Activity
From 11/13/2016 to 12/12/2016
12/12/2016
-
09:10 PM Revision 089c18f3: Add PC Engines APU2 to the list of serial-only platforms
- The vidconsole needs to be explicitly disabled for PC Engines APU2,
otherwise the comconsole is garbled and mostly un... -
- Based detection on $product rather than $hw_model, because $hw_model
returns the name of the AMD SoC, which might be ... -
08:38 PM Revision f24b6fb6: Encode the auth server list before passing it on the CLI, to avoid issues with special characters that break when interpreted as URL parameters during OpenVPN auth. Fixes #7002
-
-
-
06:44 PM Revision 768037ee: Do not allow a group name to start with 'pkg-', reserve it for packages use (e.g. tinc)
-
-
-
-
-
-
-
-
-
-
-
- Screenshot is fixed.
It may seem absurd to you but what else should it do? There isn't any programmatic way for it... -
03:26 PM Bug #7004: [2.3.3] NAT no longer respects interface selection
- The resolver is answering queries just fine on LAN. Until you set up a NAT rule on WLAN. Sorry, but this behavior is ...
-
- There isn't anything to fix. Logically, it's acting as intended. That's what NAT reflection does -- it redirects anyt...
-
- Well perhaps this should be left open till it's somehow fixed, sending packets coming from completely unrelated inter...
-
- The extra interfaces are coming from NAT reflection and it doesn't appear to be a regression, but a quirk of having r...
-
- !https://s23.postimg.org/53zzev93f/Screenshot.png!
-
- What options do you have configured for NAT Reflection under System > Advanced, Firewall & NAT?
-
- The rule from config.xml:...
-
- I can't reproduce this on current snapshots with 2.3.3 or 2.4, can you show the XML for that rule in config.xml? And ...
-
- Doing this from *LAN* machine (remember, the redirection is supposed to happen on *WLAN*):...
-
- Dunno guys when this regressed, however NAT rules apply on ALL interfaces, no matter what you select. Say, you follow...
-
- Those are a different story entirely and unrelated to this at all. See #4227 (If you set "Networking" and "Message E...
-
- Any attempts on tweaks useful for debugging here are completely useless while IPsec log is being flooding with tons o...
-
01:46 PM Feature #7007 (Resolved): Change default IPsec/strongswan log levels
- It is usually beneficial to set IKE SA, IKE Child SA, and Configuration Backend to logging level "Diag" when troubles...
-
- Applied in changeset commit:c165a17e0225f09afb4882d360ba086f629f2b77.
-
- Applied in changeset commit:e719538c01cde5c444255941655a54134c68f16b.
-
- On 2.4, OpenVPN is unable to authenticate local or remote users. The logs show that the user authenticates successful...
-
- Applied in changeset commit:7ec6e2831fe56514e90fcbd2beb5af52b7054ab6.
-
- I'll handle it
-
12:49 PM Bug #6981: IPv6, rc.newwanipv6, flooding log and resets connection periodically
- DNS Resolver/General - Network Interfaces and Outgoing interfaces = both are set to "All"
Removed dhcpd from monit... -
07:00 AM Bug #6981: IPv6, rc.newwanipv6, flooding log and resets connection periodically
- What do you have selected in DNS Resolver/General - Network Interfaces and Outgoing interfaces?
-
- Some confusing log entrys are still there. See attached file.
-
- Applied in changeset commit:6d40829b6905bf55c238bffc6c779e9bf063297f.
-
- Applied in changeset commit:d4ed1bd9a86a23ff3d4baed97db32eb90cd21947.
-
- Confirmed. To me, I have a fix.
-
08:13 AM Bug #7005 (Resolved): IPsec mss clamping not working for mobile clients
- Doesn't look that mss-clamping is working on a IPsec mobile client setup.
1) In IPSec -> Advanced Settings -> Ena... -
11:41 AM Revision 30bc2971: Update services_captiveportal.php
- fixes https://redmine.pfsense.org/issues/6391
(cherry picked from commit 6ba184a1d6ead4cdbc4369c1a7ddcc820e8ffcce) -
- 11:37 AM Revision b7b72880: Comment typos in itemid.inc
- (cherry picked from commit 632a238f1fb7f0c80e76058563a95bbf6785df53)
-
-
- It works fine on current snapshots when properly configured. Post on the forum for help with your configuration.
-
09:07 AM Bug #7006 (Not a Bug): radius authentication doesn't work
- hello,
the remote authentication seems to be broken.
I configured my company Cisco ACS as authentication server (t... -
- Added as part of PR #3262
-
- PR has been merged, thanks!
-
- PR has been merged
-
- One more thing I noticed - Status/DHCP(v6) Leases, on the contrary, is something that should not be accessible when D...
-
04:19 AM pfSense Packages Feature #6480: pfBlockerNG - add ability to force download of a list
- Hi - would it be possible to revisit this please? The issue with the method proposed above is that, for a long list,...
-
- Marlin Cremers wrote:
> Is there a way for me to at least look at this? Are there particular things I have to keep i... -
02:38 AM Feature #628: Ability to specify listen IP address of management services (SSH, web interface)
- I would love to see this as I'm using pfSense as router and would like to disable the firewall to get greater perform...
12/11/2016
-
- Looks good on a current snapshot
-
- Most likely cause is that the setting isn't being put in place by the new installer
-
12:46 PM Bug #7003 (Resolved): autoboot_delay on 2.4.0
- It seems the autoboot_delay in loader.conf has been set/left at the default 10 seconds. It seems 2.3 and prior have a...
-
-
- Everything seems to be working as expected now with that patch applied. I have played around with the gateways for ab...
-
- fixes https://redmine.pfsense.org/issues/6391
-
- Found the solution for that.
The Leasetable hold two entries (no idea why). After deleting them, everything now work... -
- What I found and confuses me are this lines in general log:
/rc.newwanipv6: The command '/usr/local/sbin/dhcpd -us... -
- I started to do the test today and realised, that IPv6 is working for the moment without the described issue.
Used t... -
- https://github.com/pfsense/FreeBSD-ports/pull/226
-
- Thanks, Phil. And yes, also when migrating the other way round (i.e., when moving your DHCP to pfSense), you want to ...
12/10/2016
-
11:49 PM Bug #6997: DHCP/DHCPv6 server GUI should be accessible even if DHCP relay is enabled
- This looks not too hard to do, and will help those who would like to be able to see and manipulate disabled-DHCP-serv...
-
11:36 PM Revision 260f60a9: IPv6, allow DHCP6 client to use a prefix size of /59
-
11:06 PM
Bug #7002 (Resolved): OpenVPN unable to use authentication server with ampersand in descriptive name
- Add LDAP server in System/User Manager/Authentication Servers, include an ampersand in the Descriptive Name. Test aga...
- 10:08 PM Revision 6d587359: Improve input validation for services_dhcp_relay
- While looking at interactions between DHCP Relay and DHCP Server, I noticed a few annoying/inconsistent things in dri...
- 10:05 PM Revision ad7bdc9b: Merge pull request #3265 from phil-davis/patch-5
- 02:27 PM Revision ac999f3b: Improve input validation for services_dhcp_relay
- While looking at interactions between DHCP Relay and DHCP Server, I noticed a few annoying/inconsistent things in dri...
-
- Attempts to import just the public key portion of a certificate authority errors out because a private key is not pre...
-
12:55 PM Bug #1819: DNS Resolver Not Registering DHCP Server Specified Domain Name
- Well nobody's assigned to it and it's a 5 year old ticket. Last few comments were from Chris and he works for Ubiquit...
- 09:53 AM Revision 632a238f: Comment typos in itemid.inc
-
- Reference:
- http://www.ntop.org/ntopng/exploring-historical-data-using-ntopng/
- http://www.ntop.org/ntopng/explor... -
- I updated a test cluster to a snapshot from a couple hours ago, which from the timestamp looks like it should have th...
-
- Unable to submit anything via GitHub (server error 500 since yesterday). If it works for someone:...
-
- This is caused by the admin user not being a member of "administrator" group. Related forum thread: https://forum.pfs...
-
05:13 AM Revision ca8ab3c9: Add a gateway state plugin hook.
- Pull Request #3093
-
- Ticket #6985
12/09/2016
-
11:28 PM Revision a3ed7862: move export button to heading for status monitoring page
-
-
- 2.4 has a few new fixes for use-after-free pfsync states. The limiters issue is also fixed.
-
11:11 PM pfSense Packages Bug #6983: pfBlockerNG-2.1.1_4 requires xmlrpc.inc which is removed or moved
- Angel Torres, best to post in the forum for that... Not related to this issue..
Maybe this is causing your issue? ... -
- Fixed the parsing issue on pf (and reverted the workaround): https://github.com/pfsense/FreeBSD-src/commit/e4a708b0c1...
-
-
- Respect disabled field when creating firewall associated rule
-
- Introduce toggle_id() used to enable/disable associated firewall rules
-
-
-
-
-
-
- Respect disabled field when creating firewall associated rule
-
- Introduce toggle_id() used to enable/disable associated firewall rules
-
-
-
-
- 07:46 PM Revision cdec7893: Rule type icon should not change to 'X' when disabled
-
-
-
-
-
- 05:25 PM Revision 898aa92c: Change (assign) to Assignments in Interfaces menu
- Add HTML divider in Interfaces menu to separate actions form the interface list
-
- Result after patching:
!https://s30.postimg.org/m3vi0pxy9/ntopng_geomap.png! -
- Well... this additionally need a patch to the ntopng port itself (basically the one from https://github.com/ntop/ntop...
-
- Please, test the attached patch and report back. (Would like to submit a PR on GitHub, however the only thing that Gi...
- 04:41 PM Revision 8638429a: Fix log file deletion
- 04:35 PM Revision 8d8b2fc7: Fix log file deletion
-
-
-
- Applied in changeset commit:be1bc233931122a67821bee7e02778f7c5138779.
-
- Simple build process:
Clone from https://github.com/simplepie/simplepie.git
run "php build/compile.php" from inside... -
-
- Works, hooray! Thanks. Reminds me it's Friday -> time for some:
!http://cdn.pcwallart.com/images/homer-simpson-bee... -
- Applied in changeset commit:803c97685fef85f35a6cf781143259458486c34a.
-
- https://github.com/pfsense/pfsense/pull/3263 (kindly commit to 2.3.x as well). Thanks.
-
- Exact same issue as Bug #4558. The traffic is getting blocked since $dhcrelaycfg is nowhere defined.
-
- It works well for me now, I can run the route command by hand and also apply settings in the GUI. Assigning back to t...
-
09:44 AM
pfSense Packages
Bug #6971 (Closed): Interfaces.php: "Reserved Networks" checkboxes not shown
- This issue appears to be limited to FireFox, but also seems to be fixed on pfSense 2.3.3 and later.
-
-
- Works.
-
- So, I wanted to copy the DHCP static leases from the GUI. Cannot do, since all I get is _"DHCP Relay is currently ena...
-
-
- All working now.
-
-
- 2.2.x packages are not maintained, please close.
-
- 1/ Dansguardian does not even exist as a pfSense package in 2.3.x.
2/ Whatever are you doing there, you cannot have... -
06:04 AM Bug #6978: Squidguard error page crashing after activating WebGUI PFSENSE https security
- I believe in something about dansguardian
If I'm wrong, please close the ticket. -
I believe in something about dansguardian
12/08/2016
-
- Send by mail.
-
- Pi Ba wrote:
> My setup 'at work' running on ESXi has 5 openvpn instances running on a carp-ip. Its connected to sev... -
- My setup 'at work' running on ESXi has 5 openvpn instances running on a carp-ip. Its connected to several networks/vl...
-
- Can you give us more details about your setup? I couldn't replicate it on a box with some tunnels configured
-
- Luiz, when you are touching it, it would be nice to add code on PHP side to deal with interface in tentative state so...
-
- Luiz pushed a fix for that deadlock. Next round of 2.4.0 snapshots will have it applied so we can test
https://git... -
- During boot local_sync_acocunts() should be able to access LDAP server
on a non-local network or also resolve LDAP se... -
- During boot local_sync_acocunts() should be able to access LDAP server
on a non-local network or also resolve LDAP se... - 11:52 AM Revision 8b82942f: Specify IP to set for zoneedit
- (cherry picked from commit 176d24e1206586cc67888bcbd3a4d947f043a187)
-
- 11:32 AM Revision 176d24e1: Specify IP to set for zoneedit
- 11:27 AM Revision eee6c580: Remove destination self from NAT 1:1
- It is not needed and caused problems if used and was not remembered on
edit anyway.
(cherry picked from commit 6b8f9... -
-
- There is no SquidAnalyzer anywhere in pfSense packages. If you are unable to secure random third-party stuff properly...
-
- There is no pfSense package by that name.
Furthermore, any package that runs its own daemon on an alternate port h... -
07:23 AM Bug #6995: Security Issue - SquidAnalyzer
- If you open the URL directly, +access is accomplished *without* authentication+.
-
- I found this flaw when I was testing SquidAnalyzer.
I noticed that it is possible to access the URL of the package... -
- It happened at some point but I couldn't reproduce it anymore. Leaving ticket in feedback state for now
-
- I've pushed a fix for #6857 that should fix it
-
- Applied in changeset commit:4c6135c288444be99fbf18915e0e09d1d865ae25.
-
-
- If ldap server is configured using hostname and it depends of local DNS resolver it also fails
-
- It's possible but doesn't sound quite the same. Here's a capture of the initial exchange I grabbed yesterday where th...
-
- @jimp: Perhaps this is relevant to HTTPS not working?
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=194483 -
- PR has been merged. Thanks!
-
- Maybe sending the proper "dnsto" parameter to Zoneedit will fix this, see Pull Request:
https://github.com/pfsense/p... - 03:24 AM Revision 6b8f9c35: Remove destination self from NAT 1:1
- It is not needed and caused problems if used and was not remembered on
edit anyway.
12/07/2016
-
08:06 PM pfSense Packages Bug #6983: pfBlockerNG-2.1.1_4 requires xmlrpc.inc which is removed or moved
- BBcan177 . wrote:
> Workaround here:
> https://forum.pfsense.org/index.php?topic=120040.0
>
That workaround do... -
- 06:09 PM Revision 823b7a1a: Fix #6224 NAT edit - preserve user selections when input errors
- 1) Edit a NAT Port Forward rule, change the destination type to "Network", but do not input any network address/mask....
-
- 06:07 PM Revision bb0a0bb2: Feature #3151 Disable gateway monitoring actions
- without disabling gateway monitoring.
This allows the user to continue to monitor the gateway with dpinger, so
they ... -
-
06:01 PM Bug #3973: Route 53 dynamic DNS provider fails to update record
- The use of the UPCERT action in 6751 should address this bug.
-
- Please check next round of 2.3.3 or 2.4.0 snapshots to make sure issue persists with current code
- 03:37 PM Revision f396d2b7: Feature #3151 Disable gateway monitoring actions
- without disabling gateway monitoring.
This allows the user to continue to monitor the gateway with dpinger, so
they ... -
02:38 PM Bug #6994 (Closed): [Portuguese] - Traffic graphs shows overwritten words by traffic values
- Changing language to Brazilian portuguese makes traffic graphs look oddly in dashboard. Larger "Entrada"/"Saida" word...
- 02:32 PM Revision c7cecab8: Fix bandwidth limitation in mac passthrough auth
- (cherry picked from commit aa1c6774927fd6e1b11a9315900035c0e084fd82)
-
-
- (cherry picked from commit 16b163661b1d1a5bcc9a24ce023f7a06c5fb420e)
-
- (cherry picked from commit 260228142573deeb8ef5eaee34c761ca783f8cd3)
-
- (cherry picked from commit 8d8405baf12806a7f09ef8562cfb24f9083809d3)
-
- (cherry picked from commit c46412956fb629a2f7dc94ca2a553444046a39c3)
-
- (cherry picked from commit 166f4a4c67e61334791b43a21845603c1295ab2c)
-
- (cherry picked from commit 616a24828992d37ea67e810dbf9fd84ec80562e7)
-
- (cherry picked from commit cc5adcaa679686e54e4035fa5bc283b1cac085a2)
-
-
- (cherry picked from commit ae3463540ea0a3cc94c18ad9c7b829b2645e8910)
-
-
- I pushed some changes to populate the HTTP_PROXY_AUTH variable and it works for HTTP, but HTTPS does not work using t...
-
12:56 PM Bug #6993 (New): OpenVPN status error during CARP state transition
- Running two devices in HA and have stacked one IP Alias onto the CARP IP. If I bind a OpenVPN server to the IP Alias ...
-
- Merged, thanks!
-
- I'll check it
-
- I finally remembered and cared enough :)
Pull Request https://github.com/pfsense/pfsense/pull/3259
-
- Merged, thanks!
-
11:42 AM Bug #6992 (Resolved): ZoneEdit DDNS does not update to CARP IP
- When using ZoneEdit Dynamic DNS, using dual wan with a gateway group for failover, ZoneEdit domain gets the WAN/Inter...
-
11:32 AM Bug #6990: DDNS IPs not updating after a system restart
- HE.net has two kinds of service, the DDNS service and the IPv6 tunnel. You must be talking about HE.net Tunnelbroker ...
-
- The HE.net looks definitely wrong. As noted there, you should use the Tunnel ID, and NOT hostname.
-
- I'm using a no-ip and a he service. Both of them updating the same wan IPv4 address.
Could you please tell me what e... -
- Opened a ticket upstream:
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=215122 -
- Full config attached, but it's nothing special - default config + static address on WAN + off-subnet gateway.
-
- I was finally able to reproduce this reliably today, and out of 5 failures once I was able to catch what was consumin...
-
-
- PR has been merged, thanks!
-
- Please check next round of 2.3.3 or 2.4.0 snapshots, that contain an updated code, to see if the issue persists
-
- Matt, you mentioned you submitted a Pull Request, what is the #?
-
- Pull Request https://github.com/pfsense/pfsense/pull/3258
12/06/2016
- 07:54 PM Revision a04cc2c5: NAT 1:1 edit - preserve user selections on edit-save with input errors
- 1) Edit a NAT 1:1 rule, change the source and/or destination type to "Network", but do not input any network address/...
-
-
07:48 PM Revision cc99b298: Captive portal: add option to include idle time in total session time
- Add an option to choose whether the time spent idle by a user disconnected for exceeding the idle timeout must be inc...
-
-
07:44 PM Revision 36868398: Add BIND logging to proper facility (Bug #5524)
- Stop the /etc/inc/system.inc patching by dns/pfSense-pkg-bind9 package.
(cherry picked from commit 957ec89e7959e966e8... -
- 05:51 PM Revision 836c858f: Added STARTTLS to LDAP Auth Server Config
- (cherry picked from commit d672403c250556ced61d6eec7c51f5518b5f8c6b)
-
- 05:23 PM Revision f7405cd2: Fix #6224 NAT edit - preserve user selections when input errors
- 1) Edit a NAT Port Forward rule, change the destination type to "Network", but do not input any network address/mask....
-
- 03:47 PM Revision d99ce9cc: NAT 1:1 edit - preserve user selections on edit-save with input errors
- 1) Edit a NAT 1:1 rule, change the source and/or destination type to "Network", but do not input any network address/...
-
- Stop the /etc/inc/system.inc patching by dns/pfSense-pkg-bind9 package.
-
- That was fast, thanks. :)
-
- PRs have been merged. Thanks!
-
- Plus https://github.com/pfsense/FreeBSD-ports/pull/223
-
- https://github.com/pfsense/pfsense/pull/3254
-
-
- 12:10 PM Revision cdcce1c4: Tidy input errors in services_ntpd_acls
- 1) If there are multiple rows with invalid IP addresses then the same message was displayed multiple times. We might ...
-
-
- It would add a lot of complication and also increase the amount of time/processing it would take to notice an upstrea...
-
- See:
https://redmine.pfsense.org/issues/4354
https://redmine.pfsense.org/issues/1189
for past discussion about thi... -
04:43 AM Feature #6989 (Closed): Add second IP to monitoring in "Gateway Monitoring"
- A problem arises when the gateway IP is available but the network behind the gateway is unavailable, or if alternativ...
-
- Pull Request https://github.com/pfsense/pfsense/pull/3257
-
-
- Not vulnerable to those. It was patched in the ports tree by FreeBSD back in July....
-
- Here is the aliases export I am using to test. It should match the screenshot above.
-
- IPv6 NPt on its own works, and IPv6 policy routing on its own works, but if traffic hits a rule that sets it on a pat...
-
- Applied in changeset commit:9c8ce38b01fb59dbd474367f77e8de67655f0275.
-
- Alexandre Paradis wrote:
> Would it be logical to Have a dropdown menu directly for Openvpn, and when clicked it wou... -
-
09:22 AM pfSense Packages Bug #5940: Squid Local Authentication fails with passwords >8 characters
- Hi Jim,
I´ve tested with a recent version of the Squid package on amd64 and i386 (I know i386 is nearly dead).
Bo... -
-
- Appears to be fixed: https://github.com/pfsense/FreeBSD-ports/blob/devel/www/pfSense-pkg-squid/files/usr/local/pkg/sq...
-
-
- OSI layer-8 problem as noted above, can be closed.
-
-
- Duplicate of #5594. Squid won't work with CP.
-
-
- Fixed by https://github.com/pfsense/FreeBSD-ports/commit/a6d15b81474396a043df664c2c645356d7718601 AFAICT, please test...
-
-
- In case you enabled "Cache Dynamic Content" and defined something there, then either disable it altogether or pick up...
-
- We are well aware that strongSwan supports it, but it's not that simple. There are other factors to consider such as ...
-
07:44 AM Feature #6384: Allow IPSEC P1 to have 2 peer remote gateway IP addresses to allow VPN failover faster without requiring DDNS
- I'll add my tests since I need this feature as well
strongSwan 5.5.0 which is used in pfSense 2.3 already supports... -
- Not nearly enough detail.
What are the exact types and services used in your Dynamic DNS configuration? You can ob... -
- When the system shuts down and then restarts (for example after a power failure) unsing a DSL connection with PPPoE, ...
-
- Duplicate of / Fixed by #6688
-
-
- No idea what's this patching, certainly not the current code @ https://github.com/pfsense/FreeBSD-ports/blob/devel/ww...
-
- I have no idea why's Squidguard logging something into Squid cache log. This is not a bug in Squid package, and given...
-
-
- Please close this. With Squid disabled, it won't ever start, let alone automatically restart.
-
-
- Fixed by https://github.com/pfsense/FreeBSD-ports/pull/185, can be closed.
-
05:34 AM Bug #6981: IPv6, rc.newwanipv6, flooding log and resets connection periodically
- Sorry, seems like bug #6000 has been deleted and i was not refering to feature #6000
- 04:53 AM Revision 7c7d3605: Tidy input errors in services_ntpd_acls
- 1) If there are multiple rows with invalid IP addresses then the same message was displayed multiple times. We might ...
- 03:29 AM Revision e030050d: Fix unset glxsb
- This bit of upgrade_config code needs a global reference to $config
- 03:17 AM Revision be17e372: Backport Cloudflare and Gratis plus passwords in base64 DynDNS changes
- Note: corresponding change to upgrade_config.inc to come in master to
correctly implement the upgrade_155_to_156 code... -
01:57 AM pfSense Packages Bug #6988 (New): SNORT Package PHP memory error
- Crash report begins. Anonymous machine information:
amd64
10.3-RELEASE-p9
FreeBSD 10.3-RELEASE-p9 #1 5fc1b...
12/05/2016
-
10:42 PM pfSense Packages Bug #6987 (Closed): ntopng needs Google API key for GeoIP map
- ntopng needs to be updated to a version that supports use of a Google API key and the ntopng settings page needs a fi...
-
- Workaround here:
https://forum.pfsense.org/index.php?topic=120040.0
Will try to push a fix as time permits. -
04:03 AM pfSense Packages Bug #6983 (Resolved): pfBlockerNG-2.1.1_4 requires xmlrpc.inc which is removed or moved
- Hello,
I'm testing 2.4-BETA x64. Faced an issue with subject package installation:
@Warning: require_once(xmlrpc.... -
- (cherry picked from commit cd2c59c9839e38fa7cbd4ae217fe14883b086145)
-
-
-
07:12 PM Revision b0787bc8: wbr tag needs a css compatibility fix for some browsers
- See comment in the PR
(cherry picked from commit e67157bee85f71929d687e2c03020618f18c8f6d) -
- 07:09 PM Revision fc709ad3: [theme] Compact-RED: fix `sortable` table fonts
- (cherry picked from commit f84c1e1ef92e7e69e0eb8672a450a255ee2dfe95)
-
-
05:02 PM Bug #6823: No connectivity after changing link state to UP
- Jim Thompson wrote:
> We would have to provide the ports of the Intel drivers as packages, and then allow people to ... -
-
- 04:09 PM Revision eb44f662: remove bogus debug
- 04:08 PM Revision ac572fc1: remove bogus debug
- 03:47 PM Revision 30735b1e: Fixed #6454
- Fixed #6984
- 03:45 PM Revision 3b1c0951: Fixed #6454
- Fixed #6984
-
- Thanks as well.
(As for Status - NTP, AFAICT that'd require completely rewriting the code because of the "wonderf... -
- PR has been merged, thanks!
-
- Rules in the ruleset have reply-to, but any rules matching inbound traffic on non-default WANs fail to fully establis...
-
- As noted in the linked commit, it's not fixable in any reasonable way: https://github.com/pfsense/FreeBSD-ports/commi...
-
-
- Fixed in 3.0_10, please close.
-
-
- Obsolete unmaintained 2.2.x stuff, please close.
-
- Network Prefix Translation rules that worked on 2.3.2 are causing a filter reload error on 2.4
Real addresses mask... -
10:45 AM
Bug #6454 (Resolved): services_ntpd_acls.php: Can't change default options without setting custom access restriction
-
- Steve Beaver wrote:
> Applied in changeset commit:3b1c0951ddb913cefcf3aaca301c9a8803a50224.
Works, thanks. -
09:50 AM
Bug #6454 (Feedback): services_ntpd_acls.php: Can't change default options without setting custom access restriction
- Applied in changeset commit:3b1c0951ddb913cefcf3aaca301c9a8803a50224.
-
08:00 AM
Bug #6454: services_ntpd_acls.php: Can't change default options without setting custom access restriction
- Including the page name in the subject is helpful.
-
- More issues with this page noted at #6984
-
- OK... The button now almost fits, plus the issues on the second and third screenshots seem to be indeed fixed.
!ht... -
09:50 AM
Bug #6984: NTP/ACLs - Delete button partially invisible + rowhelper handling broken
- Applied in changeset commit:3b1c0951ddb913cefcf3aaca301c9a8803a50224.
-
09:48 AM
Bug #6984 (Feedback): NTP/ACLs - Delete button partially invisible + rowhelper handling broken
- Both issues fixed in JavaScript
-
- Playing with Delete is apparently lot of fun, also managed to produce this result:
!https://s15.postimg.org/x7rx3x... -
- Beyond #6454 (still unfixed), there are other issues with this thing, such as:
- the button not fitting the page
... -
- OK, after a bit of clicking, this is definitely not limited to aliases, let alone network-type ones. I managed to get...
-
- @Marcel
It would be interesting to see what your dhcp6 is doing at the same time, could you post a snippit of both...
12/04/2016
-
- Anyone filling bugs about this package should consider a bounty to get it rewritten from scratch. I guess nothing sho...
-
- Thank you Rick Strangman for the reply. I don't think, the issus are similar.
The Update will be scheduled for next ... -
- #6000 is about virtual IP's or am I missing something... quite possible at my age. :)
-
- Does this issue seem similar to bug #6000? If so I can probably help.
Rick -
- Can I make a suggestion. Before you do any major revision updates save a copy of your config file in case you wish to...
-
-
- Bump, this is still not fixed. Please, upgrade to 16.02.
-
01:04 AM Feature #6620: CoDel, FQ-CoDel, PIE and FQ-PIE AQMs
- I think it's late for 2.4, since it's beta.
12/03/2016
-
- Go to System->Updates->Update Settings, change Branch to "Development Snapshots" and save.
Now it will show an upgra... -
- The addresses are not changing. They stay.
What do you preffer or suggest? Updating would be ok for me. Is it possib... -
- Marcel Mayer wrote:
> As you can see here (logfiles attached in threads!)
>
> (English)https://forum.pfsense.org/... -
- As you can see here (logfiles attached in threads!)
(English)https://forum.pfsense.org/index.php?topic=119439.0
... -
- Add an option to choose whether the time spent idle by a user disconnected for exceeding the idle timeout must be inc...
-
- I should add that the only alias present in any rules is groupone. It is on LAN pass IPv4 any from LAN net destinatio...
-
- In some cases a nested alias containing FQDNs does not populate the parent table until filterdns runs again at its in...
- 01:36 PM Revision 45541aae: Form_IpAddress add types remove patterns
- 1) Add alias and host types to Form_IpAddress with the appropriate hover
text.
2) Remove the patterns - the UI of tho... -
-
-
06:42 AM Feature #6620: CoDel, FQ-CoDel, PIE and FQ-PIE AQMs
- bounty request with more forum links https://forum.pfsense.org/index.php?topic=90942.0
-
- forum link
https://forum.pfsense.org/index.php?topic=121198.0 -
- Can we get this added into 2.4 ??
-
-
02:49 AM Bug #6319: DHCP6 DDNS tsig key missing from dhcpv6.conf for reverse zone
- Can someone have another look at this please? IMHO this seems to be a simple fix. Unfortunatelly i don't have the cod...
12/02/2016
-
-
-
-
-
-
-
-
-
- While here, remove some defunct 'range' code that was never used.
-
- (cherry picked from commit e8517c7c16b8a845333c7d0e91f552144e6b5560)
-
- 04:00 PM Revision d7155857: Clarified help text for ddnsforcehostname option.
- (cherry picked from commit 9ca5d4abf949e088d6f1966003a6bf957f3cbdf6)
- 04:00 PM Revision 6a2c8e35: Added title to ddnsforcehostname checkbox
- (cherry picked from commit cfc10a3364fee9ab220b9ada5584bfbe62ba800c)
- 04:00 PM Revision 7b0df184: Removed TODO comment
- (cherry picked from commit a7e3001c740c79da652a9a4d53509e95adaf0c77)
- 04:00 PM Revision e8f2eb8d: Add ddnsforcehostname option to DHCP6 Server configuration editor
- (cherry picked from commit 1a6bda5b389df05d6dac024e8445d3a00e01e823)
- 04:00 PM Revision eeffd48c: Add ddnsforcehostname option to DHCP Server configuration editor
- (cherry picked from commit cf15bcb41f5befb3668f4608aafeddcb8bb18a58)
- 04:00 PM Revision 149575ae: Add ddnsforcehostname option to Static Mapping editor
- (cherry picked from commit 62abab65c9c3fb010862201b327b426b3b9fc3b8)
- 04:00 PM Revision 8960e397: Put DDNS hostname config in the wrong place
- It is relevant to the interface, not just the per-static-mapping DDNS config.
(cherry picked from commit f0cce276a6c... - 04:00 PM Revision 25b18b5d: Implement ddns-hostname option emission for static hosts in services.inc.
- (cherry picked from commit 011f550d9b6d5980bd486af3254b387d3019783b)
-
-
-
-
-
- (cherry picked from commit f3838572c59ea5ebe656851511c75d217afec815)
-
- (cherry picked from commit f3838572c59ea5ebe656851511c75d217afec815)
-
-
- Still missing in OpenVPN 2.3.13
-
- Duplicate of #2766
When OpenVPN properly populates IPv6 addresses in the status output, we can include them in the... -
- Applied in changeset commit:f829a8d3258e377b778ac84a1f2f345b8a79b766.
-
- Fix pushed, will show momentarily.
!http://i.imgur.com/oDe2MhN.png! - 01:46 PM Revision e6fa3b22: Add decoration to "On latest version" message
- 01:10 PM Revision c73a2f31: Revise status messages. Adjust PID file timeout to accommodate slower systems
-
- Applied in changeset commit:63b44eed9eeaa32567c1234c37dbce2e15dc8d37.
-
- Link to the associated PR: https://github.com/pfsense/pfsense/pull/3155
-
- Applied in changeset commit:bb6d61b1028697fe0e9e9a3b91a9b5491654319f.
-
-
11:36 AM Bug #6925: System Update Failed
- Ok ... But I can only update by removing the network cable after midnight and plugging in only on it. But in my netwo...
-
-
- All indications are that this is fixed now, from my own tests and from user feedback.
-
- Applied in changeset commit:80bc583c2365a0df606f409f6526385b1f0d8023.
-
- Works
-
- Applied in changeset commit:3343571b7f4c9c705869798ffc01bf9897d20aa0.
-
- an L2TP WAN dynamic gateway ends in "_", for example "WAN_L2TP1_" when it should end with the type, such as "WAN_L2TP...
-
- Looks good, no sign of mpd4, services still work.
-
-
- Seems to be working.
-
-
- Works better now. If it's left blank, it's assumed to be 0.
-
-
- Looks good, I don't see any left.
-
- Consoles are working on all 2.4 versions.
-
-
- Duplicate of #3393, and Phil's right, that can be done in pfBlocker already.
-
- This can be done with pfBlockerNG - example at https://forum.pfsense.org/index.php?topic=118431.0
A more manual meth... -
03:52 AM Feature #6979 (Duplicate): Create a rule using asn
- Create a rule using ASN
Example: block AS51773 Softonic adware and useless network.
12/01/2016
-
-
-
-
-
-
- Applied in changeset commit:ad477ffafc4491ccc7a9c69686cfdb404e6a7bca.
-
11:54 AM Bug #4479: Firewall rules won't match GRE interface after applying IPSEC transport encryption on GRE tunnel
- Jim Pingle wrote:
> Testing on 2.4 won't be reliable until #6937 is fixed.
Apparently this only affects mobile IP... -
- After some more testing this appears to be a problem only with mobile IPsec, specifically (at least) IKEv2 EAP-RADIUS...
-
- Blocking of pages by the capture of SSL works well, however when it activates the https security of webgui, the page ...
-
12:53 AM Bug #6975: <Hostname> is omitted when sending logs on syslog
- Jim Pingle wrote:
> Remote syslog data doesn't include the hostname, that is up to the receiving log server to handl...
11/30/2016
-
- Thanks, that's a better solution. ;)
-
- I've pushed a fix
-
07:44 PM Bug #5413: Reduce disruptions when changing DNS records from DHCP leases in Unbound
- Michael Marley wrote:
> Unbound is restarted directly by "dhcpleases"
Please post a Github link to the file + lin... -
- With the patch above applied, and "Register DHCP leases in the DNS Resolver" enabled, the Unbound service does not re...
- 04:17 PM Revision 7f927cf4: Correct "not ready" flag
- 04:16 PM Revision 4a140c44: Correct "not ready" flag
- 03:55 PM Revision b4dd9f25: Allow for slower uFW by removing log file before upgrading, and allowing more time for the PID to appear
- 02:47 PM Revision 9ca5d4ab: Clarified help text for ddnsforcehostname option.
- 02:38 PM Revision cfc10a33: Added title to ddnsforcehostname checkbox
- 02:29 PM Revision a7e3001c: Removed TODO comment
-
12:19 PM Bug #6977 (New): VLAN traffic is erroneously counted as underlying iface (untagged) traffic
- On my pfs box I have one port carrying 3 subnets: first untagged and 2 other are VLANs, so the following layout:
igb... -
- Working now
-
- Attempting to store that large of value hits a suhosin variable limit. I updated the description of the ticket to mat...
-
- I can see why it would end up being called twice since in certain combinations of configurations the script would end...
-
03:53 AM Bug #5993: dhcp6c not started until an RA received
- JimP, please look at the last entry here.
-
- Whilst having a look at another issue, the fabled no release on dhcp6c option, I noticed on WAN intergace startup tha...
-
-
08:19 AM Bug #6969: Insufficient error checking on static ARP entries
- Seems fixed in todays 2.4 snapshots.
It won't allow the static DHCP lease to be submitted and the error message giv... -
- Remote syslog data doesn't include the hostname, that is up to the receiving log server to handle.
-
- When sending "filterlog" over syslog the standard defined in https://doc.pfsense.org/index.php/Filter_Log_Format_for_...
-
- This is also a problem on 2.4.
Input validation should prevent an alias from using a name that is already an inter... -
06:21 AM Bug #6976 (Resolved): Interface group and alias with same name creates firewall syntax error
- The firewall fails to reload when using the same name for an alias and interface group.
Steps to reproduce:
1. Cr... -
- PR has been merged
-
04:05 AM pfSense Packages Bug #6763: Squid ClamAv wrong redirect URL
- Frank Pineau wrote:
> I'm seeing the same redirect behavior.
Exact my problem.
So please reopen the issue. @... - 03:33 AM Revision 1a6bda5b: Add ddnsforcehostname option to DHCP6 Server configuration editor
- 03:30 AM Revision cf15bcb4: Add ddnsforcehostname option to DHCP Server configuration editor
- 03:21 AM Revision 62abab65: Add ddnsforcehostname option to Static Mapping editor
- 03:14 AM Revision f0cce276: Put DDNS hostname config in the wrong place
- It is relevant to the interface, not just the per-static-mapping DDNS config.
-
- After much head scratching about why devices are not getting v6 IPs any more, nothing short of disabling it on the di...
- 02:55 AM Revision 011f550d: Implement ddns-hostname option emission for static hosts in services.inc.
11/29/2016
-
07:34 PM pfSense Packages Bug #6763: Squid ClamAv wrong redirect URL
- I'm seeing the same redirect behavior. I can confirm that changing the GUI does update the squidclamav.conf file as i...
-
-
-
-
- Yet another Chris left so the bug went into an unassigned state.
JimP please verify, and assign back to me if we c... -
-
-
- 04:57 PM Revision 04fe6f00: Update setup_wizard.xml
- (cherry picked from commit b0b2af901f352dbbaad0b09d06fe7adb105ff7a4)
- 04:57 PM Revision 04d7836b: LAN IP validation logic
- (cherry picked from commit 6a365a4c80aced41ec87ad93ed2c986d9935a4ea)
- 04:57 PM Revision d1a4cb8d: Update setup_wizard.xml
- (cherry picked from commit 3ad0f9b63f690f77cf8c4d398b521eba6909f0bc)
- 04:57 PM Revision ab5f464a: update conditional re:LAN dhcp
- (cherry picked from commit 0eb2512f93c7e187511ea258948715c2e230e98f)
- 04:57 PM Revision bdffccfd: update LAN regex for case insensitivity
- (cherry picked from commit 32980f321e854bf008efa04ee9187553231b6423)
-
- 04:53 PM Revision 4a77c4ea: - added support for duiadns.net ipv4 and ipv6
- (cherry picked from commit 19b7263e859243adfcf6588533cb47b4c768765e)
-
- 04:40 PM Revision 6cade780: IPv6 address can contain a dot
- When requiring the entry of an IPv6 address, the regex pattern should still allow a dot, so that an IPv6 address can ...
-
-
- When a user is disconnected by the administrator using the pfSense captive portal status page or widget set the value...
-
- 04:33 PM Revision 7b861bce: clarified input format hint for expiration date
- (cherry picked from commit 98b87cfafe8a890787ca5d22a1089678b9b250ac)
-
-
- 02:47 PM Revision 98b87cfa: clarified input format hint for expiration date
-
- When a user is disconnected by the administrator using the pfSense captive portal status page or widget set the value...
-
-
- The cert case is much simpler since there is a field for that directly. All the code has to check for is that the cer...
-
- Jim Pingle wrote:
> That would require some more work to detect if it's the GUI cert's issuer.
Hmmm well, that al... -
- That would require some more work to detect if it's the GUI cert's issuer, and the GUI cert could be self-signed, sin...
-
- Looks pretty good. CA in use detection works (tested with OpenVPN server, IPsec and LDAP), plus can no longer be dele...
-
- Applied in changeset commit:80080a0c8b5949b1af97d1d49b4cc834d06875cf.
-
- I was unable to reproduce the problem exactly as stated, but I added validation code to prevent incorrect keys from b...
-
- Applied in changeset commit:ab63443a9184f42f6a47907e5f2d3fbab6ff043e.
-
- Testing on 2.4 won't be reliable until #6937 is fixed.
-
- It appears to be worse than before now too.... ICMP doesn't work across the tunnel now either.
-
- Jorge Albarenque wrote:
> I can confirm this still occurs on 2.3.2. Probably worth checking on 2.4 since Chris had m... -
04:47 AM Bug #4479: Firewall rules won't match GRE interface after applying IPSEC transport encryption on GRE tunnel
- I can confirm this still occurs on 2.3.2. Probably worth checking on 2.4 since Chris had mentioned it seemed to be re...
-
- It's still a problem on 2.3 and 2.4...
-
- Applied in changeset commit:7a9c12b3d6e01e11ec0af3a6690a5c3de2fbbd2e.
-
- Duplicate of #2800 which is fixed on 2.4 already.
-
09:22 AM Bug #6973 (Duplicate): OpenVPN fails to verify client certificate when using intermediate CAs to sign server/user certs
- I am using pfSense and OpenVPN with a few intermediate CAs to seperate VPN servers by project:...
-
- It's working well now.
I updated the wiki and book to follow the new requirement, and made a slight adjustment to ... -
- An example:
!https://s14.postimg.org/7fgw3jrxd/aliases_delete_wth.png! -
- I randomly keep getting a nonsensical "Are you sure you wish to?" prompt when deleting networks from network-type al...
11/28/2016
-
- Well, apparently not a package bug.
-
05:31 PM pfSense Packages Bug #6968: Snort VRT Rules Fail to automatically update SSL read error
- Kill Bill wrote:
> You have pfBNG installed and Amazon S3 blocked?
Nope only package I have installed is snort.
... -
- You have pfBNG installed and Amazon S3 blocked?
-
- pfsense version: 2.3.2-RELEASE-p1 (amd64)
Snort Version: 3.2.9.1_14
Automatic update fails with following errors... -
09:14 PM pfSense Packages Bug #6971 (Closed): Interfaces.php: "Reserved Networks" checkboxes not shown
- Using Windows 10 snap window function to resize Firefox to half the display size causes the checkboxes on Reserve Net...
-
- yet another case where we lost track of the bug because Chris just removed himself when he left.
assigned back to ... -
- i think this is a freebsd bug, might be fixed.
-
- please validate and hand back.
-
- they moved because it's better.
but they have a really large environment.
we've known about kea for a while. (... -
- JimP, please verify, and if not valid, close.
If valid, please hand-off to bbcan117 -
- It's already in 2.3.3 snapshots
-
07:57 PM Bug #6970 (Rejected): Update pfSense 2.3 to Unbound 1.5.10
- I noticed the Unbound version pfSense is shipping is a bit old at 1.5.9. The latest release is 1.5.10. The .10 releas...
-
-
-
-
-
-
- Adding a note to clarify: It is OK for "IP address" to be blank/empty if "ARP Table Static Entry" is unchecked.
-
- When creating a static DHCP lease entry the GUI input checking does not prevent checking 'static ARP' without enterin...
-
- Applied in changeset commit:b35fc4331ac78f9459db00be04dc6b077f168593.
-
08:43 AM Bug #6223: IPsec + OpenBGPD fails with "PF_KEY socket: No buffer space available"
- To all having this problem - while there is no fix yet, I have put together a workaround I have been using successful...
-
08:08 AM Bug #6966: Display bug in Status / IPsec / Overview
- Jim Pingle wrote:
> That page outputs what is given to it by strongSwan. Check the output of "ipsec statusall" from ... -
- That page outputs what is given to it by strongSwan. Check the output of "ipsec statusall" from the console when it's...
-
- I have to IPsec tunnels configured. If one goes up, it is reported as both connected and disconnected in two separate...
-
07:41 AM Bug #6967 (Resolved): DH Groups 22, 23, 24 missing from Phase 2 selection GUI
- When configuring IPSec you can select DH Groups 22-24 for Phase 1, but for Phase 2 they are missing from the GUI.
...
11/27/2016
-
- And as for "the GUI does nothing":
!https://s15.postimg.org/fk5zywtsr/clamav_redirect_empty.png!... -
- The default URL is set to the pfSense GUI URL on package install. Simply because that's the only sensible default. Th...
-
- See: https://forum.pfsense.org/index.php?topic=115323.0
-
- Kill Bill wrote:
> Richard Eberhard wrote:
> > I also tried adding a redirect command in the custom squid config: n... -
-
- No bug here, let alone "very high" severity, can be closed. This is configurable in the GUI as shown above.
-
06:28 PM Bug #6223: IPsec + OpenBGPD fails with "PF_KEY socket: No buffer space available"
- Has anyone attempted this with 2.4 beta? I've already burned my downtime allowance testing with 2.3.x versions and va...
-
- Yes, set CN property surprisingly sets CN property. Sigh. Because that's exactly the purpose of the feature. Set != s...
-
- Kill Bill wrote:
> Sorry, but browser thinking a certificate is valid when it's not is NOT a Squid issue. Stop doing... -
-
- Sorry, but browser thinking a certificate is valid when it's not is NOT a Squid issue. Stop doing HTTPS MITM if you h...
-
-
- Ale Feltes wrote:
> I can't see issue's status control. I can only add comments.
That was aimed @pfSense guys. :) -
07:06 AM pfSense Packages Bug #5701: Sarg does not delete cron entry
- I can't see issue's status control. I can only add comments.
-
- Package no longer exists in 2.3+, use lightsquid.
Please, close.
-
-
- Package gone, please close.
-
-
- This already works with Avahi as noted above. Please, close this.
-
-
- Cannot be reproduced plus concerns obsolete 2.2.x PBI stuff.
Please, close. -
-
- Package no longer exists in 2.3+, please close.
-
-
- Been already done, can be closed.
https://github.com/pfsense/FreeBSD-ports/commits/devel/sysutils/pfSense-pkg-apcupsd -
-
- Darkstat does not support HTTPS. Cannot be fixed in the package. The issue is HSTS headers set by pfSense nginx. Best...
-
-
- Upstream bug tracker for Squid is at http://bugs.squid-cache.org/describecomponents.cgi?product=Squid - the pfSense p...
-
-
- 2.2.x is dead, plus this would not be a Squid package bug at all. Please, close this.
-
-
- No bug here, can be closed.
-
- It'd seriously help to have a checkbox that'd simply _add_ whatever custom alias(es) to the default passlist, instead...
-
- This is misfiled under Packages product, any changes here would need to be done in pfSense core.
11/26/2016
-
- Well, this still does not work properly at least with bzip2, because:...
- 04:19 PM Revision b0b2af90: Update setup_wizard.xml
-
- There's already #6023 for netmap + shaping.
-
02:12 PM Bug #5649: bce0: Discard frame w/o leading ethernet header (len 0 pkt len 0)
- I believe this issue can now be closed.
After using pci-stub on the Linux host for the two NIC's in question, whic... -
- The policy always gets assigned to the first instance (normally probably WAN) when you either
- use the Import butto... - 10:41 AM Revision b8678b63: IPv6 address can contain a dot
- When requiring the entry of an IPv6 address, the regex pattern should still allow a dot, so that an IPv6 address can ...
-
- https://github.com/pfsense/FreeBSD-ports/pull/220
-
- This got broken again. Together with some other cosmetics, this is fixed by https://github.com/pfsense/FreeBSD-ports/...
11/25/2016
-
10:27 PM Bug #6962: GUI allows selecting missing diffe-helman Paremeters for OpenVPN
- My vote would be either to grey out or remove the missing parameters from the OpenVPN dropdown, or to kick off a back...
-
- The GUI should probably grey out or otherwise note the selections without available files. Or maybe check for @/etc/d...
- 09:04 PM Revision 19b7263e: - added support for duiadns.net ipv4 and ipv6
-
-
-
-
- (cherry picked from commit b77a63948b4bd54f3d2e6e9d3822588105fb5741)
-
-
- (cherry picked from commit 339279415ced4aaaafb96fc14a334a172b8db49f)
-
-
05:05 PM Revision 9e2fa369: Improved error message to explicitly state allowable characters
- Related to Bug #6432.
(cherry picked from commit 3b55b54e9c76998a2b0e28897a0be79d5cf0cb8f) -
- 05:01 PM Revision f968d06d: DHCPv6 ddnsdomainprimary must currently be IPv4
- This field is currently validated to allow only an IPv4 address to be entered, so it may as well be consistent client...
-
- 04:59 PM Revision 19509df3: services_dhcp_edit add extra IPv4 validation
- a) Validate that ipaddr must be IPv4 (note if you enter an IPv6 address, it will fail other later tests of being in t...
-
- 04:48 PM Revision e9544016: Specify the IP address family in interfaces.php
- Where it is known what sort of IP address is required, we can specify it in the call to Form_IpAddress. That will mak...
-
- 04:47 PM Revision 57808367: Keep the rule type selection after input errors on firewall rule
- If the user:
a) Edit a firewall rule
b) Select "single host or alias"
c) Enter an invalid IP address that is not an a... -
-
04:45 PM Revision fbcdf576: add All-Inkl to services.class
- (cherry picked from commit 360f3a9011d143944fcd8e5e6b69fced2f9baaf7)
-
- (cherry picked from commit 575b1dcf0bdb28c431fca420d27bdedf579ec9c4)
-
-
- I pushed a fix as stated. Works fine with and without key-based auth. Needs more testing once it hits snaps.
-
- The ssh authentication "keyboard-interactive" method fails on 2.3.2 and 2.4
This is due to the use of @UsePAM no@ ... -
- Duplicate of #6886
11/24/2016
-
- Uhm... generating these "on demand" is a horrible idea. Should be either pre-shipped or user told to do the job. User...
-
- When trying to use a 3072-bit Diffie-Hellman parameter with the OpenVPN server, the following error is logged and the...
-
-
-
- Kinda difficult to come with "pfSense native firewall"-like GUI, considering there's no pattern about what's going to...
-
- See https://github.com/pfsense/FreeBSD-ports/pull/218
-
09:31 AM Feature #6961 (Duplicate): IPv4/IPv6 Dual-Stack IPSEC mobile vpn
- It would be nice to have possibility to create Phase1 IPSec for Mobile Clients - for both IPv4 and IPv6.
Currently... -
07:51 AM Feature #6960: Introduce Kea DHCP as an alternative DHCP server for IPv4 and IPv6
- It looks like Facebook migrated to Kea DHCP. Should be for a good reason [[https://code.facebook.com/posts/8459090588...
-
- I think it would be a good idea to at least take a look at kea dhcp by ISC. It seems to be a much better solution for...
-
-
- Already fixed by https://github.com/pfsense/FreeBSD-ports/commit/5f79e53dcae89bb185279ba2164a99891bb70dfd
-
- Done
-
03:24 AM Bug #6762: "Please match the requested format" error in Chrome when editing certain form fields
- I'm still having this issue.
Norwegian settings in Chromve version 55.0.2883.59
I get the error when trying to ad...
11/23/2016
- 06:47 PM Revision 581aa622: Added addrtolower() to interface pages
- 06:47 PM Revision 5af93827: Added addrtolower() to interface pages
-
-
- After going into System -> Routing -> Gateways, clicking edit on the current gateway outside the subnet, don't even h...
-
-
- When booting the 2.4 install media, the first screen of the installer offers a "Live CD" choice that is confusing to ...
-
-
12:51 PM
Bug #6958 (Resolved): services_dhcp_relay.php: Needs to be converted to more recent rowhelper standard
- Page still uses the deprecated setIsRepeated() method on the group. We no longer do that.
-
12:18 PM Bug #6957 (Closed): CARP arp reply with wrong src mac
- The problem is same as https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=141023
I find a patch on pfsense/FreeBSD-sr... -
12:01 PM Feature #6956 (New): Allow more control over concurrent logins
- Currently there is a checkbox that allows concurrent logins, or not. I'd like to be able to replace that binary check...
-
- My interfaces：LAN, WAN, WAN2
1、I add IP Alias VIP 155.155.155.155 on WAN2, it's ok. Get the uniqid: 5831b1cbbbdcd
... -
- The new installer has a number of useful options but there is no choice that replicates the "Quick/Easy Install" opti...
-
- After discussed it, we decided to let user create wireless clone interface before assign it and remove any special tr...
-
- It works on the latest CE snapshot from overnight, but there is one regression from the previous behavior. At the mom...
-
- Kill Bill wrote:
> I guess you produced a typo in the latest commit.
>
> [...]
>
> https://github.com/pfsense/... -
- Steps to reproduce:
* have existing internal CA
* import external CA (in my case, signed by the internal CA but g... -
- Steps to reproduce:
* Import external CA
* Do not set "Serial for next certificate"
* Try to create a user certi... -
11/22/2016
-
-
-
- I guess you produced a typo in the latest commit....
-
-
- Wow, this is much better than before, shows complete progress output now. 8-) Thanks.
-
- 03:45 PM Revision 499ff8fc: Added addrtolower calls to force IPv6 addresses to lower case
- First of many
- 03:45 PM Revision 5100064f: Added addrtolower calls to force IPv6 addresses to lower case
- First of many
-
09:51 AM
Bug #6864 (Assigned): Error checking rejects IPv6 addresses with upper case A-F.
- Force IPv6 to lowercase via addrtolower() has been added to:
firewall_aliases_edit.php
firewall_rules_edit.php
... -
09:48 AM
Bug #6918 (Closed): Javascript Lowercase for IPv6 addresses prevents use of aliases with capital letters
- Closed in favor of #6864
-
- What happens if you use www.xn--bcher-kva.ch as the name to block in the rule?
Is that effective?
I wonder if pf ... -
- Most likely it's a configuration issue and not a bug. It's best to discuss this on the forum before opening a bug rep...
-
- What appears in /var/dhcpd/etc/dhcpd.conf ?
When I put specific DNS servers in there, I get a line like:
option dom... -
- The only way to disable the auto config backup package after the credentials have been entered is to uninstall it. Th...
-
- The 'Backup Now' function always reports 'Backup completed successfully.' even if the backup to the server failed. If...
-
- Fixed by #6900
-
02:23 AM pfSense Packages Bug #6410: when PFSENSE after server restart,openvpn+motp not login
- SOLVED: Did update with Version freeradius2 1.7.4 and everything runs fine now
-
-
11/21/2016
- 07:37 PM Revision 028596d8: Revise filter_reload page to display entire reload_filter_status contents, not just last line
- 07:36 PM Revision d00157df: Revise filter_reload page to display entire reload_filter_status contents, not just last line
- 06:58 PM Revision 71b86385: Revise shaper wizards to support multi-line filter_reload_status
- 06:57 PM Revision de1425d9: Revise shaper wizards to support multi-line filter_reload_status
- 06:54 PM Revision 5bf9c6f7: Revise update_filter_relaod_status() function to append status messages rather than overwrite the file
- 06:53 PM Revision 4f7956ad: Revise update_filter_relaod_status() function to append status messages rather than overwrite the file
- 04:49 PM Revision df995721: Merge branch 'master' of git.netgate.com:pfsense/pfsense
- 04:47 PM Revision a7391526: Fixed #6922
- Added code for IPv6 Dynamic DNS
- 04:46 PM Revision 707e1ac2: Fixed #6922
- Added code for IPv6 Dynamic DNS
-
-
-
-
- 03:38 PM Revision f6973634: Fixed #6939 by moving CSS only to the two pages that require it
- 03:37 PM Revision dd455f50: Fixed #6939 by moving CSS only to the two pages that require it
-
-
- Thanks for looking into it (it's not like the exact messages would be really critical, but it was an indication of a ...
-
01:43 PM
Bug #6931: Status > Filter Reload page is confusingly worded
- The root cause of the issue was that the filter reload process over-wrote the status file with every message, so ther...
-
11:59 AM
Bug #6931: Status > Filter Reload page is confusingly worded
- The system I was testing on was too fast to notice the intermediate messages. Thanks for pointing that out. Fix coming.
-
- I'm very sure the thing has actually been displaying _real_ activity during reload. Such as, loading the various pack...
-
11:14 AM
Bug #6931: Status > Filter Reload page is confusingly worded
- Previously when visiting the page from the status menu the page would say that it was reloading the filter then after...
-
- Uhm, dunno guys, it appears to me like this made the thing basically no-op? Previously, it's been showing what's goin...
-
-
-
10:58 AM
Bug #6922 (Resolved): Dynamic DNS widget broken with Custom v6 entries
-
- Works, thanks.
!https://s22.postimg.org/kxalm38rl/screenshot_dyndns_widget.png! -
10:54 AM
Bug #6922: Dynamic DNS widget broken with Custom v6 entries
- Added code to handle IPv6 (cache file has "_v6" appended)
-
10:50 AM
Bug #6922: Dynamic DNS widget broken with Custom v6 entries
- Applied in changeset commit:a7391526c83a8d4b33e81d730141a4811ae8d482.
-
- ...
-
08:58 AM
Bug #6922 (Feedback): Dynamic DNS widget broken with Custom v6 entries
- Kill Bill,
Could you post or send me the contents of the /cf/conf/*.cache file that pertains to he HEIPV6 entry pl... -
10:57 AM
Bug #6864: Error checking rejects IPv6 addresses with upper case A-F.
- See #6918
A new function has been provided to force IPv6 to lower case on save. This is being added to GUI pages as ... -
-
- Fixed. Dragging below/above the visible window in FW rules works, HAproxy and Status_Traffic_Totals still have the re...
-
09:50 AM
pfSense Packages
Bug #6939: HAproxy - backend server list broken with recent 2.3.3 snapshots
- Applied in changeset pfsense:commit:f6973634c34b34908644e2df17154274d2ab12be.
-
09:40 AM
pfSense Packages
Bug #6939: HAproxy - backend server list broken with recent 2.3.3 snapshots
- Applied in changeset pfsense:commit:dd455f50b7be7957428b0733b5b2c93ccba9e284.
-
09:37 AM
pfSense Packages
Bug #6939 (Feedback): HAproxy - backend server list broken with recent 2.3.3 snapshots
- The scroll gimmick CSS has been removed from the master CSS file, and added only to firewall_rues.php and firewall_na...
-
- Applied in changeset commit:fc84b222e75c9d92e394a2e9ddb80c5ead382f52.
-
09:02 AM
Bug #6903 (Resolved): services_dnsmasq_edit.php: Configuration XML hosts section order appears randomized
-
09:02 AM
Bug #6918: Javascript Lowercase for IPv6 addresses prevents use of aliases with capital letters
- I have added a new function addretolower() to detect if a string is a valid IPv6 address, and if so convert it to low...
-
- That worked, thanks!
I did make one small tweak. Before, we used @kdb.enter.default@ rather than @kdb.enter.panic@... -
- Applied in changeset commit:0529323ff97f81e0203553086df8917aeb5542d3.
-
- Kill Bill wrote:
> Yay!!! Will only be able to test after this weekend; going to post feedback here. Thanks.
!htt... -
- hello,
it seems that username and password is not used for the proxy connection. it works only with IP and port but ... -
- I was able to update. But I had to take the cable out of the router and leave it to pfsense only. Very sensitive. lol...
11/20/2016
-
- I am well aware of DNS's Punycode encoding and of the homograph problem. The former is alas needed for backwards com...
-
- Hmmm... So, that's caused by the bogus empty file at the top, which I never placed there in the first place. NFC how ...
-
- No idea what's this bootstrap nonsense validating where yet again. It is absolutely impossible to input anything ther...
-
- This is beyond uncool. When I accidentally deleted an external (intermediate) CA cert from the CAs tab, it wiped the ...
-
01:08 AM Bug #6946 (Not a Bug): Unable to override dns servers in dhcp server
- Trying to provide specific DNS servers for specific optX network. No matter what I set the dns server fields to, the...
11/19/2016
-
- fixes: https://redmine.pfsense.org/issues/6940
-
- This is how's www.bücher.ch represented in DNS: www.xn--bcher-kva.ch; believe it or not, people do NOT want to deal w...
-
- Thanks for the link. Hopefully they won't reject the bug. Why do you think they would? (You do know that the majo...
-
- Sean McBride wrote:
> Do you know where I should file this upstream then?
https://bugs.freebsd.org/ if you insist... -
- I figured it would be something like that.
Do you know where I should file this upstream then? -
- We are bound by the limits in pf. We can only allow what they allow. (A-Z, a-z, 0-9, and _)
Use the description fi... -
- In Firewalls > Aliases, when creating/editing an alias there is a 'name' field. This field disallows most characters...
-
- Just found this one issue, looks i made a duplicate https://redmine.pfsense.org/issues/6940 , i did implemented the '...
-
- Fixable by: https://github.com/pfsense/pfsense/pull/3236
-
- DDB is there now but something still isn't triggering textdumps. 2.4 has a different /etc/ddb.conf file from the one ...
-
- I quoted a wrong post, however, both the HAproxy and the Status_Traffic_Totals have been fixed by reverting the offen...
-
- Kill Bill wrote:
> I'm not one of those bootstrap guys. :/ Perhaps @sbeaver could help. As for excessively wide drop... -
- I believe such an RFC exists already:
https://tools.ietf.org/html/rfc6151
Section 2: "MD5 is no longer acceptab... -
- There is a problem some users are having with dhcp6c sending a release on exit, in 99% of cases this is not an issue ...
-
01:21 AM Feature #6832: [PATCH] Add the USB ID for the Sierra MC7430
- Thanks, but I don't see it in the @RELENG_2_4@ branch.
11/18/2016
-
- There are known issues with re(4) and spoofed MACs, it isn't always the driver, sometimes it is the chip itself.
Y... -
07:44 PM Bug #6941: VLAN interface does not work unless parent/or vlan interface are in promiscious mode
- Jim Pingle wrote:
> That would be a limit of your specific NIC chip and/or driver. If it's possible to be fixed at a... -
-
-
-
- Reverted after upgrade dhcpd server to 4.3.5
This reverts commit 9dacff7f1b2b89ebebc1e9456d642e0657bb89cc. -
- Reverted after upgrade dhcpd server to 4.3.5
This reverts commit 776692947bda5c867c7f5e60550c3a508760c251. -
- Reverted after upgrade dhcpd server to 4.3.5
This reverts commit 20350989db5d66ffb827beaed5ef5738cd62fc9d. -
- Removed after upgrade dhcpd server to 4.3.5
This reverts commit 318e0383829daac934424879ccfce09395e80025. -
04:08 PM
pfSense Packages
Bug #6939: HAproxy - backend server list broken with recent 2.3.3 snapshots
- I'll take care of it
-
- I'm not one of those bootstrap guys. :/ Perhaps @sbeaver could help. As for excessively wide dropdowns, perhaps this ...
-
- Yah shortening the field lengths would likely help.. but how to do that in a bootstrapped kinda way.?.
-
- Not sure either, the "port" field could definitely be shrunk quite a bit, for starters, though that'd only mitigate t...
-
- There used to be a scrollbar.. Thats hidden now by this fix: https://redmine.pfsense.org/issues/6895
Reverting htt... -
- Still seeing some issues, if I edit anything with the local-gateway even just the description and click apply changes...
-
- Ken Sim wrote:
> Still seeing system lockup on 2.4.0-BETA when dealing with non-local gateways.
I've tried to rep... -
- Already added
-
- I believe the responsible for so many queries is System Information Widget, that checks for upgrades every time it sh...
-
- Yay!!! Will only be able to test after this weekend; going to post feedback here. Thanks.
-
- Patch removed and package updated to 4.3.5 on pfSense 2.3.3 and 2.4.0
-
- Done for 2.3.3 and 2.4.0
-
- Labels are working, GPT was the default, ZFS is working (See #6929). This looks good to me. Closing.
-
- - GPT is now default
- Labels are being used on fstab
- ZFS installation is working as expected -
- option DDB added to pfSense kernel
-
- The amd64 kernel in 2.4 does not contain "options DDB" so textdumps are not working. It does have "options KDB", but ...
-
- It will only show what it finds in DNS, which is what it gets from DHCP static mappings, leases, host overrides, and ...
-
06:18 AM Bug #6942 (Duplicate): Traffic Graph displays wrong local FQDN
- In a configuration with several networks and different local domain names for each network where hosts get their name...
-
07:18 AM Bug #6877: nsCertType "Server" property of a certificate is not detected if additional nsCertType flags are also set
- And in the same spirit, https://github.com/pfsense/pfsense/pull/3234
-
- Done during 2.4 alpha
11/17/2016
-
- That would be a limit of your specific NIC chip and/or driver. If it's possible to be fixed at all, it would have to ...
-
- Hi,
I have a pfsense box with two physical interfaces re0/re1.
My setup is two vlan interfaces defined re0_102 ... - 08:23 PM Revision 0641b626: Fixed #6931
- 08:22 PM Revision d3cb20ce: Fixed #6931
-
06:07 PM Bug #4689: Panic/Crash "sbflush_internal: cc 4294967166 || mb 0 || mbcnt 0"
- I am getting this symptom (crashs) on v2.3.2, multiple times a day:...
-
- Reading this would help to understand why it's not supported.
https://forum.pfsense.org/index.php?topic=87211.msg514... -
02:30 PM
Bug #6931: Status > Filter Reload page is confusingly worded
- Applied in changeset commit:d3cb20cef80a084f162495b5698190405df7a1dd.
-
02:24 PM
Bug #6931 (Feedback): Status > Filter Reload page is confusingly worded
- Page un-uglyfied as requested
-
-
- P.S. Cannot make the window any wider, it's already fullscreen on a full HD monitor, not even F11 helps. :-D
-
- That's the same image I'm running, so it's most likely a problem with the package in general. It's possible there was...
-
- Well, not sure what's current. The box has been upgraded about ~2 hours ago. ...
-
- Is this still the same on a current snapshot? Is it the same if you force a page reload to clear the cache? Make the ...
-
- This definitely used to work, however it got badly broken recently. The SSL checkbox and weight fields are completely...
-
- OpenVPN management socket not listening after bootup
The dashboard shows the following: "Unable to contact daemon ... -
- Jim Pingle wrote:
> One thing I did notice in your original description is that the network config is invalid. You c... -
- Did not mean to remove SSL substring from the check...
-
- See https://redmine.pfsense.org/issues/6877#note-4
-
- Looks good, filter log contains the expected entries now.
-
- We determined this page was OK because it's acceptable for a host override to have zero aliases. Without the button t...
-
- Works, can XMLRPC sync so long as the user has the "System - HA node sync" privilege.
-
08:17 AM Bug #5319: Error message "No config named" in charon daemon
- I can confirm this one too. 2.3.2 in use....
-
- Looks good, thanks for testing!
-
- Works ;)
!https://s15.postimg.org/w34bhj9az/Cert_Manager_Screenshot_Fixed.png! -
- Merged PR
-
- I don't think I've ever seen one with both set, and practically there is rarely if ever a reason to do so. It's worth...
-
- Yeah, this cannot work...
-
- Well, this does not work properly even with the nsCertType set. Example:...
-
-
01:18 AM Bug #6934: /usr/bin/install missing from new 2.4 installations
- I just did a fresh install with the 11/16/16 build. I was able to restore my configuration and all packages installe...
11/16/2016
- 11:29 PM Revision 8cab3470: Revise host and domain sorting so that the index is not lost
- 11:28 PM Revision 589634a9: Revise host and domain sorting so that the index is not lost
-
09:48 PM Bug #6938: DNS with OpenVPN gateway specified is routed through wrong interface. 2.4 regression.
- I've been trying to identify if the same issue exists when setting a DNS entry with a normal WAN gateway (with static...
-
- System -> General Setup -> DNS Server Settings
Setting a DNS with an OpenVPN client gateway (dynamic IP address) is ... - 09:11 PM Revision 4c17e45f: Added addrtolower() function to allow IPv6 addresses to be converted to lower case while preserving aliases or other text
- 09:10 PM Revision f3997278: Added addrtolower() function to allow IPv6 addresses to be converted to lower case while preserving aliases or other text
-
- I have now verified that this is reproducible on 2.4 nightly 20161116-0701.
-
- Moving the start of OpenVPN will undoubtedly have other unintended consequences. What is likely happening here is tha...
-
- Yes.
-
- Do you have System > Advanced, Misc, "Do not create rules when gateway is down" set?
-
- Please note that Status -> Filter Reload also works to properly initialise the rule after boot (as an alternative to ...
-
- *Summary*:
A race condition starting OpenVPN client at boot (rc.bootup) is causing a firewall rule (that is dependen... -
-
- I've already taken everyone off the network, but I can not update only timeout.
((>>> Updating repositories meta... -
-
- This reverts commit d461ff40e364fc0ecc003b9f673cbad7c6a08f2f.
(cherry picked from commit 75bc87fe10f30f49a09218820f7... -
- This reverts commit 9444a281f051e11d5456cc37b2a3f56fc8a7bc33.
(cherry picked from commit 9128641db5c9b6839163948f3f7... -
-
-
-
- Traffic entering enc0 on 2.4 is not creating a state, thus TCP traffic will not pass. ICMP works as the return traffi...
-
-
-
03:37 AM Bug #6935: Rule (which contains a pfBlockerNG URL-Alias) cannot be saved
- Kill Bill wrote:
> Duplicate of Bug #6918
Ups, sorry -
- Duplicate of Bug #6918
-
- I cannot create or edit a Rule which contains a pfBlockerNG (URL-)Alias. The name of the Alias will automatically con...
-
- This reverts commit d461ff40e364fc0ecc003b9f673cbad7c6a08f2f.
-
- This reverts commit 9444a281f051e11d5456cc37b2a3f56fc8a7bc33.
-
- Applied in changeset commit:c0ac85e7408bd34beac586b25a57901dc2c5c885.
11/15/2016
-
11:44 PM Bug #6913: install on Hyper-v R2
- Yes, it works.
Thank you. -
- There were fixes put in today for ZFS and it might have affected other things you're seeing. Try it again on a new sn...
-
- I don't have anything capable of running Hyper-V on Windows Server (R1 or R2) nearby so I can't easily confirm the is...
-
- I just experienced this apparently same crash on 2.4 while running the DSLReports Speedtest. The system crashed afte...
-
- I reverted all these changes until the proper solution is committed.
The 'real' solution here is convert the IPv6 ... -
- There are more related pending PRs that may help, but I was talking to sbeaver earlier and he had some ideas on how i...
-
- I'm sorry but this is *still* broken. I go to Firewall - NAT - Port Forward, there's a rule with an alias called "RAS...
-
- Should be fixed in filterlog-0.1_5.
-
- Nah, Nepal is innocent -- the mirrors have been slow like molasses for some two days or so...
-
- I am also getting this the last day or so. I thought it was related to moving back to Nepal and having slower internet.
-
- 11:45 AM Revision ff3d11c8: DHCPv6 ddnsdomainprimary must currently be IPv4
- This field is currently validated to allow only an IPv4 address to be entered, so it may as well be consistent client...
-
- ZFS now works on CE and Factory snapshots, thanks!
-
- Pushed a fix, please try next round of snapshots
- 11:35 AM Revision 7164c563: services_dhcp_edit add extra IPv4 validation
- a) Validate that ipaddr must be IPv4 (note if you enter an IPv6 address, it will fail other later tests of being in t...
- 10:34 AM Revision 41fc88ec: Specify the IP address family in interfaces.php
- Where it is known what sort of IP address is required, we can specify it in the call to Form_IpAddress. That will mak...
-
- Same as #6643 but it's happening again on 2.4 now.
/usr/bin/install is missing from a fresh install, updating to a... -
- Duplicate of #6768
-
08:07 AM
Bug #6933 (Duplicate): Wrong IPv6 address is served over DNS when static mapping is used with Track6 interface
- I have a router with pfSense 2.3.2 that has several LAN interfaces, each set to Track6 mode to assign IPv6 addresses ...
-
- 1:1 NAT does work for IPv6. It's similar to NPt, but for a single address -- NPt is really just a slightly different ...
-
- At the moment it allows entry of IPv6 addresses. Is that correct? Is the 1:1 NAT feature supposed to work fine with I...
11/14/2016
- 11:00 PM Revision bf2c7206: Fix #6918 Allow aliases with capital letters in rules
- Expand the types of Form_IpAddress so that the caller can specify
exactly what combination of IPv4, IPv6 address and ... - 11:00 PM Revision 8100374e: Fix #6918 Allow aliases with capital letters in rules
- Expand the types of Form_IpAddress so that the caller can specify
exactly what combination of IPv4, IPv6 address and ... -
-
- Please open a forum thread for discussion and diagnosis before opening a bug report. It does work for some people, an...
-
10:11 PM Bug #6932 (Not a Bug): MLPPP
- This feature has been broken for a very long time. I have tested with x64 and x86 and different hardware with no luck...
-
- The way the Filter Reload page is displayed implies that the filter rules are loaded by simply visiting the page.
... -
05:32 PM
Bug #6812: IPsec filterdns crash
- OK these issues have surfaces again this morning. Truth be told, I have no idea what's Ipsec and as far as I know, I...
-
- Applied in changeset commit:9444a281f051e11d5456cc37b2a3f56fc8a7bc33.
-
- The PR looks good, appears to do the proper thing in each case. I just merged it in.
-
03:28 PM pfSense Packages Feature #6651: Loopback interfaces
- Loopback interfaces are a cisco best practice for GRE/IPSec tunnels. I would use them for site-to-site IPSec as an in...
-
- Related forum thread: https://forum.pfsense.org/index.php?topic=121105.0
Basically
- disable the enable DHCP serv... -
- Choosing the ZFS option results in a system that starts to boot, but cannot mount the root slice because it doesn't k...
-
- the problem appears to be fixed in FreeBSD 11.0- *STABLE*
11/13/2016
-
11:13 PM pfSense Packages Bug #6928: freeRADIUS, logging with "Access-Reject" not work in mysql table radpostauth
- for change it - needed uncomment this:
/usr/local/etc/raddb/sites-enabled/default
section post-auth
variable sql
... -
- The table(radpostauth) is recorded only events "Access-Accept".
in the table(radpostauth) needed events "Acces-Reje... -
- 11-stable have fixed this issue
-
- Bug 212721 - FreeBSD 11.0-RC2/RC3/RELEASE fails on Hyper-V 2012r2
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id... - 06:17 PM Revision 9444a281: Fix #6918 Allow aliases with capital letters in rules
- Expand the types of Form_IpAddress so that the caller can specify
exactly what combination of IPv4, IPv6 address and ... - 05:49 PM Revision 38ce4a18: Keep the rule type selection after input errors on firewall rule
- If the user:
a) Edit a firewall rule
b) Select "single host or alias"
c) Enter an invalid IP address that is not an a... -
- "Operation timed out" => when download fails, you cannot upgrade.
-
- >>> Updating repositories metadata...
Updating pfSense-core repository catalogue...
pfSense-core repository is up-... -
- When adding a 1:1 NAT entry it is possible to enter a mix of IPv4 and IPv6 addresses in the various External Internal...
-
- See pull request https://github.com/pfsense/pfsense/pull/3225 for a suggested fix.
-
- Yes. Confirmed on:
2.3.3-DEVELOPMENT (amd64)
built on Fri Nov 11 16:36:08 CST 2016
FreeBSD 10.3-RELEASE-p12
... -
12:17 PM Bug #6926 (New): Miniupnp advertising expired IPv6 address
- Version 2.3.2_1
With WAN set to DHCP6 and LAN set to track interface, the miniupnp service does not get notified i... -
- It's possible something being configured on the previous one made it appear that it failed (e.g. states got reset). I...
-
- I added a new network card and I set up ipv4 and saved it and it was just spinning. Now I added another set and it wa...
-
05:55 AM pfSense Packages Bug #3343: (re)starting freeradius service throws "The command '/usr/local/etc/rc.d/radiusd.sh stop' returned exit code '1', the output was 'radiusd not running?'"
- The problem is, that pfSense restarts the packages it self and also calls the restart method of freeradius itself.
... -
- Bug 213618 - When running as a Hyper-V Guest, FreeBSD 11 networking does not work
https://bugs.freebsd.org/bugzilla...
Also available in: Atom