenario of:
LAN: bridge0
OPT1: igb1
OPT2: igb2
where bridge0 has igb1 and igb2 members. The LAN IP ... -
- If you have IPsec P1s configured with a FQDN as the remote endpoint, and those don't resolve, the filter reload proce...
-
03:49 PM Bug #5737: Traffic Graph Table and Graph Inverted Values
- I was just getting ready to report this as a bug myself.
I guess my question is: how is this not considered a bug... -
- Thanks Luke.
The delay there is from dyndns's checkip service being very slow to respond, there is another ticket... -
- works.
Thanks NOYB -
- This area could use some more work anyhow. I have to fight to get my USB GPS to be recognized at all. It appears we n...
-
- It was relocated because /var/run is a tiny memory disk used for some very volatile files to save disk writes, and th...
-
- The Python prototype we have internally is now plug-and-play as filebeat and topbeat are. It uses the bulk posting AP...
-
- We have Python pushing log records to ELK as a rough prototype. The code is dog simple, and should be relatively easy...
-
11:20 AM
Bug #6577 (Resolved): pkg_edit.php: rowhelper data not preserved on validation error
- e.g.: Install pfBlockerNG and visit pkg_edit.php?xml=/pfblockerng/pfblockerng_v4lists.xml&id=2
Add an IPV4 list sour... - 08:07 AM Revision e4eca5a3: Protect get_dir from causing PHP errors
- https://forum.pfsense.org/index.php?topic=114570.0
07/04/2016
-
02:06 PM Revision 81fb072c: webgui tables, doubleclick event to perform 'edit' action, part 2
- (cherry picked from commit 1c10ce9750f3702f433a91754f79e637e1c3369b)
-
- (cherry picked from commit 1c10ce9750f3702f433a91754f79e637e1c3369b)
- 02:05 PM Revision 86ac7cde: Merge pull request #3041 from PiBa-NL/webgui-table-dblclick
-
- We have a candidate library. [[https://github.com/QHedgeTech/cpp-elasticsearch]] requires only libcurl, already in ba...
-
- Not as such, but we've raised CCLAs with ESF so we can get onto it.
Also, the relatively large binary footprint of... -
09:54 AM Bug #6566: Cloudflare DnyDNS Update with subdomains
- Looking at this again - I don't think this would work for a subdomain such as ip.test.example.com.
It might be pos... -
- Hi Chris,
Also forgot to mention that both PFSense boxes are installed in a VMware environment. We followed the fo... -
- Hi Chris,
We would like to thank you for your reply, please find my replies in line. Do not hesitate to contact us... -
- The issue is php-fpm on the secondary is getting hung up on something. Going to need more info.
Does it happen on... -
- Hi!
Can we also set the:
Router lifetime (now 60 seconds, this is way too low)
Route lifetime, also 60 seconds a...
07/03/2016
-
-
- (cherry picked from commit 54691fc663eae7c6e92e4eaad596906758d7ebea)
-
- (cherry picked from commit 54691fc663eae7c6e92e4eaad596906758d7ebea)
-
08:34 PM Bug #6575 (Closed): GEOM Mirror Status Change Re-sync notices
- Every 1% re-sync creates a notice (and an email alert if configured as such).
Suggest re-sync start, re-sync error... - 08:34 PM Revision 6ad9271a: Merge pull request #3040 from PiBa-NL/webgui-table-dblclick
-
-
- (cherry picked from commit 658180daffe0fe5f005b6fe6b528c758309dffef)
-
- (cherry picked from commit 658180daffe0fe5f005b6fe6b528c758309dffef)
- 05:50 PM Revision 587be0aa: Merge pull request #3039 from PiBa-NL/ipsec-widget-arraycheck
-
-
- Here is the USB config descriptor as seen by Linux.
-
- TL;DR -- the FreeBSD urndis(4) driver needs some serious attention.
People cannot buy discrete ADSL2+ modem cards ... -
- Yup. I have the u-Blox 5 also in an ALIX 6D2 (older rev) and have the necessary leads soldered for 1PPS and UART. But...
-
11:22 AM Bug #6223: IPsec + OpenBGPD fails with "PF_KEY socket: No buffer space available"
- Chris Buechler wrote:
> Michael OBrien wrote:
> >
> > Still having this issue (running OpenBGPd + IPSec - transpo... -
- Is it possible to have a @ln -s /var/log/dmesg.boot /var/run/dmesg.boot@? The @vm-bhyve@ package expects the file at ...
- 08:45 AM Revision 9e899320: spdns.de renamed to spdyn.de
- Forgot to update the select description and values
- 08:45 AM Revision 17d422c1: Merge pull request #3038 from exii1988/master
07/02/2016
-
- Assigned to Pingle.
Note as well that we have a (I believe) U-blox GPS receiver that interfaces to the Minnowboard... -
- I notice that there is no way to set the termios bits directly w/o hacking code. It's a possibility I may have to do ...
-
- Swapped out PSU rail on my GPSDO for a discrete external PSU. I think it's still losing characters, however pfSense's...
-
- See NTPD refclock 31 page: [[https://www.eecis.udel.edu/~mills/ntp/html/drivers/driver31.html]]
-
- (This isn't working for me right now -- could be power or cabling issues)
This is just a quick and dirty patch to ... -
- NanoBSD won't be around for much longer, you're better off with a full install anyhow in the long run. If you activat...
-
- This isn't nearly as much of a problem for me right now -- the offending system has been upgraded to use mSATA, throu...
-
- Hi All,
We have 2x PFSense boxes with version 2.3.1-p5 configured with CARP protocol. We have noticed and this is ... -
- If NUT is started with SNMP UPS configured and UPS network or card is currently down, an error message appears
"ER... - 10:22 AM Revision fb66c35f: spdns.de renamed to spdyn.de
- Forgot to update the select description and values
- 09:49 AM Revision 608090e8: spdns.de renamed to spdyn.de
- The service renamed there addresses
- 09:47 AM Revision ea301b1b: Merge pull request #3036 from exii1988/master
-
- Tested with pfSense-CE-2.3.2-DEVELOPMENT-amd64-20160702-0342 + Namecheap DDNS using `*` wildcard. Works! Testing was...
- 09:29 AM Revision 1c2c08bd: spdns.de renamed to spdyn.de
- The service renamed there addresses
- 09:20 AM Revision d35b6181: Clarify Negate option description on firewall_nat_out.php.
- 09:19 AM Revision ee3cc6d5: Clarify Negate option description on firewall_nat_out.php.
-
- Configurable check IP services.
Used by Dynamic DNS services to check IP addresses.
Configure as many check IP servic... - 08:41 AM Revision 65292972: Change button order on diag_dns.php so hitting enter in the field does a lookup rather than update alias. semi-related to Ticket #6561
- 08:40 AM Revision 7208f387: Change button order on diag_dns.php so hitting enter in the field does a lookup rather than update alias. semi-related to Ticket #6561
-
- It's fixed.
-
- PR was merged
-
- updated subject is the issue. That case shouldn't cause it to skip requesting PD, for cases where the PD is actually ...
-
- I believe this is the issue in FreeBSD PR 201519.
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=201519
Luiz ... -
- works
07/01/2016
-
- Use of undefined constant min - assumed 'min'
-
- Use of undefined constant min - assumed 'min'
Use of undefined constant max - assumed 'max' -
- Notice: Use of undefined constant min - assumed 'min'
Notice: Use of undefined constant max - assumed 'max' -
- Use of undefined constant min - assumed 'min'
-
- Use of undefined constant min - assumed 'min'
Use of undefined constant max - assumed 'max' -
- Notice: Use of undefined constant min - assumed 'min'
Notice: Use of undefined constant max - assumed 'max' - 09:48 PM Revision ea57c74b: Merge pull request #3035 from BBcan177/patch-1
-
- Use of undefined constant min - assumed 'min'
-
- Use of undefined constant min - assumed 'min'
Use of undefined constant max - assumed 'max' -
- Notice: Use of undefined constant min - assumed 'min'
Notice: Use of undefined constant max - assumed 'max' -
- It probably shouldn't write out anything to /etc/hosts or host_entries.conf for the host's own hostname if DHCP Regis...
-
05:14 AM Bug #6570 (Closed): Unbound breaks DNSSEC for pfSense's own hostname
- During config update, pfSense writes its own FQDN in /etc/hosts, such as:...
-
- appears to be a date/time issue within the VM in this case
-
- seems that now ipv4/ipv6 reverse lookup is broken
-
10:56 AM Feature #6546: pfSense should support logging to e.g. ELK stacks
- Have you made any progress on this? I am trying to get filebeat set up on pfsense right now and ran into CLOG. :-(
-
- Martin Hansen wrote:
> Hi, first ever bug report, bare with me.
>
> Running filebeat on a pfsense to ship logs to... -
- This is mentioned at [[http://support.ntp.org/bin/view/Support/ConfiguringJupiterRefclocks]]
-
- Resolved: now (tested on 2.3.2.a.20160630.1832) "Diagnostics / DNS Lookup" returns AAAA records.
Note: still on f... -
- Fixes hidding of custom individual settings when not in use on user manager page.
- 01:10 AM Revision 591b9184: Merge pull request #3034 from NOYB/startsWith_Polyfill
-
- Fixes hidding of custom individual settings when not in use on user manager page.
-
- I'm working on catching up on PRs, this one coming soon.
06/30/2016
-
11:49 PM pfSense Packages Feature #6141: Convert apcupsd package to 2.3
- Apparently someone has updated the package and it's been waiting on approval here for over a month: https://github.co...
-
- Use correct Thursday abbreviation (s/Thr/Thu/).
-
- Use correct Thursday abbreviation (s/Thr/Thu/).
- 11:31 PM Revision d2f32464: Merge pull request #3033 from NOYB/Diag_Tables_Last_Updated
-
- Use correct Thursday abbreviation (s/Thr/Thu/).
-
- fix pushed
-
- works
-
- looks good, validation is correct in those cases now, no apparent regressions. Thanks Phil!
-
- PR merged
-
- works
-
- works
-
- works
-
- (I will probably have a crack at doing this when time permits... I'm bedding in a GPSDO unit based on the Jupiter, wi...
-
- OK, first of all, I appreciate the hard work you guys have done on cleaning up the backend implementation.
However... -
- OK, so having run headfirst into the bsdconfig wall, I had a rethink about how to express what this ticket is really ...
-
- (From a strictly "consumer of tech" point of view, relying on the base system for this is probably going to cause mor...
-
- works
-
- works.
Thanks for the additional confirmation, Zeev. -
02:14 AM Bug #6364: PHP Fatal error: Allowed memory size of 268435456 bytes exhausted (tried to allocate 32 bytes) in /usr/local/www/status_carp.php on line 261
- Hello,
i added your changes and looks like it works. Chris you are the king :) -
- duplicate of #4766
-
03:54 AM Bug #6564 (Duplicate): Alias URL TABLE(IP) failed loading when WebGUI set to HTTPS
- After setting System -> Advanced -> Protocol to HTTPS
the download of Alias URL TABLES(ip) does not work anymore whe... -
- this was done in pieces across several releases since then, especially in 2.3x+.
-
- probably just need to set the ping payload.
https://forum.pfsense.org/index.php?topic=110043.0
no indication of ... -
10:20 AM Bug #6567 (Not a Bug): Dual Wan Gateway Monitor is offline
- Hello, i am running on pfsense 2.3.1_5_amd64 (latest) and when i switch on dual gateway, the gateways status is offli...
-
- The create alias stuff is still broken due to gethostbyname() usage.
- 12:24 PM Revision 48ebcd49: Fix firewall rules for PPPoE server
- 1) PPPoE Clients are located within 'Remote Address Range' (sa) and not Server Address (ip), see lines 1194 and 1195....
-
- Hi Chris,
system log added. :)
Thanks,
Mario (Marlenio) -
- See also [[https://redmine.pfsense.org/issues/6554]]
-
- Here is how I get around the lack of GUI integration at the moment.
(Requires mode7 support on loopback is re-enable... -
- See attached hack.
-
- If a host such as ip.example.co.uk is used for the cloudflare dynamic dns update the zone_id will fail to be returned...
- 06:43 AM Revision 337f8296: Fix Redmine #6011
- This will add linklocal fallback where no IPv6 is otherwise configured to allow login using this IPs
- 06:42 AM Revision f5ba05cb: Merge pull request #2764 from NewEraCracker/redmine-6011
- 06:20 AM Revision a1d059c2: Allow wildcard for hostname with Namecheap DDNS. Ticket #6260
- 06:20 AM Revision 84a67bf4: Allow wildcard for hostname with Namecheap DDNS. Ticket #6260
-
06:11 AM Revision de8882d6: Whitespace cleanup
-
-
- 06:10 AM Revision 0015e84c: Merge pull request #2729 from zevlag/BountyRequestTopic106193
-
- Diff Option
--diff
SSD Friendlier
Same as default but only copies files that are different, instead of every thing ev... - 06:05 AM Revision d691888e: Merge pull request #3031 from NOYB/GitSync_Diff_Only_Option
-
- Diff Option
--diff
SSD Friendlier
Same as default but only copies files that are different, instead of every thing ev... -
05:24 AM Revision add3c6c5: Get modulus keysize
- Useful utility function when it's necessary to verify that existing keys meets current practices
- 05:24 AM Revision 79299722: Merge pull request #2994 from stilez/patch-31
- 05:20 AM Revision 595b074d: Feature #6388 custom GUI preference settings per user
- 05:20 AM Revision 50d36974: Merge pull request #3018 from phil-davis/usersettings
- 05:01 AM Revision d0acb088: Handle more invalid IPv6 formats
- 05:00 AM Revision a77ed90d: Handle more invalid IPv6 formats
- 05:00 AM Revision 7685fd4e: Merge pull request #3029 from phil-davis/IPv6colons
- 04:58 AM Revision 75b8611e: Rationalize System Update GUI messages
- At present, when doing a System Update, there is a message box that says:
"Please wait while the installation of comp... - 04:57 AM Revision bb5d3a43: Merge pull request #3030 from phil-davis/patch-1
-
04:32 AM Bug #6565: OpenVPN calculates incorrect TCP checksums when running in bridged/tap mode with 'mode server'
- Chris Buechler wrote:
> with tap I'm guessing? That's not the case with tun. Any IP assigned to the server itself is... -
- with tap I'm guessing? That's not the case with tun. Any IP assigned to the server itself is affected (tap IP, LAN IP...
-
- When a connected OpenVPN client attempts to establish a TCP connection with a pfSense OpenVPN server, the server resp...
-
- 04:30 AM Revision f4803487: Merge pull request #3028 from PiBa-NL/2.3_dnsV6
- 04:30 AM Revision 6bc8621f: Rationalize System Update GUI messages
- At present, when doing a System Update, there is a message box that says:
"Please wait while the installation of comp... -
- Generated config:...
-
- Chris Buechler wrote:
> The config either ends up with "mode server" or "server-bridge" depending on the specifics o... - 03:26 AM Revision cd233828: Add playback files for disabling and enabling CARP maintenance mode. Ticket #6560
- 03:26 AM Revision a5297e81: Add playback files for disabling and enabling CARP maintenance mode. Ticket #6560
- 03:25 AM Revision 9a8b5401: Add playback files for disabling and enabling CARP maintenance mode. Ticket #6560
- 03:20 AM Revision 7e9349a5: Handle more invalid IPv6 formats
-
- works
-
- works
-
02:46 AM pfSense Packages Bug #6562: Bug/Wrong description in the squid settings
- Screenshot Author: http://docs.diladele.com/
-
- I think there is a wrong description or maybe a bug in the "certificate adapt" option in the squid https settings. He...
-
- Squid still accepts sha1 certificates.(Man in the middle proxy) I think this should be blocked by default for securit...
-
- Chris Buechler wrote:
> subject isn't true in general, 82574L in the FW-7541 correctly detects link down and up. e10... -
- exists and works in 2.4
-
- merged a slightly modified fix from PR 2770
https://github.com/pfsense/pfsense/pull/2770
Not sure that suffices t... - 12:49 AM Revision 5f37baed: Omit <secret> tags from L2TP in status.php config.xml dump.
- 12:49 AM Revision 1799a969: Omit <secret> tags from L2TP in status.php config.xml dump.
- 12:49 AM Revision 8d1a6065: Omit <secret> tags from L2TP in status.php config.xml dump.
- 12:42 AM Revision c6060e22: Restore 2.2.x and prior means of obtaining pfsync nodes to avoid exhausting memory on systems with large state tables. Ticket #6364
- 12:42 AM Revision e38e1efd: Restore 2.2.x and prior means of obtaining pfsync nodes to avoid exhausting memory on systems with large state tables. Ticket #6364
- 12:41 AM Revision eef555b9: Restore 2.2.x and prior means of obtaining pfsync nodes to avoid exhausting memory on systems with large state tables. Ticket #6364
-
- merged, thanks Phil
06/29/2016
-
- diag_dns.php lacks IPv6 support. Merged from PR 3028
https://github.com/pfsense/pfsense/pull/3028
Thought we had ... -
- Pull request https://github.com/pfsense/pfsense/pull/3029
Fixes handling of (what should be invalid) formats:
1:2... -
- added. Since it's a trivial addition and not a feature that can introduce regressions, merged to 2_3_1 as well.
-
- It would be very useful to be able to do this from the CLI when the GUI is unavailable.
-
-
- restored 2.2.x and prior's method of obtaining the nodes, which will prevent it from running out of memory.
-
- This all looks good now. All the test cases that were wrong previously are correct now, and no apparent regressions.
-
- Hi Chris,
new update in thread-
--
Mario (Marlenio)
-
- subject isn't true in general, 82574L in the FW-7541 correctly detects link down and up. e1000 in VMware ESX and Work...
-
- Hi All,
as described in the title, with the 2.3 version of PF-Sense when you unplug an Ethernet cable from a gigab... -
- The config either ends up with "mode server" or "server-bridge" depending on the specifics of your config. That's in ...
-
- Jim Pingle wrote:
> What are the exact settings in use on the OpenVPN server that lead to it being omitted when yo... -
- It's not quite that simple. There are cases when it must be omitted as well, such as some tap bridge scenarios, or Op...
-
- Workaround is to set 'mode server' in the advanced options section.
-
- When creating a new OpenVPN server, the "server mode" web interface drop down does not influence the written configur...
-
- The situation where they fail is where DNS Forwarder or Resolver are not bound to localhost. If resolv.conf doesn't e...
-
- At the moment the user can input a "full" IPv6 address "uncompressed" and it is saved just like that, e.g.:
1:2:3:4:... - 05:57 AM Revision bfa8df8a: Flush link-local IPs so we do not get stale data and do not waste time deleting IP if it is already set to fe80::1:1
- 05:57 AM Revision 4400ad90: Merge pull request #2934 from k-paulius/patch-14
-
04:52 AM Feature #336: Option to create lagg under assign interfaces
- Just to chime in, we're in the process of upgrading loads of our pfSense installs to use LAGG from single links; this...
- 03:36 AM Revision 31df78a8: Merge pull request #2944 from stilez/patch-23
-
- The console menu item #12 (_"pfSense/$product developer shell"_) has a pointless title that doesn't help users much. ...
- 03:32 AM Revision 17315994: Merge pull request #3000 from stilez/patch-32
- 03:01 AM Revision 6dfb6b27: Update include() to include_once()
- For safety, use include_once() when including various "side" files.
There are a couple of instances of include("guico... - 03:01 AM Revision adcb1d08: Merge pull request #3024 from phil-davis/include_once
-
- dpinger stopps with an error when the socketname exceeds over
(around) 100 characters. The dpinger will not start and... -
- Currently underscores are used to seperate gwifip, monitorip, etc, but
underscors are also used in vlan subinterfaces... -
- dpinger stopps with an error when the socketname exceeds over
(around) 100 characters. The dpinger will not start and... -
- Currently underscores are used to seperate gwifip, monitorip, etc, but
underscors are also used in vlan subinterfaces... - 02:12 AM Revision 5f93d5f1: Merge pull request #3027 from dhoffend/ticket-6505
-
- PR confirmed and merged
06/28/2016
-
- dpinger stopps with an error when the socketname exceeds over
(around) 100 characters. The dpinger will not start and... -
- @Erik: If someone puts the validation code in place to check text-entries in those boxes for validity, then they coul...
-
04:07 PM Bug #6468: Firewall scheduler allows you to set invalid time range
- @Philip: Even if it was not an intention, it was best what happened. It was definitively easier to modify one single ...
-
- Currently underscores are used to seperate gwifip, monitorip, etc, but
underscors are also used in vlan subinterfaces... -
- Axel: could you email me an unsanitized copy of your dhcpd6.leases? cmb at pfsense dot org. Nothing immediately stick...
-
- I like to statically assign DHCPv6 addresses to some devices on my network. But finding the DUID can sometimes be cha...
-
- I'd have to get back to you on that -- e.g. putting a watch on the file contents. There have clearly been leases miss...
-
- Need some examples, what's shown in dhcpd6.leases that doesn't show on the status page?
-
- I've experienced this same issue, in my case it is not limited to mobile devices. I've had this happen with a Macbook...
-
- resolv.conf may not exist or be populated in the chroot of nanobsd upgrades on 2.3.x+. pkg uses that for fetching the...
-
- Thanks Daniel! Looks good, merged to all 3 branches.
-
- The bug has been traced down and fixed. Pull Request is up (ICLA already signed).
https://github.com/pfsense/pfsense... - 08:45 PM Revision ba2c8ed4: Set pipe_slot_limit to the maximum configured qlimit value. Move the set_sysctl out if the block where it only gets run if dummynet isn't already loaded. Ticket #6553
- 08:45 PM Revision fcd9f64c: Set pipe_slot_limit to the maximum configured qlimit value. Move the set_sysctl out if the block where it only gets run if dummynet isn't already loaded. Ticket #6553
- 08:44 PM Revision ef7c3a63: Set pipe_slot_limit to the maximum configured qlimit value. Move the set_sysctl out if the block where it only gets run if dummynet isn't already loaded. Ticket #6553
- 08:05 PM Revision 1b8aa9c8: Clean up limiter text. Remove old commented out bit.
- 08:05 PM Revision 3481524a: Clean up limiter text. Remove old commented out bit.
- 08:04 PM Revision cabb34e4: Clean up limiter text. Remove old commented out bit.
-
- We have started evaluating Duo Security, starting with the duo-unix PAM module package.
It would be extremely usef... -
- pfSense should include a package (and GUI) for driving IEEE 1588 PTPd. This is currently available as a FreeBSD packa...
-
- It should be possible to selectively re-enable Mode 7 packets. This allows PTPd to take time from NTPd on the node. T...
-
- fix pushed
-
- net.inet.ip.dummynet.pipe_slot_limit only exists after dummynet is kldloaded, which comes after the sysctls are appli...
-
-
- Pull request https://github.com/pfsense/pfsense/pull/3026 has a proposed fix and longer explanation.
-
- For example, add a host alias, in the IP Address or FQDN box of the 1st entry put:
1:2:3:xy:4:5:6:7:8
This is acc... - 12:52 PM Revision 426b7b0c: Fix matching of chars in IPv6 address segments
- The existing regex here is wrong, it matches 0 or more of the hex digits but then there can be other rubbish in the s...
- 12:51 PM Revision 3ba22abd: Fix matching of chars in IPv6 address segments
- The existing regex here is wrong, it matches 0 or more of the hex digits but then there can be other rubbish in the s...
- 12:51 PM Revision a495f6b3: Merge pull request #3026 from phil-davis/patch-2
- 12:49 PM Revision a88f0ee6: Remove a-f from IPv4 address pattern
- It seems to me that a through f should not be part of the pattern for the "V4" case.
(cherry picked from commit 1f49d... - 12:49 PM Revision e4c5b7d4: Remove a-f from IPv4 address pattern
- It seems to me that a through f should not be part of the pattern for the "V4" case.
(cherry picked from commit 1f49d... - 12:48 PM Revision d16eec1f: Merge pull request #3025 from phil-davis/patch-1
-
- Add a host alias, in the IP Address or FQDN box of the 1st entry put:
1:2:3:::4:5:6:8 or 1:2:3:4:5:6:::8 or simila... -
- As noted above, it is correct as-is.
-
- It is correct - there is ~10 MB/s of data (download) coming in WAN (from the internet) and then that ~10 MB/s is goin...
-
02:20 AM Bug #6550 (Not a Bug): Bandwidth LAN IN/OUT reversed
- See attached screen shot.
WAN IN 10.14 MB/s
LAN OUT 10.11 MB/s
LAN IN 292.99 KB/s
LAN IN should be 10.11 MB/s - 06:39 AM Revision 8a950b3c: Fix matching of chars in IPv6 address segments
- The existing regex here is wrong, it matches 0 or more of the hex digits but then there can be other rubbish in the s...
- 04:50 AM Revision 1f49dd8a: Remove a-f from IPv4 address pattern
- It seems to me that a through f should not be part of the pattern for the "V4" case.
06/27/2016
- 11:31 PM Revision 86573bb9: Update include() to include_once()
- For safety, use include_once() when including various "side" files.
There are a couple of instances of include("guico... -
-
-
-
-
-
-
-
-
- There is no /etc/fstab post-install on 2.4.
-
- I was already looking at those, taking
-
- Issue:
Interface advanced dhcp client configuration
https://forum.pfsense.org/index.php?topic=87570
Two Availabl... - 07:16 PM Revision 71d3c2f7: Always use require_once
- The usage of require() and require_once() throughout the system is
inconsistent, and "bugs" come up now and then when... - 07:16 PM Revision aceaf18c: Always use require_once
- The usage of require() and require_once() throughout the system is
inconsistent, and "bugs" come up now and then when... - 07:15 PM Revision 687a1879: Merge pull request #3022 from phil-davis/require_once
-
-
-
- Looking at the code from dpinger it seems that this is not something we really can count on.
https://github.com/de... -
- Manuelly applied the change to my system.inc file. Seems to work. The static routes using a dynamic IPv6 WAN Gateway ...
-
-
-
-
-
-
-
-
-
-
-
-
- Specific text is in https://tools.ietf.org/html/rfc5952#section-4.3
Kicking back to ISP (who may blame their IPAM ... -
- Good point re RFC -- I'll have to kick that back to them. It is a Standards Track RFC after all.
-
- RFC 5952, uppercase is forbidden. This is true in all the screens that accept IPv6 addresses or networks.
We ough... -
- I noticed that the address fields in the Virtual IPs edit screen reject upper-case hex digits in IPv6 addresses.
T... -
-
-
-
- we're working through them.
-
- subject isn't true, there is a separate ticket for the DNS lookup page not supporting IPv6.
-
01:53 PM pfSense Packages Feature #6537: Suricata does not autopopulate IP Reputation list from Emerging Threats on rules update
- Tried importing manually, this does not work the way one would expect. Please close.
-
- we ship what's included in the FreeBSD version used.
-
- The version of tcpdump/libpcap in 2.3.1-x is lagging; this makes debugging IPv6 turn-ups slightly more difficult.
... -
- The log browser in the package tab only shows the first few lines for each log target.
Right now, it's easier to u... -
- pfSense logging is based around the FreeBSD base system's syslogd logging daemon.
This can be tricky to integrate ... -
- As far as I can see, this is not currently possible with mpd. If you need this sort of functionality, you'll have to ...
-
06:57 AM Feature #6545 (Needs Patch): Show active sessions and manually disconnect option to PPPoE server
- Hello,
It will be great to have "Users Logged In" option to PPPoE server services as Captive portal.
It could h... -
- First two sentences above are reversed -- my bad.
TL;DR -- a Cisco will let you advertise 'M' *and only 'M'*, caus... -
- pfSense IPv6 RA support in 2.3.1-x correctly includes the 'M' (Managed) bit in its advertisements.
By contrast, Ci... -
- We use an HPE switch to implement MAC layer security. It is configured to snoop DHCP request & inject Option 82 (RFC ...
-
- I have noticed from time-to-time that some IPv6 devices have taken a DHCPv6 dynamic lease, and do not show up in the ...
-
- (We understand there's a fix in progress for this, at least for IPv4.)
The DHCPv6 lease status tab lacks an option... -
- (This may also be a shortcoming in PF itself).
Currently there is no way to specify an ICMPv6 type range in the GU... - 05:00 AM Revision c81ef6e2: Always use require_once
- The usage of require() and require_once() throughout the system is
inconsistent, and "bugs" come up now and then when...
06/26/2016
-
- oh.. maybe for the same reason is not possible to resolve ipv6 addresses in firewall log...
-
11:43 AM
Bug #6536 (Resolved): update + reboot, did not trigger the webgui 90 second countdown
-
- Oké thanks, confirmed fixed when i updated today to "built on Sun Jun 26 08:40:49 CDT 2016" it worked as expected.
- 11:31 AM Revision 264ca54e: simplify DHCP_Config_Option_Split, no loop needed for returning option array
06/25/2016
-
10:49 PM pfSense Packages Bug #6521: pfsense 2.3.1 squidguard -> Groups ACL -> Target Rules List missing...
- It works if I change
squidguard_before_form_acl($pkg); to squidguard_before_form_acl($pkg,false);
in
/usr/local/pk... -
- The snort rules update process auto-populates the ET IP reputation list into SNORT_IPREP_PATH on rules update. Suric...
-
05:58 PM
Bug #6536 (Feedback): update + reboot, did not trigger the webgui 90 second countdown
- Thanks. This was fixed earlier this week and should be good in any snapshot since then.
-
- update + reboot, did not trigger the webgui 90 second countdown
Coming from a snapshot about 5 days old i think now ... -
- Hi Chris,
i post in open thread, but in my setup the file you ask isn't present.
--
Mario (Marlenio) -
01:41 PM pfSense Packages Bug #6305: Quagga problems updating routes / mistakenly showing "kernel"-routes while they are not
- Okay ... I have to set-up already that if i upgrade the package back to the new one, the issue will happen. Jim ... ...
-
- github pullrequests, please pull or comment
There are quite a few pullrequests pending on github without any reaso... -
- Unbound returns AAAA records just perfectly fine as you can see from shell (using host, drill or whatever). That page...
-
- DNS resolver doesn't returns AAAA records.
From web gui: Diagnostics --> DNS Lookup
If FQDN has A and AAAA records ... - 06:34 AM Revision 57d6340b: bring back subnetv4_expand function used by pfblockerng
- 06:34 AM Revision 2208be8b: bring back subnetv4_expand function used by pfblockerng
- 04:02 AM Revision 51e30c40: Use the translated destination for kill_states if one exists. Ticket #6531
- 04:02 AM Revision 515f53a8: Use the translated destination for kill_states if one exists. Ticket #6531
- 04:01 AM Revision e6ddb55e: Use the translated destination for kill_states if one exists. Ticket #6531
- 03:23 AM Revision ebb1e0a5: Correct/clarify column header. Ticket #6530
- 03:23 AM Revision ea81ba1c: Correct/clarify column header. Ticket #6530
- 03:22 AM Revision 31f171e4: Correct/clarify column header. Ticket #6530
- 03:20 AM Revision d4f9997b: Fix style
- 03:20 AM Revision 51a3acee: Fix style
- 03:20 AM Revision 4e658db2: Fix style
- 03:19 AM Revision e565e949: pfSense_get_pf_states always returns source as src and dest as dst, this flipping based on direction is wrong. Ticket #6530
- 03:18 AM Revision ad5fb4a0: pfSense_get_pf_states always returns source as src and dest as dst, this flipping based on direction is wrong. Ticket #6530
- 03:18 AM Revision ab86e2d6: pfSense_get_pf_states always returns source as src and dest as dst, this flipping based on direction is wrong. Ticket #6530
- 02:59 AM Revision 84c7a8f3: Fix style
- 02:59 AM Revision e41468cf: Fix style
- 02:59 AM Revision 76933fc6: Fix style
-
- Sorry, but it shouldn't have been merged in the first place. There is discussion on the forum NOYB linked as to why. ...
-
- The RA page should allow configuration of Min and MaxRtrAdvInterval.
-
- works in Chrome, Firefox, Safari, Opera and IE.
-
- subject is definitely not true, please post to the forum for troubleshooting assistance.
-
12:10 AM Bug #6532 (Not a Bug): LAN rule with gateway left at default stops traffic.
- I have a LAN rule where a specific host goes over a VPN gateway.
The rule is super LAN simple - IPv4 *, source ho... -
-
- 12:06 AM Revision 44308ac0: Merge pull request #3013 from dennypage/master
06/24/2016
-
- works
-
- fixed
-
- Nice catch, Harry.
Looks like this should be easy to fix, Luiz please review. -
- I've got a case that hangs every type as noted above. And I have a patch.
/cf/hc_filterlog:
#!/bin/tcsh
3>&-... -
- fix pushed
-
- diag_dump_states.php kill states passes the srcip and destip to pfSense_kill_states in all cases. That doesn't match ...
-
- also fixed the column header description.
-
- diag_dump_states.php gets source and destination wrong on the kill states option for the 'in' direction.
-
-
If you wish to discuss it, options, and alternatives.
New DNS Resolver Overrides Page
https://forum.pfsense.o... -
-
02:32 PM Bug #6529 (Duplicate): dhcp6c fails to start with track6 on a bridge interface
- I noticed today that IPv6 wasn't working, and found this in the dhcpd log....
-
-
- Hi Chris,
> > I'm not sure what circumstance triggers this, but judging by the number of reports in that thread t... -
- It's a specific 2.4 change, only in master branch
This reverts commit 00a7688401c15015c3f43735b2b1536ebfec7e92. -
07:51 AM Bug #6177: pkg update checking with no Internet access kills web GUI
- edit.
-
- edit
-
- Chris Buechler wrote:
> IPv6 works just fine on pkg.pfsense.org. You're not hitting the issue here, please start a... - 06:36 AM Revision 412a9cd0: Include interface scope on IPv6 static routes to link local gateway IPs. Ticket #6506
- 06:35 AM Revision 8e8108e6: Include interface scope on IPv6 static routes to link local gateway IPs. Ticket #6506
- 06:35 AM Revision eea84f0a: Include interface scope on IPv6 static routes to link local gateway IPs. Ticket #6506
-
05:46 AM Bug #6528 (Resolved): The captive portal cannot be used on interface lan since it is part of a bridge but works anyway
- Hello,
I've setup a captive portal on my LAN interface.
Later, I've setup a OpenVPN tap connection where the tap1... - 02:22 AM Revision 72a6e5d0: Comment typo
- (cherry picked from commit b069f77e0a5e355e811dd7bd4a4d17a802a3f682)
- 02:22 AM Revision 0bcda37b: Comment typo
- (cherry picked from commit b069f77e0a5e355e811dd7bd4a4d17a802a3f682)
- 02:21 AM Revision b069f77e: Comment typo
-
- fix pushed to always include interface scope on static routes to a link local v6 gateway IP.
06/23/2016
-
10:38 PM pfSense Packages Bug #6527: Squid 3.5 - Deprecated "ssl_bump server-first all" don't allow SNI in transparent mode with HTTPS/SSL Interception
- Edited in order to add more information about ssl peek and splice
http://wiki.squid-cache.org/Features/SslPeekAndS... -
- As described in the squid wiki, "ssl_bump server-first all" is deprecated in squid 3.5+
http://wiki.squid-cache.or... - 10:22 PM Revision 5a42473b: Revert "adding privileges and separating DNS Resolver overrides from general settings"
- This reverts commit fc76a1e390c8ce9579df31457c74d1d0e572b78d.
- 10:22 PM Revision 8b056044: Revert "adding privileges and separating DNS Resolver overrides from general settings"
- This reverts commit fc76a1e390c8ce9579df31457c74d1d0e572b78d.
- 10:21 PM Revision bc54d32d: Revert "adding privileges and separating DNS Resolver overrides from general settings"
- This reverts commit fc76a1e390c8ce9579df31457c74d1d0e572b78d.
-
05:55 PM Feature #6210: create user privilege for only DNS Host and Domain Overrides in DNS Resolver
- Chris Buechler wrote:
> This isn't desirable. We don't want to add yet another new menu item, for a use case that I ... -
- This isn't desirable. We don't want to add yet another new menu item, for a use case that I think you're the only per...
-
- (cherry picked from commit 5c403f843291bdc670dcdb45e1e097f2eb7f36ab)
-
- (cherry picked from commit 5c403f843291bdc670dcdb45e1e097f2eb7f36ab)
- 05:34 PM Revision 4db9f6d0: Merge pull request #3019 from NOYB/RFC2136_Client_Edit_Priv_Def
- 05:33 PM Revision c0b34e4c: Load actual value of webguihostnamemenu
- This is a string from a list of valid values (empty, "hostonly", "fqdn"). So it is not correct to just gather a true/...
- 05:33 PM Revision 0f6e77fd: Load actual value of webguihostnamemenu
- This is a string from a list of valid values (empty, "hostonly", "fqdn"). So it is not correct to just gather a true/...
- 05:32 PM Revision 6d62e15a: Merge pull request #3017 from phil-davis/patch-2
- 05:31 PM Revision 9c025aa5: Restored countdown functionality and menu refresh on successful update/remove/install
- Added comments to clarify operation of the page
(cherry picked from commit 18295ff2f907f638afa9f7c665cc16e4262e6899) - 05:31 PM Revision dbf01363: Restored countdown functionality and menu refresh on successful update/remove/install
- Added comments to clarify operation of the page
(cherry picked from commit 18295ff2f907f638afa9f7c665cc16e4262e6899) - 05:30 PM Revision 18295ff2: Restored countdown functionality and menu refresh on successful update/remove/install
- Added comments to clarify operation of the page
-
- Nicola Bressan wrote:
> I've experienced a similar issue.
>
> can you have a look in it?
> or maybe fix IPv6 ans... -
- hello,
I've experienced a similar issue.
pfSense 2.3.1_5
IPv6 tunnel configured
pfSense in GUI was checking ... -
-
-
-
-
-
-
-
-
-
- Maybe this is somehow related to https://redmine.pfsense.org/issues/6515
When submitting a change in interfaces_assi... -
06:46 AM Bug #6400: assign_interfaces.php issues with large numbers of interfaces
- We have been doing some testing on one of our sites.
Under 2.2.4 no issue with 100 vlans, under 2.3.1-RELEASE-p5 a... -
06:51 AM Feature #6526 (Closed): pfSense Update information via SNMP
- For automatic update checking with monitoring systems like Icinga it would be great to have the update status of the ...
-
- We have been doing some testing on one of our sites.
Under 2.2.4 no issue with 100 vlans, under 2.3.1-RELEASE-p5 a... -
- Same here. After reconnect (PPPoE) there was no default route set.
-
-
- ok let's wait for this then!
-
- I have some code under review that allows custom GUI preference settings per user.
https://redmine.pfsense.org/issue... -
- yes that solves the problem, but I find very handy to have it fixed when I use it with a normal web browser at home a...
-
- Try changing System->General Setup, webConfigurator section, Top Navigation. Set it to "Scrolls with page". That shou...
-
- When accessing pfSense web interface from mobile device and selecting a menu with long list of items (like "Services"...
-
- Note: New pull request https://github.com/pfsense/pfsense/pull/3018 has the proposed solution all in 1 commit that is...
- 02:53 AM Revision 8bab524e: Feature #6388 custom GUI preference settings per user
- 01:50 AM Revision e93242eb: Load actual value of webguihostnamemenu
- This is a string from a list of valid values (empty, "hostonly", "fqdn"). So it is not correct to just gather a true/...
- 01:07 AM Revision 0ce30f4a: Clarify ports alias hint. Ticket #6523
- 01:07 AM Revision 9e45ab6d: Clarify ports alias hint. Ticket #6523
- 01:06 AM Revision 9a17d293: Clarify ports alias hint. Ticket #6523
06/22/2016
-
- confirmed, thanks
-
- No, with pushed to the system i mean: When the static route that you've added using the WebUI is getting added to the...
- 10:55 PM Revision 332a64d0: Allow passing comma in string quoted DHCP client options
-
-
-
- clarified hint
-
- It works as it always has, and as intended. Each box can only contain a single port or range.
I'll clarify the de... -
08:11 AM Bug #6523 (Resolved): Firewall/Aliases/Ports: Unclear description and/or result of desired format
- Current hint is: "Enter as many ports as desired. Port ranges can be expressed by separating with a colon."
Expect... -
- it's workable just fine. You can't have the same subnet on two diff interfaces of any firewall/router. You have some ...
-
06:12 PM Bug #6524 (Not a Bug): 192.168.100.0/24 subnet with Cable Modem WAN un-workable
- So here is the scenario i ran into today.
Customer Subnet is 192.168.100.1/24
Customer WAN IP is 174.77.55.XX6/28... -
- No problem, thanks for checking. Marking as resolved.
-
- Thx, todays snap is OK.
-
04:42 PM Bug #6495: No default route on PPPoE after reconnect or IP change in some cases
- Just to let you know, unfortunately this hasn't solved my issue, and the line is dead again.
-
- Hi Chris,
> I'm not sure what circumstance triggers this, but judging by the number of reports in that thread ther... -
- Yep, it's static in as much as it's supposed not to alter, and is the way that most "static IP" addresses are dished ...
-
- Michael Knowles wrote:
> p.s. - The ADSL i'm using in this instance has a "static IP" delivered from the ISP via DHC... -
- p.s. - The ADSL i'm using in this instance has a "static IP" delivered from the ISP via DHCP (or whatever mechanism i...
-
- Hi,
I'm the author of Bug #6423. This bug sounds remarkably similar to my symptoms.
I'm going to get the onsit... -
-
-
- 03:57 PM Revision bb44b41a: Fix Bug #6394 - Incorrect Output of Translation
- Apparently gettext() does not behave correctly when passed an empty string, this commit ensures gettext() is called o...
- 03:57 PM Revision 94b5eb1f: Fix Bug #6394 - Incorrect Output of Translation
- Apparently gettext() does not behave correctly when passed an empty string, this commit ensures gettext() is called o...
- 03:57 PM Revision 44de9a2d: Merge pull request #3011 from NewEraCracker/redmine-6394
-
- (cherry picked from commit 40d7e4bee91246db09cc88141869abcd37390bc7)
-
- (cherry picked from commit 40d7e4bee91246db09cc88141869abcd37390bc7)
- 03:54 PM Revision c0643ee4: Merge pull request #3010 from NOYB/Remove_Duplicate_ListTags_Entry
-
- Function isn't used in main or packages repo, and in any case would need a complete rewrite to handle IPv6.
(cherry p... -
- Function isn't used in main or packages repo, and in any case would need a complete rewrite to handle IPv6.
(cherry p... - 03:47 PM Revision 24f97159: Merge pull request #3006 from stilez/patch-33
- 03:45 PM Revision 8c512801: Fix #6482 OpenVPN Redirect Gateway Option Causes GUI Issue
- This fixes the GUI inconsistency reported in the referenced bug. On edit of an OpenVPN server that has tun mode, not ...
- 03:45 PM Revision 8cec6ee6: Fix #6482 OpenVPN Redirect Gateway Option Causes GUI Issue
- This fixes the GUI inconsistency reported in the referenced bug. On edit of an OpenVPN server that has tun mode, not ...
- 03:44 PM Revision 8a63f7f0: Merge pull request #3005 from phil-davis/patch-4
- 03:43 PM Revision 4a89ba61: added missing div.content wrapper when reloading filters
- (cherry picked from commit e8406abe627675db2c2f77a81c1bb883f5158bb6)
- 03:43 PM Revision 73578b77: added missing div.content wrapper when reloading filters
- (cherry picked from commit e8406abe627675db2c2f77a81c1bb883f5158bb6)
- 03:43 PM Revision 6f054658: Merge pull request #3004 from hailthemelody/master
- 03:41 PM Revision 2031be9c: Fix PHP Warning about invalid argument supplied for foreach
- If _POST['members'] or _POST['groups'] is not set / none selected at GUI, it would give a warning on crash reporter (...
- 03:41 PM Revision 0e5ebefd: Fix PHP Warning about invalid argument supplied for foreach
- If _POST['members'] or _POST['groups'] is not set / none selected at GUI, it would give a warning on crash reporter (...
- 03:40 PM Revision 1705d6ed: Merge pull request #3002 from NewEraCracker/patch-invalid-foreach
- 03:39 PM Revision 50264b58: Fix bad escapeshellarg logic on mpd execution
- With this change single-quotes are applied in correct places
(cherry picked from commit 08cd022545be58a46b860500ff81... - 03:39 PM Revision 631c29af: Fix bad escapeshellarg logic on mpd execution
- With this change single-quotes are applied in correct places
(cherry picked from commit 08cd022545be58a46b860500ff81... - 03:38 PM Revision 6c94ebc3: Merge pull request #3001 from NewEraCracker/patch-pppoe-mpd
- 03:32 PM Revision 4125445f: Do not allow deleting your own user name
- Currently if you delete your own user name, then the config ends up with a blank user tag in it. Rather than fix that...
- 03:31 PM Revision 01a0385e: Do not allow deleting your own user name
- Currently if you delete your own user name, then the config ends up with a blank user tag in it. Rather than fix that...
- 03:31 PM Revision 5522c61f: Merge pull request #2989 from phil-davis/patch-2
-
- (cherry picked from commit 70381d4803b9424c1a3f3ef518d8243062452d77)
-
- (cherry picked from commit cf63f1638aab685cc956502f5ddd862a10bf3ff8)
-
- to match edit to util.inc
(cherry picked from commit c57e936a6596550619f7261e85b633ca5016cbf2) -
- 1) Function can be simplified and all "if" statements removed, using intdiv (or casting result as int for PHP < 7) an...
-
- (cherry picked from commit 70381d4803b9424c1a3f3ef518d8243062452d77)
-
- (cherry picked from commit cf63f1638aab685cc956502f5ddd862a10bf3ff8)
-
- to match edit to util.inc
(cherry picked from commit c57e936a6596550619f7261e85b633ca5016cbf2) -
- 1) Function can be simplified and all "if" statements removed, using intdiv (or casting result as int for PHP < 7) an...
- 03:22 PM Revision 2ed50d13: Merge pull request #2988 from stilez/patch-28
-
- Useful function in some circumstances - seems no reason not to have it.
Uses IP rather than hostname since not all A... -
- Useful function in some circumstances - seems no reason not to have it.
Uses IP rather than hostname since not all A... - 03:17 PM Revision dbef2183: Merge pull request #2987 from stilez/patch-27
- 03:15 PM Revision d1626706: Fix NTP PPS. It had 'None' option available on 2.2.x.
- (cherry picked from commit ceabd66d57f7199602d3a23cb8a60080bcfa67ea)
- 03:14 PM Revision 2a68fcd3: Fix "Unable to remove NTP GPS from configuration"
- https://forum.pfsense.org/index.php?topic=112771.msg627573
(cherry picked from commit 55de528cbb177b4a1f40554ad1a5671... - 03:14 PM Revision 74d0b334: Fix NTP PPS. It had 'None' option available on 2.2.x.
- (cherry picked from commit ceabd66d57f7199602d3a23cb8a60080bcfa67ea)
- 03:14 PM Revision 8d179341: Fix "Unable to remove NTP GPS from configuration"
- https://forum.pfsense.org/index.php?topic=112771.msg627573
(cherry picked from commit 55de528cbb177b4a1f40554ad1a5671... - 03:14 PM Revision e786d286: Merge pull request #2986 from NewEraCracker/patch-ntp-gps
-
- (cherry picked from commit f208e9690e2ec4089cf3d3fe5f5f03fed5a36e6f)
-
- (cherry picked from commit 01b5410ae8391998ba560d40f447c7f556472c5b)
-
- backups should be a numeric int.
text hint for number of backups can now refer to the global value for this platform ... -
- At the same time the platform is being detected for PHP/GUI purposes, set the default number of backups. Also handle ...
-
- (cherry picked from commit ca55edc39342865816feef390616be8b770c889b)
-
- (cherry picked from commit f208e9690e2ec4089cf3d3fe5f5f03fed5a36e6f)
-
- (cherry picked from commit 01b5410ae8391998ba560d40f447c7f556472c5b)
-
- backups should be a numeric int.
text hint for number of backups can now refer to the global value for this platform ... -
- At the same time the platform is being detected for PHP/GUI purposes, set the default number of backups. Also handle ...
-
- (cherry picked from commit ca55edc39342865816feef390616be8b770c889b)
- 03:11 PM Revision 4c93645c: Merge pull request #2982 from stilez/patch-26
-
- (cherry picked from commit b56769c30a23af9f575ee4a5f056558ef8322f95)
-
- Large keys are not "slower to use" in many cases, since they are only used to validate or set up a session. An ongoin...
-
- (cherry picked from commit 7c684f3b95f641134496bc1210cfb2d814468767)
-
- ...and add some useful info to guide the user.
(cherry picked from commit 49810252681df9bd553e2221c885ceffaa2c4c7f) -
- Add key lengths to the OpenVPN options, for asymmetric keys of size 3072 (for current use), 7680, 15360 (for long ter...
-
- (cherry picked from commit b56769c30a23af9f575ee4a5f056558ef8322f95)
-
- Large keys are not "slower to use" in many cases, since they are only used to validate or set up a session. An ongoin...
-
- (cherry picked from commit 7c684f3b95f641134496bc1210cfb2d814468767)
-
- ...and add some useful info to guide the user.
(cherry picked from commit 49810252681df9bd553e2221c885ceffaa2c4c7f) -
- Add key lengths to the OpenVPN options, for asymmetric keys of size 3072 (for current use), 7680, 15360 (for long ter...
- 03:05 PM Revision e98865a8: Merge pull request #2942 from stilez/patch-22
-
03:03 PM Revision ef609a57: Added option to System > General Setup > webConfigurator to change the title of the Help menu in the navbar to either the system hostname or fqdn.
- (cherry picked from commit 1d12996755ee6fb9b9e163d292bdba160a926e64)
-
- (cherry picked from commit 1d12996755ee6fb9b9e163d292bdba160a926e64)
- 03:02 PM Revision 612e27ac: Merge pull request #2935 from cfazendin/hostname_menu
-
02:55 PM Revision b8eb4e7f: Make QinQ interfaces work again
- (cherry picked from commit 1322ee22354f1a6e184819fb7009a2996b63de97)
-
- (cherry picked from commit 1322ee22354f1a6e184819fb7009a2996b63de97)
- 02:55 PM Revision 253919a5: Merge pull request #2906 from Chrisc-c-c/Fix-QinQ-Interfaces
- 02:50 PM Revision ab8c4106: Allow IGMP Proxy logging verbosity to be selected via system log settings (PR 2901)
- (cherry picked from commit 2bd0585e30e5ec8fc3b79ca3f579bf9a7c1bcbc8)
- 02:50 PM Revision 61d6a840: Allow IGMP Proxy logging verbosity to be selected via system log settings (PR 2901)
- (cherry picked from commit 2bd0585e30e5ec8fc3b79ca3f579bf9a7c1bcbc8)
- 02:49 PM Revision 2bd0585e: Allow IGMP Proxy logging verbosity to be selected via system log settings (PR 2901)
-
02:18 PM Revision 1ac8faed: adding privileges and separating DNS Resolver overrides from general settings
- (cherry picked from commit fc76a1e390c8ce9579df31457c74d1d0e572b78d)
-
- (cherry picked from commit fc76a1e390c8ce9579df31457c74d1d0e572b78d)
- 02:18 PM Revision dbab5a7e: Merge pull request #2891 from gottaloveit/dns-overrides-privs
-
02:14 PM Bug #6099: igmpproxy does not recognize upstream interface
- As said my provider is using IGMPv3 which I cannot get to work (so I will stay on 2.2.6 for the time being).
I've ... -
- Greg Myran wrote:
> I want to thank you again for your efforts.
You're welcome,
> I've moved my multicast traffic... - 02:07 PM Revision fe2b8de7: Force 4096 RSA keys
- Add option `-b 4096` to force the keys to 4096-bit.
This parameter is ignored for Ed25519 keys.
(cherry picked from... - 02:07 PM Revision 1ffd4c51: Harden sshd_config
- The changes are better explained in the following article:
https://stribika.github.io/2015/01/04/secure-secure-shell... - 02:06 PM Revision 088ffabc: Force 4096 RSA keys
- Add option `-b 4096` to force the keys to 4096-bit.
This parameter is ignored for Ed25519 keys.
(cherry picked from... - 02:06 PM Revision a9274a80: Harden sshd_config
- The changes are better explained in the following article:
https://stribika.github.io/2015/01/04/secure-secure-shell... - 02:05 PM Revision 90913bc7: Merge pull request #2783 from jlduran/harden-sshd_config
- 12:47 PM Revision 384ffced: Fixed #6504 by making table sortable
- (cherry picked from commit 55f67b5abd9b809807e328477779d97120908273)
- 12:47 PM Revision 4a4a4c41: Fixed #6504 by making table sortable
- (cherry picked from commit 55f67b5abd9b809807e328477779d97120908273)
- 12:45 PM Revision 55f67b5a: Fixed #6504 by making table sortable
- 11:45 AM Revision 76f6498f: jQuery datepicker added to interfaces.php and interfaces_ppps_edit.php for setting custom expirey date
- (cherry picked from commit d85d82b7686d5899948e6ec4b1587e74937820cf)
- 11:45 AM Revision df38ab93: jQuery datepicker added to interfaces.php and interfaces_ppps_edit.php for setting custom expirey date
- (cherry picked from commit d85d82b7686d5899948e6ec4b1587e74937820cf)
- 11:43 AM Revision d85d82b7: jQuery datepicker added to interfaces.php and interfaces_ppps_edit.php for setting custom expirey date
- 11:27 AM Revision 246be5d3: Fixed #6516 by replacing HTML5 datepicker with jQuery widget
- (cherry picked from commit 53c38ff16c1eb8743e69d506f69167c88cf34910)
- 11:27 AM Revision f11862a3: Fixed #6516 by replacing HTML5 datepicker with jQuery widget
- (cherry picked from commit 53c38ff16c1eb8743e69d506f69167c88cf34910)
- 11:26 AM Revision 53c38ff1: Fixed #6516 by replacing HTML5 datepicker with jQuery widget
-
08:23 AM Bug #6520: Time out when trying to look at interfaces_assign.php
- Here are the logs :
Jun 22 15:21:51 fw2.ds nginx: 2016/06/22 15:21:51 [error] 21284#0: *121 upstream timed out (60: ... -
- Hello,
Since the update in 2.3, I get a time out when trying to reach interfaces_assign.php. Then the whole web inte... -
07:50 AM
Feature #6504: services_dhcp.php: DHCP Static Mappings table should be sortable
- Applied in changeset commit:55f67b5abd9b809807e328477779d97120908273.
-
07:41 AM
Feature #6504 (Feedback): services_dhcp.php: DHCP Static Mappings table should be sortable
- Table is now sortable as requested
-
07:39 AM
Feature #6504 (Assigned): services_dhcp.php: DHCP Static Mappings table should be sortable
-
- With plain PSK auth you enter the Identifiers and keys on the PSK tab and/or in the PSK field on accounts in the user...
-
06:52 AM Bug #6522 (Not a Bug): Mobile IPSec with PSK does not supply option to provide PSK
- When I create the IPsec for the mobile clients, I choose PSK as Phase1 security. However, I cannot select any predefi...
-
- Hi Jim,
You made the right considerations. I'll continue to use the manual option.
Thanks in advance,
--
Mario -
- No, it is not. The option cannot be changed while the disk is mounted. Also, hardware support for TRIM is not univers...
-
- Hi,
It would be possible to add an option to enable TRIM SSD in the GUI instead of via command line? -
06:30 AM
Bug #6516: Calendar date picker on system_usermanager.php only works in Chrome
- Applied in changeset commit:53c38ff16c1eb8743e69d506f69167c88cf34910.
-
06:28 AM
Bug #6516 (Feedback): Calendar date picker on system_usermanager.php only works in Chrome
- HTML5 datepicker replaced with jQuery widget. It seems that Chrome and Opera are the only browsers that implement the...
-
06:23 AM Feature #2358: NAT64 support
- UPVOTE
-
- The clickable "Target Rules List" field in menu "Groups ACL" disappears if more than 3 "Target categories" are define...
-
02:58 AM Bug #6518 (Closed): IPsec phase 1 VPN not working with IPv6+DNS with "My IP Address" as identifier
- Hi,
I'm running pfSense : ... -
02:37 AM Revision 9e680116: fix rowhelper select_source empty combo
- while using $config['installedpackage']{['...'] as source
-
- while using $config['installedpackage']{['...'] as source
- 02:37 AM Revision bc8b18a9: Merge pull request #3015 from marcelloc/patch-4
- 01:25 AM Revision cb74937f: add htop to poudriere_bulk
- 01:25 AM Revision e388275c: add htop to poudriere_bulk
- 01:25 AM Revision e9ac4800: add htop to poudriere_bulk
- 12:40 AM Revision ac3e3baa: Only call interfaces_vips_configure once if it's needed, rather than doing the same thing over and over for every VIP on an interface. Ticket #6515
- 12:40 AM Revision 6fd9645e: Only call interfaces_vips_configure once if it's needed, rather than doing the same thing over and over for every VIP on an interface. Ticket #6515
- 12:40 AM Revision d75c55fb: Only call interfaces_vips_configure once if it's needed, rather than doing the same thing over and over for every VIP on an interface. Ticket #6515
-
- Dmitriy K wrote:
> This fix wont be pushed in current stable?
Needed to be confirmed in 2.3.2 snapshots first.
... -
- Waldo Nell wrote:
>
> string(10) "10.200.1.1"
> int(16)
that's correct, and exactly what it's checking for the... -
- a firewall isn't a NAS, trying to be one isn't of interest.
06/21/2016
-
- Daniel Hoffend wrote:
> when a static route gets pushed to the system
What do you mean by "pushed to", that via ... -
- It's probably similar to this: https://forum.pfsense.org/index.php?topic=112358.0.
It could be replaced with the ... -
- The calendar date picker on system_usermanager.php doesn't show up in any browser other than Chrome from the looks of...
-
-
- Tomas Ulicky wrote:
>
> Why deleted target version?
Duplicate closed tickets need that removed so it doesn't me... -
- works
-
- Applied in changeset commit:a08208f81bcb2812bdda07e21b501447fb350408.
-
- In some cases, a process can crash and the resulting core file fills /var/run/ if that was the working directory for ...
-
- works
-
05:00 PM
Bug #6514 (Feedback): services_captiveportal_zones_edit.php: Zone name cannot start with a number
- Applied in changeset commit:f0a053846d6cde2724c47b5553e1395cfd21445c.
-
- The zone name on services_captiveportal_zones_edit.php is used as an XML tag name and needs to follow the relevant st...
-
-
-
- It's likely not one NIC driver that's in question, as there definitely aren't any issues with e1000, and probably not...
-
04:30 PM Bug #6512: Upgrade to 2.3.1 causes network performance degradation (with High CPU usage by NIC kernel tasks)
- And perhaps this post has the same problem
https://forum.pfsense.org/index.php?topic=113529.0
-
- Obviously there's a performance regression. It may have to do with our hardware, but:
# This wasnt present on previ... -
- that's something to do with your combination of hardware, which isn't anything we support. There aren't any general p...
-
- Hi,
Currently we have a 2-node pfsense system working in active/passive HA. This cluster was running pfsense v2.2.... -
- strongswan doesn't pick up the new leftsubnet config (though it's correctly shown in statusall) when doing a reload. ...
-
10:06 PM Bug #6517 (Confirmed): Adding mobile IPsec phase 2 entries requires restart of strongswan
- Using mobile IPsec on 2.3.1-RELEASE-p1 and using OS X 10.11.4 on the client side, I find that when I add additional P...
-
-
- 10:23 PM Revision fb0ecb7a: Fix style
- 10:23 PM Revision 55a72d31: Fix style
- 10:23 PM Revision 616161d5: Fix style
- 10:11 PM Revision e08b45e4: require_once auth.inc in vpn.inc since it uses functions from there, though normal use of the system won't require that, those who run certain things manually/custom may require it
- 10:11 PM Revision e4f7da85: require_once auth.inc in vpn.inc since it uses functions from there, though normal use of the system won't require that, those who run certain things manually/custom may require it
- 10:10 PM Revision 87a898b1: require_once auth.inc in vpn.inc since it uses functions from there, though normal use of the system won't require that, those who run certain things manually/custom may require it
-
- works
-
01:40 PM
Bug #6498: firewall_nat_npt_edit.php: IPv4 addresses can be entered, but the page is only for IPv6
- Applied in changeset commit:3e4adb7139b4cddbb06a2aba7e0727d1762b35ee.
-
01:28 PM
Bug #6498 (Feedback): firewall_nat_npt_edit.php: IPv4 addresses can be entered, but the page is only for IPv6
- A new optional argument is supported for inputs of type IpAddress. $type can be "BOTH", "V4" or "V6" and will enforce...
-
10:24 AM
Bug #6498 (Assigned): firewall_nat_npt_edit.php: IPv4 addresses can be entered, but the page is only for IPv6
- 09:56 PM Revision c513ef24: Fixed #6514 by requiring string starts with letter ot underscore
- (cherry picked from commit f0a053846d6cde2724c47b5553e1395cfd21445c)
- 09:55 PM Revision 421431bc: Fixed #6514 by requiring string starts with letter ot underscore
- (cherry picked from commit f0a053846d6cde2724c47b5553e1395cfd21445c)
- 09:55 PM Revision f0a05384: Fixed #6514 by requiring string starts with letter ot underscore
-
- I'm not sure what circumstance triggers this, but judging by the number of reports in that thread there is something....
-
- while using $config['installedpackage']{['...'] as source
- 08:25 PM Revision 7253e407: Only omit aggressive line from ipsec.conf where IKEv2. Ticket #6513
- 08:25 PM Revision 201b24e7: Only omit aggressive line from ipsec.conf where IKEv2. Ticket #6513
- 08:24 PM Revision 03de0c24: Only omit aggressive line from ipsec.conf where IKEv2. Ticket #6513
-
- fix pushed. Confirmed that still does all the necessary actions, and eliminates the delays by not doing the same thin...
-
- link_interface_to_vips when called with the update parameter calls interfaces_vips_configure once per VIP on the inte...
- 06:49 PM Revision 0891d12f: Fixed #6498 by providing new address type argument to Form_IpAddress(). In this case it is specified as "V6".
- (cherry picked from commit 3e4adb7139b4cddbb06a2aba7e0727d1762b35ee)
- 06:47 PM Revision 2c4af48f: Fixed #6498 by providing new address type argument to Form_IpAddress(). In this case it is specified as "V6".
- (cherry picked from commit 3e4adb7139b4cddbb06a2aba7e0727d1762b35ee)
-
- (cherry picked from commit 5051739d72d31f8bd250148dfa65213723275310)
- 06:40 PM Revision 00a76884: Incorporated ssl changes
- 06:29 PM Revision 3e4adb71: Fixed #6498 by providing new address type argument to Form_IpAddress(). In this case it is specified as "V6".
-
- It's not just that - the clone/duplicate/whatnot button is borked in general. E.g., when you "duplicate" an ACL, the ...
-
- 1. The blank entries shouldn't be created.
2. The blank entries should be ignored on the backend.
See: RPL-94792 -
-
- Thanks for taking the time to make a detailed report!
It looks like I was able to fix both issues and just pushed ... -
- Hi!
On latest snaps monitoring is not displaying graphs correctly when both axes are selected.
See attached scree... -
- fix pushed
-
- IKE mode auto omits aggressive from ipsec.conf, leaving it always disabled
-
-
-
-
-
-
-
03:32 AM pfSense Packages Feature #6508 (Closed): OSPF v3 - Quagga OSPF6d
- Hi,
Can you implement, in a future release, the OSPFv3 for IPv6?
In advance tank you -
01:42 AM Bug #6496: Squid HTTPS Certificed enable Unable to determine IP address from host name http
- Chris Buechler wrote:
> pretty sure that's a config issue, not a bug.
So what is the solution of this
I think it... -
01:29 AM Bug #3022: OpenVPN does not failover to the 2nd configured LDAP auth.server
- Facing the same issue.
Currently we have 2 entries for 'Backend for authentication' selected (Active Directory domai...
Also available in: Atom