Activity
From 12/09/2016 to 01/07/2017
01/07/2017
-
11:10 PM Bug #6836: Wrong queue length on "/status_queues.php" page under heavy traffic
- Please point me to the some redmine EULA or law, why I can not use this name anymore like it was used for the 5 last ...
-
12:26 PM Bug #6836 (Assigned): Wrong queue length on "/status_queues.php" page under heavy traffic
- please close and reopen this as someone other than "Vladimir Putin".
not kidding. -
10:55 PM Bug #7102: This firewall does not have any interfaces assigned that are capable of using ALTQ traffic shaping for igb interface
- Jim seems it is working, and its a GUI bug.
the command line doesnt give any errors, however I am not 100% sure as... -
- Possibly yes as it seems also broken on realtek.
I tried to move both cables to the reX ports but it seems my re1 ... -
09:05 PM Bug #7102 (Duplicate): This firewall does not have any interfaces assigned that are capable of using ALTQ traffic shaping for igb interface
- Probably a duplicate of #7066 which appears to be a more general issue.
-
- Is intel i350 interface
According to this url it can be patched to work. Can the patches please be made on the pf... -
- I cannot reproduce this on current 2.4 snapshots. I have tried a variety of outgoing and other interface configuratio...
-
- Jim ALTQ does looks its on the a downward path but still pfSense uses it and the traffic shaper is an established key...
-
- Personally, I think ALTQ is dead.
-
10:02 PM Bug #7037: CPU frequency in System Information
- The info might well be redundant, but dynamic resizing from different values is poor design.
-
- Applied in changeset commit:e470f72139ed54972465e653e27536687ce58b23.
-
- assigned to Pingle for resolution.
-
- Looks like the patch on the FreeBSD bug entry was committed. We should be able to pull it in from there.
-
- Applied in changeset commit:43de83978ed93c9a4886e2844e341af0f3fe9a05.
-
01:15 PM
Bug #7100 (Resolved): pkg_edit.php - $("#showadv").prop('value') not working
-
01:01 PM Bug #7100: pkg_edit.php - $("#showadv").prop('value') not working
- Works! ;) Thanks.
-
12:50 PM
Bug #7100 (Feedback): pkg_edit.php - $("#showadv").prop('value') not working
- Applied in changeset commit:6d55e876755d422e97bacb336f52f577087aa71c.
-
- This code somehow does not work: https://github.com/pfsense/pfsense/blob/master/src/usr/local/www/pkg_edit.php#L1521 ...
-
There is code in radvd to stop sending on interfaces that are no longer transmitting.
I don't know how difficult...-
- you would have to teach each affected process to re-run initgroups(3); setgroups(2); in order for them all to have a ...
-
- I don't think we have any hardware to test this with.
-
11:06 AM Bug #7101: services_dyndns.php not updating via gateway group, ok with the interface
- Sorry, a mistake in line 1...
"with 2 PPPoE connection I have defined 3 DDNS: DDNS1.selfip.net for WADSL, DDNS2.se... -
- Hi,
with 2 connection I have defined 3 DDNS: DDNS1.selfip.net for WADSL, DDNS2.selfip.net for VDSL and DDNS.selfip... -
09:10 AM Feature #7099: Make breadcrumbs clickable
- I wondered about that also, at the time of the bootstrap conversion, but there was enough going on that I never follo...
-
- Dunno if it's just me, but the entire feature is very much pointless when it's unusable for navigation. Seems pretty ...
-
- Great news!
We'll keep an eye out for it -
08:27 AM Feature #7077: Display negotiated data encryption algorithm in OpenVPN connection status
- The proposal to add the info to status 2 / 3 has been accepted, and may make it into OVPN 2.4.1. I'll update this whe...
-
- I have a proposal which should make it easier for development.
I suggest removing the interface selection as is (f... -
05:46 AM Feature #7098 (Resolved): RAM Disk Management
- RAM Disk Management
https://github.com/pfsense/pfsense/pull/2902
1) Treat the RAM disk more like a permanent stor... -
01:20 AM Bug #5993: dhcp6c not started until an RA received
- The removal of the extra dhc6c_interface_script call does cause a problem for some, those who use dhcpwithoutra and w...
01/06/2017
-
- PR merged
-
02:41 PM Feature #7097 (Resolved): Authentication cache for LDAP and RADIUS
- Currently PFSense does not remember LDAP or RADIUS authentication to the admin portal between requests. This results ...
-
- PR merged
-
- This should fix it:
https://github.com/pfsense/pfsense/pull/3359
assuming it should be "fixed" -
- Ditto, but that VM had apparently been broken in that way for some time and I never noticed until this morning when I...
-
- The code checks for having the specific new privs to view/clear notices or the "all pages" access. If the "root" user...
-
- More info: This appears to have happened because the 'admin' user on that VM was somehow not a member of the 'admins'...
-
- The notice alert/bell isn't displayed to the admin user when this code is in place. If I revert it, they show up.
-
02:28 PM Feature #6045: Updates that do not require a reboot should run reroot
- Looks like reroot doesn't work with ZFS without changing vfs.root.mountfrom
https://bugs.freebsd.org/bugzilla/show... -
- reroot crashes with ZFS. We will have to detect that case and fall back to a traditional reboot (or see if we can get...
-
- It starts fine if default ALL is selected.
But if specific interfaces are selected instead it prints bind errors a... -
- This is now live for 2.3.2_1 users as well. What little feedback I received was positive. We'll move forward from her...
-
11:35 AM Feature #7095 (Resolved): Improve Remote Gateway field description for IPSec VPN Phase 1
- I think it would be nice if it would be mentioned that 0.0.0.0 is a valid value for that field
So... -
- Luke Hamburg wrote:
> _"8.8.8.8 is not a good target"_ huhhh? Then why does https://doc.pfsense.org/index.php/Multi-... -
10:29 AM Feature #4354: Allow dpinger to ping more than one destination for a gateway.
- this is from the manual
Connection Health Check: Uses the following methods to check if the WAN interfaces are stil... -
- let me add to this talk past experiences (as i have a couple of maybe the worst isps anywhere ) I had a old dual wan ...
-
10:05 AM Feature #4354: Allow dpinger to ping more than one destination for a gateway.
- Luiz:
_"If you monitor a couple of IPs and one of them is really down, the one you really need access, how you are... -
09:45 AM Feature #4354: Allow dpinger to ping more than one destination for a gateway.
- Phillip Davis wrote:
> I would like to see something like this also. I had been meaning to look at it a long time ag... -
- "excess traffic" -- a 0 byte payload ICMP? I don't think we can call that excess traffic :)
"too much time before... -
- I would like to see something like this also. I had been meaning to look at it a long time ago! Maybe I will play wit...
-
- No matter how multiple targets are handled, it is worse off in some way (excess traffic, too much time before an outa...
-
- Can we get this one re-opened? This "bit" me badly yesterday at a customer site. Monitor IP of 8.8.8.8 started "flap...
-
-
11:22 AM Bug #7034: NTP Orphan Mode stratum setting is not displayed in input field
- Just tested again with @2.4.0-BETA (amd64) built on Fri Jan 06 01:41:07 CST 2017, FreeBSD 11.0-RELEASE-p5@ and it's w...
-
- This one is perhaps complicated to fix.
Currently if a unbound-control reload is issued then unbound will shutdown... -
- The "Outgoing Network Interfaces" incorrectly applies the WAN ipv6 link-local when ALL is not selected and also when ...
-
- These are provided via kernel modules cc_cubic and cc_htcp
I am aware pfsense when its not the endpoint these are ... -
- As announced at [1] igb devices will become em devices on FreeBSD 12. We need to have some upgrade code ready to dete...
-
- Wait, _what?_ Default gateway switching is an experimental feature? That checkbox has been there since at least 2.0....
-
- The thing needs to be kept in-line with what the "standard" tz-database distribution is doing. Otherwise, as Jim says...
-
- pfSense is not other products. And the Etc zones are NOT what you want, likely ever. We have been tempted to remove o...
-
08:37 AM Bug #7089: Opposite of + or - is occurring when selecting time zone
- In every other environment I've worked in that I can think of, you can pick the -5 and it's correct. Why is this any ...
-
- You should not be picking what you think is an offset (but is really a special-use time zone). Pick a geographic zone...
-
- Just so I can be clear, you're saying the intended behavior is that - is + and + is minus? Every other device I've ev...
-
- Changes were added to let user know about how it works, as proposed by Phil.
-
- Suggested enhancement to UI:
https://github.com/pfsense/pfsense/pull/3354 -
- There is a good chance this has been fixed by #6132 so it's worth trying on a current 2.4 snapshot.
-
- Gavin
Have you retested on a recent 2.4 snap? -
- Configuration error. Post on the forum for discussion.
01/05/2017
-
- Also, 99.9% of users should be selecting a timezone based on a continent/city in their area. This makes summer time c...
-
- https://en.wikipedia.org/wiki/Tz_database#Area
"The special area of "Etc" is used for some administrative zones, par... -
- Oh and Yes, the time is also incorrect not just the + and the -
-
- I select ETC/GMT-5 on the web interface, and typing 'date' in shell shows the opposite, +5. I changed to -4, it went ...
-
11:21 PM Bug #7090 (Not a Bug): Firewall rule is ignored when action is pass
- Hi,
I've got a firewall rule that reads:
States Protocol Source Port Destination Port Gateway Queue Schedule De... -
- Applied in changeset commit:1794ecbb8b37fc97bd1d2fe6ab7ecc19d87a9a68.
-
- The field "radomainsearchlist" in the GUI is not referenced anywhere in the backend. Needs some research/testing
-
10:40 AM Bug #7081 (Resolved): Search Domains not populating from RA using SLAAC
- When I enter nameservers in the DNS list for Router Advertisements in unmanaged mode the client will populate with th...
-
- Applied in changeset commit:80e7011fddd29a387c4c84b68c8c49dce4494729.
-
- This affects the main DHCP settings page not just the pools
is_macaddr() lost its $partial parameter/support require... -
-
04:03 PM Bug #7088 (Resolved): DHCP does not accept input into MAC Control Fields.
- "If a mac allow list is specified, it must contain only valid partial MAC addresses."
Attempted input (I also trie... -
- Is pfBlocker actually installed, enabled, and properly configured?
Please post on the forum in the pfBlockerNG boa... -
03:51 PM pfSense Packages Bug #7087: DNSBL service does not start
- Other errors:...
-
- Noticed this while configuring 2.4. dnsbl service does not start, and the .pid file has no value.
-
-
12:37 PM Bug #7086 (Resolved): stale zfs file systems
- I am not sure if this is a bug or a feature. Seems the 'Auto install'-values are used from the native FreeBSD while p...
-
12:29 PM Feature #7085 (New): Edit Firewall Rules Seperator
- Once a Firewall Rule Separator is added you cannot edit it. You have to delete and add it again to make any changes.
-
- Hey folks,
I wonder if it would be possible to include the if_iwm.ko and related firmware .kos. They are new as of... -
- Pretty sure the convention was that the @<fielddescr>@ for a @<required/>@ field was shown in bold in pfSense before ...
-
- I'm kinda unsure that the <default_value> works like that even for non-rowhelperfield fields. :-) What I see in packa...
-
11:04 AM
Bug #7082: pkg_edit.php - impossible to use default_value with rowhelperfield
- I will investigate.
I presume the desired functionality is that if the element has no current (stored) value, the ... -
- I mean, things like:...
-
- So, is it possible to have the @<description>@ tag printed somehow? (As a hover on the @<fielddescr>@ or whatever?) W...
-
-
- Looks all good here. Thanks. ;)
-
08:15 AM
Bug #6972: "Are you sure you wish to?" prompts and other issues with deleting networks from network-type aliases
- Fixed. Please retest.
-
-
- Well, this was apparently another manifestation of Bug #6972. The issue seems gone with ea02e3cf5d54c9f1ebbe09d9fa552...
-
08:25 AM
Bug #7080 (Feedback): pkg_edit.php - rowhelper fielddescr disappears when last row is deleted
- Unable to reproduce with Safari, Firefox or Chrome. Am I doing something wrong?
!rowhelper.gif! -
- An example: https://github.com/pfsense/FreeBSD-ports/blob/devel/www/pfSense-pkg-squid/files/usr/local/pkg/squid_rever...
-
- yeah, sort of. this is a fallout of 4326 not being properly tested under all conditions (nat, binat and rdr) - they ...
-
- "verbosity 4"? As in the system logs? Sure, it's in the logs, sure, but scraping logs isn't proper status output. It ...
-
- Their initial reply is that it's available if you use verbosity 4... which is correct, but not entirely useful. I'm a...
-
-
- Works (at least for cases where write_config() returns false, and there's not really much else that could be done here.)
-
07:20 AM Bug #7033: Hidden rule break the policy routing
- Jim Pingle wrote:
> Duplicate of #1136
>
> If you must have a second gateway on WAN, add floating rules to match ... -
-
- Merged and works, can be closed.
01/04/2017
-
- I just pushed this to 2.3.3 as well for more testing.
-
- A new version of OpenVPN client export for pfSense 2.4 with OpenVPN 2.4 is up now for testing.
Key changes:
* Ope... -
- I fixed this up among the other OpenVPN improvements this week.
-
-
- Applied in changeset commit:531c348639adb8b7e7d190e8fdab709fea61f61a.
-
- Yep, something isn't quite right with how it's doing validation.
-
- I just tested it with the current nightly (@2.4.0-BETA (amd64) built on Wed Jan 04 13:38:53 CST 2017; FreeBSD 11.0-RE...
-
- Applied in changeset commit:b6dd335e6b81c89f2e4dd63cbd638853ebe2a275.
-
-
07:34 PM Bug #6099: igmpproxy does not recognize upstream interface
- Is the change also available to 2.3.3 branch ?
-
09:00 AM Bug #6099: igmpproxy does not recognize upstream interface
- Luiz Otavio O Souza wrote:
> Ooops. Sorry for the breakage.
>
> Fixed in the latest version.
>
> Thanks for t... -
-
- I'll see what I can do and report back.
-
- Nothing in particular comes to mind, it would be nice to see all of the known parameters for connecting clients/serve...
-
- Will do. Is there something specific I can ask for over there that would make it easier for you?
-
- We have no way to detect that currently. OpenVPN does not report that in any of their status output. Open a feature r...
-
- NCP is great. Not knowing what cipher NCP negotiated is less great.
It would be excellent to add something on the... -
- Running ClamAV causes sporadic kernel panics and resets with the following syntax:...
-
- Organization, primarily. I have about 100 of them which are are generally speaking associated with different sites. I...
-
- For what purpose? They are all mutually exclusive.
-
- It would be useful to rearrange the client specific overrides in OpenVPN.
-
- Looks good
-
04:26 PM
Feature #7072 (Feedback): vpn_openvpn_server.php / vpn_openvpn_client.php : Add controls to OpenVPN for Negotiable Crypto Parameters
- Fixed
-
- There's one little problem left with the NCP list control. Clicking in empty area on the right side adds a "null" ent...
-
- Applied in changeset commit:fa351dd3c13e65dfabfb0f2ac2ed72b332276892.
-
- See also:
* commit:bd07fbdb4b81fc358b8fa55b06469dde7a3870df
* commit:6c00adf3316d2c5214f7e9cf2e5f138c32845d58
* co... -
- To reproduce:
1/ Edit some alias
*2/ Add some rows*
3/ Now, try to delete them (or the previously existing rows)... -
02:33 PM
Bug #6972: "Are you sure you wish to?" prompts and other issues with deleting networks from network-type aliases
- I am unable to reproduce this in the updated version. Clicking the trash can icon previously did not delete for me, b...
-
-
- OK, got to testing. As a good news, the annoying prompt is gone. The second symptom (unable to delete added rows when...
-
- I tried a few combinations and it all worked. Creating a new instance or using the wizard properly guessed the next h...
-
- Applied in changeset commit:f69e098f41bb3937b244b557969009535a911ef4.
-
- I'll work on it
-
- PR has been merged to 2.4.0 and 2.3.3 snapshots
-
- Works
-
10:54 AM Bug #7076 (Duplicate): Packets accepted by IP but rejected because "Allow IP options" is disabled are not logged
- Hi,
I added a rule to allow multicast traffic by IP without "Allow IP options" enabled (because I did not yet know... -
- Works fine on two different systems here, thanks!
-
- The issue was happening on ZFS and should be fixed after commit:b712dd529e2445fc20e983815a80a4e8ea109760
-
- OK, had a look around that bit of code. This is what I have found:
1. RTSOLD still launches multiple dhcp6c client... -
- The dhcpc before RA was originally my fix for an issue we have with Sky ISP in the U.K. I got very busy with work and...
-
- Duplicate of #7010 which is already fixed.
-
01:14 AM Bug #4310: Limiters + HA results in hangs on secondary
- Dear Luiz! Can we expect real fix in 2.4? We are waiting for it too long, and this is a really critical problem, sinc...
01/03/2017
-
- Luiz Otavio O Souza wrote:
> The issue here is limiter (dummynet) and pf redir on the same interface.
> The transpa... -
- The issue here is limiter (dummynet) and pf redir on the same interface.
The transparent proxy adds a rdr rule to ... -
09:23 PM Bug #7066: vmx(4) interfaces do not have ALTQ support on pfSense 2.4, they had ALTQ support on 2.3
- I also see this on Hyper-V virtual NICs (not legacy). Perhaps this is a more generalized issue?
-
05:14 PM Bug #7066: vmx(4) interfaces do not have ALTQ support on pfSense 2.4, they had ALTQ support on 2.3
- This appears to be caused by r263259 in FreeBSD 11 - Add Tx/Rx multiqueue support to vmx(4).
I believe that ALTQ d... -
05:46 PM Bug #6594: Package reinstallation post-config restore hangs if no Internet connectivity
- I was just hit by this as well. In my case I am preparing to replace a device at a remote site. I used pfsense's rest...
-
04:44 PM Bug #6099: igmpproxy does not recognize upstream interface
- No problem, sh** happens ;-)
I updated my box today to version 2.4.0.b.20170103.0147.
Checked igmpproxy for new b... -
- It is working on 2.3.3 snapshots as well.
-
11:21 AM pfSense Packages Bug #6987: ntopng needs Google API key for GeoIP map
- Thanks, that's the information I was missing.
-
- ntopng 2.4 is available on pfSense 2.4, and it works there. If/when the package is updated on other branches it will ...
-
- The bug referenced the need for ntopng version 2.4 to resolve the problem, so why is it being closed when version 2.2...
-
-
- Apparently no patching required with ntopng-2.4.2016.10.14 - you can configure the API key in Preferences - Users - G...
-
11:53 AM Bug #7075 (Resolved): firewall states show negative value for total bytes processed
- As seen in the screenshot, the "Firewall >> Rules >> LAN" page shows a negative number for total bytes processed by a...
-
- According to this
https://lists.freebsd.org/pipermail/freebsd-net/2013-May/035564.html
Script that can solve CPU 1... -
- Works
-
- Applied in changeset commit:4cfd15a94a97445d1334ad87bddf0c3700f74bf2.
-
- In OpenVPN 2.4 "client-cert-not-required" is deprecated, the new functional equivalent directive is "verify-client-ce...
-
- Works
-
- Seems to work in every combination I've thrown at it.
-
- After the protocol selection changes needed for #7062, the OpenVPN server page is not adjusting the port numbers like...
-
- OpenVPN 2.4 automatically attempts to negotiate crypto between the client and server, due to this, the tunnel can end...
-
- Applied in changeset commit:c854afcc3d7830414a2514a640248a5b239569a3.
-
- OpenVPN 2.4 added --tls-crypt which works similar to --tls-auth, but also encrypts the control channel. It does not r...
-
- Applied in changeset commit:3bfb38f99cd1c15b5d502b3dbabc913226550d9c.
-
-
- Basic updates are complete, now dealing with specific changes in separate tickets
-
- Already fixed on 2.4.0 - see #809
-
05:01 AM Bug #7070 (Duplicate): Sync username for xmlrmc seems considerate
- On master I do the folowing configuration:
!pfsense.png!
I have the folowing log on master :
@/rc.filter_sync... -
- There is no such thing needed, simply reboot after installing the package.
-
03:29 AM Feature #7069: Provide knob to disable state display in Diagnostics > States until a filter has been submitted.
- https://github.com/pfsense/pfsense/pull/3344
-
- Diagnostics > States becomes cumbersome on systems with large state tables. Provide a mechanism to suppress the displ...
-
12:10 AM Feature #2358: NAT64 support
- UPVOTE!
First of all, thank you for the great open source firewall product. As Apple starts to require all the new...
01/02/2017
-
- On a freshly installed VM I activated the option and when it rebooted, it came up all the way but it shows no package...
-
- I've used wrong ticket # in commit log. Relevant commits are:
commit:9bf6cdc135ddf108bc08f048687130c09cd09f4b and ... -
- Applied in changeset commit:c13c0fd0fe547fa8e35997d7ede7f8a6b33088fa.
-
- OpenVPN 2.4 supports GCM encryption but it cannot be used in Shared Key mode. If you attempt to activate it, OpenVPN ...
-
- Applied in changeset commit:a4b3624650aa46c9dc4a20afc5b522c6b9191904.
-
- HFSC support priorities just as any other scheduler:
hfsc Hierarchical Fair Service Curve. Queues attached ... -
- Is there any possibility to change the target to 2.4.1?
Or... just fix it somebody, please :) -
- OpenVPN's man page and docs say it should work but it tosses an error on the bind directive.
It appears to do the ... -
- This apparently still needs one more change. The IPv6 only modes need:...
-
01:29 PM
Bug #7057 (Resolved): Hidden field displays in browser
-
01:09 PM Bug #7066: vmx(4) interfaces do not have ALTQ support on pfSense 2.4, they had ALTQ support on 2.3
- For what it's worth, I saw the same behavior with igb interfaces after restoring a 2.3 config with a shaper.
-
- Attempting to configure traffic shaping on a pfSense 2.4 VMware VM with vmx NICs results in an error:...
-
- I pushed a change with help text for DH & ECDH and also updated the doc wiki a bit: https://doc.pfsense.org/index.php...
-
- A little fix in https://github.com/pfsense/pfsense/pull/3340
-
- Ooops. Sorry for the breakage.
Fixed in the latest version.
Thanks for the report. -
- Works fine. Client receives IPv6 DNS servers if they are configured.
-
- Works!
-
10:42 AM pfSense Packages Bug #7067 (Closed): usbhid-ups - no such file or directory
- After installing NUT and connecting a generic (Costco) CyberPower UPS, I receive the following error in the log:
u... -
10:40 AM
Bug #6972: "Are you sure you wish to?" prompts and other issues with deleting networks from network-type aliases
- Applied in changeset commit:fab3c245cfb52964cebdab2ea47dddb21731352a.
-
10:37 AM
Bug #6972 (Feedback): "Are you sure you wish to?" prompts and other issues with deleting networks from network-type aliases
- I am only able to reproduce this with Chrome but it should now be resolved.
-
- reopening since crypto is not cryptodev. Pointy hat to me
-
-
- Working now.
Thanks again for the quick turnaround.
-
08:27 AM Bug #7065: OpenVPN Server conf files not created in /var/etc after upgrading to 2017.01.01.1906 release
- Now it˛`s all good.
Thanks again! -
- Yes it's building right now, we restarted the snapshot builds to make sure it gets picked up.
-
- Thanks for the quick response on this Jim. I assume another snapshot will hit later this morning or early afternoon?
-
- That was probably from before the sync. Clear the error and check again. If you can, reboot and see if the error is g...
-
- I just have this now...
Crash report begins. Anonymous machine information:
amd64
11.0-RELEASE-p5
FreeB... -
- OK. We will wait for it to show up in snapshots and re-test and then if it's OK there, this can be closed.
-
- Yep, all works now.
Thanks! -
- I just pushed another change that should help, give it ~5-10 mins to show up on github and then gitsync or apply that...
-
- Greg M wrote:
> Ummm I`m on: 2.4.0.b.20170102.0439
> Issue persists.
Try to gitsync with master or wait next sna... -
- Ummm I`m on: 2.4.0.b.20170102.0439
Issue persists. -
- This should be fixed by the PR that was merged a short while ago and is already in the latest snapshot. Update to the...
-
- I am seeing the same errors as Greg, though I'm using a DH of 4096 instead of 2048.
Problem is still occurring on... -
- Forgot to add...
If I use ECDH only it works... -
- Hi!
I`m also affected.
First thing:
Crash report begins. Anonymous machine information:
amd64
11.0... -
- The only error that could cause the settings to not be written is if you have selected DH parameters that do not have...
-
- First problem I found is if you edit/save a client, it writes the protocol description to the config, rather than the...
-
- Looks good, no more strlen error.
-
- PR has been merged
-
04:15 AM Bug #5218: CSRF magic modifies content in pfSense interface
- No, it's back again on my installation (2.3.2), in my case while editing php files with embedded html
01/01/2017
-
- After upgrading to the latest release (20170101.1906), OpenVPN server conf files are not populated in the /var/etc di...
-
- OpenVPN 2.4 added support for LZO4 which gets better performance and consumes less CPU...
-
- Applied in changeset commit:f888c35aa25b38cdf5b1a73fc65ed6959451bfe0.
-
- OpenVPN 2.4 added two ECDH-related options:
1. Settings "dh" to "none" tells OpenVPN to use only ECDH and not DH
... -
06:03 PM
Bug #7057: Hidden field displays in browser
- Using the addGlobal() method is the best way to do this as Phil has demonstrated. That creates a simple input without...
-
- Yup. It'd be awesome if those settings were moved to the relevant place (i.e., DNS forwarder/resolver settings). This...
-
- That's for the host resolver itself -- dnsmasq and unbound in forwarding mode will pick up more.
-
- Maybe someone could instead fix/nuke the misleading note from the GUI, instead of putting in more DNS servers that wi...
-
- this is true add ipv6 and it has even more need
-
- Applied in changeset commit:ca3666766588538934bedc6933934fbadb9249ef.
-
- OpenVPN 2.4 changed the meaning of "udp" and "tcp" to be dual stack, listening on IPv6 on all interfaces at once. "lo...
-
- Applied in changeset commit:6a638752c8a3861a3309c3dc8d557c8904ff84d6.
-
- OpenVPN 2.4 supports pushing IPv6, allow the GUI to define IPv6 OpenVPN DNS servers to push to clients.
To me, I h... -
11:58 AM Bug #7036: 2.4 ZFS on RCC-VE 2440 hangs
- I also have the same issue on my RCC-VE 2440. I've tried with both Bios 06 and 08, same issue. It takes 15-20 minut...
-
- Applied in changeset commit:bffa3185a63cbdd727701704d3b82abd7c61a78c.
-
- It's finally there in OpenVPN 2.4!
And since it's caused the status page to report fields incorrectly, it needs to... -
10:31 AM Bug #6340: fsck hangs boot in background, fails to produce any action, resulting in broken firewall
Turn off sync mode.
On a clean system, before an issue crops up. It will let UFS do what it does, and not genera...-
- We don't like to move things just to move them, unless it's worth updating all of the documentation and other related...
-
07:13 AM Todo #7060 (Rejected): Logically organise various backup/restore functions?
- I'd like to do a quick reorganise of the various backup and restore functions in the GUI. While not a huge problem it...
-
05:32 AM Feature #4632: Support for Multipath TCP (MPTCP)
- Hello,
Could you please add this feature on 2.4.0 version? -
- Next round of possibilities in PR https://github.com/pfsense/pfsense/pull/3337
12/31/2016
-
- Try PR https://github.com/pfsense/pfsense/pull/3334
-
- Craft an invalid firewall rule, such as one set for IPv4 with an IPv6 src/dst, and when the input errors are displaye...
-
- You cannot specify either one in the rule directly because it doesn't make sense. Use an alias with mixed contents in...
-
- In which case flip the question on-end, why does the code (_firewall_rules_edit.php_) seem to disallow IPv4 and IPv6 ...
-
- What's the bug here?
pf allows mixed aliases and only uses appropriate addresses when matching. We allow it becaus... -
- pfSense really needs a more strongly type-checked alias system/API/library.
Current example: often these days a s... -
07:25 AM Bug #6099: igmpproxy does not recognize upstream interface
- edit: 31-12-2016
I've established a working setup, using the develop version, already on theh box.
When I disable... -
- Philipp Haefelfinger wrote:
> Is this commit in the latest build applied? If yes, there seems to be something buggy ... -
- See "PR 3331":https://github.com/pfsense/pfsense/pull/3331 . Note added to assignment pages, probably suffices?
-
- And as soon as you have "Diagnostics->Edit File" you can change whatever code you like, so you can add/modify code to...
-
- I suppose that "WebCfg - All pages" includes shell command prompt, so it's clearly on reflection going to have shell ...
-
- PR https://github.com/pfsense/pfsense/pull/3329
I made the "Floating" field be created with the same construction as... -
- _firewall_rules_edit.php_ on Firefox 50.1, see attached screenshot
Html looks correct (contains "hidden" parameter... -
- As of 2.3.x the original issue is resolved (it's now allowed/valid) so this issue can be closed as resolved
12/30/2016
-
- This is not so easy, there are a lot more relevant commits to MFC, a lot.
-
- This seems to be relevant commit - https://svnweb.freebsd.org/base?view=revision&revision=306433
Assign to Luiz for ... -
- I think I understand why the text under Remote networks is written the way it is now. Apologies for the misunderstan...
-
- All of the settings are from the perspective of the server, even the override. The descriptions reflect this, they do...
-
- Jim Pingle wrote:
> The wording of IPv4 Remote Networks is correct. The box defines a client-side network ("routed _... -
- OpenVPN 2.4 makes it more obvious that you can't mix static IPv4 in an override with dynamic IPv6, so there is a grea...
-
- The wording of IPv4 Remote Networks is correct. The box defines a client-side network ("routed _to_ this client") for...
-
- The OpenVPN Client Specific Overrides page under OpenVPN settings only has a single Tunnel Network field. In fact t...
-
02:37 PM Bug #6981: IPv6, rc.newwanipv6, flooding log and resets connection periodically
- Happy to helped. Last good action for 2016.
Happy new year^^ -
12:02 PM Bug #6981: IPv6, rc.newwanipv6, flooding log and resets connection periodically
- It does work for me now - Marcel's hint to check "Request only an IPv6 prefix" was indeed correct. After two more reb...
-
11:00 AM Bug #7050: Limiter with PFsense 2.4 transparent proxy
- Luiz good afternoon, I have two files as you requested, one working perfectly, which is called BKP_2.1.5_Functionando...
-
- Package was updated as well
-
- Update OpenVPN to 2.4.0 and make necessary adjustments. Noted after a quick look:
* Remove tun-ipv6 from config si... -
08:08 AM Bug #7056: Add gpg keys to repo for proper iso download verification method
- Ah, I had assumed it was simply two httpd's on the same box as they had an adjacent IP address.
Still however, if ... -
- Duplicate of #4472
That said, a _copy_ of the hash is on the same server as the files, but the hash is also availa... -
- Currently there is no legitimate way to properly verify the .iso download has not been tampered with.
The sha256 f... -
- OpenVPN 2.4 has made a few changes to the Windows installer that may need accounting for. See https://community.openv...
-
- Port aliases work again with that last commit. Will leave it open waiting for feedback to make sure the original issu...
-
- Applied in changeset commit:631217f488c682ce4ffa8af5d0c54b03c016af46.
-
- PR has been merged, thanks!
12/29/2016
-
- This fix broke port aliases.
With this commit, port aliases are empty:... -
- were the files I uploaded any help or is something more needed?
-
08:02 PM Bug #6594: Package reinstallation post-config restore hangs if no Internet connectivity
- I'm running into this right now. Not a big network guy, just trying to replace our small business' router with a SG-4...
-
05:05 PM
Bug #6972: "Are you sure you wish to?" prompts and other issues with deleting networks from network-type aliases
- I'll take care of it :)
-
- Renato Botelho wrote:
> It happens when you click on fa-trash icon. If you click on other areas of the button confir... -
- I've found the way to reproduce it. It happens when you click on fa-trash icon. If you click on other areas of the bu...
-
-
- Is this commit in the latest build applied? If yes, there seems to be something buggy with the fix.
I just updated m... -
- Applied in changeset commit:fef29f5aee32899b72886f8a0c00205bf0f2fc09.
-
01:01 PM Bug #7052 (Rejected): Fails to monitor ipv6 gateway
- From log...
-
- New traffic graphs respect theme colors. Should be OK now
-
- Keeping it opened for reference but I'm not sure if Bill Meeks will implement it based on his comments on the forum t...
-
- Jim Pingle wrote:
> Doing a reroot style restart works nicely on its own, need to test it during an upgrade to know ... -
- Doing a reroot style restart works nicely on its own, need to test it during an upgrade to know for sure how it handl...
-
- Done. pfSense-upgrade 0.11 on recent 2.4.0 system will do the trick
-
- Nelson, can you submit (even privately if you prefer) a copy of your working settings for the 2.1.x version and also ...
-
- Not sure what's special about 2.4 here; this has _never_ worked since the hidden rules created by the package when se...
-
- Good morning Luiz, is as follows, transparent proxy use with the limiter by ip, what happens is that when setada the ...
-
- Seems to all be working and sufficient. Can add more later if needed.
-
-
- The changes here fix this bug report.
For a followon feature request to implement control of view/clear notices see:... -
- Works great
-
- Fixed
-
- Proposed code in PR https://github.com/pfsense/pfsense/pull/3322
-
- Use case:
A user with minimal page privs (e.g. can just change their password, or access a few status pages or...) s... -
- After talk with Nelson on facebook he agreed to open a new ticket in english
12/28/2016
-
- boa noite, estou tendo problemas no limiter funcionando com proxy transparente, nas versões acima da 2.1.5, todas tes...
-
- Squid's own capabilities mean nothing here. You need support in the underlying OS to work with. Even if I made all th...
-
01:32 PM pfSense Packages Bug #7048: Add IPv6 support to squid
- Regarding the comment, "The NAT used for transparent IPv4 proxy won't work, and there's nothing to hook into regardin...
-
- A couple of notes on this: The only part of Squid working with IPv6 is the reverse proxy (though, that's not advertis...
-
- Corrected subject - This is not a "bypass" in the way that is stated. The squid package only supports IPv4 currently....
-
- Missing IPv6 support in the squid package allows traffic to escape intended inspection and apparently also the firewa...
-
- Last part of this was implemented by #7046
-
- Since the switch to dpinger, there is no easy way to view the gateway status from the shell. Having the gateway statu...
-
- Applied in changeset commit:84fe48d414dc59ffd236b072000f07ea7423380e.
-
- Items to add:
* The firewall platform and serial number
* ARP Table
* NDP Table
* Gateway status (See #7046)
* Z... -
- Applied in changeset commit:337822a39bfd89c011cfda4092a6e5e409a7dbcf.
-
- When running a playback script, there is extra output from pfSsh.php that is unnecessary:...
-
-
- See #6989
-
10:31 AM Feature #7044 (Duplicate): Gateway Monitoring - Add More IPs
- I would like to request that it be possible to add more than one ip to monitor the gateway (s), today we have the pos...
-
- Applied in changeset commit:fe80b3aac6ddd661c7a2daf52ad54f1722915590.
-
- Bug fix PR https://github.com/pfsense/pfsense/pull/3319
I will raise another feature issue to discuss what could b... -
- Applied in changeset commit:c87eeb08acc6d5d0fd642e50990b93b7137657ee.
-
- PR https://github.com/pfsense/pfsense/pull/3321
-
- When the user clicks "here" for more information, nothing happens, because they do not have carsh_reporter page acces...
-
07:58 AM pfSense Packages Bug #7028: Squid - all javascript broken by bootstrap conversion
- Steve Beaver wrote:
> Right. It is not "A new bug", it is the original bug that has just been fixed.
https://gith... -
07:56 AM
pfSense Packages
Bug #7028: Squid - all javascript broken by bootstrap conversion
- Right. It is not "A new bug", it is the original bug that has just been fixed.
-
- None of those fixes are in 2.3.2 so it's just pointless to test anything there.
-
- A new bug is revelead, see:
!http://i.imgur.com/U6Ggy4d.png!
The syntax is duplicated.
New installation from... -
12/27/2016
-
- This is working well for me with changeset applied using system patches on 2.3.2_1 that I was using in my initial tes...
-
- Applied in changeset commit:5d1cf6f5cf85c6371078e288172da1e05df1380c.
-
- https://github.com/pfsense/FreeBSD-ports/pull/242
Kindly test and report back either here, and/or @ https://forum.... -
- Simplest way to reproduce this is to use a DNS Resolver override for "setfirst" and the firewall's domain, set to an ...
-
- In certain circumstances a DHCP client interface gets configured with an incorrect address. The address that should b...
-
-
- Broken feature gone -> can be closed. Thanks.
-
- PR has been merged, thanks!
-
- PR has been merged, thanks!
-
- See PR https://github.com/pfsense/pfsense/pull/3312
-
- Works here, too. Gateway status shows it going up/down but no actions are taken when it transitions.
-
- Been working for me, but it would be good to get some feedback from anyone else who has tried/tested this.
-
- PR has been merged, thanks!
-
- PR has been merged, thanks!
12/26/2016
-
09:36 PM Bug #7036: 2.4 ZFS on RCC-VE 2440 hangs
- Running bios version 08 (ADI_RCCVE-01.00.00.08-nodebug) with no change. pfSense-CE-memstick-ADI-2.4.0-BETA-amd64-2016...
-
- Follow the procedure at http://netgate.com/docs/reference/adi-bios-flash.html#adi-bios-flash-procedure and update to ...
-
- Most likely a configuration error. Please post on the forum for discussion before opening a bug report.
-
07:24 PM Bug #7041 (Rejected): Not all mobile IPsec phase 2 entries pass traffic through the correct interface
- My phase 2 configuration is as follows:
VLAN 10 [Home]- 192.168.1.0/24
VLAN 12 [VMs] - 10.1.2.0/24
VLAN 13 [Lega... -
-
- Cannot be downloaded anywhere, another thing killed by Proofpoint.
Close please. -
- Confirmed, happens even with a very basic config (one interface, dummy password, standard router ID and area filled i...
-
- https://github.com/pfsense/FreeBSD-ports/pull/241
-
- https://github.com/pfsense/FreeBSD-ports/pull/241
Added options matching the reverse proxy options (modern/interme... -
-
- Works.
-
- I am using the interfaces like this :
ix0
ix0_vlan1
ix0_vlan35
I just want to disable only ix0, but still h... -
02:38 AM pfSense Packages Bug #7039 (Feedback): HAProxy backend configuration does not handle intermediate CAs properly
- In HAProxy backend settings, when configuring a server, there is the option to have it validate SSL certificates agai...
-
- I'm confused as to why they would issue a /64 PD on the wan.
dhcp6c does ask for renew, as shown in the attached i...
12/25/2016
-
11:47 PM Bug #7027: Dynamic DNS dyndns.org no longer updates
- Tony Mace wrote:
> Kill Bill wrote:
> > Try with 2.3.3 snapshots.
>
> Am using "2.3.3.a.20161220.0605" right now... -
10:31 PM Bug #7038: SG-1000 Quagga zebra service fails to start with signal 6 abort
- Relevant logs (system.log):...
-
- Quagga_OSPF 0.6.16 package installed from package manager. Using config pasted below (raw, not assisted). OSPFd servi...
-
- If the frequency is at maximum, the information is redundant and thus hidden. There isn't any reason to think it isn'...
-
- That seems reasonable, but resizing the column on refresh is not pretty. I don't see any reason to why it should't sh...
-
- This only shows when the actual CPU freq is lower than max. By taxing the CPU with reloading the dashboard every 5 se...
-
- On dashboard under "CPU Type" the "Current" frequency rarely appears. Maybe 1 in 10 refreshes? This is with refresh i...
12/24/2016
-
07:44 PM Feature #4821: PPPoE WANs do not take full advantage of NIC driver queues for receiving traffic
- I would like to add that I am also experiencing this issue. I would love to see this fixed in pfSense 2.4 if possible...
-
03:16 AM Bug #6930: DHCP server should be disabled for /31 and /32
- Yup looks much better looking at the error message in the source code.
-
- Something like https://github.com/pfsense/pfsense/pull/3309 ?
12/23/2016
-
- RCC-VE 2440, bios version 6
Downloaded 2.4.0.b.20161223.0723 and did a clean install. Auto ZFS, default values, se... -
06:47 PM Feature #7035: Make webgui authentication logs less invasive
- I don't want to disable them, I feel knowing that is very useful, I just don't want them spilling out on my shell, es...
-
- Login events are always logged that way for security reasons. If you want to disable those messages, use the "Disable...
-
- Just a note, I've only had the SG-1000 a few days so I haven't updated the DNS on the syslog box yet, so it shows the...
-
- I'm not sure why, I'm guessing intentional, but webgui events, such as logins to the webgui, when they are logged can...
-
03:03 PM Bug #7003: autoboot_delay on 2.4.0
- Ok thank you :)
-
- Ken Sim wrote:
> Am I correct that this is only set during install and we have to set it manually if already install... -
- Fix committed.
Thanks! -
- It now doesn't enable dhcp on a /31 or /32 subnet, IMO the message "The DHCP Server can only be enabled on interfaces...
-
- The Address given to the WAN interface is more or less irrelevant, cause it's not realy necessary for your firewall r...
-
- When I check "Request only an IPv6 prefix" the WAN interface uses the first /64 prefix (prefix ID 0) out of the /56 p...
-
- In my opinion we are not talking about a bug any more.
The problem seems to be a missconfiguration ...
For DTAG "... -
- The ISP (Deutsche Telekom) doesn't supply a router, so I can't do any Wireshark capture there. The German Telekom use...
-
- Works, no failures or delays when booting with a remote LDAP server.
-
- Works, no delay on boot with LDAP enabled when local accounts sync
-
- No response from the OP here or on Reddit. I can't reproduce this on a current 2.4 snapshot (also on vmware with vmxn...
-
- Works as expected with that last commit, when the client can resolve the hostname it connects.
-
- Applied in changeset commit:35d393f04add76d7f5ac55fb33aaa955f354b5b8.
-
- The JS input validation still rejects hostnames on the page. I'll push a fix shortly.
-
- Works as expected now.
-
- Works
-
- Works
-
- I've been keeping an eye on this and haven't seen it fail in quite some time. Every update I've run on any platform (...
-
- Works
-
- No response from the OP, can't seem to reproduce it.
If someone can reproduce it and test a potential fix, please ... -
- Works as expected now
-
- Works
-
- All of the problem cases work as expected now. Names are rejected as being in use, I was not able to make a conflict.
-
- Works, VIPs are still there and their skews are raised as expected. Secondary takes over like it should. Comes out of...
-
- Wow, that was fast :)
Thanks, and happy holidays! -
- Applied in changeset commit:d0db0f9bcae3d368c2d83cc7bc4b888fd07eade3.
-
-
- The "Orphan Mode" setting in the NTP config is not displayed in the input form field.
It is used, though. I checke... -
- Works
-
- Looks much more obvious, hopefully it's clear to users now.
-
- Seems fine now, and the sorting on the CP status page that was affected was also ripped out & replaced (see commit:e1...
-
- It's all gone.
-
- Works
-
- Works
-
- Works
-
- Seems to be fine now, no more log spam and the dummy printcap file is there as expected.
-
- Works well. I went into several console menu options and confirmed ^C returned to the menu from all of them rather th...
-
- Works fine.
The TFTP field itself had a different issue as well, see commit:9d9736d7bf456a441e3cb95421cfed429502e220 -
- Works, associated rules are toggled together with the NAT rule when the NAT rule is changed.
-
- Works correctly now
-
08:08 AM Bug #6016: ovpn-linkup not populating IPv6 gateways
- Great! Thank you!
-
- Works
-
07:45 AM
Bug #7025 (Resolved): wizard.php?xml=setup_wizard.xml - Setup wizard is flagging valid LAN IP addresses as invalid
-
- Duplicate of #1136
If you must have a second gateway on WAN, add floating rules to match the outbound traffic to o... -
- Hello
I found a hidden rule who break the policy routing.
The rule :
pass out route-to ( lagg0_vlan2000 192.1...
12/22/2016
-
- Am I correct that this is only set during install and we have to set it manually if already installed? Wouldn't it ge...
-
- Just removed this deprecated stuff in https://github.com/pfsense/FreeBSD-ports/pull/241. People should use LDAP for A...
-
05:14 PM
Bug #7026 (Resolved): filter_logs.inc: parse_firewall_log_line(): Filter logs do not display
- Thanks you Luiz.
-
- Don't delete the DUID mid session, its pointless, dhcp6c will generate a new one, which means that your ISP then sees...
-
- And I think it's important that this seems to be a problem with dhcp6c and NOT dhcp6d.
-
- I still have this issue. I am not sure whether this has to do with the watchdog at all. When I enable IPv6 from the w...
-
- This also affects Status > IPsec
We have access to a customer system that has 70 tunnels defined, and it happens e... -
02:42 PM
pfSense Packages
Bug #7028 (Resolved): Squid - all javascript broken by bootstrap conversion
-
- Yeah, 0.4.28 behaves like it used to works on pfSense 2.2.x, all weirdness gone. Very cool. Thanks!!!
-
01:50 PM
pfSense Packages
Bug #7028: Squid - all javascript broken by bootstrap conversion
- Can you describe"the weird behaviour" please? I don't see anything untoward. Also what Browser/OS are you using?
T... -
- Well, that's kinda difficult to see with the package as is. :) What I did for testing was nuking all the "advanced" t...
-
01:27 PM
pfSense Packages
Bug #7028: Squid - all javascript broken by bootstrap conversion
- I think that happens now. The XML fragment ...
-
- Steve Beaver wrote:
> Yep. Revised that yesterday. The Antivirus stuff appears to work as designed, but that design ... -
07:14 AM
pfSense Packages
Bug #7028: Squid - all javascript broken by bootstrap conversion
- Yep. Revised that yesterday. The Antivirus stuff appears to work as designed, but that design may not be ideal. It's ...
-
- PR has been merged, thanks!
-
- A suggested solution in PR https://github.com/pfsense/pfsense/pull/3306
-
- If the interface that an OpenVPN server or client is being configured on uses DHCP and has not yet received an IP add...
-
- Applied in changeset commit:aa64bb6565db2f788846eee9a62bccde280a605a.
-
- On systems that do not have any assigned interfaces capable of using ALTQ, that fact is not make obvious enough to th...
-
- It still happens on 2.4, actually it's a little worse since it doesn't appear to transmit on the additional queues li...
12/21/2016
-
- OK, tested. The authentication tab works great. The antivirus stuff is quirky, will need to play with it. Most issues...
-
04:45 PM
pfSense Packages
Bug #7028: Squid - all javascript broken by bootstrap conversion
- Should be there already
-
- Steve Beaver wrote:
> There was a bug in pkg_edit.php that was causing the \<onchange\> XML tag to be rendered incor... -
04:30 PM
pfSense Packages
Bug #7028: Squid - all javascript broken by bootstrap conversion
- Remember to update BOTH Squid from the package manager, AND the base system from the Update manager.
-
- Thanks, much appreciated! Will test with a new snapshot ASAP.
-
03:08 PM
pfSense Packages
Bug #7028 (Feedback): Squid - all javascript broken by bootstrap conversion
- There were two issues: There was a bug in pkg_edit.php that was causing the \<onchange\> XML tag to be rendered incor...
-
- Thanks. Yours truly Santa. :-P
-
07:31 AM
pfSense Packages
Bug #7028: Squid - all javascript broken by bootstrap conversion
- And a merry frickin' Christmas to you too :)
Looking at this now. -
- Guys, there's this @squid_js.inc@ thing that used to do a lot of useful GUI work. It's completely no-op since the boo...
-
- Kill Bill wrote:
> Try with 2.3.3 snapshots.
Am using "2.3.3.a.20161220.0605" right now with same problems -
- Try with 2.3.3 snapshots.
-
- It was broken only on 32bits platforms (ARM).
Fixed by: https://github.com/pfsense/FreeBSD-src/commit/aa25003286b4... -
- That's right JimP, but seems like we have a regression...
-
- Looks the same as #6919
-
- Remove target. When PR is done and merged it's going to be available to stable versions
-
- IPsec is builtin GENERIC kernel even in FreeBSD and it depends of crypto. This change doesn't make sense anymore
-
-
12:46 PM pfSense Packages Bug #6983: pfBlockerNG-2.1.1_4 requires xmlrpc.inc which is removed or moved
- Confirm: Fixed.
-
12:45 PM Feature #7030 (New): New Feature Load Balance Per Amount Of GB
- https://forum.pfsense.org/index.php?topic=122752.0
-
- It may be valid on Cisco but does it actually function on FreeBSD? That would be the real question. GRE doesn't handl...
-
11:13 AM Feature #7029 (Closed): GRE interfaces not available as SPAN port
- GRE interfaces are removed from all bridge port lists. It is valid to select a GRE port as a SPAN port destination (...
-
- Fix committed.
Thanks! -
- Reproduced it on a stock FreeBSD 11 system.
Opened a bug report upstream: https://bugs.freebsd.org/bugzilla/show_b... -
- squidGuard can't redirect to https that way, the user will get a nasty cert error and/or it won't work.
Setup an e... -
07:59 AM Bug #6978: Squidguard error page crashing after activating WebGUI PFSENSE https security
- sry, squidguard instead dansguardian.
Squid uses port 3128 and webgui 8989.
12/20/2016
-
- Have paid DynDNS.org service - used to work - do not know exactly when it quit but now get following error in system ...
-
- I'll take this one, this happens because of a change on a struct size.
-
09:18 PM
Bug #7026: filter_logs.inc: parse_firewall_log_line(): Filter logs do not display
- 2.4 logs:
Dec 1 16:34:41 pfSense filterlog: 61,16777216,,12000,cpsw0,match,block,in,0,bad-hlen=0),0
Dec 1 16:39:1... -
07:11 PM
Bug #7026 (Resolved): filter_logs.inc: parse_firewall_log_line(): Filter logs do not display
- There is a problem with the format of the filter logs which is causing src/etc/inc/filter_logs.inc: parse_firewall_lo...
-
- v6 CARP addresses now works too: https://github.com/pfsense/FreeBSD-src/commit/580e1b6a1155103292e67771940801d8fe896f45
-
- IPv4 was fixed by this commit: https://github.com/pfsense/FreeBSD-src/commit/77805aa5fa51dbd2ed0b6c363c6235c892caee76...
-
- It happens to me on Firefox (50.1.0 on Linux) but I was using an SG-1000 when I confirmed it, as that's what the repo...
-
01:26 PM
Bug #7025 (Confirmed): wizard.php?xml=setup_wizard.xml - Setup wizard is flagging valid LAN IP addresses as invalid
- This appears to be Chrome related. No problem on Safari or Firefox. Probably the Chrome pattern matching bug. Checkin...
-
- Go through the setup wizard to the LAN configuration page, enter a valid IP address, click or tab out of the field an...
-
- Applied in changeset commit:e66503688e06a8ce19875863ee87356bb4ce3cf8.
-
- Applied in changeset commit:bcdf453402a2f742b2656cd59602250f062896ee.
-
- Applied in changeset commit:dc5edc6e9840a53e6c7153414c1d0e1066efd058.
-
- Applied in changeset commit:533f3160a46672e3cf74f6fd1af952f966ae5b06.
-
- Target to future while we wait for the patch
-
- Convert code to use modular version of simplepie instead of static file
-
10:22 AM Bug #4766: "URL Table (IPs)" and "URL (IPs)" do not work when text file is hosted on a fresh install of pfSense
- https://192.168.1.1/firewall_aliases.php?tab=all
In URL you must to use same hostname on self-signed certificate. ... -
- Moving radius.inc change to a new ticket (#7024)
-
- Replace copy of radius.inc, with a good number of modifications, by pear-Auth_RADIUS provided by ports
-
- You are probably talking about this forum thread - https://forum.pfsense.org/index.php?topic=116487.0
I post an an... -
- One of my testers has a site in France, the dhclient needs to send extra options ( Orange France ). Apparently there ...
-
-
- Yes, it is supposed to be always below the actions, I even linked the code and stated it explicitly. Dunno which part...
-
05:41 AM pfSense Packages Bug #7022: HAproxy action sequence bug
- Kill Bill wrote:
> Actually, no, there is no such bug. The redirect rules are ordered perfectly fine as declared. An... -
- Actually, no, there is no such bug. The redirect rules are ordered perfectly fine as declared. And there's nothing to...
-
- Kill Bill wrote:
> Fix the "tes" typo to "test" perhaps? Use https://forum.pfsense.org/index.php?board=60.0 for help... -
- Fix the "tes" typo to "test" perhaps? Use https://forum.pfsense.org/index.php?board=60.0 for help, Redmine is for bugs.
-
- Web interface generate wrong action sequence in HAproxy config. See screenshots
-
- PR has been merged. Thanks!
-
- 2.1.1_5 should address this
12/19/2016
-
-
- Been merged/fixed long time ago. Can be closed.
-
-
- Works, thanks! 8-)
-
02:53 PM
Todo #6889 (Resolved): Improve router mode help text
- Kill Bill text reformatted to take up less screen space. Thanks KB.
-
- Given the other changes on 2.4 (e.g. dropping i386), it may also be time to remove the polling option from /usr/local...
-
- Done
-
09:44 AM Bug #7020 (Duplicate): <Hostname> is omitted when sending logs on syslog
- When sending "filterlog" over syslog the standard defined in https://doc.pfsense.org/index.php/Filter_Log_Format_for_...
-
- Confirmed as fixed. A user with the Deny Config Write privilege won't trigger a new ACB entry on save.
-
08:39 AM Bug #6990: DDNS IPs not updating after a system restart
- Jim Pingle wrote:
> Nothing unusual in the settings, look for anything related to Dynamic DNS in the main system log... -
- Nothing unusual in the settings, look for anything related to Dynamic DNS in the main system log, are there any error...
-
- Jim Pingle wrote:
> Not nearly enough detail.
>
> What are the exact types and services used in your Dynamic DNS ... -
- PR has been merged
-
- PR has been merged
-
- PR merged
12/18/2016
-
- In case you are still waiting... https://github.com/pfsense/FreeBSD-ports/pull/235
LOLz. -
- https://github.com/pfsense/pfsense/pull/3291
-
- https://github.com/pfsense/pfsense/pull/3290
-
- I got annoyed once again by having to look up what the modes do in the PHP code, so did a PR:
https://github.com/p...
12/17/2016
-
- Applied in changeset commit:ac90c9012453c7e81ff0d0b472a55b116866c56e.
-
- The zone parameter needs better validation/encoding on the captive portal status pages, and the 'order' parameter on ...
-
-
- Did you read the field description and the error message?
> Enter the date when this account should expire. *Forma... -
- Probably fixed with #6900 anyhow. Closing.
-
- Not even remotely enough info here to debug anything. Please, move to https://forum.pfsense.org/ until you have a con...
-
- Jose Luis Duran wrote:
> This was fixed in vm-bhyve v0.12.3.
>
> (https://github.com/churchers/vm-bhyve/commit/a7... -
- No idea what's the bug here (the requests are relayed from the configured interfaces to the network where's the confi...
-
01:53 PM Bug #7018 (Closed): DHCP packets replicated on non-DHCP relay interface
- When enabling DHCP relay for the following networks:
LAN: 192.168.2.0
PUBLIC: 192.168.4.0
But not on:
Se... -
- Well, actually there's _some_ output needed no matter what, to provide some indication that the Backup button works. ...
-
- I just removed the misleading "success" noise as part of https://github.com/pfsense/FreeBSD-ports/pull/234 - as noted...
-
- Well I think this bug is gone since this commit (which disabled the unwanted duplicated backups as well) - https://gi...
-
-
- Works just fine with the GUI as well, cf. https://github.com/pfsense/FreeBSD-ports/blob/devel/net/pfSense-pkg-Quagga_...
-
- https://github.com/pfsense/FreeBSD-ports/pull/234
-
- only ipv6 that i get to show up is static mappings so I attached requested file currently on 2.3.3-DEVELOPMENT (amd6...
-
- The description here makes no sense. I'd suggest to post some configuration screenshots with the interfaces configura...
-
- Renato Botelho wrote:
> Please send it as using github pull request on https://github.com/pfsense/pfsense-packages r...
12/16/2016
-
-
- This works just fine here with 2.3.3, sounds like duplicate of Bug #2800.
-
- The "reset log files" issue should be fixed by https://github.com/pfsense/pfsense/pull/3284
As for unbound logging... -
-
- 2.2.x packages are not maintained. PR for stunnel package on 2.3+ is @ https://github.com/pfsense/FreeBSD-ports/pull/...
-
-
- 2.2.x packages are not maintained. PR for stunnel package on 2.3+ is @ https://github.com/pfsense/FreeBSD-ports/pull/...
-
- Adding the PR for reference: https://github.com/pfsense/FreeBSD-ports/pull/135
-
- Hmmm, wraps into multiple lines just fine here.
!https://s29.postimg.org/8064c051j/Screenshot_ACB.png! -
- Relevant forum thread: https://forum.pfsense.org/index.php?topic=113667.0; the method used for Squid 3.3 does no long...
-
- I'll work on it
-
- It would be helpful to show the user that pf has enabled adaptive state timeout scaling when it kicks in.
Some sam... -
- @luiz has the details, looks like a ESP fragment but it creates odd state with unknown IP address like:
enc0 icmp ... -
- Well, there's obviously much more wrong here, this actually requires a reboot to take effect. Also, adding/removing u...
-
- Yeah that's part is good to stay, what still annoys me is that you get a notice from it (alert bell, e-mail notificat...
-
- Yup, works. (As for the error being shown in "PHP Response", I think that's OK and should actually stay, it's useful.)
-
- Applied in changeset commit:45bcbee917920238248a2486a2742e3ff327b309.
-
- Pushed a small change so that it will at least not offer to submit a crash report.
-
- Well I think what was meant here is that pasting random potentially broken junk to Diagnostics - Command Prompt for t...
-
- I have no intention setting up bridges to test with transparent Squid. My understanding is that when the interface is...
-
- Pi Ba wrote:
> Is it possible to make changes to existing ports makefiles?
See this and replace with < 1100000?
... -
07:32 AM Bug #7014: inbound connections do not get through whilst using openvpn
- Thanks posted on forum few weeks back but got no response
thanks for the detailed bug that does sound similar wel... -
- Not enough usable info here. Please "post on the forum":https://forum.pfsense.org/index.php?board=69.0 with much more...
-
- openvpn not opendns
-
- when using openvpn, inbound traffic is not received and do not get passed to the intended device,
when you turn o... -
- Jim Pingle wrote:
> Yeah it would need some extra bits but that can all be done by hand if the user really wants it,... -
-
- No idea how to reproduce. On save, squid_resync() is called [1] which in turn calls squid_resync_reverse() [2] which ...
-
-
- Done with 1.1.3 (https://github.com/pfsense/FreeBSD-ports/pull/147), can be closed.
-
-
- Fixed with 1.1.3 (https://github.com/pfsense/FreeBSD-ports/pull/147), can be closed.
-
-
- Works.
12/15/2016
-
-
- Works, log noise gone. Yay!
-
- Applied in changeset commit:0917101a0c0c4d611eeb41c2d3ee49062d52a2e9.
-
- To me, I've got a fix coming.
-
- Thanks for testing!
-
- Jim Pingle wrote:
> I pushed a change to fix the options up so it'll come through with the next update. pkg is smart... -
- Agree. I might do a PR eventually when I get bored.
(All this also could be done with OpenSSH "natively", but it s... -
- Yeah it would need some extra bits but that can all be done by hand if the user really wants it, it doesn't hurt to h...
-
- Yeah, thanks. I'll test in a while. (As for the chroot, that's going to need some pfSense code changes - adding a sep...
-
- I pushed a change to fix the options up so it'll come through with the next update. pkg is smart enough to pick up th...
-
- Applied in changeset commit:ef76f693c54b01b40666a41dbf82be70f9379718.
-
- Session output with SCP (broken):...
-
- Dunno guys how you compiled this, but scp does not work. Never worked in fact, as discussed at https://forum.pfsense....
-
08:20 AM Bug #6099: igmpproxy does not recognize upstream interface
- Dear Maintainers,
@Jorge M. Oliveira, thank you for your work to fix this issues.
I'm using the igmpproxy to co... -
- If it breaks for you, please include the relevant portions of dhcpd6.leases that break it, or the entire file if poss...
-
- If I understand things correctly, after implementing Bug #6012 the groups with scope set to "Remote" are not supposed...
12/14/2016
-
07:57 PM Bug #6852: Commit 8f86722 breaks DHCPv6 leases status page
- This also just happened to me. There is more info when analyzing the stderr output from awk, or running the sed/awk c...
-
12:04 PM
Feature #7011 (Resolved): Retain vendor MAC address at power up
- There are circumstances where it is desirable to be able to read the vendor's MAC addresses on an interface, even if ...
-
- PR has been merged
-
- Duplicate of #6132
-
- Applied in changeset commit:788f1c3bee47b409a357ec19750fb958a5397938.
-
- https://github.com/pfsense/FreeBSD-ports/pull/278
-
- Both PRs merged, thanks!
-
- This is still happening to customers on 2.3.2-p1, so the imported patch didn't fix the problem.
-
- @Kill Bill: Deactivating watchdog solves my issue. It realy seems to make some trouble running it at moment. Especail...
12/13/2016
-
-
- Looks good here. Thanks.
-
- Applied in changeset commit:5fda51cd2af8a099b89f35439343744dbe981fa1.
-
- Steps to reproduce:
Create HA cluster:
Add IP Alias VIP to Localhost on Primary. Save/Apply
Results: IP Alia... -
- IP Alias VIPs can be added to Localhost on primary node and are properly XMLRPC synced to secondary's configuration.
... -
12:51 PM pfSense Packages Bug #7009 (Resolved): syslog_ng Log Viewer page didn't get converted to the new 2.3 bootstrap
- It is not as noticeable on the default theme, but shows up on the dark theme.
page url: syslog-ng_log_viewer.php -
- As long as you're logging things, dump the output from @/usr/bin/netstat -s -ppfkey@ as well to see if the errors in ...
-
07:54 AM Bug #6223: IPsec + OpenBGPD fails with "PF_KEY socket: No buffer space available"
- I've created a little patch to the ipsecmon.sh file to actually log the output using logger, and made it a little eas...
-
- https://github.com/pfsense/pfsense/pull/3274 addresses the DHCP (v6) Server part.
-
- Phillip Davis wrote:
> Some fixups/enhancements to Status DHCP Leases in https://github.com/pfsense/pfsense/pull/327... -
- Some fixups/enhancements to Status DHCP Leases in https://github.com/pfsense/pfsense/pull/3273
If DHCP Server is dis... -
- https://github.com/pfsense/pfsense/pull/3271 addresses the DHCP (v4) Server part.
-
- The only thing that the watchdog does is setting up a cronjob which in turn checks every minute whether configured se...
-
- I think System Watchdog needs some dusting off. I stopped using it a while ago as it seems to cause more problems tha...
-
- That now looks pretty normal.
-
01:41 AM Bug #6406: Web process becomes unresponsive producing 502 Bad Gateway nginx
- Well, to me it started to happen when I readded the "Traffic Graphs" widget. It never happened before without that.
12/12/2016
-
- Screenshot is fixed.
It may seem absurd to you but what else should it do? There isn't any programmatic way for it... -
- The resolver is answering queries just fine on LAN. Until you set up a NAT rule on WLAN. Sorry, but this behavior is ...
-
- There isn't anything to fix. Logically, it's acting as intended. That's what NAT reflection does -- it redirects anyt...
-
- Well perhaps this should be left open till it's somehow fixed, sending packets coming from completely unrelated inter...
-
- The extra interfaces are coming from NAT reflection and it doesn't appear to be a regression, but a quirk of having r...
-
- !https://s23.postimg.org/53zzev93f/Screenshot.png!
-
- What options do you have configured for NAT Reflection under System > Advanced, Firewall & NAT?
-
- The rule from config.xml:...
-
- I can't reproduce this on current snapshots with 2.3.3 or 2.4, can you show the XML for that rule in config.xml? And ...
-
- Doing this from *LAN* machine (remember, the redirection is supposed to happen on *WLAN*):...
-
- Dunno guys when this regressed, however NAT rules apply on ALL interfaces, no matter what you select. Say, you follow...
-
- Those are a different story entirely and unrelated to this at all. See #4227 (If you set "Networking" and "Message E...
-
- Any attempts on tweaks useful for debugging here are completely useless while IPsec log is being flooding with tons o...
-
- It is usually beneficial to set IKE SA, IKE Child SA, and Configuration Backend to logging level "Diag" when troubles...
-
- Applied in changeset commit:c165a17e0225f09afb4882d360ba086f629f2b77.
-
- Applied in changeset commit:e719538c01cde5c444255941655a54134c68f16b.
-
- On 2.4, OpenVPN is unable to authenticate local or remote users. The logs show that the user authenticates successful...
-
- Applied in changeset commit:7ec6e2831fe56514e90fcbd2beb5af52b7054ab6.
-
- I'll handle it
-
- DNS Resolver/General - Network Interfaces and Outgoing interfaces = both are set to "All"
Removed dhcpd from monit... -
- What do you have selected in DNS Resolver/General - Network Interfaces and Outgoing interfaces?
-
- Some confusing log entrys are still there. See attached file.
-
- Applied in changeset commit:6d40829b6905bf55c238bffc6c779e9bf063297f.
-
- Applied in changeset commit:d4ed1bd9a86a23ff3d4baed97db32eb90cd21947.
-
- Confirmed. To me, I have a fix.
-
08:13 AM Bug #7005 (Resolved): IPsec mss clamping not working for mobile clients
- Doesn't look that mss-clamping is working on a IPsec mobile client setup.
1) In IPSec -> Advanced Settings -> Ena... -
- It works fine on current snapshots when properly configured. Post on the forum for help with your configuration.
-
09:07 AM Bug #7006 (Not a Bug): radius authentication doesn't work
- hello,
the remote authentication seems to be broken.
I configured my company Cisco ACS as authentication server (t... -
- Added as part of PR #3262
-
- PR has been merged, thanks!
-
- PR has been merged
-
- One more thing I noticed - Status/DHCP(v6) Leases, on the contrary, is something that should not be accessible when D...
-
04:19 AM pfSense Packages Feature #6480: pfBlockerNG - add ability to force download of a list
- Hi - would it be possible to revisit this please? The issue with the method proposed above is that, for a long list,...
-
- Marlin Cremers wrote:
> Is there a way for me to at least look at this? Are there particular things I have to keep i... -
02:38 AM Feature #628: Ability to specify listen IP address of management services (SSH, web interface)
- I would love to see this as I'm using pfSense as router and would like to disable the firewall to get greater perform...
12/11/2016
-
- Looks good on a current snapshot
-
- Most likely cause is that the setting isn't being put in place by the new installer
-
- It seems the autoboot_delay in loader.conf has been set/left at the default 10 seconds. It seems 2.3 and prior have a...
-
-
- Everything seems to be working as expected now with that patch applied. I have played around with the gateways for ab...
-
- Found the solution for that.
The Leasetable hold two entries (no idea why). After deleting them, everything now work... -
- What I found and confuses me are this lines in general log:
/rc.newwanipv6: The command '/usr/local/sbin/dhcpd -us... -
- I started to do the test today and realised, that IPv6 is working for the moment without the described issue.
Used t... -
- https://github.com/pfsense/FreeBSD-ports/pull/226
-
- Thanks, Phil. And yes, also when migrating the other way round (i.e., when moving your DHCP to pfSense), you want to ...
12/10/2016
-
- This looks not too hard to do, and will help those who would like to be able to see and manipulate disabled-DHCP-serv...
-
11:06 PM
Bug #7002 (Resolved): OpenVPN unable to use authentication server with ampersand in descriptive name
- Add LDAP server in System/User Manager/Authentication Servers, include an ampersand in the Descriptive Name. Test aga...
-
- Attempts to import just the public key portion of a certificate authority errors out because a private key is not pre...
-
- Well nobody's assigned to it and it's a 5 year old ticket. Last few comments were from Chris and he works for Ubiquit...
-
- Reference:
- http://www.ntop.org/ntopng/exploring-historical-data-using-ntopng/
- http://www.ntop.org/ntopng/explor... -
- I updated a test cluster to a snapshot from a couple hours ago, which from the timestamp looks like it should have th...
-
- Unable to submit anything via GitHub (server error 500 since yesterday). If it works for someone:...
-
- This is caused by the admin user not being a member of "administrator" group. Related forum thread: https://forum.pfs...
12/09/2016
-
- 2.4 has a few new fixes for use-after-free pfsync states. The limiters issue is also fixed.
-
11:11 PM pfSense Packages Bug #6983: pfBlockerNG-2.1.1_4 requires xmlrpc.inc which is removed or moved
- Angel Torres, best to post in the forum for that... Not related to this issue..
Maybe this is causing your issue? ... -
- Fixed the parsing issue on pf (and reverted the workaround): https://github.com/pfsense/FreeBSD-src/commit/e4a708b0c1...
-
- Result after patching:
!https://s30.postimg.org/m3vi0pxy9/ntopng_geomap.png! -
- Well... this additionally need a patch to the ntopng port itself (basically the one from https://github.com/ntop/ntop...
-
- Please, test the attached patch and report back. (Would like to submit a PR on GitHub, however the only thing that Gi...
-
- Applied in changeset commit:be1bc233931122a67821bee7e02778f7c5138779.
-
- Simple build process:
Clone from https://github.com/simplepie/simplepie.git
run "php build/compile.php" from inside... -
-
- Works, hooray! Thanks. Reminds me it's Friday -> time for some:
!http://cdn.pcwallart.com/images/homer-simpson-bee... -
- Applied in changeset commit:803c97685fef85f35a6cf781143259458486c34a.
-
- https://github.com/pfsense/pfsense/pull/3263 (kindly commit to 2.3.x as well). Thanks.
-
- Exact same issue as Bug #4558. The traffic is getting blocked since $dhcrelaycfg is nowhere defined.
-
- It works well for me now, I can run the route command by hand and also apply settings in the GUI. Assigning back to t...
-
09:44 AM
pfSense Packages
Bug #6971 (Closed): Interfaces.php: "Reserved Networks" checkboxes not shown
- This issue appears to be limited to FireFox, but also seems to be fixed on pfSense 2.3.3 and later.
-
-
- Works.
-
- So, I wanted to copy the DHCP static leases from the GUI. Cannot do, since all I get is _"DHCP Relay is currently ena...
-
-
- All working now.
-
-
- 2.2.x packages are not maintained, please close.
-
- 1/ Dansguardian does not even exist as a pfSense package in 2.3.x.
2/ Whatever are you doing there, you cannot have... -
- I believe in something about dansguardian
If I'm wrong, please close the ticket. -
I believe in something about dansguardian
Also available in: Atom