Activity
From 09/11/2016 to 10/10/2016
10/10/2016
-
11:50 PM Bug #5413: Reduce disruptions when changing DNS records from DHCP leases in Unbound
- Some users have also reported issues with the Unbound Resolver and pfBlockerNG DNSBL. I am not able to reproduce, but...
-
09:32 PM Bug #5413: Reduce disruptions when changing DNS records from DHCP leases in Unbound
- If the dev's won't / can't answer you, I will. Due to changes in 2.3 (I tested with 2.3.2p1), restarting of the Unbou...
-
11:44 PM Revision 64651a20: Do not try to build grub2-bhyve on i386
-
-
-
- No more i386 on this branch. Reverting unnecessary change
This reverts commit 22558bc3011c10fc86c45b7ca795227bc9a4137c. -
-
10:58 PM pfSense Packages Bug #6305: Quagga problems updating routes / mistakenly showing "kernel"-routes while they are not
- Jim Pingle wrote:
> Someone who can reproduce it reliably needs to get the details of how to reproduce it reported t... -
-
06:59 PM Feature #4821: PPPoE WANs do not take full advantage of NIC driver queues for receiving traffic
- Now that FreeBSD 11 is out and PPPoE Gig internet is becoming more available, can we take another look at this?
-
-
-
03:27 PM Bug #6823: No connectivity after changing link state to UP
- Patch for review here:
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=213283 -
12:02 PM Bug #6848 (Resolved): Do not create an IPv4/6 gateway for an interface without according IPv4/6 address
- This issue has been fixed for GIF/GRE tunnels some time ago but wasn't fixed other kind of interfaces.
Once, I had... -
12:01 PM Bug #6340: fsck hangs boot in background, fails to produce any action, resulting in broken firewall
- @Derek: If you are willing to go back to <=2.2.2 for initial full install, you could try this: https://forum.pfsense....
-
10:46 AM Bug #6340: fsck hangs boot in background, fails to produce any action, resulting in broken firewall
- Thank you for your quick reply. I'll just need to wait to see what comes of all of this.
-
11:11 AM Feature #6847: Register CN of OpenVPN clients in DNS Resolver
- There is an error in the script. @case "$1" in@ should read @case "$OP" in@.
-
- Use case: Serial port servers deployed in the field connect to the office via OpenVPN. In order to collect the data, ...
-
09:36 AM Feature #6832: [PATCH] Add the USB ID for the Sierra MC7430
- stable/11:
https://github.com/freebsd/freebsd/commit/da55bad8726390191aad745ef726a492885d7422
stable/10 (just i... - 08:29 AM Revision f84c1e1e: [theme] Compact-RED: fix `sortable` table fonts
10/09/2016
-
- On my Dashboard system reads
"System Super Micro C2758"
but under CPU (and the correct info)
"CPU Type Int... - 07:48 PM Revision 6416317a: Bring up the wifi interface only after setting up all the other arguments. This prevents issues when using VAPs.
-
04:50 PM Feature #4372: dnscrypt support
- Chris Buechler wrote:
> It'd be nice to have dnscrypt support built-in so people don't need hacks like
> https://do... -
03:33 PM
Feature #5616: Incorrect Wireless Channel
- I ran into the same issue when using an ath interface and virtual interfaces in hostap mode (VAPs). I have a similar ...
-
-
-
-
09:05 AM Feature #6845 (New): DHCP / DHCPv6 WAN client status page
- Would be nice to have a status page that provides all the details of client leases and PDs.
10/08/2016
-
05:55 PM pfSense Packages Bug #6756: Updating cloned backend in WebGUI updates the original backend instead of the cloned backend
- I think it fixed in 0.50 .
https://github.com/pfsense/FreeBSD-ports/commit/36e0556b6b19a8a524a4ba3a7c55f87e9a6bd6a... -
- Imho a 'feature request' indeed. The support for 'fixed' lists of ports and ip's is ok for easy configuration with th...
- 05:36 PM Revision e10d25b4: Added support for CloudFlares Proxy.
- Included a checkbox to enable and disable this feature when CloudeFlare
type is selected.
Included proxied variable i... -
- Derek, I cannot see any fix until the installer brings back the possibility to install on ZFS, and/or use a time-prov...
-
08:58 AM pfSense Packages Feature #6844 (Closed): Web configuration for quagga ospf6d
- The quagga package includes the ospf6d binary, but there is no way to configure it via the admin GUI
-
02:45 AM Bug #6843 (Not a Bug): Version inconsistency after updating to 2.3.2_1
- Looking at the dashboard view It doesn't look like I've upgraded to 2.3.2_1. Update page says that I have. See attach...
10/07/2016
-
-
07:11 PM Revision b6355bdc: Latest nginx requires /var/log/nginx/ to exist, so for users with /var in RAM it needs created.
-
- 07:06 PM Revision 0a1daa73: Fix typo: The input field is named source_hash_key
- (cherry picked from commit 870b9bc11b993ce8122b448083d29a04bcb30151)
-
07:05 PM Revision 9b9065d1: Fix static blackhole routes. Bug was introduced in
- 8be135cd114fbc9294ec9dafed2125d0e553956c (February, 2013).
(cherry picked from commit 580bef1ee3052437487553fcc5dc84... - 07:05 PM Revision b65bfb62: Spelling mistake "system_gateways.php"
- Fix spelling mistake in "system_gateways.php"
(cherry picked from commit 47180823dc0560801085a227abf512e265363b16) -
-
- Kill Bill,
We have been effected by this issue as we have boxes all around America running that are bricking at r... -
-
03:45 PM
Feature #6842: Package Manager progress bar should indicate overall progress
- To provide an "overall" progress would require that we know the exact size of everything that has to be downloaded ah...
-
03:06 PM Feature #6842 (New): Package Manager progress bar should indicate overall progress
- When installing a package with dependencies, and particularly when upgrading the base system made up of dozens of pac...
-
01:36 PM Bug #6557: nanobsd upgrades may fail from lacking resolv.conf
- Sorry, but it seems not to be solved. I just upgraded from 2.3.2 to 2.3.2-p1 (NanoBSD) and the procedure still hangs ...
-
- Another place this would be handy is when configuring server options in DCHPv6 and RAs.
-
- Duplicate of #6838 (which has a workaround on it)
-
- Somehow I completely missed that ticket when looking into this. I'll close the older one out since this one has a via...
-
- Yeah, filed this as #6810, please close that one as duplicate.
-
07:35 AM Bug #6064: non-fully qualified hostnames included in hosts file and Unbound local-data
- This didn't make it into 2.3.2_p1 right? Just checking. FWIW I have been running a couple of patched systems with t...
-
05:50 AM pfSense Packages Bug #4756: OpenVPN Client Export fails when using "real" certificate
- A scenario not so bizarre:
* Company has an internal PKI that they use to issue certificates for workers (and other ... -
05:31 AM Feature #6841 (Resolved): reduce numeric precision in Gateways Widget
- Currently the v2.3.x Gateways Widget is displaying 3 digits after the decimal point for the gateway RTT & RTTsd value...
-
02:04 AM Feature #3506: Firewall:Aliases - Sort/Move Function
- +1 for me too. We have aliases with more than 50 hosts and it's a nightmare to find what you need. Same thing goes f...
10/06/2016
-
-
-
-
-
-
- 8be135cd114fbc9294ec9dafed2125d0e553956c (February, 2013).
(cherry picked from commit 580bef1ee3052437487553fcc5dc84... -
-
06:01 PM Revision cc2c4d16: Simplify logic
- (cherry picked from commit 9a2d3fe1bf9bdad73fbffca44d5c1f02aa9825ae)
-
- 05:49 PM Revision b5e73640: Spelling mistake "system_gateways.php"
- Fix spelling mistake in "system_gateways.php"
(cherry picked from commit 47180823dc0560801085a227abf512e265363b16) -
-
-
03:42 PM Feature #6839: Mechanism to prevent flooding log with entries from blocked packets
- >Phillip Davis wrote:
> You can create your own Private Networks alias, and then make an ordinary block rule on WAN ... -
10/05/2016
-
10:00 PM Bug #6840 (Resolved): Upgrade ISC dhcpd to 4.3.5 to address missing hostname workaround
- ISC DHCP Server 4.3.0 introduced a bug which caused hostnames to go missing in pfSense 2.3.x. This was addressed thro...
-
06:18 PM Feature #6839: Mechanism to prevent flooding log with entries from blocked packets
- You can create your own Private Networks alias, and then make an ordinary block rule on WAN to block that. Then you c...
-
- The firewall log is being filled with thousands entries from blocked packets: WAN / 10.197.248.27 / 224.0.0.1 / IGMP....
-
02:06 PM Revision db0c1e14: add array index how value for authserver list
-
- We do not ship with an /etc/printcap file but it appears that bsnmpd does not like that fact. When probed in various ...
-
06:19 AM Feature #2358: NAT64 support
- UPVOTE
My new ISP provides native IPv6 and I would prefere not to have configuring my hole network with IPv4 if I co...
10/04/2016
-
02:51 PM
Bug #6835 (Closed): firewall_nat_out_edit.php Translation section hidden
-
01:16 AM Bug #6835: firewall_nat_out_edit.php Translation section hidden
- Looks good here. Thanks.
-
- It depends on whether or not one or both of your WANs is a PPP type WAN. Default gateway switching is still an experi...
-
02:09 PM Bug #6837 (Rejected): Gateway Failover does not failback
- I'm using default gateway failover, not gateway groups.
When my primary wan connection goes down, it's properly de... -
11:05 AM
Bug #5999: IPv6 IP Alias prevents Track Interface from working with DHCPv6 and RA
- Any update on this? I would really like to be able to use ULA and GUA IPv6 addresses at the same time on my network,...
-
11:04 AM
Bug #5413: Reduce disruptions when changing DNS records from DHCP leases in Unbound
- Is there any update on when this might get worked on? It has been almost a year now.
-
08:43 AM Feature #6800: Feature request: Logon to remember the URL that initiated the logon sequence and return to it
- Jim Pingle wrote:
> We used to do that, but ultimately decided against it as it was a potential security issue. We m... -
05:34 AM Bug #6263: Encryption options for every P2 on a given P1 are written to each P2 individually inside ipsec.conf with multiple P2 entries + split conn entries
- might be always been that way but this is very painful... all other brand do support this properly.
I just start usi...
10/03/2016
-
- 07:40 PM Revision ee9a44e7: Fix typo: The input field is named source_hash_key
- (cherry picked from commit 870b9bc11b993ce8122b448083d29a04bcb30151)
- 07:38 PM Revision 00ae2254: Merge pull request #3174 from NewEraCracker/nat-out-fix-typo
- 06:38 PM Revision 870b9bc1: Fix typo: The input field is named source_hash_key
- 04:17 PM Revision 12190b7c: Revise merge error
- 03:59 PM Revision 0300c960: Applied PR #3173 to correct merge error
- 01:33 PM Revision 5c4c1fe5: Fixed #6835 by revising Javascript show/hide
- (cherry picked from commit 850c3d8b9352e7467beca8502c24ca8d4fbbbd29)
- 01:32 PM Revision 25383c9a: Fixed #6835 by revising Javascript show/hide
- (cherry picked from commit 850c3d8b9352e7467beca8502c24ca8d4fbbbd29)
- 01:29 PM Revision 850c3d8b: Fixed #6835 by revising Javascript show/hide
-
08:40 AM
Bug #6835: firewall_nat_out_edit.php Translation section hidden
- Applied in changeset commit:850c3d8b9352e7467beca8502c24ca8d4fbbbd29.
-
08:35 AM
Bug #6835 (Feedback): firewall_nat_out_edit.php Translation section hidden
- Revised Javascript to correct element show/hide
-
- I 2nd this. Would be a nice addition.
10/02/2016
- 09:38 PM Revision a6c4a66d: Only configure wireless MAC address if a spoofed MAC address is set
-
04:32 PM
Bug #6835 (Assigned): firewall_nat_out_edit.php Translation section hidden
-
- Translation section of Outbound NAT edit page is apparently hidden by CSS. Reported present in latest 2.3.3 and 2.4.0...
-
- In case you planned on asking whether I tried to run fsck manually, then yeah, I did on one local box - and the outco...
-
- And here we go again: I'm seeing this on 3 boxes already:...
- 02:29 PM Revision 553de397: Use tabs consistently
-
12:52 PM Bug #6836 (Rejected): Wrong queue length on "/status_queues.php" page under heavy traffic
- Investigated mostly here
https://forum.pfsense.org/index.php?topic=118789.0
Looks like /status_queues.php code is ... -
- Got an update to this, Jim.
I just noticed that although I've configured my router (config->settings) to store 100... -
- I just hit a problem with my test version of pfSense, I'm not sure I can account for everything I saw, but I have a g...
-
- Jim Pingle wrote:
> Out of curiosity, have you tried this on a recent 2.3.3 snapshot? Or on 2.4?
Yeah all the 2.3...
10/01/2016
-
- This should eliminate the following errors from the ntpd log file when
using IPv6 or dual-stack networks:
"syntax err... -
01:31 PM Bug #4326: Limiters on firewall rules where NAT applies drop all traffic
- I am interested to know if limiters will ever work again?
It's annoying that they still show in the GUI and not work... - 10:45 AM Revision 8318da51: Re-enable executing the wifi mode command first. This fixes channel changing, which broke in d325e90818db2b22fc2562c38493769f217230f2.
-
09:19 AM Revision 32912ae8: Report quantity of files being installed by minimal and diff options.
- Also consolidate some unset commands.
-
06:52 AM
Bug #6833 (Resolved): Wifi channel change applies only on reboot
- Whenever I change the channel on my 2.4 GHz AP the changes only apply on reboot. This broke in https://github.com/pfs...
09/30/2016
-
11:41 AM Bug #6830: Chelsio T4/T5 CXGBE drivers not loaded as ALTq capable in the PfSense UI
- Jim Pingle wrote:
> Can't target 2.3.2_1 as it's already been built.
>
> There was a deliberate reason this was l... -
- Break verbose option in two for showing files and/or constructed command. (--show_files, --show_command)
Don't save ... -
- Can you please cherry-pick commit 0c22163daba4a8ecc287e6b2f7060383c5e1dcb1 to add support for the Sierra MC7430?
h...
09/29/2016
-
- Can't target 2.3.2_1 as it's already been built.
There was a deliberate reason this was left out but I'll have to ... -
- cxgbe drivers support ALTq. cxl interface labels should supoort it:
https://www.freebsd.org/cgi/man.cgi?query=altq&a... -
- Most likely cause is an improper outbound NAT rule that's matching traffic from the firewall itself. Please start a f...
-
04:54 PM Bug #6829 (Rejected): Possible tftp-proxy bug?
- Seems we are running into an issue with tftp-proxy not working again (I want to say it did work briefly after the lat...
-
07:30 PM
pfSense Packages
Feature #6831 (New): Snort does not support aliases containing FQDN
- Snort does not support aliases containing FQDN. The pass list in snort's settings has a list which points to a syste...
-
12:58 PM Bug #6658: DHCP Relay not working on 2.3.2
- Yes I did: https://redmine.pfsense.org/issues/6658#note-4
-
- Not enough info there. Try again on 2.3.2, post on the forum, try to narrow it down. Unlikely to be the same bug, but...
-
12:06 PM Bug #6296: Interface dies with IPsec and SMP
- I am seeing issued similar or the same as posted in this thread with 2.3.2 (2.3.1 was a typo), SMP, and IPsec. CPU r...
-
- On 2.3 we have a patch to alter the behavior of "route change" so that it adds a route if it's not already in the tab...
-
10:23 AM Feature #6827 (Closed): Add Proxy Mobile IPv6 (PMIPv6)
- It would be great to integrate network-based mobility to pfsense
PMIPv6 is IETF standard: RFC 5213 and RFC 5844
h... -
- * Install pfsense 2.3.2. WAN and LAN interfaces. No global IPv6 address assigned to WAN interface (but see NOTE below...
-
- Please start a forum on the thread for discussion until a definite bug is identified. It's more likely there is some ...
-
08:51 AM Bug #6825: LDAP RFC2307 bug in 2.3.2
- Correction on the query...
ldapsearch -h prodipa-mtl03 -b "cn=groups,cn=compat,dc=grenadine,dc=juicy" -x '(&(cn=gr... -
- Hello,
Seems there is still a bug with the RFC2307 standard in 2.3.2's ldap config.
I setup the LDAP configura... -
09/28/2016
- 11:38 PM Revision fbb78d6b: Typo staic
-
- 11:30 PM Revision 44d3f26d: Wording of incomplete ARP description
- I think "ARP request" is what is meant here.
-
- They had the same issue in OPNsense, so they created a FreeBSD port of the stock Intel driver version 7.6.2, which wo...
-
- Thanks Jim! I'll report to FreeBSD. It's something that started happening a few months ago so I think one of the late...
-
- Sounds like a problem that used to happen on older em chips, if you run "@ifconfig em0 down; ifconfig em0 up@" for ea...
-
- Hi guys,
I have pfSense 2.3.2 installed on a Soekris net6501-50 board. I recently noticed that when the link of t... -
- Shows incomplete ARP entries, which were skipped before (for no reason I could find in the commit history)
Shows a st... -
03:31 PM Bug #6824: Tab diagnostics does not recognize disk volume
- Jim Pingle wrote:
> It will not hurt anything. SMART is only there for a certain specific kind of disk test, not a t... -
- It will not hurt anything. SMART is only there for a certain specific kind of disk test, not a task that is generally...
-
- Jim Pingle wrote:
> SMART only supports certain specific controllers, and "aac" does not appear to be among them.
... -
- SMART only supports certain specific controllers, and "aac" does not appear to be among them.
-
- does this can bring some additional damage to the production system?
-
- Dears,
RAID1 volume is recognized in the OS layer (screen attached) but is not recognized in the Diagnostic tab. W... -
-
- Applied in changeset commit:9e3cb876a600087c8fb2fa0af7907b986e304c48.
-
- The status of ARP entries is important, but the status is not shown in the GUI. Additionally, incomplete ARP entries ...
-
- Applied in changeset commit:632e5f504fed668c328eea3c0af702d1b4998289.
-
- When saving a DHCP static mapping with "ARP Table Static Entry" checked, the static ARP entry is not applied until th...
-
- At least on my box, I've narrowed it down to the call to dhclient at source:src/etc/inc/interfaces.inc#L4281
Only ... -
-
- I have seen this as well, though I haven't yet attempted to narrow it down.
-
- DHCP server responds within just a few milliseconds, but boot up hangs on configure WAN interface for 20+ seconds. T...
-
- Also: Target for 2.4 is only a couple months out, not a year.
-
- Reverting that patch certainly does seem like a good idea given the responses.
Out of curiosity, have you tried th... -
- Target version: 2.4.0? Not exactly sure people are keen on waiting for a year to get something that was working to wo...
-
- Now that 2.4 dev builds have started, is there any reason to expect that this bug might get some lovin' in the next r...
-
- @david: This functionality has been done at least 3 times by pfSense user (marcelloc), the code never got merged, so ...
09/27/2016
-
-
- 8be135cd114fbc9294ec9dafed2125d0e553956c (February, 2013).
-
-
-
-
-
-
-
-
-
09:17 AM pfSense Packages Bug #6818: WAN traffic graph displays inverted bandwidth columns
- Phillip Davis wrote:
> And that image is correct for the current traffic graph system (2.3.2). For example, the 3rd ... -
- Jim Pingle wrote:
> Check again on a 2.3.3 or 2.4 snapshot those graphs have been replaced.
Thank you. It is a cr... -
- And that image is correct for the current traffic graph system (2.3.2). For example, the 3rd host down in the table i...
-
- Check again on a 2.3.3 or 2.4 snapshot those graphs have been replaced.
-
- Open Traffic Graph and select WAN interface.
On the graph, BW IN and OUT values are correct. In the Bandwidth In / B... -
-
- Duplicate of #2774
-
- Updated subject to match error message/condition.
-
- Duplicate of #6762
-
- After upgrade from 2.2.6 to 2.3.2, I'm not more able to edit a rule using Google Chrome. When I press save, the addre...
-
- As a follow up - it appears that after openvpn_resync_all(), nothing else below that function call could run from the...
-
02:20 AM Feature #2774: Extend DHCP Pools code to allow using different subnets
- The first time I used pfsense I was surprised to see that it can do dhcp relay but not the other side of the coin tha...
09/26/2016
-
I prefer keeping 'unfiltered vlans' traffic being routed by a l3 switch that is connected to pfsense with a /29 or ...-
06:29 PM pfSense Packages Bug #6814: pfBlockerNG cannot define table pfB_Europe_v6 after pfsense upgrade to 2.3.2-RELEASE (amd64)
- Thank you @BBcan177, my pfsense Firewall Maximum Table Entries were set on default (20mb) I increased the entries to...
-
-
-
- 06:14 PM Revision 49db5ba1: Obscured password field in system_authservers.php bind section
- Fixed #6759
(cherry picked from commit 1c1f08f92e8841f7282280caeed7613edd810453) -
- See comment in the PR
-
- Would be nice to have a status or diagnostics page for radvd
-
-
- Fixed, thanks.
-
- A fix was committed in FreeBSD and now imported to our repo. Next round of snapshots should be fixed
https://svnwe... -
- Patch from FreeBSD ticket 207598 was imported to pfSense/FreeBSD-src. Today's 2.3.3-DEVELOPMENT snapshot already has ...
-
- Duplicate of #6762
-
- Keep getting "Please match the requested format" when trying to enter my addresses.
09/25/2016
-
- Increase the pfSense Advanced / Firewall-NAT / Firewall Maximum Table Entries to 10M entries...
-
- You either don't have enough RAM, or you don't have large-enough limit set for tables. Either way, nothing that could...
-
- Pfsense version:
2.3.2-RELEASE (amd64)
built on Tue Jul 19 12:44:43 CDT 2016
FreeBSD 10.3-RELEASE-p5
Package
p... -
-
- The 2nd argument ($info) isn't used in that function, and doesn't seem to be used anywhere else in the codebase.
09/24/2016
-
-
-
-
- All the crashes here seem to be OpenVPN related.
Calling openvpn_resync_all() causes php-cgi to crash on boot, whi... -
11:54 AM Bug #6813: 2.3.3 built on Fri Sep 23 11:34:50 CDT 2016 - segfaulting processes result in non-functional system
- Pull it :|
-
- Setup a new VM as a clean test. Works on a snap from the 22nd, same one updated to the 23rd breaks in various ways. T...
-
- Also, OpenVPN is completely no-op, producing just segfaults.
https://forum.pfsense.org/index.php?topic=118709.0 -
- Err, "only via IPv4". Whatever.
-
- https://forum.pfsense.org/index.php?topic=118714.0
No default routes configured, I can SSH in remotely only via IP... -
- Phillip Davis wrote:
> Of course, anyone can upgrade to the 2.3.3-DEVELOPMENT snapshots. Actually they are really go... -
08:43 AM
Bug #6812 (Not a Bug): IPsec filterdns crash
- This appears intermittently in the system logs:
Sep 24 00:27:13 php-fpm 73703 /rc.newipsecdns: The command '/us...
09/23/2016
-
07:52 PM Bug #6751: Route53 DynDNS Problems / Replace Route53 DynDNS Module
- Filed a pull request in Github
-
-
- Some views were omitting important info at the narrower width
-
- Some views were omitting important info at the narrower width
-
- Some views were omitting important info at the narrower width
-
02:44 PM Bug #6811 (Resolved): pkg_edit.php rowhelper is broken with multiple distinct rowhelpers per page.
- A Row Helper Name is hardcoded in pkg_edit.php.
I don't know why, but the effect of this is that a single page can... - 01:14 PM Revision 5116a8aa: Fix bug where CARP vip status is incorrent in the interface when more
- than one CARP vip is configured for an interface.
-
- Works, following the example given it prints the interface name correctly.
-
-
- Fixed
-
- Please start a forum thread for discussion and troubleshooting, there isn't enough information here to classify it as...
-
- Works
-
- Done, working.
-
- Confirmed fixed by multiple sources.
-
-
- Fixed, per above feedback
-
- Fixed
-
- Fixed
-
- Works here.
-
- I fixed the description. The underlying daemon does not accept subnets, only IP addresses, so the description has bee...
-
- hrPrinterTable: printcap entry for <noname?> has errors, skipping
Been flooding the logs since 2007 at least. Perh... -
- New installs on snapshots are fine, fixes are on existing packages for current versions so it's addressed from a user...
-
- Resolved per above feedback
-
- Works.
-
-
-
07:54 AM pfSense Packages Bug #6807: Softflowd + multiplie interfaces
- OK, the project is dead
What are the alternatives? (netFlow) -
- That would be a bug in softflowd, not one we can fix. We are passing all of the correct parameters to it. If it's usi...
-
- There are problems in the softflowd.
Always send information only from one interface. And his number is always 0.
... -
- Please post on the forum for help diagnosing the issue until a definite bug can be identified. It could still be a co...
-
07:27 AM Bug #6809 (Rejected): IPSEC connection does not pass the state "CONNECTING"
- i have a have a IPSEC connection to fortigate, this connection not work after the upgrade to 2.3, 2.2 versions worked...
-
-
- Duplicate of #6762.
-
02:15 AM Bug #6808 (Duplicate): Can't add firewall rule
- Hi,
I can't add firewall rule when using Network or IP,alias distination.
The chrome console show me a regex er... -
06:16 AM Bug #5319: Error message "No config named" in charon daemon
- I can confirm this issue that is still present in 2.3.1-RELEASE-p5 :...
-
04:12 AM Bug #6223: IPsec + OpenBGPD fails with "PF_KEY socket: No buffer space available"
- Hey all,
Do we know exactly what causes this yet?
Reason i ask is i have just had a 2.2.6 machine have this (be...
09/22/2016
-
- This reverts commit 89e9960e34737c027d7fb0516d7183dc0a37f391.
-
- This reverts commit c09203c2ba6bf10332fe432b72e7e57c2f20cf18.
-
- This reverts commit be1eff2b4ba57c8f97128dacefb5271549c16d51.
-
- I made a suggestion that it is a good time to cut a 2.3.3 release:
https://forum.pfsense.org/index.php?topic=118670.... -
- Notably, this gets triggered on : as well, complete no go with IPv6.
-
- This needs to be released. Damn annoying and Chrome fix nowhere in sight - https://bugs.chromium.org/p/chromium/issue...
-
-
-
-
- I was wondering about it too. I don't know if either of these ideas go anywhere.....
* The value set by csrf_conf(... -
- Yeah I see that now. I tested it earlier by setting $config['system']['webgui']['session_timeout']=2 at the top of th...
-
- @jimp - the fix above doesn't work, because $config only becomnes defined when authgui.inc is included, which is afte...
-
- One bug to be fixed at least - it's now clear why CSRF times out incorrectly:
In guiconfig.inc, csrf_startup() che... -
03:20 PM Bug #4418: IPsec mobile clients - bogus "p" appended to search domain
- Ok, I am using pfSense 2.3.2 (latest) and I get the silly p appended to the default domain. Can someone look into th...
-
-
-
- 04:54 AM Revision c68dbfc7: Allow Hyphens in DHCP NTP Server form validation
- Also removes the ability to have underscores `_` in ntp server
FQDNs.
Closes #6806 -
12:00 AM Bug #6806: Form validation for DHCP NTP Servers does not allow hyphens
- https://github.com/pfsense/pfsense/pull/3151 (CLA was just signed so might not be labeled appropriately yet)
09/21/2016
-
- Form validation in the dashboard does not use the proper regex for FQDNs (it doesn't allow hyphens)...
-
- Chris Buechler wrote:
> works
Form validation does now allow hyphens in the NTP server name
Separate Issue Inc... -
09:41 PM pfSense Packages Bug #6805 (Duplicate): Freeradius + OTP sometimes auth failed when auth openvpn.
- Hello,
I have test freeradius + OTP to auth openvpn connect.It's can connect and auth it.But it's has sometimes auth... -
09:23 PM Feature #6804 (New): Add row counter into Diagnostics -> Edit File
- Will be extremely helpful if the rows in the Diagnostics -> Edit File window are presented with a number.
In this ... - 07:39 PM Revision 47180823: Spelling mistake "system_gateways.php"
- Fix spelling mistake in "system_gateways.php"
- 05:47 PM Revision c2b72200: Apply #601 fix to firewall_nat.php
- (cherry picked from commit 4b0815f38a8a0f98519ca0c2bff7c81b6464e579)
- 05:46 PM Revision baa6302a: Apply #601 fix to firewall_nat.php
- (cherry picked from commit 4b0815f38a8a0f98519ca0c2bff7c81b6464e579)
- 05:46 PM Revision 4b0815f3: Apply #601 fix to firewall_nat.php
- 04:10 PM Revision 7dd9db77: Fixed #6801
- (cherry picked from commit 00098bc80b6f85eb74f2f3bc2b4eb7430614110d)
- 04:10 PM Revision 83b4b514: Fixed #6801
- (cherry picked from commit 00098bc80b6f85eb74f2f3bc2b4eb7430614110d)
- 04:09 PM Revision 00098bc8: Fixed #6801
-
- Steve Allison wrote:
> FYI, this "[a-zA-Z0-9_.:]+" is the same as ".+". Perhaps only : or _ needs escaping?
No it... -
03:20 PM Bug #6762: "Please match the requested format" error in Chrome when editing certain form fields
- FYI, this "[a-zA-Z0-9_.:]+" is the same as ".+". Perhaps only : or _ needs escaping?
-
- It is not a bug in our code. It is a bug in Chrome that we have worked around by removing escaping from the regular e...
-
- So from Jon Gerdes explanation, this should be adjusted to "Bug" as pfSense is using invalid HTML5? Just not apparent...
-
- That doesn't however allow access to new openssl 1.1 features like ALPN.
Haproxy used to build not using the freebsd... -
- We use the OpenSSL version provided in the base system of FreeBSD 10.3, which is maintained by FreeBSD. If/when FreeB...
-
12:17 PM pfSense Packages Bug #6182: HAProxy not supporting ALPN
- This is not a HAProxy issue, this is an entire pfSense issue. Because openssl in pfSense was reverted from 1.0.2 to 1...
-
12:48 PM
Bug #6801 (Resolved): Rule separators are moving when multiple firewall rules are deleted together
- Thanks for confirming. Fix has now been applied to firewall_nat.php as well.
-
- Thank you Steve / Jim.
I found it safer to apply the changes through Diagnostics -> Edit file.
Confirming that ... -
- The wiki doc for the System Patches package explains how to use the commit ID from the above comment to apply the pat...
-
11:43 AM
Bug #6801: Rule separators are moving when multiple firewall rules are deleted together
- Probably easiest to just wait from the next snapshot and update. Alternatively you could access the updated file here...
-
- Steve Beaver wrote:
> Applied in changeset commit:00098bc80b6f85eb74f2f3bc2b4eb7430614110d.
Steve, would you prov... -
11:20 AM
Bug #6801: Rule separators are moving when multiple firewall rules are deleted together
- Applied in changeset commit:00098bc80b6f85eb74f2f3bc2b4eb7430614110d.
-
11:11 AM
Bug #6801 (Feedback): Rule separators are moving when multiple firewall rules are deleted together
- Fixed and tested. Please confirm.
-
- Steps to reproduce:
1. Select multiple firewall rules
2. Delete together
3. The rule separators changed their po... -
- +Expected behaviour and error+
A feature/change in release 2.1 was that CSRF timeout was changed to be the same as... - 12:32 PM Revision 02a4d858: Do not show certificates in drop-down list that are already contained in this CRL.
- 12:32 PM Revision 419cfa1e: Do not show certificates in drop-down list that are already contained in this CRL.
-
-
11:25 AM Bug #6802 (Rejected): GUI does not respond and vpn stops working
- Since I update the firewall to 2.3.x (actualy 2.3.2) Some times GUI does't respond and VPN client are disconnected un...
-
- We used to do that, but ultimately decided against it as it was a potential security issue. We might be able to revis...
-
- When not logged on and entering my pfSense on a specific URL like https://192.168.99.254/status_dhcp_leases.php it sh...
09/20/2016
-
-
-
-
-
-
- 12:52 PM Revision 63844c33: Do not show certificates in drop-down list that are already contained in this CRL.
-
- (cherry picked from commit d20b69c529654f2b5d4adf9ab2bba5116f980c64)
-
- Original PRs and rationale:
* https://github.com/pfsense/pfsense/pull/2944 ("Add missing recommended key lengths/dig... -
-
- LAN Interface: 172.25.232.1/24
IP Alias VIP on LAN: 10.10.10.10/32
OPT1 Interface: 192.168.1.1/24
Some users lik... -
-
-
-
- Fix pushed, will show up next time the packages are built.
-
-
04:14 AM pfSense Packages Bug #6797 (Resolved): Shared Key Export - just one server in list
- There is a typo error in vpn_openvpn_export_shared.php line 191 that causes just one server to be displayed in the Sh...
- 08:26 AM Revision df8ebedc: Allow snmpd to bind to multiple interfaces.
-
- After reboot PPPoE connection wasn't established. See attached log.
pfSense 2.3.2 x64.
09/19/2016
-
-
- * Key crypto info shown
* TAP/TUN appended to description (important descriptive distinction)
(cherry picked from com... -
-
05:24 PM Feature #6796 (New): Allow hostnames as GRE and GIF endpoints
- Currently only IP endpoints are allowed. The hostnames need to be resolved and the interfaces updated on a regular ba...
-
10:02 AM Feature #6795 (Duplicate): User certificate for webGUI login
- It would be practical to allow the administrator to enable user certificate required for webGUI signin.
This would a... -
03:02 AM Feature #6794 (Resolved): Chinese Version Language Translation
- mkdir
/src/usr/local/share/locale/cn/LC_MESSAGES/
Dear Administrator
Given China's administrator easy to use, c...
09/18/2016
-
- * Key crypto info shown
* TAP/TUN appended to description (important descriptive distinction) -
- Original PRs and rationale:
* https://github.com/pfsense/pfsense/pull/2944 ("Add missing recommended key lengths/dig... -
02:48 PM Bug #6725: DHCP Server > TFTP server name and custom dhcp options in GUI and in dhcpd.conf but missing on the wire
- Looks like there may have been a problem with my client not requesting the custom attribute. After messing with dhcli...
-
02:27 PM Feature #6793 (Resolved): Add pound package to the pfSense repository
- Dear devs,
Please add the "pound" package to the pfSense's own repository so that anyone can install it without ha... -
11:24 AM Bug #6099: igmpproxy does not recognize upstream interface
- Hi,
first of all, thank you very much for your hard work!
Due to missing IPTV (I just ordered it last week) I i... -
-
-
05:04 AM Bug #6507: GRE and GIF tunnels on dynamic IPv6 interface are not brought up during boot
- I've tried to dig into this again. There some things I've noticed.
1) it looks like the binary "check_reload_statu...
09/16/2016
-
-
-
-
-
-
-
-
- 1. Rename "srcportadv" to "srcporttoggle" - not ideal to have 2 fields both labelled "advanced options". This present...
-
-
-
- Thise scripts were used on tarball upgrade before pkg(8). Users running
pfSense < 2.3 will need to go to 2.3 first an... -
03:05 PM Bug #6792: Cannot edit or add firewall rules, error: Please match the requested format
- No problem in latest Firefox 48.0.2.
Problem exists for me in latest Chrome Version 53.0.2785.116 m both normal an... -
- Duplicate of #6762 (applies to multiple pages)
It is a bug in Chrome's regex parsing that they let into their late... -
- Suddenly I'm getting an error of "Please match the requested format" when I try to use an alias or ip address for a t...
-
- Setting to Feedback since the relevant fix has already been committed.
-
- The bind credentials field is covered by #6759 and has already been fixed in the repository.
If your LDAP users ca... -
07:43 AM Bug #6791 (Rejected): Upgrade 2.2.6 > 2.3.2 had broken LDAP authentication
- Hi,
I jut want to declare the following bug that we had discovered:
We upgraded one of our test firewall from... -
- Already fixed in the repository. This is a duplicate of #6759
-
06:57 AM Bug #6790 (Duplicate): Password is in plain text under "System -> User -> ManagerAuthentication" Type LDAP under "Bind credentials"
- Hello,
There is a plain text box input for password field.
As such it's letting the password readable by anyone.
...
09/15/2016
-
-
-
-
-
-
-
-
- 1. On creating a new rule, $pconfig['ipprotocol'] is undefined, rather than defaults to what is seen in GUI (IPv4). F...
- 05:02 PM Revision 3f492b85: Fixed #6786 by making table sortable
- (cherry picked from commit e846d7f882d57331d7ead5fcf593e7e4daf7e247)
- 04:41 PM Revision e846d7f8: Fixed #6786 by making table sortable
-
-
-
-
-
- Works, thanks.
-
02:17 PM pfSense Packages Feature #6789 (New): disgest_ldap_auth
- We are deploying pfsense the company as proxy using squid + squidguard and authenticating in our openldap base (linux...
-
- pprior code "converts" every icmp type - of which only 3 actually get changed (rest keep same value anyhow!). If also...
-
- 12:44 PM Revision 49f5e806: Use !empty() instead of isset()
- (cherry picked from commit 6a9d1bfc5c90011af10a1704231340a42fa9f51d)
- 12:44 PM Revision 080e2967: Improve handling of source-hash key
- - Store the source-hash key in its own config field.
- Validate the provided source-hash key. Check that hex string i... - 12:44 PM Revision d7b0d492: Add field to specify source-hash key
- The source-hash pool option uses a hash of the source address to
determine the translation address. This hashing algo... -
-
12:11 PM
Feature #6786: Sortable Description Captive Portal MACs list
- Click the column headers to sort the table as required.
Should be in the next snapshot -
12:10 PM
Feature #6786 (Feedback): Sortable Description Captive Portal MACs list
- Applied in changeset commit:e846d7f882d57331d7ead5fcf593e7e4daf7e247.
-
10:33 AM Bug #6760: Editing WAN bridge interface breaks routing until reboot
- I am having a similar issue whenever my WAN link goes down and then recovers. Basically I lose some kind of routing ...
-
-
- See main PR for details
-
- See main PR for details
- 08:28 AM Revision 6a9d1bfc: Use !empty() instead of isset()
-
-
- See main PR details
-
08:00 AM Bug #4937: RRD graphs with mixed quantities are unreadable
- Hi, the issue is exactly the same on 2.3. Packet loss and latency still share the same scale, so one can definitely d...
- 01:20 AM Revision 6f141058: Merged #2975
- 01:18 AM Revision d969f54a: Merged #2975
- 12:58 AM Revision 9493b957: Revised service running/stopped icons
- (cherry picked from commit a03162c874c4e52e6cae52c2eefce87118fd90d2)
- 12:57 AM Revision f1f43826: Revised service running/stopped icons
- (cherry picked from commit a03162c874c4e52e6cae52c2eefce87118fd90d2)
- 12:52 AM Revision a03162c8: Revised service running/stopped icons
- 12:36 AM Revision 0ae0f1f0: Fixed #6788 by clearing only the first label in the cloned row
- (cherry picked from commit d38d215d1d9429d3a1a15708f92b14cf3a15b247)
- 12:36 AM Revision 10fca5ac: Fixed #6788 by clearing only the first label in the cloned row
- (cherry picked from commit d38d215d1d9429d3a1a15708f92b14cf3a15b247)
- 12:34 AM Revision d38d215d: Fixed #6788 by clearing only the first label in the cloned row
09/14/2016
- 08:18 PM Revision 176b8f78: Merge branch 'master' of git.pfmechanics.com:pfsense/pfsense
-
07:40 PM
Bug #6788: [2.3.3] Services - NTP - Settings: Prefer/No Select checkboxes invisible when adding entries
- Applied in changeset commit:d38d215d1d9429d3a1a15708f92b14cf3a15b247.
-
07:39 PM
Bug #6788 (Feedback): [2.3.3] Services - NTP - Settings: Prefer/No Select checkboxes invisible when adding entries
- Javascript revised to clear only the first label in the cloned row
-
- Best described with a picture:
!http://image.prntscr.com/image/73931c990d7f4757a8d5d62023e4db6a.png!
Note:
- ... - 07:32 PM Revision 1c402413: Merge pull request #2975 from NOYB/Services_Status
-
- It does not look like the proper PID files are being created in /var/run. -p PIDFILE arguments are not being added to...
-
- Secure SMTP Connection modes are mutually exclusive. Select only one.
09/13/2016
-
09:03 PM Feature #6787 (Resolved): NTP GUI sync/poll interval
- Id like to be able to set the minpoll and maxpoll in the pfsense NTP service within the GUI. I noticed that prior to...
-
07:49 PM Feature #6786 (Resolved): Sortable Description Captive Portal MACs list
- Hi!
Pfsense is awesome. We use the Captive Portal MACs feature a lot, on top of the voucher system.
While the list... -
- pprior code "converts" every icmp type - of which only 3 actually get changed (rest keep same value anyhow!). If also...
-
-
- 06:36 PM Revision 786d411d: Fix #6768 IPv6 static mapping on delegated prefixes
- For example, WAN receives a /48 delegated from the upstream (ISP...),
e.g. "2001:470:abcd::" pfSense then uses this a... -
-
- 05:34 PM Revision 4d09ffde: Code style changes
- (cherry picked from commit b2836666a8e7fc021ea750fafc8fc6e8097d52ff)
- 05:34 PM Revision 7066f0cc: Allow packages to request syslogd log socket to be created inside chroot by specifying it in /package/logging/logsocket element. Implements #4898.
- Example:
<package>
<logging>
<logsocket>/var/appname/var/run/log</logsocket>
</loggin... -
-
03:30 PM pfSense Packages Feature #6785 (Resolved): Allow setting of suricata's meta-field-limt libhtp parameter
- ...
-
-
- Applied in changeset commit:e89a17fbf04aae89f60f13baf293f397ca21c303.
-
-
-
12:40 PM
Feature #4898 (Feedback): Allow packages to request syslogd socket to be created inside chroot
- Applied in changeset commit:ab31acb937792bdedef11fcdbd1d98ad126ebc0b.
-
- (cherry picked from commit 57625777c88603f1d2ca55cc981c5ec538c3770f)
-
- 12:37 PM Revision 6002af93: Fix diag_dns regressions
- After testing diag_dns behaviour some regressions have been noticed.
1) Looking up ipv6.google.com (it only has AAAA... -
-
-
- (cherry picked from commit a25c797a44e5cd2480947eb5ae427dcb8e0c031c)
-
- Change warning box with dismissal to collapsible info box.
(cherry picked from commit 6f3ac947b2a83f18ade12ad9876fb8... -
-
09:04 AM Feature #5825: Allow EAP-RADIUS for authentication servers
- Adam Thompson wrote:
> Supposedly this exists, per https://doc.pfsense.org/index.php/IKEv2_with_EAP-RADIUS, but I'm ...
09/12/2016
-
-
09:22 AM
Bug #6783 (Not a Bug): Bootstrap code compatibility/rendering failure with SELECT MULTIPLE boxes
- The jQuery "begins with" syntax works with this type of control. Try:...
-
05:01 AM Bug #6769: Crash PacketFilter in bridge mode
- Ok, without advanced settings set in the rules on the firewall not more crash. Now it's stable.
-
04:53 AM Bug #6223: IPsec + OpenBGPD fails with "PF_KEY socket: No buffer space available"
- Applied attached patch, but that only pushes the problem in the near future. Still fails after x amount of days or ho...
- 01:20 AM Revision e89a17fb: Fix #6768 IPv6 static mapping on delegated prefixes
- For example, WAN receives a /48 delegated from the upstream (ISP...),
e.g. "2001:470:abcd::" pfSense then uses this a...
09/11/2016
-
- Pull request: https://github.com/pfsense/pfsense/pull/3135
-
- (also it's not clear to me if all browsers add "[]" and if there's a remaining compatibility issue in here)
-
- For anyone needing a workaround, or if it's useful, I just googled "jquery square brackets" and found two syntaxes th...
-
- Source code:...
-
01:40 PM pfSense Packages Bug #6784 (New): HAProxy version .48 will not use URL Table Alias for front end listener
- I use HAProxy with an alias of ports to listen on. The backend has the ports set to blank so it just does a pass thro...
-
- Stilez y wrote:
> There is an active FreeBSD port of "mdns-repeater". Its args are a list of interfaces optionally p... -
-
Also available in: Atom