Activity
From 07/26/2016 to 08/24/2016
08/24/2016
-
07:45 PM Feature #3377: OAuth2 authentication in captive portal
- Kristian Junkov wrote:
> Thomas NOEL wrote:
> > In Captive Portal we have native, ldap and radius authentication. T... -
05:27 PM Feature #3377: OAuth2 authentication in captive portal
- Thomas NOEL wrote:
> In Captive Portal we have native, ldap and radius authentication. Today, a lot of authenticatio... -
04:07 PM Feature #6374: Provide sample server-side logic to report peer's IP address for use with DDNS
- ...
-
- This is a quick and dirty way for us to add checkip services to nginx on our production web boxes:
location = /ip {... -
01:19 PM pfSense Packages Bug #6740: https filtering with squid + squidguard error (ssl bump)
- C Wood wrote:
> Jim Pingle wrote:
> > It is for both but there is no specific bug on this ticket yet, only symptoms... -
- Jim Pingle wrote:
> It is for both but there is no specific bug on this ticket yet, only symptoms.
I guess your d... -
01:08 PM pfSense Packages Bug #6740: https filtering with squid + squidguard error (ssl bump)
- It is for both but there is no specific bug on this ticket yet, only symptoms.
-
- Jim Pingle wrote:
> This needs to stay on the forum until a specific bug can be identified. We don't encourage or su... -
- This needs to stay on the forum until a specific bug can be identified. We don't encourage or support the use of HTTP...
-
- C Wood wrote:
> When configuring the https filtering some (possibly all) https sites error out. (Man in the middle ... -
- When configuring the https filtering some (possibly all) https sites error out. (Man in the middle certificate autho...
08/23/2016
-
- Cleber Ronaldo wrote:
> Thomas NOEL wrote:
> > In Captive Portal we have native, ldap and radius authentication. To...
08/22/2016
-
08:22 PM Bug #6691: dhcp6c quits after only two tries if no response was received
- See this thread for a work-around for your issue:
https://forum.pfsense.org/index.php?topic=116866.0
-
- Applied in changeset commit:946a87ece8089045a1e0153479e7c490bfcbdb68.
-
- Specifically it needs to make use of "comp-noadapt" to forcefully disable adaptive compression at least in the "No Pr...
-
02:16 PM Bug #6739 (Resolved): OpenVPN compression settings in the GUI are no longer translated into the correct running options.
- The OpenVPN compression settings available in the GUI: "No preference", "Disabled", "Enabled with adaptive compressio...
-
- I pushed a fix for this, it will show up shortly.
-
- Applied in changeset pfsense:commit:9fcda3dbd20efb83be69f9b05cc0d2a719fa25bc.
-
- Looks like it is a problem but not one most would hit since it's rare to have both enabled.
source:src/etc/inc/unb... -
- Applied in changeset pfsense:commit:d18559445d34b928d946e9212ab276e1da5cdb39.
-
- Applied in changeset pfsense:commit:f5da84f3018e4b1792b6676bf1c6127dd0e9e5ce.
-
- Confirmed working from myself and others.
-
12:49 PM Feature #6738 (New): GUI Action Buttons replicated to the top of the List
- With the latest GUI the Active Buttons (Add, Delete, Save, etc) only exist on the bottom of the screen. Our Alias li...
-
- Applied in changeset commit:d2466ce6f5f45300ebeccea93ef4b7c35f8e1f02.
-
- There is a potential XSS in diag_dns.php from a lack of encoding on the DNS replies.
If a query is entered for @xs... -
- Looks good now
-
10:30 AM
Bug #6732: interfaces_ppps_edit.php: L2TP and PPTP WAN-type interface editing has broken input validation
- Applied in changeset commit:e73770057872aa1f78dfff885f89916e446e2e4c.
-
10:26 AM
Bug #6732 (Feedback): interfaces_ppps_edit.php: L2TP and PPTP WAN-type interface editing has broken input validation
- Element names and validation code fixed to resolve issue.
localip, submnt, gateway, mtu, mru & mrru tested -
11:10 AM
Bug #6711: diag_states_summary # States and # States twice (explain one is per protocol)
- Applied in changeset commit:ca3dc6c9ac6b6045430779f407a31ed620f5a32d.
-
11:04 AM
Bug #6711 (Feedback): diag_states_summary # States and # States twice (explain one is per protocol)
-
10:28 AM
Feature #6723 (Resolved): Make OpenVPN widget update dynamically
-
09:47 AM pfSense Packages Bug #6736 (Closed): Snort fails to start after upgrade to 2.3.2-RELEASE
- After upgrading to 2.3.2-Release from 2.3.1-5 snort fails to start with a FATAL error: Aug 22 11:20:01 pfSense snort[...
08/21/2016
-
11:45 PM pfSense Packages Bug #6735 (Resolved): Cron Service saves entry on Cancel
- In Services/Cron:
If you click on "Edit" and enter in the settings for a new Cron entry, but terminate it with the... -
- this needs more detail.
-
- looks like minor cleanup.
-
-
- wrong assignee
-
- assigned to PIngle for eval, but looks like "not a bug" to me.
-
-
- we do, actually. please break this up into separate issues.
-
- traceroute6 hop limit on FreeBSD is 30 (default), see traceroute6(8).
-
12:25 PM
pfSense Packages
Bug #6734: ntopng does not start on up-to-date pfsense install (port 3000 is already in use)
- For reference:
https://forum.pfsense.org/index.php?topic=117170.msg649101#msg649101 -
12:23 PM
pfSense Packages
Bug #6734: ntopng does not start on up-to-date pfsense install (port 3000 is already in use)
- OK I opened a thread on the forums. I may also have found the issue. It could be that ntop (the old package) is run...
08/20/2016
-
- If it says that, then it's either already running or something else is using the port. Please post on the forum until...
-
12:09 PM
pfSense Packages
Bug #6734 (Not a Bug): ntopng does not start on up-to-date pfsense install (port 3000 is already in use)
- ntopng does not start on up to date pfsense install. ntopng is installed & configured but trying to access it the pa...
08/19/2016
-
- Please start a forum thread for discussion and diagnosis first. There are a number of possible causes here, some alre...
-
10:56 AM Bug #6733 (Rejected): Web Config Unreachable after 20 days of uptime
- Yesterday web config was working, Today all i get is 502 bad gateway.
Restarted web configurator from console, no ... -
- On interfaces_ppps_edit.php when an L2TP or PPTP interface is created or edited, it cannot be saved.
Both types ha... -
- The rules are correct, but if changing that fixed it for you, that implies the individual L2TP interfaces are not bei...
-
09:29 AM Bug #4031 (Confirmed): Notifications mail bomb in some gateway failure circumstances
- Not too fast, it was my mistake. I'll work on a proper fix
-
09:20 AM Bug #4031: Notifications mail bomb in some gateway failure circumstances
- Thank you Renato! How can we test this? Is there a commit hash you can reference?
-
-
- It was implemented a check that prevents mail notification system to send the same message multiple times. It should ...
-
- Applied in changeset commit:a2a3ca3852f5ab229aad1ab701bbcebef6e874a7.
-
- Looks like this is due to /usr/local/etc/dnsmasq.conf being present. We don't use that or create it, but it is there ...
-
06:12 AM Bug #6730 (Resolved): dnsmasq - Ignoring query from non-local network
- Hi,
Last week i updated to 2.3.2-RELEASE (amd64) built on Wed Jul 20 10:29:55 CDT 2016 FreeBSD 10.3-RELEASE-p5
... -
- Fixed
-
- Backported changes from FreeBSD ports that deprecated extensions.ini, which should be enough to fix it
-
07:31 AM Bug #6223: IPsec + OpenBGPD fails with "PF_KEY socket: No buffer space available"
- Looks like there may be some progress here:
https://forum.pfsense.org/index.php?topic=109908.45
-
- Unless something is getting lost in the translation from Google, there is no bug here. Some passwords are stored in p...
-
06:30 AM Bug #6731 (Not a Bug): Senha sendo exibida em texto plano
- Nas versões acima 2.3.1, ao criar um servidor de autenticação em: SystemUser ManagerAuthentication Servers
Se fo...
08/18/2016
-
11:01 PM Bug #6729 (Not a Bug): L2TP+IPSEC 2.3.2-RELEASE
- I was stuck for two days making this work. Connection was successful but something wrong was with Filtering. Finally!...
-
09:12 PM Feature #6728: Route53 API mod and Geolocation
- *** Amending previous post to remove item number 3, reducing FR to one correction and one enhancement. API will only ...
-
- This is a request to modify/simplify the POST Route53 API for Dynamic DNS. One correction and two enhancements are re...
-
04:51 PM Bug #6657: Unable to add network in the source section of a LAN firewall rule
- See the "best answer" here: https://productforums.google.com/forum/#!msg/chrome/MBEvipQlgyg/yeM-2XDkEi8J reproduced ...
-
- Applied in changeset commit:fb1234ab7d654f301eafdd4f116038937bc36cf4.
-
- When converting code to XML_RPC2 I implemented a usrename parameter on every xmlrpc method. It's just missing privile...
-
02:10 PM Todo #6727 (New): Missing file apple-touch-icon-precomposed.png ?
- I notice this occasionally in my log files after logging in via the web browser :-
Aug 18 19:50:38 pfsense.localdo... -
- Jim,
Did you (or anyone) every submit a commit to correct this? I know it becomes problematic when the TTL changes... -
08:18 AM
Feature #6723 (Feedback): Make OpenVPN widget update dynamically
-
- No bug there.
You don't use quotes with a route statement. You might be thinking of a push route but then the "rou... -
03:29 AM Bug #6726 (Not a Bug): OpenVPN: Route statement Custom options broken
- Please see here:
https://forum.pfsense.org/index.php?topic=116959.0
-
04:29 AM Bug #6720: DHCPD Options in "Sub-"Pools ignored, dhcpd.conf does not contain informations, dhcpd therefore not serving
- I've just tested PR3112 including the 2nd commit & PR3110.
The result is now perfect, functionallity is there & the ...
08/17/2016
-
09:13 PM Bug #6725: DHCP Server > TFTP server name and custom dhcp options in GUI and in dhcpd.conf but missing on the wire
- I confirm this is similar in 2.2.6 as well.
I added a made-up dhcp option on the LAN interface, and applied the ch... -
08:55 PM Bug #6725 (Rejected): DHCP Server > TFTP server name and custom dhcp options in GUI and in dhcpd.conf but missing on the wire
- If configuring a TFTP server in the DHCP server settings (in my case for IP phones) the GUI accepts and applies the c...
-
07:35 PM Bug #6724: VLAN interface displayed wrong through interface assignment
- That's a dumb bug in the way the str_replace() calls are stripping out all the "igb1" when "igb1" gets selected for a...
-
06:02 PM Bug #6724 (Resolved): VLAN interface displayed wrong through interface assignment
- On a fresh install of 2.3.2-RELEASE (amd64-full-install), there appears to be a bug at the VLAN assignments prompt. W...
-
- Yes, that would be nice. I also agree that it has never updated automatically, I have always had to refresh the dashb...
-
04:03 PM
Feature #6723 (Resolved): Make OpenVPN widget update dynamically
- https://forum.pfsense.org/index.php?topic=116955.0
-
- 1) "domain-name-servers are listed twice" - yeh, I noticed that also. Should be fixed by pull request https://github....
-
- Dear Phillip Davis,
many thanks for your fast reaction and fix!
I've tested several combinations and can so far c... -
- Applied in changeset commit:13ac08b8c500cd05f2a351d0d0d37f0d00514a55.
-
- New version is up, installed, confirmed working on a separate unit.
-
- I was able to reproduce the problem with "+" and confirmed that switching from escape() to encodeURIComponent() fixed...
-
08:41 AM Bug #6691: dhcp6c quits after only two tries if no response was received
- Had the same issue this morning. Log attached.
-
- Please create a forum thread for discussion and diagnosis until a specific bug can be identified. I can't reproduce a...
-
03:00 AM Feature #1831: Captive portal IPv6 support
- Hi,
I think this is an important issue, I would like to see it as early as possible in pfsense, as IPV6 is an impo... -
12:59 AM pfSense Packages Bug #6690: SURICATA IPS Issue - Kills VLANS & Traffic Shaper
- Sandeep K V wrote:
> Hi Steven Kreitzer and Jim Thompson isn't this the expected way the IPS has to work?
No, and... -
12:52 AM pfSense Packages Bug #6690: SURICATA IPS Issue - Kills VLANS & Traffic Shaper
- Hi Steven Kreitzer and Jim Thompson isn't this the expected way the IPS has to work?
08/16/2016
-
10:50 PM Bug #6722: ntp sync
- Aug 17 09:46:11 ntpd 30668 ntpd 4.2.8p8@1.3265-o Tue Jul 19 16:25:02 UTC 2016 (1): Starting
Aug 17 09:46:11 ntpd 306... -
- im newu ser of pfsense im having problem with ntp unable to snyc after update pfsense 2.2.6 to 2.3.2
thats my sys... -
01:18 PM pfSense Packages Bug #6721: Incorrect OpenBGPd package scripts prevent use of both IPv4 and IPv6
- Steps to reproduce:
1. Install the latest OpenBGPd package;
2. Enter the needed settings, adding both IPv4 and IP... -
- Please read the title as: Incorrect OpenBGPd package scripts prevent use of both IPv4 and IPv6 - at the same time.
-
- Symtoms of this bug can be seen in the post below:
[[https://forum.pfsense.org/index.php?topic=116900.0]]
To co... -
11:39 AM Bug #6719: OpenVPN DNS Leak Windows 10
- I use mullvad vpn on one of my PCs which is running windows 10. As long as you are using openvpn 2.3.9 or newer, it h...
-
- Ran some quick tests and both ways work so long as the client is current. With the option present, DNS queries only g...
-
- All we could do is push the setting or add it to the config. Beyond that it's a Windows problem that isn't anything w...
-
07:40 AM Bug #6719: OpenVPN DNS Leak Windows 10
- I tried
*push block-outside-dns* @ pfSense & *setenv opt block-outside-dns* @ openVPN-Client
nslookup still tr... -
- Did you try the suggested fix on the ticket you linked? Put this in your advanced server config box:...
-
- Windows 10 DNS resolver always uses local DNS server, which defeats the point of --redirect-gateway / Road-Warrior sc...
-
- OK I can reproduce that. From reading OpenVPN's docs and forum, explicit-exit-notify is *not* intended for use with S...
-
09:14 AM Bug #6718: openvpn server exits if client has explicit-exit-notify 2 specified
- server config as below:
shared key
udp
tun
1104 port
BF-CBC
SHA1
ipv4 tunnel entwork - 10.10.10.0/24
do not f... -
- I can't reproduce this at all. I added that directive to a client and the server keeps running afterward, no problems...
-
- i have 2 pfsense boxes where 1 is a openvpn server and the other a client, if the client config has explicit-exit-not...
-
- Please try the code at pull request https://github.com/pfsense/pfsense/pull/3112 - /etc/inc/services.inc - and report...
-
- Looking in the code I found a couple of other things when I did some first looking:
1) A problem when specifying DDN... -
- Dear Maintainers,
we have recently discovered that pfsense 2.3.2-RELEASE does not treat Options in DHCP "Sub-"Pool...
08/15/2016
-
- I'm running 2.3.3.a.20160815.2144 with PR 3102/1, 3102/2, 3103, 3105, 3106 and 3107, testing the fix for https://redm...
-
07:37 PM Feature #3377: OAuth2 authentication in captive portal
- Thomas NOEL wrote:
> In Captive Portal we have native, ldap and radius authentication. Today, a lot of authenticatio... -
- Correction:
I did another test. After around 30 minutes after releasing the WAN interface, both gateways were offl... -
- A lot of progress made on this bug and other issues. Currently, I'm running the latest snapshot with the following PR...
-
03:07 PM Bug #6712: services_unbound.php Host Overrides don't change any unbound configuration
- Thanks to PiBa-NL on IRC who helped me troubleshoot this down to:
/etc/inc/system.inc
339 // prefer dnsma... -
02:03 PM
Bug #6716 (Resolved): services_unbound_acls: Network "Delete" button is not hidden if only on network listed
-
02:00 PM
Bug #6716 (Feedback): services_unbound_acls: Network "Delete" button is not hidden if only on network listed
- Applied in changeset commit:4d4782fcd7213b5f279cb372853f5fedb07f6178.
-
01:46 PM
Bug #6716 (Resolved): services_unbound_acls: Network "Delete" button is not hidden if only on network listed
- Also help text in a repeatable section is duplicated if the last row is deleted
-
09:57 AM
Bug #6700 (Resolved): dhcp6 Related log entries
-
09:49 AM
Bug #6705 (Resolved): diag_routes "Rows to display" is off by one
-
08:40 AM
Bug #6705 (Feedback): diag_routes "Rows to display" is off by one
- Applied in changeset commit:d526fc2d2acc87af2ca829dfe01f0037e3368051.
-
09:48 AM
Bug #6704 (Resolved): diag_edit.php Go to Line limits
-
08:10 AM
Bug #6704 (Feedback): diag_edit.php Go to Line limits
- Applied in changeset commit:fd778d8bef8ea3b0e5dcc8007de242b6e2ac6d5a.
-
09:33 AM
Bug #6710 (Resolved): diag_resetstate.php confirmation prompt even if checkboxes unchecked
-
08:54 AM
Bug #6709 (Resolved): diag_resetstate select or all?
-
08:46 AM
Feature #6703 (Resolved): diag_edit.php suggestion
-
08:40 AM
Bug #6706 (Resolved): diag_routes Use a regular expression description or use
-
08:22 AM
Bug #6701 (Resolved): diag_authentication.php related status link
-
- Also just noticed the queue name could do with a little more space between it and the left edge of the table.
08/14/2016
-
02:04 PM Bug #6687: Secure email fails with private CA
- The concept of an option to ignore certificate validation is completely unrelated to this issue.
-
05:35 AM Bug #6687: Secure email fails with private CA
- Any attempts to do certificate validation here should be completely optional here (as in, a separate checkbox). *Way*...
-
- I spent a while doing some testing with pfsense and 4 clients. Your latest fix definitely seems to have fixed the pro...
-
- I backed out of the previous changes (PR plus edits) and installed the updated PR. I tested it on a hyper-v server wi...
-
- This certainly works. Would suggest using the forums for help.
08/13/2016
-
- 1) diag_traceroute.php the IPv4 traceroute when
resolving IPs to hostnames outputs both,
but the IPv6 traceroute6 o... -
- I hope you don't mind that I place multiple things in a single ticket here about diag_testport:
1) can output erro... -
- This is also related:
diag_tables has "Related status" shortcut for "aliases" that
goes to same diag_tables page.... -
05:38 PM
Bug #6701: diag_authentication.php related status link
- Thanks Jeremy,
I'll look at this (and the rest of your list) on the next couple of days. -
- The diag_authentication "related status" icon links to same page :)
$shortcuts['authentication']['status'] = "diag... -
- be consistent in naming or add more doc details
to the diag_tables page as custom tables are called "aliases" elsewh... -
- services_unbound.php
I cannot get any Host Override to be configured with unbound.
/var/unbound/host_entries.conf ... -
- diag_states_summary is not intuitive as each table has two columns
with same "# States" header.
first is for $ipinf... -
07:46 PM Bug #5993: dhcp6c not started until an RA received
- I've updated my PR with another commit (almost the same I sent you via PM a few hours ago):
https://github.com/pfsen... -
- From my reply to your PM, based on a discussion with an engineer at my ISP, my understanding is the following:
> T... -
- Copying the info I shared on my reply to your PM on the forum.
> From my understanding, the whole point to setting... -
- I was holding off on upgrading to the latest snapshot because PR 3092 wouldn't install. However, I noticed today that...
-
- Unable to reproduce. Loaded up pfSense-CE-2.3.2-RELEASE-4g-i386-nanobsd-vga.img and hostnames in aliases worked fine....
-
08:18 AM Bug #6698 (Rejected): Hostname updates in Alias didn't work
- I have a fresh 2.3.2 install on i386 on a 4gb cf card (nano version). Hostnames in Alias didn't work. On the firewall...
-
- Unable to reproduce. Loaded up pfSense-CE-2.3.2-RELEASE-4g-i386-nanobsd-vga.img and filter reload worked fine.
Ple... -
- I have a fresh 2.3.2 install on i386 on a 4gb cf card (nano version). New rules didn't apply automatically. I have to...
-
- See also #6707
-
- Duplicate of #6393
That page needs significant work. -
- it appears the diag_smart is broken.
For example, its has
$start_script = "/usr/local/etc/rc.d/smartd.sh";
and ... -
- diag_resetstate.php if the checkbox is UNchecked,
clicking "Reset" still prompts "Are you sure you wish to Reset?"
... -
- diag_resetstate.php header says "Select States to Reset"
but the docs there says "will remove all entries from the
... -
- the diag_sockets.php info says sockstat uses capital -L
when using the lowercase -l.
It does not use -L and it does... -
- diag_routes "Use a regular expression to filter IP address or hostna
mes" actually works to match any field like fla... -
- the diag_routes "Rows to display" is off by one as it includes
the header line too. If you choose 10 you would want... -
- Edit File "Go to Line" selection box allows negative numbers and
line numbers longer than the file contains -
- suggestion for the Edit File have the input box have some
description or label like "Path name" or "File name or di... -
- syntax error in the PHP execution in Command Prompt menu
should not cause a crash detection to suggest reporting to ... -
- icon for Related log entries for the DHCPv6 Server (and relay) is
for logfile=dhcp but that doesn't match anything s... -
- White squares around the numeric values in the Status / Queues page, I've tried Safari & Firefox, both show the same....
08/12/2016
-
12:20 PM Bug #6696 (New): Add configure link to Status > Queues error message if traffic shaping not configured
- If I'm not mistaken it should link here: ...
-
07:08 AM Bug #6695: issues LAGG and openvpn TAP
- it works in 2.1.5 and 2.2.5.
But I understand that you would not supported this configuration -
- That is not, and has never been, a supported configuration.
-
- I have 2 LAGG openvpn TAP mode.
If I disable and enable a VPN, then the VPN is down (dasboard: 'Unable to Contact se...
08/11/2016
-
12:44 PM Bug #6694 (Resolved): Change setting at interfaces_ppps_edit.php not working
- When changing the settings at the page interfaces_ppps_edit.php there is always the following error:...
-
11:02 AM Feature #6546: pfSense should support logging to e.g. ELK stacks
- Parsing syslog input is indeed dog simple in Python with asyncore. I should be able to just glue this together to my ...
-
- We run 64-bit images exclusively on ours, never 32-bit.
-
09:56 AM Bug #6692: APU1D crashes on boot with pfSense 2.3.2 on the APU1D
- Apparently i386 works, and this flaw is only with the 64-bit port.
-
- We regularly test on the APU hardware we have and there are no problems we have found. Please post on the forum first...
-
- I upgraded from pfsense 2.3.1_r5 to 2.3.2, and the pfSense crashes on boot, the reboots endlessly on loop.
The liv... -
- Users and groups already have privileges to control page access. Post on the forum for assistance or read the documen...
-
09:29 AM Feature #6693 (Rejected): Security Groups
- Would it be possible or is it already possible to create security and select what the user/group has access to and wh...
-
- agreed on it being a dupe. Not sure how I missed 5999 when I searched initially.
-
05:55 AM
Bug #6678: Virtual IPv6 IP (IP Alias) on a DHCPv6-PD tracked interface causes inconsistencies
- This looks like it might be a duplicate of https://redmine.pfsense.org/issues/5999.
-
06:20 AM
Bug #6691 (New): dhcp6c quits after only two tries if no response was received
- Last night my ISP connection went down for a few hours, presumably for maintenance on their end. A few minutes into ...
08/10/2016
-
- Strips 802.1q tagged traffic from an interface when running inline IPS mode.
Traffic shapper no longer works as one ... -
- Adding a "Go here to enable" link to the error message seems like it would be helpful.
If I'm not mistaken, then l... -
- CHAP.inc removed in commit:6989a7c
-
- Someone who can reproduce it reliably needs to get the details of how to reproduce it reported to the Quagga project ...
-
08:46 AM pfSense Packages Bug #6305: Quagga problems updating routes / mistakenly showing "kernel"-routes while they are not
- Any update on the topic?
-
- I now have that Python code wrapped up as a class, for use with Python logging. A current limitation is that logging ...
-
- If that example you posted is the one that didn't work, I can see why. Looks like ">" was changed to ">" twice...
08/09/2016
-
08:57 PM Bug #6688 (Resolved): Special characters in a password cause problems
- With the following config snippet (some info redacted), pfsense reports:
php-fpm[71756]: /services_dyndns_edit... -
- If a private CA such as a self signed enterprise CA is in use, the CA is not recognized when establishing SMTP connec...
-
03:55 PM pfSense Packages Bug #5749: OpenVPN Export Certs with password, password doesn't open .pk12 container.
- I tried using "@" and "." in the password and both worked fine.
Looking at the JS code, it's using the escape() fu... -
- Is it only "+" that causes a problem or have you tried other special characters as well?
The way the password is s... -
- This file is being removed in 2.4.
If a 2.3.3 is issued, it would be desirable to add a chmod to 644 following cre... -
- /usr/local/etc/php/extensions.ini is owned by root and created with 600 permissions. This prevents proper initializat...
-
- I have observed that executing the following code does not seem to actually change anything in config.xml -- so I thi...
-
02:45 AM pfSense Packages Bug #6129: zabbix agent/proxy 2.4 not ported to pfSense 2.3
- I would also like to see it come back. As we can't upgrade all our boxes to pf2.3 in one day we have a problem. 2.3 D...
08/08/2016
-
- I looked into the gateway status issue. After pfsense boots with PR #3092 installed, the status of WAN_DHCP6 is unkno...
-
- Phillip Davis wrote:
> The text typo was in existing code, so I made a separate pull request to tidy that up:
> htt... -
- Phillip Davis wrote:
> The text typo was in existing code, so I made a separate pull request to tidy that up:
> htt... -
- This will need a target version set so that it will appear in release notes some time. Not sure what you guys are goi...
-
09:14 AM
Feature #6674 (Resolved): Custom widget preference settings per user
- PRs tested and merged. Thanks Phil.
-
- Any update on this? I'm having the same issue on 2.3.2. Using openvpn-client-export 1.3.8 (just reinstalled it as wel...
-
- We don't have anything that would be forcing that to 1400 that I can see. I have a local setup here with LAGG and VLA...
-
10:54 AM Bug #6685 (Closed): LAGG groups get stuck with an unconfigurable 1400MTU with em NICs.
- I'm not sure of the exact scope of this issue, but I can at least say it happens when reproducing my environment.
... -
09:15 AM
Bug #6676 (Resolved): Delete NAT rule with associated firewall rule does not update firewall separators position
- Fixed by https://github.com/pfsense/pfsense/pull/3089
-
09:12 AM
Bug #6669 (Resolved): index.php: Adding a new widget corrupts the settings for existing widgets
-
- Tested and working here as well
-
- Tested this with a long password that failed in 0.4.21.
Works as expected in 0.4.22. Rejects incorrect password. R... -
05:02 AM Bug #6528: The captive portal cannot be used on interface lan since it is part of a bridge but works anyway
- Orsiris de Jong wrote:
> Screamed horray to quick !
> When the interface the CP is binded to is bridged, everything...
08/07/2016
-
- The text typo was in existing code, so I made a separate pull request to tidy that up:
https://github.com/pfsense/pf... -
- I'm currently testing the latest development snapshot (as of the time of this post) with the latest patch from (DHCP6...
-
01:44 PM pfSense Packages Bug #6684 (Resolved): Setting IKEv2 Phase 2 in Mobile Config appears to generate invalid Apple Profile
- Setting "Phase2 PFS Group - Provide the Phase2 PFS group to clients (overrides all mobile phase2 settings)" in Mobile...
08/06/2016
-
02:28 PM Bug #6675: Port Forward on LAN does not work in 2.3.x
- Only you correcting what you said above in pfSense own documentation just finding something interesting, he recommend...
-
- Daryl Morse wrote:
> I'm currently testing the latest development snapshot (as of the time of this post) with the ... -
06:14 AM Feature #2358: NAT64 support
- UPVOTE. I'd love to be able to set up an IPv6-only network and just use NAT64 to redirect old requests.
08/05/2016
-
10:21 AM Bug #6683: Empty page 'Firewall: NAT: Port Forward' when Read-Only rights
- OK, sorry Jim. But why no delete the right "WebCfg - Firewall: NAT: Port Forward page" if it does not work ?
-
- To create a read-only user, give them the "Deny Config Write" privilege.
-
- Hi,
To reproduce the issue :
* add a NAT Port Forward rule with admin account
* add a new user "john" (no group ... -
- The state table is fibbing to you a little bit in that case. pf is sending the traffic out the correct WAN, but the i...
-
06:50 AM Bug #6682 (Not a Bug): OpenVPN Client does not use "interface" configured. Connection always established through default gateway.
- Tested with 2.3, 2.3.1 and 2.3.2
Test scenario: configure multiple WANs, use WAN1 as default gateway, configure Open... -
- I still haven't had a chance to switch my LAN over to this software, but I'm aware of three other Telus users who are...
08/04/2016
-
- If I need is more of the same as Squid is to work with the transparent proxy, redirecting only port 80 and not all tr...
-
- PR has been merged, thanks!
-
- Pull request has been merged. Thanks
-
- @Pi Ba
I agree that it should not be possible to end up with empty entries in the config but in the case that someho... -
12:54 PM pfSense Packages Bug #6511: In some circumstances the HAProxy clone front-end button can add blank list entries to the front end being cloned resulting in a config that cannot be applied.
- @Steve, the first issue of empty items being added when duplicating should be fixed in next version..
https://github... -
- Zabbix agent and proxy 3.0 is available on pfSense 2.3. If you see only Zabbix agent or proxy 2.2 or 2.4, you must st...
-
- Uhm... 3.0.x LTS is in fact the only version available in pfSense 2.3.x packages.
-
- I just pushed a fix to change this to SHA512, which is working well even with long passwords (I only tried up to 32 c...
-
- The password handling in squid for local auth is using crypt() with default settings and cutting off passwords short ...
-
- Please post on the forum or mailing list for assistance with your issue. It's highly unlikely to be a bug, but if it ...
-
08:42 AM Bug #6680 (Not a Bug): pfSense web ui freezes after clicking on Diagnostics->ARP Table
- For some reason, when I try to list the arp table, pfsense freezes and I need to restart PHP-FPM via console.
2.3.... -
-
- This is resolved with version 2.7.4_1 of the nut package.
-
-
06:30 AM Bug #6679: No config option for "limited" parameter in Default/Custom Access Restrictions in NTP
- KOD flag also toggles limited.
Sorry for opening this ticket. -
- Now limited parameter is always included in restrict config lines.
Older Netapp filer uses sntp and sends 3 ntp qu...
08/03/2016
-
- In addition, this messes up the snort default pass list, adding the VIP instead of the actual interface IP.
-
- 2.3.2-RELEASE (amd64)
WAN interface gets a IPv6 /60 prefix delegation from my ISP. (example: 2001:1:2:30/60) My... -
- +1, tested and working, thanks. ;)
-
- Fix works fine, the older release is no longer broken by the newer pkg.
If you have a system stuck in the older st... -
- I've pushed a fix for that, it's in pkg-1.8.7_1
-
- OK, that I can reproduce. I have adjusted the subject and description to be a more clear/accurate representation of t...
-
- Did little more testing.
It seems that if there is an carp address assigned to interface the interface will come u... -
- An interface can show as "up" as long as it has a link. A VLAN will exist at the OS level if a tag is defined. The di...
-
- When a CARP VIP is configured for a disabled interface, it is still configured by pfSense during the boot process eve...
-
- Works for me, also works for the original reporter on the forum. Closing out.
-
- Applied in changeset commit:1ea1b228285dfa60da6732eba54dc03b932eb92f.
-
- Looks like an easy fix for this missing field. I have a patch I'm testing that adds an optional OU field, works OK to...
-
- Duplicate of #6672
-
- Reflection wouldn't come into play for a rule such as that. If the client and server are on the same subnet, you need...
-
12:23 AM Bug #6676: Delete NAT rule with associated firewall rule does not update firewall separators position
-
Fix: https://github.com/pfsense/pfsense/pull/3089
-
-
2.3.2 - Delete NAT rule - bug?
https://forum.pfsense.org/index.php?topic=116099.0
08/02/2016
-
- Good evening everyone, updated my pfSense from 2.2.6 to 2.3.2 this week and 2 rules Port Forward on the LAN, one to r...
-
- The ability to save custom dashboard widget layout and various other custom GUI preferences on a per user basis was a...
-
- Hello,
I use a paied wildcard certificate *.domain.com and I need to generate a CSR (Certificat Signing Request) a... -
03:43 PM Bug #6672 (Resolved): CSR missing OU, same with internal certs missing OU
- Seems Org is there but Org Unit is missing. This is required by many CAs
See thread here
https://forum.pfsense.o... -
- I'm not sure that would be viable but Renato would know better than I. You have to upgrade pkg to the new version to ...
-
- Noticed a lot of complaints on the forums as well in many different threads. Wouldn't locking the pkg package itself ...
-
- In this case it actually turns out that the problem is the new version of 'pkg' needs a different command line parame...
-
- None of the XML_RPC_Client() calls we have specify a proxy, and I can't reproduce a problem here. When I specify a pr...
-
04:22 AM Bug #6670 (Not a Bug): XMLRPC failure after setting proxy settings
- Hi,
environment : It's a pfsense HA for internal LAN firewalling. It does not have direct access to internet. In o... -
- Duplicate of #6665
-
- See https://redmine.pfsense.org/issues/6665; you need to upgrade to 2.3.2 to get the package manager GUI back.
-
- Hi,
After installing zabbix agent the package manager is unable to list installed packages and say :
Unable to ... -
04:49 AM Bug #6634: DHCP Server "TFTP Server" field should allow URLs
- It works!
08/01/2016
-
07:20 PM
Bug #6669: index.php: Adding a new widget corrupts the settings for existing widgets
- Applied in changeset commit:236e6a54e9a93284ca170b68aa1188dfaa195c3d.
-
07:10 PM
Bug #6669 (Feedback): index.php: Adding a new widget corrupts the settings for existing widgets
- Was adding configuration for a new widget to a new config array instead of reading the existing config.
-
07:03 PM
Bug #6669 (Resolved): index.php: Adding a new widget corrupts the settings for existing widgets
- See: https://forum.pfsense.org/index.php?topic=115934.msg644220#msg644220
-
- PR has been merged, thanks!
-
- Well, you're running it, so I won't argue (too much.) ;)
-
- This is a symptom/byproduct of the other missing feature, so it is definitely a duplicate. Solve the other, and this ...
-
- This is NOT a duplicate. While 3971 might resolve this bug as a side effect, a fix for this bug might not fulfill th...
-
- Xander Venterus wrote:
> If its locked, then you just need to set it to none, and have your mouse over the apply but... -
- Daryl Morse wrote:
> Chris Buechler wrote:
> > merged this for 2.4 as it needs more baking time in snapshots than w... -
11:52 AM Bug #6448: Mousing over aliases on disabled rules makes hint difficult to read
- The opacity of the popover is inherited from the parent element. AFAIK there is no easy way to avoid inheritence of o...
-
- Chris Anderson wrote:
> I have the same issue with the latest BETA version of Chrome. It works in the latest stable ... -
10:31 AM Bug #6657: Unable to add network in the source section of a LAN firewall rule
- I have the same issue with the latest BETA version of Chrome. It works in the latest stable release, and in other bro...
07/31/2016
-
04:53 PM Bug #6668: IPSec tunnel + L2TP/IPSec VPN - wrong PSK chosen by pfSense
- ERRATUM:
@ipsec.secrets@ (mistyped) should be:... -
- Setup:
1. IPSec, IKEv1 site to site tunnel, PSK, Main mode. FQDN identifier - talking to a Mac OS server (racoon)
... -
11:47 AM Bug #6481: loading EAP_RADIUS method failed
- I wanted to jump in to say I just had this same issue on 2.3.2 today. Same log message and everything. Confirming y...
-
09:23 AM Feature #5112: LDAP support for Captive Portal
- I'm interested to this feature. It will be officially implemented?
-
- As mentioned in #6667, this also negatively impacts those with /var in RAM
-
- Duplicate of #3971
-
- Duplicate of https://redmine.pfsense.org/issues/3971 (this is a more generic problem, even without tmpfs-based /var, ...
-
07:52 AM Feature #4351: Allow to disable BOOTP in DHCP server
- https://github.com/pfsense/pfsense/pull/3086
-
- I am also seeing BOOTP queries being served for captive portal users. The problem is that BOOTP leases do not have a ...
-
- Chris Buechler wrote:
> if you open siproxd on WAN in firewall rules, you get what you're asking for security-wise. ... -
- @Rene: Try https://github.com/pfsense/pfsense/pull/3083
-
12:23 AM Bug #6666: IPV6 Log Spam?
- Sorry:
Version: 2.3.2
Priority: Low
Spelling mistake on last line, should be DHCPv6 daemon
07/30/2016
-
- The file "/var/db/dhcp6c_duid" contains a DHCP Unique Identifier (DUID) that a host uses to uniquely identify itself ...
-
- I have a fully functioning dual stack IPv4 static and Prefix Delegated /56 IPv6 DHCPv6 network running over PPPOE. Th...
-
- (Same goes for merely installing a package, not just upgrading.)
-
- As described here: https://forum.pfsense.org/index.php?topic=116026.0 - when you upgrade some package before upgradin...
-
05:16 AM Bug #6664: It's impossible to use HE.NET tunnel iface as a parent for OpenVPN instances
- Yet another workaround: Specify a local port instead of empty/0. Looks like *$iface_ip* is not properly initialized w...
-
- Setup:
* HE.NET tunnel iface [for example, WAN_HE]
Steps to reproduce:
* Create an IPv6 OpenVPN instance on pare... -
- Setup:
# WAN PPPoE WAN
# HE.NET tunnel on WAN
# Static IPv6 on LAN
Steps to reproduce:
* Create a UDP6 TAP Ope...
07/29/2016
-
- The "Installed Packages" widget exists for those who want to know what packages are installed and which have availabl...
-
07:13 PM Feature #6661 (Rejected): Show # of packages available for update on dashboard
- The ability to show the number of packages that need updating under the system update status on the System Informatio...
-
- When using pkg_edit.php, the checkbox alignment is off when using the <sethelp> XML tags.
See attached pic.
Can... -
- Confirmed, but it's not a regression. As far as I can see, default routes are never removed except by ppp-linkdown an...
-
08:14 AM Bug #6659 (Resolved): Default routes are not being removed after deletion
- I have noticed that when a default route is deleted via GUI, they are not removed from the system, only from the scre...
-
- I can't reproduce it using the settings you show. Make sure there are no extra spaces or anything else non-printable ...
-
05:58 AM Bug #6657: Unable to add network in the source section of a LAN firewall rule
- Destination host should be 8.8.8.8, but the error is the same.
-
- Phillip Davis wrote:
> That works fine for me - give more information about the data you enter and exactly which fie... -
- That works fine for me - give more information about the data you enter and exactly which field the "Please match the...
-
- Since 2.3.2-RELEASE, the following causes an "Please match the request format" error:
1. Go to Firewall / Rules / LA... -
09:38 AM Todo #6660: Rename "admin" to "root" in GUI, because in fact it is "root" on BSD level.
- Thanks Jim, for clarification.
-
- Both admin and root exist at the OS level but they each work in different ways. While the password for both accounts ...
-
- I think it will be more clear for new users and won't cause any misunderstandings.
-
- The DHCP Relay Service cannot be started on 2.3.2 with ath0, clients do not receive an IP address....
07/28/2016
-
- reassigned
-
07:20 PM
Bug #6601 (Feedback): Horizontal scroll bar on Installed Packages
- Applied in changeset commit:1cba7db475b142e8c1dd5edeb71b294ae01347d3.
-
04:35 PM Bug #3334: Status/Traffic Graph isn't IPv6 ready
- IPv6 issue still present in 2.3.2
-
- Something is triggering it, usually a gateway outage. Post on the forum or mailing list for help diagnosing the actua...
-
03:38 PM Bug #6656 (Not a Bug): /rc.newwanip - Excessive Usage
- Currently having the following problem:
According to the systemlogs /rc.newwanip is executed every 3 minutes or so a... -
- The problem isn't the sudo package at all. It's that pkg was upgraded and the GUI doesn't understand the output of th...
-
11:57 AM pfSense Packages Bug #6655: Installing sudo package breaks webGUI system update capabilities and Package Manager on 2.3.1-RELEASE-p1
- I forgot to mention that removing the sudo package via ssh had no change aside from removing the package, the bugs st...
-
- After installing the *sudo* package through the System > Package Manager menu, our firewalls are no longer able to ch...
-
11:56 AM Bug #5652: Radius IETF Class Group Assignment - Incorrect Standard
- Phillip Hernandez wrote:
> I disagree with using Cisco-AV:Pair and believe that using Filter-Id is a better option. ... -
11:28 AM Bug #5652: Radius IETF Class Group Assignment - Incorrect Standard
- I disagree with using Cisco-AV:Pair and believe that using Filter-Id is a better option.
Thanks
-
- Deleted.
-
- Phillip Davis wrote:
> That looks like a bug that has been around for a while - it is not reversed, it is doubled.
... -
11:24 AM pfSense Packages Bug #6654: siproxyd Table issue
- System: Netgate SG-2440 (amd64)
-
- Under services-> siproxyd -> Registered phones
Table is not aligned correctly and not showing correct number of re... -
- Applied in changeset commit:f1773759e286fa7dfcaa10965fc7909b7abf560f.
-
-
https://forum.pfsense.org/index.php?topic=115753.0
Log entries to be included in the filtering is capped/restr... -
05:57 AM Bug #6528: The captive portal cannot be used on interface lan since it is part of a bridge but works anyway
- Screamed horray to quick !
When the interface the CP is binded to is bridged, everything works except for the downlo... -
01:33 AM Bug #6637 (Confirmed): pfSense blocks return traffic (mostly TCP) on 2.3.1-RELEASE-p5
- There is a known fix for this on PR 207598 that should be easy to import.
all FreeBSD 10.x base versions affected -
- that's not true, they work fine. Please post to the forum for assistance.
-
12:17 AM Bug #6653 (Not a Bug): DNS Forvarder dont worked Host Overrides
- DNS Forvarder ignored all Host Overrides records.
-
12:20 AM pfSense Packages Feature #6651: Loopback interfaces
- For dynamic routing protocol.
As example border router supply originate option ( default gateway ) and use of lo* to...
07/27/2016
-
-
A potential workaround may be to use a different host name for other NAT'ed ports.
-
- Hint: Use haproxy with SNI and forget the ports. See https://github.com/PiBa-NL/pfsense-haproxy-package-doc/wiki (and...
-
05:04 PM Bug #6650 (Resolved): Option needed to disable HSTS
- HSTS is based solely on hosts, and not port numbers. As a result, any HTTPS devices behind the pfSense are unreachabl...
-
- I'm curious, what use case do you have for additional lo* interfaces?
-
- major think is create additional lo* interface as right now we can define LAN or WAN.
-
- you can already do that with virtual IPs on localhost. That doesn't allow cloning lo0 to lo1, though I don't think an...
-
- Assign additional ip addresses like...
-
- manipulate loopback interfaces in what way? You can already set static routes to lo0 to null route, and add VIPs on l...
-
- Hello Everyone,
I would like place request add ability manipulate loopback interfaces through web ui.
Use cases wh... -
- For support assistance of that nature, use the forum or mailing lists.
-
08:33 PM Bug #6648: pf V2.3.1 - Enabling captive portal failed to create captive portal security group
- Thank you for the reply, and please pardon my ignorance. Could you please tell me how to assign privileges to a group...
-
- That is exactly how it is supposed to work. It is up to the firewall admin to create a group or add the privilege dir...
-
- on a fresh install, enabling Captive Portal failed to create the captive portal security group. could not assign user...
-
04:17 PM Feature #3718: radvd - enhancement proposal: ability to advertise routes and some fixes - patches attached
- Updated the patch for version 2.3.2.
-
- Your gateway monitoring for that WAN must not have been correct. For example, pfSense may have been pinging the modem...
-
- In this situation you need to specify an alternate monitor IP for the router/gateway. If you let it use the default, ...
-
- there are two internet router members added to a Gateway Group. one router (4G wireless modem) became unregistered fr...
07/26/2016
-
- The nginx instance for the web GUI should enable CSP. Just adding the following works: ...
-
- "Reject leases from" on interfaces.php only accepts IP addresses. It should also accept subnets in CIDR notation.
-
- If its locked, then you just need to set it to none, and have your mouse over the apply button, and dont click it unt...
-
- Xander Venterus wrote:
> I do believe as you said it, this is more of a microsoft issue.
>
> HOWEVER, my HyperV a... -
- I do believe as you said it, this is more of a microsoft issue.
HOWEVER, my HyperV allows me to eject virtual CDs ... -
- In windows 2012R2 hyper-v, there is no way to change boot order, dismount a CD or "eject" virtual media while a vm is...
-
- Today when 2.3.2 released to public, some peoples got troubles with update.
The main problem is that when update fai... -
- Chris Buechler wrote:
> it's already there, has been for a long time.
Noted. Sorry for the false alarm. Not sure ... -
11:35 AM Bug #6031: Anti-Lockoug Rule Not Effective Against Canned Interface Block Rules
- Actually, that would be an easy thing for me to do: my entire LAN has public IPs, so in essence, that should be turne...
-
- Applied in changeset commit:78e9b001e9c7f7995a9b79d831d8c33f95aeff3c.
-
- The /usr/bin/install binary is needed by some packages (such as squid) during their installation procedures, but it i...
-
09:55 AM Feature #1019: Lagg Failover Mode Master Interface
- Is this on a roadmap for any future release? I just ran into this issue today myself and found this feature request.
-
09:42 AM Bug #6642 (Closed): Cant access certain IP's
- I use pfSense with multiple LAN NICs:
10GWAN holds our 10G public /22 ip scope
1GWAN holds our 1G public /26 ip sco... -
- see: https://forum.pfsense.org/index.php?topic=114085.0
-
- Hi,
I also has the problem of the performance degration!
We have a setup of a small hardware box (N3150 Mini-ITX ... -
01:54 AM Bug #4981: Remote logging not active after reboot
- Any news on this? Still an issue in the latest 2.3.1_p5 release. I'm also logging to a Nagios Log Server now, and bot...
Also available in: Atom