Activity
From 10/31/2016 to 11/29/2016
11/29/2016
-
07:34 PM pfSense Packages Bug #6763: Squid ClamAv wrong redirect URL
- I'm seeing the same redirect behavior. I can confirm that changing the GUI does update the squidclamav.conf file as i...
-
07:18 PM Revision 75e80f16: If there are input errors when creating a user certificate from the user manager, stop and show the errors rather than appearing to fail silently. Fixes #6953
-
-
-
06:45 PM Bug #6588: PHP suhosin max value length prevents Quagga OSPF from storing a very large zebra.conf
- Yet another Chris left so the bug went into an unassigned state.
JimP please verify, and assign back to me if we c... -
-
-
- 04:57 PM Revision 04fe6f00: Update setup_wizard.xml
- (cherry picked from commit b0b2af901f352dbbaad0b09d06fe7adb105ff7a4)
- 04:57 PM Revision 04d7836b: LAN IP validation logic
- (cherry picked from commit 6a365a4c80aced41ec87ad93ed2c986d9935a4ea)
- 04:57 PM Revision d1a4cb8d: Update setup_wizard.xml
- (cherry picked from commit 3ad0f9b63f690f77cf8c4d398b521eba6909f0bc)
- 04:57 PM Revision ab5f464a: update conditional re:LAN dhcp
- (cherry picked from commit 0eb2512f93c7e187511ea258948715c2e230e98f)
- 04:57 PM Revision bdffccfd: update LAN regex for case insensitivity
- (cherry picked from commit 32980f321e854bf008efa04ee9187553231b6423)
-
04:56 PM Revision 31ec01c3: Merge pull request #3219 from NonSecwitter/patch-2
- 04:53 PM Revision 4a77c4ea: - added support for duiadns.net ipv4 and ipv6
- (cherry picked from commit 19b7263e859243adfcf6588533cb47b4c768765e)
-
- 04:40 PM Revision 6cade780: IPv6 address can contain a dot
- When requiring the entry of an IPv6 address, the regex pattern should still allow a dot, so that an IPv6 address can ...
-
-
04:37 PM Revision 6e623580: Captive portal: use "Admin Reset" as termination cause when disconnecting a user from admin UI
- When a user is disconnected by the administrator using the pfSense captive portal status page or widget set the value...
-
- 04:33 PM Revision 7b861bce: clarified input format hint for expiration date
- (cherry picked from commit 98b87cfafe8a890787ca5d22a1089678b9b250ac)
-
-
- 02:47 PM Revision 98b87cfa: clarified input format hint for expiration date
-
- When a user is disconnected by the administrator using the pfSense captive portal status page or widget set the value...
-
-
- The cert case is much simpler since there is a field for that directly. All the code has to check for is that the cer...
-
01:13 PM Bug #6947: Deleting an external CA wipes certificates in use
- Jim Pingle wrote:
> That would require some more work to detect if it's the GUI cert's issuer.
Hmmm well, that al... -
- That would require some more work to detect if it's the GUI cert's issuer, and the GUI cert could be self-signed, sin...
-
- Looks pretty good. CA in use detection works (tested with OpenVPN server, IPsec and LDAP), plus can no longer be dele...
-
- Applied in changeset commit:80080a0c8b5949b1af97d1d49b4cc834d06875cf.
-
- I was unable to reproduce the problem exactly as stated, but I added validation code to prevent incorrect keys from b...
-
- Applied in changeset commit:ab63443a9184f42f6a47907e5f2d3fbab6ff043e.
-
- Testing on 2.4 won't be reliable until #6937 is fixed.
-
11:15 AM Bug #4479: Firewall rules won't match GRE interface after applying IPSEC transport encryption on GRE tunnel
- It appears to be worse than before now too.... ICMP doesn't work across the tunnel now either.
-
- Jorge Albarenque wrote:
> I can confirm this still occurs on 2.3.2. Probably worth checking on 2.4 since Chris had m... -
04:47 AM Bug #4479: Firewall rules won't match GRE interface after applying IPSEC transport encryption on GRE tunnel
- I can confirm this still occurs on 2.3.2. Probably worth checking on 2.4 since Chris had mentioned it seemed to be re...
-
- It's still a problem on 2.3 and 2.4...
-
- Applied in changeset commit:7a9c12b3d6e01e11ec0af3a6690a5c3de2fbbd2e.
-
- Duplicate of #2800 which is fixed on 2.4 already.
-
09:22 AM Bug #6973 (Duplicate): OpenVPN fails to verify client certificate when using intermediate CAs to sign server/user certs
- I am using pfSense and OpenVPN with a few intermediate CAs to seperate VPN servers by project:...
-
- It's working well now.
I updated the wiki and book to follow the new requirement, and made a slight adjustment to ... -
- An example:
!https://s14.postimg.org/7fgw3jrxd/aliases_delete_wth.png! -
- I randomly keep getting a nonsensical "Are you sure you wish to?" prompt when deleting networks from network-type al...
11/28/2016
-
- Well, apparently not a package bug.
-
05:31 PM pfSense Packages Bug #6968: Snort VRT Rules Fail to automatically update SSL read error
- Kill Bill wrote:
> You have pfBNG installed and Amazon S3 blocked?
Nope only package I have installed is snort.
... -
- You have pfBNG installed and Amazon S3 blocked?
-
- pfsense version: 2.3.2-RELEASE-p1 (amd64)
Snort Version: 3.2.9.1_14
Automatic update fails with following errors... -
09:14 PM pfSense Packages Bug #6971 (Closed): Interfaces.php: "Reserved Networks" checkboxes not shown
- Using Windows 10 snap window function to resize Firefox to half the display size causes the checkboxes on Reserve Net...
-
- yet another case where we lost track of the bug because Chris just removed himself when he left.
assigned back to ... -
- i think this is a freebsd bug, might be fixed.
-
- please validate and hand back.
-
- they moved because it's better.
but they have a really large environment.
we've known about kea for a while. (... -
- JimP, please verify, and if not valid, close.
If valid, please hand-off to bbcan117 -
- It's already in 2.3.3 snapshots
-
07:57 PM Bug #6970 (Rejected): Update pfSense 2.3 to Unbound 1.5.10
- I noticed the Unbound version pfSense is shipping is a bit old at 1.5.9. The latest release is 1.5.10. The .10 releas...
-
-
-
-
-
-
- Adding a note to clarify: It is OK for "IP address" to be blank/empty if "ARP Table Static Entry" is unchecked.
-
11:40 AM Bug #6969 (Resolved): Insufficient error checking on static ARP entries
- When creating a static DHCP lease entry the GUI input checking does not prevent checking 'static ARP' without enterin...
-
- Applied in changeset commit:b35fc4331ac78f9459db00be04dc6b077f168593.
-
08:43 AM Bug #6223: IPsec + OpenBGPD fails with "PF_KEY socket: No buffer space available"
- To all having this problem - while there is no fix yet, I have put together a workaround I have been using successful...
-
08:08 AM Bug #6966: Display bug in Status / IPsec / Overview
- Jim Pingle wrote:
> That page outputs what is given to it by strongSwan. Check the output of "ipsec statusall" from ... -
- That page outputs what is given to it by strongSwan. Check the output of "ipsec statusall" from the console when it's...
-
- I have to IPsec tunnels configured. If one goes up, it is reported as both connected and disconnected in two separate...
-
07:41 AM Bug #6967 (Resolved): DH Groups 22, 23, 24 missing from Phase 2 selection GUI
- When configuring IPSec you can select DH Groups 22-24 for Phase 1, but for Phase 2 they are missing from the GUI.
...
11/27/2016
-
- And as for "the GUI does nothing":
!https://s15.postimg.org/fk5zywtsr/clamav_redirect_empty.png!... -
- The default URL is set to the pfSense GUI URL on package install. Simply because that's the only sensible default. Th...
-
02:40 PM pfSense Packages Bug #6763: Squid ClamAv wrong redirect URL
- See: https://forum.pfsense.org/index.php?topic=115323.0
-
- Kill Bill wrote:
> Richard Eberhard wrote:
> > I also tried adding a redirect command in the custom squid config: n... -
-
- No bug here, let alone "very high" severity, can be closed. This is configurable in the GUI as shown above.
-
06:28 PM Bug #6223: IPsec + OpenBGPD fails with "PF_KEY socket: No buffer space available"
- Has anyone attempted this with 2.4 beta? I've already burned my downtime allowance testing with 2.3.x versions and va...
-
- Yes, set CN property surprisingly sets CN property. Sigh. Because that's exactly the purpose of the feature. Set != s...
-
- Kill Bill wrote:
> Sorry, but browser thinking a certificate is valid when it's not is NOT a Squid issue. Stop doing... -
-
- Sorry, but browser thinking a certificate is valid when it's not is NOT a Squid issue. Stop doing HTTPS MITM if you h...
-
-
- Ale Feltes wrote:
> I can't see issue's status control. I can only add comments.
That was aimed @pfSense guys. :) -
07:06 AM pfSense Packages Bug #5701: Sarg does not delete cron entry
- I can't see issue's status control. I can only add comments.
-
- Package no longer exists in 2.3+, use lightsquid.
Please, close.
-
-
- Package gone, please close.
-
-
- This already works with Avahi as noted above. Please, close this.
-
-
- Cannot be reproduced plus concerns obsolete 2.2.x PBI stuff.
Please, close. -
-
- Package no longer exists in 2.3+, please close.
-
-
- Been already done, can be closed.
https://github.com/pfsense/FreeBSD-ports/commits/devel/sysutils/pfSense-pkg-apcupsd -
-
- Darkstat does not support HTTPS. Cannot be fixed in the package. The issue is HSTS headers set by pfSense nginx. Best...
-
-
- Upstream bug tracker for Squid is at http://bugs.squid-cache.org/describecomponents.cgi?product=Squid - the pfSense p...
-
-
- 2.2.x is dead, plus this would not be a Squid package bug at all. Please, close this.
-
-
- No bug here, can be closed.
-
- It'd seriously help to have a checkbox that'd simply _add_ whatever custom alias(es) to the default passlist, instead...
-
- This is misfiled under Packages product, any changes here would need to be done in pfSense core.
11/26/2016
-
- Well, this still does not work properly at least with bzip2, because:...
- 04:19 PM Revision b0b2af90: Update setup_wizard.xml
-
- There's already #6023 for netmap + shaping.
-
02:12 PM Bug #5649: bce0: Discard frame w/o leading ethernet header (len 0 pkt len 0)
- I believe this issue can now be closed.
After using pci-stub on the Linux host for the two NIC's in question, whic... -
- The policy always gets assigned to the first instance (normally probably WAN) when you either
- use the Import butto... - 10:41 AM Revision b8678b63: IPv6 address can contain a dot
- When requiring the entry of an IPv6 address, the regex pattern should still allow a dot, so that an IPv6 address can ...
-
- https://github.com/pfsense/FreeBSD-ports/pull/220
-
- This got broken again. Together with some other cosmetics, this is fixed by https://github.com/pfsense/FreeBSD-ports/...
11/25/2016
-
10:27 PM Bug #6962: GUI allows selecting missing diffe-helman Paremeters for OpenVPN
- My vote would be either to grey out or remove the missing parameters from the OpenVPN dropdown, or to kick off a back...
-
- The GUI should probably grey out or otherwise note the selections without available files. Or maybe check for @/etc/d...
- 09:04 PM Revision 19b7263e: - added support for duiadns.net ipv4 and ipv6
-
-
-
-
05:09 PM Revision 6be782ed: increase webgui usability when the remote ldap server isn't available
- (cherry picked from commit b77a63948b4bd54f3d2e6e9d3822588105fb5741)
-
-
- (cherry picked from commit 339279415ced4aaaafb96fc14a334a172b8db49f)
-
-
05:05 PM Revision 9e2fa369: Improved error message to explicitly state allowable characters
- Related to Bug #6432.
(cherry picked from commit 3b55b54e9c76998a2b0e28897a0be79d5cf0cb8f) -
- 05:01 PM Revision f968d06d: DHCPv6 ddnsdomainprimary must currently be IPv4
- This field is currently validated to allow only an IPv4 address to be entered, so it may as well be consistent client...
-
- 04:59 PM Revision 19509df3: services_dhcp_edit add extra IPv4 validation
- a) Validate that ipaddr must be IPv4 (note if you enter an IPv6 address, it will fail other later tests of being in t...
-
- 04:48 PM Revision e9544016: Specify the IP address family in interfaces.php
- Where it is known what sort of IP address is required, we can specify it in the call to Form_IpAddress. That will mak...
-
- 04:47 PM Revision 57808367: Keep the rule type selection after input errors on firewall rule
- If the user:
a) Edit a firewall rule
b) Select "single host or alias"
c) Enter an invalid IP address that is not an a... -
-
04:45 PM Revision fbcdf576: add All-Inkl to services.class
- (cherry picked from commit 360f3a9011d143944fcd8e5e6b69fced2f9baaf7)
-
- (cherry picked from commit 575b1dcf0bdb28c431fca420d27bdedf579ec9c4)
-
-
- I pushed a fix as stated. Works fine with and without key-based auth. Needs more testing once it hits snaps.
-
- The ssh authentication "keyboard-interactive" method fails on 2.3.2 and 2.4
This is due to the use of @UsePAM no@ ... -
- Duplicate of #6886
11/24/2016
-
- Uhm... generating these "on demand" is a horrible idea. Should be either pre-shipped or user told to do the job. User...
-
- When trying to use a 3072-bit Diffie-Hellman parameter with the OpenVPN server, the following error is logged and the...
-
-
-
- Kinda difficult to come with "pfSense native firewall"-like GUI, considering there's no pattern about what's going to...
-
- See https://github.com/pfsense/FreeBSD-ports/pull/218
-
09:31 AM Feature #6961 (Duplicate): IPv4/IPv6 Dual-Stack IPSEC mobile vpn
- It would be nice to have possibility to create Phase1 IPSec for Mobile Clients - for both IPv4 and IPv6.
Currently... -
07:51 AM Feature #6960: Introduce Kea DHCP as an alternative DHCP server for IPv4 and IPv6
- It looks like Facebook migrated to Kea DHCP. Should be for a good reason [[https://code.facebook.com/posts/8459090588...
-
06:51 AM Feature #6960 (Resolved): Introduce Kea DHCP as an alternative DHCP server for IPv4 and IPv6
- I think it would be a good idea to at least take a look at kea dhcp by ISC. It seems to be a much better solution for...
-
-
- Already fixed by https://github.com/pfsense/FreeBSD-ports/commit/5f79e53dcae89bb185279ba2164a99891bb70dfd
-
- Done
-
03:24 AM Bug #6762: "Please match the requested format" error in Chrome when editing certain form fields
- I'm still having this issue.
Norwegian settings in Chromve version 55.0.2883.59
I get the error when trying to ad...
11/23/2016
- 06:47 PM Revision 581aa622: Added addrtolower() to interface pages
- 06:47 PM Revision 5af93827: Added addrtolower() to interface pages
-
-
02:35 PM Bug #6850: FreeBSD 11.0 Route Syntax Change For Non-Local Gateway
- After going into System -> Routing -> Gateways, clicking edit on the current gateway outside the subnet, don't even h...
-
-
- When booting the 2.4 install media, the first screen of the installer offers a "Live CD" choice that is confusing to ...
-
-
12:51 PM
Bug #6958 (Resolved): services_dhcp_relay.php: Needs to be converted to more recent rowhelper standard
- Page still uses the deprecated setIsRepeated() method on the group. We no longer do that.
-
12:18 PM Bug #6957 (Closed): CARP arp reply with wrong src mac
- The problem is same as https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=141023
I find a patch on pfsense/FreeBSD-sr... -
12:01 PM Feature #6956 (New): Allow more control over concurrent logins
- Currently there is a checkbox that allows concurrent logins, or not. I'd like to be able to replace that binary check...
-
- My interfaces：LAN, WAN, WAN2
1、I add IP Alias VIP 155.155.155.155 on WAN2, it's ok. Get the uniqid: 5831b1cbbbdcd
... -
- The new installer has a number of useful options but there is no choice that replicates the "Quick/Easy Install" opti...
-
- After discussed it, we decided to let user create wireless clone interface before assign it and remove any special tr...
-
- It works on the latest CE snapshot from overnight, but there is one regression from the previous behavior. At the mom...
-
- Kill Bill wrote:
> I guess you produced a typo in the latest commit.
>
> [...]
>
> https://github.com/pfsense/... -
- Steps to reproduce:
* have existing internal CA
* import external CA (in my case, signed by the internal CA but g... -
- Steps to reproduce:
* Import external CA
* Do not set "Serial for next certificate"
* Try to create a user certi... -
11/22/2016
-
-
-
- I guess you produced a typo in the latest commit....
-
-
- Wow, this is much better than before, shows complete progress output now. 8-) Thanks.
-
- 03:45 PM Revision 499ff8fc: Added addrtolower calls to force IPv6 addresses to lower case
- First of many
- 03:45 PM Revision 5100064f: Added addrtolower calls to force IPv6 addresses to lower case
- First of many
-
09:51 AM
Bug #6864 (Assigned): Error checking rejects IPv6 addresses with upper case A-F.
- Force IPv6 to lowercase via addrtolower() has been added to:
firewall_aliases_edit.php
firewall_rules_edit.php
... -
09:48 AM
Bug #6918 (Closed): Javascript Lowercase for IPv6 addresses prevents use of aliases with capital letters
- Closed in favor of #6864
-
09:40 AM Bug #6945: Firewall alias naming restrictions are too limiting
- What happens if you use www.xn--bcher-kva.ch as the name to block in the rule?
Is that effective?
I wonder if pf ... -
- Most likely it's a configuration issue and not a bug. It's best to discuss this on the forum before opening a bug rep...
-
- What appears in /var/dhcpd/etc/dhcpd.conf ?
When I put specific DNS servers in there, I get a line like:
option dom... -
- The only way to disable the auto config backup package after the credentials have been entered is to uninstall it. Th...
-
- The 'Backup Now' function always reports 'Backup completed successfully.' even if the backup to the server failed. If...
-
- Fixed by #6900
-
02:23 AM pfSense Packages Bug #6410: when PFSENSE after server restart,openvpn+motp not login
- SOLVED: Did update with Version freeradius2 1.7.4 and everything runs fine now
-
12:19 AM Revision dd98dfcc: The bug was actually the missing new line ('\n') on poudriere bulk list.
-
11/21/2016
- 07:37 PM Revision 028596d8: Revise filter_reload page to display entire reload_filter_status contents, not just last line
- 07:36 PM Revision d00157df: Revise filter_reload page to display entire reload_filter_status contents, not just last line
- 06:58 PM Revision 71b86385: Revise shaper wizards to support multi-line filter_reload_status
- 06:57 PM Revision de1425d9: Revise shaper wizards to support multi-line filter_reload_status
- 06:54 PM Revision 5bf9c6f7: Revise update_filter_relaod_status() function to append status messages rather than overwrite the file
- 06:53 PM Revision 4f7956ad: Revise update_filter_relaod_status() function to append status messages rather than overwrite the file
- 04:49 PM Revision df995721: Merge branch 'master' of git.netgate.com:pfsense/pfsense
- 04:47 PM Revision a7391526: Fixed #6922
- Added code for IPv6 Dynamic DNS
- 04:46 PM Revision 707e1ac2: Fixed #6922
- Added code for IPv6 Dynamic DNS
-
-
-
-
- 03:38 PM Revision f6973634: Fixed #6939 by moving CSS only to the two pages that require it
- 03:37 PM Revision dd455f50: Fixed #6939 by moving CSS only to the two pages that require it
-
-
- Thanks for looking into it (it's not like the exact messages would be really critical, but it was an indication of a ...
-
01:43 PM
Bug #6931: Status > Filter Reload page is confusingly worded
- The root cause of the issue was that the filter reload process over-wrote the status file with every message, so ther...
-
11:59 AM
Bug #6931: Status > Filter Reload page is confusingly worded
- The system I was testing on was too fast to notice the intermediate messages. Thanks for pointing that out. Fix coming.
-
- I'm very sure the thing has actually been displaying _real_ activity during reload. Such as, loading the various pack...
-
11:14 AM
Bug #6931: Status > Filter Reload page is confusingly worded
- Previously when visiting the page from the status menu the page would say that it was reloading the filter then after...
-
- Uhm, dunno guys, it appears to me like this made the thing basically no-op? Previously, it's been showing what's goin...
-
-
-
10:58 AM
Bug #6922 (Resolved): Dynamic DNS widget broken with Custom v6 entries
-
- Works, thanks.
!https://s22.postimg.org/kxalm38rl/screenshot_dyndns_widget.png! -
10:54 AM
Bug #6922: Dynamic DNS widget broken with Custom v6 entries
- Added code to handle IPv6 (cache file has "_v6" appended)
-
10:50 AM
Bug #6922: Dynamic DNS widget broken with Custom v6 entries
- Applied in changeset commit:a7391526c83a8d4b33e81d730141a4811ae8d482.
-
- ...
-
08:58 AM
Bug #6922 (Feedback): Dynamic DNS widget broken with Custom v6 entries
- Kill Bill,
Could you post or send me the contents of the /cf/conf/*.cache file that pertains to he HEIPV6 entry pl... -
10:57 AM
Bug #6864: Error checking rejects IPv6 addresses with upper case A-F.
- See #6918
A new function has been provided to force IPv6 to lower case on save. This is being added to GUI pages as ... -
-
- Fixed. Dragging below/above the visible window in FW rules works, HAproxy and Status_Traffic_Totals still have the re...
-
09:50 AM
pfSense Packages
Bug #6939: HAproxy - backend server list broken with recent 2.3.3 snapshots
- Applied in changeset pfsense:commit:f6973634c34b34908644e2df17154274d2ab12be.
-
09:40 AM
pfSense Packages
Bug #6939: HAproxy - backend server list broken with recent 2.3.3 snapshots
- Applied in changeset pfsense:commit:dd455f50b7be7957428b0733b5b2c93ccba9e284.
-
09:37 AM
pfSense Packages
Bug #6939 (Feedback): HAproxy - backend server list broken with recent 2.3.3 snapshots
- The scroll gimmick CSS has been removed from the master CSS file, and added only to firewall_rues.php and firewall_na...
-
- Applied in changeset commit:fc84b222e75c9d92e394a2e9ddb80c5ead382f52.
-
09:02 AM
Bug #6903 (Resolved): services_dnsmasq_edit.php: Configuration XML hosts section order appears randomized
-
09:02 AM
Bug #6918: Javascript Lowercase for IPv6 addresses prevents use of aliases with capital letters
- I have added a new function addretolower() to detect if a string is a valid IPv6 address, and if so convert it to low...
-
- That worked, thanks!
I did make one small tweak. Before, we used @kdb.enter.default@ rather than @kdb.enter.panic@... -
- Applied in changeset commit:0529323ff97f81e0203553086df8917aeb5542d3.
-
- Kill Bill wrote:
> Yay!!! Will only be able to test after this weekend; going to post feedback here. Thanks.
!htt... -
02:56 AM Bug #6949 (Resolved): username/password not used by proxy support
- hello,
it seems that username and password is not used for the proxy connection. it works only with IP and port but ... -
01:57 AM Bug #6925: System Update Failed
- I was able to update. But I had to take the cable out of the router and leave it to pfsense only. Very sensitive. lol...
11/20/2016
-
- I am well aware of DNS's Punycode encoding and of the homograph problem. The former is alas needed for backwards com...
-
- Hmmm... So, that's caused by the bogus empty file at the top, which I never placed there in the first place. NFC how ...
-
- No idea what's this bootstrap nonsense validating where yet again. It is absolutely impossible to input anything ther...
-
- This is beyond uncool. When I accidentally deleted an external (intermediate) CA cert from the CAs tab, it wiped the ...
-
01:08 AM Bug #6946 (Not a Bug): Unable to override dns servers in dhcp server
- Trying to provide specific DNS servers for specific optX network. No matter what I set the dns server fields to, the...
11/19/2016
-
- fixes: https://redmine.pfsense.org/issues/6940
-
- This is how's www.bücher.ch represented in DNS: www.xn--bcher-kva.ch; believe it or not, people do NOT want to deal w...
-
- Thanks for the link. Hopefully they won't reject the bug. Why do you think they would? (You do know that the majo...
-
- Sean McBride wrote:
> Do you know where I should file this upstream then?
https://bugs.freebsd.org/ if you insist... -
- I figured it would be something like that.
Do you know where I should file this upstream then? -
- We are bound by the limits in pf. We can only allow what they allow. (A-Z, a-z, 0-9, and _)
Use the description fi... -
- In Firewalls > Aliases, when creating/editing an alias there is a 'name' field. This field disallows most characters...
-
- Just found this one issue, looks i made a duplicate https://redmine.pfsense.org/issues/6940 , i did implemented the '...
-
- Fixable by: https://github.com/pfsense/pfsense/pull/3236
-
- DDB is there now but something still isn't triggering textdumps. 2.4 has a different /etc/ddb.conf file from the one ...
-
- I quoted a wrong post, however, both the HAproxy and the Status_Traffic_Totals have been fixed by reverting the offen...
-
- Kill Bill wrote:
> I'm not one of those bootstrap guys. :/ Perhaps @sbeaver could help. As for excessively wide drop... -
- I believe such an RFC exists already:
https://tools.ietf.org/html/rfc6151
Section 2: "MD5 is no longer acceptab... -
12:38 PM Todo #6944 (Closed): dhcp6c releasing allocation
- There is a problem some users are having with dhcp6c sending a release on exit, in 99% of cases this is not an issue ...
-
01:21 AM Feature #6832: [PATCH] Add the USB ID for the Sierra MC7430
- Thanks, but I don't see it in the @RELENG_2_4@ branch.
11/18/2016
-
- There are known issues with re(4) and spoofed MACs, it isn't always the driver, sometimes it is the chip itself.
Y... -
07:44 PM Bug #6941: VLAN interface does not work unless parent/or vlan interface are in promiscious mode
- Jim Pingle wrote:
> That would be a limit of your specific NIC chip and/or driver. If it's possible to be fixed at a... -
-
-
-
- Reverted after upgrade dhcpd server to 4.3.5
This reverts commit 9dacff7f1b2b89ebebc1e9456d642e0657bb89cc. -
- Reverted after upgrade dhcpd server to 4.3.5
This reverts commit 776692947bda5c867c7f5e60550c3a508760c251. -
- Reverted after upgrade dhcpd server to 4.3.5
This reverts commit 20350989db5d66ffb827beaed5ef5738cd62fc9d. -
- Removed after upgrade dhcpd server to 4.3.5
This reverts commit 318e0383829daac934424879ccfce09395e80025. -
04:08 PM
pfSense Packages
Bug #6939: HAproxy - backend server list broken with recent 2.3.3 snapshots
- I'll take care of it
-
- I'm not one of those bootstrap guys. :/ Perhaps @sbeaver could help. As for excessively wide dropdowns, perhaps this ...
-
- Yah shortening the field lengths would likely help.. but how to do that in a bootstrapped kinda way.?.
-
- Not sure either, the "port" field could definitely be shrunk quite a bit, for starters, though that'd only mitigate t...
-
- There used to be a scrollbar.. Thats hidden now by this fix: https://redmine.pfsense.org/issues/6895
Reverting htt... -
- Still seeing some issues, if I edit anything with the local-gateway even just the description and click apply changes...
-
- Ken Sim wrote:
> Still seeing system lockup on 2.4.0-BETA when dealing with non-local gateways.
I've tried to rep... -
- Already added
-
- I believe the responsible for so many queries is System Information Widget, that checks for upgrades every time it sh...
-
- Yay!!! Will only be able to test after this weekend; going to post feedback here. Thanks.
-
- Patch removed and package updated to 4.3.5 on pfSense 2.3.3 and 2.4.0
-
- Done for 2.3.3 and 2.4.0
-
- Labels are working, GPT was the default, ZFS is working (See #6929). This looks good to me. Closing.
-
- - GPT is now default
- Labels are being used on fstab
- ZFS installation is working as expected -
- option DDB added to pfSense kernel
-
- The amd64 kernel in 2.4 does not contain "options DDB" so textdumps are not working. It does have "options KDB", but ...
-
- It will only show what it finds in DNS, which is what it gets from DHCP static mappings, leases, host overrides, and ...
-
06:18 AM Bug #6942 (Duplicate): Traffic Graph displays wrong local FQDN
- In a configuration with several networks and different local domain names for each network where hosts get their name...
-
07:18 AM Bug #6877: nsCertType "Server" property of a certificate is not detected if additional nsCertType flags are also set
- And in the same spirit, https://github.com/pfsense/pfsense/pull/3234
-
- Done during 2.4 alpha
11/17/2016
-
- That would be a limit of your specific NIC chip and/or driver. If it's possible to be fixed at all, it would have to ...
-
- Hi,
I have a pfsense box with two physical interfaces re0/re1.
My setup is two vlan interfaces defined re0_102 ... - 08:23 PM Revision 0641b626: Fixed #6931
- 08:22 PM Revision d3cb20ce: Fixed #6931
-
06:07 PM Bug #4689: Panic/Crash "sbflush_internal: cc 4294967166 || mb 0 || mbcnt 0"
- I am getting this symptom (crashs) on v2.3.2, multiple times a day:...
-
- Reading this would help to understand why it's not supported.
https://forum.pfsense.org/index.php?topic=87211.msg514... -
02:30 PM
Bug #6931: Status > Filter Reload page is confusingly worded
- Applied in changeset commit:d3cb20cef80a084f162495b5698190405df7a1dd.
-
02:24 PM
Bug #6931 (Feedback): Status > Filter Reload page is confusingly worded
- Page un-uglyfied as requested
-
-
- P.S. Cannot make the window any wider, it's already fullscreen on a full HD monitor, not even F11 helps. :-D
-
- That's the same image I'm running, so it's most likely a problem with the package in general. It's possible there was...
-
- Well, not sure what's current. The box has been upgraded about ~2 hours ago. ...
-
- Is this still the same on a current snapshot? Is it the same if you force a page reload to clear the cache? Make the ...
-
- This definitely used to work, however it got badly broken recently. The SSL checkbox and weight fields are completely...
-
- OpenVPN management socket not listening after bootup
The dashboard shows the following: "Unable to contact daemon ... -
- Jim Pingle wrote:
> One thing I did notice in your original description is that the network config is invalid. You c... -
11:47 AM Revision 2f7c76cf: Put original match back
- Did not mean to remove SSL substring from the check...
-
- See https://redmine.pfsense.org/issues/6877#note-4
-
- Looks good, filter log contains the expected entries now.
-
- We determined this page was OK because it's acceptable for a host override to have zero aliases. Without the button t...
-
- Works, can XMLRPC sync so long as the user has the "System - HA node sync" privilege.
-
08:17 AM Bug #5319: Error message "No config named" in charon daemon
- I can confirm this one too. 2.3.2 in use....
-
- Looks good, thanks for testing!
-
- Works ;)
!https://s15.postimg.org/w34bhj9az/Cert_Manager_Screenshot_Fixed.png! -
- Merged PR
-
- I don't think I've ever seen one with both set, and practically there is rarely if ever a reason to do so. It's worth...
-
- Yeah, this cannot work...
-
- Well, this does not work properly even with the nsCertType set. Example:...
-
-
01:18 AM Bug #6934: /usr/bin/install missing from new 2.4 installations
- I just did a fresh install with the 11/16/16 build. I was able to restore my configuration and all packages installe...
11/16/2016
- 11:29 PM Revision 8cab3470: Revise host and domain sorting so that the index is not lost
- 11:28 PM Revision 589634a9: Revise host and domain sorting so that the index is not lost
-
09:48 PM Bug #6938: DNS with OpenVPN gateway specified is routed through wrong interface. 2.4 regression.
- I've been trying to identify if the same issue exists when setting a DNS entry with a normal WAN gateway (with static...
-
- System -> General Setup -> DNS Server Settings
Setting a DNS with an OpenVPN client gateway (dynamic IP address) is ... - 09:11 PM Revision 4c17e45f: Added addrtolower() function to allow IPv6 addresses to be converted to lower case while preserving aliases or other text
- 09:10 PM Revision f3997278: Added addrtolower() function to allow IPv6 addresses to be converted to lower case while preserving aliases or other text
-
- I have now verified that this is reproducible on 2.4 nightly 20161116-0701.
-
- Moving the start of OpenVPN will undoubtedly have other unintended consequences. What is likely happening here is tha...
-
- Yes.
-
- Do you have System > Advanced, Misc, "Do not create rules when gateway is down" set?
-
- Please note that Status -> Filter Reload also works to properly initialise the rule after boot (as an alternative to ...
-
- *Summary*:
A race condition starting OpenVPN client at boot (rc.bootup) is causing a firewall rule (that is dependen... -
-
- I've already taken everyone off the network, but I can not update only timeout.
((>>> Updating repositories meta... -
-
- This reverts commit d461ff40e364fc0ecc003b9f673cbad7c6a08f2f.
(cherry picked from commit 75bc87fe10f30f49a09218820f7... -
- This reverts commit 9444a281f051e11d5456cc37b2a3f56fc8a7bc33.
(cherry picked from commit 9128641db5c9b6839163948f3f7... -
-
-
-
- Traffic entering enc0 on 2.4 is not creating a state, thus TCP traffic will not pass. ICMP works as the return traffi...
-
-
-
03:37 AM Bug #6935: Rule (which contains a pfBlockerNG URL-Alias) cannot be saved
- Kill Bill wrote:
> Duplicate of Bug #6918
Ups, sorry -
- Duplicate of Bug #6918
-
- I cannot create or edit a Rule which contains a pfBlockerNG (URL-)Alias. The name of the Alias will automatically con...
-
- This reverts commit d461ff40e364fc0ecc003b9f673cbad7c6a08f2f.
-
- This reverts commit 9444a281f051e11d5456cc37b2a3f56fc8a7bc33.
-
- Applied in changeset commit:c0ac85e7408bd34beac586b25a57901dc2c5c885.
11/15/2016
-
11:44 PM Bug #6913: install on Hyper-v R2
- Yes, it works.
Thank you. -
- There were fixes put in today for ZFS and it might have affected other things you're seeing. Try it again on a new sn...
-
- I don't have anything capable of running Hyper-V on Windows Server (R1 or R2) nearby so I can't easily confirm the is...
-
- I just experienced this apparently same crash on 2.4 while running the DSLReports Speedtest. The system crashed afte...
-
- I reverted all these changes until the proper solution is committed.
The 'real' solution here is convert the IPv6 ... -
- There are more related pending PRs that may help, but I was talking to sbeaver earlier and he had some ideas on how i...
-
- I'm sorry but this is *still* broken. I go to Firewall - NAT - Port Forward, there's a rule with an alias called "RAS...
-
- Should be fixed in filterlog-0.1_5.
-
- Nah, Nepal is innocent -- the mirrors have been slow like molasses for some two days or so...
-
- I am also getting this the last day or so. I thought it was related to moving back to Nepal and having slower internet.
-
- 11:45 AM Revision ff3d11c8: DHCPv6 ddnsdomainprimary must currently be IPv4
- This field is currently validated to allow only an IPv4 address to be entered, so it may as well be consistent client...
-
- ZFS now works on CE and Factory snapshots, thanks!
-
- Pushed a fix, please try next round of snapshots
- 11:35 AM Revision 7164c563: services_dhcp_edit add extra IPv4 validation
- a) Validate that ipaddr must be IPv4 (note if you enter an IPv6 address, it will fail other later tests of being in t...
- 10:34 AM Revision 41fc88ec: Specify the IP address family in interfaces.php
- Where it is known what sort of IP address is required, we can specify it in the call to Form_IpAddress. That will mak...
-
- Same as #6643 but it's happening again on 2.4 now.
/usr/bin/install is missing from a fresh install, updating to a... -
- Duplicate of #6768
-
08:07 AM
Bug #6933 (Duplicate): Wrong IPv6 address is served over DNS when static mapping is used with Track6 interface
- I have a router with pfSense 2.3.2 that has several LAN interfaces, each set to Track6 mode to assign IPv6 addresses ...
-
- 1:1 NAT does work for IPv6. It's similar to NPt, but for a single address -- NPt is really just a slightly different ...
-
- At the moment it allows entry of IPv6 addresses. Is that correct? Is the 1:1 NAT feature supposed to work fine with I...
11/14/2016
- 11:00 PM Revision bf2c7206: Fix #6918 Allow aliases with capital letters in rules
- Expand the types of Form_IpAddress so that the caller can specify
exactly what combination of IPv4, IPv6 address and ... - 11:00 PM Revision 8100374e: Fix #6918 Allow aliases with capital letters in rules
- Expand the types of Form_IpAddress so that the caller can specify
exactly what combination of IPv4, IPv6 address and ... -
-
- Please open a forum thread for discussion and diagnosis before opening a bug report. It does work for some people, an...
-
10:11 PM Bug #6932 (Not a Bug): MLPPP
- This feature has been broken for a very long time. I have tested with x64 and x86 and different hardware with no luck...
-
- The way the Filter Reload page is displayed implies that the filter rules are loaded by simply visiting the page.
... -
05:32 PM
Bug #6812: IPsec filterdns crash
- OK these issues have surfaces again this morning. Truth be told, I have no idea what's Ipsec and as far as I know, I...
-
- Applied in changeset commit:9444a281f051e11d5456cc37b2a3f56fc8a7bc33.
-
- The PR looks good, appears to do the proper thing in each case. I just merged it in.
-
03:28 PM pfSense Packages Feature #6651: Loopback interfaces
- Loopback interfaces are a cisco best practice for GRE/IPSec tunnels. I would use them for site-to-site IPSec as an in...
-
- Related forum thread: https://forum.pfsense.org/index.php?topic=121105.0
Basically
- disable the enable DHCP serv... -
- Choosing the ZFS option results in a system that starts to boot, but cannot mount the root slice because it doesn't k...
-
- the problem appears to be fixed in FreeBSD 11.0- *STABLE*
11/13/2016
-
11:13 PM pfSense Packages Bug #6928: freeRADIUS, logging with "Access-Reject" not work in mysql table radpostauth
- for change it - needed uncomment this:
/usr/local/etc/raddb/sites-enabled/default
section post-auth
variable sql
... -
- The table(radpostauth) is recorded only events "Access-Accept".
in the table(radpostauth) needed events "Acces-Reje... -
- 11-stable have fixed this issue
-
- Bug 212721 - FreeBSD 11.0-RC2/RC3/RELEASE fails on Hyper-V 2012r2
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id... - 06:17 PM Revision 9444a281: Fix #6918 Allow aliases with capital letters in rules
- Expand the types of Form_IpAddress so that the caller can specify
exactly what combination of IPv4, IPv6 address and ... - 05:49 PM Revision 38ce4a18: Keep the rule type selection after input errors on firewall rule
- If the user:
a) Edit a firewall rule
b) Select "single host or alias"
c) Enter an invalid IP address that is not an a... -
- "Operation timed out" => when download fails, you cannot upgrade.
-
- >>> Updating repositories metadata...
Updating pfSense-core repository catalogue...
pfSense-core repository is up-... -
- When adding a 1:1 NAT entry it is possible to enter a mix of IPv4 and IPv6 addresses in the various External Internal...
-
- See pull request https://github.com/pfsense/pfsense/pull/3225 for a suggested fix.
-
11:05 AM Bug #6918: Javascript Lowercase for IPv6 addresses prevents use of aliases with capital letters
- Yes. Confirmed on:
2.3.3-DEVELOPMENT (amd64)
built on Fri Nov 11 16:36:08 CST 2016
FreeBSD 10.3-RELEASE-p12
... -
12:17 PM Bug #6926 (New): Miniupnp advertising expired IPv6 address
- Version 2.3.2_1
With WAN set to DHCP6 and LAN set to track interface, the miniupnp service does not get notified i... -
- It's possible something being configured on the previous one made it appear that it failed (e.g. states got reset). I...
-
- I added a new network card and I set up ipv4 and saved it and it was just spinning. Now I added another set and it wa...
-
05:55 AM pfSense Packages Bug #3343: (re)starting freeradius service throws "The command '/usr/local/etc/rc.d/radiusd.sh stop' returned exit code '1', the output was 'radiusd not running?'"
- The problem is, that pfSense restarts the packages it self and also calls the restart method of freeradius itself.
... -
- Bug 213618 - When running as a Hyper-V Guest, FreeBSD 11 networking does not work
https://bugs.freebsd.org/bugzilla...
11/12/2016
-
-
-
- I can't duplicate this here on a current snapshot. The package installs fine.
Make sure you are on a completely up... -
- Fetching pfSense-pkg-nrpe-2.3.1_1.txz: . done
Fetching nrpe-ssl-2.15_6.txz: ... done
Fetching nagios-plugins-2.1.3,... -
- Can you explain in more detail about exactly what you are doing that is failing?
I am able to assign an interface ... -
- Configures all standard parameters prompts to save. But it just keeps rolling.
But by option 2 (Set interface (s) IP... -
- Self-explanatory:
!https://s16.postimg.org/9l1y6nq6t/Screenshot1.png!
!https://s16.postimg.org/t46jg0oyd/Screensh...
11/11/2016
-
11:22 PM Bug #6921 (Not a Bug): Poor speed with Chelsio T420-CR
- I have a Chelsio T420-CR 10gbe NIC in a Supermicro A1SRi-2758f based pfsense router. I get poor speed (~1.2gbps) test...
-
- Base64 encoding works fine here.
-
- Tested on a few systems, works fine.
-
- Applied in changeset commit:fbb652ed28641c50b14b9897a914ed317c323d73.
-
- Tested on a few systems, works fine.
-
- Applied in changeset commit:92a78939583e2be7f7cc52d045bc48a2e2264d1d.
-
- I upgraded a 2.3 VM that had recently had FreeRADIUS installed, but removed. The old freeradius.inc was somehow left ...
-
-
- The filter logs contain information but not enough data:...
-
- 06:45 PM Revision 2909468c: Revert change to row delete button
- 06:44 PM Revision 464a540a: Revert change to row delete button
- 06:39 PM Revision 0a0c6db0: Revert "Suppress delete button if only one row"
- This reverts commit 13be068fe5e1377d1d5649efe0f860ba5c34ba90.
- 06:38 PM Revision b9c0d66d: Revert "Suppress delete button if only one row"
- This reverts commit 75ac7cab1dfb3e8148a27a13369bbb08219e8c3a.
- 04:37 PM Revision 13be068f: Suppress delete button if only one row
- 04:37 PM Revision 75ac7cab: Suppress delete button if only one row
- 04:12 PM Revision af3bf919: Fixed #6916
- 04:11 PM Revision 38fe6f07: Fixed #6916
- 02:01 PM Revision 6a365a4c: LAN IP validation logic
- 01:47 PM Revision c6575378: Revert "Fixed #6811"
- This reverts commit f92d44da5a4958372c7fb925043abc34588143e3.
- 01:40 PM Revision aa66a125: Revert "Fixed #6811"
- This reverts commit f92d44da5a4958372c7fb925043abc34588143e3.
-
- Looks good.
-
- Text is correct now.
-
-
- This appears to have broken the use of Aliases that have names using capital letters. See #6918
-
- It's in the list now for snapshots.
-
- Routing has been fine on 2.4 in every scenario I've tried so far.
-
- Fixed, only one entry is present in the override file now.
-
- New extension loading method is working well.
-
- I've run through several installs lately and this is definitely OK now.
-
- Still missing in OpenVPN 2.3.12
-
- If you have an alias, say "Blah", and try to enter it in a field on a firewall rule, it is automatically translated t...
-
10:21 AM
Bug #6893 (Resolved): Configuration XML is inconsistent with self closing tags
-
10:20 AM
Bug #6916: interfaces_vlan.php: Clicking on "Cancel" deletes VLAN
- Applied in changeset commit:38fe6f07922c8ee6bde81ba1f07ab6ffe380f12b.
-
10:14 AM
Bug #6916 (Feedback): interfaces_vlan.php: Clicking on "Cancel" deletes VLAN
- Automatic confirmation suppressed and manual confirm substituted.
-
08:59 AM Bug #6916 (Resolved): interfaces_vlan.php: Clicking on "Cancel" deletes VLAN
- Just another small bug from VLAN delete confirmation dialog (see Bug #5541). If one clicks on trash icon, the delete ...
-
- The update check always has to leave the interface with the default gateway, as any traffic originating from the fire...
-
- Hi guys,
Please add an option to allow the user to choose from what IP or interface the request for updates is out... -
- Works in snapshots that include the fix
-
- Works
-
- Works
-
- Feedback from a customer who was hitting this confirmed it's now working.
-
- Works
-
- Closing for lack of feedback.
-
- Works
-
- It's been 4 years and this hasn't come up again. If someone needs it, they can add these options manually.
-
05:50 AM
Bug #6895 (Resolved): Moving rules does not scroll
-
- Can this pretty please finally get the disastrous patch reverted? Not only it did not fix what it was supposed to fix...
-
03:08 AM pfSense Packages Bug #6736: Snort fails to start after upgrade to 2.3.2-RELEASE
- Get the same issue when updateing from pfSense 2.3.1_5 to 2.3.2_1
In my logs when SNORT tries to start I also get:... -
02:09 AM Bug #6915 (Resolved): unbound logging not working after reboot or "Reset log files"
- After "reboot the machine" or "Status => System Logs => Settings" => "Reset log files" then unbound logs are not s...
11/10/2016
-
11:07 PM Feature #6914 (Resolved): unbound access-control lists
- Hello! In
Services -> DNS Resolver -> Access Lists -> Add -> Actions
we have only 4 options "Deny", "Refuse", "Allo... -
04:04 PM Bug #6099: igmpproxy does not recognize upstream interface
- That's interesting. But unfortunately this is not the case for my system. Swisscom transmits everything on vlan10 and...
- 02:49 PM Revision 3ad0f9b6: Update setup_wizard.xml
-
- The prompt when booting appears to be due to the fact that /var was not cleaned out when switching to RAM disk, and t...
-
- can't install 2.4 on Hyper-V 2012 R2
fix... -
- Better fix is in now, see #6878
-
- Works here, must be something local or site-specific.
-
- Each of these changes was made on 2.4 only, as some assumptions were made that could conflict in some cases (e.g. Nan...
-
- I pushed a change to teach squidGuard to keep its databases in a persistent directory when /var is in RAM. The files ...
-
- Pushed a change for squid to teach clamav to keep its DB in a persistent location if /var is a RAM disk. It doesn't c...
-
- can't install 2.4 on Hyper-v R2 (all updates installed)
fix:... -
- But the details you mention are not solved by this suggestion. The interface is already filled/selected when you crea...
-
11:14 AM Bug #6910: Pre-fill 'interface' field when creating firewall rule on interface -> efficiency
- I mean it constructively, btw, not to whine or something.
-
- I'm assuming people want to work efficient.
What is wrong with copying a field into a field to make sure people do... -
- You're assuming everyone uses it the same way you use it, which isn't the case. Removing functionality to prevent foo...
-
- 1. Button: 'copy'
2. Popup: which fields to change (interface);
3. Save = copied with altered values. -
- Being able to edit the interface allows you to move a rule from one interface to another. (e.g. copy LAN rule, edit L...
-
- Now it is possible to create a firewall rule on a vlan tab, and fill in the wrong interface in that rule. Aside from ...
-
- Thanks for the feedback!
-
11:00 AM Bug #6781: OpenBSD description links are broken in Traffic Shaper
- I think you should mark it as "resolved/closed". Thanks!
-
- i have installed 2.4 on hyper-v 2012 R1, set ip. no network.. no ping.. have updated drivers, enabled and disabled hw...
-
- Ticket #5321
(cherry picked from commit 411d4e6e55475cc66b997ca3e47478dbe10b4e1b) - 10:03 AM Revision 1c9bf396: Fix bug where CARP vip status is incorrent in the interface when more
- than one CARP vip is configured for an interface.
(cherry picked from commit 5116a8aa60ad87c0a47aafeca422cc323147ea14) - 10:03 AM Revision 16bdba73: Remove "use lowercase" hint
- As it is no longer relevant, because the code now automatically converts
to lowercase.
(cherry picked from commit 6a... - 10:03 AM Revision 3a66c0da: Fix #6864 automatically convert IPv6 input to lowercase
- 1) As the user leaves the field, or presses Save, onChange will fire and
convert the input string to lowercase. This ... -
- Ticket #5321
(cherry picked from commit 411d4e6e55475cc66b997ca3e47478dbe10b4e1b) - 10:01 AM Revision 5ad69855: Fix bug where CARP vip status is incorrent in the interface when more
- than one CARP vip is configured for an interface.
(cherry picked from commit 5116a8aa60ad87c0a47aafeca422cc323147ea14) -
10:01 AM Revision 0cc7eec5: 80 character lines ftw :)
- Just because it was asked nicely :)
(cherry picked from commit 013110a19b90698cd521fc120b06b7cc37b531e5) -
- (cherry picked from commit f9416ab2bdaae5ca41e70db1c846ab3419fd0cee)
- 10:01 AM Revision b68edd49: Remove "use lowercase" hint
- As it is no longer relevant, because the code now automatically converts
to lowercase.
(cherry picked from commit 6a... - 10:01 AM Revision 6df432c3: Fix #6864 automatically convert IPv6 input to lowercase
- 1) As the user leaves the field, or presses Save, onChange will fire and
convert the input string to lowercase. This ... -
- Example: I want to copy ALL FW rules from VLAN100 to VLAN110 at once.
Then, in that copy, or (see previous issue r... -
- For example: copy one alias (the content of course) into another alias (like in FW rules), sort alias, filter alias, ...
-
11/09/2016
- 11:27 PM Revision 694872ae: Comment typos alphabet
- (cherry picked from commit d622a62eb4f3ec8535ead494a863f10bbc409f41)
- 11:27 PM Revision 2f8f3cb3: Merge pull request #3221 from phil-davis/patch-2
- 11:23 PM Revision d622a62e: Comment typos alphabet
-
10:51 PM Bug #6907 (Duplicate): DNS Resolver does not use domain name set in DHCP subnet, only the global one
- Ran into this myself & found a relevant forum post here: https://forum.pfsense.org/index.php?topic=119717.0
In sho... -
- Many bugs were fixed in 2.4.
2.3.2 is very broken with respect to limiters.
Could you try a recent 2.4 snapshot ? - 07:55 PM Revision 0eb2512f: update conditional re:LAN dhcp
- 06:05 PM Revision b20a6d67: Fix #6899
- (cherry picked from commit c766ac7dd723f6e36980c48b0dd156b492556616)
-
-
- (cherry picked from commit ee908e93671fddb38f8cca5d3d19a28791934878)
-
-
- (cherry picked from commit 4406922edb1000ef79f4fccfb484aa1103105ac0)
-
-
- Found sth on different site:
[[https://sourceforge.net/p/igmpproxy/bugs/4/#472a]]
So for at least with DE-Telekom ... -
- Fixed the snort directories in commit:ce8fedd
Will look into squidGuard soon. -
-
- Checking deeper, @pkg info@ is empty after switching, which explains why the installed packages showed damaged, but a...
-
- I set /tmp and /var to be in RAM on a test box running 2.4 and hit a couple issues:
1. I had two packages installe... - 02:57 PM Revision dcae03a3: Fixed #6903
- hosts and domains sorted on display, not on save to config
- 02:56 PM Revision 8e7fea67: Fixed #6903
- hosts and domains sorted on display, not on save to config
-
02:23 PM
Feature #6881: services_unbound_host_edit.php: DNS Resolver Add V4 and V6 host override at the same time
- In addition any aliases created would have to include both the V4 and V6 addresses.
-
- It is still an issue but it can be easily worked around by adding a floating rule to pass outbound to the destination...
-
- The verify script is in @/usr/local/etc/raddb/scripts/otpverify.sh@ on current versions. The FreeRADIUS package code ...
-
-
- Pull request has been merged. Thanks!
-
- I can reproduce this somewhat here on 2.3.2. With a WAN/LAN style bridge, putting @synproxy@ on a TCP rule will event...
-
- I can't reproduce this here on 2.3.2_1. I can make edits to the bridge and the MAC stays the same and I can still rou...
-
09:00 AM
Bug #6903: services_dnsmasq_edit.php: Configuration XML hosts section order appears randomized
- Applied in changeset commit:8e7fea674a34ab217c9b9821c608639ca45bd281.
-
08:18 AM
Bug #6903 (Feedback): services_dnsmasq_edit.php: Configuration XML hosts section order appears randomized
- It is certainly not "randomized", but since the two tables may be sorted (by clicking the column headers) the hosts c...
-
- The route now appears on the OpenVPN interface as expected, and clients can connect/pass traffic with static addresse...
-
07:57 AM Bug #5319: Error message "No config named" in charon daemon
- I've just been hit by this as well and like the last comment, restarting ipsec from the cmd line fixes the problem fo...
-
- Merge is in commit:b8b0fab1a4ef44758ff7fdd9cbfcc8bab2fe49b9
-
- Merged PR
-
- When trying to perform an XMLRPC between two 2.4 HA systems, the secondary won't accept new settings, believing it ha...
-
- Ticket #6206
-
-
01:21 AM Bug #6904: PRIQ Queue Priority Limited To 7
- Dirty patch attached to thread above, restores old behavior...
Correct way would be to determine parent interface ...
11/08/2016
-
- Set parent interface to PRIQ. Set child queue priority to anything greater than 7. Receive "Please select a value tha...
-
09:20 PM
Bug #6779 (Resolved): Traffic shaper wizard uses decimals instead of whole numbers
-
- Looks like fixed.
-
- 06:53 PM Revision e5f9360f: Fixed #6893
- Null configuration settings are now written as <tag></tag> instead of <tag /> for consistency
- 06:53 PM Revision da7054b7: Fixed #6893
- Null configuration settings are now written as <tag></tag> instead of <tag /> for consistency
-
06:07 PM Bug #6903 (Resolved): services_dnsmasq_edit.php: Configuration XML hosts section order appears randomized
- Related to #6893 - when I view the diff of the configuration XML after a change to DNS Resolver's Host Overrides sect...
-
-
- Awesome, thanks for the quick fix!
-
01:00 PM
Bug #6893: Configuration XML is inconsistent with self closing tags
- Applied in changeset commit:da7054b7cf77d9322307c52d8340fb30486ce25e.
-
12:54 PM
Bug #6893 (Feedback): Configuration XML is inconsistent with self closing tags
- Null configuration settings are now written as <tag></tag> instead of <tag /> for consistency
-
- thank you very much!)
-
- I've imported a patch from OpenVPN development list:
https://github.com/pfsense/FreeBSD-ports/commit/153999c431c59... -
- The certificate won't take full effect until the web server is restarted, and restarting the web server from a proces...
-
06:00 AM Bug #6902: webConfigurator not using new certificate and won't disable SSL
- Bob Hannent wrote:
> Restarting the pfSense box has now locked me out of the UI, neither HTTPS or HTTP work now. Sli... -
- Method:
* I had the web UI using the default self-signed certificate and I used an alternate port number just in cas... -
07:38 AM Bug #3075: Can't delete unused Virtual IP "referenced by a least one gateway"
- I've got this error on 2.3.2_1, on a CARP VIP I just added for a test. I'm 100% sure that VIP is not being used for a...
11/07/2016
-
- Still seeing system lockup on 2.4.0-BETA when dealing with non-local gateways.
-
- 08:26 PM Revision 32980f32: update LAN regex for case insensitivity
- 07:14 PM Revision 4c7ec3de: Fixed 6901
- 07:13 PM Revision 6bd09ca2: Fixed 6901
-
- 06:00 PM Revision 4606b548: Fixed #6898
- 06:00 PM Revision 10b262b4: Fixed #6898
- 04:24 PM Revision cde63e73: Merge branch 'RELENG_2_3' of git.netgate.com:pfsense/pfsense into RELENG_2_3
- 04:22 PM Revision a4a0f8db: Fixed #6779 by rounding bandwidth down to nearest integer
- 04:19 PM Revision 16625f3c: Fixed #6779 by roundinf bandwidth down to nearest integer
-
- Fix the generated pf rules.
-
- > While creating an alias containing multiple networks, I used copy/paste and (unthinkingly) pasted 18 of the 22 entr...
- 03:36 PM Revision 7c3a9ded: Fixed #6779
- Round calculated bandwidth down to nearest integer
-
- I don't have a Cisco switch to test against, and the only piece of hardware I have left with em0 that works is 32-bit...
-
- Confirmed. The daemon is binding to all interfaces, which prevents the second one from operating properly.
Changin... - 02:39 PM Revision 7c9f724c: Correct part of #6779
- Setting input "step" value to "any" alows hte element to accept decimal (float) values, not just integers.
- 02:38 PM Revision 54a217f0: Correct part of #6779
- Setting input "step" value to "any" alows hte element to accept decimal (float) values, not just integers.
-
- Confirmed, doesn't need PPPoE. An OpenVPN instance on an assigned GIF interface is enough. It's acting as though the ...
-
- Hi Jim,
Leaving "Listen on IP" blank makes the default IPv4 address "0.0.0.0" to be put on both IPv4 *and IPv6* "l... -
- Unless there is a compelling need to set it to listen on two specific addresses manually, leave "Listen on IP" blank ...
-
01:12 PM
Bug #6901 (Feedback): services_unbound_host_edit.php: "Delete" button should be suppressed if < 2 host aliases listed
- checkLastRow() Javascript added to page
-
01:12 PM
Bug #6901 (Resolved): services_unbound_host_edit.php: "Delete" button should be suppressed if < 2 host aliases listed
-
- Applied in changeset commit:86584ded30c27b9ad1b017fb743399dc01180f02.
-
- I committed a fix to store the passwords in base64. Worked fine here but could use more testing. 2.4 only for the tim...
-
12:10 PM
Bug #6898: Suggestion: reword "VPN > IPsec > Tunnels > Edit Phase 1" "Key Exchange version" popup contents
- Applied in changeset commit:10b262b409c9b4170785948b9e73bdfc7edc2eae.
-
12:01 PM
Bug #6898 (Feedback): Suggestion: reword "VPN > IPsec > Tunnels > Edit Phase 1" "Key Exchange version" popup contents
- Pull-down text changed as suggested.
-
09:40 AM
Bug #6779: Traffic shaper wizard uses decimals instead of whole numbers
- Applied in changeset commit:7c3a9dede96552233fbe1da35ac4126aa524711b.
-
08:56 AM
Bug #6779: Traffic shaper wizard uses decimals instead of whole numbers
- Fix part 1: HTML inputs that specify the bandwidth have been updated to accept decimal values.
Part 2: Calcualted ba... -
- Seems useful and was simple to add. I pushed it to the 2.4 version of the package.
-
- We'll pick it up naturally when it comes through FreeBSD ports. I don't think it's worth going out of our way to pick...
-
05:22 AM pfSense Packages Bug #6900 (Resolved): OpenVPN + OTP auth failure
- Hi guys. In pfsense 2.3.2 after any changes (firewall rules, reboot, etc...), I cannot access the server via OpenVPN ...
-
- Ticket #6206
-
- Ticket #5321
-
- * 'master' of https://github.com/fredronnv/pfsense:
Fix bug where CARP vip status is incorrent in the interface whe... -
- * 'patch-49' of https://github.com/stilez/pfsense:
80 character lines ftw :)
standardise old code ("or" -> "||") -
- * 'ipv6lower' of https://github.com/phil-davis/pfsense:
Remove "use lowercase" hint
Fix #6864 automatically conve...
11/06/2016
-
-
10:12 PM Feature #3859: Make it possible to set the source IP address for gateway monitoring
- is there any updates on this feature ?
With lack of ipv4, being able to use only one public ip is a pretty common co... -
- Fixed in 2.4.
- 09:32 PM Revision c766ac7d: Fix #6899
-
- Applied in changeset commit:d461ff40e364fc0ecc003b9f673cbad7c6a08f2f.
-
- Note: The pull request generated discussion about whether users should have the option to record IPv6 addresses with ...
-
- Take a look at Phil's patch. If it needs rework kick back to either he or I.
-
- Eval, please
-
- Please retest on 2.3. Close if possible. Let me know if it's still an issue
-
- Can't be "high", it's five years old.
JimP, please reeval to see if this is still and issue. -
- With luck recent work has closed this.
-
- Believe this should be closed
-
- Pingle pls confirm
-
- Please look at Phil'a patch
-
-
- Pingle for eval.
-
- Needs serious evaluation first.
11/05/2016
-
- In general I agree that we could do a better job here. Beaver can look into that.
Things like md5 have to stay u... -
- Jim Pingle wrote:
> We can't outright purge md5 and other weak options because people are frequently forced to use t... -
- We can't outright purge md5 and other weak options because people are frequently forced to use them for third party v...
-
- I was about to file a similar bug, but found this one searching the bugbase for "md5".
I'm new to pfsense and just... -
- Thanks for the proposal. This would be considered a feature request (I changed the type for you). Code submissions sh...
-
12:51 PM Feature #6899 (Resolved): Can't specify PPTP/L2TP gateway as FQDN
- Actually I don't know that's a bug report or a feature request actually.
Nevertheless I'm using the following workar... -
- In the "VPN > IPsec > Tunnels > Edit Phase 1" screen, there is a "Key Exchange version" popup, its contents are:
V1... -
07:45 AM pfSense Packages Feature #6226: Add usb_modeswitch to the pfSense package repo
- Has this feature request stalled ?
There is a package that that could handle this, it is only a matter of the corr... -
11/04/2016
-
- I think webConfigurator should use a favicon that differs from the one used on any *.pfsense.org.
I often have mul... - 08:26 PM Revision d5cf0b70: Fixed #6895
- by setting overflow-x: visible; in CSS
- 08:25 PM Revision 7da65ab7: Fixed #6895
- by setting overflow-x: visible; in CSS
-
-
-
-
07:08 PM
Bug #6779: Traffic shaper wizard uses decimals instead of whole numbers
- Thanks!
I updated you instructions a little since "default" is not always the same in the Wizard. -
- Yes, calculated values.
Run wizard, select Multiple Lan/Wan traffic_shaper_wizard_multi_all.xml
*First step:*
LA... -
10:47 AM
Bug #6779 (Feedback): Traffic shaper wizard uses decimals instead of whole numbers
- Would you please clarify for me?
Does the problem occur when you enter decimals in the wizard, or when values you ... - 06:43 PM Revision 01fb4340: Fixed $6811
-
- (cherry picked from commit 1be1b87b5f9ab8d0a259b888aab08ec6babad568)
-
-
- The logs cannot fill up anything. They are circular and fixed size - see Status - System Logs - Settings. Simply make...
-
05:19 PM Bug #6896: unbound root.key file corruption possibly related to full file system
- Just following up, I traced it down to the suricata package. My DNS log is gigabytes in length. What is strange is t...
-
- My root.key becomes corrupt and unbound crashes and no longer will start. This bug is likely related to #5334 and has...
- 04:51 PM Revision f92d44da: Fixed #6811
-
- Related to Bug #6432.
-
03:30 PM
Bug #6895: Moving rules does not scroll
- Applied in changeset commit:7da65ab7dc9a1b55624de9fb6eb9a4a272440573.
-
03:29 PM
Bug #6895 (Feedback): Moving rules does not scroll
- Matt Fine to test.
-
03:23 PM
Bug #6895 (Resolved): Moving rules does not scroll
- Dragging firewall rules does not automatically scroll the page when dragging to the top or bottom of hte visible window
-
-
-
02:56 PM pfSense Packages Bug #6777: squid cant redirect ssl website correctly to squidguard error page in a denied category
- NOT A BUG.
This is caused by a behavior on Browsers, check this link for more information about it: https://bugzil... - 02:38 PM Revision 96ff627f: Fixed #6753
- Interface menu entries no longer sorted for consistency with other GUI instances
(cherry picked from commit e5d33973... - 02:38 PM Revision e5d33973: Fixed #6753
- Interface menu entries no longer sorted for consistency with other GUI instances
-
- - It's not rebooting after auto ZFS installation on 4860
-
- - Remove extra options for auto UFS leaving only MBR and GPT
- Use labels to particions on UFS -
-
-
-
- Applied in changeset commit:7ac34d65a4f3f8561c8156ae75630aa71c8a88f2.
-
- This works fine in the base system and in the export package. I can make a CA, then make an intermediate CA, then mak...
-
- Applied in changeset commit:1be1b87b5f9ab8d0a259b888aab08ec6babad568.
-
12:13 PM Bug #6876: Firewall alias issue after adding a wrong alias
- I do confirm that affected version are 2.3.2 and 2.2, even if screenshot is 2.2.x. Purpose of screenshot was just to ...
-
09:11 AM
Bug #6876 (Feedback): Firewall alias issue after adding a wrong alias
- Affected version has been set to 2.3.2, yet your screenshots are from a 2.2.x version. Would you please confirm that ...
-
12:00 PM
Bug #6811: pkg_edit.php rowhelper is broken with multiple distinct rowhelpers per page.
- Applied in changeset commit:f92d44da5a4958372c7fb925043abc34588143e3.
-
11:51 AM
Bug #6811 (Feedback): pkg_edit.php rowhelper is broken with multiple distinct rowhelpers per page.
- Changes made to pkg_edit.php appear to have resolved this, but more testing is required. Many packages use rowhelpers...
-
- I hit this exact problem too.
It would be nice to at least improve the error message to state which characters are... -
- First, I really did not intend to start a bikeshedding flame war. :) I honestly thought it would be non-controversia...
-
- In the typical firewall use case, a reboot or halt only happens when there is a problem that needs correcting, which ...
-
- Shrug; not sure how common action is rebooting a NAS:
QNAP: !https://s22.postimg.org/4aznct5kh/Screenshot_1.png! S... -
- Because it's a bikeshed discussion that will never please everyone. Making reboot and halt more accessible is not a g...
-
- I think all the current locations simply suck. Why not have a menu in place of the current logout button that offers ...
-
- I'm hesitant to commit changes to the ordering without lots of testing first, so can you try the attached patch to se...
-
- Here's another example. I only deleted some L2TP users, but the XML has changed for these values (screenshot from Sou...
-
- Whenever I make changes I do "Download configuration as XML" and store the file in a git repository, so I always view...
-
- Applied in changeset commit:2446fffa5932e8debcaf165bfaf5492cea429c60.
-
- Both CloudFlare and GratisDNS used the same logic that Namecheap used to use, which has several potential problems. I...
-
- There is no known consistent single cause. Some have it with nothing else installed, some other pfBlocker, some with ...
-
09:59 AM
Bug #6406: Web process becomes unresponsive producing 502 Bad Gateway nginx
- Sorry to re-hash this, but since it has just been assigned to me I need an update.
Some of the above responses wou... -
09:50 AM
Feature #6753: Interfaces list order not consistent
- Applied in changeset commit:e5d339735836fd55b0fa944d5d7e472793785e30.
-
09:43 AM
Feature #6753 (Feedback): Interfaces list order not consistent
- Sorting has been removed from the Interface menu.
Adding msort to all other occurrences would obviously involve mo... -
09:35 AM Bug #6826: DNS forwarder is sending packets with link-local IPv6 source address to global unicast address
- Thanks. ping is a special case since it is protocol-aware (separate ping, ping6), but it looks like FreeBSD doesn't i...
-
- This appears to be how FreeBSD behaves and is not specific to the DNS resolver or forwarder, the same happens even wi...
-
- Applied in changeset commit:79e50e9768f32b75817a28021d051c79cb44fdec.
-
09:13 AM
Bug #6711 (Closed): diag_states_summary # States and # States twice (explain one is per protocol)
-
- Duplicate of #6406 and others that are all the same base issue: PHP gets wedged and don't respond.
-
- I can reproduce the behavior on 2.3.x. If I adjust the MTU of an assigned interface, only the default and/or link rou...
-
- The two events are not related.
The first is an issue with an IPsec tunnel peer address that was entered as a full... -
02:09 AM Bug #6843: Version inconsistency after updating to 2.3.2_1
- I should add that I've since this was reported upgraded via the command line and it now shows 2.3.2_1 on both pages.
11/03/2016
-
11:00 PM Bug #6892 (Resolved): CARP VIPs Deleted entering CARP Maintenance Mode
- There is an issue both upgrading CARP HA cluster and subsequent entering and leaving CARP maintenance mode.
When e... -
- This debate pops up every now and then and there hasn't been a compelling argument for moving it. Rebooting and shutt...
-
- When I first came to pfSense I had the same trouble finding the Reboot entry and Halt entry.
The flip side to this i... -
- OK. I don't use this so it doesn't effect systems that I have that will be stuck on 2.3.* (32-bit Alix). If it is not...
-
- Given all the work that's happened on 2.4 with IPFW, I'd say it's best to not attempt a backport. 2.4 is not that far...
-
- I guess the fix is in the pf port or...?
Is it something that easily applies back to 2.3.* FreeBSD 10.3 and thus cou... -
- Fixed in 2.4.
-
- Assigned to Pingle for analysis.
-
We would have to provide the ports of the Intel drivers as packages, and then allow people to load the package on d...-
- assigned to Pingle for analysis.
-
08:54 PM Bug #6891: Improper shutdown causes irrecoverable filesystem corruption, unable to boot or fsck
- Some related forum threads...
https://forum.pfsense.org/index.php?topic=120019.0
https://forum.pfsense.org/index.ph... -
- I've had this happen 4 times so far that I can remember. That is definitely more than I would like but out of ~85 fi...
-
07:42 PM Bug #6406: Web process becomes unresponsive producing 502 Bad Gateway nginx
- FYI - Still happening on 2.3.2-RELEASE-p1 systems.
-
-
- https://wiki.strongswan.org/projects/strongswan/wiki/PKCS11plugin
no idea what this needs in the GUI, etc.
OP s... -
05:34 PM Bug #6890 (Resolved): PPP service name error
- Hi,
I've just updated a virtual appliance to the new 2.3.2_1 version, and now, i can't add ppp connection (3G backu... -
03:56 PM Bug #1819: DNS Resolver Not Registering DHCP Server Specified Domain Name
- Any updates on this? It also seems to be affecting unbound on 2.3.2-p1. Until this is fixed, perhaps removing the d...
-
- I can't reproduce this. If I create a similar setup, the VIP status is reflected properly on both units.
That said... -
05:45 AM Bug #6887 (Rejected): Carp status widget doesn't work, show wrong IPs status
- In a two nodes cluster with 3 carp IPs, carp widget doesn't show correctly which node is master or backup for each ip...
-
10:21 AM Todo #6889 (Resolved): Improve router mode help text
- *Current*
Select the Operating Mode for the Router Advertisement (RA) Daemon. Use:
Router Only to only advertise th... -
- Don't use a manual "ifconfig-push" line, that's what the "Tunnel Network" option in the override sets up automaticall...
-
09:19 AM Bug #6888 (Rejected): openVPN - Client Specific Overrides
- System: 2.3.2-RELEASE-p1
On WebGUI i put 'ifconfig-push 172.50.0.10 255.255.255.0' but client gets this IP: 172.50... -
07:40 AM Bug #3330: Load Balancer showing wrong Status when using aliases for the port
- Indeed, is still there in 2.3.2-RELEASE-p1, is not assigned to anybody unfortunately and I need to do load balancing ...
11/02/2016
-
-
04:15 PM Feature #6886 (Resolved): Allow Dual-Stack IPSec VPN
- It would be nice to have a third option in the web interface for creating IPSec mobile configs, allowing you to selec...
-
- The logo used on the pfSense web interface should be a scalable vector graphics file (SVG), allowing it to automatica...
-
- Hello,
this seems to be a solid hazard preventing the use of motp based 2 factor auth.
see also https://forum.pfs... -
- I'm new to pfsense, and this is my first bug report. Please be gentle. :)
I had to google how to reboot pfsense, b... -
- This appears to be a general problem with OpenVPN on FreeBSD 11:
https://forums.freebsd.org/threads/58019/
https:...
11/01/2016
-
- PPPoE and L2TP were converted to use mpd5 in commit:8d50c07c8bfdd2692a0c7d3ca3489977b528aecc and commit:2c0a3677de6b6...
-
-
- I pushed a fix for this in package version 0.6.15.
-
-
- I ran some tests and can confirm the issue on 2.4 only.
2.3.3 and 2.4 run the same version of OpenVPN and have ide... -
- when i try to connect to pfsense web interface, there is block entry in firewall log:
lo0 10.10.111.231:81 _(pfsen... -
- dev ovpns7
verb 1
dev-type tun
dev-node /dev/tun7
writepid /var/run/openvpn_server7.pid
#user nobody
#group nob... -
- Still not enough info. Need to know all settings all the way down the page, especially the topology type. Would also ...
-
- it works on 2.3.*
i installed 2.4, and restored config from 2.3.3
openvpn server UDP/TUN
Server mode - Remote Ac... -
- Unless this was a working configuration on a previous version, it's more likely to be a configuration error. There is...
-
- openvpn - UDP/TUN (TAP works)
clients connect to server, in the logs everything is fine, but no access anywhere.
wi... -
- I tested the forwarding of fragmented ICMP and UDP packets and they seem to be working as expected on 2.4.
Could s... -
- Remko Lodder wrote:
> Chris Buechler wrote:
> > I hit this issue with a customer last week. Worked fine after disab... -
04:35 AM Bug #4326: Limiters on firewall rules where NAT applies drop all traffic
- This is a workaround, not a clean solution.
Better than nothing, but a native, specific and definitive resolution is...
10/31/2016
-
-
-
- Looks like it's a classic case of PHP returning "true" for empty() when passed a string of "0". I'll look into it.
-
- Running 2.4, bsnmpd will consume all available CPU time when the hostres module is active. The CPU usage for geom als...
-
12:19 PM Bug #4723: Can't forward UDP fragmented packets with scrubbing enabled.
- Remko Lodder wrote:
> Chris Buechler wrote:
> > I hit this issue with a customer last week. Worked fine after disab... -
- Confirmed in 2.2.6 and 2.3.2_1 64bit.
-
07:12 AM Feature #6881 (Duplicate): services_unbound_host_edit.php: DNS Resolver Add V4 and V6 host override at the same time
- Is there any chance of changing the setup of the Edit Host Overide page so you can add IPv4 and IPv6 addresses for th...
Also available in: Atom