Project

General

Profile

Activity

From 08/06/2016 to 09/04/2016

09/04/2016

06:34 PM Bug #6762: "Please match the requested format" error in Chrome when editing certain form fields
That has been addressed by commit https://github.com/pfsense/pfsense/commit/8ea3fd0569ac2b1681de5ba3fbc2a2cc20981ad6
...
Phillip Davis
01:20 PM Bug #6762: "Please match the requested format" error in Chrome when editing certain form fields
Looking at http://www.ecma-international.org/ecma-262/5.1/#sec-7.8.5 I'd say that Chrome is at fault:... Brian Candler
01:13 PM Bug #6762: "Please match the requested format" error in Chrome when editing certain form fields
I made the following patch to the live system, and now it works fine with Chrome.... Brian Candler
12:46 PM Bug #6762: "Please match the requested format" error in Chrome when editing certain form fields
Interesting idea.
This is using Chrome 53 under OSX. By positioning the cursor at both ends of the string I can se...
Brian Candler
12:28 PM Bug #6762: "Please match the requested format" error in Chrome when editing certain form fields
Sounds like your browser is inserting whitespace junk or whatever on "autocomplete". Kill Bill
12:13 PM Bug #6762 (Resolved): "Please match the requested format" error in Chrome when editing certain form fields
I created an alias called "firewall_management"
There was an existing rule which said allow inbound SSH on WAN (fr...
Brian Candler
03:03 PM Bug #6099: igmpproxy does not recognize upstream interface
Some brand new patches for the version that ships on freebsd-ports:
patch-src__os-freebsd.h is based on https://gi...
Jorge M. Oliveira
11:03 AM Bug #6761: Limiter doesn't limit at correct bandwidth
Michael Knowles wrote:
> Hi,
>
> As per my Reddit thread here (with the relevant screenshots), I am seeing reliab...
Michael Knowles
11:03 AM Bug #6761 (Not a Bug): Limiter doesn't limit at correct bandwidth
Hi,
As per my Reddit thread here (with the relevant screenshots), I am seeing reliable-but-wrong inbound bandwidth...
Michael Knowles
09:57 AM Bug #6011: IPv6 link local fails HTTP REFERER check
This PR has been merged a few months ago. Bug can be marked as resolved. Jorge M. Oliveira
09:50 AM Bug #6662: pkg_edit.php checkbox alignment issue when using the sethelp xml tag
This issue can be set to feedback.
This PR has been merged and should deal with the problem: https://github.com/pfse...
Jorge M. Oliveira
09:48 AM Bug #6686: PHP extensions.ini cannot be read by non root users
This PR has been merged on pfSense 2.3 branch: https://github.com/pfsense/pfsense/pull/3095
This ticket can be set t...
Jorge M. Oliveira
07:54 AM Bug #6435 (Duplicate): Unable to edit PPTP using interfaces_ppps_edit.php
Jim Pingle
05:04 AM Bug #6435: Unable to edit PPTP using interfaces_ppps_edit.php
seems to be a duplicate of #6732 Thomas Rieschl
07:22 AM Bug #6658: DHCP Relay not working on 2.3.2
And FWIW - this does not appear to be limited to AR9280. I managed to rescue some oldie 802.11a/b/g mini-PCIe card w... Kill Bill
07:03 AM Bug #6658: DHCP Relay not working on 2.3.2
I temporarily installed 2.4 alpha on a test box, and the wireless is completely broken there, the entire interface go... Kill Bill
06:41 AM Bug #6760: Editing WAN bridge interface breaks routing until reboot
Jim Pingle wrote:
> What do "netstat -rn" and "ifconfig -a" look like before and after? Any notable differences?
...
Kill Bill

09/03/2016

07:27 PM Bug #6658: DHCP Relay not working on 2.3.2
Hi Jim,
I have installed
https://snapshots.pfsense.org/amd64/pfSense_master/installer/pfSense-CE-memstick-serial-...
martin wüthrich
02:29 PM Bug #6658: DHCP Relay not working on 2.3.2
Could one or both of you try this on 2.4? Jim Thompson
01:16 PM Bug #6658: DHCP Relay not working on 2.3.2
I'm in the same Situation like described, except I have an "APU1" and my clients stay connected (they even authentica... martin wüthrich
06:48 PM Bug #6099: igmpproxy does not recognize upstream interface
By the way, I've coded a very hackish workaround (for version 2.3.3) that one can execute via Diagnostics > Command P... Jorge M. Oliveira
04:53 PM Bug #6099: igmpproxy does not recognize upstream interface
(I'm using original version of igmpproxy without any changes)
There is one thing I find very interesting.
On my t...
Jorge M. Oliveira
07:16 AM Bug #6760: Editing WAN bridge interface breaks routing until reboot
What do "netstat -rn" and "ifconfig -a" look like before and after? Any notable differences? Jim Pingle
04:59 AM Bug #6760 (Not a Bug): Editing WAN bridge interface breaks routing until reboot
Say you have a setup like this:... Kill Bill

09/02/2016

08:14 PM Revision 6df9b5cb: Obscured password field in system_authservers.php bind section
Fixed #6759
(cherry picked from commit 1c1f08f92e8841f7282280caeed7613edd810453)
Stephen Beaver
08:12 PM Revision 1c1f08f9: Obscured password field in system_authservers.php bind section
Fixed #6759 Stephen Beaver
07:31 PM Bug #6688: Special characters in a password cause problems
Have a look at the end of https://github.com/pfsense/pfsense/blob/master/src/etc/inc/upgrade_config.inc
You can add ...
Phillip Davis
05:05 PM Bug #6688: Special characters in a password cause problems
Although I don't really know PHP, I can dive into the code and poke around. It looks like it's pretty easy to do base... John Dickinson
07:19 PM Revision f02b8916: Merge pull request #3071 from phil-davis/Check_IP_Services
Renato Botelho
07:18 PM Revision d37c6564: Force changes in routing to be detected by the system
When dhcp6c without RA is enabled, dhcp6c isn't killed and respawned, this causes the system not being able to pick u... NewEraCracker
07:18 PM Revision e0bc2a6c: DHCP6 Before RA. Additions and ammendments
Replaced posix_kill() in kill_dhcp6client_process() with mwexec("kill -9 $pid"), this is because the posix_kill call ... Martin Wasley
07:18 PM Revision 455be09a: Merge pull request #3102 from NewEraCracker/patch-dhcp6
Renato Botelho
06:21 PM Revision f2c9194c: Force changes in routing to be detected by the system
When dhcp6c without RA is enabled, dhcp6c isn't killed and respawned, this causes the system not being able to pick u... NewEraCracker
06:21 PM Revision c4ddb03a: DHCP6 Before RA. Additions and ammendments
Replaced posix_kill() in kill_dhcp6client_process() with mwexec("kill -9 $pid"), this is because the posix_kill call ... Martin Wasley
03:20 PM Bug #6759: system_authservers.php - LDAP "Bind Credentials" password is not masked
Applied in changeset commit:1c1f08f92e8841f7282280caeed7613edd810453. Anonymous
03:14 PM Bug #6759 (Feedback): system_authservers.php - LDAP "Bind Credentials" password is not masked
Anonymous
02:54 PM Bug #6759 (Resolved): system_authservers.php - LDAP "Bind Credentials" password is not masked
On system_authservers.php when configuring an LDAP server, uncheck "Bind Anonymous" and there is a username and passw... Jim Pingle
02:36 PM Bug #6747: pfctl - getting high cpu usage
Remove one widget at a time from the Dashboard and test with:
top -SH
Then see which is causing the high cp...
BBcan177 .
08:38 AM Bug #6747: pfctl - getting high cpu usage
It only happens with firewall log widget and pfblockerng widget. The resources consumption (I'm not 100% sure if it's... Rafael Cunha
02:07 PM Feature #4606: PKI : CA signing external CSR
+1, would love to be able to sign external CSRs from within pfSense. (For both certificates and intermediate-CAs) Peter Bosgraaf
01:31 PM Revision 1e0d9c89: Improve dhcpd and dhcpleases reload
1) Avoid running services_dhcpd_configure() more times than needed.
2) Always restart dhcpleases after it's killed du...
NewEraCracker
01:31 PM Revision b85d0e03: Merge pull request #3122 from NewEraCracker/patch-11
Renato Botelho
01:30 PM Revision 8221f09c: Call services_dhcpd_configure with the right parameter
Previously code segment for v4 would call both v4 and v6. Fixed to call v4 and v6 where appropriate.
(cherry picked ...
NewEraCracker
01:30 PM Revision 59900c5c: Merge pull request #3105 from NewEraCracker/patch-8
Renato Botelho
01:28 PM Revision b9e9778a: Uniformize memory limits and remove old code (revised)
1) Allow setting a memory_limit up to 768M (Suhosin)
2) Remove old workarounds. Memory limits on config.inc will be n...
NewEraCracker
01:28 PM Revision e477e23b: Merge pull request #3101 from NewEraCracker/patch-5
Renato Botelho
11:54 AM Revision 02809cc6: Ensure only one instance of services_dhcpd_configure runs concurrently
This way kill and respawn will behave as they should for the dhcpd processes
(cherry picked from commit c69ea0051c55...
NewEraCracker
11:54 AM Revision 9f0679ef: Merge pull request #3103 from NewEraCracker/patch-7
Renato Botelho
11:51 AM Revision 8402a8de: Fix diag_dns ipaddr set to use in IP WHOIS and IP Info
- Do not call resolve_host_addresses() when hostname cannot be resolved
by gethostbyname(). The old check was consi...
Renato Botelho
11:47 AM Revision 7829c6d5: Fix diag_dns ipaddr set to use in IP WHOIS and IP Info
- Do not call resolve_host_addresses() when hostname cannot be resolved
by gethostbyname(). The old check was consi...
Renato Botelho
11:43 AM Revision 3c09378e: Removed unused variable $hostname
Renato Botelho
11:43 AM Revision 917e9c73: Removed unused variable $hostname
Renato Botelho
11:34 AM Revision 83469e50: Input boxes with setPattern validation should not contain escape characters as they are already properly considered 'lists of characters' even when not escaped.
(cherry picked from commit 8ea3fd0569ac2b1681de5ba3fbc2a2cc20981ad6) Pi Ba
11:34 AM pfSense Packages Bug #6740: https filtering with squid + squidguard error (ssl bump)
Looks like Diladele filter also has a problem with pfsense/squid combo.
[[https://groups.google.com/forum/#!topic/...
C Wood
11:34 AM Revision a7272e31: Input boxes with setPattern validation should not contain escape characters as they are already properly considered 'lists of characters' even when not escaped.
(cherry picked from commit 8ea3fd0569ac2b1681de5ba3fbc2a2cc20981ad6) Pi Ba
11:34 AM Revision cf62c4a8: Merge pull request #3127 from PiBa-NL/20160902_pattern
Renato Botelho
11:33 AM Revision 54bf6953: Outbound nat overview, show alias popup and edit options on source and destination, for both the address and port.
(cherry picked from commit d98e54b215a7798aa0cd9d8432340d6e6df762f5) Pi Ba
11:33 AM Revision bfe658f6: Outbound nat overview, show alias popup and edit options on source and destination, for both the address and port.
(cherry picked from commit d98e54b215a7798aa0cd9d8432340d6e6df762f5) Pi Ba
11:31 AM Revision 53e8071a: Merge pull request #3128 from PiBa-NL/20160902-outboundnat-aliashints
Renato Botelho
11:09 AM Bug #6758 (Resolved): 2 x Crash with "PHP Fatal error: Call to undefined function pfSense_interface_listget() in /etc/inc/interfaces.inc on line 80"
I have a second installation running on i386 10.3-RELEASE-p5 FreeBSD 10.3-RELEASE-p5 v2.3.2 on AMD Athlon(tm) 64 X2 D... Dan Lundqvist
11:06 AM Bug #6099: igmpproxy does not recognize upstream interface
Victor Toni wrote:
> It's the way the interfaces are looked up (internally) so its not directly related to your conf...
Lars Veldcholte
07:55 AM Bug #6757 (Not a Bug): nginx 504 Gateway Time-out when acces to system_certmanager.php
Using the firewall for that many certificates is an atypical use case for which it was not designed. From reading the... Jim Pingle
05:32 AM Bug #6757 (Not a Bug): nginx 504 Gateway Time-out when acces to system_certmanager.php
Sorry for my english ...
It's now impossible for us to acces our certificat listing. php-fpm use 100% of 1CPU and ...
Damien OBLETTE
03:11 AM pfSense Packages Bug #6756 (Resolved): Updating cloned backend in WebGUI updates the original backend instead of the cloned backend
This bug has appeared for me 3 times now when I clone an existing https to a new backend.
I have multiple SSL sites ...
Goran Tornqvist

09/01/2016

11:56 PM Revision d98e54b2: Outbound nat overview, show alias popup and edit options on source and destination, for both the address and port.
Pi Ba
10:59 PM Revision 8ea3fd05: Input boxes with setPattern validation should not contain escape characters as they are already properly considered 'lists of characters' even when not escaped.
Pi Ba
06:04 PM Revision 8d50c07c: Convert L2TP Server code to mpd5
Renato Botelho
03:00 PM Revision 2ce5cd33: Remove references to glxsb as it is not relevant to current supported platforms. Fixes #6755
Jim Pingle
01:30 PM Revision e4191be8: Add ng interface to pppoe group on mpd.conf and remove dead code from vpn-linkup script
Renato Botelho
12:23 PM Revision 2c0a3677: Convert PPPoE Server code to mpd5
Renato Botelho
10:10 AM Todo #6755 (Feedback): Remove GLXSB references from 2.4
Applied in changeset commit:2ce5cd33ef6434d3eb265c59f06e6ffb4930f0d9. Jim Pingle
09:53 AM Todo #6755 (Resolved): Remove GLXSB references from 2.4
Since 2.4 will not support i386, any references to glxsb in the GUI and build scripts can be removed as that was spec... Jim Pingle
02:08 AM Bug #6223: IPsec + OpenBGPD fails with "PF_KEY socket: No buffer space available"
I recommend changing this to a high priority bug as it impacts anyone using IPsec and BGP together which are two ubiq... Aaron Marks

08/31/2016

10:10 PM Bug #4326: Limiters on firewall rules where NAT applies drop all traffic
Using pfsense 2.3.2-RELEASE (amd64)
I can confirm disabling the upload limiter solves an issue with limiters and 1...
Steve Tibbetts
08:36 PM Feature #6754: Use of aliases in OpenVPN configuration
Have a read of https://redmine.pfsense.org/issues/2668
It is a similar feature request I put in a while ago.
Phillip Davis
02:08 PM Feature #6754 (Duplicate): Use of aliases in OpenVPN configuration
OpenVPN has options where network groups can be specified. See these:
- Tunnel Settings > IPv4 Local Network/s and I...
robi robi
03:31 PM Bug #6747: pfctl - getting high cpu usage
egrep is very memory aggressive...
The pfBlockerNG widget runs this line which doesn't use egrep:
pfctl -vv...
BBcan177 .
02:50 PM Bug #6747: pfctl - getting high cpu usage
Pi Ba, does this edition include pfblockerng widget problem too? Rafael Cunha
01:59 PM Feature #6753 (Resolved): Interfaces list order not consistent
The order the interfaces are listed in several places:
- Status > Interfaces
- Dashboard Interfaces widget
- Inter...
robi robi
11:48 AM Revision de645734: Ticket #3734: Add function to convert IPv6 address <-> binary
- ip6_to_bin() and bin_to_ip6() are copies obtained from pear-Net_IPv6
since the version available in the class is ...
Renato Botelho
11:33 AM Revision 4aa5f0fd: Prevent accessing undefined offset in IPv6.inc
On perfectly good IPs (eg. 1:2::3:4) this code could cause the following notice:
Notice: Undefined offset: 2 in IPv6....
NewEraCracker
11:32 AM Revision beb7a698: Merge pull request #3125 from NewEraCracker/patch-net_ipv6
Renato Botelho
11:10 AM Revision 526d962d: -resolved syntax error
(cherry picked from commit 0a6ab475d80b580b09fefaf3ca346b08ec6a23c9) hamnur
11:10 AM Revision 99179710: -resolved syntax error
(cherry picked from commit 0a6ab475d80b580b09fefaf3ca346b08ec6a23c9) hamnur
11:10 AM Revision 23745038: Merge pull request #3126 from hamnur/master
Renato Botelho
10:26 AM Bug #6528: The captive portal cannot be used on interface lan since it is part of a bridge but works anyway
Hi, sorry for the late answer.
The download speed of everything that goes through the CP isn't enforced when in brid...
Orsiris de Jong
09:55 AM Revision 0a6ab475: -resolved syntax error
hamnur
06:22 AM Bug #6099: igmpproxy does not recognize upstream interface
Lars Veldcholte wrote:
> What is the status on this? I believe I have the same issue (pfSense 2.3).
>
> [...]
>
...
Victor Toni
05:07 AM pfSense Packages Todo #6752 (New): Traffic Totals Data Summary Graph
Please can you change the Time header in the data summary to Date for the monthly & top 10 days, its not a time it's ... Andy Kniveton
04:09 AM Revision 16b16366: move back to r53.class for license continuity
Jason McCormick
03:11 AM Revision 26022814: note inspiration/sanity check from r53.class code
Jason McCormick
03:01 AM Revision 8d8405ba: fix testing headers for bad data
Jason McCormick
02:57 AM Revision c4641295: noted testing for Route53
Jason McCormick
02:54 AM Revision 166f4a4c: Fixed status success message typo and cleaned up
Jason McCormick
02:48 AM Revision 616a2482: fix auth header and minor XML tag issue
Jason McCormick
02:06 AM Revision cc5adcaa: initial commit of code -- having a signing error
Jason McCormick

08/30/2016

09:51 PM Feature #6728: Route53 API mod and Geolocation
Figured out my bug and an XML tag error. This now works so far in my testing - https://github.com/pfsense/pfsense/com... Jason McCormick
09:10 PM Feature #6728: Route53 API mod and Geolocation
The code is at https://github.com/jxmx/pfsense/commit/cc5adcaa679686e54e4035fa5bc283b1cac085a2. The code has an AWS s... Jason McCormick
06:34 PM Feature #6728: Route53 API mod and Geolocation
Okay. I'm hoping to finish the original replacement code tonight and I will pass along a GitHub repo. I guess a diffe... Jason McCormick
03:41 PM Feature #6728: Route53 API mod and Geolocation
I agree; r53.class is overkill compared to the updated API. I've been busy at work and haven't finished rewriting. If... Matt Williams
09:50 PM Bug #6751: Route53 DynDNS Problems / Replace Route53 DynDNS Module
Here is a diff against the current master for the change: https://github.com/pfsense/pfsense/compare/master...jxmx:67... Jason McCormick
07:20 PM Bug #6751 (Resolved): Route53 DynDNS Problems / Replace Route53 DynDNS Module
With pfSense 2.3.2, the DynDNS system does not work with Amazon Route53 services. In looking through the logs and the... Jason McCormick
08:09 PM Revision 8fe8ceff: Prevent accessing undefined offset in IPv6.inc
On perfectly good IPs (eg. 1:2::3:4) this code could cause the following notice:
Notice: Undefined offset: 2 in IPv6....
NewEraCracker
12:03 PM Bug #6750 (Resolved): dhcpleases shouldn't start when DHCP Relay is configured
As well, unbound's config page (Services->"DNS Resolver"->"General Settings") shouldn't allow the "register DHCP leas... Gary Dezern
01:15 AM Bug #6749: Still responds to ARP after removing one of several Virtual IP - choparp not reconfigured
Actually, I found two more choparp processes:
root 22202 0.0 0.1 14604 2248 - S Tue04PM 0:05.67 /u...
Oskar Berggren
01:11 AM Bug #6749 (Duplicate): Still responds to ARP after removing one of several Virtual IP - choparp not reconfigured
At the start, there were four Virtual IPs defined in pfSense. I removed two of them through the GUI, yet the machine ... Oskar Berggren

08/29/2016

10:41 PM pfSense Packages Bug #6748 (Resolved): rrd_fetch_json.php returns html when user is unauthorized (causes "Error: SyntaxError: Unexpected token <")
The rrd_fetch_json.php endpoint should always return json, as it normally is being requested by js or something that ... Stephen Smith
09:52 PM Feature #6728: Route53 API mod and Geolocation
I started looking through the dyndns.class and the Route53 is really non-standard for how pfSense is trying to do thi... Jason McCormick
07:48 PM Feature #6728: Route53 API mod and Geolocation
Does this require an updated r53.class file? Keeping what looks like an unmaintaned (upstream) legacy file seems like... Jason McCormick
07:07 PM Revision ad0fccda: system_dhcpleases_configure() - Improve pidfile handling
1) Set the pidfile variable in the correct place.
pidfile variable is required in both 'if' and 'else' blocks.
2)...
NewEraCracker
07:07 PM Revision 48759936: system_dhcpleases_configure() - Improve pidfile handling
1) Set the pidfile variable in the correct place.
pidfile variable is required in both 'if' and 'else' blocks.
2)...
NewEraCracker
07:07 PM Revision b947efe8: Merge pull request #3106 from NewEraCracker/patch-9
Renato Botelho
07:06 PM Revision 866abc91: Apply the fix for ticket #6589 also into dhcpdv6 config
(cherry picked from commit 20350989db5d66ffb827beaed5ef5738cd62fc9d) NewEraCracker
06:19 PM Revision 77669294: Apply the fix for ticket #6589 also into dhcpdv6 config
(cherry picked from commit 20350989db5d66ffb827beaed5ef5738cd62fc9d) NewEraCracker
06:19 PM Revision 3843c34a: Merge pull request #3107 from NewEraCracker/patch-10
Renato Botelho
06:05 PM Revision 5d892fd8: Indent dhcpd.conf option custom
(cherry picked from commit c507161d557817c1f6f0adbef9ffdbad82115ee8) Phil Davis
06:05 PM Revision 9a1ae6e6: Fix #6720 DHCP options by pool
It is a little bit tricky having to generate the unique "option custom-if-n-m code ..." lines at first where n = pool... Phil Davis
06:05 PM Revision 34a8cebe: Indent dhcpd.conf option custom
(cherry picked from commit c507161d557817c1f6f0adbef9ffdbad82115ee8) Phil Davis
06:05 PM Revision dc13f5e0: Fix #6720 DHCP options by pool
It is a little bit tricky having to generate the unique "option custom-if-n-m code ..." lines at first where n = pool... Phil Davis
06:04 PM Revision 067c8f54: Merge pull request #3112 from phil-davis/patch-1
Renato Botelho
06:03 PM Revision 93adc650: Fix double domain-name-servers for pool
Add a pool and specify something in 1 or more of the DNS servers boxes for the pool.
The "option domain-name-servers ...
Phil Davis
06:02 PM Revision 959f2bb8: Fix double domain-name-servers for pool
Add a pool and specify something in 1 or more of the DNS servers boxes for the pool.
The "option domain-name-servers ...
Phil Davis
06:02 PM Revision 2dfbd10f: Merge pull request #3110 from phil-davis/patch-2
Renato Botelho
05:59 PM Revision f2ac72d6: Fix #6724 VLAN interface displayed wrong
in interface assignment script dialog.
The str_replace() calls were not smart enough to just get rid of bare "igb1" ...
Phil Davis
05:57 PM Revision f851e667: Fix #6724 VLAN interface displayed wrong
in interface assignment script dialog.
The str_replace() calls were not smart enough to just get rid of bare "igb1" ...
Phil Davis
05:56 PM Revision 628fc6b6: Merge pull request #3114 from phil-davis/patch-3
Renato Botelho
03:27 PM Bug #6747: pfctl - getting high cpu usage
As discussed on IRC, his original pfctl usage was caused by the line below:... Pi Ba
02:10 PM Bug #6747: pfctl - getting high cpu usage
When pfblockerng counter widget is enabled too.
`-- sh -c /sbin/pfctl -vv -sr | /usr/bin/grep 'pfB_'
Rafael Cunha
01:53 PM Bug #6747: pfctl - getting high cpu usage
In case anyone need:
pfctl -sr | wc -l
8707
Rafael Cunha
01:50 PM Bug #6747 (Closed): pfctl - getting high cpu usage
When firewall logs is enabled on dashboard and update interval is set to a small time (5 seconds, ie), pfctl starts t... Rafael Cunha
01:10 PM Bug #6720: DHCPD Options in "Sub-"Pools ignored, dhcpd.conf does not contain informations, dhcpd therefore not serving
Applied in changeset commit:285987208f31f38abe35b984b08645d43c11b001. Phillip Davis
01:05 PM Bug #6720 (Feedback): DHCPD Options in "Sub-"Pools ignored, dhcpd.conf does not contain informations, dhcpd therefore not serving
Pull request has been merged. Thanks! Renato Botelho
12:59 PM Bug #6724 (Feedback): VLAN interface displayed wrong through interface assignment
Renato Botelho

08/28/2016

07:29 PM Feature #4606: PKI : CA signing external CSR
+1. Some applications will generate a new private key internally, and only export the CSR, these applications do thi... Curtis Ruck
07:24 PM pfSense Packages Bug #6616: Client Export list empty when using intermediate CA
I'm running into this also. I have a root-ca, with different intermediate CAs. the intermediate CAs allow me to seg... Curtis Ruck
02:32 PM Bug #6099: igmpproxy does not recognize upstream interface
What is the status on this? I believe I have the same issue (pfSense 2.3).
All my interfaces are VLANs. I just mov...
Lars Veldcholte
08:04 AM Feature #6746 (Resolved): Option to select dark or misc background for Traffic Graphs when a dark theme is selected.
When a dark theme is selected, the large "blob" of white color in
the Traffic Graphs widget feels inapropriate when ...
Dan Lundqvist

08/27/2016

09:09 PM Feature #6728: Route53 API mod and Geolocation
Looks like formatting messed up the JSON encoding on that policy; be sure syntax is correct before using; {zone} = yo... Matt Williams
09:08 PM Feature #6728: Route53 API mod and Geolocation
Diff file:
https://github.com/williamsmt/pfsense/commit/d96a547cc722d04880d50f7b6a1308c0d9575123
This works for...
Matt Williams
08:16 AM Bug #6744 (Duplicate): Picture Widget loses config / actual picture intermittent. Especially when moving from column 2 to 3.
Duplicate of #6669 Jim Pingle
07:06 AM Bug #6744: Picture Widget loses config / actual picture intermittent. Especially when moving from column 2 to 3.
Then if it's already handled for 2.3.3 this bugreport could be closed. Dan Lundqvist

08/26/2016

08:49 PM Bug #6744: Picture Widget loses config / actual picture intermittent. Especially when moving from column 2 to 3.
That is fixed by Redmine 6669. It should all work in 2.3.3-DEVELOPMENT snapshots already. Phillip Davis
01:17 PM Bug #6744: Picture Widget loses config / actual picture intermittent. Especially when moving from column 2 to 3.
I now saw that it looses picture config even when a totally separate widget is moved and saved.
//Danne
Dan Lundqvist
01:13 PM Bug #6744: Picture Widget loses config / actual picture intermittent. Especially when moving from column 2 to 3.
I also checked the the exported config.xml and I could see that when the fault occurs, the following is missing
<pic...
Dan Lundqvist
01:05 PM Bug #6744 (Duplicate): Picture Widget loses config / actual picture intermittent. Especially when moving from column 2 to 3.
I have managed to reproduce a problem, somewhat intermittent but frequent,
with Picture Widget where the picture is ...
Dan Lundqvist
10:43 AM Revision 018f571b: Remove from poudriere_bulk unnecessary entries:
* sysutils/py-salt
Already built as dependency of sysutils/pfSense-builder
* security/sudo
Already built as dependen...
Renato Botelho
06:25 AM Revision d5d34fb4: Improve the exclude_files for the base core package. Do not include existing packages and the contents of other packages.
Luiz Souza
06:25 AM Revision f014e9e5: Add the template for the u-boot core package.
Luiz Souza

08/25/2016

10:50 PM Feature #6728: Route53 API mod and Geolocation
Just to confirm my issue was not an IAM Policy problem, I gave my IAM user full permissions and created a new record ... Jason McCormick
10:31 PM Feature #6728: Route53 API mod and Geolocation
Matt Williams wrote:
> The previous version works for me on a non-policy subdomain. What type of permission policy d...
Jason McCormick
09:20 PM Feature #6728: Route53 API mod and Geolocation
The previous version works for me on a non-policy subdomain. What type of permission policy do you have set in IAM fo... Matt Williams
09:07 PM Feature #6728: Route53 API mod and Geolocation
Also, I think this tracker type should be bug not feature? I see it tagged for 2.3.3 but as "Feature". In my testing,... Jason McCormick
09:05 PM Feature #6728: Route53 API mod and Geolocation
I'm interested in this bug now too as I've just discovered that 2.3.2 + AWS Route53 is inoperable. With 2.3.2 I can n... Jason McCormick
10:33 PM Revision df6d4ff1: add cpu stress tester and bird to arm build
Jeremy Porter
08:48 PM Revision bb487b66: add cpu stress tester and bird to arm build
Jeremy Porter
06:14 PM Feature #6743 (Resolved): Packet Capture - Filter MAC
Under Diagnostics -> Packet Capture, there is no option to filter by partial or full MAC address. This should be fair... Clinton Cory
12:51 PM Feature #3377: OAuth2 authentication in captive portal
> My preference is to keep this limited to CP for now.
>
> That said, your idea has merit, and I'd appreciate it i...
Kristian Junkov
12:50 PM Feature #6742 (New): OAuth2 authentication for OpenVPN (and for FreeRadius)
I have two use-cases I want to enable and corresponding ideas.
*A) OpenVPN server use OAuth2 as backend.*
*Use-ca...
Kristian Junkov
12:29 PM Bug #6741 (Resolved): /etc/rc.initial does not trap CTRL-C back to console menu but rather to # prompt.
I found a problem with trap mechanism in /etc/rc.initial that does not trap CTRL-C back to ssh/cli console menu.
Ins...
Dan Lundqvist

08/24/2016

08:22 PM Revision 509e9357: Improve dhcpd and dhcpleases reload
1) Avoid running services_dhcpd_configure() more times than needed.
2) Always restart dhcpleases after it's killed du...
NewEraCracker
07:45 PM Feature #3377: OAuth2 authentication in captive portal
Kristian Junkov wrote:
> Thomas NOEL wrote:
> > In Captive Portal we have native, ldap and radius authentication. T...
Jim Thompson
05:27 PM Feature #3377: OAuth2 authentication in captive portal
Thomas NOEL wrote:
> In Captive Portal we have native, ldap and radius authentication. Today, a lot of authenticatio...
Kristian Junkov
04:16 PM Revision e5bc38d2: [theme] Compact-RED: improve hovered table rows visibility
Alexander Moisseev
04:07 PM Feature #6374: Provide sample server-side logic to report peer's IP address for use with DDNS
... Jeremy Porter
04:05 PM Feature #6373: RFC2136 DDNS could be more configurable to improve security
This is a quick and dirty way for us to add checkip services to nginx on our production web boxes:
location = /ip {...
Jeremy Porter
01:19 PM pfSense Packages Bug #6740: https filtering with squid + squidguard error (ssl bump)
C Wood wrote:
> Jim Pingle wrote:
> > It is for both but there is no specific bug on this ticket yet, only symptoms...
C Wood
01:14 PM pfSense Packages Bug #6740: https filtering with squid + squidguard error (ssl bump)
Jim Pingle wrote:
> It is for both but there is no specific bug on this ticket yet, only symptoms.
I guess your d...
C Wood
01:08 PM pfSense Packages Bug #6740: https filtering with squid + squidguard error (ssl bump)
It is for both but there is no specific bug on this ticket yet, only symptoms. Jim Pingle
01:05 PM pfSense Packages Bug #6740: https filtering with squid + squidguard error (ssl bump)
Jim Pingle wrote:
> This needs to stay on the forum until a specific bug can be identified. We don't encourage or su...
C Wood
12:58 PM pfSense Packages Bug #6740 (Not a Bug): https filtering with squid + squidguard error (ssl bump)
This needs to stay on the forum until a specific bug can be identified. We don't encourage or support the use of HTTP... Jim Pingle
12:42 PM pfSense Packages Bug #6740: https filtering with squid + squidguard error (ssl bump)
C Wood wrote:
> When configuring the https filtering some (possibly all) https sites error out. (Man in the middle ...
C Wood
12:31 PM pfSense Packages Bug #6740 (Not a Bug): https filtering with squid + squidguard error (ssl bump)
When configuring the https filtering some (possibly all) https sites error out. (Man in the middle certificate autho... C Wood

08/23/2016

09:23 PM Feature #3377: OAuth2 authentication in captive portal
Cleber Ronaldo wrote:
> Thomas NOEL wrote:
> > In Captive Portal we have native, ldap and radius authentication. To...
Jim Thompson
07:54 PM Revision e540a9d7: css: Fix jQuery UI widgets' font
Use the main font with jQuery UI widgets (e.g. autocomplete forms) Jose Luis Duran
06:24 PM Revision 8024c54a: change traffic graphs to use d3.js
Jared Dillard
06:23 PM Revision 17ffb834: add visibility js
Jared Dillard
06:22 PM Revision 849d3a37: change traffic graphs to use d3.js
Jared Dillard
06:22 PM Revision 22b8293d: add visibility js
Jared Dillard
11:09 AM Revision 953a88a4: [theme] Compact-RED: compact panel titles
Alexander Moisseev
11:01 AM Revision b8916dcc: [theme] Compact-RED: make drop-down menus not too "compact"
and improve hovered element visibility Alexander Moisseev
10:51 AM Revision 9e1208e5: [theme] Compact-RED: get rid of anti-aliased fonts
Alexander Moisseev

08/22/2016

08:22 PM Bug #6691: dhcp6c quits after only two tries if no response was received
See this thread for a work-around for your issue:
https://forum.pfsense.org/index.php?topic=116866.0
Gary Dezern
08:16 PM Revision 9446ee68: Add a selection for OpenVPN to have no compression preference + comp-noadapt, which is necessary in some client edge cases. Fixes #6739
Jim Pingle
08:15 PM Revision 946a87ec: Add a selection for OpenVPN to have no compression preference + comp-noadapt, which is necessary in some client edge cases. Fixes #6739
Jim Pingle
07:35 PM Revision 1121b4a7: Clean up the text on diag_sockets.php. Fixes #6708
Jim Pingle
07:35 PM Revision f25ab3f4: Clean up the text on diag_sockets.php. Fixes #6708
Jim Pingle
07:34 PM Revision 9fcda3db: Clean up the text on diag_sockets.php. Fixes #6708
Jim Pingle
06:49 PM Revision 2b7902fe: Clarify language on diag_tables.php. Fixes #6713
Jim Pingle
06:49 PM Revision 3ea1f1d0: Clarify language on diag_tables.php. Fixes #6713
Jim Pingle
06:48 PM Revision d1855944: Clarify language on diag_tables.php. Fixes #6713
Jim Pingle
06:15 PM Revision 2afb45ba: Use -l with traceroute6 to show both IP Addresses and Hostnames when resolving hops. Add note about max ttl/hop limit in source comment. Fixes #6715
Jim Pingle
06:15 PM Revision 42ef8736: Use -l with traceroute6 to show both IP Addresses and Hostnames when resolving hops. Add note about max ttl/hop limit in source comment. Fixes #6715
Jim Pingle
06:14 PM Revision f5da84f3: Use -l with traceroute6 to show both IP Addresses and Hostnames when resolving hops. Add note about max ttl/hop limit in source comment. Fixes #6715
Jim Pingle
04:30 PM Revision a92de66e: Add output encoding to diag_dns.php for results returned from DNS. Fixes #6737
Jim Pingle
04:30 PM Revision 9cbc340f: Add output encoding to diag_dns.php for results returned from DNS. Fixes #6737
Jim Pingle
04:29 PM Revision d2466ce6: Add output encoding to diag_dns.php for results returned from DNS. Fixes #6737
Jim Pingle
04:03 PM Revision 9c6f780f: Fixed #6711
(cherry picked from commit ca3dc6c9ac6b6045430779f407a31ed620f5a32d) Stephen Beaver
04:03 PM Revision ca3dc6c9: Fixed #6711
Stephen Beaver
03:24 PM Revision 9db8959d: Fixed #6732
(cherry picked from commit e73770057872aa1f78dfff885f89916e446e2e4c) Stephen Beaver
03:24 PM Revision e7377005: Fixed #6732
Stephen Beaver
03:20 PM Bug #6739 (Feedback): OpenVPN compression settings in the GUI are no longer translated into the correct running options.
Applied in changeset commit:946a87ece8089045a1e0153479e7c490bfcbdb68. Jim Pingle
02:24 PM Bug #6739: OpenVPN compression settings in the GUI are no longer translated into the correct running options.
Specifically it needs to make use of "comp-noadapt" to forcefully disable adaptive compression at least in the "No Pr... Jim Pingle
02:16 PM Bug #6739 (Resolved): OpenVPN compression settings in the GUI are no longer translated into the correct running options.
The OpenVPN compression settings available in the GUI: "No preference", "Disabled", "Enabled with adaptive compressio... Steve Wheeler
02:57 PM pfSense Packages Bug #6735 (Resolved): Cron Service saves entry on Cancel
I pushed a fix for this, it will show up shortly. Jim Pingle
02:40 PM Bug #6708 (Feedback): diag_sockets wrong info
Applied in changeset pfsense:commit:9fcda3dbd20efb83be69f9b05cc0d2a719fa25bc. Jim Pingle
02:18 PM Bug #6712: services_unbound.php Host Overrides don't change any unbound configuration
Looks like it is a problem but not one most would hit since it's rare to have both enabled.
source:src/etc/inc/unb...
Jim Pingle
02:00 PM Bug #6713 (Feedback): diag_tables table or alias or database?
Applied in changeset pfsense:commit:d18559445d34b928d946e9212ab276e1da5cdb39. Jim Pingle
01:20 PM Bug #6715 (Feedback): diag_traceroute.php suggestions
Applied in changeset pfsense:commit:f5da84f3018e4b1792b6676bf1c6127dd0e9e5ce. Jim Pingle
12:56 PM Bug #6730 (Resolved): dnsmasq - Ignoring query from non-local network
Confirmed working from myself and others. Jim Pingle
12:49 PM Feature #6738 (New): GUI Action Buttons replicated to the top of the List
With the latest GUI the Active Buttons (Add, Delete, Save, etc) only exist on the bottom of the screen. Our Alias li... David McQueen
11:40 AM Bug #6737 (Feedback): diag_dns.php: DNS results printed without encoding, leading to an XSS
Applied in changeset commit:d2466ce6f5f45300ebeccea93ef4b7c35f8e1f02. Jim Pingle
11:30 AM Bug #6737 (Resolved): diag_dns.php: DNS results printed without encoding, leading to an XSS
There is a potential XSS in diag_dns.php from a lack of encoding on the DNS replies.
If a query is entered for @xs...
Jim Pingle
11:18 AM Bug #6732 (Resolved): interfaces_ppps_edit.php: L2TP and PPTP WAN-type interface editing has broken input validation
Looks good now Jim Pingle
10:30 AM Bug #6732: interfaces_ppps_edit.php: L2TP and PPTP WAN-type interface editing has broken input validation
Applied in changeset commit:e73770057872aa1f78dfff885f89916e446e2e4c. Anonymous
10:26 AM Bug #6732 (Feedback): interfaces_ppps_edit.php: L2TP and PPTP WAN-type interface editing has broken input validation
Element names and validation code fixed to resolve issue.
localip, submnt, gateway, mtu, mru & mrru tested
Anonymous
11:10 AM Bug #6711: diag_states_summary # States and # States twice (explain one is per protocol)
Applied in changeset commit:ca3dc6c9ac6b6045430779f407a31ed620f5a32d. Anonymous
11:04 AM Bug #6711 (Feedback): diag_states_summary # States and # States twice (explain one is per protocol)
Anonymous
10:28 AM Feature #6723 (Resolved): Make OpenVPN widget update dynamically
Anonymous
09:47 AM pfSense Packages Bug #6736 (Closed): Snort fails to start after upgrade to 2.3.2-RELEASE
After upgrading to 2.3.2-Release from 2.3.1-5 snort fails to start with a FATAL error: Aug 22 11:20:01 pfSense snort[... Marco Verleun

08/21/2016

11:45 PM pfSense Packages Bug #6735 (Resolved): Cron Service saves entry on Cancel
In Services/Cron:
If you click on "Edit" and enter in the settings for a new Cron entry, but terminate it with the...
BBcan177 .
07:03 PM Bug #6702 (Feedback): Command Prompt syntax error and crash detection report
this needs more detail. Jim Thompson
07:01 PM Bug #6708 (Assigned): diag_sockets wrong info
looks like minor cleanup. Jim Thompson
06:54 PM Bug #6711 (Assigned): diag_states_summary # States and # States twice (explain one is per protocol)
Jim Thompson
06:52 PM Bug #6712 (Assigned): services_unbound.php Host Overrides don't change any unbound configuration
wrong assignee Jim Thompson
06:51 PM Bug #6712: services_unbound.php Host Overrides don't change any unbound configuration
assigned to PIngle for eval, but looks like "not a bug" to me. Jim Thompson
06:49 PM Bug #6713 (Assigned): diag_tables table or alias or database?
Jim Thompson
06:49 PM pfSense Packages Bug #6714 (Rejected): diag_testport suggestions and issues
we do, actually. please break this up into separate issues. Jim Thompson
06:48 PM Bug #6715 (Assigned): diag_traceroute.php suggestions
traceroute6 hop limit on FreeBSD is 30 (default), see traceroute6(8).
Jim Thompson
12:25 PM pfSense Packages Bug #6734: ntopng does not start on up-to-date pfsense install (port 3000 is already in use)
For reference:
https://forum.pfsense.org/index.php?topic=117170.msg649101#msg649101
Anonymous
12:23 PM pfSense Packages Bug #6734: ntopng does not start on up-to-date pfsense install (port 3000 is already in use)
OK I opened a thread on the forums. I may also have found the issue. It could be that ntop (the old package) is run... Anonymous

08/20/2016

11:30 PM pfSense Packages Bug #6734 (Not a Bug): ntopng does not start on up-to-date pfsense install (port 3000 is already in use)
If it says that, then it's either already running or something else is using the port. Please post on the forum until... Jim Pingle
12:09 PM pfSense Packages Bug #6734 (Not a Bug): ntopng does not start on up-to-date pfsense install (port 3000 is already in use)
ntopng does not start on up to date pfsense install. ntopng is installed & configured but trying to access it the pa... Anonymous
06:26 PM Revision 69f209e6: Merge pull request #3116 from NewEraCracker/RELENG_2_3_2+
Stephen Beaver
06:25 PM Revision a28e9c31: Fix syntax error on openvpn.widget.php
(cherry picked from commit 516e609ccb7a39fb27f52a69f11eee68f86974df) NewEraCracker
06:24 PM Revision afd3477c: Merge pull request #3118 from NewEraCracker/patch-ovpnwidget
Stephen Beaver
06:21 PM Revision 516e609c: Fix syntax error on openvpn.widget.php
NewEraCracker
06:20 PM Revision d0cae66d: Fix syntax error on openvpn.widget.php
NewEraCracker
05:56 PM Revision 4509abc3: system_dhcpleases_configure() - Improve pidfile handling
1) Set the pidfile variable in the correct place.
pidfile variable is required in both 'if' and 'else' blocks.
2)...
NewEraCracker
07:51 AM Revision 20350989: Apply the fix for ticket #6589 also into dhcpdv6 config
NewEraCracker
07:51 AM Revision c69ea005: Ensure only one instance of services_dhcpd_configure runs concurrently
This way kill and respawn will behave as they should for the dhcpd processes NewEraCracker
07:41 AM Revision 13e04a25: Fix problems caused by c93d289
This commit syncs openvpn.widget.php with version from RELENG_2_3 branch NewEraCracker

08/19/2016

02:08 PM Revision 68ce71f2: Use "-C /dev/null" when starting dnsmasq to avoid it picking up an incorrect default config which would override our command line parameters. Fixes #6730
Jim Pingle
02:07 PM Revision a95e5334: Use "-C /dev/null" when starting dnsmasq to avoid it picking up an incorrect default config which would override our command line parameters. Fixes #6730
Jim Pingle
02:07 PM Revision a2a3ca38: Use "-C /dev/null" when starting dnsmasq to avoid it picking up an incorrect default config which would override our command line parameters. Fixes #6730
Jim Pingle
10:58 AM Bug #6733 (Rejected): Web Config Unreachable after 20 days of uptime
Please start a forum thread for discussion and diagnosis first. There are a number of possible causes here, some alre... Jim Pingle
10:56 AM Bug #6733 (Rejected): Web Config Unreachable after 20 days of uptime
Yesterday web config was working, Today all i get is 502 bad gateway.
Restarted web configurator from console, no ...
Xander Venterus
10:01 AM Bug #6732 (Resolved): interfaces_ppps_edit.php: L2TP and PPTP WAN-type interface editing has broken input validation
On interfaces_ppps_edit.php when an L2TP or PPTP interface is created or edited, it cannot be saved.
Both types ha...
Jim Pingle
09:51 AM Bug #6729 (Not a Bug): L2TP+IPSEC 2.3.2-RELEASE
The rules are correct, but if changing that fixed it for you, that implies the individual L2TP interfaces are not bei... Jim Pingle
09:29 AM Bug #4031 (Confirmed): Notifications mail bomb in some gateway failure circumstances
Not too fast, it was my mistake. I'll work on a proper fix Renato Botelho
09:20 AM Bug #4031: Notifications mail bomb in some gateway failure circumstances
Thank you Renato! How can we test this? Is there a commit hash you can reference? → luckman212
09:13 AM Bug #4031 (Feedback): Notifications mail bomb in some gateway failure circumstances
Renato Botelho
09:13 AM Bug #4031: Notifications mail bomb in some gateway failure circumstances
It was implemented a check that prevents mail notification system to send the same message multiple times. It should ... Renato Botelho
09:20 AM Bug #6730 (Feedback): dnsmasq - Ignoring query from non-local network
Applied in changeset commit:a2a3ca3852f5ab229aad1ab701bbcebef6e874a7. Jim Pingle
09:00 AM Bug #6730 (Confirmed): dnsmasq - Ignoring query from non-local network
Looks like this is due to /usr/local/etc/dnsmasq.conf being present. We don't use that or create it, but it is there ... Jim Pingle
06:12 AM Bug #6730 (Resolved): dnsmasq - Ignoring query from non-local network
Hi,
Last week i updated to 2.3.2-RELEASE (amd64) built on Wed Jul 20 10:29:55 CDT 2016 FreeBSD 10.3-RELEASE-p5
...
Bart Heinsius
09:09 AM Bug #6549 (Feedback): fstab is missing post-install
Fixed Renato Botelho
09:08 AM Bug #6628 (Feedback): extensions.ini can end up missing required items
Backported changes from FreeBSD ports that deprecated extensions.ini, which should be enough to fix it Renato Botelho
07:31 AM Bug #6223: IPsec + OpenBGPD fails with "PF_KEY socket: No buffer space available"
Looks like there may be some progress here:
https://forum.pfsense.org/index.php?topic=109908.45
Michael OBrien
07:06 AM Bug #6731 (Not a Bug): Senha sendo exibida em texto plano
Unless something is getting lost in the translation from Google, there is no bug here. Some passwords are stored in p... Jim Pingle
06:30 AM Bug #6731 (Not a Bug): Senha sendo exibida em texto plano
Nas versões acima 2.3.1, ao criar um servidor de autenticação em: SystemUser ManagerAuthentication Servers
Se fo...
Dalva Minoda

08/18/2016

11:48 PM Revision 582b1b92: Text typos in openvpn.widget.php
(cherry picked from commit 8da4847472e03195aeb73a1acedbc27f8af520d1) Phil Davis
11:48 PM Revision a377438a: Text typos in openvpn.widget.php
(cherry picked from commit 8da4847472e03195aeb73a1acedbc27f8af520d1) Phil Davis
11:47 PM Revision 573c72c2: Merge pull request #3115 from phil-davis/patch-4
Stephen Beaver
11:46 PM Revision 8da48474: Text typos in openvpn.widget.php
Phil Davis
11:39 PM Revision d958c917: Revise widget refresh timing
(cherry picked from commit 134ee13df54280441c25b047b406628eeebbb8db) Stephen Beaver
11:38 PM Revision 6d203ffc: Revise widget refresh timing
(cherry picked from commit 134ee13df54280441c25b047b406628eeebbb8db) Stephen Beaver
11:38 PM Revision 134ee13d: Revise widget refresh timing
Stephen Beaver
11:01 PM Bug #6729 (Not a Bug): L2TP+IPSEC 2.3.2-RELEASE
I was stuck for two days making this work. Connection was successful but something wrong was with Filtering. Finally!... Andrey Kartashov
09:36 PM Revision fb1234ab: Add specific permission to allow HA XMLRPC sync. It fixes #809
Renato Botelho
09:35 PM Revision f82f991c: Fix remote_addr array key
Renato Botelho
09:12 PM Feature #6728: Route53 API mod and Geolocation
*** Amending previous post to remove item number 3, reducing FR to one correction and one enhancement. API will only ... Matt Williams
05:52 PM Feature #6728 (Needs Patch): Route53 API mod and Geolocation
This is a request to modify/simplify the POST Route53 API for Dynamic DNS. One correction and two enhancements are re... Matt Williams
07:55 PM Revision 4f78ae1d: Disable autoDocument
Renato Botelho
07:42 PM Revision 357b5e93: Ticket #3734: Remove xmlrpc.inc, xmlrpc_client.inc and xmlrpc_server.inc
Renato Botelho
07:42 PM Revision 2355a762: Ticket #3734: Pass username on all xmlrpc calls
Renato Botelho
07:42 PM Revision f81e7cc4: Ticket #3734: Convert xmlrpc.php to use XML/RPC2/Server.php
Renato Botelho
07:42 PM Revision 29cffce7: Initialize variable properly
Renato Botelho
07:42 PM Revision a49413cb: Do not enable debug
Renato Botelho
04:51 PM Bug #6657: Unable to add network in the source section of a LAN firewall rule
See the "best answer" here: https://productforums.google.com/forum/#!msg/chrome/MBEvipQlgyg/yeM-2XDkEi8J reproduced ... Jon Gerdes
04:40 PM Feature #809 (Feedback): Config sync username change
Applied in changeset commit:fb1234ab7d654f301eafdd4f116038937bc36cf4. Renato Botelho
02:47 PM Feature #809: Config sync username change
When converting code to XML_RPC2 I implemented a usrename parameter on every xmlrpc method. It's just missing privile... Renato Botelho
03:50 PM Revision c93d289b: Added control to set dashboard widget refresh period
Start each widget refresh system after a short random delay to prevent all widgets hitting the server at the exactsam... Stephen Beaver
03:44 PM Revision c1f9ca7a: Added control to set dashboard widget refresh period
Start each widget refresh system after a short random delay to prevent all widgets hitting the server at the exactsam... Stephen Beaver
03:41 PM Revision 512f2c10: Added control to set dashboard widget refresh period
Start each widget refresh system after a short random delay to prevent all widgets hitting the server at the exactsam... Stephen Beaver
02:10 PM Todo #6727 (New): Missing file apple-touch-icon-precomposed.png ?
I notice this occasionally in my log files after logging in via the web browser :-
Aug 18 19:50:38 pfsense.localdo...
Andy Kniveton
01:17 PM Revision 3d0a7703: Completed #6723\
by making the OpenVPN widget update dynamically
(cherry picked from commit f30e6bd49c773de28b5ec143add30fc900e7874d)
Stephen Beaver
01:16 PM Revision f30e6bd4: Completed #6723\
by making the OpenVPN widget update dynamically Stephen Beaver
10:55 AM Bug #3973: Route 53 dynamic DNS provider fails to update record
Jim,
Did you (or anyone) every submit a commit to correct this? I know it becomes problematic when the TTL changes...
Matt Williams
10:55 AM Revision 9b6e0737: Remove debug leftover
Renato Botelho
08:18 AM Feature #6723 (Feedback): Make OpenVPN widget update dynamically
Anonymous
05:44 AM Bug #6726 (Not a Bug): OpenVPN: Route statement Custom options broken
No bug there.
You don't use quotes with a route statement. You might be thinking of a push route but then the "rou...
Jim Pingle
03:29 AM Bug #6726 (Not a Bug): OpenVPN: Route statement Custom options broken
Please see here:
https://forum.pfsense.org/index.php?topic=116959.0
Pippin MMD
04:29 AM Bug #6720: DHCPD Options in "Sub-"Pools ignored, dhcpd.conf does not contain informations, dhcpd therefore not serving
I've just tested PR3112 including the 2nd commit & PR3110.
The result is now perfect, functionallity is there & the ...
Harald Gutmann
12:34 AM Revision fd020a2d: Fix #6724 VLAN interface displayed wrong
in interface assignment script dialog.
The str_replace() calls were not smart enough to just get rid of bare "igb1" ...
Phil Davis

08/17/2016

10:45 PM Revision c507161d: Indent dhcpd.conf option custom
Phil Davis
09:13 PM Bug #6725: DHCP Server > TFTP server name and custom dhcp options in GUI and in dhcpd.conf but missing on the wire
I confirm this is similar in 2.2.6 as well.
I added a made-up dhcp option on the LAN interface, and applied the ch...
Criggie .
08:55 PM Bug #6725 (Rejected): DHCP Server > TFTP server name and custom dhcp options in GUI and in dhcpd.conf but missing on the wire
If configuring a TFTP server in the DHCP server settings (in my case for IP phones) the GUI accepts and applies the c... Jules Hoehn
09:08 PM Revision 0f3f6cc9: Revert "change traffic graphs to d3"
This reverts commit 9f33ec64330d0b50896772abd73156abbd762305. Jared Dillard
07:46 PM Revision 9f33ec64: change traffic graphs to d3
Jared Dillard
07:42 PM Revision 01c2735c: Add an option to push "block-outside-dns" to clients of an RA OpenVPN. Fixes #6719
Jim Pingle
07:41 PM Revision 13ac08b8: Add an option to push "block-outside-dns" to clients of an RA OpenVPN. Fixes #6719
Jim Pingle
07:35 PM Bug #6724: VLAN interface displayed wrong through interface assignment
That's a dumb bug in the way the str_replace() calls are stripping out all the "igb1" when "igb1" gets selected for a... Phillip Davis
06:02 PM Bug #6724 (Resolved): VLAN interface displayed wrong through interface assignment
On a fresh install of 2.3.2-RELEASE (amd64-full-install), there appears to be a bug at the VLAN assignments prompt. W... Clinton Cory
06:30 PM Revision 613d95e3: Use correct FreeBSD-src branch
Renato Botelho
05:51 PM Feature #6723: Make OpenVPN widget update dynamically
Yes, that would be nice. I also agree that it has never updated automatically, I have always had to refresh the dashb... Phillip Davis
04:03 PM Feature #6723 (Resolved): Make OpenVPN widget update dynamically
https://forum.pfsense.org/index.php?topic=116955.0 Anonymous
05:46 PM Bug #6720: DHCPD Options in "Sub-"Pools ignored, dhcpd.conf does not contain informations, dhcpd therefore not serving
1) "domain-name-servers are listed twice" - yeh, I noticed that also. Should be fixed by pull request https://github.... Phillip Davis
03:52 AM Bug #6720: DHCPD Options in "Sub-"Pools ignored, dhcpd.conf does not contain informations, dhcpd therefore not serving
Dear Phillip Davis,
many thanks for your fast reaction and fix!
I've tested several combinations and can so far c...
Harald Gutmann
02:50 PM Bug #6719 (Feedback): OpenVPN DNS Leak Windows 10
Applied in changeset commit:13ac08b8c500cd05f2a351d0d0d37f0d00514a55. Jim Pingle
02:34 PM Revision 55c81126: Disable packages that are not building on ARM
Renato Botelho
02:34 PM Revision 9bce3c23: Revert "Do not use host native compiler when building mysql for arm"
This reverts commit 669a59d7c98bda587a1a5840e2fad77827ff16a6. Renato Botelho
02:34 PM Revision 937f8d62: Revert "Check for ARCH here is unnecessary"
This reverts commit 0145641ae6d684bb09c2b4281359880b0dfb1e71. Renato Botelho
02:34 PM Revision f8ee942b: Revert "Unbreak make.conf syntax"
This reverts commit 03d4281714b675414ac3915a6396b23031f15ccd. Renato Botelho
01:21 PM Revision 4b1b6bed: diag-edit.php: Perform "Goto line #" action on pressing enter key within the line number element
(cherry picked from commit 86e94becbec130f9eeca5bc94b497ec1167a640a) Stephen Beaver
01:19 PM Revision 86e94bec: diag-edit.php: Perform "Goto line #" action on pressing enter key within the line number element
Stephen Beaver
12:36 PM pfSense Packages Bug #5749 (Resolved): OpenVPN Export Certs with password, password doesn't open .pk12 container.
New version is up, installed, confirmed working on a separate unit. Jim Pingle
12:25 PM pfSense Packages Bug #5749: OpenVPN Export Certs with password, password doesn't open .pk12 container.
I was able to reproduce the problem with "+" and confirmed that switching from escape() to encodeURIComponent() fixed... Jim Pingle
11:51 AM Revision 03d42817: Unbreak make.conf syntax
Renato Botelho
11:49 AM Revision 0145641a: Check for ARCH here is unnecessary
Renato Botelho
11:47 AM Revision 669a59d7: Do not use host native compiler when building mysql for arm
Renato Botelho
08:41 AM Bug #6691: dhcp6c quits after only two tries if no response was received
Had the same issue this morning. Log attached.
Glenn Matthys
07:04 AM Bug #6722 (Not a Bug): ntp sync
Please create a forum thread for discussion and diagnosis until a specific bug can be identified. I can't reproduce a... Jim Pingle
03:00 AM Feature #1831: Captive portal IPv6 support
Hi,
I think this is an important issue, I would like to see it as early as possible in pfsense, as IPV6 is an impo...
Klaus Steinberger
12:59 AM pfSense Packages Bug #6690: SURICATA IPS Issue - Kills VLANS & Traffic Shaper
Sandeep K V wrote:
> Hi Steven Kreitzer and Jim Thompson isn't this the expected way the IPS has to work?
No, and...
Steven Kreitzer
12:52 AM pfSense Packages Bug #6690: SURICATA IPS Issue - Kills VLANS & Traffic Shaper
Hi Steven Kreitzer and Jim Thompson isn't this the expected way the IPS has to work?
Sandeep K V

08/16/2016

10:50 PM Bug #6722: ntp sync
Aug 17 09:46:11 ntpd 30668 ntpd 4.2.8p8@1.3265-o Tue Jul 19 16:25:02 UTC 2016 (1): Starting
Aug 17 09:46:11 ntpd 306...
nelson naval
09:50 PM Bug #6722 (Not a Bug): ntp sync
im newu ser of pfsense im having problem with ntp unable to snyc after update pfsense 2.2.6 to 2.3.2
thats my sys...
nelson naval
10:22 PM Revision beae03f9: Fix messup caused by 9d3e872
(cherry picked from commit d5b993fc310147d68bc3c3654a512b0ac981ecd2) NewEraCracker
10:21 PM Revision 2320796c: Fix messup caused by 9d3e872
(cherry picked from commit d5b993fc310147d68bc3c3654a512b0ac981ecd2) NewEraCracker
10:21 PM Revision 4d5df679: Merge pull request #3113 from NewEraCracker/patch-11
Renato Botelho
10:12 PM Revision 200728c9: Ticket #3734: Convert remaining xmlrpc_client.inc consumers to use XML_RPC2
Renato Botelho
08:34 PM Revision 80f38d81: Retire /etc/rc.filter_configure_xmlrpc
Renato Botelho
08:26 PM Revision 81891d1d: Remove unused functions
Renato Botelho
08:18 PM Revision d5b993fc: Fix messup caused by 9d3e872
NewEraCracker
06:20 PM Revision b885c8cf: Silence pgrep stderr when pidfile contains an invalid PID
Renato Botelho
06:03 PM Revision ffd2056a: Ticket: #3734: Convert rc.filter_synchronize to use pear-XML_RPC2
Renato Botelho
06:03 PM Revision 3c982605: Fix indent
Renato Botelho
04:31 PM Revision c8d15b4b: Tidy up filenames
Make sure the filenames represent the actual file
(cherry picked from commit 6173d1f5a5ed50b8c8a8523b1eb6824f7c9c1ae6)
Colin Fleming
04:31 PM Revision 4ae5b96f: Tidy up filenames
Make sure the filenames represent the actual file
(cherry picked from commit 6173d1f5a5ed50b8c8a8523b1eb6824f7c9c1ae6)
Colin Fleming
04:31 PM Revision 9795c89e: Merge pull request #3111 from ExolonDX/master
Stephen Beaver
03:45 PM Revision 7edcc54b: Uniformize memory limits and remove old code (revised)
1) Allow setting a memory_limit up to 768M (Suhosin)
2) Remove old workarounds. Memory limits on config.inc will be n...
NewEraCracker
02:53 PM Revision 28598720: Fix #6720 DHCP options by pool
It is a little bit tricky having to generate the unique "option custom-if-n-m code ..." lines at first where n = pool... Phil Davis
02:50 PM Revision 6173d1f5: Tidy up filenames
Make sure the filenames represent the actual file Colin Fleming
01:31 PM Revision beb9321f: Fix double domain-name-servers for pool
Add a pool and specify something in 1 or more of the DNS servers boxes for the pool.
The "option domain-name-servers ...
Phil Davis
01:24 PM Revision a6412d53: Fix DDNS domain for static map DHCP entries
If you specify DDNS Domain in a DHCP static map entry, it does not make its way through to dhcpd.conf
This is because...
Phil Davis
01:23 PM Revision 4c62f9e6: Fix DDNS domain for static map DHCP entries
If you specify DDNS Domain in a DHCP static map entry, it does not make its way through to dhcpd.conf
This is because...
Phil Davis
01:23 PM Revision ea8e683a: Merge pull request #3109 from phil-davis/patch-1
Stephen Beaver
01:22 PM Revision 323fb3ca: Merge branch 'RELENG_2_3_2' of git.pfmechanics.com:pfsense/pfsense into RELENG_2_3_2
Stephen Beaver
01:22 PM Revision 3896b732: Code style and comments
No functional change - just making style consistent
(cherry picked from commit 9d3e8723171c727cf43338bd8e95ab2bb7e6a...
Phil Davis
01:21 PM Revision 9488f42b: Code style and comments
No functional change - just making style consistent
(cherry picked from commit 9d3e8723171c727cf43338bd8e95ab2bb7e6a...
Phil Davis
01:21 PM Revision 43d68f65: Merge pull request #3108 from phil-davis/codestyle
Stephen Beaver
01:18 PM Revision a5a55231: Fix DDNS domain for static map DHCP entries
If you specify DDNS Domain in a DHCP static map entry, it does not make its way through to dhcpd.conf
This is because...
Phil Davis
01:18 PM pfSense Packages Bug #6721: Incorrect OpenBGPd package scripts prevent use of both IPv4 and IPv6
Steps to reproduce:
1. Install the latest OpenBGPd package;
2. Enter the needed settings, adding both IPv4 and IP...
Luzemario Dantas
12:50 PM pfSense Packages Bug #6721: Incorrect OpenBGPd package scripts prevent use of both IPv4 and IPv6
Please read the title as: Incorrect OpenBGPd package scripts prevent use of both IPv4 and IPv6 - at the same time. Luzemario Dantas
12:40 PM pfSense Packages Bug #6721 (Needs Patch): Incorrect OpenBGPd package scripts prevent use of both IPv4 and IPv6
Symtoms of this bug can be seen in the post below:
[[https://forum.pfsense.org/index.php?topic=116900.0]]
To co...
Luzemario Dantas
12:38 PM Revision 0448b4d5: Add 2nd server to the list of places to submit files
Renato Botelho
12:38 PM Revision c9cd556b: Add 2nd server to the list of places to submit files
Renato Botelho
12:38 PM Revision 1d2eda73: Add 2nd server to the list of places to submit files
Renato Botelho
11:39 AM Bug #6719: OpenVPN DNS Leak Windows 10
I use mullvad vpn on one of my PCs which is running windows 10. As long as you are using openvpn 2.3.9 or newer, it h... Daryl Morse
09:22 AM Bug #6719 (Assigned): OpenVPN DNS Leak Windows 10
Ran some quick tests and both ways work so long as the client is current. With the option present, DNS queries only g... Jim Pingle
07:49 AM Bug #6719: OpenVPN DNS Leak Windows 10
All we could do is push the setting or add it to the config. Beyond that it's a Windows problem that isn't anything w... Jim Pingle
07:40 AM Bug #6719: OpenVPN DNS Leak Windows 10
I tried
*push block-outside-dns* @ pfSense & *setenv opt block-outside-dns* @ openVPN-Client
nslookup still tr...
Moritz Hofmann
07:08 AM Bug #6719: OpenVPN DNS Leak Windows 10
Did you try the suggested fix on the ticket you linked? Put this in your advanced server config box:... Jim Pingle
02:51 AM Bug #6719 (Resolved): OpenVPN DNS Leak Windows 10
Windows 10 DNS resolver always uses local DNS server, which defeats the point of --redirect-gateway / Road-Warrior sc... Moritz Hofmann
10:10 AM Bug #6718: openvpn server exits if client has explicit-exit-notify 2 specified
OK I can reproduce that. From reading OpenVPN's docs and forum, explicit-exit-notify is *not* intended for use with S... Jim Pingle
09:14 AM Bug #6718: openvpn server exits if client has explicit-exit-notify 2 specified
server config as below:
shared key
udp
tun
1104 port
BF-CBC
SHA1
ipv4 tunnel entwork - 10.10.10.0/24
do not f...
Bipin Chandra
08:44 AM Bug #6718 (Not a Bug): openvpn server exits if client has explicit-exit-notify 2 specified
I can't reproduce this at all. I added that directive to a client and the server keeps running afterward, no problems... Jim Pingle
12:43 AM Bug #6718 (Not a Bug): openvpn server exits if client has explicit-exit-notify 2 specified
i have 2 pfsense boxes where 1 is a openvpn server and the other a client, if the client config has explicit-exit-not... Bipin Chandra
09:55 AM Bug #6720: DHCPD Options in "Sub-"Pools ignored, dhcpd.conf does not contain informations, dhcpd therefore not serving
Please try the code at pull request https://github.com/pfsense/pfsense/pull/3112 - /etc/inc/services.inc - and report... Phillip Davis
08:45 AM Bug #6720: DHCPD Options in "Sub-"Pools ignored, dhcpd.conf does not contain informations, dhcpd therefore not serving
Looking in the code I found a couple of other things when I did some first looking:
1) A problem when specifying DDN...
Phillip Davis
03:33 AM Bug #6720 (Resolved): DHCPD Options in "Sub-"Pools ignored, dhcpd.conf does not contain informations, dhcpd therefore not serving
Dear Maintainers,
we have recently discovered that pfsense 2.3.2-RELEASE does not treat Options in DHCP "Sub-"Pool...
Harald Gutmann
04:45 AM Revision 9d3e8723: Code style and comments
No functional change - just making style consistent Phil Davis

08/15/2016

11:44 PM Bug #6717 (Resolved): Status / DHCPv6 Leases Issues
I'm running 2.3.3.a.20160815.2144 with PR 3102/1, 3102/2, 3103, 3105, 3106 and 3107, testing the fix for https://redm... Daryl Morse
07:37 PM Feature #3377: OAuth2 authentication in captive portal
Thomas NOEL wrote:
> In Captive Portal we have native, ldap and radius authentication. Today, a lot of authenticatio...
Cleber Ronaldo
07:31 PM Revision ad4ed096: Improved solution to #6716
(cherry picked from commit 0ed3b15981b4451efb11839d6ee7b9acf1ed1d84) Stephen Beaver
07:31 PM Revision 4c1c9e52: Improved solution to #6716
(cherry picked from commit 0ed3b15981b4451efb11839d6ee7b9acf1ed1d84) Stephen Beaver
07:30 PM Revision 0ed3b159: Improved solution to #6716
Stephen Beaver
06:54 PM Revision 913a3ea7: Fixed #6716
(cherry picked from commit 4d4782fcd7213b5f279cb372853f5fedb07f6178) Stephen Beaver
06:54 PM Revision eb53e873: Fixed #6716
(cherry picked from commit 4d4782fcd7213b5f279cb372853f5fedb07f6178) Stephen Beaver
06:48 PM Revision 4d4782fc: Fixed #6716
Stephen Beaver
04:49 PM Bug #5993: dhcp6c not started until an RA received
Correction:
I did another test. After around 30 minutes after releasing the WAN interface, both gateways were offl...
Daryl Morse
04:31 PM Bug #5993: dhcp6c not started until an RA received
A lot of progress made on this bug and other issues. Currently, I'm running the latest snapshot with the following PR... Daryl Morse
04:29 PM Revision b2bc6981: Remove more unnecessary ports for ARM
Renato Botelho
04:17 PM Revision 855d9774: Fix filename
Renato Botelho
04:14 PM Revision a394951a: Define which packages will be build for ARM using a exclusion list
Renato Botelho
04:11 PM Revision f72d162f: Make it possible to create a exclude list for each architecture for poudriere bulk list
Renato Botelho
03:07 PM Bug #6712: services_unbound.php Host Overrides don't change any unbound configuration
Thanks to PiBa-NL on IRC who helped me troubleshoot this down to:
/etc/inc/system.inc
339 // prefer dnsma...
Jeremy C. Reed
02:56 PM Revision 571139c0: Fixed #6700
(cherry picked from commit 40eca7e3a8abdff768e29e310ba945e74fdcfe17) Stephen Beaver
02:56 PM Revision 0e063307: Fixed #6700
(cherry picked from commit 40eca7e3a8abdff768e29e310ba945e74fdcfe17) Stephen Beaver
02:55 PM Revision 40eca7e3: Fixed #6700
Stephen Beaver
02:28 PM Revision dba59021: Fixed #6710
(cherry picked from commit 13b92290e0fa367a76016a15ccf5e76ff77b0706) Stephen Beaver
02:28 PM Revision 247c0d9a: Fixed #6710
(cherry picked from commit 13b92290e0fa367a76016a15ccf5e76ff77b0706) Stephen Beaver
02:27 PM Revision 13b92290: Fixed #6710
Stephen Beaver
02:03 PM Bug #6716 (Resolved): services_unbound_acls: Network "Delete" button is not hidden if only on network listed
Anonymous
02:00 PM Bug #6716 (Feedback): services_unbound_acls: Network "Delete" button is not hidden if only on network listed
Applied in changeset commit:4d4782fcd7213b5f279cb372853f5fedb07f6178. Anonymous
01:46 PM Bug #6716 (Resolved): services_unbound_acls: Network "Delete" button is not hidden if only on network listed
Also help text in a repeatable section is duplicated if the last row is deleted Anonymous
01:53 PM Revision 64941233: Fixed #6709
(cherry picked from commit 3726918df1dc4744bb7ea694ec5c8f40de59d856) Stephen Beaver
01:53 PM Revision df57a1cf: Fixed #6709
(cherry picked from commit 3726918df1dc4744bb7ea694ec5c8f40de59d856) Stephen Beaver
01:53 PM Revision 3726918d: Fixed #6709
Stephen Beaver
01:46 PM Revision e0eadf80: Fixed #6703
(cherry picked from commit e5343844c6de78feafae9e601b25bdf31f114a50) Stephen Beaver
01:45 PM Revision 5a30887e: Fixed #6703
(cherry picked from commit e5343844c6de78feafae9e601b25bdf31f114a50) Stephen Beaver
01:45 PM Revision e5343844: Fixed #6703
Stephen Beaver
01:39 PM Revision f7f0f1c5: Fixed #6706
(cherry picked from commit b86938e7e19a09a5b1f3f54825193b57f7c73131) Stephen Beaver
01:39 PM Revision 5e40e7af: Fixed #6706
(cherry picked from commit b86938e7e19a09a5b1f3f54825193b57f7c73131) Stephen Beaver
01:38 PM Revision b86938e7: Fixed #6706
Stephen Beaver
01:34 PM Revision 1aa05d2b: Fixed #6705
(cherry picked from commit d526fc2d2acc87af2ca829dfe01f0037e3368051) Stephen Beaver
01:34 PM Revision 089d1e3f: Fixed #6705
(cherry picked from commit d526fc2d2acc87af2ca829dfe01f0037e3368051) Stephen Beaver
01:33 PM Revision d526fc2d: Fixed #6705
Stephen Beaver
01:21 PM Revision e800783e: Fixed #6701
(cherry picked from commit 03fd538eefd641771b6302370b901fe4ace3ab4f) Stephen Beaver
01:20 PM Revision d8d64a57: Fixed #6701
(cherry picked from commit 03fd538eefd641771b6302370b901fe4ace3ab4f) Stephen Beaver
01:19 PM Revision 03fd538e: Fixed #6701
Stephen Beaver
01:00 PM Revision d11cdca7: Fixed #6704
(cherry picked from commit fd778d8bef8ea3b0e5dcc8007de242b6e2ac6d5a) Stephen Beaver
01:00 PM Revision d4879244: Fixed #6704
(cherry picked from commit fd778d8bef8ea3b0e5dcc8007de242b6e2ac6d5a) Stephen Beaver
12:59 PM Revision fd778d8b: Fixed #6704
Stephen Beaver
09:57 AM Bug #6700 (Resolved): dhcp6 Related log entries
Anonymous
09:49 AM Bug #6705 (Resolved): diag_routes "Rows to display" is off by one
Anonymous
08:40 AM Bug #6705 (Feedback): diag_routes "Rows to display" is off by one
Applied in changeset commit:d526fc2d2acc87af2ca829dfe01f0037e3368051. Anonymous
09:48 AM Bug #6704 (Resolved): diag_edit.php Go to Line limits
Anonymous
08:10 AM Bug #6704 (Feedback): diag_edit.php Go to Line limits
Applied in changeset commit:fd778d8bef8ea3b0e5dcc8007de242b6e2ac6d5a. Anonymous
09:33 AM Bug #6710 (Resolved): diag_resetstate.php confirmation prompt even if checkboxes unchecked
Anonymous
08:54 AM Bug #6709 (Resolved): diag_resetstate select or all?
Anonymous
08:46 AM Feature #6703 (Resolved): diag_edit.php suggestion
Anonymous
08:40 AM Bug #6706 (Resolved): diag_routes Use a regular expression description or use
Anonymous
08:22 AM Bug #6701 (Resolved): diag_authentication.php related status link
Anonymous
03:19 AM Todo #6697: White squares around the numeric values in the Status / Queues page
Also just noticed the queue name could do with a little more space between it and the left edge of the table. Andy Kniveton

08/14/2016

10:03 PM Revision 6756052b: Call services_dhcpd_configure with the right parameter
Previously code segment for v4 would call both v4 and v6. Fixed to call v4 and v6 where appropriate. NewEraCracker
02:04 PM Bug #6687: Secure email fails with private CA
The concept of an option to ignore certificate validation is completely unrelated to this issue. Denny Page
05:35 AM Bug #6687: Secure email fails with private CA
Any attempts to do certificate validation here should be completely optional here (as in, a separate checkbox). *Way*... Kill Bill
12:21 PM Bug #5993: dhcp6c not started until an RA received
I spent a while doing some testing with pfsense and 4 clients. Your latest fix definitely seems to have fixed the pro... Daryl Morse
01:19 AM Bug #5993: dhcp6c not started until an RA received
I backed out of the previous changes (PR plus edits) and installed the updated PR. I tested it on a hyper-v server wi... Daryl Morse
04:58 AM Bug #6712: services_unbound.php Host Overrides don't change any unbound configuration
This certainly works. Would suggest using the forums for help. Kill Bill

08/13/2016

09:42 PM Bug #6715 (Resolved): diag_traceroute.php suggestions
1) diag_traceroute.php the IPv4 traceroute when
resolving IPs to hostnames outputs both,
but the IPv6 traceroute6 o...
Jeremy C. Reed
09:26 PM pfSense Packages Bug #6714 (Rejected): diag_testport suggestions and issues
I hope you don't mind that I place multiple things in a single ticket here about diag_testport:
1) can output erro...
Jeremy C. Reed
09:17 PM Bug #6701: diag_authentication.php related status link
This is also related:
diag_tables has "Related status" shortcut for "aliases" that
goes to same diag_tables page....
Jeremy C. Reed
05:38 PM Bug #6701: diag_authentication.php related status link
Thanks Jeremy,
I'll look at this (and the rest of your list) on the next couple of days.
Anonymous
05:23 PM Bug #6701 (Resolved): diag_authentication.php related status link
The diag_authentication "related status" icon links to same page :)
$shortcuts['authentication']['status'] = "diag...
Jeremy C. Reed
09:12 PM Bug #6713 (Resolved): diag_tables table or alias or database?
be consistent in naming or add more doc details
to the diag_tables page as custom tables are called "aliases" elsewh...
Jeremy C. Reed
08:56 PM Bug #6712 (Resolved): services_unbound.php Host Overrides don't change any unbound configuration
services_unbound.php
I cannot get any Host Override to be configured with unbound.
/var/unbound/host_entries.conf ...
Jeremy C. Reed
08:22 PM Bug #6711 (Resolved): diag_states_summary # States and # States twice (explain one is per protocol)
diag_states_summary is not intuitive as each table has two columns
with same "# States" header.
first is for $ipinf...
Jeremy C. Reed
07:46 PM Bug #5993: dhcp6c not started until an RA received
I've updated my PR with another commit (almost the same I sent you via PM a few hours ago):
https://github.com/pfsen...
Jorge M. Oliveira
07:22 PM Bug #5993: dhcp6c not started until an RA received
From my reply to your PM, based on a discussion with an engineer at my ISP, my understanding is the following:
> T...
Daryl Morse
04:42 PM Bug #5993: dhcp6c not started until an RA received
Copying the info I shared on my reply to your PM on the forum.
> From my understanding, the whole point to setting...
Jorge M. Oliveira
01:38 AM Bug #5993: dhcp6c not started until an RA received
I was holding off on upgrading to the latest snapshot because PR 3092 wouldn't install. However, I noticed today that... Daryl Morse
05:58 PM Bug #6698 (Rejected): Hostname updates in Alias didn't work
Unable to reproduce. Loaded up pfSense-CE-2.3.2-RELEASE-4g-i386-nanobsd-vga.img and hostnames in aliases worked fine.... Jim Pingle
08:18 AM Bug #6698 (Rejected): Hostname updates in Alias didn't work
I have a fresh 2.3.2 install on i386 on a 4gb cf card (nano version). Hostnames in Alias didn't work. On the firewall... Alexander Rehbein
05:58 PM Bug #6699 (Rejected): Filter reload didn't work
Unable to reproduce. Loaded up pfSense-CE-2.3.2-RELEASE-4g-i386-nanobsd-vga.img and filter reload worked fine.
Ple...
Jim Pingle
08:21 AM Bug #6699 (Rejected): Filter reload didn't work
I have a fresh 2.3.2 install on i386 on a 4gb cf card (nano version). New rules didn't apply automatically. I have to... Alexander Rehbein
05:54 PM Bug #6393: SMART service handling is incomplete/missing
See also #6707 Jim Pingle
05:54 PM pfSense Packages Bug #6707 (Duplicate): diag_smart is broken
Duplicate of #6393
That page needs significant work.
Jim Pingle
05:33 PM pfSense Packages Bug #6707 (Duplicate): diag_smart is broken
it appears the diag_smart is broken.
For example, its has
$start_script = "/usr/local/etc/rc.d/smartd.sh";
and ...
Jeremy C. Reed
05:46 PM Bug #6710 (Resolved): diag_resetstate.php confirmation prompt even if checkboxes unchecked
diag_resetstate.php if the checkbox is UNchecked,
clicking "Reset" still prompts "Are you sure you wish to Reset?"
...
Jeremy C. Reed
05:41 PM Bug #6709 (Resolved): diag_resetstate select or all?
diag_resetstate.php header says "Select States to Reset"
but the docs there says "will remove all entries from the
...
Jeremy C. Reed
05:35 PM Bug #6708 (Resolved): diag_sockets wrong info
the diag_sockets.php info says sockstat uses capital -L
when using the lowercase -l.
It does not use -L and it does...
Jeremy C. Reed
05:31 PM Bug #6706 (Resolved): diag_routes Use a regular expression description or use
diag_routes "Use a regular expression to filter IP address or hostna
mes" actually works to match any field like fla...
Jeremy C. Reed
05:29 PM Bug #6705 (Resolved): diag_routes "Rows to display" is off by one
the diag_routes "Rows to display" is off by one as it includes
the header line too. If you choose 10 you would want...
Jeremy C. Reed
05:28 PM Bug #6704 (Resolved): diag_edit.php Go to Line limits
Edit File "Go to Line" selection box allows negative numbers and
line numbers longer than the file contains
Jeremy C. Reed
05:26 PM Feature #6703 (Resolved): diag_edit.php suggestion
suggestion for the Edit File have the input box have some
description or label like "Path name" or "File name or di...
Jeremy C. Reed
05:25 PM Bug #6702 (Resolved): Command Prompt syntax error and crash detection report
syntax error in the PHP execution in Command Prompt menu
should not cause a crash detection to suggest reporting to ...
Jeremy C. Reed
05:19 PM Bug #6700 (Resolved): dhcp6 Related log entries
icon for Related log entries for the DHCPv6 Server (and relay) is
for logfile=dhcp but that doesn't match anything s...
Jeremy C. Reed
07:46 AM Todo #6697 (New): White squares around the numeric values in the Status / Queues page
White squares around the numeric values in the Status / Queues page, I've tried Safari & Firefox, both show the same.... Andy Kniveton

08/12/2016

05:42 PM Revision 65d08bad: Change hostname to send pkg repos
Renato Botelho
05:42 PM Revision f92fa4da: Change hostname to send pkg repos
Renato Botelho
05:42 PM Revision 945b0306: Change hostname to send pkg repos
Renato Botelho
05:41 PM Revision 4fc091b2: Change build scripts to make it possible to rsync files to multiple locations
Renato Botelho
05:41 PM Revision 07f759fe: Remove bwlimit from rsync
Renato Botelho
05:41 PM Revision 22ce6dac: Do not scp log files
Renato Botelho
05:41 PM Revision 1f9a4b54: Retire snapshots_rotate_logfile()
Renato Botelho
05:16 PM Revision 5163c3ca: Change build scripts to make it possible to rsync files to multiple locations
Renato Botelho
05:11 PM Revision cdacfec8: Change build scripts to make it possible to rsync files to multiple locations
Renato Botelho
05:03 PM Revision 820b17e1: Remove bwlimit from rsync
Renato Botelho
05:03 PM Revision ece2a8bc: Remove bwlimit from rsync
Renato Botelho
05:02 PM Revision 09361dcd: Do not scp log files
Renato Botelho
05:02 PM Revision 1577befd: Retire snapshots_rotate_logfile()
Renato Botelho
04:42 PM Revision 8b46747e: Merge pull request #3099 from NewEraCracker/patch-3
Renato Botelho
04:41 PM Revision acfbc960: Protect package_reinstall_all()
If one restores a config.xml without packages, there will be a warning about invalid argument supplied for foreach().... NewEraCracker
04:41 PM Revision ebf83322: Merge pull request #3098 from NewEraCracker/patch-2
Renato Botelho
04:40 PM Revision 62630ddc: Be sure that user_settings for widgets is an array
(cherry picked from commit 5aad73235c1965e9f4c000244ca657ac9d1e4f68) NewEraCracker
04:40 PM Revision 42481352: Merge pull request #3097 from NewEraCracker/patch-1
Renato Botelho
04:38 PM Revision 1707b6c6: Fixed to properly save configs in PPPs interfaces
(cherry picked from commit 545a7850ea37cd8c379cc75428353ad0089f2bd3) Francisco Cavalcante
04:38 PM Revision 2ee79571: Fixed to properly save configs in PPPs interfaces
(cherry picked from commit 545a7850ea37cd8c379cc75428353ad0089f2bd3) Francisco Cavalcante
04:35 PM Revision f59c3243: Merge pull request #3096 from ch1c4um/fixed_to_save_ppp_interface_configs
Renato Botelho
04:34 PM Revision 7f9a6162: Merge pull request #3095 from NewEraCracker/redmine-6686
Renato Botelho
04:33 PM Revision 56798d9d: Retire extensions.ini
Renato Botelho
02:59 PM Revision f97cd756: Fix typo leading to syntax error
NewEraCracker
02:55 PM Revision 5eda5816: Protect package_reinstall_all()
If one restores a config.xml without packages, there will be a warning about invalid argument supplied for foreach().... NewEraCracker
02:27 PM Revision 5aad7323: Be sure that user_settings for widgets is an array
NewEraCracker
12:20 PM Bug #6696 (New): Add configure link to Status > Queues error message if traffic shaping not configured
If I'm not mistaken it should link here: ... Jared Dillard
07:08 AM Bug #6695: issues LAGG and openvpn TAP
it works in 2.1.5 and 2.2.5.
But I understand that you would not supported this configuration
dominique dupont
06:50 AM Bug #6695 (Rejected): issues LAGG and openvpn TAP
That is not, and has never been, a supported configuration. Jim Pingle
06:35 AM Bug #6695 (Rejected): issues LAGG and openvpn TAP
I have 2 LAGG openvpn TAP mode.
If I disable and enable a VPN, then the VPN is down (dasboard: 'Unable to Contact se...
dominique dupont

08/11/2016

07:44 PM Revision 545a7850: Fixed to properly save configs in PPPs interfaces
Francisco Cavalcante
07:36 PM Revision 07c208ff: Ticket #3734: Retire growl.class
Renato Botelho
07:36 PM Revision e7cf30eb: Ticket #3734: Convert growl related code to use pear-Net_Growl port
Renato Botelho
05:59 PM Revision 2c67bef9: Be more verbose and let user know results of SMTP settings test
Renato Botelho
05:59 PM Revision 50950d06: Be more verbose and let user know results of SMTP settings test
Renato Botelho
05:53 PM Revision 79925b87: Pass along send_smtp_message() return, otherwise message will not be shown when testing SMTP settings
Renato Botelho
05:53 PM Revision 8293937f: Pass along send_smtp_message() return, otherwise message will not be shown when testing SMTP settings
Renato Botelho
05:53 PM Revision f2b0bf18: Pass along send_smtp_message() return, otherwise message will not be shown when testing SMTP settings
Renato Botelho
05:38 PM Revision c8c46e5a: Ticket #3734:
- Added timeout parameter for SMTP configuration
- Removed STARTTLS option, it's enabled automatically by pear-Mail w...
Renato Botelho
02:41 PM Revision 626ff13a: Ticket #3734: Retire smtp.inc, sasl.inc and *sasl_client.inc in favor of pear-Mail port
Renato Botelho
02:41 PM Revision d4c5ada9: Ticket #3734: Convert notify_via_smtp() to use pear-Mail
Renato Botelho
02:21 PM Revision 79581554: Ensure extensions.ini is readable by non root users
https://redmine.pfsense.org/issues/6686 NewEraCracker
01:41 PM Revision 238603f5: Ticket #3734: Retire PEAR.inc and use PEAR.php from ports
Renato Botelho
12:44 PM Bug #6694 (Resolved): Change setting at interfaces_ppps_edit.php not working
When changing the settings at the page interfaces_ppps_edit.php there is always the following error:... Alexander Nix
11:55 AM Revision 24a7aba2: Enable SMTP support for pear-Mail
Renato Botelho
11:02 AM Feature #6546: pfSense should support logging to e.g. ELK stacks
Parsing syslog input is indeed dog simple in Python with asyncore. I should be able to just glue this together to my ... Bruce Simpson
10:04 AM Bug #6692: APU1D crashes on boot with pfSense 2.3.2 on the APU1D
We run 64-bit images exclusively on ours, never 32-bit. Jim Pingle
09:56 AM Bug #6692: APU1D crashes on boot with pfSense 2.3.2 on the APU1D
Apparently i386 works, and this flaw is only with the 64-bit port. GI Jack
09:16 AM Bug #6692 (Not a Bug): APU1D crashes on boot with pfSense 2.3.2 on the APU1D
We regularly test on the APU hardware we have and there are no problems we have found. Please post on the forum first... Jim Pingle
08:59 AM Bug #6692 (Not a Bug): APU1D crashes on boot with pfSense 2.3.2 on the APU1D
I upgraded from pfsense 2.3.1_r5 to 2.3.2, and the pfSense crashes on boot, the reboots endlessly on loop.
The liv...
GI Jack
09:38 AM Feature #6693 (Rejected): Security Groups
Users and groups already have privileges to control page access. Post on the forum for assistance or read the documen... Jim Pingle
09:29 AM Feature #6693 (Rejected): Security Groups
Would it be possible or is it already possible to create security and select what the user/group has access to and wh... Dan Gratton
07:54 AM Bug #6678: Virtual IPv6 IP (IP Alias) on a DHCPv6-PD tracked interface causes inconsistencies
agreed on it being a dupe. Not sure how I missed 5999 when I searched initially. Gary Dezern
05:55 AM Bug #6678: Virtual IPv6 IP (IP Alias) on a DHCPv6-PD tracked interface causes inconsistencies
This looks like it might be a duplicate of https://redmine.pfsense.org/issues/5999. Anonymous
06:20 AM Bug #6691 (New): dhcp6c quits after only two tries if no response was received
Last night my ISP connection went down for a few hours, presumably for maintenance on their end. A few minutes into ... Anonymous

08/10/2016

07:10 PM Revision 470fddb1: Ticket #3734: Replace etc/inc/IPv6.inc by pear-Net_IPv6 port
Renato Botelho
04:27 PM Revision 6989a7c5: Remove copy of pear-Crypt_CHAP from repo and use ports
Renato Botelho
04:27 PM Revision 1bdfe40a: Fix path to require pear-Crypt_CHAP installed file. Ticket #3734
Renato Botelho
04:26 PM Revision ea0e22ee: Add pear directory to PHP include_path. Ticket #3734
Renato Botelho
02:34 PM pfSense Packages Bug #6690 (Closed): SURICATA IPS Issue - Kills VLANS & Traffic Shaper
Strips 802.1q tagged traffic from an interface when running inline IPS mode.
Traffic shapper no longer works as one ...
Steven Kreitzer
12:26 PM Todo #6689 (Resolved): Add enable link to Status > UPnP & NAT-PMP error message if disabled
Adding a "Go here to enable" link to the error message seems like it would be helpful.
If I'm not mistaken, then l...
Jared Dillard
11:28 AM Todo #3734: Remove PHP static pear modules from repo and use ports
CHAP.inc removed in commit:6989a7c Renato Botelho
08:59 AM pfSense Packages Bug #6305: Quagga problems updating routes / mistakenly showing "kernel"-routes while they are not
Someone who can reproduce it reliably needs to get the details of how to reproduce it reported to the Quagga project ... Jim Pingle
08:46 AM pfSense Packages Bug #6305: Quagga problems updating routes / mistakenly showing "kernel"-routes while they are not
Any update on the topic? Juri Dmitrijev
08:33 AM Feature #6546: pfSense should support logging to e.g. ELK stacks
I now have that Python code wrapped up as a class, for use with Python logging. A current limitation is that logging ... Bruce Simpson
07:34 AM Bug #6688: Special characters in a password cause problems
If that example you posted is the one that didn't work, I can see why. Looks like ">" was changed to "&amp;gt;" twice... Jim Pingle

08/09/2016

08:57 PM Bug #6688 (Resolved): Special characters in a password cause problems
With the following config snippet (some info redacted), pfsense reports:
php-fpm[71756]: /services_dyndns_edit...
John Dickinson
06:55 PM Bug #6687 (Duplicate): Secure email fails with private CA
If a private CA such as a self signed enterprise CA is in use, the CA is not recognized when establishing SMTP connec... Denny Page
06:26 PM Revision 212596c4: Fix bind options and add them for 9.10 as well
Renato Botelho
06:26 PM Revision 3bd18cab: Fix bind options and add them for 9.10 as well
Renato Botelho
05:17 PM Revision bdcdd6e3: Fix wording of the "Reject leases from" option for a DHCP interface.
Jim Pingle
05:17 PM Revision 3c36d8ce: Fix wording of the "Reject leases from" option for a DHCP interface.
Jim Pingle
05:17 PM Revision d3225265: Fix wording of the "Reject leases from" option for a DHCP interface.
Jim Pingle
03:55 PM pfSense Packages Bug #5749: OpenVPN Export Certs with password, password doesn't open .pk12 container.
I tried using "@" and "." in the password and both worked fine.
Looking at the JS code, it's using the escape() fu...
Brian Talbot
12:44 PM pfSense Packages Bug #5749: OpenVPN Export Certs with password, password doesn't open .pk12 container.
Is it only "+" that causes a problem or have you tried other special characters as well?
The way the password is s...
Jim Pingle
02:07 PM Revision 495527b1: Remove workarounds to sort extensions.ini since ports tree now has a better solution in place to track PHP modules dependencies
Renato Botelho
01:52 PM Bug #6686: PHP extensions.ini cannot be read by non root users
This file is being removed in 2.4.
If a 2.3.3 is issued, it would be desirable to add a chmod to 644 following cre...
Denny Page
01:29 PM Bug #6686 (Resolved): PHP extensions.ini cannot be read by non root users
/usr/local/etc/php/extensions.ini is owned by root and created with 600 permissions. This prevents proper initializat... Denny Page
12:28 PM Revision 02fe4964: Re-enable mosh, fixed
Renato Botelho
09:40 AM Bug #1629: invalid state table entries after WAN IP change
I have observed that executing the following code does not seem to actually change anything in config.xml -- so I thi... → luckman212
02:45 AM pfSense Packages Bug #6129: zabbix agent/proxy 2.4 not ported to pfSense 2.3
I would also like to see it come back. As we can't upgrade all our boxes to pf2.3 in one day we have a problem. 2.3 D... Pim Janssen

08/08/2016

11:45 PM Revision e2912fc2: Disable build of znc and mosh, both broken
Renato Botelho
10:37 PM Bug #5993: dhcp6c not started until an RA received
I looked into the gateway status issue. After pfsense boots with PR #3092 installed, the status of WAN_DHCP6 is unkno... Daryl Morse
10:31 PM Bug #5993: dhcp6c not started until an RA received
Phillip Davis wrote:
> The text typo was in existing code, so I made a separate pull request to tidy that up:
> htt...
Daryl Morse
03:19 PM Bug #5993: dhcp6c not started until an RA received
Phillip Davis wrote:
> The text typo was in existing code, so I made a separate pull request to tidy that up:
> htt...
Daryl Morse
07:04 PM Revision e7ab83cc: Enable apcupsd build
Renato Botelho
07:04 PM Revision 1f57dd8e: Enable apcupsd build
Renato Botelho
04:51 PM Feature #6674: Custom widget preference settings per user
This will need a target version set so that it will appear in release notes some time. Not sure what you guys are goi... Phillip Davis
09:14 AM Feature #6674 (Resolved): Custom widget preference settings per user
PRs tested and merged. Thanks Phil. Anonymous
12:49 PM Revision 96d2f02e: Text typo
Noted by Daryl Morse in comment on Redmine bug 6637.
(cherry picked from commit bf6ae0ad277710ffa64ee0967c5d4f717c2bc...
Phil Davis
12:49 PM Revision 32916e5c: Text typo
Noted by Daryl Morse in comment on Redmine bug 6637.
(cherry picked from commit bf6ae0ad277710ffa64ee0967c5d4f717c2bc...
Phil Davis
12:49 PM Revision 72aa662b: Merge pull request #3094 from phil-davis/patch-1
Stephen Beaver
11:19 AM pfSense Packages Bug #5749: OpenVPN Export Certs with password, password doesn't open .pk12 container.
Any update on this? I'm having the same issue on 2.3.2. Using openvpn-client-export 1.3.8 (just reinstalled it as wel... Brian Talbot
11:00 AM Bug #6685 (Feedback): LAGG groups get stuck with an unconfigurable 1400MTU with em NICs.
We don't have anything that would be forcing that to 1400 that I can see. I have a local setup here with LAGG and VLA... Jim Pingle
10:54 AM Bug #6685 (Closed): LAGG groups get stuck with an unconfigurable 1400MTU with em NICs.
I'm not sure of the exact scope of this issue, but I can at least say it happens when reproducing my environment.
...
Nick Zurku
09:15 AM Bug #6676 (Resolved): Delete NAT rule with associated firewall rule does not update firewall separators position
Fixed by https://github.com/pfsense/pfsense/pull/3089 Anonymous
09:12 AM Bug #6669 (Resolved): index.php: Adding a new widget corrupts the settings for existing widgets
Anonymous
08:21 AM pfSense Packages Bug #6681 (Resolved): Squid local auth password handling is weak and only accepting short passwords
Tested and working here as well Jim Pingle
08:18 AM pfSense Packages Bug #6681: Squid local auth password handling is weak and only accepting short passwords
Tested this with a long password that failed in 0.4.21.
Works as expected in 0.4.22. Rejects incorrect password. R...
Steve Wheeler
05:02 AM Bug #6528: The captive portal cannot be used on interface lan since it is part of a bridge but works anyway
Orsiris de Jong wrote:
> Screamed horray to quick !
> When the interface the CP is binded to is bridged, everything...
van trung tran
03:56 AM Revision bf6ae0ad: Text typo
Noted by Daryl Morse in comment on Redmine bug 6637. Phil Davis

08/07/2016

10:57 PM Bug #5993: dhcp6c not started until an RA received
The text typo was in existing code, so I made a separate pull request to tidy that up:
https://github.com/pfsense/pf...
Phillip Davis
06:07 PM Bug #5993: dhcp6c not started until an RA received
I'm currently testing the latest development snapshot (as of the time of this post) with the latest patch from (DHCP6... Daryl Morse
01:44 PM pfSense Packages Bug #6684 (Resolved): Setting IKEv2 Phase 2 in Mobile Config appears to generate invalid Apple Profile
Setting "Phase2 PFS Group - Provide the Phase2 PFS group to clients (overrides all mobile phase2 settings)" in Mobile... Chris Linstruth

08/06/2016

02:28 PM Bug #6675: Port Forward on LAN does not work in 2.3.x
Only you correcting what you said above in pfSense own documentation just finding something interesting, he recommend... Tácio Andrade
12:32 PM Bug #5993: dhcp6c not started until an RA received
Daryl Morse wrote:
> I'm currently testing the latest development snapshot (as of the time of this post) with the ...
Daryl Morse
06:14 AM Feature #2358: NAT64 support
UPVOTE. I'd love to be able to set up an IPv6-only network and just use NAT64 to redirect old requests. Tom .
 

Also available in: Atom