Activity
From 11/08/2016 to 12/07/2016
12/07/2016
-
08:06 PM pfSense Packages Bug #6983: pfBlockerNG-2.1.1_4 requires xmlrpc.inc which is removed or moved
- BBcan177 . wrote:
> Workaround here:
> https://forum.pfsense.org/index.php?topic=120040.0
>
That workaround do... -
06:55 PM Revision 1060378f: Populate the HTTP_PROXY_AUTH env var. Ticket #6949
- 06:09 PM Revision 823b7a1a: Fix #6224 NAT edit - preserve user selections when input errors
- 1) Edit a NAT Port Forward rule, change the destination type to "Network", but do not input any network address/mask....
-
06:09 PM Revision bbe0c513: Merge pull request #3257 from phil-davis/patch-7
- 06:07 PM Revision bb0a0bb2: Feature #3151 Disable gateway monitoring actions
- without disabling gateway monitoring.
This allows the user to continue to monitor the gateway with dpinger, so
they ... -
-
06:01 PM Bug #3973: Route 53 dynamic DNS provider fails to update record
- The use of the UPCERT action in 6751 should address this bug.
-
- Please check next round of 2.3.3 or 2.4.0 snapshots to make sure issue persists with current code
- 03:37 PM Revision f396d2b7: Feature #3151 Disable gateway monitoring actions
- without disabling gateway monitoring.
This allows the user to continue to monitor the gateway with dpinger, so
they ... -
02:38 PM Bug #6994 (Closed): [Portuguese] - Traffic graphs shows overwritten words by traffic values
- Changing language to Brazilian portuguese makes traffic graphs look oddly in dashboard. Larger "Entrada"/"Saida" word...
- 02:32 PM Revision c7cecab8: Fix bandwidth limitation in mac passthrough auth
- (cherry picked from commit aa1c6774927fd6e1b11a9315900035c0e084fd82)
-
-
- (cherry picked from commit 16b163661b1d1a5bcc9a24ce023f7a06c5fb420e)
-
- (cherry picked from commit 260228142573deeb8ef5eaee34c761ca783f8cd3)
-
- (cherry picked from commit 8d8405baf12806a7f09ef8562cfb24f9083809d3)
-
- (cherry picked from commit c46412956fb629a2f7dc94ca2a553444046a39c3)
-
- (cherry picked from commit 166f4a4c67e61334791b43a21845603c1295ab2c)
-
- (cherry picked from commit 616a24828992d37ea67e810dbf9fd84ec80562e7)
-
- (cherry picked from commit cc5adcaa679686e54e4035fa5bc283b1cac085a2)
-
-
01:14 PM Revision e102e1d9: php fatal error logging
- (cherry picked from commit ae3463540ea0a3cc94c18ad9c7b829b2645e8910)
-
-
- I pushed some changes to populate the HTTP_PROXY_AUTH variable and it works for HTTP, but HTTPS does not work using t...
-
12:56 PM Bug #6993 (New): OpenVPN status error during CARP state transition
- Running two devices in HA and have stacked one IP Alias onto the CARP IP. If I bind a OpenVPN server to the IP Alias ...
-
- Merged, thanks!
-
- I'll check it
-
09:42 AM Feature #3151: Disable gateway monitoring actions without disabling gateway monitoring
- I finally remembered and cared enough :)
Pull Request https://github.com/pfsense/pfsense/pull/3259
-
- Merged, thanks!
-
11:42 AM Bug #6992 (Resolved): ZoneEdit DDNS does not update to CARP IP
- When using ZoneEdit Dynamic DNS, using dual wan with a gateway group for failover, ZoneEdit domain gets the WAN/Inter...
-
11:32 AM Bug #6990: DDNS IPs not updating after a system restart
- HE.net has two kinds of service, the DDNS service and the IPv6 tunnel. You must be talking about HE.net Tunnelbroker ...
-
06:02 AM Bug #6990: DDNS IPs not updating after a system restart
- The HE.net looks definitely wrong. As noted there, you should use the Tunnel ID, and NOT hostname.
-
- I'm using a no-ip and a he service. Both of them updating the same wan IPv4 address.
Could you please tell me what e... -
- Opened a ticket upstream:
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=215122 -
- Full config attached, but it's nothing special - default config + static address on WAN + off-subnet gateway.
-
- I was finally able to reproduce this reliably today, and out of 5 failures once I was able to catch what was consumin...
-
-
- PR has been merged, thanks!
-
- Please check next round of 2.3.3 or 2.4.0 snapshots, that contain an updated code, to see if the issue persists
-
- Matt, you mentioned you submitted a Pull Request, what is the #?
-
- Pull Request https://github.com/pfsense/pfsense/pull/3258
12/06/2016
- 07:54 PM Revision a04cc2c5: NAT 1:1 edit - preserve user selections on edit-save with input errors
- 1) Edit a NAT 1:1 rule, change the source and/or destination type to "Network", but do not input any network address/...
-
-
07:48 PM Revision cc99b298: Captive portal: add option to include idle time in total session time
- Add an option to choose whether the time spent idle by a user disconnected for exceeding the idle timeout must be inc...
-
-
07:44 PM Revision 36868398: Add BIND logging to proper facility (Bug #5524)
- Stop the /etc/inc/system.inc patching by dns/pfSense-pkg-bind9 package.
(cherry picked from commit 957ec89e7959e966e8... -
- 05:51 PM Revision 836c858f: Added STARTTLS to LDAP Auth Server Config
- (cherry picked from commit d672403c250556ced61d6eec7c51f5518b5f8c6b)
-
- 05:23 PM Revision f7405cd2: Fix #6224 NAT edit - preserve user selections when input errors
- 1) Edit a NAT Port Forward rule, change the destination type to "Network", but do not input any network address/mask....
-
- 03:47 PM Revision d99ce9cc: NAT 1:1 edit - preserve user selections on edit-save with input errors
- 1) Edit a NAT 1:1 rule, change the source and/or destination type to "Network", but do not input any network address/...
-
- Stop the /etc/inc/system.inc patching by dns/pfSense-pkg-bind9 package.
-
- That was fast, thanks. :)
-
- PRs have been merged. Thanks!
-
- Plus https://github.com/pfsense/FreeBSD-ports/pull/223
-
- https://github.com/pfsense/pfsense/pull/3254
-
-
- 12:10 PM Revision cdcce1c4: Tidy input errors in services_ntpd_acls
- 1) If there are multiple rows with invalid IP addresses then the same message was displayed multiple times. We might ...
-
-
- It would add a lot of complication and also increase the amount of time/processing it would take to notice an upstrea...
-
- See:
https://redmine.pfsense.org/issues/4354
https://redmine.pfsense.org/issues/1189
for past discussion about thi... -
04:43 AM Feature #6989 (Closed): Add second IP to monitoring in "Gateway Monitoring"
- A problem arises when the gateway IP is available but the network behind the gateway is unavailable, or if alternativ...
-
- Pull Request https://github.com/pfsense/pfsense/pull/3257
-
-
- Not vulnerable to those. It was patched in the ports tree by FreeBSD back in July....
-
10:59 AM Bug #6982: Nested Aliases with FQDNs do not populate parent table in some cases
- Here is the aliases export I am using to test. It should match the screenshot above.
-
- IPv6 NPt on its own works, and IPv6 policy routing on its own works, but if traffic hits a rule that sets it on a pat...
-
- Applied in changeset commit:9c8ce38b01fb59dbd474367f77e8de67655f0275.
-
- Alexandre Paradis wrote:
> Would it be logical to Have a dropdown menu directly for Openvpn, and when clicked it wou... -
-
09:22 AM pfSense Packages Bug #5940: Squid Local Authentication fails with passwords >8 characters
- Hi Jim,
I´ve tested with a recent version of the Squid package on amd64 and i386 (I know i386 is nearly dead).
Bo... -
-
- Appears to be fixed: https://github.com/pfsense/FreeBSD-ports/blob/devel/www/pfSense-pkg-squid/files/usr/local/pkg/sq...
-
-
- OSI layer-8 problem as noted above, can be closed.
-
-
- Duplicate of #5594. Squid won't work with CP.
-
-
- Fixed by https://github.com/pfsense/FreeBSD-ports/commit/a6d15b81474396a043df664c2c645356d7718601 AFAICT, please test...
-
-
- In case you enabled "Cache Dynamic Content" and defined something there, then either disable it altogether or pick up...
-
- We are well aware that strongSwan supports it, but it's not that simple. There are other factors to consider such as ...
-
07:44 AM Feature #6384: Allow IPSEC P1 to have 2 peer remote gateway IP addresses to allow VPN failover faster without requiring DDNS
- I'll add my tests since I need this feature as well
strongSwan 5.5.0 which is used in pfSense 2.3 already supports... -
- Not nearly enough detail.
What are the exact types and services used in your Dynamic DNS configuration? You can ob... -
- When the system shuts down and then restarts (for example after a power failure) unsing a DSL connection with PPPoE, ...
-
- Duplicate of / Fixed by #6688
-
-
- No idea what's this patching, certainly not the current code @ https://github.com/pfsense/FreeBSD-ports/blob/devel/ww...
-
- I have no idea why's Squidguard logging something into Squid cache log. This is not a bug in Squid package, and given...
-
-
- Please close this. With Squid disabled, it won't ever start, let alone automatically restart.
-
-
- Fixed by https://github.com/pfsense/FreeBSD-ports/pull/185, can be closed.
-
05:34 AM Bug #6981: IPv6, rc.newwanipv6, flooding log and resets connection periodically
- Sorry, seems like bug #6000 has been deleted and i was not refering to feature #6000
- 04:53 AM Revision 7c7d3605: Tidy input errors in services_ntpd_acls
- 1) If there are multiple rows with invalid IP addresses then the same message was displayed multiple times. We might ...
- 03:29 AM Revision e030050d: Fix unset glxsb
- This bit of upgrade_config code needs a global reference to $config
- 03:17 AM Revision be17e372: Backport Cloudflare and Gratis plus passwords in base64 DynDNS changes
- Note: corresponding change to upgrade_config.inc to come in master to
correctly implement the upgrade_155_to_156 code... -
01:57 AM pfSense Packages Bug #6988 (New): SNORT Package PHP memory error
- Crash report begins. Anonymous machine information:
amd64
10.3-RELEASE-p9
FreeBSD 10.3-RELEASE-p9 #1 5fc1b...
12/05/2016
-
10:42 PM pfSense Packages Bug #6987 (Closed): ntopng needs Google API key for GeoIP map
- ntopng needs to be updated to a version that supports use of a Google API key and the ntopng settings page needs a fi...
-
08:46 PM pfSense Packages Bug #6983: pfBlockerNG-2.1.1_4 requires xmlrpc.inc which is removed or moved
- Workaround here:
https://forum.pfsense.org/index.php?topic=120040.0
Will try to push a fix as time permits. -
04:03 AM pfSense Packages Bug #6983 (Resolved): pfBlockerNG-2.1.1_4 requires xmlrpc.inc which is removed or moved
- Hello,
I'm testing 2.4-BETA x64. Faced an issue with subject package installation:
@Warning: require_once(xmlrpc.... -
- (cherry picked from commit cd2c59c9839e38fa7cbd4ae217fe14883b086145)
-
-
-
07:12 PM Revision b0787bc8: wbr tag needs a css compatibility fix for some browsers
- See comment in the PR
(cherry picked from commit e67157bee85f71929d687e2c03020618f18c8f6d) -
07:11 PM Revision 0b037063: Merge pull request #3159 from stilez/patch-46
- 07:09 PM Revision fc709ad3: [theme] Compact-RED: fix `sortable` table fonts
- (cherry picked from commit f84c1e1ef92e7e69e0eb8672a450a255ee2dfe95)
-
-
05:02 PM Bug #6823: No connectivity after changing link state to UP
- Jim Thompson wrote:
> We would have to provide the ports of the Intel drivers as packages, and then allow people to ... -
-
- 04:09 PM Revision eb44f662: remove bogus debug
- 04:08 PM Revision ac572fc1: remove bogus debug
- 03:47 PM Revision 30735b1e: Fixed #6454
- Fixed #6984
- 03:45 PM Revision 3b1c0951: Fixed #6454
- Fixed #6984
-
- Thanks as well.
(As for Status - NTP, AFAICT that'd require completely rewriting the code because of the "wonderf... -
- PR has been merged, thanks!
-
- Rules in the ruleset have reply-to, but any rules matching inbound traffic on non-default WANs fail to fully establis...
-
- As noted in the linked commit, it's not fixable in any reasonable way: https://github.com/pfsense/FreeBSD-ports/commi...
-
-
- Fixed in 3.0_10, please close.
-
-
- Obsolete unmaintained 2.2.x stuff, please close.
-
- Network Prefix Translation rules that worked on 2.3.2 are causing a filter reload error on 2.4
Real addresses mask... -
10:45 AM
Bug #6454 (Resolved): services_ntpd_acls.php: Can't change default options without setting custom access restriction
-
- Steve Beaver wrote:
> Applied in changeset commit:3b1c0951ddb913cefcf3aaca301c9a8803a50224.
Works, thanks. -
09:50 AM
Bug #6454 (Feedback): services_ntpd_acls.php: Can't change default options without setting custom access restriction
- Applied in changeset commit:3b1c0951ddb913cefcf3aaca301c9a8803a50224.
-
08:00 AM
Bug #6454: services_ntpd_acls.php: Can't change default options without setting custom access restriction
- Including the page name in the subject is helpful.
-
- More issues with this page noted at #6984
-
- OK... The button now almost fits, plus the issues on the second and third screenshots seem to be indeed fixed.
!ht... -
09:50 AM
Bug #6984: NTP/ACLs - Delete button partially invisible + rowhelper handling broken
- Applied in changeset commit:3b1c0951ddb913cefcf3aaca301c9a8803a50224.
-
09:48 AM
Bug #6984 (Feedback): NTP/ACLs - Delete button partially invisible + rowhelper handling broken
- Both issues fixed in JavaScript
-
- Playing with Delete is apparently lot of fun, also managed to produce this result:
!https://s15.postimg.org/x7rx3x... -
- Beyond #6454 (still unfixed), there are other issues with this thing, such as:
- the button not fitting the page
... -
- OK, after a bit of clicking, this is definitely not limited to aliases, let alone network-type ones. I managed to get...
-
04:17 AM Bug #6981: IPv6, rc.newwanipv6, flooding log and resets connection periodically
- @Marcel
It would be interesting to see what your dhcp6 is doing at the same time, could you post a snippit of both...
12/04/2016
-
- Anyone filling bugs about this package should consider a bounty to get it rewritten from scratch. I guess nothing sho...
-
12:49 PM Bug #6981: IPv6, rc.newwanipv6, flooding log and resets connection periodically
- Thank you Rick Strangman for the reply. I don't think, the issus are similar.
The Update will be scheduled for next ... -
- #6000 is about virtual IP's or am I missing something... quite possible at my age. :)
-
- Does this issue seem similar to bug #6000? If so I can probably help.
Rick -
- Can I make a suggestion. Before you do any major revision updates save a copy of your config file in case you wish to...
-
-
- Bump, this is still not fixed. Please, upgrade to 16.02.
-
01:04 AM Feature #6620: CoDel, FQ-CoDel, PIE and FQ-PIE AQMs
- I think it's late for 2.4, since it's beta.
12/03/2016
-
- Go to System->Updates->Update Settings, change Branch to "Development Snapshots" and save.
Now it will show an upgra... -
- The addresses are not changing. They stay.
What do you preffer or suggest? Updating would be ok for me. Is it possib... -
- Marcel Mayer wrote:
> As you can see here (logfiles attached in threads!)
>
> (English)https://forum.pfsense.org/... -
- As you can see here (logfiles attached in threads!)
(English)https://forum.pfsense.org/index.php?topic=119439.0
... -
- Add an option to choose whether the time spent idle by a user disconnected for exceeding the idle timeout must be inc...
-
- I should add that the only alias present in any rules is groupone. It is on LAN pass IPv4 any from LAN net destinatio...
-
- In some cases a nested alias containing FQDNs does not populate the parent table until filterdns runs again at its in...
- 01:36 PM Revision 45541aae: Form_IpAddress add types remove patterns
- 1) Add alias and host types to Form_IpAddress with the appropriate hover
text.
2) Remove the patterns - the UI of tho... -
-
-
06:42 AM Feature #6620: CoDel, FQ-CoDel, PIE and FQ-PIE AQMs
- bounty request with more forum links https://forum.pfsense.org/index.php?topic=90942.0
-
- forum link
https://forum.pfsense.org/index.php?topic=121198.0 -
- Can we get this added into 2.4 ??
-
04:22 AM Revision 7d4d9ec5: Remove the PHP limit from diag_dump_states(), it is now managed on pfSense_get_pf_state().
-
02:49 AM Bug #6319: DHCP6 DDNS tsig key missing from dhcpv6.conf for reverse zone
- Can someone have another look at this please? IMHO this seems to be a simple fix. Unfortunatelly i don't have the cod...
12/02/2016
-
-
-
-
-
-
-
-
-
- While here, remove some defunct 'range' code that was never used.
-
- (cherry picked from commit e8517c7c16b8a845333c7d0e91f552144e6b5560)
-
- 04:00 PM Revision d7155857: Clarified help text for ddnsforcehostname option.
- (cherry picked from commit 9ca5d4abf949e088d6f1966003a6bf957f3cbdf6)
- 04:00 PM Revision 6a2c8e35: Added title to ddnsforcehostname checkbox
- (cherry picked from commit cfc10a3364fee9ab220b9ada5584bfbe62ba800c)
- 04:00 PM Revision 7b0df184: Removed TODO comment
- (cherry picked from commit a7e3001c740c79da652a9a4d53509e95adaf0c77)
- 04:00 PM Revision e8f2eb8d: Add ddnsforcehostname option to DHCP6 Server configuration editor
- (cherry picked from commit 1a6bda5b389df05d6dac024e8445d3a00e01e823)
- 04:00 PM Revision eeffd48c: Add ddnsforcehostname option to DHCP Server configuration editor
- (cherry picked from commit cf15bcb41f5befb3668f4608aafeddcb8bb18a58)
- 04:00 PM Revision 149575ae: Add ddnsforcehostname option to Static Mapping editor
- (cherry picked from commit 62abab65c9c3fb010862201b327b426b3b9fc3b8)
- 04:00 PM Revision 8960e397: Put DDNS hostname config in the wrong place
- It is relevant to the interface, not just the per-static-mapping DDNS config.
(cherry picked from commit f0cce276a6c... - 04:00 PM Revision 25b18b5d: Implement ddns-hostname option emission for static hosts in services.inc.
- (cherry picked from commit 011f550d9b6d5980bd486af3254b387d3019783b)
-
-
-
-
-
- (cherry picked from commit f3838572c59ea5ebe656851511c75d217afec815)
-
- (cherry picked from commit f3838572c59ea5ebe656851511c75d217afec815)
-
-
- Still missing in OpenVPN 2.3.13
-
- Duplicate of #2766
When OpenVPN properly populates IPv6 addresses in the status output, we can include them in the... -
- Applied in changeset commit:f829a8d3258e377b778ac84a1f2f345b8a79b766.
-
- Fix pushed, will show momentarily.
!http://i.imgur.com/oDe2MhN.png! - 01:46 PM Revision e6fa3b22: Add decoration to "On latest version" message
- 01:10 PM Revision c73a2f31: Revise status messages. Adjust PID file timeout to accommodate slower systems
-
- Applied in changeset commit:63b44eed9eeaa32567c1234c37dbce2e15dc8d37.
-
- Link to the associated PR: https://github.com/pfsense/pfsense/pull/3155
-
- Applied in changeset commit:bb6d61b1028697fe0e9e9a3b91a9b5491654319f.
-
-
11:36 AM Bug #6925: System Update Failed
- Ok ... But I can only update by removing the network cable after midnight and plugging in only on it. But in my netwo...
-
-
- All indications are that this is fixed now, from my own tests and from user feedback.
-
- Applied in changeset commit:80bc583c2365a0df606f409f6526385b1f0d8023.
-
- Works
-
- Applied in changeset commit:3343571b7f4c9c705869798ffc01bf9897d20aa0.
-
- an L2TP WAN dynamic gateway ends in "_", for example "WAN_L2TP1_" when it should end with the type, such as "WAN_L2TP...
-
- Looks good, no sign of mpd4, services still work.
-
-
- Seems to be working.
-
-
- Works better now. If it's left blank, it's assumed to be 0.
-
-
- Looks good, I don't see any left.
-
- Consoles are working on all 2.4 versions.
-
-
- Duplicate of #3393, and Phil's right, that can be done in pfBlocker already.
-
- This can be done with pfBlockerNG - example at https://forum.pfsense.org/index.php?topic=118431.0
A more manual meth... -
03:52 AM Feature #6979 (Duplicate): Create a rule using asn
- Create a rule using ASN
Example: block AS51773 Softonic adware and useless network.
12/01/2016
-
-
-
-
-
-
- Applied in changeset commit:ad477ffafc4491ccc7a9c69686cfdb404e6a7bca.
-
11:54 AM Bug #4479: Firewall rules won't match GRE interface after applying IPSEC transport encryption on GRE tunnel
- Jim Pingle wrote:
> Testing on 2.4 won't be reliable until #6937 is fixed.
Apparently this only affects mobile IP... -
- After some more testing this appears to be a problem only with mobile IPsec, specifically (at least) IKEv2 EAP-RADIUS...
-
11:35 AM Bug #6978 (Not a Bug): Squidguard error page crashing after activating WebGUI PFSENSE https security
- Blocking of pages by the capture of SSL works well, however when it activates the https security of webgui, the page ...
-
12:53 AM Bug #6975: <Hostname> is omitted when sending logs on syslog
- Jim Pingle wrote:
> Remote syslog data doesn't include the hostname, that is up to the receiving log server to handl...
11/30/2016
-
- Thanks, that's a better solution. ;)
-
- I've pushed a fix
-
07:44 PM Bug #5413: Reduce disruptions when changing DNS records from DHCP leases in Unbound
- Michael Marley wrote:
> Unbound is restarted directly by "dhcpleases"
Please post a Github link to the file + lin... -
- With the patch above applied, and "Register DHCP leases in the DNS Resolver" enabled, the Unbound service does not re...
- 04:17 PM Revision 7f927cf4: Correct "not ready" flag
- 04:16 PM Revision 4a140c44: Correct "not ready" flag
- 03:55 PM Revision b4dd9f25: Allow for slower uFW by removing log file before upgrading, and allowing more time for the PID to appear
- 02:47 PM Revision 9ca5d4ab: Clarified help text for ddnsforcehostname option.
- 02:38 PM Revision cfc10a33: Added title to ddnsforcehostname checkbox
- 02:29 PM Revision a7e3001c: Removed TODO comment
-
12:19 PM Bug #6977 (New): VLAN traffic is erroneously counted as underlying iface (untagged) traffic
- On my pfs box I have one port carrying 3 subnets: first untagged and 2 other are VLANs, so the following layout:
igb... -
- Working now
-
- Attempting to store that large of value hits a suhosin variable limit. I updated the description of the ticket to mat...
-
- I can see why it would end up being called twice since in certain combinations of configurations the script would end...
-
03:53 AM Bug #5993: dhcp6c not started until an RA received
- JimP, please look at the last entry here.
-
- Whilst having a look at another issue, the fabled no release on dhcp6c option, I noticed on WAN intergace startup tha...
-
-
08:19 AM Bug #6969: Insufficient error checking on static ARP entries
- Seems fixed in todays 2.4 snapshots.
It won't allow the static DHCP lease to be submitted and the error message giv... -
- Remote syslog data doesn't include the hostname, that is up to the receiving log server to handle.
-
- When sending "filterlog" over syslog the standard defined in https://doc.pfsense.org/index.php/Filter_Log_Format_for_...
-
- This is also a problem on 2.4.
Input validation should prevent an alias from using a name that is already an inter... -
06:21 AM Bug #6976 (Resolved): Interface group and alias with same name creates firewall syntax error
- The firewall fails to reload when using the same name for an alias and interface group.
Steps to reproduce:
1. Cr... -
- PR has been merged
-
04:05 AM pfSense Packages Bug #6763: Squid ClamAv wrong redirect URL
- Frank Pineau wrote:
> I'm seeing the same redirect behavior.
Exact my problem.
So please reopen the issue. @... - 03:33 AM Revision 1a6bda5b: Add ddnsforcehostname option to DHCP6 Server configuration editor
- 03:30 AM Revision cf15bcb4: Add ddnsforcehostname option to DHCP Server configuration editor
- 03:21 AM Revision 62abab65: Add ddnsforcehostname option to Static Mapping editor
- 03:14 AM Revision f0cce276: Put DDNS hostname config in the wrong place
- It is relevant to the interface, not just the per-static-mapping DDNS config.
-
- After much head scratching about why devices are not getting v6 IPs any more, nothing short of disabling it on the di...
- 02:55 AM Revision 011f550d: Implement ddns-hostname option emission for static hosts in services.inc.
11/29/2016
-
07:34 PM pfSense Packages Bug #6763: Squid ClamAv wrong redirect URL
- I'm seeing the same redirect behavior. I can confirm that changing the GUI does update the squidclamav.conf file as i...
-
-
-
-
- Yet another Chris left so the bug went into an unassigned state.
JimP please verify, and assign back to me if we c... -
-
-
- 04:57 PM Revision 04fe6f00: Update setup_wizard.xml
- (cherry picked from commit b0b2af901f352dbbaad0b09d06fe7adb105ff7a4)
- 04:57 PM Revision 04d7836b: LAN IP validation logic
- (cherry picked from commit 6a365a4c80aced41ec87ad93ed2c986d9935a4ea)
- 04:57 PM Revision d1a4cb8d: Update setup_wizard.xml
- (cherry picked from commit 3ad0f9b63f690f77cf8c4d398b521eba6909f0bc)
- 04:57 PM Revision ab5f464a: update conditional re:LAN dhcp
- (cherry picked from commit 0eb2512f93c7e187511ea258948715c2e230e98f)
- 04:57 PM Revision bdffccfd: update LAN regex for case insensitivity
- (cherry picked from commit 32980f321e854bf008efa04ee9187553231b6423)
-
- 04:53 PM Revision 4a77c4ea: - added support for duiadns.net ipv4 and ipv6
- (cherry picked from commit 19b7263e859243adfcf6588533cb47b4c768765e)
-
- 04:40 PM Revision 6cade780: IPv6 address can contain a dot
- When requiring the entry of an IPv6 address, the regex pattern should still allow a dot, so that an IPv6 address can ...
-
-
- When a user is disconnected by the administrator using the pfSense captive portal status page or widget set the value...
-
- 04:33 PM Revision 7b861bce: clarified input format hint for expiration date
- (cherry picked from commit 98b87cfafe8a890787ca5d22a1089678b9b250ac)
-
-
- 02:47 PM Revision 98b87cfa: clarified input format hint for expiration date
-
- When a user is disconnected by the administrator using the pfSense captive portal status page or widget set the value...
-
-
- The cert case is much simpler since there is a field for that directly. All the code has to check for is that the cer...
-
- Jim Pingle wrote:
> That would require some more work to detect if it's the GUI cert's issuer.
Hmmm well, that al... -
- That would require some more work to detect if it's the GUI cert's issuer, and the GUI cert could be self-signed, sin...
-
- Looks pretty good. CA in use detection works (tested with OpenVPN server, IPsec and LDAP), plus can no longer be dele...
-
- Applied in changeset commit:80080a0c8b5949b1af97d1d49b4cc834d06875cf.
-
- I was unable to reproduce the problem exactly as stated, but I added validation code to prevent incorrect keys from b...
-
- Applied in changeset commit:ab63443a9184f42f6a47907e5f2d3fbab6ff043e.
-
- Testing on 2.4 won't be reliable until #6937 is fixed.
-
- It appears to be worse than before now too.... ICMP doesn't work across the tunnel now either.
-
- Jorge Albarenque wrote:
> I can confirm this still occurs on 2.3.2. Probably worth checking on 2.4 since Chris had m... -
04:47 AM Bug #4479: Firewall rules won't match GRE interface after applying IPSEC transport encryption on GRE tunnel
- I can confirm this still occurs on 2.3.2. Probably worth checking on 2.4 since Chris had mentioned it seemed to be re...
-
- It's still a problem on 2.3 and 2.4...
-
- Applied in changeset commit:7a9c12b3d6e01e11ec0af3a6690a5c3de2fbbd2e.
-
- Duplicate of #2800 which is fixed on 2.4 already.
-
09:22 AM Bug #6973 (Duplicate): OpenVPN fails to verify client certificate when using intermediate CAs to sign server/user certs
- I am using pfSense and OpenVPN with a few intermediate CAs to seperate VPN servers by project:...
-
- It's working well now.
I updated the wiki and book to follow the new requirement, and made a slight adjustment to ... -
- An example:
!https://s14.postimg.org/7fgw3jrxd/aliases_delete_wth.png! -
- I randomly keep getting a nonsensical "Are you sure you wish to?" prompt when deleting networks from network-type al...
11/28/2016
-
- Well, apparently not a package bug.
-
05:31 PM pfSense Packages Bug #6968: Snort VRT Rules Fail to automatically update SSL read error
- Kill Bill wrote:
> You have pfBNG installed and Amazon S3 blocked?
Nope only package I have installed is snort.
... -
- You have pfBNG installed and Amazon S3 blocked?
-
- pfsense version: 2.3.2-RELEASE-p1 (amd64)
Snort Version: 3.2.9.1_14
Automatic update fails with following errors... -
09:14 PM pfSense Packages Bug #6971 (Closed): Interfaces.php: "Reserved Networks" checkboxes not shown
- Using Windows 10 snap window function to resize Firefox to half the display size causes the checkboxes on Reserve Net...
-
- yet another case where we lost track of the bug because Chris just removed himself when he left.
assigned back to ... -
- i think this is a freebsd bug, might be fixed.
-
- please validate and hand back.
-
- they moved because it's better.
but they have a really large environment.
we've known about kea for a while. (... -
- JimP, please verify, and if not valid, close.
If valid, please hand-off to bbcan117 -
- It's already in 2.3.3 snapshots
-
07:57 PM Bug #6970 (Rejected): Update pfSense 2.3 to Unbound 1.5.10
- I noticed the Unbound version pfSense is shipping is a bit old at 1.5.9. The latest release is 1.5.10. The .10 releas...
-
-
-
-
-
-
- Adding a note to clarify: It is OK for "IP address" to be blank/empty if "ARP Table Static Entry" is unchecked.
-
- When creating a static DHCP lease entry the GUI input checking does not prevent checking 'static ARP' without enterin...
-
- Applied in changeset commit:b35fc4331ac78f9459db00be04dc6b077f168593.
-
08:43 AM Bug #6223: IPsec + OpenBGPD fails with "PF_KEY socket: No buffer space available"
- To all having this problem - while there is no fix yet, I have put together a workaround I have been using successful...
-
08:08 AM Bug #6966: Display bug in Status / IPsec / Overview
- Jim Pingle wrote:
> That page outputs what is given to it by strongSwan. Check the output of "ipsec statusall" from ... -
- That page outputs what is given to it by strongSwan. Check the output of "ipsec statusall" from the console when it's...
-
- I have to IPsec tunnels configured. If one goes up, it is reported as both connected and disconnected in two separate...
-
07:41 AM Bug #6967 (Resolved): DH Groups 22, 23, 24 missing from Phase 2 selection GUI
- When configuring IPSec you can select DH Groups 22-24 for Phase 1, but for Phase 2 they are missing from the GUI.
...
11/27/2016
-
- And as for "the GUI does nothing":
!https://s15.postimg.org/fk5zywtsr/clamav_redirect_empty.png!... -
- The default URL is set to the pfSense GUI URL on package install. Simply because that's the only sensible default. Th...
-
- See: https://forum.pfsense.org/index.php?topic=115323.0
-
- Kill Bill wrote:
> Richard Eberhard wrote:
> > I also tried adding a redirect command in the custom squid config: n... -
-
- No bug here, let alone "very high" severity, can be closed. This is configurable in the GUI as shown above.
-
06:28 PM Bug #6223: IPsec + OpenBGPD fails with "PF_KEY socket: No buffer space available"
- Has anyone attempted this with 2.4 beta? I've already burned my downtime allowance testing with 2.3.x versions and va...
-
- Yes, set CN property surprisingly sets CN property. Sigh. Because that's exactly the purpose of the feature. Set != s...
-
- Kill Bill wrote:
> Sorry, but browser thinking a certificate is valid when it's not is NOT a Squid issue. Stop doing... -
-
- Sorry, but browser thinking a certificate is valid when it's not is NOT a Squid issue. Stop doing HTTPS MITM if you h...
-
-
- Ale Feltes wrote:
> I can't see issue's status control. I can only add comments.
That was aimed @pfSense guys. :) -
07:06 AM pfSense Packages Bug #5701: Sarg does not delete cron entry
- I can't see issue's status control. I can only add comments.
-
- Package no longer exists in 2.3+, use lightsquid.
Please, close.
-
-
- Package gone, please close.
-
-
- This already works with Avahi as noted above. Please, close this.
-
-
- Cannot be reproduced plus concerns obsolete 2.2.x PBI stuff.
Please, close. -
-
- Package no longer exists in 2.3+, please close.
-
-
- Been already done, can be closed.
https://github.com/pfsense/FreeBSD-ports/commits/devel/sysutils/pfSense-pkg-apcupsd -
-
- Darkstat does not support HTTPS. Cannot be fixed in the package. The issue is HSTS headers set by pfSense nginx. Best...
-
-
- Upstream bug tracker for Squid is at http://bugs.squid-cache.org/describecomponents.cgi?product=Squid - the pfSense p...
-
-
- 2.2.x is dead, plus this would not be a Squid package bug at all. Please, close this.
-
-
- No bug here, can be closed.
-
- It'd seriously help to have a checkbox that'd simply _add_ whatever custom alias(es) to the default passlist, instead...
-
- This is misfiled under Packages product, any changes here would need to be done in pfSense core.
11/26/2016
-
- Well, this still does not work properly at least with bzip2, because:...
- 04:19 PM Revision b0b2af90: Update setup_wizard.xml
-
- There's already #6023 for netmap + shaping.
-
02:12 PM Bug #5649: bce0: Discard frame w/o leading ethernet header (len 0 pkt len 0)
- I believe this issue can now be closed.
After using pci-stub on the Linux host for the two NIC's in question, whic... -
- The policy always gets assigned to the first instance (normally probably WAN) when you either
- use the Import butto... - 10:41 AM Revision b8678b63: IPv6 address can contain a dot
- When requiring the entry of an IPv6 address, the regex pattern should still allow a dot, so that an IPv6 address can ...
-
- https://github.com/pfsense/FreeBSD-ports/pull/220
-
- This got broken again. Together with some other cosmetics, this is fixed by https://github.com/pfsense/FreeBSD-ports/...
11/25/2016
-
10:27 PM Bug #6962: GUI allows selecting missing diffe-helman Paremeters for OpenVPN
- My vote would be either to grey out or remove the missing parameters from the OpenVPN dropdown, or to kick off a back...
-
- The GUI should probably grey out or otherwise note the selections without available files. Or maybe check for @/etc/d...
- 09:04 PM Revision 19b7263e: - added support for duiadns.net ipv4 and ipv6
-
-
-
-
- (cherry picked from commit b77a63948b4bd54f3d2e6e9d3822588105fb5741)
-
-
- (cherry picked from commit 339279415ced4aaaafb96fc14a334a172b8db49f)
-
-
05:05 PM Revision 9e2fa369: Improved error message to explicitly state allowable characters
- Related to Bug #6432.
(cherry picked from commit 3b55b54e9c76998a2b0e28897a0be79d5cf0cb8f) -
- 05:01 PM Revision f968d06d: DHCPv6 ddnsdomainprimary must currently be IPv4
- This field is currently validated to allow only an IPv4 address to be entered, so it may as well be consistent client...
-
- 04:59 PM Revision 19509df3: services_dhcp_edit add extra IPv4 validation
- a) Validate that ipaddr must be IPv4 (note if you enter an IPv6 address, it will fail other later tests of being in t...
-
- 04:48 PM Revision e9544016: Specify the IP address family in interfaces.php
- Where it is known what sort of IP address is required, we can specify it in the call to Form_IpAddress. That will mak...
-
- 04:47 PM Revision 57808367: Keep the rule type selection after input errors on firewall rule
- If the user:
a) Edit a firewall rule
b) Select "single host or alias"
c) Enter an invalid IP address that is not an a... -
-
04:45 PM Revision fbcdf576: add All-Inkl to services.class
- (cherry picked from commit 360f3a9011d143944fcd8e5e6b69fced2f9baaf7)
-
- (cherry picked from commit 575b1dcf0bdb28c431fca420d27bdedf579ec9c4)
-
-
- I pushed a fix as stated. Works fine with and without key-based auth. Needs more testing once it hits snaps.
-
- The ssh authentication "keyboard-interactive" method fails on 2.3.2 and 2.4
This is due to the use of @UsePAM no@ ... -
- Duplicate of #6886
11/24/2016
-
- Uhm... generating these "on demand" is a horrible idea. Should be either pre-shipped or user told to do the job. User...
-
- When trying to use a 3072-bit Diffie-Hellman parameter with the OpenVPN server, the following error is logged and the...
-
-
-
- Kinda difficult to come with "pfSense native firewall"-like GUI, considering there's no pattern about what's going to...
-
- See https://github.com/pfsense/FreeBSD-ports/pull/218
-
09:31 AM Feature #6961 (Duplicate): IPv4/IPv6 Dual-Stack IPSEC mobile vpn
- It would be nice to have possibility to create Phase1 IPSec for Mobile Clients - for both IPv4 and IPv6.
Currently... -
07:51 AM Feature #6960: Introduce Kea DHCP as an alternative DHCP server for IPv4 and IPv6
- It looks like Facebook migrated to Kea DHCP. Should be for a good reason [[https://code.facebook.com/posts/8459090588...
-
- I think it would be a good idea to at least take a look at kea dhcp by ISC. It seems to be a much better solution for...
-
-
- Already fixed by https://github.com/pfsense/FreeBSD-ports/commit/5f79e53dcae89bb185279ba2164a99891bb70dfd
-
- Done
-
03:24 AM Bug #6762: "Please match the requested format" error in Chrome when editing certain form fields
- I'm still having this issue.
Norwegian settings in Chromve version 55.0.2883.59
I get the error when trying to ad...
11/23/2016
- 06:47 PM Revision 581aa622: Added addrtolower() to interface pages
- 06:47 PM Revision 5af93827: Added addrtolower() to interface pages
-
-
02:35 PM Bug #6850: FreeBSD 11.0 Route Syntax Change For Non-Local Gateway
- After going into System -> Routing -> Gateways, clicking edit on the current gateway outside the subnet, don't even h...
-
-
- When booting the 2.4 install media, the first screen of the installer offers a "Live CD" choice that is confusing to ...
-
-
12:51 PM
Bug #6958 (Resolved): services_dhcp_relay.php: Needs to be converted to more recent rowhelper standard
- Page still uses the deprecated setIsRepeated() method on the group. We no longer do that.
-
12:18 PM Bug #6957 (Closed): CARP arp reply with wrong src mac
- The problem is same as https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=141023
I find a patch on pfsense/FreeBSD-sr... -
12:01 PM Feature #6956 (New): Allow more control over concurrent logins
- Currently there is a checkbox that allows concurrent logins, or not. I'd like to be able to replace that binary check...
-
- My interfaces：LAN, WAN, WAN2
1、I add IP Alias VIP 155.155.155.155 on WAN2, it's ok. Get the uniqid: 5831b1cbbbdcd
... -
- The new installer has a number of useful options but there is no choice that replicates the "Quick/Easy Install" opti...
-
- After discussed it, we decided to let user create wireless clone interface before assign it and remove any special tr...
-
- It works on the latest CE snapshot from overnight, but there is one regression from the previous behavior. At the mom...
-
- Kill Bill wrote:
> I guess you produced a typo in the latest commit.
>
> [...]
>
> https://github.com/pfsense/... -
- Steps to reproduce:
* have existing internal CA
* import external CA (in my case, signed by the internal CA but g... -
- Steps to reproduce:
* Import external CA
* Do not set "Serial for next certificate"
* Try to create a user certi... -
11/22/2016
-
-
-
- I guess you produced a typo in the latest commit....
-
-
- Wow, this is much better than before, shows complete progress output now. 8-) Thanks.
-
- 03:45 PM Revision 499ff8fc: Added addrtolower calls to force IPv6 addresses to lower case
- First of many
- 03:45 PM Revision 5100064f: Added addrtolower calls to force IPv6 addresses to lower case
- First of many
-
09:51 AM
Bug #6864 (Assigned): Error checking rejects IPv6 addresses with upper case A-F.
- Force IPv6 to lowercase via addrtolower() has been added to:
firewall_aliases_edit.php
firewall_rules_edit.php
... -
09:48 AM
Bug #6918 (Closed): Javascript Lowercase for IPv6 addresses prevents use of aliases with capital letters
- Closed in favor of #6864
-
- What happens if you use www.xn--bcher-kva.ch as the name to block in the rule?
Is that effective?
I wonder if pf ... -
- Most likely it's a configuration issue and not a bug. It's best to discuss this on the forum before opening a bug rep...
-
- What appears in /var/dhcpd/etc/dhcpd.conf ?
When I put specific DNS servers in there, I get a line like:
option dom... -
- The only way to disable the auto config backup package after the credentials have been entered is to uninstall it. Th...
-
- The 'Backup Now' function always reports 'Backup completed successfully.' even if the backup to the server failed. If...
-
- Fixed by #6900
-
02:23 AM pfSense Packages Bug #6410: when PFSENSE after server restart,openvpn+motp not login
- SOLVED: Did update with Version freeradius2 1.7.4 and everything runs fine now
-
-
11/21/2016
- 07:37 PM Revision 028596d8: Revise filter_reload page to display entire reload_filter_status contents, not just last line
- 07:36 PM Revision d00157df: Revise filter_reload page to display entire reload_filter_status contents, not just last line
- 06:58 PM Revision 71b86385: Revise shaper wizards to support multi-line filter_reload_status
- 06:57 PM Revision de1425d9: Revise shaper wizards to support multi-line filter_reload_status
- 06:54 PM Revision 5bf9c6f7: Revise update_filter_relaod_status() function to append status messages rather than overwrite the file
- 06:53 PM Revision 4f7956ad: Revise update_filter_relaod_status() function to append status messages rather than overwrite the file
- 04:49 PM Revision df995721: Merge branch 'master' of git.netgate.com:pfsense/pfsense
- 04:47 PM Revision a7391526: Fixed #6922
- Added code for IPv6 Dynamic DNS
- 04:46 PM Revision 707e1ac2: Fixed #6922
- Added code for IPv6 Dynamic DNS
-
-
-
-
- 03:38 PM Revision f6973634: Fixed #6939 by moving CSS only to the two pages that require it
- 03:37 PM Revision dd455f50: Fixed #6939 by moving CSS only to the two pages that require it
-
-
- Thanks for looking into it (it's not like the exact messages would be really critical, but it was an indication of a ...
-
01:43 PM
Bug #6931: Status > Filter Reload page is confusingly worded
- The root cause of the issue was that the filter reload process over-wrote the status file with every message, so ther...
-
11:59 AM
Bug #6931: Status > Filter Reload page is confusingly worded
- The system I was testing on was too fast to notice the intermediate messages. Thanks for pointing that out. Fix coming.
-
- I'm very sure the thing has actually been displaying _real_ activity during reload. Such as, loading the various pack...
-
11:14 AM
Bug #6931: Status > Filter Reload page is confusingly worded
- Previously when visiting the page from the status menu the page would say that it was reloading the filter then after...
-
- Uhm, dunno guys, it appears to me like this made the thing basically no-op? Previously, it's been showing what's goin...
-
-
-
10:58 AM
Bug #6922 (Resolved): Dynamic DNS widget broken with Custom v6 entries
-
- Works, thanks.
!https://s22.postimg.org/kxalm38rl/screenshot_dyndns_widget.png! -
10:54 AM
Bug #6922: Dynamic DNS widget broken with Custom v6 entries
- Added code to handle IPv6 (cache file has "_v6" appended)
-
10:50 AM
Bug #6922: Dynamic DNS widget broken with Custom v6 entries
- Applied in changeset commit:a7391526c83a8d4b33e81d730141a4811ae8d482.
-
- ...
-
08:58 AM
Bug #6922 (Feedback): Dynamic DNS widget broken with Custom v6 entries
- Kill Bill,
Could you post or send me the contents of the /cf/conf/*.cache file that pertains to he HEIPV6 entry pl... -
10:57 AM
Bug #6864: Error checking rejects IPv6 addresses with upper case A-F.
- See #6918
A new function has been provided to force IPv6 to lower case on save. This is being added to GUI pages as ... -
-
- Fixed. Dragging below/above the visible window in FW rules works, HAproxy and Status_Traffic_Totals still have the re...
-
09:50 AM
pfSense Packages
Bug #6939: HAproxy - backend server list broken with recent 2.3.3 snapshots
- Applied in changeset pfsense:commit:f6973634c34b34908644e2df17154274d2ab12be.
-
09:40 AM
pfSense Packages
Bug #6939: HAproxy - backend server list broken with recent 2.3.3 snapshots
- Applied in changeset pfsense:commit:dd455f50b7be7957428b0733b5b2c93ccba9e284.
-
09:37 AM
pfSense Packages
Bug #6939 (Feedback): HAproxy - backend server list broken with recent 2.3.3 snapshots
- The scroll gimmick CSS has been removed from the master CSS file, and added only to firewall_rues.php and firewall_na...
-
- Applied in changeset commit:fc84b222e75c9d92e394a2e9ddb80c5ead382f52.
-
09:02 AM
Bug #6903 (Resolved): services_dnsmasq_edit.php: Configuration XML hosts section order appears randomized
-
09:02 AM
Bug #6918: Javascript Lowercase for IPv6 addresses prevents use of aliases with capital letters
- I have added a new function addretolower() to detect if a string is a valid IPv6 address, and if so convert it to low...
-
- That worked, thanks!
I did make one small tweak. Before, we used @kdb.enter.default@ rather than @kdb.enter.panic@... -
- Applied in changeset commit:0529323ff97f81e0203553086df8917aeb5542d3.
-
- Kill Bill wrote:
> Yay!!! Will only be able to test after this weekend; going to post feedback here. Thanks.
!htt... -
02:56 AM Bug #6949 (Resolved): username/password not used by proxy support
- hello,
it seems that username and password is not used for the proxy connection. it works only with IP and port but ... -
- I was able to update. But I had to take the cable out of the router and leave it to pfsense only. Very sensitive. lol...
11/20/2016
-
- I am well aware of DNS's Punycode encoding and of the homograph problem. The former is alas needed for backwards com...
-
- Hmmm... So, that's caused by the bogus empty file at the top, which I never placed there in the first place. NFC how ...
-
- No idea what's this bootstrap nonsense validating where yet again. It is absolutely impossible to input anything ther...
-
- This is beyond uncool. When I accidentally deleted an external (intermediate) CA cert from the CAs tab, it wiped the ...
-
01:08 AM Bug #6946 (Not a Bug): Unable to override dns servers in dhcp server
- Trying to provide specific DNS servers for specific optX network. No matter what I set the dns server fields to, the...
11/19/2016
-
- fixes: https://redmine.pfsense.org/issues/6940
-
- This is how's www.bücher.ch represented in DNS: www.xn--bcher-kva.ch; believe it or not, people do NOT want to deal w...
-
- Thanks for the link. Hopefully they won't reject the bug. Why do you think they would? (You do know that the majo...
-
- Sean McBride wrote:
> Do you know where I should file this upstream then?
https://bugs.freebsd.org/ if you insist... -
- I figured it would be something like that.
Do you know where I should file this upstream then? -
- We are bound by the limits in pf. We can only allow what they allow. (A-Z, a-z, 0-9, and _)
Use the description fi... -
- In Firewalls > Aliases, when creating/editing an alias there is a 'name' field. This field disallows most characters...
-
- Just found this one issue, looks i made a duplicate https://redmine.pfsense.org/issues/6940 , i did implemented the '...
-
- Fixable by: https://github.com/pfsense/pfsense/pull/3236
-
- DDB is there now but something still isn't triggering textdumps. 2.4 has a different /etc/ddb.conf file from the one ...
-
- I quoted a wrong post, however, both the HAproxy and the Status_Traffic_Totals have been fixed by reverting the offen...
-
- Kill Bill wrote:
> I'm not one of those bootstrap guys. :/ Perhaps @sbeaver could help. As for excessively wide drop... -
- I believe such an RFC exists already:
https://tools.ietf.org/html/rfc6151
Section 2: "MD5 is no longer acceptab... -
- There is a problem some users are having with dhcp6c sending a release on exit, in 99% of cases this is not an issue ...
-
01:21 AM Feature #6832: [PATCH] Add the USB ID for the Sierra MC7430
- Thanks, but I don't see it in the @RELENG_2_4@ branch.
11/18/2016
-
- There are known issues with re(4) and spoofed MACs, it isn't always the driver, sometimes it is the chip itself.
Y... -
07:44 PM Bug #6941: VLAN interface does not work unless parent/or vlan interface are in promiscious mode
- Jim Pingle wrote:
> That would be a limit of your specific NIC chip and/or driver. If it's possible to be fixed at a... -
-
-
-
- Reverted after upgrade dhcpd server to 4.3.5
This reverts commit 9dacff7f1b2b89ebebc1e9456d642e0657bb89cc. -
- Reverted after upgrade dhcpd server to 4.3.5
This reverts commit 776692947bda5c867c7f5e60550c3a508760c251. -
- Reverted after upgrade dhcpd server to 4.3.5
This reverts commit 20350989db5d66ffb827beaed5ef5738cd62fc9d. -
- Removed after upgrade dhcpd server to 4.3.5
This reverts commit 318e0383829daac934424879ccfce09395e80025. -
04:08 PM
pfSense Packages
Bug #6939: HAproxy - backend server list broken with recent 2.3.3 snapshots
- I'll take care of it
-
- I'm not one of those bootstrap guys. :/ Perhaps @sbeaver could help. As for excessively wide dropdowns, perhaps this ...
-
- Yah shortening the field lengths would likely help.. but how to do that in a bootstrapped kinda way.?.
-
- Not sure either, the "port" field could definitely be shrunk quite a bit, for starters, though that'd only mitigate t...
-
- There used to be a scrollbar.. Thats hidden now by this fix: https://redmine.pfsense.org/issues/6895
Reverting htt... -
- Still seeing some issues, if I edit anything with the local-gateway even just the description and click apply changes...
-
- Ken Sim wrote:
> Still seeing system lockup on 2.4.0-BETA when dealing with non-local gateways.
I've tried to rep... -
- Already added
-
- I believe the responsible for so many queries is System Information Widget, that checks for upgrades every time it sh...
-
- Yay!!! Will only be able to test after this weekend; going to post feedback here. Thanks.
-
- Patch removed and package updated to 4.3.5 on pfSense 2.3.3 and 2.4.0
-
- Done for 2.3.3 and 2.4.0
-
- Labels are working, GPT was the default, ZFS is working (See #6929). This looks good to me. Closing.
-
- - GPT is now default
- Labels are being used on fstab
- ZFS installation is working as expected -
- option DDB added to pfSense kernel
-
- The amd64 kernel in 2.4 does not contain "options DDB" so textdumps are not working. It does have "options KDB", but ...
-
- It will only show what it finds in DNS, which is what it gets from DHCP static mappings, leases, host overrides, and ...
-
06:18 AM Bug #6942 (Duplicate): Traffic Graph displays wrong local FQDN
- In a configuration with several networks and different local domain names for each network where hosts get their name...
-
07:18 AM Bug #6877: nsCertType "Server" property of a certificate is not detected if additional nsCertType flags are also set
- And in the same spirit, https://github.com/pfsense/pfsense/pull/3234
-
- Done during 2.4 alpha
11/17/2016
-
- That would be a limit of your specific NIC chip and/or driver. If it's possible to be fixed at all, it would have to ...
-
- Hi,
I have a pfsense box with two physical interfaces re0/re1.
My setup is two vlan interfaces defined re0_102 ... - 08:23 PM Revision 0641b626: Fixed #6931
- 08:22 PM Revision d3cb20ce: Fixed #6931
-
06:07 PM Bug #4689: Panic/Crash "sbflush_internal: cc 4294967166 || mb 0 || mbcnt 0"
- I am getting this symptom (crashs) on v2.3.2, multiple times a day:...
-
- Reading this would help to understand why it's not supported.
https://forum.pfsense.org/index.php?topic=87211.msg514... -
02:30 PM
Bug #6931: Status > Filter Reload page is confusingly worded
- Applied in changeset commit:d3cb20cef80a084f162495b5698190405df7a1dd.
-
02:24 PM
Bug #6931 (Feedback): Status > Filter Reload page is confusingly worded
- Page un-uglyfied as requested
-
-
- P.S. Cannot make the window any wider, it's already fullscreen on a full HD monitor, not even F11 helps. :-D
-
- That's the same image I'm running, so it's most likely a problem with the package in general. It's possible there was...
-
- Well, not sure what's current. The box has been upgraded about ~2 hours ago. ...
-
- Is this still the same on a current snapshot? Is it the same if you force a page reload to clear the cache? Make the ...
-
- This definitely used to work, however it got badly broken recently. The SSL checkbox and weight fields are completely...
-
- OpenVPN management socket not listening after bootup
The dashboard shows the following: "Unable to contact daemon ... -
- Jim Pingle wrote:
> One thing I did notice in your original description is that the network config is invalid. You c... -
- Did not mean to remove SSL substring from the check...
-
- See https://redmine.pfsense.org/issues/6877#note-4
-
- Looks good, filter log contains the expected entries now.
-
- We determined this page was OK because it's acceptable for a host override to have zero aliases. Without the button t...
-
- Works, can XMLRPC sync so long as the user has the "System - HA node sync" privilege.
-
08:17 AM Bug #5319: Error message "No config named" in charon daemon
- I can confirm this one too. 2.3.2 in use....
-
- Looks good, thanks for testing!
-
- Works ;)
!https://s15.postimg.org/w34bhj9az/Cert_Manager_Screenshot_Fixed.png! -
- Merged PR
-
- I don't think I've ever seen one with both set, and practically there is rarely if ever a reason to do so. It's worth...
-
- Yeah, this cannot work...
-
- Well, this does not work properly even with the nsCertType set. Example:...
-
-
01:18 AM Bug #6934: /usr/bin/install missing from new 2.4 installations
- I just did a fresh install with the 11/16/16 build. I was able to restore my configuration and all packages installe...
11/16/2016
- 11:29 PM Revision 8cab3470: Revise host and domain sorting so that the index is not lost
- 11:28 PM Revision 589634a9: Revise host and domain sorting so that the index is not lost
-
09:48 PM Bug #6938: DNS with OpenVPN gateway specified is routed through wrong interface. 2.4 regression.
- I've been trying to identify if the same issue exists when setting a DNS entry with a normal WAN gateway (with static...
-
- System -> General Setup -> DNS Server Settings
Setting a DNS with an OpenVPN client gateway (dynamic IP address) is ... - 09:11 PM Revision 4c17e45f: Added addrtolower() function to allow IPv6 addresses to be converted to lower case while preserving aliases or other text
- 09:10 PM Revision f3997278: Added addrtolower() function to allow IPv6 addresses to be converted to lower case while preserving aliases or other text
-
- I have now verified that this is reproducible on 2.4 nightly 20161116-0701.
-
- Moving the start of OpenVPN will undoubtedly have other unintended consequences. What is likely happening here is tha...
-
- Yes.
-
- Do you have System > Advanced, Misc, "Do not create rules when gateway is down" set?
-
- Please note that Status -> Filter Reload also works to properly initialise the rule after boot (as an alternative to ...
-
- *Summary*:
A race condition starting OpenVPN client at boot (rc.bootup) is causing a firewall rule (that is dependen... -
-
- I've already taken everyone off the network, but I can not update only timeout.
((>>> Updating repositories meta... -
-
- This reverts commit d461ff40e364fc0ecc003b9f673cbad7c6a08f2f.
(cherry picked from commit 75bc87fe10f30f49a09218820f7... -
- This reverts commit 9444a281f051e11d5456cc37b2a3f56fc8a7bc33.
(cherry picked from commit 9128641db5c9b6839163948f3f7... -
-
-
-
- Traffic entering enc0 on 2.4 is not creating a state, thus TCP traffic will not pass. ICMP works as the return traffi...
-
-
-
03:37 AM Bug #6935: Rule (which contains a pfBlockerNG URL-Alias) cannot be saved
- Kill Bill wrote:
> Duplicate of Bug #6918
Ups, sorry -
- Duplicate of Bug #6918
-
- I cannot create or edit a Rule which contains a pfBlockerNG (URL-)Alias. The name of the Alias will automatically con...
-
- This reverts commit d461ff40e364fc0ecc003b9f673cbad7c6a08f2f.
-
- This reverts commit 9444a281f051e11d5456cc37b2a3f56fc8a7bc33.
-
- Applied in changeset commit:c0ac85e7408bd34beac586b25a57901dc2c5c885.
11/15/2016
-
11:44 PM Bug #6913: install on Hyper-v R2
- Yes, it works.
Thank you. -
- There were fixes put in today for ZFS and it might have affected other things you're seeing. Try it again on a new sn...
-
- I don't have anything capable of running Hyper-V on Windows Server (R1 or R2) nearby so I can't easily confirm the is...
-
- I just experienced this apparently same crash on 2.4 while running the DSLReports Speedtest. The system crashed afte...
-
- I reverted all these changes until the proper solution is committed.
The 'real' solution here is convert the IPv6 ... -
- There are more related pending PRs that may help, but I was talking to sbeaver earlier and he had some ideas on how i...
-
- I'm sorry but this is *still* broken. I go to Firewall - NAT - Port Forward, there's a rule with an alias called "RAS...
-
- Should be fixed in filterlog-0.1_5.
-
- Nah, Nepal is innocent -- the mirrors have been slow like molasses for some two days or so...
-
- I am also getting this the last day or so. I thought it was related to moving back to Nepal and having slower internet.
-
- 11:45 AM Revision ff3d11c8: DHCPv6 ddnsdomainprimary must currently be IPv4
- This field is currently validated to allow only an IPv4 address to be entered, so it may as well be consistent client...
-
- ZFS now works on CE and Factory snapshots, thanks!
-
- Pushed a fix, please try next round of snapshots
- 11:35 AM Revision 7164c563: services_dhcp_edit add extra IPv4 validation
- a) Validate that ipaddr must be IPv4 (note if you enter an IPv6 address, it will fail other later tests of being in t...
- 10:34 AM Revision 41fc88ec: Specify the IP address family in interfaces.php
- Where it is known what sort of IP address is required, we can specify it in the call to Form_IpAddress. That will mak...
-
- Same as #6643 but it's happening again on 2.4 now.
/usr/bin/install is missing from a fresh install, updating to a... -
- Duplicate of #6768
-
08:07 AM
Bug #6933 (Duplicate): Wrong IPv6 address is served over DNS when static mapping is used with Track6 interface
- I have a router with pfSense 2.3.2 that has several LAN interfaces, each set to Track6 mode to assign IPv6 addresses ...
-
- 1:1 NAT does work for IPv6. It's similar to NPt, but for a single address -- NPt is really just a slightly different ...
-
- At the moment it allows entry of IPv6 addresses. Is that correct? Is the 1:1 NAT feature supposed to work fine with I...
11/14/2016
- 11:00 PM Revision bf2c7206: Fix #6918 Allow aliases with capital letters in rules
- Expand the types of Form_IpAddress so that the caller can specify
exactly what combination of IPv4, IPv6 address and ... - 11:00 PM Revision 8100374e: Fix #6918 Allow aliases with capital letters in rules
- Expand the types of Form_IpAddress so that the caller can specify
exactly what combination of IPv4, IPv6 address and ... -
-
- Please open a forum thread for discussion and diagnosis before opening a bug report. It does work for some people, an...
-
10:11 PM Bug #6932 (Not a Bug): MLPPP
- This feature has been broken for a very long time. I have tested with x64 and x86 and different hardware with no luck...
-
- The way the Filter Reload page is displayed implies that the filter rules are loaded by simply visiting the page.
... -
05:32 PM
Bug #6812: IPsec filterdns crash
- OK these issues have surfaces again this morning. Truth be told, I have no idea what's Ipsec and as far as I know, I...
-
- Applied in changeset commit:9444a281f051e11d5456cc37b2a3f56fc8a7bc33.
-
- The PR looks good, appears to do the proper thing in each case. I just merged it in.
-
03:28 PM pfSense Packages Feature #6651: Loopback interfaces
- Loopback interfaces are a cisco best practice for GRE/IPSec tunnels. I would use them for site-to-site IPSec as an in...
-
- Related forum thread: https://forum.pfsense.org/index.php?topic=121105.0
Basically
- disable the enable DHCP serv... -
- Choosing the ZFS option results in a system that starts to boot, but cannot mount the root slice because it doesn't k...
-
- the problem appears to be fixed in FreeBSD 11.0- *STABLE*
11/13/2016
-
11:13 PM pfSense Packages Bug #6928: freeRADIUS, logging with "Access-Reject" not work in mysql table radpostauth
- for change it - needed uncomment this:
/usr/local/etc/raddb/sites-enabled/default
section post-auth
variable sql
... -
- The table(radpostauth) is recorded only events "Access-Accept".
in the table(radpostauth) needed events "Acces-Reje... -
- 11-stable have fixed this issue
-
- Bug 212721 - FreeBSD 11.0-RC2/RC3/RELEASE fails on Hyper-V 2012r2
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id... - 06:17 PM Revision 9444a281: Fix #6918 Allow aliases with capital letters in rules
- Expand the types of Form_IpAddress so that the caller can specify
exactly what combination of IPv4, IPv6 address and ... - 05:49 PM Revision 38ce4a18: Keep the rule type selection after input errors on firewall rule
- If the user:
a) Edit a firewall rule
b) Select "single host or alias"
c) Enter an invalid IP address that is not an a... -
- "Operation timed out" => when download fails, you cannot upgrade.
-
- >>> Updating repositories metadata...
Updating pfSense-core repository catalogue...
pfSense-core repository is up-... -
- When adding a 1:1 NAT entry it is possible to enter a mix of IPv4 and IPv6 addresses in the various External Internal...
-
- See pull request https://github.com/pfsense/pfsense/pull/3225 for a suggested fix.
-
11:05 AM Bug #6918: Javascript Lowercase for IPv6 addresses prevents use of aliases with capital letters
- Yes. Confirmed on:
2.3.3-DEVELOPMENT (amd64)
built on Fri Nov 11 16:36:08 CST 2016
FreeBSD 10.3-RELEASE-p12
... -
12:17 PM Bug #6926 (New): Miniupnp advertising expired IPv6 address
- Version 2.3.2_1
With WAN set to DHCP6 and LAN set to track interface, the miniupnp service does not get notified i... -
- It's possible something being configured on the previous one made it appear that it failed (e.g. states got reset). I...
-
- I added a new network card and I set up ipv4 and saved it and it was just spinning. Now I added another set and it wa...
-
05:55 AM pfSense Packages Bug #3343: (re)starting freeradius service throws "The command '/usr/local/etc/rc.d/radiusd.sh stop' returned exit code '1', the output was 'radiusd not running?'"
- The problem is, that pfSense restarts the packages it self and also calls the restart method of freeradius itself.
... -
- Bug 213618 - When running as a Hyper-V Guest, FreeBSD 11 networking does not work
https://bugs.freebsd.org/bugzilla...
11/12/2016
-
-
-
- I can't duplicate this here on a current snapshot. The package installs fine.
Make sure you are on a completely up... -
- Fetching pfSense-pkg-nrpe-2.3.1_1.txz: . done
Fetching nrpe-ssl-2.15_6.txz: ... done
Fetching nagios-plugins-2.1.3,... -
- Can you explain in more detail about exactly what you are doing that is failing?
I am able to assign an interface ... -
- Configures all standard parameters prompts to save. But it just keeps rolling.
But by option 2 (Set interface (s) IP... -
- Self-explanatory:
!https://s16.postimg.org/9l1y6nq6t/Screenshot1.png!
!https://s16.postimg.org/t46jg0oyd/Screensh...
11/11/2016
-
11:22 PM Bug #6921 (Not a Bug): Poor speed with Chelsio T420-CR
- I have a Chelsio T420-CR 10gbe NIC in a Supermicro A1SRi-2758f based pfsense router. I get poor speed (~1.2gbps) test...
-
- Base64 encoding works fine here.
-
- Tested on a few systems, works fine.
-
- Applied in changeset commit:fbb652ed28641c50b14b9897a914ed317c323d73.
-
- Tested on a few systems, works fine.
-
- Applied in changeset commit:92a78939583e2be7f7cc52d045bc48a2e2264d1d.
-
- I upgraded a 2.3 VM that had recently had FreeRADIUS installed, but removed. The old freeradius.inc was somehow left ...
-
-
- The filter logs contain information but not enough data:...
-
- 06:45 PM Revision 2909468c: Revert change to row delete button
- 06:44 PM Revision 464a540a: Revert change to row delete button
- 06:39 PM Revision 0a0c6db0: Revert "Suppress delete button if only one row"
- This reverts commit 13be068fe5e1377d1d5649efe0f860ba5c34ba90.
- 06:38 PM Revision b9c0d66d: Revert "Suppress delete button if only one row"
- This reverts commit 75ac7cab1dfb3e8148a27a13369bbb08219e8c3a.
- 04:37 PM Revision 13be068f: Suppress delete button if only one row
- 04:37 PM Revision 75ac7cab: Suppress delete button if only one row
- 04:12 PM Revision af3bf919: Fixed #6916
- 04:11 PM Revision 38fe6f07: Fixed #6916
- 02:01 PM Revision 6a365a4c: LAN IP validation logic
- 01:47 PM Revision c6575378: Revert "Fixed #6811"
- This reverts commit f92d44da5a4958372c7fb925043abc34588143e3.
- 01:40 PM Revision aa66a125: Revert "Fixed #6811"
- This reverts commit f92d44da5a4958372c7fb925043abc34588143e3.
-
- Looks good.
-
- Text is correct now.
-
-
- This appears to have broken the use of Aliases that have names using capital letters. See #6918
-
- It's in the list now for snapshots.
-
- Routing has been fine on 2.4 in every scenario I've tried so far.
-
- Fixed, only one entry is present in the override file now.
-
- New extension loading method is working well.
-
- I've run through several installs lately and this is definitely OK now.
-
- Still missing in OpenVPN 2.3.12
-
- If you have an alias, say "Blah", and try to enter it in a field on a firewall rule, it is automatically translated t...
-
10:21 AM
Bug #6893 (Resolved): Configuration XML is inconsistent with self closing tags
-
10:20 AM
Bug #6916: interfaces_vlan.php: Clicking on "Cancel" deletes VLAN
- Applied in changeset commit:38fe6f07922c8ee6bde81ba1f07ab6ffe380f12b.
-
10:14 AM
Bug #6916 (Feedback): interfaces_vlan.php: Clicking on "Cancel" deletes VLAN
- Automatic confirmation suppressed and manual confirm substituted.
-
- Just another small bug from VLAN delete confirmation dialog (see Bug #5541). If one clicks on trash icon, the delete ...
-
- The update check always has to leave the interface with the default gateway, as any traffic originating from the fire...
-
- Hi guys,
Please add an option to allow the user to choose from what IP or interface the request for updates is out... -
- Works in snapshots that include the fix
-
- Works
-
- Works
-
- Feedback from a customer who was hitting this confirmed it's now working.
-
- Works
-
- Closing for lack of feedback.
-
- Works
-
- It's been 4 years and this hasn't come up again. If someone needs it, they can add these options manually.
-
05:50 AM
Bug #6895 (Resolved): Moving rules does not scroll
-
- Can this pretty please finally get the disastrous patch reverted? Not only it did not fix what it was supposed to fix...
-
03:08 AM pfSense Packages Bug #6736: Snort fails to start after upgrade to 2.3.2-RELEASE
- Get the same issue when updateing from pfSense 2.3.1_5 to 2.3.2_1
In my logs when SNORT tries to start I also get:... -
02:09 AM Bug #6915 (Resolved): unbound logging not working after reboot or "Reset log files"
- After "reboot the machine" or "Status => System Logs => Settings" => "Reset log files" then unbound logs are not s...
11/10/2016
-
11:07 PM Feature #6914 (Resolved): unbound access-control lists
- Hello! In
Services -> DNS Resolver -> Access Lists -> Add -> Actions
we have only 4 options "Deny", "Refuse", "Allo... -
04:04 PM Bug #6099: igmpproxy does not recognize upstream interface
- That's interesting. But unfortunately this is not the case for my system. Swisscom transmits everything on vlan10 and...
- 02:49 PM Revision 3ad0f9b6: Update setup_wizard.xml
-
- The prompt when booting appears to be due to the fact that /var was not cleaned out when switching to RAM disk, and t...
-
- can't install 2.4 on Hyper-V 2012 R2
fix... -
- Better fix is in now, see #6878
-
- Works here, must be something local or site-specific.
-
- Each of these changes was made on 2.4 only, as some assumptions were made that could conflict in some cases (e.g. Nan...
-
- I pushed a change to teach squidGuard to keep its databases in a persistent directory when /var is in RAM. The files ...
-
- Pushed a change for squid to teach clamav to keep its DB in a persistent location if /var is a RAM disk. It doesn't c...
-
- can't install 2.4 on Hyper-v R2 (all updates installed)
fix:... -
- But the details you mention are not solved by this suggestion. The interface is already filled/selected when you crea...
-
11:14 AM Bug #6910: Pre-fill 'interface' field when creating firewall rule on interface -> efficiency
- I mean it constructively, btw, not to whine or something.
-
- I'm assuming people want to work efficient.
What is wrong with copying a field into a field to make sure people do... -
- You're assuming everyone uses it the same way you use it, which isn't the case. Removing functionality to prevent foo...
-
- 1. Button: 'copy'
2. Popup: which fields to change (interface);
3. Save = copied with altered values. -
- Being able to edit the interface allows you to move a rule from one interface to another. (e.g. copy LAN rule, edit L...
-
- Now it is possible to create a firewall rule on a vlan tab, and fill in the wrong interface in that rule. Aside from ...
-
- Thanks for the feedback!
-
- I think you should mark it as "resolved/closed". Thanks!
-
- i have installed 2.4 on hyper-v 2012 R1, set ip. no network.. no ping.. have updated drivers, enabled and disabled hw...
-
- Ticket #5321
(cherry picked from commit 411d4e6e55475cc66b997ca3e47478dbe10b4e1b) - 10:03 AM Revision 1c9bf396: Fix bug where CARP vip status is incorrent in the interface when more
- than one CARP vip is configured for an interface.
(cherry picked from commit 5116a8aa60ad87c0a47aafeca422cc323147ea14) - 10:03 AM Revision 16bdba73: Remove "use lowercase" hint
- As it is no longer relevant, because the code now automatically converts
to lowercase.
(cherry picked from commit 6a... - 10:03 AM Revision 3a66c0da: Fix #6864 automatically convert IPv6 input to lowercase
- 1) As the user leaves the field, or presses Save, onChange will fire and
convert the input string to lowercase. This ... -
- Ticket #5321
(cherry picked from commit 411d4e6e55475cc66b997ca3e47478dbe10b4e1b) - 10:01 AM Revision 5ad69855: Fix bug where CARP vip status is incorrent in the interface when more
- than one CARP vip is configured for an interface.
(cherry picked from commit 5116a8aa60ad87c0a47aafeca422cc323147ea14) -
- Just because it was asked nicely :)
(cherry picked from commit 013110a19b90698cd521fc120b06b7cc37b531e5) -
- (cherry picked from commit f9416ab2bdaae5ca41e70db1c846ab3419fd0cee)
- 10:01 AM Revision b68edd49: Remove "use lowercase" hint
- As it is no longer relevant, because the code now automatically converts
to lowercase.
(cherry picked from commit 6a... - 10:01 AM Revision 6df432c3: Fix #6864 automatically convert IPv6 input to lowercase
- 1) As the user leaves the field, or presses Save, onChange will fire and
convert the input string to lowercase. This ... -
- Example: I want to copy ALL FW rules from VLAN100 to VLAN110 at once.
Then, in that copy, or (see previous issue r... -
- For example: copy one alias (the content of course) into another alias (like in FW rules), sort alias, filter alias, ...
-
11/09/2016
- 11:27 PM Revision 694872ae: Comment typos alphabet
- (cherry picked from commit d622a62eb4f3ec8535ead494a863f10bbc409f41)
- 11:27 PM Revision 2f8f3cb3: Merge pull request #3221 from phil-davis/patch-2
- 11:23 PM Revision d622a62e: Comment typos alphabet
-
10:51 PM Bug #6907 (Duplicate): DNS Resolver does not use domain name set in DHCP subnet, only the global one
- Ran into this myself & found a relevant forum post here: https://forum.pfsense.org/index.php?topic=119717.0
In sho... -
- Many bugs were fixed in 2.4.
2.3.2 is very broken with respect to limiters.
Could you try a recent 2.4 snapshot ? - 07:55 PM Revision 0eb2512f: update conditional re:LAN dhcp
- 06:05 PM Revision b20a6d67: Fix #6899
- (cherry picked from commit c766ac7dd723f6e36980c48b0dd156b492556616)
-
-
- (cherry picked from commit ee908e93671fddb38f8cca5d3d19a28791934878)
-
-
- (cherry picked from commit 4406922edb1000ef79f4fccfb484aa1103105ac0)
-
-
- Found sth on different site:
[[https://sourceforge.net/p/igmpproxy/bugs/4/#472a]]
So for at least with DE-Telekom ... -
- Fixed the snort directories in commit:ce8fedd
Will look into squidGuard soon. -
-
- Checking deeper, @pkg info@ is empty after switching, which explains why the installed packages showed damaged, but a...
-
- I set /tmp and /var to be in RAM on a test box running 2.4 and hit a couple issues:
1. I had two packages installe... - 02:57 PM Revision dcae03a3: Fixed #6903
- hosts and domains sorted on display, not on save to config
- 02:56 PM Revision 8e7fea67: Fixed #6903
- hosts and domains sorted on display, not on save to config
-
02:23 PM
Feature #6881: services_unbound_host_edit.php: DNS Resolver Add V4 and V6 host override at the same time
- In addition any aliases created would have to include both the V4 and V6 addresses.
-
- It is still an issue but it can be easily worked around by adding a floating rule to pass outbound to the destination...
-
- The verify script is in @/usr/local/etc/raddb/scripts/otpverify.sh@ on current versions. The FreeRADIUS package code ...
-
-
- Pull request has been merged. Thanks!
-
- I can reproduce this somewhat here on 2.3.2. With a WAN/LAN style bridge, putting @synproxy@ on a TCP rule will event...
-
- I can't reproduce this here on 2.3.2_1. I can make edits to the bridge and the MAC stays the same and I can still rou...
-
09:00 AM
Bug #6903: services_dnsmasq_edit.php: Configuration XML hosts section order appears randomized
- Applied in changeset commit:8e7fea674a34ab217c9b9821c608639ca45bd281.
-
08:18 AM
Bug #6903 (Feedback): services_dnsmasq_edit.php: Configuration XML hosts section order appears randomized
- It is certainly not "randomized", but since the two tables may be sorted (by clicking the column headers) the hosts c...
-
- The route now appears on the OpenVPN interface as expected, and clients can connect/pass traffic with static addresse...
-
07:57 AM Bug #5319: Error message "No config named" in charon daemon
- I've just been hit by this as well and like the last comment, restarting ipsec from the cmd line fixes the problem fo...
-
- Merge is in commit:b8b0fab1a4ef44758ff7fdd9cbfcc8bab2fe49b9
-
- Merged PR
-
- When trying to perform an XMLRPC between two 2.4 HA systems, the secondary won't accept new settings, believing it ha...
-
- Ticket #6206
-
-
- Dirty patch attached to thread above, restores old behavior...
Correct way would be to determine parent interface ...
11/08/2016
-
- Set parent interface to PRIQ. Set child queue priority to anything greater than 7. Receive "Please select a value tha...
-
09:20 PM
Bug #6779 (Resolved): Traffic shaper wizard uses decimals instead of whole numbers
-
- Looks like fixed.
-
- 06:53 PM Revision e5f9360f: Fixed #6893
- Null configuration settings are now written as <tag></tag> instead of <tag /> for consistency
- 06:53 PM Revision da7054b7: Fixed #6893
- Null configuration settings are now written as <tag></tag> instead of <tag /> for consistency
-
06:07 PM Bug #6903 (Resolved): services_dnsmasq_edit.php: Configuration XML hosts section order appears randomized
- Related to #6893 - when I view the diff of the configuration XML after a change to DNS Resolver's Host Overrides sect...
-
-
- Awesome, thanks for the quick fix!
-
01:00 PM
Bug #6893: Configuration XML is inconsistent with self closing tags
- Applied in changeset commit:da7054b7cf77d9322307c52d8340fb30486ce25e.
-
12:54 PM
Bug #6893 (Feedback): Configuration XML is inconsistent with self closing tags
- Null configuration settings are now written as <tag></tag> instead of <tag /> for consistency
-
- thank you very much!)
-
- I've imported a patch from OpenVPN development list:
https://github.com/pfsense/FreeBSD-ports/commit/153999c431c59... -
- The certificate won't take full effect until the web server is restarted, and restarting the web server from a proces...
-
06:00 AM Bug #6902: webConfigurator not using new certificate and won't disable SSL
- Bob Hannent wrote:
> Restarting the pfSense box has now locked me out of the UI, neither HTTPS or HTTP work now. Sli... -
- Method:
* I had the web UI using the default self-signed certificate and I used an alternate port number just in cas... -
07:38 AM Bug #3075: Can't delete unused Virtual IP "referenced by a least one gateway"
- I've got this error on 2.3.2_1, on a CARP VIP I just added for a test. I'm 100% sure that VIP is not being used for a...
Also available in: Atom