Activity
From 09/06/2016 to 10/05/2016
10/05/2016
-
10:00 PM Bug #6840 (Resolved): Upgrade ISC dhcpd to 4.3.5 to address missing hostname workaround
- ISC DHCP Server 4.3.0 introduced a bug which caused hostnames to go missing in pfSense 2.3.x. This was addressed thro...
-
06:18 PM Feature #6839: Mechanism to prevent flooding log with entries from blocked packets
- You can create your own Private Networks alias, and then make an ordinary block rule on WAN to block that. Then you c...
-
05:30 PM Feature #6839 (Closed): Mechanism to prevent flooding log with entries from blocked packets
- The firewall log is being filled with thousands entries from blocked packets: WAN / 10.197.248.27 / 224.0.0.1 / IGMP....
-
09:13 AM Bug #6838 (Resolved): bsnmpd logs errors when /etc/printcap is missing
- We do not ship with an /etc/printcap file but it appears that bsnmpd does not like that fact. When probed in various ...
-
06:19 AM Feature #2358: NAT64 support
- UPVOTE
My new ISP provides native IPv6 and I would prefere not to have configuring my hole network with IPv4 if I co...
10/04/2016
-
02:51 PM
Bug #6835 (Closed): firewall_nat_out_edit.php Translation section hidden
-
01:16 AM Bug #6835: firewall_nat_out_edit.php Translation section hidden
- Looks good here. Thanks.
-
- It depends on whether or not one or both of your WANs is a PPP type WAN. Default gateway switching is still an experi...
-
02:09 PM Bug #6837 (Rejected): Gateway Failover does not failback
- I'm using default gateway failover, not gateway groups.
When my primary wan connection goes down, it's properly de... -
11:05 AM
Bug #5999: IPv6 IP Alias prevents Track Interface from working with DHCPv6 and RA
- Any update on this? I would really like to be able to use ULA and GUA IPv6 addresses at the same time on my network,...
-
11:04 AM
Bug #5413: Reduce disruptions when changing DNS records from DHCP leases in Unbound
- Is there any update on when this might get worked on? It has been almost a year now.
-
08:43 AM Feature #6800: Feature request: Logon to remember the URL that initiated the logon sequence and return to it
- Jim Pingle wrote:
> We used to do that, but ultimately decided against it as it was a potential security issue. We m... -
05:34 AM Bug #6263: Encryption options for every P2 on a given P1 are written to each P2 individually inside ipsec.conf with multiple P2 entries + split conn entries
- might be always been that way but this is very painful... all other brand do support this properly.
I just start usi...
10/03/2016
-
08:40 AM
Bug #6835: firewall_nat_out_edit.php Translation section hidden
- Applied in changeset commit:850c3d8b9352e7467beca8502c24ca8d4fbbbd29.
-
08:35 AM
Bug #6835 (Feedback): firewall_nat_out_edit.php Translation section hidden
- Revised Javascript to correct element show/hide
-
08:05 AM Feature #3652: OpenVPN - Dynamic IPv6 Tunnel Network
- I 2nd this. Would be a nice addition.
10/02/2016
-
04:32 PM
Bug #6835 (Assigned): firewall_nat_out_edit.php Translation section hidden
-
- Translation section of Outbound NAT edit page is apparently hidden by CSS. Reported present in latest 2.3.3 and 2.4.0...
-
02:36 PM Bug #6340: fsck hangs boot in background, fails to produce any action, resulting in broken firewall
- In case you planned on asking whether I tried to run fsck manually, then yeah, I did on one local box - and the outco...
-
- And here we go again: I'm seeing this on 3 boxes already:...
-
12:52 PM Bug #6836 (Rejected): Wrong queue length on "/status_queues.php" page under heavy traffic
- Investigated mostly here
https://forum.pfsense.org/index.php?topic=118789.0
Looks like /status_queues.php code is ... -
09:44 AM Bug #6803: CSRF timeout occurs when it (probably) shouldn't
- Got an update to this, Jim.
I just noticed that although I've configured my router (config->settings) to store 100... -
- I just hit a problem with my test version of pfSense, I'm not sure I can account for everything I saw, but I have a g...
-
- Jim Pingle wrote:
> Out of curiosity, have you tried this on a recent 2.3.3 snapshot? Or on 2.4?
Yeah all the 2.3...
10/01/2016
-
01:31 PM Bug #4326: Limiters on firewall rules where NAT applies drop all traffic
- I am interested to know if limiters will ever work again?
It's annoying that they still show in the GUI and not work... -
06:52 AM
Bug #6833 (Resolved): Wifi channel change applies only on reboot
- Whenever I change the channel on my 2.4 GHz AP the changes only apply on reboot. This broke in https://github.com/pfs...
09/30/2016
-
11:41 AM Bug #6830: Chelsio T4/T5 CXGBE drivers not loaded as ALTq capable in the PfSense UI
- Jim Pingle wrote:
> Can't target 2.3.2_1 as it's already been built.
>
> There was a deliberate reason this was l... -
01:14 AM Feature #6832 (Resolved): [PATCH] Add the USB ID for the Sierra MC7430
- Can you please cherry-pick commit 0c22163daba4a8ecc287e6b2f7060383c5e1dcb1 to add support for the Sierra MC7430?
h...
09/29/2016
-
- Can't target 2.3.2_1 as it's already been built.
There was a deliberate reason this was left out but I'll have to ... -
- cxgbe drivers support ALTq. cxl interface labels should supoort it:
https://www.freebsd.org/cgi/man.cgi?query=altq&a... -
- Most likely cause is an improper outbound NAT rule that's matching traffic from the firewall itself. Please start a f...
-
04:54 PM Bug #6829 (Rejected): Possible tftp-proxy bug?
- Seems we are running into an issue with tftp-proxy not working again (I want to say it did work briefly after the lat...
-
07:30 PM
pfSense Packages
Feature #6831 (New): Snort does not support aliases containing FQDN
- Snort does not support aliases containing FQDN. The pass list in snort's settings has a list which points to a syste...
-
12:58 PM Bug #6658: DHCP Relay not working on 2.3.2
- Yes I did: https://redmine.pfsense.org/issues/6658#note-4
-
- Not enough info there. Try again on 2.3.2, post on the forum, try to narrow it down. Unlikely to be the same bug, but...
-
12:06 PM Bug #6296: Interface dies with IPsec and SMP
- I am seeing issued similar or the same as posted in this thread with 2.3.2 (2.3.1 was a typo), SMP, and IPsec. CPU r...
-
- On 2.3 we have a patch to alter the behavior of "route change" so that it adds a route if it's not already in the tab...
-
10:23 AM Feature #6827 (Closed): Add Proxy Mobile IPv6 (PMIPv6)
- It would be great to integrate network-based mobility to pfsense
PMIPv6 is IETF standard: RFC 5213 and RFC 5844
h... -
09:02 AM Bug #6826 (Rejected): DNS forwarder is sending packets with link-local IPv6 source address to global unicast address
- * Install pfsense 2.3.2. WAN and LAN interfaces. No global IPv6 address assigned to WAN interface (but see NOTE below...
-
- Please start a forum on the thread for discussion until a definite bug is identified. It's more likely there is some ...
-
08:51 AM Bug #6825: LDAP RFC2307 bug in 2.3.2
- Correction on the query...
ldapsearch -h prodipa-mtl03 -b "cn=groups,cn=compat,dc=grenadine,dc=juicy" -x '(&(cn=gr... -
- Hello,
Seems there is still a bug with the RFC2307 standard in 2.3.2's ldap config.
I setup the LDAP configura...
09/28/2016
-
06:56 PM Bug #6823: No connectivity after changing link state to UP
- They had the same issue in OPNsense, so they created a FreeBSD port of the stock Intel driver version 7.6.2, which wo...
-
- Thanks Jim! I'll report to FreeBSD. It's something that started happening a few months ago so I think one of the late...
-
- Sounds like a problem that used to happen on older em chips, if you run "@ifconfig em0 down; ifconfig em0 up@" for ea...
-
- Hi guys,
I have pfSense 2.3.2 installed on a Soekris net6501-50 board. I recently noticed that when the link of t... -
03:31 PM Bug #6824: Tab diagnostics does not recognize disk volume
- Jim Pingle wrote:
> It will not hurt anything. SMART is only there for a certain specific kind of disk test, not a t... -
- It will not hurt anything. SMART is only there for a certain specific kind of disk test, not a task that is generally...
-
- Jim Pingle wrote:
> SMART only supports certain specific controllers, and "aac" does not appear to be among them.
... -
- SMART only supports certain specific controllers, and "aac" does not appear to be among them.
-
- does this can bring some additional damage to the production system?
-
- Dears,
RAID1 volume is recognized in the OS layer (screen attached) but is not recognized in the Diagnostic tab. W... -
- Applied in changeset commit:9e3cb876a600087c8fb2fa0af7907b986e304c48.
-
- The status of ARP entries is important, but the status is not shown in the GUI. Additionally, incomplete ARP entries ...
-
- Applied in changeset commit:632e5f504fed668c328eea3c0af702d1b4998289.
-
- When saving a DHCP static mapping with "ARP Table Static Entry" checked, the static ARP entry is not applied until th...
-
- At least on my box, I've narrowed it down to the call to dhclient at source:src/etc/inc/interfaces.inc#L4281
Only ... -
-
- I have seen this as well, though I haven't yet attempted to narrow it down.
-
02:59 AM Bug #6820 (Resolved): Configure WAN Interface Boot Delay
- DHCP server responds within just a few milliseconds, but boot up hangs on configure WAN interface for 20+ seconds. T...
-
- Also: Target for 2.4 is only a couple months out, not a year.
-
- Reverting that patch certainly does seem like a good idea given the responses.
Out of curiosity, have you tried th... -
- Target version: 2.4.0? Not exactly sure people are keen on waiting for a year to get something that was working to wo...
-
06:48 AM Bug #4326: Limiters on firewall rules where NAT applies drop all traffic
- Now that 2.4 dev builds have started, is there any reason to expect that this bug might get some lovin' in the next r...
-
- @david: This functionality has been done at least 3 times by pfSense user (marcelloc), the code never got merged, so ...
09/27/2016
-
09:17 AM pfSense Packages Bug #6818: WAN traffic graph displays inverted bandwidth columns
- Phillip Davis wrote:
> And that image is correct for the current traffic graph system (2.3.2). For example, the 3rd ... -
- Jim Pingle wrote:
> Check again on a 2.3.3 or 2.4 snapshot those graphs have been replaced.
Thank you. It is a cr... -
- And that image is correct for the current traffic graph system (2.3.2). For example, the 3rd host down in the table i...
-
- Check again on a 2.3.3 or 2.4 snapshot those graphs have been replaced.
-
- Open Traffic Graph and select WAN interface.
On the graph, BW IN and OUT values are correct. In the Bandwidth In / B... -
-
- Duplicate of #2774
-
- Updated subject to match error message/condition.
-
- Duplicate of #6762
-
- After upgrade from 2.2.6 to 2.3.2, I'm not more able to edit a rule using Google Chrome. When I press save, the addre...
-
- As a follow up - it appears that after openvpn_resync_all(), nothing else below that function call could run from the...
-
02:20 AM Feature #2774: Extend DHCP Pools code to allow using different subnets
- The first time I used pfsense I was surprised to see that it can do dhcp relay but not the other side of the coin tha...
09/26/2016
-
I prefer keeping 'unfiltered vlans' traffic being routed by a l3 switch that is connected to pfsense with a /29 or ...-
06:29 PM pfSense Packages Bug #6814: pfBlockerNG cannot define table pfB_Europe_v6 after pfsense upgrade to 2.3.2-RELEASE (amd64)
- Thank you @BBcan177, my pfsense Firewall Maximum Table Entries were set on default (20mb) I increased the entries to...
-
- Would be nice to have a status or diagnostics page for radvd
-
02:31 PM Bug #6813 (Resolved): 2.3.3 built on Fri Sep 23 11:34:50 CDT 2016 - segfaulting processes result in non-functional system
-
- Fixed, thanks.
-
- A fix was committed in FreeBSD and now imported to our repo. Next round of snapshots should be fixed
https://svnwe... -
- Patch from FreeBSD ticket 207598 was imported to pfSense/FreeBSD-src. Today's 2.3.3-DEVELOPMENT snapshot already has ...
-
- Duplicate of #6762
-
- Keep getting "Please match the requested format" when trying to enter my addresses.
09/25/2016
-
11:28 PM pfSense Packages Bug #6814: pfBlockerNG cannot define table pfB_Europe_v6 after pfsense upgrade to 2.3.2-RELEASE (amd64)
- Increase the pfSense Advanced / Firewall-NAT / Firewall Maximum Table Entries to 10M entries...
-
- You either don't have enough RAM, or you don't have large-enough limit set for tables. Either way, nothing that could...
-
- Pfsense version:
2.3.2-RELEASE (amd64)
built on Tue Jul 19 12:44:43 CDT 2016
FreeBSD 10.3-RELEASE-p5
Package
p...
09/24/2016
-
- All the crashes here seem to be OpenVPN related.
Calling openvpn_resync_all() causes php-cgi to crash on boot, whi... -
11:54 AM Bug #6813: 2.3.3 built on Fri Sep 23 11:34:50 CDT 2016 - segfaulting processes result in non-functional system
- Pull it :|
-
- Setup a new VM as a clean test. Works on a snap from the 22nd, same one updated to the 23rd breaks in various ways. T...
-
- Also, OpenVPN is completely no-op, producing just segfaults.
https://forum.pfsense.org/index.php?topic=118709.0 -
- Err, "only via IPv4". Whatever.
-
- https://forum.pfsense.org/index.php?topic=118714.0
No default routes configured, I can SSH in remotely only via IP... -
- Phillip Davis wrote:
> Of course, anyone can upgrade to the 2.3.3-DEVELOPMENT snapshots. Actually they are really go... -
08:43 AM
Bug #6812 (Not a Bug): IPsec filterdns crash
- This appears intermittently in the system logs:
Sep 24 00:27:13 php-fpm 73703 /rc.newipsecdns: The command '/us...
09/23/2016
-
07:52 PM Bug #6751: Route53 DynDNS Problems / Replace Route53 DynDNS Module
- Filed a pull request in Github
-
02:44 PM Bug #6811 (Resolved): pkg_edit.php rowhelper is broken with multiple distinct rowhelpers per page.
- A Row Helper Name is hardcoded in pkg_edit.php.
I don't know why, but the effect of this is that a single page can... -
- Works, following the example given it prints the interface name correctly.
-
-
- Fixed
-
- Please start a forum thread for discussion and troubleshooting, there isn't enough information here to classify it as...
-
- Works
-
- Done, working.
-
- Confirmed fixed by multiple sources.
-
-
- Fixed, per above feedback
-
- Fixed
-
- Fixed
-
- Works here.
-
- I fixed the description. The underlying daemon does not accept subnets, only IP addresses, so the description has bee...
-
- hrPrinterTable: printcap entry for <noname?> has errors, skipping
Been flooding the logs since 2007 at least. Perh... -
- New installs on snapshots are fine, fixes are on existing packages for current versions so it's addressed from a user...
-
- Resolved per above feedback
-
- Works.
-
07:54 AM pfSense Packages Bug #6807: Softflowd + multiplie interfaces
- OK, the project is dead
What are the alternatives? (netFlow) -
- That would be a bug in softflowd, not one we can fix. We are passing all of the correct parameters to it. If it's usi...
-
- There are problems in the softflowd.
Always send information only from one interface. And his number is always 0.
... -
- Please post on the forum for help diagnosing the issue until a definite bug can be identified. It could still be a co...
-
07:27 AM Bug #6809 (Rejected): IPSEC connection does not pass the state "CONNECTING"
- i have a have a IPSEC connection to fortigate, this connection not work after the upgrade to 2.3, 2.2 versions worked...
-
-
- Duplicate of #6762.
-
02:15 AM Bug #6808 (Duplicate): Can't add firewall rule
- Hi,
I can't add firewall rule when using Network or IP,alias distination.
The chrome console show me a regex er... -
06:16 AM Bug #5319: Error message "No config named" in charon daemon
- I can confirm this issue that is still present in 2.3.1-RELEASE-p5 :...
-
04:12 AM Bug #6223: IPsec + OpenBGPD fails with "PF_KEY socket: No buffer space available"
- Hey all,
Do we know exactly what causes this yet?
Reason i ask is i have just had a 2.2.6 machine have this (be...
09/22/2016
-
- I made a suggestion that it is a good time to cut a 2.3.3 release:
https://forum.pfsense.org/index.php?topic=118670.... -
- Notably, this gets triggered on : as well, complete no go with IPv6.
-
- This needs to be released. Damn annoying and Chrome fix nowhere in sight - https://bugs.chromium.org/p/chromium/issue...
-
- I was wondering about it too. I don't know if either of these ideas go anywhere.....
* The value set by csrf_conf(... -
- Yeah I see that now. I tested it earlier by setting $config['system']['webgui']['session_timeout']=2 at the top of th...
-
- @jimp - the fix above doesn't work, because $config only becomnes defined when authgui.inc is included, which is afte...
-
- One bug to be fixed at least - it's now clear why CSRF times out incorrectly:
In guiconfig.inc, csrf_startup() che... -
03:20 PM Bug #4418: IPsec mobile clients - bogus "p" appended to search domain
- Ok, I am using pfSense 2.3.2 (latest) and I get the silly p appended to the default domain. Can someone look into th...
-
12:00 AM Bug #6806: Form validation for DHCP NTP Servers does not allow hyphens
- https://github.com/pfsense/pfsense/pull/3151 (CLA was just signed so might not be labeled appropriately yet)
09/21/2016
-
- Form validation in the dashboard does not use the proper regex for FQDNs (it doesn't allow hyphens)...
-
- Chris Buechler wrote:
> works
Form validation does now allow hyphens in the NTP server name
Separate Issue Inc... -
09:41 PM pfSense Packages Bug #6805 (Duplicate): Freeradius + OTP sometimes auth failed when auth openvpn.
- Hello,
I have test freeradius + OTP to auth openvpn connect.It's can connect and auth it.But it's has sometimes auth... -
09:23 PM Feature #6804 (New): Add row counter into Diagnostics -> Edit File
- Will be extremely helpful if the rows in the Diagnostics -> Edit File window are presented with a number.
In this ... -
- Steve Allison wrote:
> FYI, this "[a-zA-Z0-9_.:]+" is the same as ".+". Perhaps only : or _ needs escaping?
No it... -
03:20 PM Bug #6762: "Please match the requested format" error in Chrome when editing certain form fields
- FYI, this "[a-zA-Z0-9_.:]+" is the same as ".+". Perhaps only : or _ needs escaping?
-
- It is not a bug in our code. It is a bug in Chrome that we have worked around by removing escaping from the regular e...
-
- So from Jon Gerdes explanation, this should be adjusted to "Bug" as pfSense is using invalid HTML5? Just not apparent...
-
12:50 PM pfSense Packages Bug #6182: HAProxy not supporting ALPN
- That doesn't however allow access to new openssl 1.1 features like ALPN.
Haproxy used to build not using the freebsd... -
- We use the OpenSSL version provided in the base system of FreeBSD 10.3, which is maintained by FreeBSD. If/when FreeB...
-
12:17 PM pfSense Packages Bug #6182: HAProxy not supporting ALPN
- This is not a HAProxy issue, this is an entire pfSense issue. Because openssl in pfSense was reverted from 1.0.2 to 1...
-
12:48 PM
Bug #6801 (Resolved): Rule separators are moving when multiple firewall rules are deleted together
- Thanks for confirming. Fix has now been applied to firewall_nat.php as well.
-
- Thank you Steve / Jim.
I found it safer to apply the changes through Diagnostics -> Edit file.
Confirming that ... -
- The wiki doc for the System Patches package explains how to use the commit ID from the above comment to apply the pat...
-
11:43 AM
Bug #6801: Rule separators are moving when multiple firewall rules are deleted together
- Probably easiest to just wait from the next snapshot and update. Alternatively you could access the updated file here...
-
- Steve Beaver wrote:
> Applied in changeset commit:00098bc80b6f85eb74f2f3bc2b4eb7430614110d.
Steve, would you prov... -
11:20 AM
Bug #6801: Rule separators are moving when multiple firewall rules are deleted together
- Applied in changeset commit:00098bc80b6f85eb74f2f3bc2b4eb7430614110d.
-
11:11 AM
Bug #6801 (Feedback): Rule separators are moving when multiple firewall rules are deleted together
- Fixed and tested. Please confirm.
-
- Steps to reproduce:
1. Select multiple firewall rules
2. Delete together
3. The rule separators changed their po... -
- +Expected behaviour and error+
A feature/change in release 2.1 was that CSRF timeout was changed to be the same as... -
11:25 AM Bug #6802 (Rejected): GUI does not respond and vpn stops working
- Since I update the firewall to 2.3.x (actualy 2.3.2) Some times GUI does't respond and VPN client are disconnected un...
-
- We used to do that, but ultimately decided against it as it was a potential security issue. We might be able to revis...
-
- When not logged on and entering my pfSense on a specific URL like https://192.168.99.254/status_dhcp_leases.php it sh...
09/20/2016
-
- LAN Interface: 172.25.232.1/24
IP Alias VIP on LAN: 10.10.10.10/32
OPT1 Interface: 192.168.1.1/24
Some users lik... -
- Fix pushed, will show up next time the packages are built.
-
-
04:14 AM pfSense Packages Bug #6797 (Resolved): Shared Key Export - just one server in list
- There is a typo error in vpn_openvpn_export_shared.php line 191 that causes just one server to be displayed in the Sh...
-
04:49 AM Bug #6798 (Rejected): pevent_ctx_main: poll: Invalid argument
- After reboot PPPoE connection wasn't established. See attached log.
pfSense 2.3.2 x64.
09/19/2016
-
05:24 PM Feature #6796 (New): Allow hostnames as GRE and GIF endpoints
- Currently only IP endpoints are allowed. The hostnames need to be resolved and the interfaces updated on a regular ba...
-
10:02 AM Feature #6795 (Duplicate): User certificate for webGUI login
- It would be practical to allow the administrator to enable user certificate required for webGUI signin.
This would a... -
03:02 AM Feature #6794 (Resolved): Chinese Version Language Translation
- mkdir
/src/usr/local/share/locale/cn/LC_MESSAGES/
Dear Administrator
Given China's administrator easy to use, c...
09/18/2016
-
02:48 PM Bug #6725: DHCP Server > TFTP server name and custom dhcp options in GUI and in dhcpd.conf but missing on the wire
- Looks like there may have been a problem with my client not requesting the custom attribute. After messing with dhcli...
-
02:27 PM Feature #6793 (Resolved): Add pound package to the pfSense repository
- Dear devs,
Please add the "pound" package to the pfSense's own repository so that anyone can install it without ha... -
11:24 AM Bug #6099: igmpproxy does not recognize upstream interface
- Hi,
first of all, thank you very much for your hard work!
Due to missing IPTV (I just ordered it last week) I i... -
05:04 AM Bug #6507: GRE and GIF tunnels on dynamic IPv6 interface are not brought up during boot
- I've tried to dig into this again. There some things I've noticed.
1) it looks like the binary "check_reload_statu...
09/16/2016
-
03:05 PM Bug #6792: Cannot edit or add firewall rules, error: Please match the requested format
- No problem in latest Firefox 48.0.2.
Problem exists for me in latest Chrome Version 53.0.2785.116 m both normal an... -
- Duplicate of #6762 (applies to multiple pages)
It is a bug in Chrome's regex parsing that they let into their late... -
- Suddenly I'm getting an error of "Please match the requested format" when I try to use an alias or ip address for a t...
-
- Setting to Feedback since the relevant fix has already been committed.
-
- The bind credentials field is covered by #6759 and has already been fixed in the repository.
If your LDAP users ca... -
07:43 AM Bug #6791 (Rejected): Upgrade 2.2.6 > 2.3.2 had broken LDAP authentication
- Hi,
I jut want to declare the following bug that we had discovered:
We upgraded one of our test firewall from... -
- Already fixed in the repository. This is a duplicate of #6759
-
06:57 AM Bug #6790 (Duplicate): Password is in plain text under "System -> User -> ManagerAuthentication" Type LDAP under "Bind credentials"
- Hello,
There is a plain text box input for password field.
As such it's letting the password readable by anyone.
...
09/15/2016
-
- Works, thanks.
-
02:17 PM pfSense Packages Feature #6789 (New): disgest_ldap_auth
- We are deploying pfsense the company as proxy using squid + squidguard and authenticating in our openldap base (linux...
-
12:11 PM
Feature #6786: Sortable Description Captive Portal MACs list
- Click the column headers to sort the table as required.
Should be in the next snapshot -
12:10 PM
Feature #6786 (Feedback): Sortable Description Captive Portal MACs list
- Applied in changeset commit:e846d7f882d57331d7ead5fcf593e7e4daf7e247.
-
10:33 AM Bug #6760: Editing WAN bridge interface breaks routing until reboot
- I am having a similar issue whenever my WAN link goes down and then recovers. Basically I lose some kind of routing ...
-
08:00 AM Bug #4937: RRD graphs with mixed quantities are unreadable
- Hi, the issue is exactly the same on 2.3. Packet loss and latency still share the same scale, so one can definitely d...
09/14/2016
-
07:40 PM
Bug #6788: [2.3.3] Services - NTP - Settings: Prefer/No Select checkboxes invisible when adding entries
- Applied in changeset commit:d38d215d1d9429d3a1a15708f92b14cf3a15b247.
-
07:39 PM
Bug #6788 (Feedback): [2.3.3] Services - NTP - Settings: Prefer/No Select checkboxes invisible when adding entries
- Javascript revised to clear only the first label in the cloned row
-
- Best described with a picture:
!http://image.prntscr.com/image/73931c990d7f4757a8d5d62023e4db6a.png!
Note:
- ... -
- It does not look like the proper PID files are being created in /var/run. -p PIDFILE arguments are not being added to...
09/13/2016
-
09:03 PM Feature #6787 (Resolved): NTP GUI sync/poll interval
- Id like to be able to set the minpoll and maxpoll in the pfsense NTP service within the GUI. I noticed that prior to...
-
07:49 PM Feature #6786 (Resolved): Sortable Description Captive Portal MACs list
- Hi!
Pfsense is awesome. We use the Captive Portal MACs feature a lot, on top of the voucher system.
While the list... -
03:30 PM pfSense Packages Feature #6785 (Resolved): Allow setting of suricata's meta-field-limt libhtp parameter
- ...
-
- Applied in changeset commit:e89a17fbf04aae89f60f13baf293f397ca21c303.
-
12:40 PM
Feature #4898 (Feedback): Allow packages to request syslogd socket to be created inside chroot
- Applied in changeset commit:ab31acb937792bdedef11fcdbd1d98ad126ebc0b.
-
09:04 AM Feature #5825: Allow EAP-RADIUS for authentication servers
- Adam Thompson wrote:
> Supposedly this exists, per https://doc.pfsense.org/index.php/IKEv2_with_EAP-RADIUS, but I'm ...
09/12/2016
-
09:22 AM
Bug #6783 (Not a Bug): Bootstrap code compatibility/rendering failure with SELECT MULTIPLE boxes
- The jQuery "begins with" syntax works with this type of control. Try:...
-
05:01 AM Bug #6769: Crash PacketFilter in bridge mode
- Ok, without advanced settings set in the rules on the firewall not more crash. Now it's stable.
-
04:53 AM Bug #6223: IPsec + OpenBGPD fails with "PF_KEY socket: No buffer space available"
- Applied attached patch, but that only pushes the problem in the near future. Still fails after x amount of days or ho...
09/11/2016
-
- Pull request: https://github.com/pfsense/pfsense/pull/3135
-
- (also it's not clear to me if all browsers add "[]" and if there's a remaining compatibility issue in here)
-
- For anyone needing a workaround, or if it's useful, I just googled "jquery square brackets" and found two syntaxes th...
-
- Source code:...
-
01:40 PM pfSense Packages Bug #6784 (New): HAProxy version .48 will not use URL Table Alias for front end listener
- I use HAProxy with an alias of ports to listen on. The backend has the ports set to blank so it just does a pass thro...
-
- Stilez y wrote:
> There is an active FreeBSD port of "mdns-repeater". Its args are a list of interfaces optionally p...
09/10/2016
-
- Forgot the links
Port is in usual place. If anyone's in a hurry and just wants the FreeBSD 10.x binary to upload t... -
- Much faster solution if anyone looks at this.
There is an active FreeBSD port of "mdns-repeater". Its args are a l...
09/09/2016
-
06:59 PM Bug #6782 (Resolved): pkg update can trigger multiple updates per second
- From Renato:
"I took a look on pkg src and did some tests. Every time a remote operation is executed (pkg search, pk... -
- Applied in changeset commit:ff1af69dd513b123238f149193d565f5d83658fb.
-
- The resolver, ppp, routing, and ntpd logs are not individually selectable on status_logs_settings.php, and the other ...
-
- Links made for some function/option descriptions in pfSense are broken.
For example "Random Early Detection" goes t... -
01:50 PM Bug #6099: igmpproxy does not recognize upstream interface
- Victor Toni wrote:
> This version does solve the interfaces issue already and some other minor bugs, too:
> https:/... -
- After using traffic shaper wizard when you completed it you can get decimals in "Max bandwidth for queue" and other v...
-
09:25 AM Bug #4326: Limiters on firewall rules where NAT applies drop all traffic
- Yes, it is exactly as you described.
ONLY PFSense 2.1.5 works fine on this configuration. I use several CRITICAL f... -
08:09 AM
Bug #6768: DNS Resolver entry for DHCPv6 static mapping has wrong IP address
- The issue isn't with DHCP... it's with DNS (unbound, in my case) resolution of a DHCPv6 static mapping.
Looking in... -
- I tried this in a VM. I delegated a /56 (out of the /48 I have from he.net) from my real router to the WAN of the VM ...
09/08/2016
-
04:43 PM Bug #6778 (Resolved): CloudFlare Dynamic DNS fails when domain name uses a Second Level TLD
- When using Dynamic DNS with CloudFlare if the domain name used has a second level TLD such as .co.uk the update will ...
-
12:09 AM pfSense Packages Bug #6777: squid cant redirect ssl website correctly to squidguard error page in a denied category
- here is the same error reported in pfsense forum without a solution
https://forum.pfsense.org/index.php?topic=1093...
09/07/2016
-
08:37 PM
Bug #6768: DNS Resolver entry for DHCPv6 static mapping has wrong IP address
- Likely reason for this is because in entering the DHCPv6 static mapping, you're entering ONLY the host portion of the...
-
- h1. When you use "squid" with "squidguard" set in *"NO"* transparent mode, any category denied previously (squidguard...
-
02:51 PM Feature #6776 (New): Allow disabling of "filter rule association" by default
- This setting is inherently insecure, as it opens a hole in your firewall for the world to get into. Fine for public-f...
-
- You'll have to post on the forum and find someone who is interested in looking into transparent SSL -- it isn't an of...
-
- Sorry for my english.
If I want to enable the next option in common acl, squidguard block all traffic from https
... -
- al tener el proxy en modo transparente usando tanto pfsense 2.3.2 y 2.3.3, e inspeccionando trafico ssl, si se activa...
-
12:04 PM Bug #6766: Docs give wrong method of disabling ixgbe flow control
- I just checked and dev.ix.0.fc=0 has no effect when placed in /boot/loader.conf.local. Also, sysctl -T -a doesn't li...
-
- That function is a part of the pfSense PHP module, so if it's missing, then either the PHP module package is missing,...
-
05:57 AM Bug #6758: 2 x Crash with "PHP Fatal error: Call to undefined function pfSense_interface_listget() in /etc/inc/interfaces.inc on line 80"
- I have seen the same error. I think in my case it was related to remove DHCP IPv6 from WAN interface.
-
- I confirm than crash if you set advanced parameter but randomly... for unknow reason. I have reboot five time pfsense...
-
03:46 AM
Feature #6775 (Closed): Strongswan PKCS#11 Support
- We developed a Smart Cards based authentication of StrongSwan-IPsec-VPN peers.
This already works on pfSense 2.2.6 b...
09/06/2016
-
- I tested this recently and it worked fine. Do you have a forum thread with more in-depth discussion/diagnosis? If not...
-
03:41 PM Bug #6773 (Rejected): Pfsense Version 2.3.2 doesn't handle rules when gateway is down - Skip rules when gateway is down
- Hello.
I have two vpn's configured between two pfsense's with the same versions.
I added a interface for every vpn'... -
- Jim Pingle wrote:
> Does that particular configuration involve a bridge?
> The "cannot forward" message reminds me ... -
- Just found it (it was from the IPv6 address):...
-
- Thanks; managed to find the related crash dump I submitted today? (Should be either from 188.75.x.x or 2001:470:6e:xx...
-
- Rather than reinvent the wheel I updated the description on this ticket instead.
-
- I don't think we have any left, unless you count 2.3.1 which isn't so helpful in that area. If you do still have a 2....
-
- @jimp: Well if you can link a pre-6355 binary for download, I can test that for sure with multiple boxes. I might hav...
-
- OK so the real issue of this ticket is actually DHCP Relay breaking. Given the info in the description and such I'm t...
-
- And finally - the DHCP relay issues are so bad that it actually crashes pfSense when reconfiguring the service. I sub...
-
- OK. After a lot of further testing and messing with various stuff, here is some mixed news:
- as for 2.3.x, the *DHC... -
- I'll make a fresh ticket for 2.4 with the above on it so it doesn't get lost here.
-
- Looks like on 11 you have to clone the interface. The wireless device (e.g. ath0) won't show in ifconfig.
Somehow ... -
- Anyone who can reproduce this: Try feeding the attached patch into the system patches package, which will add in the ...
-
- We don't recommend doing that for hardware directives. It may work, but depending on what is being done it's safer to...
-
- At the top of the section it says "All of these go in /boot/loader.conf.local", but dev... can be done in System Tuna...
-
- Fixed the doc referenced
-
- The problem with that "fix" is that with that sort of change, it no longer starts the daemon when it's stopped and th...
-
- Works
-
- Applied in changeset commit:caec0e97220d3702214c6b30f7008960f77a857e.
-
- If a backup count other than the default is entered on diag_confback.php it is not respected.
To me, I have a fix. -
- Looks good now, it's masked.
-
- I did that exactly as described, and the rules worked and there was no crash. Please discuss on the forum before open...
-
- For reproduce :
1. create alias with IPV6: one for source, one for destination
2. Create rules use alias created ... -
- I am unable to reproduce any of this. IPv6 rules using aliases or "this firewall" all work OK. Make sure you actually...
-
- And if after add your rules with alias created before with ipv6 and you try change this rule in replace alias by addr...
-
- And it's same if you select "This Firewall" with rules ipv6, doent work
-
- Hi,
If you create alias with ipv6 and use in the rules firewall doent work. -
- i think the problem is with all parameter set and the scenario most probability than is if number connexion over the ...
-
- Can you isolate it to just one of those options then? Or does it require them all? Can you disable/enable them to see...
-
- Synproxy is not the setting that problem because I left it on and I do not have the problem.
and for information syn... -
- Does it require that specific combination of settings? Or does it still crash with only one of them active? or two? o...
-
- Hi,
I have configured pfsense in bridge mode on the Vmware Vsphere. The VM of Pfsense have 8Go of memory and one s... -
- On FreeBSD 11 you have to clone the interface and the wireless device (e.g. ath0) does not show in ifconfig.
The l...
Also available in: Atom