Activity
From 09/24/2016 to 10/23/2016
10/23/2016
-
11:58 PM Bug #5317: CSR signed certificates shows issuer as external
- Seeing this as well, quite problematic for VPN usage. pfSense 2.3.2-RELEASE-p1.
-
11:33 PM Bug #6272 (Resolved): Wrong numbers in state column of /firewall_rules.php
- Fixed on 2.4 and RELENG_2_3.
pfSense_get_pf_states() now return the packet counters as doubles. -
07:34 PM Bug #6872: Captive Portal per user bandwidth field no longer accepts 0.
- The front-end validation is stopping a zero from being entered, so "Leave empty" is the (only) way to specify "no lim...
-
11:00 AM Bug #6872 (Resolved): Captive Portal per user bandwidth field no longer accepts 0.
- The text says "Leave empty or set to 0 for no limit." However input error checking in the browser now no-longer allow...
-
03:05 PM Bug #6873 (New): radvd - Too many addresses in RDNSS section when previously using DHCPv6
- I have come across a bug within the IPv6 Router Advertising Daemon where you receive the following errors in the logs...
-
03:03 PM Feature #4259: Port forward NAT rules with "any" protocol
- Could be it implemented with the new 2.4 release ?
-
10:14 AM Bug #6870: Load balancer DNS (relayd) can't handle fragmented udp, breaks DNSSEC
- Turns out causing pfsense to not drop fragmented 'do not fragment' packets creates more problems than it solves. For...
10/22/2016
-
12:25 PM pfSense Packages Bug #6871: Squid Proxy Reports bug
- I'm sorry but I'm a fool ... is necessarily open ports on your firewall application ( ports 7445 and 3000)
ALL OK -
Installed from scratch pfsense, Proxy Server, Squid Proxy Reports.
If you try to access the page https: // pfSen...-
- To be clear:
The workaround for relayd / DNS protocol failing or being seemingly intermittent when load balancing... -
Update: dig and other dns query engines set the DF 'do not fragment' bit -- then go on to issue DNSSEC DNS querie...- 05:31 AM Revision ed893ee5: Fix #6869 diag_routes resolve names for RELENG_2_3
- This code to parse the netstat output and use gethostbyaddr() to reverse resolve names is only needed in RELENG_2_3, ...
10/21/2016
-
08:15 PM Revision 8fc25403: Revert "Revert "Enable IPFW on PHP module""
- This reverts commit 9fdd0c7ebb966df9b566acac091390c4a97fa8c7.
-
03:29 PM Bug #6870: Load balancer DNS (relayd) can't handle fragmented udp, breaks DNSSEC
- Unlikely we can do much if anything for this, it's probably an issue in relayd itself and not the way we set it up. Y...
-
- The built-in load balancer (relayd) has a protocol 'dns' that manages UDP dns queries. The purpose is to load balanc...
-
- This reverts commit c04887d8fc440e769ed987f993d34bc8f20fbf64.
-
10:02 AM Bug #6863: pf states reset by CARP neighbor
- Jim, thanks for your explanation! This what I'm trying to detect - what exactly clearing the states. I know, Redmine ...
-
09:50 AM Bug #6758: 2 x Crash with "PHP Fatal error: Call to undefined function pfSense_interface_listget() in /etc/inc/interfaces.inc on line 80"
- Discussion: https://forum.pfsense.org/index.php?topic=118679.0
10/20/2016
-
- That is a "feature" of the netstat command, which has annoyed me too. With "-W" it does output the full data in some ...
-
12:58 PM Bug #6869 (Resolved): Diagnostics / Routes Truncates Destination and Gateway Names
- When "resolve names" is enabled, resolved destination and gateway names are truncated to 18 characters (e.g., pfSense...
-
-
- Running 2.3.2_1 using an HE/64 tunnel. Adjusting MTU to troubleshoot possible PMTUD problem. Found that setting for M...
-
10:47 AM Bug #4326: Limiters on firewall rules where NAT applies drop all traffic
- I also use limiters and NAT reflection in combination. So I am stuck on 2.1.4 and 2.1.5 until a release where this co...
-
09:50 AM pfSense Packages Bug #6129: zabbix agent/proxy 2.4 not ported to pfSense 2.3
- Is there any way i can help with this. Or is there anything i can do to make this happen?
-
- Looking at a customer box today it made me realize a good path here would be to queue up the notifications in a file ...
-
08:09 AM pfSense Packages Bug #6867 (Closed): Please update quagga to version 1.1
- Quagga 1.1 fixes a lot of bugs:
http://mirror.yannic-bonenberger.com/nongnu/quagga/quagga-1.1.0.changelog.txt
N... - 08:04 AM Revision eb01f065: Improve IPv4 address validation for services_dhcp
- The input pattern that goes with Form_IpAddress by default allows for IPv4 and IPv6 valid characters. The back-end va...
- 07:18 AM Revision ebfcfeb5: Fix display advanced after input error for system_gateways_edit
- Use case:
1) Edit a gateway that has no advanced settings (i.e. the Advanced section does not need to open on page lo... -
- Hexadecimal numbers without the '0' padding are also valid, e.g:
a:b:c:d:e:f - 05:47 AM Revision 6a546985: Remove "use lowercase" hint
- As it is no longer relevant, because the code now automatically converts
to lowercase. - 04:21 AM Revision d461ff40: Fix #6864 automatically convert IPv6 input to lowercase
- 1) As the user leaves the field, or presses Save, onChange will fire and
convert the input string to lowercase. This ...
10/19/2016
-
- This one also automatically converts the input to lowercase as the user leaves the IP Address field, or presses a but...
-
- While I think it is cool to convert the characters as you type, the GUI has to accept upper case letters as well.
... -
- Pull request: https://github.com/pfsense/pfsense/pull/3198
That makes the "Please match the requested format:" text ... -
- Recent browser changes mean this is rejected before the form is submitted and the error tool tip shown is unhelpful.
... -
- I can confirm that this fixes the issue where the file exists but contains no leases. The lease file is still being p...
-
04:30 PM pfSense Packages Feature #6866 (Rejected): Suricata multiple interfaces
- I've set up Suricata on the WAN interface. When an alert happen I don't see what internal address caused the alert. I...
-
- Please start a forum thread for discussion and diagnosis before opening a ticket. Also, upgrade to 2.3.2_1 first to e...
-
03:11 PM Bug #6865 (Rejected): DNS resolver : old issue returns
- 2.3.2-RELEASE (i386)
built on Tue Jul 19 13:09:39 CDT 2016
FreeBSD 10.3-RELEASE-p5
nanobsd (4g)
When trying to... -
- Too late for 2.4.0...
-
04:39 AM Feature #2358: NAT64 support
- UPVOTE
-
02:16 AM Feature #2358: NAT64 support
- UPVOTE, word up on this. It should be prioritized significantly.
-
- That is normal and expected when the two units are properly synchronizing states. Find what is clearing the states an...
- 02:43 AM Revision 2355c154: Better handle no dhcpv6 leases file
10/18/2016
-
- https://github.com/pfsense/pfsense/pull/3197
That fixes the little side issue, where in fact the leases file exists ... -
- With regards to item 1, testing with one windows 10 client and no active leases, Status / DHCPv6 Leases reports "No l...
-
- title should have had protection of 0600, workaround changes it to 0644
-
- /var/etc/cert.crt has mode 0444, leading to
/var/log/nginx-error.log entries like
2016/10/16 16:06:14 [crit] 61476#... -
- Until 2.3.x pfSense carried a patch that changed the behavior of 'route
change' command, making it add the route when... -
- There are two pfsense routers (version 2.3.2-RELEASE-p1, but I've faced this issue 1st time on 2.2.5/2.2.6) in HA mod...
-
- I started having this crash frequently as well. I'm running 2.3.2_p1. I do have DHCPv6 on one of my WANs (but I nee...
-
- Ken Sim wrote:
> Anytime I try and change any of the gateways that are checked non-local on the current snapshot it ... -
11:43 AM Bug #6850: FreeBSD 11.0 Route Syntax Change For Non-Local Gateway
- Anytime I try and change any of the gateways that are checked non-local on the current snapshot it locks up pfsense a...
-
- I couldn't replicate it after fixes I pushed for #6828. Can you try the next round of snapshots?
-
11:16 AM Bug #6858: 2.3.X is not properly updating packages
- Renato, thank you for the write up.
Does this cover file /usr/local/lib/php/20131226/suhosin.so? This shared objec... -
- Actually it's not a bug, it's expected and it's how pkg is designed to work.
When we moved to 2.3.2_1 we cherry-pi... -
- Applied in changeset commit:94bd7fb3a52e375dcd25c416e36389f96060a8fd.
-
07:46 AM pfSense Packages Bug #6861 (New): Ha-Proxy duplicated backend used in place of original backend
- Hello,
Find hereafter a problem on ha-proxy 0.48 / 1.6.6 package.
Steps to reproduce :
- Create a configurati...
10/17/2016
-
04:01 PM Bug #6860 (Resolved): Monitoring (RRD) graphs return "unknown" step value
- There seem to be cases where rrd_fetch_json.php returns a step value that isn't located in the javascript lookup tabl...
-
12:56 PM pfSense Packages Feature #6859 (Resolved): have an includedir by default (sudo package)
- I'm trying to customize sudo and the options I'm looking for aren't in the GUI. Is there a way to include this line i...
-
04:33 AM Bug #6099: igmpproxy does not recognize upstream interface
- I have the same problem with the 20160905_1818 version.
The _all version works fine on ISP XS4All in The Netherlands... -
03:14 AM Feature #2573: Captive Portal support of RADIUS POD (Packet of Disconnect)
- POD is useful when replacing Expiration date in Pfsense user manager.
The Option " re-authenticate users every minu... -
- 2.3.X is not updating files properly. See forum thread https://forum.pfsense.org/index.php?topic=119344.msg662359#msg...
10/16/2016
-
10:37 PM
Bug #5413: Reduce disruptions when changing DNS records from DHCP leases in Unbound
- The patch you posted only prevents Unbound from being restarted by performing GUI actions, not automatically when a n...
-
- Note this potentially related bug report:
https://github.com/opnsense/core/issues/1184
"
Adding an IPv6 CARP V... -
- The issue manifests as the 'backup' machine in the carp set being unable to ping6 (or otherwise pass packets to) the ...
-
01:08 AM Bug #6779: Traffic shaper wizard uses decimals instead of whole numbers
- It would be good to make target version 2.4 instead of nothing. Thanks.
10/15/2016
-
11:16 PM Bug #6856: "Force Config Settings" buton on master causes slave to loss IP alises on lo0
- Sent pull-request: https://github.com/pfsense/pfsense/pull/3195
-
- Hi,
We have a two couple of node HA setup with pfsense latests version running (2.3.2p1). This cluster has a few v... -
- I've just sent a pull-req: https://github.com/pfsense/pfsense/pull/3194
-
- Hi,
When using an LDAP server on a non-local (ie. accesible thru a gateway) network, the system takes 10+ minutes ... -
03:06 PM Revision b77a6394: increase webgui usability when the remote ldap server isn't available
-
-
10/14/2016
- 11:29 PM Revision d672403c: Added STARTTLS to LDAP Auth Server Config
-
06:53 PM Feature #6855 (Resolved): Support STARTTLS in LDAP Server Configuration
- Add STARTTLS to the available LDAP Server modes.
-
02:32 PM Bug #6854 (Rejected): webconfig error with LDAP authenticated users for certmgr
- The local admin user is the only user that can successfully work with certificates.
Other users authenticating off o... -
02:04 PM pfSense Packages Bug #6305: Quagga problems updating routes / mistakenly showing "kernel"-routes while they are not
- Nate Baker wrote:
> Jim Pingle wrote:
> > Someone who can reproduce it reliably needs to get the details of how to ... -
12:56 PM pfSense Packages Bug #6305: Quagga problems updating routes / mistakenly showing "kernel"-routes while they are not
- Jim Pingle wrote:
> Someone who can reproduce it reliably needs to get the details of how to reproduce it reported t... -
12:15 PM Bug #4418: IPsec mobile clients - bogus "p" appended to search domain
Also I am having the same problem in versãoo 2.3.2-RELEASE-p1. For some in the forum saw what worked the Place hum ...-
- This function used to replace /boot.conf, /boot/loader.conf and
/etc/ttys on every call. Depending of the moment a po... -
-
-
- We do not create /etc/ttys from scratch but we change it on every boot.
If original file is corrupted for some reason... -
- This function used to replace /boot.conf, /boot/loader.conf and
/etc/ttys on every call. Depending of the moment a po... -
-
-
- We do not create /etc/ttys from scratch but we change it on every boot.
If original file is corrupted for some reason... -
- This function used to replace /boot.conf, /boot/loader.conf and
/etc/ttys on every call. Depending of the moment a po... -
-
-
- We do not create /etc/ttys from scratch but we change it on every boot.
If original file is corrupted for some reason...
10/13/2016
-
- Phillip Davis wrote:
> As part of removing nanobsd support, it was noticed that dhcp6 leases were not being restored... -
- As part of removing nanobsd support, it was noticed that dhcp6 leases were not being restored on systems with use_mfs...
-
- Daryl Morse wrote:
> I'm running 2.3.3.a.20160815.2144 with PR 3102/1, 3102/2, 3103, 3105, 3106 and 3107, testing th... -
04:36 PM Bug #6099: igmpproxy does not recognize upstream interface
- I have the same issue like Dora Paule with the version: igmpproxy_20160905_1818.zip
There is no such problem with t... -
- Updating this issue based on 2.4 development snapshot.
The dhcp6 before RA feature has been working perfectly sinc... -
-
-
-
-
-
- 01:39 PM Revision 2329b5a8: DHCPV6 only check VIPs in range if range valid
- If the user has input invalid values into range from and to, then there
is no point checking any IPv6 VIPs to see if ... -
-
- Verify if addresses are valid IP address before convert them to make
numeric comparison.
While here, adjust indent.
... -
- Verify if addresses are valid IP address before convert them to make
numeric comparison.
While here, adjust indent.
... -
01:25 PM Revision ef30fa51: Replace underscore with hyphen in option names
- Thanks Jorge
(cherry picked from commit 30786a9d2486d88cb92cbb0ecb10586b39c32c65) -
- 01:24 PM Revision b4415260: Make unlink_if_exists return true/false
- This allows the caller to do a single "atomic" call to unlink_if_exists.
If it returns true, then they know that the ... -
-
-
- On dc61252ae the code used to restore dhcp6 leases when platform was
nanobsd was removed, but this code is supposed t... - 12:48 PM Revision a5562d72: Remove commented code
- (cherry picked from commit 0186b761e05d6f707ddc9cf1898d20ffb7ef9405)
- 12:48 PM Revision 40ce5d72: Bring up the wifi interface only after setting up all the other arguments. This prevents issues when using VAPs.
- (cherry picked from commit 6416317a239e082b7702957263a51b4052ae43b5)
-
-
- Applied in changeset commit:d02ee1387fdb159bfb7cb9495003f66545d97989.
-
- What appears to happen is that the wizard resets the range even if the existing range is valid. So if you have x.x.x....
- 02:22 AM Revision 3707ffc4: DHCPV6 only check VIPs in range if range valid
- If the user has input invalid values into range from and to, then there
is no point checking any IPv6 VIPs to see if ... -
- Thanks Jorge
- 01:31 AM Revision d96a39ba: Make unlink_if_exists return true/false
- This allows the caller to do a single "atomic" call to unlink_if_exists.
If it returns true, then they know that the ...
10/12/2016
- 08:38 PM Revision 0186b761: Remove commented code
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- Now that nanobsd is gone these functions are not necessary anymore.
Keep them around until all calls are cleaned up - 04:20 PM Revision 87fb4454: Allow Hyphens in DHCP NTP Server form validation
- Also removes the ability to have underscores `_` in ntp server
FQDNs.
Closes #6806
(cherry picked from commit c68db... -
-
- (cherry picked from commit 348fae16e4c4735afef619184fba76b97effd875)
-
-
-
-
- Jim Pingle wrote:
> On 2.3 we have a patch to alter the behavior of "route change" so that it adds a route if it's n... -
03:51 PM Revision b9f6e351: lowercasing and sprintf of setHelp
- (cherry picked from commit 705679339705657832422f5fdc336b5e39d48b79)
-
- (cherry picked from commit a309ffa5cc1e8682bb083f9288f73f43a2a9c282)
-
- 1. Rename "srcportadv" to "srcporttoggle" - not ideal to have 2 fields both labelled "advanced options". This present...
-
-
-
- The 2nd argument ($info) isn't used in that function, and doesn't seem to be used anywhere else in the codebase.
(che... -
-
- Also consolidate some unset commands.
(cherry picked from commit 32912ae833a016784cbb4813c45960cefc2d896b) -
- Break verbose option in two for showing files and/or constructed command. (--show_files, --show_command)
Don't save ... -
- 03:39 PM Revision 257120b9: Use tabs consistently
- (cherry picked from commit 553de3973dfdb0539a64510666976d523a21f2f9)
- 03:39 PM Revision e11a24f8: Re-enable executing the wifi mode command first. This fixes channel changing, which broke in d325e90818db2b22fc2562c38493769f217230f2.
- (cherry picked from commit 8318da5192905a400076d5539ae86afeae82ee03)
-
-
03:37 PM Revision 9fc8273a: Fixup ntpd IPv6 restrict clauses.
- This should eliminate the following errors from the ntpd log file when
using IPv6 or dual-stack networks:
"syntax err... -
- This should eliminate the following errors from the ntpd log file when
using IPv6 or dual-stack networks:
"syntax err... -
-
03:33 PM Revision 66ee91c2: add array index how value for authserver list
- (cherry picked from commit db0c1e142c98a6253204d69218557b91a8754337)
-
- 03:30 PM Revision 74dd2936: Only configure wireless MAC address if a spoofed MAC address is set
- (cherry picked from commit a6c4a66da2ee8b0d4d54480dd690700b8c16bb13)
-
- 03:22 PM Revision a3a89277: Improve gwlb.inc notification mechanisms
- 1) Unlink earlier to reduce the chances of any concurrency issues;
2) Translate and improve output of available notif... -
-
- All gone.
-
- Works
-
- Works great
-
- Appears to be working correctly on 2.3.3 and 2.4 snapshots.
-
- This seems to be OK now. The comp-noadapt change was confirmed to work on an affected system (remote client had no LZ...
-
- New options are being pushed correctly when selected.
-
-
- 2.4 doesn't support nanobsd anymore, convert all nanobsd installations to full install during upgrade from 2.3 to 2.4...
- 02:08 PM Revision 54596b88: Improve gwlb.inc notification mechanisms
- 1) Unlink earlier to reduce the chances of any concurrency issues;
2) Translate and improve output of available notif... -
11:44 AM Bug #6650: Option needed to disable HSTS
- Having same issue, all HTTP sites are also broken like the original example. Need option in pfsense to disable HSTS.
-
11:30 AM
Bug #6806 (Feedback): Form validation for DHCP NTP Servers does not allow hyphens
- Applied in changeset commit:c68dbfc7580180cd9d47bdbecaeeb6cf835fe210.
- 10:34 AM Revision e01e164c: Backport save_widget_settings with 3 arguments from RELENG_2_3
- Commit 6f1410582412fe771f51bd8b67bcbb952da97db6 introduced code relying on this
10/11/2016
-
11:19 PM Feature #4821: PPPoE WANs do not take full advantage of NIC driver queues for receiving traffic
- Travis Erdmann wrote:
> Now that FreeBSD 11 is out and PPPoE Gig internet is becoming more available, can we take an... -
09:11 PM Bug #6852: Commit 8f86722 breaks DHCPv6 leases status page
- Also see #6543
-
- Affected version 2.3.2 (bug introduced in 2.3.2)
-
- The commit in question changed the awk pattern used when getting DHCPv6 information from the lease file. The pattern ...
-
07:07 PM Bug #4669: QinQ virtual interfaces available for assignment where they shouldn't be
- The patch 1. is missing on 2.3.2-RELEASE-p1. Booting system with QinQ interfaces assigned will only trigger vlan assi...
-
-
-
-
-
-
- Just some feedback, it seems a bit redundant to show "pfSense" under System and Platform, would it not make more sens...
-
01:34 PM Bug #4820: DHCP Scope at setup
- Chris Buechler wrote:
> can't replicate any issues here. Change the LAN IP and DHCP scope at the console, and it imm... -
- I am not sure if this is related or not, all I know is on 2.4 the option does not work, and the only way I am able to...
-
- It's also possible you were hitting #6828 which needs to be solved first before other routing issues.
-
- Upon testing out one of the 2.4 snapshots a few weeks ago, I was unable to get network connectivity with a gateway th...
-
11:06 AM Bug #6340: fsck hangs boot in background, fails to produce any action, resulting in broken firewall
- Kill Bill wrote:
> @Derek: If you are willing to go back to <=2.2.2 for initial full install, you could try this: ht... -
- Applied in changeset commit:2002cf6636b2d29c066ee58511dce2baf5167b97.
-
- The output for @openvpn --show-ciphers@ changed which broke the GUI parsing of the list, leaving only "None" as an op...
-
08:50 AM Feature #6847: Register CN of OpenVPN clients in DNS Resolver
- PR here: https://github.com/pfsense/pfsense/pull/3183
-
01:32 AM Bug #3330: Load Balancer showing wrong Status when using aliases for the port
- Can confirm the bug still exists in pfsense 2.3.2-RELEASE-p1
-
12:40 AM Bug #5413: Reduce disruptions when changing DNS records from DHCP leases in Unbound
- BBcan177 . wrote:
> Some users have also reported issues with the Unbound Resolver and pfBlockerNG DNSBL. I am not a... -
- Patch Posted: https://forum.pfsense.org/index.php?topic=119467.0
10/10/2016
-
11:50 PM Bug #5413: Reduce disruptions when changing DNS records from DHCP leases in Unbound
- Some users have also reported issues with the Unbound Resolver and pfBlockerNG DNSBL. I am not able to reproduce, but...
-
- If the dev's won't / can't answer you, I will. Due to changes in 2.3 (I tested with 2.3.2p1), restarting of the Unbou...
-
-
-
-
- No more i386 on this branch. Reverting unnecessary change
This reverts commit 22558bc3011c10fc86c45b7ca795227bc9a4137c. -
-
- Jim Pingle wrote:
> Someone who can reproduce it reliably needs to get the details of how to reproduce it reported t... -
-
06:59 PM Feature #4821: PPPoE WANs do not take full advantage of NIC driver queues for receiving traffic
- Now that FreeBSD 11 is out and PPPoE Gig internet is becoming more available, can we take another look at this?
-
-
-
03:27 PM Bug #6823: No connectivity after changing link state to UP
- Patch for review here:
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=213283 -
12:02 PM Bug #6848 (Resolved): Do not create an IPv4/6 gateway for an interface without according IPv4/6 address
- This issue has been fixed for GIF/GRE tunnels some time ago but wasn't fixed other kind of interfaces.
Once, I had... -
12:01 PM Bug #6340: fsck hangs boot in background, fails to produce any action, resulting in broken firewall
- @Derek: If you are willing to go back to <=2.2.2 for initial full install, you could try this: https://forum.pfsense....
-
- Thank you for your quick reply. I'll just need to wait to see what comes of all of this.
-
- There is an error in the script. @case "$1" in@ should read @case "$OP" in@.
-
- Use case: Serial port servers deployed in the field connect to the office via OpenVPN. In order to collect the data, ...
-
09:36 AM Feature #6832: [PATCH] Add the USB ID for the Sierra MC7430
- stable/11:
https://github.com/freebsd/freebsd/commit/da55bad8726390191aad745ef726a492885d7422
stable/10 (just i... - 08:29 AM Revision f84c1e1e: [theme] Compact-RED: fix `sortable` table fonts
10/09/2016
-
- On my Dashboard system reads
"System Super Micro C2758"
but under CPU (and the correct info)
"CPU Type Int... - 07:48 PM Revision 6416317a: Bring up the wifi interface only after setting up all the other arguments. This prevents issues when using VAPs.
-
04:50 PM Feature #4372: dnscrypt support
- Chris Buechler wrote:
> It'd be nice to have dnscrypt support built-in so people don't need hacks like
> https://do... -
03:33 PM
Feature #5616: Incorrect Wireless Channel
- I ran into the same issue when using an ath interface and virtual interfaces in hostap mode (VAPs). I have a similar ...
-
-
-
-
09:05 AM Feature #6845 (New): DHCP / DHCPv6 WAN client status page
- Would be nice to have a status page that provides all the details of client leases and PDs.
10/08/2016
-
- I think it fixed in 0.50 .
https://github.com/pfsense/FreeBSD-ports/commit/36e0556b6b19a8a524a4ba3a7c55f87e9a6bd6a... -
- Imho a 'feature request' indeed. The support for 'fixed' lists of ports and ip's is ok for easy configuration with th...
- 05:36 PM Revision e10d25b4: Added support for CloudFlares Proxy.
- Included a checkbox to enable and disable this feature when CloudeFlare
type is selected.
Included proxied variable i... -
- Derek, I cannot see any fix until the installer brings back the possibility to install on ZFS, and/or use a time-prov...
-
08:58 AM pfSense Packages Feature #6844 (Closed): Web configuration for quagga ospf6d
- The quagga package includes the ospf6d binary, but there is no way to configure it via the admin GUI
-
02:45 AM Bug #6843 (Not a Bug): Version inconsistency after updating to 2.3.2_1
- Looking at the dashboard view It doesn't look like I've upgraded to 2.3.2_1. Update page says that I have. See attach...
10/07/2016
-
-
-
- 07:06 PM Revision 0a1daa73: Fix typo: The input field is named source_hash_key
- (cherry picked from commit 870b9bc11b993ce8122b448083d29a04bcb30151)
-
- 8be135cd114fbc9294ec9dafed2125d0e553956c (February, 2013).
(cherry picked from commit 580bef1ee3052437487553fcc5dc84... - 07:05 PM Revision b65bfb62: Spelling mistake "system_gateways.php"
- Fix spelling mistake in "system_gateways.php"
(cherry picked from commit 47180823dc0560801085a227abf512e265363b16) -
-
- Kill Bill,
We have been effected by this issue as we have boxes all around America running that are bricking at r... -
-
03:45 PM
Feature #6842: Package Manager progress bar should indicate overall progress
- To provide an "overall" progress would require that we know the exact size of everything that has to be downloaded ah...
-
03:06 PM Feature #6842 (New): Package Manager progress bar should indicate overall progress
- When installing a package with dependencies, and particularly when upgrading the base system made up of dozens of pac...
-
01:36 PM Bug #6557: nanobsd upgrades may fail from lacking resolv.conf
- Sorry, but it seems not to be solved. I just upgraded from 2.3.2 to 2.3.2-p1 (NanoBSD) and the procedure still hangs ...
-
- Another place this would be handy is when configuring server options in DCHPv6 and RAs.
-
- Duplicate of #6838 (which has a workaround on it)
-
- Somehow I completely missed that ticket when looking into this. I'll close the older one out since this one has a via...
-
- Yeah, filed this as #6810, please close that one as duplicate.
-
- This didn't make it into 2.3.2_p1 right? Just checking. FWIW I have been running a couple of patched systems with t...
-
05:50 AM pfSense Packages Bug #4756: OpenVPN Client Export fails when using "real" certificate
- A scenario not so bizarre:
* Company has an internal PKI that they use to issue certificates for workers (and other ... -
05:31 AM Feature #6841 (Resolved): reduce numeric precision in Gateways Widget
- Currently the v2.3.x Gateways Widget is displaying 3 digits after the decimal point for the gateway RTT & RTTsd value...
-
02:04 AM Feature #3506: Firewall:Aliases - Sort/Move Function
- +1 for me too. We have aliases with more than 50 hosts and it's a nightmare to find what you need. Same thing goes f...
10/06/2016
-
-
-
-
-
-
- 8be135cd114fbc9294ec9dafed2125d0e553956c (February, 2013).
(cherry picked from commit 580bef1ee3052437487553fcc5dc84... -
-
- (cherry picked from commit 9a2d3fe1bf9bdad73fbffca44d5c1f02aa9825ae)
-
- 05:49 PM Revision b5e73640: Spelling mistake "system_gateways.php"
- Fix spelling mistake in "system_gateways.php"
(cherry picked from commit 47180823dc0560801085a227abf512e265363b16) -
-
-
- >Phillip Davis wrote:
> You can create your own Private Networks alias, and then make an ordinary block rule on WAN ... -
10/05/2016
-
10:00 PM Bug #6840 (Resolved): Upgrade ISC dhcpd to 4.3.5 to address missing hostname workaround
- ISC DHCP Server 4.3.0 introduced a bug which caused hostnames to go missing in pfSense 2.3.x. This was addressed thro...
-
- You can create your own Private Networks alias, and then make an ordinary block rule on WAN to block that. Then you c...
-
- The firewall log is being filled with thousands entries from blocked packets: WAN / 10.197.248.27 / 224.0.0.1 / IGMP....
-
-
- We do not ship with an /etc/printcap file but it appears that bsnmpd does not like that fact. When probed in various ...
-
06:19 AM Feature #2358: NAT64 support
- UPVOTE
My new ISP provides native IPv6 and I would prefere not to have configuring my hole network with IPv4 if I co...
10/04/2016
-
02:51 PM
Bug #6835 (Closed): firewall_nat_out_edit.php Translation section hidden
-
- Looks good here. Thanks.
-
- It depends on whether or not one or both of your WANs is a PPP type WAN. Default gateway switching is still an experi...
-
02:09 PM Bug #6837 (Rejected): Gateway Failover does not failback
- I'm using default gateway failover, not gateway groups.
When my primary wan connection goes down, it's properly de... -
11:05 AM
Bug #5999: IPv6 IP Alias prevents Track Interface from working with DHCPv6 and RA
- Any update on this? I would really like to be able to use ULA and GUA IPv6 addresses at the same time on my network,...
-
11:04 AM
Bug #5413: Reduce disruptions when changing DNS records from DHCP leases in Unbound
- Is there any update on when this might get worked on? It has been almost a year now.
-
08:43 AM Feature #6800: Feature request: Logon to remember the URL that initiated the logon sequence and return to it
- Jim Pingle wrote:
> We used to do that, but ultimately decided against it as it was a potential security issue. We m... -
05:34 AM Bug #6263: Encryption options for every P2 on a given P1 are written to each P2 individually inside ipsec.conf with multiple P2 entries + split conn entries
- might be always been that way but this is very painful... all other brand do support this properly.
I just start usi...
10/03/2016
-
- 07:40 PM Revision ee9a44e7: Fix typo: The input field is named source_hash_key
- (cherry picked from commit 870b9bc11b993ce8122b448083d29a04bcb30151)
- 07:38 PM Revision 00ae2254: Merge pull request #3174 from NewEraCracker/nat-out-fix-typo
- 06:38 PM Revision 870b9bc1: Fix typo: The input field is named source_hash_key
- 04:17 PM Revision 12190b7c: Revise merge error
- 03:59 PM Revision 0300c960: Applied PR #3173 to correct merge error
- 01:33 PM Revision 5c4c1fe5: Fixed #6835 by revising Javascript show/hide
- (cherry picked from commit 850c3d8b9352e7467beca8502c24ca8d4fbbbd29)
- 01:32 PM Revision 25383c9a: Fixed #6835 by revising Javascript show/hide
- (cherry picked from commit 850c3d8b9352e7467beca8502c24ca8d4fbbbd29)
- 01:29 PM Revision 850c3d8b: Fixed #6835 by revising Javascript show/hide
-
08:40 AM
Bug #6835: firewall_nat_out_edit.php Translation section hidden
- Applied in changeset commit:850c3d8b9352e7467beca8502c24ca8d4fbbbd29.
-
08:35 AM
Bug #6835 (Feedback): firewall_nat_out_edit.php Translation section hidden
- Revised Javascript to correct element show/hide
-
- I 2nd this. Would be a nice addition.
10/02/2016
- 09:38 PM Revision a6c4a66d: Only configure wireless MAC address if a spoofed MAC address is set
-
04:32 PM
Bug #6835 (Assigned): firewall_nat_out_edit.php Translation section hidden
-
- Translation section of Outbound NAT edit page is apparently hidden by CSS. Reported present in latest 2.3.3 and 2.4.0...
-
- In case you planned on asking whether I tried to run fsck manually, then yeah, I did on one local box - and the outco...
-
- And here we go again: I'm seeing this on 3 boxes already:...
- 02:29 PM Revision 553de397: Use tabs consistently
-
- Investigated mostly here
https://forum.pfsense.org/index.php?topic=118789.0
Looks like /status_queues.php code is ... -
- Got an update to this, Jim.
I just noticed that although I've configured my router (config->settings) to store 100... -
- I just hit a problem with my test version of pfSense, I'm not sure I can account for everything I saw, but I have a g...
-
- Jim Pingle wrote:
> Out of curiosity, have you tried this on a recent 2.3.3 snapshot? Or on 2.4?
Yeah all the 2.3...
10/01/2016
-
- This should eliminate the following errors from the ntpd log file when
using IPv6 or dual-stack networks:
"syntax err... -
01:31 PM Bug #4326: Limiters on firewall rules where NAT applies drop all traffic
- I am interested to know if limiters will ever work again?
It's annoying that they still show in the GUI and not work... - 10:45 AM Revision 8318da51: Re-enable executing the wifi mode command first. This fixes channel changing, which broke in d325e90818db2b22fc2562c38493769f217230f2.
-
- Also consolidate some unset commands.
-
06:52 AM
Bug #6833 (Resolved): Wifi channel change applies only on reboot
- Whenever I change the channel on my 2.4 GHz AP the changes only apply on reboot. This broke in https://github.com/pfs...
09/30/2016
-
11:41 AM Bug #6830: Chelsio T4/T5 CXGBE drivers not loaded as ALTq capable in the PfSense UI
- Jim Pingle wrote:
> Can't target 2.3.2_1 as it's already been built.
>
> There was a deliberate reason this was l... -
- Break verbose option in two for showing files and/or constructed command. (--show_files, --show_command)
Don't save ... -
- Can you please cherry-pick commit 0c22163daba4a8ecc287e6b2f7060383c5e1dcb1 to add support for the Sierra MC7430?
h...
09/29/2016
-
- Can't target 2.3.2_1 as it's already been built.
There was a deliberate reason this was left out but I'll have to ... -
- cxgbe drivers support ALTq. cxl interface labels should supoort it:
https://www.freebsd.org/cgi/man.cgi?query=altq&a... -
- Most likely cause is an improper outbound NAT rule that's matching traffic from the firewall itself. Please start a f...
-
04:54 PM Bug #6829 (Rejected): Possible tftp-proxy bug?
- Seems we are running into an issue with tftp-proxy not working again (I want to say it did work briefly after the lat...
-
07:30 PM
pfSense Packages
Feature #6831 (New): Snort does not support aliases containing FQDN
- Snort does not support aliases containing FQDN. The pass list in snort's settings has a list which points to a syste...
-
12:58 PM Bug #6658: DHCP Relay not working on 2.3.2
- Yes I did: https://redmine.pfsense.org/issues/6658#note-4
-
- Not enough info there. Try again on 2.3.2, post on the forum, try to narrow it down. Unlikely to be the same bug, but...
-
12:06 PM Bug #6296: Interface dies with IPsec and SMP
- I am seeing issued similar or the same as posted in this thread with 2.3.2 (2.3.1 was a typo), SMP, and IPsec. CPU r...
-
- On 2.3 we have a patch to alter the behavior of "route change" so that it adds a route if it's not already in the tab...
-
10:23 AM Feature #6827 (Closed): Add Proxy Mobile IPv6 (PMIPv6)
- It would be great to integrate network-based mobility to pfsense
PMIPv6 is IETF standard: RFC 5213 and RFC 5844
h... -
- * Install pfsense 2.3.2. WAN and LAN interfaces. No global IPv6 address assigned to WAN interface (but see NOTE below...
-
- Please start a forum on the thread for discussion until a definite bug is identified. It's more likely there is some ...
-
08:51 AM Bug #6825: LDAP RFC2307 bug in 2.3.2
- Correction on the query...
ldapsearch -h prodipa-mtl03 -b "cn=groups,cn=compat,dc=grenadine,dc=juicy" -x '(&(cn=gr... -
- Hello,
Seems there is still a bug with the RFC2307 standard in 2.3.2's ldap config.
I setup the LDAP configura... -
09/28/2016
- 11:38 PM Revision fbb78d6b: Typo staic
-
- 11:30 PM Revision 44d3f26d: Wording of incomplete ARP description
- I think "ARP request" is what is meant here.
-
- They had the same issue in OPNsense, so they created a FreeBSD port of the stock Intel driver version 7.6.2, which wo...
-
- Thanks Jim! I'll report to FreeBSD. It's something that started happening a few months ago so I think one of the late...
-
- Sounds like a problem that used to happen on older em chips, if you run "@ifconfig em0 down; ifconfig em0 up@" for ea...
-
- Hi guys,
I have pfSense 2.3.2 installed on a Soekris net6501-50 board. I recently noticed that when the link of t... -
- Shows incomplete ARP entries, which were skipped before (for no reason I could find in the commit history)
Shows a st... -
03:31 PM Bug #6824: Tab diagnostics does not recognize disk volume
- Jim Pingle wrote:
> It will not hurt anything. SMART is only there for a certain specific kind of disk test, not a t... -
- It will not hurt anything. SMART is only there for a certain specific kind of disk test, not a task that is generally...
-
- Jim Pingle wrote:
> SMART only supports certain specific controllers, and "aac" does not appear to be among them.
... -
- SMART only supports certain specific controllers, and "aac" does not appear to be among them.
-
- does this can bring some additional damage to the production system?
-
- Dears,
RAID1 volume is recognized in the OS layer (screen attached) but is not recognized in the Diagnostic tab. W... -
-
- Applied in changeset commit:9e3cb876a600087c8fb2fa0af7907b986e304c48.
-
- The status of ARP entries is important, but the status is not shown in the GUI. Additionally, incomplete ARP entries ...
-
- Applied in changeset commit:632e5f504fed668c328eea3c0af702d1b4998289.
-
- When saving a DHCP static mapping with "ARP Table Static Entry" checked, the static ARP entry is not applied until th...
-
- At least on my box, I've narrowed it down to the call to dhclient at source:src/etc/inc/interfaces.inc#L4281
Only ... -
-
- I have seen this as well, though I haven't yet attempted to narrow it down.
-
- DHCP server responds within just a few milliseconds, but boot up hangs on configure WAN interface for 20+ seconds. T...
-
- Also: Target for 2.4 is only a couple months out, not a year.
-
- Reverting that patch certainly does seem like a good idea given the responses.
Out of curiosity, have you tried th... -
- Target version: 2.4.0? Not exactly sure people are keen on waiting for a year to get something that was working to wo...
-
- Now that 2.4 dev builds have started, is there any reason to expect that this bug might get some lovin' in the next r...
-
- @david: This functionality has been done at least 3 times by pfSense user (marcelloc), the code never got merged, so ...
09/27/2016
-
-
- 8be135cd114fbc9294ec9dafed2125d0e553956c (February, 2013).
-
-
-
-
-
-
-
-
-
09:17 AM pfSense Packages Bug #6818: WAN traffic graph displays inverted bandwidth columns
- Phillip Davis wrote:
> And that image is correct for the current traffic graph system (2.3.2). For example, the 3rd ... -
- Jim Pingle wrote:
> Check again on a 2.3.3 or 2.4 snapshot those graphs have been replaced.
Thank you. It is a cr... -
- And that image is correct for the current traffic graph system (2.3.2). For example, the 3rd host down in the table i...
-
- Check again on a 2.3.3 or 2.4 snapshot those graphs have been replaced.
-
- Open Traffic Graph and select WAN interface.
On the graph, BW IN and OUT values are correct. In the Bandwidth In / B... -
-
- Duplicate of #2774
-
- Updated subject to match error message/condition.
-
- Duplicate of #6762
-
- After upgrade from 2.2.6 to 2.3.2, I'm not more able to edit a rule using Google Chrome. When I press save, the addre...
-
- As a follow up - it appears that after openvpn_resync_all(), nothing else below that function call could run from the...
-
02:20 AM Feature #2774: Extend DHCP Pools code to allow using different subnets
- The first time I used pfsense I was surprised to see that it can do dhcp relay but not the other side of the coin tha...
09/26/2016
-
I prefer keeping 'unfiltered vlans' traffic being routed by a l3 switch that is connected to pfsense with a /29 or ...-
06:29 PM pfSense Packages Bug #6814: pfBlockerNG cannot define table pfB_Europe_v6 after pfsense upgrade to 2.3.2-RELEASE (amd64)
- Thank you @BBcan177, my pfsense Firewall Maximum Table Entries were set on default (20mb) I increased the entries to...
-
-
-
- 06:14 PM Revision 49db5ba1: Obscured password field in system_authservers.php bind section
- Fixed #6759
(cherry picked from commit 1c1f08f92e8841f7282280caeed7613edd810453) -
- See comment in the PR
-
- Would be nice to have a status or diagnostics page for radvd
-
-
- Fixed, thanks.
-
- A fix was committed in FreeBSD and now imported to our repo. Next round of snapshots should be fixed
https://svnwe... -
- Patch from FreeBSD ticket 207598 was imported to pfSense/FreeBSD-src. Today's 2.3.3-DEVELOPMENT snapshot already has ...
-
- Duplicate of #6762
-
- Keep getting "Please match the requested format" when trying to enter my addresses.
09/25/2016
-
- Increase the pfSense Advanced / Firewall-NAT / Firewall Maximum Table Entries to 10M entries...
-
- You either don't have enough RAM, or you don't have large-enough limit set for tables. Either way, nothing that could...
-
- Pfsense version:
2.3.2-RELEASE (amd64)
built on Tue Jul 19 12:44:43 CDT 2016
FreeBSD 10.3-RELEASE-p5
Package
p... -
-
- The 2nd argument ($info) isn't used in that function, and doesn't seem to be used anywhere else in the codebase.
09/24/2016
-
-
-
-
- All the crashes here seem to be OpenVPN related.
Calling openvpn_resync_all() causes php-cgi to crash on boot, whi... -
- Pull it :|
-
- Setup a new VM as a clean test. Works on a snap from the 22nd, same one updated to the 23rd breaks in various ways. T...
-
- Also, OpenVPN is completely no-op, producing just segfaults.
https://forum.pfsense.org/index.php?topic=118709.0 -
- Err, "only via IPv4". Whatever.
-
- https://forum.pfsense.org/index.php?topic=118714.0
No default routes configured, I can SSH in remotely only via IP... -
- Phillip Davis wrote:
> Of course, anyone can upgrade to the 2.3.3-DEVELOPMENT snapshots. Actually they are really go... -
08:43 AM
Bug #6812 (Not a Bug): IPsec filterdns crash
- This appears intermittently in the system logs:
Sep 24 00:27:13 php-fpm 73703 /rc.newipsecdns: The command '/us...
Also available in: Atom