Activity
From 07/27/2016 to 08/25/2016
08/25/2016
-
10:50 PM Feature #6728: Route53 API mod and Geolocation
- Just to confirm my issue was not an IAM Policy problem, I gave my IAM user full permissions and created a new record ...
-
- Matt Williams wrote:
> The previous version works for me on a non-policy subdomain. What type of permission policy d... -
09:20 PM Feature #6728: Route53 API mod and Geolocation
- The previous version works for me on a non-policy subdomain. What type of permission policy do you have set in IAM fo...
-
- Also, I think this tracker type should be bug not feature? I see it tagged for 2.3.3 but as "Feature". In my testing,...
-
- I'm interested in this bug now too as I've just discovered that 2.3.2 + AWS Route53 is inoperable. With 2.3.2 I can n...
- 10:33 PM Revision df6d4ff1: add cpu stress tester and bird to arm build
- 08:48 PM Revision bb487b66: add cpu stress tester and bird to arm build
-
06:14 PM Feature #6743 (Resolved): Packet Capture - Filter MAC
- Under Diagnostics -> Packet Capture, there is no option to filter by partial or full MAC address. This should be fair...
-
12:51 PM Feature #3377: OAuth2 authentication in captive portal
- > My preference is to keep this limited to CP for now.
>
> That said, your idea has merit, and I'd appreciate it i... -
- I have two use-cases I want to enable and corresponding ideas.
*A) OpenVPN server use OAuth2 as backend.*
*Use-ca... -
12:29 PM Bug #6741 (Resolved): /etc/rc.initial does not trap CTRL-C back to console menu but rather to # prompt.
- I found a problem with trap mechanism in /etc/rc.initial that does not trap CTRL-C back to ssh/cli console menu.
Ins...
08/24/2016
- 08:22 PM Revision 509e9357: Improve dhcpd and dhcpleases reload
- 1) Avoid running services_dhcpd_configure() more times than needed.
2) Always restart dhcpleases after it's killed du... -
07:45 PM Feature #3377: OAuth2 authentication in captive portal
- Kristian Junkov wrote:
> Thomas NOEL wrote:
> > In Captive Portal we have native, ldap and radius authentication. T... -
- Thomas NOEL wrote:
> In Captive Portal we have native, ldap and radius authentication. Today, a lot of authenticatio... - 04:16 PM Revision e5bc38d2: [theme] Compact-RED: improve hovered table rows visibility
-
04:07 PM Feature #6374: Provide sample server-side logic to report peer's IP address for use with DDNS
- ...
-
- This is a quick and dirty way for us to add checkip services to nginx on our production web boxes:
location = /ip {... -
01:19 PM pfSense Packages Bug #6740: https filtering with squid + squidguard error (ssl bump)
- C Wood wrote:
> Jim Pingle wrote:
> > It is for both but there is no specific bug on this ticket yet, only symptoms... -
- Jim Pingle wrote:
> It is for both but there is no specific bug on this ticket yet, only symptoms.
I guess your d... -
01:08 PM pfSense Packages Bug #6740: https filtering with squid + squidguard error (ssl bump)
- It is for both but there is no specific bug on this ticket yet, only symptoms.
-
- Jim Pingle wrote:
> This needs to stay on the forum until a specific bug can be identified. We don't encourage or su... -
- This needs to stay on the forum until a specific bug can be identified. We don't encourage or support the use of HTTP...
-
- C Wood wrote:
> When configuring the https filtering some (possibly all) https sites error out. (Man in the middle ... -
- When configuring the https filtering some (possibly all) https sites error out. (Man in the middle certificate autho...
08/23/2016
-
- Cleber Ronaldo wrote:
> Thomas NOEL wrote:
> > In Captive Portal we have native, ldap and radius authentication. To... - 07:54 PM Revision e540a9d7: css: Fix jQuery UI widgets' font
- Use the main font with jQuery UI widgets (e.g. autocomplete forms)
-
06:24 PM Revision 8024c54a: change traffic graphs to use d3.js
-
-
-
- 11:09 AM Revision 953a88a4: [theme] Compact-RED: compact panel titles
- 11:01 AM Revision b8916dcc: [theme] Compact-RED: make drop-down menus not too "compact"
- and improve hovered element visibility
- 10:51 AM Revision 9e1208e5: [theme] Compact-RED: get rid of anti-aliased fonts
08/22/2016
-
08:22 PM Bug #6691: dhcp6c quits after only two tries if no response was received
- See this thread for a work-around for your issue:
https://forum.pfsense.org/index.php?topic=116866.0
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- 04:03 PM Revision 9c6f780f: Fixed #6711
- (cherry picked from commit ca3dc6c9ac6b6045430779f407a31ed620f5a32d)
- 04:03 PM Revision ca3dc6c9: Fixed #6711
- 03:24 PM Revision 9db8959d: Fixed #6732
- (cherry picked from commit e73770057872aa1f78dfff885f89916e446e2e4c)
- 03:24 PM Revision e7377005: Fixed #6732
-
- Applied in changeset commit:946a87ece8089045a1e0153479e7c490bfcbdb68.
-
- Specifically it needs to make use of "comp-noadapt" to forcefully disable adaptive compression at least in the "No Pr...
-
02:16 PM Bug #6739 (Resolved): OpenVPN compression settings in the GUI are no longer translated into the correct running options.
- The OpenVPN compression settings available in the GUI: "No preference", "Disabled", "Enabled with adaptive compressio...
-
- I pushed a fix for this, it will show up shortly.
-
- Applied in changeset pfsense:commit:9fcda3dbd20efb83be69f9b05cc0d2a719fa25bc.
-
- Looks like it is a problem but not one most would hit since it's rare to have both enabled.
source:src/etc/inc/unb... -
- Applied in changeset pfsense:commit:d18559445d34b928d946e9212ab276e1da5cdb39.
-
- Applied in changeset pfsense:commit:f5da84f3018e4b1792b6676bf1c6127dd0e9e5ce.
-
- Confirmed working from myself and others.
-
12:49 PM Feature #6738 (New): GUI Action Buttons replicated to the top of the List
- With the latest GUI the Active Buttons (Add, Delete, Save, etc) only exist on the bottom of the screen. Our Alias li...
-
- Applied in changeset commit:d2466ce6f5f45300ebeccea93ef4b7c35f8e1f02.
-
- There is a potential XSS in diag_dns.php from a lack of encoding on the DNS replies.
If a query is entered for @xs... -
- Looks good now
-
10:30 AM
Bug #6732: interfaces_ppps_edit.php: L2TP and PPTP WAN-type interface editing has broken input validation
- Applied in changeset commit:e73770057872aa1f78dfff885f89916e446e2e4c.
-
10:26 AM
Bug #6732 (Feedback): interfaces_ppps_edit.php: L2TP and PPTP WAN-type interface editing has broken input validation
- Element names and validation code fixed to resolve issue.
localip, submnt, gateway, mtu, mru & mrru tested -
11:10 AM
Bug #6711: diag_states_summary # States and # States twice (explain one is per protocol)
- Applied in changeset commit:ca3dc6c9ac6b6045430779f407a31ed620f5a32d.
-
11:04 AM
Bug #6711 (Feedback): diag_states_summary # States and # States twice (explain one is per protocol)
-
10:28 AM
Feature #6723 (Resolved): Make OpenVPN widget update dynamically
-
09:47 AM pfSense Packages Bug #6736 (Closed): Snort fails to start after upgrade to 2.3.2-RELEASE
- After upgrading to 2.3.2-Release from 2.3.1-5 snort fails to start with a FATAL error: Aug 22 11:20:01 pfSense snort[...
08/21/2016
-
11:45 PM pfSense Packages Bug #6735 (Resolved): Cron Service saves entry on Cancel
- In Services/Cron:
If you click on "Edit" and enter in the settings for a new Cron entry, but terminate it with the... -
- this needs more detail.
-
- looks like minor cleanup.
-
-
- wrong assignee
-
- assigned to PIngle for eval, but looks like "not a bug" to me.
-
-
- we do, actually. please break this up into separate issues.
-
- traceroute6 hop limit on FreeBSD is 30 (default), see traceroute6(8).
-
12:25 PM
pfSense Packages
Bug #6734: ntopng does not start on up-to-date pfsense install (port 3000 is already in use)
- For reference:
https://forum.pfsense.org/index.php?topic=117170.msg649101#msg649101 -
12:23 PM
pfSense Packages
Bug #6734: ntopng does not start on up-to-date pfsense install (port 3000 is already in use)
- OK I opened a thread on the forums. I may also have found the issue. It could be that ntop (the old package) is run...
08/20/2016
-
- If it says that, then it's either already running or something else is using the port. Please post on the forum until...
-
12:09 PM
pfSense Packages
Bug #6734 (Not a Bug): ntopng does not start on up-to-date pfsense install (port 3000 is already in use)
- ntopng does not start on up to date pfsense install. ntopng is installed & configured but trying to access it the pa...
- 06:26 PM Revision 69f209e6: Merge pull request #3116 from NewEraCracker/RELENG_2_3_2+
- 06:25 PM Revision a28e9c31: Fix syntax error on openvpn.widget.php
- (cherry picked from commit 516e609ccb7a39fb27f52a69f11eee68f86974df)
- 06:24 PM Revision afd3477c: Merge pull request #3118 from NewEraCracker/patch-ovpnwidget
- 06:21 PM Revision 516e609c: Fix syntax error on openvpn.widget.php
- 06:20 PM Revision d0cae66d: Fix syntax error on openvpn.widget.php
- 05:56 PM Revision 4509abc3: system_dhcpleases_configure() - Improve pidfile handling
- 1) Set the pidfile variable in the correct place.
pidfile variable is required in both 'if' and 'else' blocks.
2)... - 07:51 AM Revision 20350989: Apply the fix for ticket #6589 also into dhcpdv6 config
- 07:51 AM Revision c69ea005: Ensure only one instance of services_dhcpd_configure runs concurrently
- This way kill and respawn will behave as they should for the dhcpd processes
- 07:41 AM Revision 13e04a25: Fix problems caused by c93d289
- This commit syncs openvpn.widget.php with version from RELENG_2_3 branch
08/19/2016
-
-
-
-
- Please start a forum thread for discussion and diagnosis first. There are a number of possible causes here, some alre...
-
10:56 AM Bug #6733 (Rejected): Web Config Unreachable after 20 days of uptime
- Yesterday web config was working, Today all i get is 502 bad gateway.
Restarted web configurator from console, no ... -
- On interfaces_ppps_edit.php when an L2TP or PPTP interface is created or edited, it cannot be saved.
Both types ha... -
- The rules are correct, but if changing that fixed it for you, that implies the individual L2TP interfaces are not bei...
-
09:29 AM Bug #4031 (Confirmed): Notifications mail bomb in some gateway failure circumstances
- Not too fast, it was my mistake. I'll work on a proper fix
-
09:20 AM Bug #4031: Notifications mail bomb in some gateway failure circumstances
- Thank you Renato! How can we test this? Is there a commit hash you can reference?
-
-
- It was implemented a check that prevents mail notification system to send the same message multiple times. It should ...
-
- Applied in changeset commit:a2a3ca3852f5ab229aad1ab701bbcebef6e874a7.
-
- Looks like this is due to /usr/local/etc/dnsmasq.conf being present. We don't use that or create it, but it is there ...
-
06:12 AM Bug #6730 (Resolved): dnsmasq - Ignoring query from non-local network
- Hi,
Last week i updated to 2.3.2-RELEASE (amd64) built on Wed Jul 20 10:29:55 CDT 2016 FreeBSD 10.3-RELEASE-p5
... -
- Fixed
-
- Backported changes from FreeBSD ports that deprecated extensions.ini, which should be enough to fix it
-
07:31 AM Bug #6223: IPsec + OpenBGPD fails with "PF_KEY socket: No buffer space available"
- Looks like there may be some progress here:
https://forum.pfsense.org/index.php?topic=109908.45
-
- Unless something is getting lost in the translation from Google, there is no bug here. Some passwords are stored in p...
-
06:30 AM Bug #6731 (Not a Bug): Senha sendo exibida em texto plano
- Nas versões acima 2.3.1, ao criar um servidor de autenticação em: SystemUser ManagerAuthentication Servers
Se fo...
08/18/2016
- 11:48 PM Revision 582b1b92: Text typos in openvpn.widget.php
- (cherry picked from commit 8da4847472e03195aeb73a1acedbc27f8af520d1)
- 11:48 PM Revision a377438a: Text typos in openvpn.widget.php
- (cherry picked from commit 8da4847472e03195aeb73a1acedbc27f8af520d1)
- 11:47 PM Revision 573c72c2: Merge pull request #3115 from phil-davis/patch-4
- 11:46 PM Revision 8da48474: Text typos in openvpn.widget.php
- 11:39 PM Revision d958c917: Revise widget refresh timing
- (cherry picked from commit 134ee13df54280441c25b047b406628eeebbb8db)
- 11:38 PM Revision 6d203ffc: Revise widget refresh timing
- (cherry picked from commit 134ee13df54280441c25b047b406628eeebbb8db)
- 11:38 PM Revision 134ee13d: Revise widget refresh timing
-
11:01 PM Bug #6729 (Not a Bug): L2TP+IPSEC 2.3.2-RELEASE
- I was stuck for two days making this work. Connection was successful but something wrong was with Filtering. Finally!...
-
-
-
- *** Amending previous post to remove item number 3, reducing FR to one correction and one enhancement. API will only ...
-
- This is a request to modify/simplify the POST Route53 API for Dynamic DNS. One correction and two enhancements are re...
-
-
-
-
-
-
-
04:51 PM Bug #6657: Unable to add network in the source section of a LAN firewall rule
- See the "best answer" here: https://productforums.google.com/forum/#!msg/chrome/MBEvipQlgyg/yeM-2XDkEi8J reproduced ...
-
- Applied in changeset commit:fb1234ab7d654f301eafdd4f116038937bc36cf4.
-
- When converting code to XML_RPC2 I implemented a usrename parameter on every xmlrpc method. It's just missing privile...
- 03:50 PM Revision c93d289b: Added control to set dashboard widget refresh period
- Start each widget refresh system after a short random delay to prevent all widgets hitting the server at the exactsam...
- 03:44 PM Revision c1f9ca7a: Added control to set dashboard widget refresh period
- Start each widget refresh system after a short random delay to prevent all widgets hitting the server at the exactsam...
- 03:41 PM Revision 512f2c10: Added control to set dashboard widget refresh period
- Start each widget refresh system after a short random delay to prevent all widgets hitting the server at the exactsam...
-
02:10 PM Todo #6727 (New): Missing file apple-touch-icon-precomposed.png ?
- I notice this occasionally in my log files after logging in via the web browser :-
Aug 18 19:50:38 pfsense.localdo... - 01:17 PM Revision 3d0a7703: Completed #6723\
- by making the OpenVPN widget update dynamically
(cherry picked from commit f30e6bd49c773de28b5ec143add30fc900e7874d) - 01:16 PM Revision f30e6bd4: Completed #6723\
- by making the OpenVPN widget update dynamically
-
- Jim,
Did you (or anyone) every submit a commit to correct this? I know it becomes problematic when the TTL changes... -
-
08:18 AM
Feature #6723 (Feedback): Make OpenVPN widget update dynamically
-
- No bug there.
You don't use quotes with a route statement. You might be thinking of a push route but then the "rou... -
03:29 AM Bug #6726 (Not a Bug): OpenVPN: Route statement Custom options broken
- Please see here:
https://forum.pfsense.org/index.php?topic=116959.0
-
04:29 AM Bug #6720: DHCPD Options in "Sub-"Pools ignored, dhcpd.conf does not contain informations, dhcpd therefore not serving
- I've just tested PR3112 including the 2nd commit & PR3110.
The result is now perfect, functionallity is there & the ... - 12:34 AM Revision fd020a2d: Fix #6724 VLAN interface displayed wrong
- in interface assignment script dialog.
The str_replace() calls were not smart enough to just get rid of bare "igb1" ...
08/17/2016
- 10:45 PM Revision c507161d: Indent dhcpd.conf option custom
-
09:13 PM Bug #6725: DHCP Server > TFTP server name and custom dhcp options in GUI and in dhcpd.conf but missing on the wire
- I confirm this is similar in 2.2.6 as well.
I added a made-up dhcp option on the LAN interface, and applied the ch... -
08:55 PM Bug #6725 (Rejected): DHCP Server > TFTP server name and custom dhcp options in GUI and in dhcpd.conf but missing on the wire
- If configuring a TFTP server in the DHCP server settings (in my case for IP phones) the GUI accepts and applies the c...
-
- This reverts commit 9f33ec64330d0b50896772abd73156abbd762305.
-
-
-
-
07:35 PM Bug #6724: VLAN interface displayed wrong through interface assignment
- That's a dumb bug in the way the str_replace() calls are stripping out all the "igb1" when "igb1" gets selected for a...
-
- On a fresh install of 2.3.2-RELEASE (amd64-full-install), there appears to be a bug at the VLAN assignments prompt. W...
-
-
- Yes, that would be nice. I also agree that it has never updated automatically, I have always had to refresh the dashb...
-
04:03 PM
Feature #6723 (Resolved): Make OpenVPN widget update dynamically
- https://forum.pfsense.org/index.php?topic=116955.0
-
- 1) "domain-name-servers are listed twice" - yeh, I noticed that also. Should be fixed by pull request https://github....
-
- Dear Phillip Davis,
many thanks for your fast reaction and fix!
I've tested several combinations and can so far c... -
- Applied in changeset commit:13ac08b8c500cd05f2a351d0d0d37f0d00514a55.
-
-
- This reverts commit 669a59d7c98bda587a1a5840e2fad77827ff16a6.
-
- This reverts commit 0145641ae6d684bb09c2b4281359880b0dfb1e71.
-
- This reverts commit 03d4281714b675414ac3915a6396b23031f15ccd.
- 01:21 PM Revision 4b1b6bed: diag-edit.php: Perform "Goto line #" action on pressing enter key within the line number element
- (cherry picked from commit 86e94becbec130f9eeca5bc94b497ec1167a640a)
- 01:19 PM Revision 86e94bec: diag-edit.php: Perform "Goto line #" action on pressing enter key within the line number element
-
- New version is up, installed, confirmed working on a separate unit.
-
- I was able to reproduce the problem with "+" and confirmed that switching from escape() to encodeURIComponent() fixed...
-
-
-
-
08:41 AM Bug #6691: dhcp6c quits after only two tries if no response was received
- Had the same issue this morning. Log attached.
-
- Please create a forum thread for discussion and diagnosis until a specific bug can be identified. I can't reproduce a...
-
03:00 AM Feature #1831: Captive portal IPv6 support
- Hi,
I think this is an important issue, I would like to see it as early as possible in pfsense, as IPV6 is an impo... -
12:59 AM pfSense Packages Bug #6690: SURICATA IPS Issue - Kills VLANS & Traffic Shaper
- Sandeep K V wrote:
> Hi Steven Kreitzer and Jim Thompson isn't this the expected way the IPS has to work?
No, and... -
12:52 AM pfSense Packages Bug #6690: SURICATA IPS Issue - Kills VLANS & Traffic Shaper
- Hi Steven Kreitzer and Jim Thompson isn't this the expected way the IPS has to work?
08/16/2016
-
10:50 PM Bug #6722: ntp sync
- Aug 17 09:46:11 ntpd 30668 ntpd 4.2.8p8@1.3265-o Tue Jul 19 16:25:02 UTC 2016 (1): Starting
Aug 17 09:46:11 ntpd 306... -
- im newu ser of pfsense im having problem with ntp unable to snyc after update pfsense 2.2.6 to 2.3.2
thats my sys... - 10:22 PM Revision beae03f9: Fix messup caused by 9d3e872
- (cherry picked from commit d5b993fc310147d68bc3c3654a512b0ac981ecd2)
- 10:21 PM Revision 2320796c: Fix messup caused by 9d3e872
- (cherry picked from commit d5b993fc310147d68bc3c3654a512b0ac981ecd2)
-
-
-
-
- 08:18 PM Revision d5b993fc: Fix messup caused by 9d3e872
-
-
-
- 04:31 PM Revision c8d15b4b: Tidy up filenames
- Make sure the filenames represent the actual file
(cherry picked from commit 6173d1f5a5ed50b8c8a8523b1eb6824f7c9c1ae6) - 04:31 PM Revision 4ae5b96f: Tidy up filenames
- Make sure the filenames represent the actual file
(cherry picked from commit 6173d1f5a5ed50b8c8a8523b1eb6824f7c9c1ae6) - 04:31 PM Revision 9795c89e: Merge pull request #3111 from ExolonDX/master
- 03:45 PM Revision 7edcc54b: Uniformize memory limits and remove old code (revised)
- 1) Allow setting a memory_limit up to 768M (Suhosin)
2) Remove old workarounds. Memory limits on config.inc will be n... - 02:53 PM Revision 28598720: Fix #6720 DHCP options by pool
- It is a little bit tricky having to generate the unique "option custom-if-n-m code ..." lines at first where n = pool...
- 02:50 PM Revision 6173d1f5: Tidy up filenames
- Make sure the filenames represent the actual file
- 01:31 PM Revision beb9321f: Fix double domain-name-servers for pool
- Add a pool and specify something in 1 or more of the DNS servers boxes for the pool.
The "option domain-name-servers ... - 01:24 PM Revision a6412d53: Fix DDNS domain for static map DHCP entries
- If you specify DDNS Domain in a DHCP static map entry, it does not make its way through to dhcpd.conf
This is because... - 01:23 PM Revision 4c62f9e6: Fix DDNS domain for static map DHCP entries
- If you specify DDNS Domain in a DHCP static map entry, it does not make its way through to dhcpd.conf
This is because... - 01:23 PM Revision ea8e683a: Merge pull request #3109 from phil-davis/patch-1
- 01:22 PM Revision 323fb3ca: Merge branch 'RELENG_2_3_2' of git.pfmechanics.com:pfsense/pfsense into RELENG_2_3_2
- 01:22 PM Revision 3896b732: Code style and comments
- No functional change - just making style consistent
(cherry picked from commit 9d3e8723171c727cf43338bd8e95ab2bb7e6a... - 01:21 PM Revision 9488f42b: Code style and comments
- No functional change - just making style consistent
(cherry picked from commit 9d3e8723171c727cf43338bd8e95ab2bb7e6a... - 01:21 PM Revision 43d68f65: Merge pull request #3108 from phil-davis/codestyle
- 01:18 PM Revision a5a55231: Fix DDNS domain for static map DHCP entries
- If you specify DDNS Domain in a DHCP static map entry, it does not make its way through to dhcpd.conf
This is because... -
01:18 PM pfSense Packages Bug #6721: Incorrect OpenBGPd package scripts prevent use of both IPv4 and IPv6
- Steps to reproduce:
1. Install the latest OpenBGPd package;
2. Enter the needed settings, adding both IPv4 and IP... -
- Please read the title as: Incorrect OpenBGPd package scripts prevent use of both IPv4 and IPv6 - at the same time.
-
- Symtoms of this bug can be seen in the post below:
[[https://forum.pfsense.org/index.php?topic=116900.0]]
To co... -
-
-
-
11:39 AM Bug #6719: OpenVPN DNS Leak Windows 10
- I use mullvad vpn on one of my PCs which is running windows 10. As long as you are using openvpn 2.3.9 or newer, it h...
-
- Ran some quick tests and both ways work so long as the client is current. With the option present, DNS queries only g...
-
- All we could do is push the setting or add it to the config. Beyond that it's a Windows problem that isn't anything w...
-
07:40 AM Bug #6719: OpenVPN DNS Leak Windows 10
- I tried
*push block-outside-dns* @ pfSense & *setenv opt block-outside-dns* @ openVPN-Client
nslookup still tr... -
- Did you try the suggested fix on the ticket you linked? Put this in your advanced server config box:...
-
- Windows 10 DNS resolver always uses local DNS server, which defeats the point of --redirect-gateway / Road-Warrior sc...
-
- OK I can reproduce that. From reading OpenVPN's docs and forum, explicit-exit-notify is *not* intended for use with S...
-
09:14 AM Bug #6718: openvpn server exits if client has explicit-exit-notify 2 specified
- server config as below:
shared key
udp
tun
1104 port
BF-CBC
SHA1
ipv4 tunnel entwork - 10.10.10.0/24
do not f... -
- I can't reproduce this at all. I added that directive to a client and the server keeps running afterward, no problems...
-
- i have 2 pfsense boxes where 1 is a openvpn server and the other a client, if the client config has explicit-exit-not...
-
- Please try the code at pull request https://github.com/pfsense/pfsense/pull/3112 - /etc/inc/services.inc - and report...
-
- Looking in the code I found a couple of other things when I did some first looking:
1) A problem when specifying DDN... -
- Dear Maintainers,
we have recently discovered that pfsense 2.3.2-RELEASE does not treat Options in DHCP "Sub-"Pool... - 04:45 AM Revision 9d3e8723: Code style and comments
- No functional change - just making style consistent
08/15/2016
-
- I'm running 2.3.3.a.20160815.2144 with PR 3102/1, 3102/2, 3103, 3105, 3106 and 3107, testing the fix for https://redm...
-
07:37 PM Feature #3377: OAuth2 authentication in captive portal
- Thomas NOEL wrote:
> In Captive Portal we have native, ldap and radius authentication. Today, a lot of authenticatio... - 07:31 PM Revision ad4ed096: Improved solution to #6716
- (cherry picked from commit 0ed3b15981b4451efb11839d6ee7b9acf1ed1d84)
- 07:31 PM Revision 4c1c9e52: Improved solution to #6716
- (cherry picked from commit 0ed3b15981b4451efb11839d6ee7b9acf1ed1d84)
- 07:30 PM Revision 0ed3b159: Improved solution to #6716
- 06:54 PM Revision 913a3ea7: Fixed #6716
- (cherry picked from commit 4d4782fcd7213b5f279cb372853f5fedb07f6178)
- 06:54 PM Revision eb53e873: Fixed #6716
- (cherry picked from commit 4d4782fcd7213b5f279cb372853f5fedb07f6178)
- 06:48 PM Revision 4d4782fc: Fixed #6716
-
- Correction:
I did another test. After around 30 minutes after releasing the WAN interface, both gateways were offl... -
- A lot of progress made on this bug and other issues. Currently, I'm running the latest snapshot with the following PR...
-
-
-
-
-
03:07 PM Bug #6712: services_unbound.php Host Overrides don't change any unbound configuration
- Thanks to PiBa-NL on IRC who helped me troubleshoot this down to:
/etc/inc/system.inc
339 // prefer dnsma... - 02:56 PM Revision 571139c0: Fixed #6700
- (cherry picked from commit 40eca7e3a8abdff768e29e310ba945e74fdcfe17)
- 02:56 PM Revision 0e063307: Fixed #6700
- (cherry picked from commit 40eca7e3a8abdff768e29e310ba945e74fdcfe17)
- 02:55 PM Revision 40eca7e3: Fixed #6700
- 02:28 PM Revision dba59021: Fixed #6710
- (cherry picked from commit 13b92290e0fa367a76016a15ccf5e76ff77b0706)
- 02:28 PM Revision 247c0d9a: Fixed #6710
- (cherry picked from commit 13b92290e0fa367a76016a15ccf5e76ff77b0706)
- 02:27 PM Revision 13b92290: Fixed #6710
-
02:03 PM
Bug #6716 (Resolved): services_unbound_acls: Network "Delete" button is not hidden if only on network listed
-
02:00 PM
Bug #6716 (Feedback): services_unbound_acls: Network "Delete" button is not hidden if only on network listed
- Applied in changeset commit:4d4782fcd7213b5f279cb372853f5fedb07f6178.
-
01:46 PM
Bug #6716 (Resolved): services_unbound_acls: Network "Delete" button is not hidden if only on network listed
- Also help text in a repeatable section is duplicated if the last row is deleted
- 01:53 PM Revision 64941233: Fixed #6709
- (cherry picked from commit 3726918df1dc4744bb7ea694ec5c8f40de59d856)
- 01:53 PM Revision df57a1cf: Fixed #6709
- (cherry picked from commit 3726918df1dc4744bb7ea694ec5c8f40de59d856)
- 01:53 PM Revision 3726918d: Fixed #6709
- 01:46 PM Revision e0eadf80: Fixed #6703
- (cherry picked from commit e5343844c6de78feafae9e601b25bdf31f114a50)
- 01:45 PM Revision 5a30887e: Fixed #6703
- (cherry picked from commit e5343844c6de78feafae9e601b25bdf31f114a50)
- 01:45 PM Revision e5343844: Fixed #6703
- 01:39 PM Revision f7f0f1c5: Fixed #6706
- (cherry picked from commit b86938e7e19a09a5b1f3f54825193b57f7c73131)
- 01:39 PM Revision 5e40e7af: Fixed #6706
- (cherry picked from commit b86938e7e19a09a5b1f3f54825193b57f7c73131)
- 01:38 PM Revision b86938e7: Fixed #6706
- 01:34 PM Revision 1aa05d2b: Fixed #6705
- (cherry picked from commit d526fc2d2acc87af2ca829dfe01f0037e3368051)
- 01:34 PM Revision 089d1e3f: Fixed #6705
- (cherry picked from commit d526fc2d2acc87af2ca829dfe01f0037e3368051)
- 01:33 PM Revision d526fc2d: Fixed #6705
- 01:21 PM Revision e800783e: Fixed #6701
- (cherry picked from commit 03fd538eefd641771b6302370b901fe4ace3ab4f)
- 01:20 PM Revision d8d64a57: Fixed #6701
- (cherry picked from commit 03fd538eefd641771b6302370b901fe4ace3ab4f)
- 01:19 PM Revision 03fd538e: Fixed #6701
- 01:00 PM Revision d11cdca7: Fixed #6704
- (cherry picked from commit fd778d8bef8ea3b0e5dcc8007de242b6e2ac6d5a)
- 01:00 PM Revision d4879244: Fixed #6704
- (cherry picked from commit fd778d8bef8ea3b0e5dcc8007de242b6e2ac6d5a)
- 12:59 PM Revision fd778d8b: Fixed #6704
-
09:57 AM
Bug #6700 (Resolved): dhcp6 Related log entries
-
09:49 AM
Bug #6705 (Resolved): diag_routes "Rows to display" is off by one
-
08:40 AM
Bug #6705 (Feedback): diag_routes "Rows to display" is off by one
- Applied in changeset commit:d526fc2d2acc87af2ca829dfe01f0037e3368051.
-
09:48 AM
Bug #6704 (Resolved): diag_edit.php Go to Line limits
-
08:10 AM
Bug #6704 (Feedback): diag_edit.php Go to Line limits
- Applied in changeset commit:fd778d8bef8ea3b0e5dcc8007de242b6e2ac6d5a.
-
09:33 AM
Bug #6710 (Resolved): diag_resetstate.php confirmation prompt even if checkboxes unchecked
-
08:54 AM
Bug #6709 (Resolved): diag_resetstate select or all?
-
08:46 AM
Feature #6703 (Resolved): diag_edit.php suggestion
-
08:40 AM
Bug #6706 (Resolved): diag_routes Use a regular expression description or use
-
08:22 AM
Bug #6701 (Resolved): diag_authentication.php related status link
-
- Also just noticed the queue name could do with a little more space between it and the left edge of the table.
08/14/2016
- 10:03 PM Revision 6756052b: Call services_dhcpd_configure with the right parameter
- Previously code segment for v4 would call both v4 and v6. Fixed to call v4 and v6 where appropriate.
-
02:04 PM Bug #6687: Secure email fails with private CA
- The concept of an option to ignore certificate validation is completely unrelated to this issue.
-
05:35 AM Bug #6687: Secure email fails with private CA
- Any attempts to do certificate validation here should be completely optional here (as in, a separate checkbox). *Way*...
-
- I spent a while doing some testing with pfsense and 4 clients. Your latest fix definitely seems to have fixed the pro...
-
- I backed out of the previous changes (PR plus edits) and installed the updated PR. I tested it on a hyper-v server wi...
-
- This certainly works. Would suggest using the forums for help.
08/13/2016
-
- 1) diag_traceroute.php the IPv4 traceroute when
resolving IPs to hostnames outputs both,
but the IPv6 traceroute6 o... -
- I hope you don't mind that I place multiple things in a single ticket here about diag_testport:
1) can output erro... -
- This is also related:
diag_tables has "Related status" shortcut for "aliases" that
goes to same diag_tables page.... -
05:38 PM
Bug #6701: diag_authentication.php related status link
- Thanks Jeremy,
I'll look at this (and the rest of your list) on the next couple of days. -
- The diag_authentication "related status" icon links to same page :)
$shortcuts['authentication']['status'] = "diag... -
- be consistent in naming or add more doc details
to the diag_tables page as custom tables are called "aliases" elsewh... -
- services_unbound.php
I cannot get any Host Override to be configured with unbound.
/var/unbound/host_entries.conf ... -
- diag_states_summary is not intuitive as each table has two columns
with same "# States" header.
first is for $ipinf... -
07:46 PM Bug #5993: dhcp6c not started until an RA received
- I've updated my PR with another commit (almost the same I sent you via PM a few hours ago):
https://github.com/pfsen... -
- From my reply to your PM, based on a discussion with an engineer at my ISP, my understanding is the following:
> T... -
- Copying the info I shared on my reply to your PM on the forum.
> From my understanding, the whole point to setting... -
- I was holding off on upgrading to the latest snapshot because PR 3092 wouldn't install. However, I noticed today that...
-
- Unable to reproduce. Loaded up pfSense-CE-2.3.2-RELEASE-4g-i386-nanobsd-vga.img and hostnames in aliases worked fine....
-
08:18 AM Bug #6698 (Rejected): Hostname updates in Alias didn't work
- I have a fresh 2.3.2 install on i386 on a 4gb cf card (nano version). Hostnames in Alias didn't work. On the firewall...
-
- Unable to reproduce. Loaded up pfSense-CE-2.3.2-RELEASE-4g-i386-nanobsd-vga.img and filter reload worked fine.
Ple... -
- I have a fresh 2.3.2 install on i386 on a 4gb cf card (nano version). New rules didn't apply automatically. I have to...
-
- See also #6707
-
- Duplicate of #6393
That page needs significant work. -
- it appears the diag_smart is broken.
For example, its has
$start_script = "/usr/local/etc/rc.d/smartd.sh";
and ... -
- diag_resetstate.php if the checkbox is UNchecked,
clicking "Reset" still prompts "Are you sure you wish to Reset?"
... -
- diag_resetstate.php header says "Select States to Reset"
but the docs there says "will remove all entries from the
... -
- the diag_sockets.php info says sockstat uses capital -L
when using the lowercase -l.
It does not use -L and it does... -
- diag_routes "Use a regular expression to filter IP address or hostna
mes" actually works to match any field like fla... -
- the diag_routes "Rows to display" is off by one as it includes
the header line too. If you choose 10 you would want... -
- Edit File "Go to Line" selection box allows negative numbers and
line numbers longer than the file contains -
- suggestion for the Edit File have the input box have some
description or label like "Path name" or "File name or di... -
- syntax error in the PHP execution in Command Prompt menu
should not cause a crash detection to suggest reporting to ... -
- icon for Related log entries for the DHCPv6 Server (and relay) is
for logfile=dhcp but that doesn't match anything s... -
- White squares around the numeric values in the Status / Queues page, I've tried Safari & Firefox, both show the same....
08/12/2016
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- 04:41 PM Revision acfbc960: Protect package_reinstall_all()
- If one restores a config.xml without packages, there will be a warning about invalid argument supplied for foreach()....
-
- 04:40 PM Revision 62630ddc: Be sure that user_settings for widgets is an array
- (cherry picked from commit 5aad73235c1965e9f4c000244ca657ac9d1e4f68)
-
- 04:38 PM Revision 1707b6c6: Fixed to properly save configs in PPPs interfaces
- (cherry picked from commit 545a7850ea37cd8c379cc75428353ad0089f2bd3)
- 04:38 PM Revision 2ee79571: Fixed to properly save configs in PPPs interfaces
- (cherry picked from commit 545a7850ea37cd8c379cc75428353ad0089f2bd3)
-
-
-
- 02:59 PM Revision f97cd756: Fix typo leading to syntax error
- 02:55 PM Revision 5eda5816: Protect package_reinstall_all()
- If one restores a config.xml without packages, there will be a warning about invalid argument supplied for foreach()....
- 02:27 PM Revision 5aad7323: Be sure that user_settings for widgets is an array
-
- If I'm not mistaken it should link here: ...
-
07:08 AM Bug #6695: issues LAGG and openvpn TAP
- it works in 2.1.5 and 2.2.5.
But I understand that you would not supported this configuration -
- That is not, and has never been, a supported configuration.
-
- I have 2 LAGG openvpn TAP mode.
If I disable and enable a VPN, then the VPN is down (dasboard: 'Unable to Contact se...
08/11/2016
- 07:44 PM Revision 545a7850: Fixed to properly save configs in PPPs interfaces
-
-
-
-
-
-
-
-
- - Added timeout parameter for SMTP configuration
- Removed STARTTLS option, it's enabled automatically by pear-Mail w... -
-
- 02:21 PM Revision 79581554: Ensure extensions.ini is readable by non root users
- https://redmine.pfsense.org/issues/6686
-
-
12:44 PM Bug #6694 (Resolved): Change setting at interfaces_ppps_edit.php not working
- When changing the settings at the page interfaces_ppps_edit.php there is always the following error:...
-
-
11:02 AM Feature #6546: pfSense should support logging to e.g. ELK stacks
- Parsing syslog input is indeed dog simple in Python with asyncore. I should be able to just glue this together to my ...
-
- We run 64-bit images exclusively on ours, never 32-bit.
-
09:56 AM Bug #6692: APU1D crashes on boot with pfSense 2.3.2 on the APU1D
- Apparently i386 works, and this flaw is only with the 64-bit port.
-
- We regularly test on the APU hardware we have and there are no problems we have found. Please post on the forum first...
-
- I upgraded from pfsense 2.3.1_r5 to 2.3.2, and the pfSense crashes on boot, the reboots endlessly on loop.
The liv... -
- Users and groups already have privileges to control page access. Post on the forum for assistance or read the documen...
-
09:29 AM Feature #6693 (Rejected): Security Groups
- Would it be possible or is it already possible to create security and select what the user/group has access to and wh...
-
- agreed on it being a dupe. Not sure how I missed 5999 when I searched initially.
-
05:55 AM
Bug #6678: Virtual IPv6 IP (IP Alias) on a DHCPv6-PD tracked interface causes inconsistencies
- This looks like it might be a duplicate of https://redmine.pfsense.org/issues/5999.
-
06:20 AM
Bug #6691 (New): dhcp6c quits after only two tries if no response was received
- Last night my ISP connection went down for a few hours, presumably for maintenance on their end. A few minutes into ...
08/10/2016
-
-
-
-
-
- Strips 802.1q tagged traffic from an interface when running inline IPS mode.
Traffic shapper no longer works as one ... -
- Adding a "Go here to enable" link to the error message seems like it would be helpful.
If I'm not mistaken, then l... -
- CHAP.inc removed in commit:6989a7c
-
- Someone who can reproduce it reliably needs to get the details of how to reproduce it reported to the Quagga project ...
-
08:46 AM pfSense Packages Bug #6305: Quagga problems updating routes / mistakenly showing "kernel"-routes while they are not
- Any update on the topic?
-
- I now have that Python code wrapped up as a class, for use with Python logging. A current limitation is that logging ...
-
- If that example you posted is the one that didn't work, I can see why. Looks like ">" was changed to ">" twice...
08/09/2016
-
08:57 PM Bug #6688 (Resolved): Special characters in a password cause problems
- With the following config snippet (some info redacted), pfsense reports:
php-fpm[71756]: /services_dyndns_edit... -
- If a private CA such as a self signed enterprise CA is in use, the CA is not recognized when establishing SMTP connec...
-
-
-
-
-
-
03:55 PM pfSense Packages Bug #5749: OpenVPN Export Certs with password, password doesn't open .pk12 container.
- I tried using "@" and "." in the password and both worked fine.
Looking at the JS code, it's using the escape() fu... -
- Is it only "+" that causes a problem or have you tried other special characters as well?
The way the password is s... -
-
- This file is being removed in 2.4.
If a 2.3.3 is issued, it would be desirable to add a chmod to 644 following cre... -
- /usr/local/etc/php/extensions.ini is owned by root and created with 600 permissions. This prevents proper initializat...
-
-
- I have observed that executing the following code does not seem to actually change anything in config.xml -- so I thi...
-
02:45 AM pfSense Packages Bug #6129: zabbix agent/proxy 2.4 not ported to pfSense 2.3
- I would also like to see it come back. As we can't upgrade all our boxes to pf2.3 in one day we have a problem. 2.3 D...
08/08/2016
-
-
- I looked into the gateway status issue. After pfsense boots with PR #3092 installed, the status of WAN_DHCP6 is unkno...
-
- Phillip Davis wrote:
> The text typo was in existing code, so I made a separate pull request to tidy that up:
> htt... -
- Phillip Davis wrote:
> The text typo was in existing code, so I made a separate pull request to tidy that up:
> htt... -
-
-
- This will need a target version set so that it will appear in release notes some time. Not sure what you guys are goi...
-
09:14 AM
Feature #6674 (Resolved): Custom widget preference settings per user
- PRs tested and merged. Thanks Phil.
- 12:49 PM Revision 96d2f02e: Text typo
- Noted by Daryl Morse in comment on Redmine bug 6637.
(cherry picked from commit bf6ae0ad277710ffa64ee0967c5d4f717c2bc... - 12:49 PM Revision 32916e5c: Text typo
- Noted by Daryl Morse in comment on Redmine bug 6637.
(cherry picked from commit bf6ae0ad277710ffa64ee0967c5d4f717c2bc... - 12:49 PM Revision 72aa662b: Merge pull request #3094 from phil-davis/patch-1
-
- Any update on this? I'm having the same issue on 2.3.2. Using openvpn-client-export 1.3.8 (just reinstalled it as wel...
-
- We don't have anything that would be forcing that to 1400 that I can see. I have a local setup here with LAGG and VLA...
-
10:54 AM Bug #6685 (Closed): LAGG groups get stuck with an unconfigurable 1400MTU with em NICs.
- I'm not sure of the exact scope of this issue, but I can at least say it happens when reproducing my environment.
... -
09:15 AM
Bug #6676 (Resolved): Delete NAT rule with associated firewall rule does not update firewall separators position
- Fixed by https://github.com/pfsense/pfsense/pull/3089
-
09:12 AM
Bug #6669 (Resolved): index.php: Adding a new widget corrupts the settings for existing widgets
-
- Tested and working here as well
-
- Tested this with a long password that failed in 0.4.21.
Works as expected in 0.4.22. Rejects incorrect password. R... -
05:02 AM Bug #6528: The captive portal cannot be used on interface lan since it is part of a bridge but works anyway
- Orsiris de Jong wrote:
> Screamed horray to quick !
> When the interface the CP is binded to is bridged, everything... - 03:56 AM Revision bf6ae0ad: Text typo
- Noted by Daryl Morse in comment on Redmine bug 6637.
08/07/2016
-
- The text typo was in existing code, so I made a separate pull request to tidy that up:
https://github.com/pfsense/pf... -
- I'm currently testing the latest development snapshot (as of the time of this post) with the latest patch from (DHCP6...
-
01:44 PM pfSense Packages Bug #6684 (Resolved): Setting IKEv2 Phase 2 in Mobile Config appears to generate invalid Apple Profile
- Setting "Phase2 PFS Group - Provide the Phase2 PFS group to clients (overrides all mobile phase2 settings)" in Mobile...
08/06/2016
-
02:28 PM Bug #6675: Port Forward on LAN does not work in 2.3.x
- Only you correcting what you said above in pfSense own documentation just finding something interesting, he recommend...
-
- Daryl Morse wrote:
> I'm currently testing the latest development snapshot (as of the time of this post) with the ... -
06:14 AM Feature #2358: NAT64 support
- UPVOTE. I'd love to be able to set up an IPv6-only network and just use NAT64 to redirect old requests.
08/05/2016
-
10:30 PM Revision eea35b99: Improve the wording to make clear the legal restrictions for the use of the pfSense trademark.
- Reviewed by: jimt
(cherry picked from commit d689bc7df5601d1a50aaccc3d75472099cd942b7) -
- Reviewed by: jimt
-
-
-
-
-
-
10:21 AM Bug #6683: Empty page 'Firewall: NAT: Port Forward' when Read-Only rights
- OK, sorry Jim. But why no delete the right "WebCfg - Firewall: NAT: Port Forward page" if it does not work ?
-
- To create a read-only user, give them the "Deny Config Write" privilege.
-
- Hi,
To reproduce the issue :
* add a NAT Port Forward rule with admin account
* add a new user "john" (no group ... -
- The state table is fibbing to you a little bit in that case. pf is sending the traffic out the correct WAN, but the i...
-
06:50 AM Bug #6682 (Not a Bug): OpenVPN Client does not use "interface" configured. Connection always established through default gateway.
- Tested with 2.3, 2.3.1 and 2.3.2
Test scenario: configure multiple WANs, use WAN1 as default gateway, configure Open... -
- I still haven't had a chance to switch my LAN over to this software, but I'm aware of three other Telus users who are...
08/04/2016
- 10:04 PM Revision 72f91833: pfSense.css: Fix sortable tables' font
- 10:04 PM Revision 98ea394a: Experiment using the OS' native font stack
- Following the steps of bfbfa4dd254c110db4122925d0a3716a34d4c664,
experiment using the OS' native font stack.
Obtaine... - 10:03 PM Revision 802029ce: pfSense.css: Fix sortable tables' font
- 10:03 PM Revision 4310baaa: Experiment using the OS' native font stack
- Following the steps of bfbfa4dd254c110db4122925d0a3716a34d4c664,
experiment using the OS' native font stack.
Obtaine... -
-
09:48 PM Revision 6ab43547: Update pfSense.pot
- (cherry picked from commit 51c5313df8b9a9470cad9031b3e93594a4728c9e)
-
- The setPattern() thing ain't usable for this and just causes regressions.
(cherry picked from commit c411661a8e8f9f9e... -
- is_URL() from util.inc is way too limited for this purpose.
(cherry picked from commit 8ff248d6a3f31dba42c4c64b529092... -
- (cherry picked from commit 4b79a9d443c4e16d6ffa304775aec79938d2988c)
-
- is_URL() from util.inc is way too limited for this purpose.
(cherry picked from commit 483816313924f87707bca0aa983c73... -
- 09:36 PM Revision db392e36: Fix a redundant HTTP "User-Agent" string.
- CURLOPT_USERAGENT expect the value to the user-agent string, not the entire key-value pair.
Before this fix, HTTP hea... - 09:36 PM Revision 2d8770b2: Fix a redundant HTTP "User-Agent" string.
- CURLOPT_USERAGENT expect the value to the user-agent string, not the entire key-value pair.
Before this fix, HTTP hea... -
-
-
-
- If I need is more of the same as Squid is to work with the transparent proxy, redirecting only port 80 and not all tr...
- 09:25 PM Revision 0b95ff4c: services_dhcp: Ignore BOOTP queries
- BOOTP leases do not have a maximum lease time by default, this could
potentially lead to a DHCP address pool exhausti... -
-
- PR has been merged, thanks!
-
- Pull request has been merged. Thanks
-
- @Pi Ba
I agree that it should not be possible to end up with empty entries in the config but in the case that someho... -
12:54 PM pfSense Packages Bug #6511: In some circumstances the HAProxy clone front-end button can add blank list entries to the front end being cloned resulting in a config that cannot be applied.
- @Steve, the first issue of empty items being added when duplicating should be fixed in next version..
https://github... -
-
- Zabbix agent and proxy 3.0 is available on pfSense 2.3. If you see only Zabbix agent or proxy 2.2 or 2.4, you must st...
-
- Uhm... 3.0.x LTS is in fact the only version available in pfSense 2.3.x packages.
-
- I just pushed a fix to change this to SHA512, which is working well even with long passwords (I only tried up to 32 c...
-
- The password handling in squid for local auth is using crypt() with default settings and cutting off passwords short ...
-
- Please post on the forum or mailing list for assistance with your issue. It's highly unlikely to be a bug, but if it ...
-
08:42 AM Bug #6680 (Not a Bug): pfSense web ui freezes after clicking on Diagnostics->ARP Table
- For some reason, when I try to list the arp table, pfsense freezes and I need to restart PHP-FPM via console.
2.3.... -
-
- This is resolved with version 2.7.4_1 of the nut package.
-
-
06:30 AM Bug #6679: No config option for "limited" parameter in Default/Custom Access Restrictions in NTP
- KOD flag also toggles limited.
Sorry for opening this ticket. -
- Now limited parameter is always included in restrict config lines.
Older Netapp filer uses sntp and sends 3 ntp qu...
08/03/2016
-
- In addition, this messes up the snort default pass list, adding the VIP instead of the actual interface IP.
-
- 2.3.2-RELEASE (amd64)
WAN interface gets a IPv6 /60 prefix delegation from my ISP. (example: 2001:1:2:30/60) My... -
-
-
-
- +1, tested and working, thanks. ;)
-
- Fix works fine, the older release is no longer broken by the newer pkg.
If you have a system stuck in the older st... -
- I've pushed a fix for that, it's in pkg-1.8.7_1
-
-
-
-
-
-
-
- This reverts commit ebc5576c4f6f1afd228b6d8c66c1af0599e990c3.
-
- OK, that I can reproduce. I have adjusted the subject and description to be a more clear/accurate representation of t...
-
- Did little more testing.
It seems that if there is an carp address assigned to interface the interface will come u... -
- An interface can show as "up" as long as it has a link. A VLAN will exist at the OS level if a tag is defined. The di...
-
- When a CARP VIP is configured for a disabled interface, it is still configured by pfSense during the boot process eve...
-
- 11:53 AM Revision 4e5477ea: Display local DHCP lease times in 24-hour clock
- It seems odd to me that when the times are displayed in UTC they have
24-hour clock, but when displayed in local time... - 11:53 AM Revision e7dc4d04: Merge pull request #3080 from phil-davis/local24
-
11:47 AM Revision 4de9a6fa: Update firewall rules separators when NAT associated rule is deleted.
- Bug: https://redmine.pfsense.org/issues/6676
(cherry picked from commit 7475d7b337c0a08dc4d6636f33b0998067f26008) - 11:47 AM Revision ebdf2532: Merge pull request #3089 from NOYB/NAT_Delete_Associated_Firewall_Separators
- 11:46 AM Revision be59d667: Save widget settings per user
- For users that have "custom settings" enabled, save the "tool" settings
of their widgets on a per-user basis.
User th... - 11:46 AM Revision b5123dfc: Merge pull request #3088 from phil-davis/widgetconfig
- 11:43 AM Revision 21915c63: Some tweaks to improve alignment in table with checkbox
- 1) If a checkbox does not have a description (even if it is empty), layout will be broken as checkbox won't be aligne...
- 11:43 AM Revision 440f621a: Merge pull request #3056 from NewEraCracker/design-tweaks
-
- Works for me, also works for the original reporter on the forum. Closing out.
-
- Applied in changeset commit:1ea1b228285dfa60da6732eba54dc03b932eb92f.
-
- Looks like an easy fix for this missing field. I have a patch I'm testing that adds an optional OU field, works OK to...
-
-
-
-
-
- Duplicate of #6672
-
- Reflection wouldn't come into play for a rule such as that. If the client and server are on the same subnet, you need...
-
- Bug: https://redmine.pfsense.org/issues/6676
-
-
Fix: https://github.com/pfsense/pfsense/pull/3089
-
-
2.3.2 - Delete NAT rule - bug?
https://forum.pfsense.org/index.php?topic=116099.0
08/02/2016
-
- Good evening everyone, updated my pfSense from 2.2.6 to 2.3.2 this week and 2 rules Port Forward on the LAN, one to r...
-
-
-
-
-
-
-
- The ability to save custom dashboard widget layout and various other custom GUI preferences on a per user basis was a...
-
-
-
-
-
-
-
-
-
- Hello,
I use a paied wildcard certificate *.domain.com and I need to generate a CSR (Certificat Signing Request) a... -
03:43 PM Bug #6672 (Resolved): CSR missing OU, same with internal certs missing OU
- Seems Org is there but Org Unit is missing. This is required by many CAs
See thread here
https://forum.pfsense.o... -
-
-
-
-
-
-
-
- I'm not sure that would be viable but Renato would know better than I. You have to upgrade pkg to the new version to ...
-
- Noticed a lot of complaints on the forums as well in many different threads. Wouldn't locking the pkg package itself ...
-
- In this case it actually turns out that the problem is the new version of 'pkg' needs a different command line parame...
-
- None of the XML_RPC_Client() calls we have specify a proxy, and I can't reproduce a problem here. When I specify a pr...
-
04:22 AM Bug #6670 (Not a Bug): XMLRPC failure after setting proxy settings
- Hi,
environment : It's a pfsense HA for internal LAN firewalling. It does not have direct access to internet. In o... -
- Duplicate of #6665
-
- See https://redmine.pfsense.org/issues/6665; you need to upgrade to 2.3.2 to get the package manager GUI back.
-
- Hi,
After installing zabbix agent the package manager is unable to list installed packages and say :
Unable to ... - 05:19 AM Revision 2b7d0520: Save widget settings per user
- For users that have "custom settings" enabled, save the "tool" settings
of their widgets on a per-user basis.
User th... -
04:49 AM Bug #6634: DHCP Server "TFTP Server" field should allow URLs
- It works!
- 02:51 AM Revision cc10b474: Fixed #6669
- Read widget config before adding a new one. (Was starting a new array)
(cherry picked from commit 236e6a54e9a93284ca... -
- Perhaps static play icon would be better perceived as the contrast to static stop icon for for services status indica...
- 12:07 AM Revision c8faf384: Fixed #6669
- Read widget config before adding a new one. (Was starting a new array)
(cherry picked from commit 236e6a54e9a93284ca... - 12:06 AM Revision 236e6a54: Fixed #6669
- Read widget config before adding a new one. (Was starting a new array)
08/01/2016
-
-
09:42 PM Revision 9543affb: dpinger: fixed check for pidfile length #6505
- (cherry picked from commit 4aaf38742563c427b42a813387d84246ff20a2f2)
-
-
09:41 PM Revision 7fa32308: replace attribute 'name' to 'id' in openvpn status
- (cherry picked from commit 5a5a11cd489bbf15e868c1607c74824c128d693f)
-
-
-
-
-
-
-
- 08:56 PM Revision ad73ced6: Remove '-x' flag from dhcpwithoutra launch of dhcp6c
- This is the equivalent fix for the RELENG_2_3 branch to pull request #3078
-
-
-
-
-
-
-
-
-
-
-
-
-
-
07:20 PM
Bug #6669: index.php: Adding a new widget corrupts the settings for existing widgets
- Applied in changeset commit:236e6a54e9a93284ca170b68aa1188dfaa195c3d.
-
07:10 PM
Bug #6669 (Feedback): index.php: Adding a new widget corrupts the settings for existing widgets
- Was adding configuration for a new widget to a new config array instead of reading the existing config.
-
07:03 PM
Bug #6669 (Resolved): index.php: Adding a new widget corrupts the settings for existing widgets
- See: https://forum.pfsense.org/index.php?topic=115934.msg644220#msg644220
-
-
- This is the first of a set commits to start replacing big
builder_common.sh by smaller and specific scripts to do nec... -
- PR has been merged, thanks!
-
-
-
-
- Well, you're running it, so I won't argue (too much.) ;)
-
- This is a symptom/byproduct of the other missing feature, so it is definitely a duplicate. Solve the other, and this ...
-
- This is NOT a duplicate. While 3971 might resolve this bug as a side effect, a fix for this bug might not fulfill th...
- 03:36 PM Revision f720117b: Experiment using the OS' native font stack
- Following the steps of bfbfa4dd254c110db4122925d0a3716a34d4c664,
experiment using the OS' native font stack.
Obtaine... - 03:36 PM Revision 4372f8a4: pfSense.css: Fix sortable tables' font
-
- Xander Venterus wrote:
> If its locked, then you just need to set it to none, and have your mouse over the apply but... -
- Daryl Morse wrote:
> Chris Buechler wrote:
> > merged this for 2.4 as it needs more baking time in snapshots than w... -
11:52 AM Bug #6448: Mousing over aliases on disabled rules makes hint difficult to read
- The opacity of the popover is inherited from the parent element. AFAIK there is no easy way to avoid inheritence of o...
-
- Chris Anderson wrote:
> I have the same issue with the latest BETA version of Chrome. It works in the latest stable ... -
10:31 AM Bug #6657: Unable to add network in the source section of a LAN firewall rule
- I have the same issue with the latest BETA version of Chrome. It works in the latest stable release, and in other bro...
07/31/2016
-
04:53 PM Bug #6668: IPSec tunnel + L2TP/IPSec VPN - wrong PSK chosen by pfSense
- ERRATUM:
@ipsec.secrets@ (mistyped) should be:... -
- Setup:
1. IPSec, IKEv1 site to site tunnel, PSK, Main mode. FQDN identifier - talking to a Mac OS server (racoon)
... - 12:49 PM Revision 6d53301b: services_dhcp: Ignore BOOTP queries
- BOOTP leases do not have a maximum lease time by default, this could
potentially lead to a DHCP address pool exhausti... -
11:47 AM Bug #6481: loading EAP_RADIUS method failed
- I wanted to jump in to say I just had this same issue on 2.3.2 today. Same log message and everything. Confirming y...
-
-
- The setPattern() thing ain't usable for this and just causes regressions.
-
09:23 AM Feature #5112: LDAP support for Captive Portal
- I'm interested to this feature. It will be officially implemented?
-
- is_URL() from util.inc is way too limited for this purpose.
-
-
-
- is_URL() from util.inc is way too limited for this purpose.
-
- As mentioned in #6667, this also negatively impacts those with /var in RAM
-
- Duplicate of #3971
-
- Duplicate of https://redmine.pfsense.org/issues/3971 (this is a more generic problem, even without tmpfs-based /var, ...
-
07:52 AM Feature #4351: Allow to disable BOOTP in DHCP server
- https://github.com/pfsense/pfsense/pull/3086
-
- I am also seeing BOOTP queries being served for captive portal users. The problem is that BOOTP leases do not have a ...
-
- Chris Buechler wrote:
> if you open siproxd on WAN in firewall rules, you get what you're asking for security-wise. ... -
- @Rene: Try https://github.com/pfsense/pfsense/pull/3083
-
12:23 AM Bug #6666: IPV6 Log Spam?
- Sorry:
Version: 2.3.2
Priority: Low
Spelling mistake on last line, should be DHCPv6 daemon
07/30/2016
-
- The file "/var/db/dhcp6c_duid" contains a DHCP Unique Identifier (DUID) that a host uses to uniquely identify itself ...
-
- I have a fully functioning dual stack IPv4 static and Prefix Delegated /56 IPv6 DHCPv6 network running over PPPOE. Th...
-
- (Same goes for merely installing a package, not just upgrading.)
-
- As described here: https://forum.pfsense.org/index.php?topic=116026.0 - when you upgrade some package before upgradin...
-
05:16 AM Bug #6664: It's impossible to use HE.NET tunnel iface as a parent for OpenVPN instances
- Yet another workaround: Specify a local port instead of empty/0. Looks like *$iface_ip* is not properly initialized w...
-
- Setup:
* HE.NET tunnel iface [for example, WAN_HE]
Steps to reproduce:
* Create an IPv6 OpenVPN instance on pare... -
- Setup:
# WAN PPPoE WAN
# HE.NET tunnel on WAN
# Static IPv6 on LAN
Steps to reproduce:
* Create a UDP6 TAP Ope...
07/29/2016
-
- The "Installed Packages" widget exists for those who want to know what packages are installed and which have availabl...
-
07:13 PM Feature #6661 (Rejected): Show # of packages available for update on dashboard
- The ability to show the number of packages that need updating under the system update status on the System Informatio...
-
- When using pkg_edit.php, the checkbox alignment is off when using the <sethelp> XML tags.
See attached pic.
Can... - 02:55 PM Revision ce9a9572: Fix a redundant HTTP "User-Agent" string.
- CURLOPT_USERAGENT expect the value to the user-agent string, not the entire key-value pair.
Before this fix, HTTP hea... -
- Confirmed, but it's not a regression. As far as I can see, default routes are never removed except by ppp-linkdown an...
-
08:14 AM Bug #6659 (Resolved): Default routes are not being removed after deletion
- I have noticed that when a default route is deleted via GUI, they are not removed from the system, only from the scre...
-
- I can't reproduce it using the settings you show. Make sure there are no extra spaces or anything else non-printable ...
-
05:58 AM Bug #6657: Unable to add network in the source section of a LAN firewall rule
- Destination host should be 8.8.8.8, but the error is the same.
-
- Phillip Davis wrote:
> That works fine for me - give more information about the data you enter and exactly which fie... -
- That works fine for me - give more information about the data you enter and exactly which field the "Please match the...
-
- Since 2.3.2-RELEASE, the following causes an "Please match the request format" error:
1. Go to Firewall / Rules / LA... -
09:38 AM Todo #6660: Rename "admin" to "root" in GUI, because in fact it is "root" on BSD level.
- Thanks Jim, for clarification.
-
- Both admin and root exist at the OS level but they each work in different ways. While the password for both accounts ...
-
- I think it will be more clear for new users and won't cause any misunderstandings.
-
- The DHCP Relay Service cannot be started on 2.3.2 with ath0, clients do not receive an IP address....
-
-
-
-
-
-
-
-
-
07/28/2016
-
- reassigned
-
07:20 PM
Bug #6601 (Feedback): Horizontal scroll bar on Installed Packages
- Applied in changeset commit:1cba7db475b142e8c1dd5edeb71b294ae01347d3.
-
04:35 PM Bug #3334: Status/Traffic Graph isn't IPv6 ready
- IPv6 issue still present in 2.3.2
-
- Something is triggering it, usually a gateway outage. Post on the forum or mailing list for help diagnosing the actua...
-
03:38 PM Bug #6656 (Not a Bug): /rc.newwanip - Excessive Usage
- Currently having the following problem:
According to the systemlogs /rc.newwanip is executed every 3 minutes or so a... -
-
-
-
-
-
-
- The problem isn't the sudo package at all. It's that pkg was upgraded and the GUI doesn't understand the output of th...
-
11:57 AM pfSense Packages Bug #6655: Installing sudo package breaks webGUI system update capabilities and Package Manager on 2.3.1-RELEASE-p1
- I forgot to mention that removing the sudo package via ssh had no change aside from removing the package, the bugs st...
-
- After installing the *sudo* package through the System > Package Manager menu, our firewalls are no longer able to ch...
-
11:56 AM Bug #5652: Radius IETF Class Group Assignment - Incorrect Standard
- Phillip Hernandez wrote:
> I disagree with using Cisco-AV:Pair and believe that using Filter-Id is a better option. ... -
11:28 AM Bug #5652: Radius IETF Class Group Assignment - Incorrect Standard
- I disagree with using Cisco-AV:Pair and believe that using Filter-Id is a better option.
Thanks
-
- Deleted.
-
- Phillip Davis wrote:
> That looks like a bug that has been around for a while - it is not reversed, it is doubled.
... -
11:24 AM pfSense Packages Bug #6654: siproxyd Table issue
- System: Netgate SG-2440 (amd64)
-
- Under services-> siproxyd -> Registered phones
Table is not aligned correctly and not showing correct number of re... -
- Applied in changeset commit:f1773759e286fa7dfcaa10965fc7909b7abf560f.
-
-
https://forum.pfsense.org/index.php?topic=115753.0
Log entries to be included in the filtering is capped/restr... -
05:57 AM Bug #6528: The captive portal cannot be used on interface lan since it is part of a bridge but works anyway
- Screamed horray to quick !
When the interface the CP is binded to is bridged, everything works except for the downlo... -
01:33 AM Bug #6637 (Confirmed): pfSense blocks return traffic (mostly TCP) on 2.3.1-RELEASE-p5
- There is a known fix for this on PR 207598 that should be easy to import.
all FreeBSD 10.x base versions affected -
- that's not true, they work fine. Please post to the forum for assistance.
-
12:17 AM Bug #6653 (Not a Bug): DNS Forvarder dont worked Host Overrides
- DNS Forvarder ignored all Host Overrides records.
-
12:20 AM pfSense Packages Feature #6651: Loopback interfaces
- For dynamic routing protocol.
As example border router supply originate option ( default gateway ) and use of lo* to...
07/27/2016
-
-
A potential workaround may be to use a different host name for other NAT'ed ports.
-
- Hint: Use haproxy with SNI and forget the ports. See https://github.com/PiBa-NL/pfsense-haproxy-package-doc/wiki (and...
-
05:04 PM Bug #6650 (Resolved): Option needed to disable HSTS
- HSTS is based solely on hosts, and not port numbers. As a result, any HTTPS devices behind the pfSense are unreachabl...
-
- I'm curious, what use case do you have for additional lo* interfaces?
-
- major think is create additional lo* interface as right now we can define LAN or WAN.
-
- you can already do that with virtual IPs on localhost. That doesn't allow cloning lo0 to lo1, though I don't think an...
-
- Assign additional ip addresses like...
-
- manipulate loopback interfaces in what way? You can already set static routes to lo0 to null route, and add VIPs on l...
-
- Hello Everyone,
I would like place request add ability manipulate loopback interfaces through web ui.
Use cases wh... -
- For support assistance of that nature, use the forum or mailing lists.
-
08:33 PM Bug #6648: pf V2.3.1 - Enabling captive portal failed to create captive portal security group
- Thank you for the reply, and please pardon my ignorance. Could you please tell me how to assign privileges to a group...
-
- That is exactly how it is supposed to work. It is up to the firewall admin to create a group or add the privilege dir...
-
- on a fresh install, enabling Captive Portal failed to create the captive portal security group. could not assign user...
-
04:17 PM Feature #3718: radvd - enhancement proposal: ability to advertise routes and some fixes - patches attached
- Updated the patch for version 2.3.2.
-
-
-
-
- Your gateway monitoring for that WAN must not have been correct. For example, pfSense may have been pinging the modem...
-
- In this situation you need to specify an alternate monitor IP for the router/gateway. If you let it use the default, ...
-
- there are two internet router members added to a Gateway Group. one router (4G wireless modem) became unregistered fr...
Also available in: Atom