Activity
From 12/26/2016 to 01/24/2017
01/24/2017
- 11:48 PM Revision 47f2a4b9: Revert change to css
-
10:03 PM Feature #4606: PKI : CA signing external CSR
- I'd also love to see this functionality. Many Ubiquiti devices only support outputting a CSR instead of importing a k...
-
06:07 PM Revision 2559f375: Changed default state of GPS init command auto correct tool.
-
05:18 PM Bug #7145: rc.newwanipv6 running in all cases, even for a renew
- Got a source patch for that? If I do manage to try it, I am not keen on running binaries from outside sources.
-
02:40 PM Bug #7145: rc.newwanipv6 running in all cases, even for a renew
- Try this...
These are pulled from the reply state, and are what is displayed in dhcp6c logs, well mine at least. T... -
- It would probably be good enough if dhcp6c properly populated REASON with what actually happened. If it's a simple re...
-
- I can have a look at dhcp6c, easy enough to add something. What do you want it do do, set an env stating what trigger...
- 05:04 PM Revision d6f1fbac: Require at least one tag value in a QinQ entry
- (cherry picked from commit 4085eb055850e07540145c87fd6d3b5912a865dd)
- 05:04 PM Revision bb742516: Use is_intrange() to validate QinQ tag range
- Note: is_intrange() only tells us that the range is good and might be delimited by a "-" or a ":", so if we want to t...
- 05:04 PM Revision 077474cd: QinQ Tag Value Validation
- Tags must be in the range 1 to 4094
Flag the various input errors and only report them once each.
(cherry picked from... - 05:04 PM Revision 2ae9fc67: QinQ Edit fix row add delete
- 1) Make the row delete button actually work
2) Do not allow ranges that go backwards like 25-20 or just "-" or 1-side... -
05:04 PM Revision ceaa7b0d: Merge pull request #3424 from phil-davis/patch-8
-
- 04:09 PM Revision 40dcb4b6: Require Name field in Shaper
-
04:05 PM Revision 821a9e49: change opacity on disabled rows to fix #6448
-
- 03:48 PM Revision 4085eb05: Require at least one tag value in a QinQ entry
- 03:42 PM Revision 71ff866c: Use is_intrange() to validate QinQ tag range
- Note: is_intrange() only tells us that the range is good and might be delimited by a "-" or a ":", so if we want to t...
-
-
-
-
-
-
-
-
- 12:24 PM Revision cb4a6274: Validate POSTed interface description
- Copy-paste error from code that used $_REQUEST. This is more correct to use $_POST.
(cherry picked from commit b07adc... - 12:24 PM Revision 318f514f: Interface description should be required
- I was blanking out stuff to see what input error messages came about fields that are required. I was surprised that t...
-
- 12:18 PM Revision 99a90e92: Interface Group Name should be required
- Do not allow it to be blank. Do not bother with all the other checks on the group name if it is blank.
(At the moment... -
- 12:01 PM Revision 8a1b5c56: Required fields for firewall*.php
-
- This is fixed in the following commit: https://github.com/pfsense/pfsense/commit/d9bad9e8863bb91cb568b3b41470e22a20d9...
-
10:10 AM
Bug #6448 (Feedback): Mousing over aliases on disabled rules makes hint difficult to read
- Applied in changeset commit:d9bad9e8863bb91cb568b3b41470e22a20d9fa6e.
-
09:49 AM Bug #7128: system_advanced_network.php - fugly IPv6 over IPv4 input field alignment
- Hmmm? This just broke the vertical alignment altogether and did nothing with the input field?
!https://i.imgsafe.o... -
09:43 AM Bug #7086: stale zfs file systems
- Thank you.
-
- Vladimir Putin wrote:
> What are the risks to continue using updated versions without reinstall?
There are no ris... -
- Sorry, I see no reason, just outrage and not from my side.
-
05:34 AM Bug #6836 (Rejected): Wrong queue length on "/status_queues.php" page under heavy traffic
- rejected for reasons shown in-thread.
-
- Merged.
-
09:29 AM Revision f9a6f8a0: System Update Settings - GitSync Options
- Add GitSync options selectors to post update GitSync.
Minimal, Diff, Show Files, Show Command, Dry Run
The GitSync o... -
-
-
- Cannot reproduce, plus suspect it's more or less a duplicate of another non-reproducible issue filed by the same user...
-
- The changelog link should point to https://github.com/pfsense/FreeBSD-ports/tree/devel/dns/pfSense-pkg-bind9 while it...
-
-
- No feedback, related to ancient package version, plus apparently not a pfSense issue either. Retest with current pack...
- 07:11 AM Revision fe54f091: Remaining required fields for Diag pages
-
06:35 AM pfSense Packages Bug #5869: Squid non-functional in transparent mode in 2.3
- Here’s the mail I got recently for my problem
I was not able to get to these sites at the time of my first post but ... - 05:51 AM Revision fb572e81: More required fields for Interface pages
- 05:06 AM Revision 877be5e6: More required fields for NAT pages
-
- Corrects malformed NMEA sentences by calculating and appending the checksum and adding missing special characters "$"...
- 03:49 AM Revision e0b7a2e7: QinQ Tag Value Validation
- Tags must be in the range 1 to 4094
Flag the various input errors and only report them once each. -
03:40 AM Bug #7149: igb driver queue related crashes
- Rolf Sommerhalder wrote:
...
> This morning, we have added this potential work around on three systems. No crashes ... -
- 01:53 AM Revision e52b5a40: Use gettext on Username and Password
- 01:50 AM Revision b101627a: Merge branch 'master' into patch-4
- 01:46 AM Revision c1dc085b: Merge branch 'master' into patch-6
- 01:39 AM Revision f311d3ba: Required fields in Status pages
01/23/2017
-
- PR https://github.com/pfsense/pfsense/pull/3433
-
- The current NTP GPS configuration has a field for users to customize the GPS initialization commands. These NMEA comm...
-
10:05 PM Todo #7160 (Resolved): Mark Required Fields on GUI Pages
- Redmine 7083 provided the infrastructure to mark GUI fields as "required" and the UI implementation underlines fields...
-
09:02 PM Revision 400d36cc: traffic-graphs, setting to keep updating them while invisible
- - allow showing different graphs to be shown on different browser tabs (dont use localstorage for graphs to query)
- ... -
-
- - Parse GPS initialization commands for explicitly configured GPS commands
- Add extended GPS status if GPGSV or GPGG... -
- 08:21 PM Revision 5e82a83a: Force compress for where_is_ipaddr_configured check_localip
- (cherry picked from commit f0b1358dfe520ad3b771127127daed970ba2c0a0)
- 08:21 PM Revision c528a112: Force compress for where_is_ipaddr_configured
- (cherry picked from commit cde28bfa0e11f268485ec1f6ccb73a3a2f66448f)
- 08:21 PM Revision 5050b792: Always force compress when calling Net_IPv6
- (cherry picked from commit 587995fb57f91894d1f8eb6b296a9fe2fa111fac)
-
- 08:15 PM Revision 5af7e158: Interface description must be unique including case
- (cherry picked from commit 3692adec74d438eedb41a7be8eae9cd58f6fe5c1)
-
- 08:13 PM Revision a53cd6c8: Required fields in Load Balancer pages
- (cherry picked from commit 275d769e0d99e02984e42e2328cbcb681f9b87fb)
-
- 08:11 PM Revision 895ab5ce: firewal_nat_edit function name typo
- This unrelated fix is in a big diff listing of other stuff related to a proposed RADIUS enhancement https://github.co...
-
- 08:09 PM Revision 31fa9121: 6RD Border Relay input error message
- This field is labelled "6RD Border Relay" on the main UI. It confused me for a moment when I got this message "6RD Bo...
-
- 08:09 PM Revision 121a1ac2: Add required fields to firewall_aliases_import
- (cherry picked from commit b6368b73d921a29e87cc1cd02ab912024ba66d0a)
-
- 08:08 PM Revision c9b688ae: Display input error when no aliases to import
- Currently if you put nothing in the "Aliases to import" box and press Save then the page just reloads - nothing saves...
-
-
-
- What are the risks to continue using updated versions without reinstall?
-
- Tobias Wigand wrote:
> Fresh install worked without problems. Can't say anything about the original problem, not eno... -
-
- 05:15 PM Revision 278eb7de: Fixed #7155 by replacing toggle with jQuery
- 04:50 PM Revision 81fd2101: Fixed #6958
-
- This is not longer an issue. It must have been fixed in a previous commit.
- 04:00 PM Revision 07432828: Fix comment
- 03:52 PM Revision b33d32a5: Fixed #7128
-
03:45 PM Feature #7158 (Rejected): Captive Portal should have logs facilities for blocked sites
- Whenever I have problems connecting to sites from client software that does not have proxy settings there is no way t...
-
- It could probably be documented in a way that calls more attention to it, but it is mentioned in the documentation wh...
-
03:06 PM Bug #7156: Change in 'Block bogon networks' or 'Block private netowrks' GUI options kills routing entries for OpenVPN interfaces.
- How is one supposed to know that this is a requirement? It's exactly not self-evident that changing something as sim...
-
- Any time you save/apply changes on an assigned OpenVPN interfaces you have to restart the VPN. It's always been that ...
-
- It appears that toggling in the 'Block bogon networks' and/or 'Block private netowrks' GUI option kills the automatic...
-
- When the "Keep graphs updated when on inactive tab" option is selected for traffic graphs it can cause the tab to loc...
-
- 03:03 PM Revision 378ed59b: Merge branch 'master' into if-ifg-alias-name-validation
- 02:57 PM Revision 93abbfaa: Merge branch 'master' into patch-4
- 02:46 PM Revision 8c164995: Interface groups setHelp message
- Mention that it is not allowed to end in a digit.
-
- 02:16 PM Revision 34891a27: firewal_nat_edit function name typo
- This unrelated fix is in a big diff listing of other stuff related to a proposed RADIUS enhancement https://github.co...
- 01:48 PM Revision 0be9d722: Fixed #6967
-
- 11:32 AM Revision 275d769e: Required fields in Load Balancer pages
-
11:14 AM
Bug #7155 (Resolved): services_dhcp_relay.php: Section hide/show gets out of synch with enable checkbox
- Replace ->toggle code with jQuery for reliability
-
11:11 AM Bug #5993: dhcp6c not started until an RA received
- Barring unforeseen changes, you should not expect the behaviour to change between now and the release version. I've b...
-
02:20 AM Bug #5993: dhcp6c not started until an RA received
- Thanks.
I'm on the 2.4 snapshot and upon reboot I have to disable and enable the DHCPv6 server for it to properly ... -
- J L wrote:
> Daryl Morse wrote:
> > I installed the additional patch that Martin provided to address the request fo... -
- Daryl Morse wrote:
> I installed the additional patch that Martin provided to address the request for changes. I've ... -
11:00 AM
Bug #6958 (Feedback): services_dhcp_relay.php: Needs to be converted to more recent rowhelper standard
- Applied in changeset commit:81fd21019cd0de8300fa0480cff1973d58d28e03.
-
10:22 AM pfSense Packages Bug #6350: Auto Config Backup - Uncaught Exception
- Steve Beaver wrote:
> Fixed by populating version table when info request fails
I don't remember what package ver... -
09:10 AM
pfSense Packages
Bug #6350 (Feedback): Auto Config Backup - Uncaught Exception
- Fixed by populating version table when info request fails
-
10:00 AM
Bug #7128: system_advanced_network.php - fugly IPv6 over IPv4 input field alignment
- Applied in changeset commit:b33d32a500fe722035de3efc6a6d50c8cdae6f16.
-
09:53 AM
Bug #7128 (Feedback): system_advanced_network.php - fugly IPv6 over IPv4 input field alignment
-
09:24 AM
Bug #6864 (Resolved): Error checking rejects IPv6 addresses with upper case A-F.
-
- Applied in changeset commit:351ef3ef2ac1bbcfb0643a5efc46a3970d06d78c.
-
- Assuming the real requirement is what is in the validation code, I updated the front-end GUI text in:
https://github... -
- Here, it still panics + dumps + reboots same as it did originally.
-
- To be more precise: pfSense does not exactly "crash", as it is still ping-able. And SSH shells that were open from be...
-
-
- Upstream server issue, has nothing to do with pfSense. Close please.
- 08:42 AM Revision 3692adec: Interface description must be unique including case
-
- It should be fixed on next round of snapshots
-
07:50 AM
Bug #6967: DH Groups 22, 23, 24 missing from Phase 2 selection GUI
- Applied in changeset commit:0be9d722226790674bd35c8087286442e5766232.
-
07:48 AM
Bug #6967 (Feedback): DH Groups 22, 23, 24 missing from Phase 2 selection GUI
- 06:19 AM Revision 1095b204: Required fields in Interfaces pages
-
-
- All that could be done here is fixed with https://github.com/pfsense/FreeBSD-ports/pull/254 and https://github.com/pf...
- 05:18 AM Revision d799b943: interfaces.php display correct descr in group name message
- Use the description that the user attempted to enter, not the original (and probably valid) description.
- 05:00 AM Revision 351ef3ef: Fix #7151 Misleading setHelp for Interface Group Name
- Might as well use the same text as is given to the user in the error message already in this code.
-
- On Supermicro SuperServers 5018D-FN8T with X10SDV-TP8F motherboards, that feature six igb and two ix NICs, we experie...
- 03:00 AM Revision ada9b6bc: firewal_nat_edit function name typo
- This unrelated fix is in a big diff listing of other stuff related to a proposed RADIUS enhancement https://github.co...
-
- - Parse GPS initialization commands for explicitly configured GPS commands
- Add extended GPS status if GPGSV or GPGG...
01/22/2017
-
- Add GitSync options selectors to post update GitSync.
Minimal, Diff, Verbose, Dry Run
The GitSync options have utili... -
- I suspect the requirement might be:
If the user enters a port alias in any of destination from/to (dest begin, des... -
- The code in this function seems to be ineffective. e.g. it has sequences like:
@
if ($('#dstbeginport_cust').val... -
- After seeing "Running last steps of Status_Traffic_Totals installation" on every reboot, I did some digging into the ...
- 04:40 PM Revision 477d849b: QinQ Edit fix row add delete
- 1) Make the row delete button actually work
2) Do not allow ranges that go backwards like 25-20 or just "-" or 1-side... - 01:52 PM Revision 3effec3b: Interface Group Name should be required
- Do not allow it to be blank. Do not bother with all the other checks on the group name if it is blank.
(At the moment... - 01:37 PM Revision b07adc11: Validate POSTed interface description
- Copy-paste error from code that used $_REQUEST. This is more correct to use $_POST.
- 12:30 PM Revision f57a3d90: Interface description should be required
- I was blanking out stuff to see what input error messages came about fields that are required. I was surprised that t...
- 11:49 AM Revision 1a9ec5cc: 6RD Border Relay input error message
- This field is labelled "6RD Border Relay" on the main UI. It confused me for a moment when I got this message "6RD Bo...
-
10:57 AM Bug #6852: Commit 8f86722 breaks DHCPv6 leases status page
- does reverting this commit in 2.3.3 with a patch (i dont know how) fix this its really annoying not having this popul...
-
10:33 AM Revision 587988f6: get_pkg_info() fallback using pkg info if no local copy of repo catalog (resubmit)
- Resubmit of PR #3157 with fix.
The issue in #3157 was that `pkg info` and `pkg search`, undocumented in man pages, s... - 10:23 AM Revision f2e58c16: Required fields in NAT pages
- 10:14 AM Revision b6368b73: Add required fields to firewall_aliases_import
- 10:05 AM Revision f99bbf5e: Display input error when no aliases to import
- Currently if you put nothing in the "Aliases to import" box and press Save then the page just reloads - nothing saves...
-
10:01 AM Bug #7147: pfsense-utils.inc - is_ipaddr_configured() does not work properly with some IPv6 formats
- I'll take this one.
-
- Yes, option (c) is the most flexible - let users put in whatever format they like (within reason) and deal with it in...
-
- I'd rather avoid input validation here. Would just upset users for no good reason.
-
- There are a few approaches to a full fix throughout the system:
a) Catch this at input validation, always store a "c... -
- PR https://github.com/pfsense/pfsense/pull/3414 should fix the particular bug reported here and make a start on fixin...
-
- Yeah, they definitely should be compressed before comparing. I hit this case since I've copied the local LAN IP from ...
-
- Net_IPv6 validation allows compressed addresses that are not strictly in the "correct" compressed form.
e.g.
2001:2... -
09:58 AM Bug #7152 (New): Unbound / DNS Resolver issue if "Register DHCP static mappings in the DNS Resolver" set before wildcard DNS custom options
- Tested on:
2.3.2-RELEASE-p1 (amd64)
built on Tue Sep 27 12:13:07 CDT 2016
FreeBSD 10.3-RELEASE-p9
To create ... - 09:49 AM Revision 3e2028f4: Required fields in diagnostics
- 08:57 AM Revision f0b1358d: Force compress for where_is_ipaddr_configured check_localip
- 08:52 AM Revision cde28bfa: Force compress for where_is_ipaddr_configured
- 08:28 AM Revision 587995fb: Always force compress when calling Net_IPv6
-
- On the Interface Groups Edit page, Group Name field, it says "No numbers or spaces are allowed. Only characters: a-zA...
-
- _(Posted "on forum":https://forum.pfsense.org/index.php?topic=124335.0 and confirmed by another user)_
Default cle... -
02:55 AM
Bug #7149 (Resolved): igb driver queue related crashes
- Some 2.4 installations tend to crash out of nowhere related to igb driver queues.
Setting...
01/21/2017
-
05:41 PM Feature #4242: Two Factor or OTP Authentication for Admin Interface
- Ping. I'd love this as a built in feature! I'm using the local database and dont want to get into managing another sy...
- 04:37 PM Revision 3903add3: Handle cases when help is the first priv a user has
-
- I installed the additional patch that Martin provided to address the request for changes. I've tested both patches to...
-
09:38 AM
Bug #7086: stale zfs file systems
- Fresh install worked without problems. Can't say anything about the original problem, not enough knowledge in that ar...
-
08:50 AM Bug #7148 (Duplicate): Spoofed mac addresses on VLAN interfaces apply to the same physical interface
- I was replacing a virtual machine with a physical pfSense box. In effort to minimize the change experienced by the ne...
-
04:15 AM Bug #6099: igmpproxy does not recognize upstream interface
- You can find the sources to build the FreeBSD/pfSense package at: https://github.com/pfsense/FreeBSD-ports/tree/devel...
01/20/2017
-
-
- Packages may still need the old behavior but need tested individually. Once all function calls are confirmed to work ...
-
-
- Please also backport to 2.3
(cherry picked from commit d0718a0f9031f9dc7c6eff3e47e472178c900ece) -
-
- This one is working:...
-
04:28 PM Bug #6099: igmpproxy does not recognize upstream interface
- Greg Myran wrote:
> > Where can I download the latest version of IGMPProxy? Or is the only way to upgrade my pfSense... -
04:20 PM Bug #6099: igmpproxy does not recognize upstream interface
> Where can I download the latest version of IGMPProxy? Or is the only way to upgrade my pfSense to the dev version...-
- 03:09 PM Revision 32a85c63: Example of setting required items
-
- Martin Wasley wrote:
> PR #3410
I've been testing this PR since this morning. I've found that pfsense reliably ac... -
- PR #3410
-
- Added lock file creation and check to RTSOLD script creation. This is to
prevent mutliple launches of dhcp6c, this ap... -
- Snapshots from this morning still crash with igb hardware NICs.
-
- I couldn't reproduce it on a VM using em driver, probably something specific to igb as mentioned
- 12:28 PM Revision c744b0de: Refinement to #7083
- Provides setRequired() Javascript function to facilitate making an input required or not dynamically
-
- Saw that, just merged+cherry-picked it all around.
FYI: Uses of install_cron_job in packages:... -
- Thanks for looking into this. Meanwhile, I did https://github.com/pfsense/FreeBSD-ports/pull/261 since it's generally...
-
- I don't see anything in the base system that would be affected by removing the write_config() from install_cron_job()...
-
- The squid issue seems indeed fixed by nuking the @<custom_add_php_command>@ tag. Still would seem desirable to let ju...
-
- There may yet be a problem with install_cron_job() doing a write the way it does, but the squid problem appears to be...
-
- I reproduced this on multiple 2.3.3 boxes.Anything but */$minutes * * * * causes the issue. E.g., tried just changing...
-
- Oddly enough I can't seem to reproduce this, at least on 2.4.
I suspect adding this just after the install_cron_jo... -
- So, this commit https://github.com/pfsense/FreeBSD-ports/pull/254 caused Squid to be unable to save the configuration...
-
- A fresh install using next round of snapshots is required to validate the fix. Thanks!
-
- Yes, it broke ZFS install and I see why. I'll push a fix soon
-
02:55 AM
Bug #7086: stale zfs file systems
- Tried a fresh install, maybe there is a problem with this change?
It gave me... -
- Please also backport to 2.3
-
05:56 AM
Bug #7083: Put back some visual hint for required fields
- I have added a new function to pfSenseHelpers.js to allow an input to be dynamically set as required (or not). e.g.:
... -
- Dependency between Dial On Demand checkbox and Idle Timeout field
-
- Sometimes the "required" status of a field is data dependent and needs to be set/cleared as the page loads depending ...
-
- The change broke saving General settings in Squid. https://forum.pfsense.org/index.php?topic=124218.0; will get that ...
01/19/2017
-
- Yes, that is true. It depends on what "long" does in the environment in which the C is compiled. When compiled in the...
-
05:55 PM Bug #7075: firewall states show negative value for total bytes processed
- This isn't a PHP problem. pfSense_get_pf_rules() is a PHP function written in C as part of php56-pfSense-module. It c...
-
- These are both 32-bit installs (i386). So MAXINT will be int(2147483647) (2 gig). The numbers are returned by:
$rule... -
09:20 PM Feature #4606: PKI : CA signing external CSR
- +1 - I would very much like the ability to use the pfSense managed CA for signing my other internal CSRs within my ne...
-
-
-
- 05:26 PM Revision 67ccbdd3: Add "required field" highlighting
-
- 04:45 PM Revision 19fe69e6: fields with <required/> set now pre-pend an asterisk to the field title, thereby causing it to be displayed as a required field (currently an underline)
- 04:23 PM Revision 57026d17: Fixed #7083
- When composing an element with a form.class or via XML, prepend a '*' to the title to indicate a required field. This...
-
- This seems to work fine as-is. No need to check/validate someone's unintentional misconfiguration. At least it did er...
-
- Works well. I setup my own and tested it out, it queried the script as expected and used the result.
-
- Works, thanks!
-
- Applied in changeset commit:166540830275318c8dec9199d8a9ee0e605f606a.
-
- The "?" or the Help menu item "About this page" point to a URL like:
help.php?page=services_dhcp.php
The code tha... -
- 1) Create a new user "u1". Give the user some page privs (e.g. Services-DHCP) plus "Help - all pages".
2) Logout of ... -
- Works, thanks!
-
- Applied in changeset commit:a5a899e4388f2737a6d1cdc82c7325c20fb72ee4.
-
- Mentioned in forum https://forum.pfsense.org/index.php?topic=123520.0
PR https://github.com/pfsense/pfsense/pull/3402 -
- If you add the privs for pkg.php, pkg_edit.php then all the various package menu items of packages that use package X...
-
- Failed without the new code, works fine with the fix in place. Looks good.
-
- Applied in changeset commit:ddf99718d5f1f4545483c39d3759fdfbb788b0fb.
-
- Yes, the code does not even try to start such an OpenVPN instance, thus there are no logs.
This PR fixes it on my te... -
- Works now
-
- https://github.com/pfsense/pfsense/pull/3384
-
01:55 PM Bug #7112: Traffic Graphs resets graph when browser tab changes
- Pablo Trincavelli wrote:
> The new traffic graphs resets graphs when the actual browser tab is changed, so the graph... -
01:32 PM Bug #6099: igmpproxy does not recognize upstream interface
- I have the same issue to IPTV as Alexandre, and have the same version. Is there anyway to update the patch fix for IG...
-
- Alexandre Paradis wrote:
> Is the change also available to 2.3.3 branch ?
I have the same question. Where can I f... -
01:29 PM Bug #2073: APIPA broadcasts forwarded by route-to
- Jim Pingle wrote:
> There is no GUI knob to disable it, but there is a setting. You can set it in the config.xml dir... -
- I've reviewed which volumes are created during install on ZFS and also made changes on rc script to mount /var and /t...
- 12:31 PM Revision 7c3f1189: Do not show empty menus
- 12:28 PM Revision b1894db1: Fix #7141 Add a priv for UPNP
- so users can grant access to Services->UPNP
Note: Status->UPNP already has a priv and it works.
(cherry picked from c... -
- 12:27 PM Revision 5a1afaa6: Fix #7139 Accessing help about this page
- from a user that does not have admin or all page privilege.
(cherry picked from commit 166540830275318c8dec9199d8a9ee... -
- 12:26 PM Revision 9f8751b5: Fix #7136 Start OpenVPN on ordinary VIP
- (cherry picked from commit ddf99718d5f1f4545483c39d3759fdfbb788b0fb)
-
- 12:22 PM Revision af4ae33e: Fix copy-paste of ipsec.widget.php file name
- Noticed while looking in widget code, might as well fix it.
(cherry picked from commit a80ce1a7e03ca4fa61f83166b747b4... -
- 12:21 PM Revision 59ffba2f: Fix #7134 Interface Stats widget ifdescrs not defined
- When doing testing I had the Interfaces widget open as well as Interface Statistics. $ifdescrs was already populated ...
-
-
-
-
- As they say, this has been an experience.
This whole 5993 started because we needed dhcp6 before RA, and a quick f... -
- Still crashes on the latest factory snapshot: Wed Jan 18 19:49:46 CST 2017
-
-
- Works nicely (tested with a recent 2.3.3 snapshot and bunch of packages - squid, ntopng, shellcmd, ftpproxy). Thanks.
-
10:51 AM
Bug #7083: Put back some visual hint for required fields
- !required.jpg!
-
10:30 AM
Bug #7083: Put back some visual hint for required fields
- Applied in changeset commit:57026d17d43a096c3a594a248c183a6889e7956d.
-
10:28 AM
Bug #7083: Put back some visual hint for required fields
- pkg_edit.php has been updated to automatically add the '*' if <required> is set
-
10:26 AM
Bug #7083 (Feedback): Put back some visual hint for required fields
- Added:
When composing an element with a form.class or via XML, prepend a '*' to the title to indicate a required f... - 11:28 AM Revision a5a899e4: Fix #7141 Add a priv for UPNP
- so users can grant access to Services->UPNP
Note: Status->UPNP already has a priv and it works. -
- Your fix looks good, Phil. The system I could replicate this on is no longer producing errors after a gitsync.
Thanks! - 09:52 AM Revision 16654083: Fix #7139 Accessing help about this page
- from a user that does not have admin or all page privilege.
-
- dhcp6c calls its script for every action, a new binding or a renew and so on. The problem is that rc.newwanipv6 is ru...
-
- Either way -- driver or hardware (chip or that unit) -- it's not something we can address. It needs replicated in Fre...
-
09:19 AM Bug #7144: Intel NIC loosing connection until reboot
- Jim Pingle wrote:
> On the contrary, this is almost certainly a hardware issue, or at least a driver issue:
> "Jan ... -
- On the contrary, this is almost certainly a hardware issue, or at least a driver issue:
"Jan 19 12:09:14 kernel ... -
- Hi
I have a pfsense appliance from applianceshop.eu (https://www.applianceshop.eu/security-appliances/19-rack-app... -
- filterdns is triggering every 16 seconds whether the record has changed or not. It happens for IPsec entries and FQDN...
-
08:15 AM Bug #7142 (Resolved): IPv6: Floating rules on 6rd enabled WAN interfaces doesn't get bound to wan_stf
- Found a bug in the handling of floating rules when they need to be applied to 6rd enabled interfaces (which are split...
- 06:37 AM Revision ddf99718: Fix #7136 Start OpenVPN on ordinary VIP
- 05:17 AM Revision a80ce1a7: Fix copy-paste of ipsec.widget.php file name
- Noticed while looking in widget code, might as well fix it.
- 04:37 AM Revision 8f94fc33: Fix #7134 Interface Stats widget ifdescrs not defined
- When doing testing I had the Interfaces widget open as well as Interface Statistics. $ifdescrs was already populated ...
-
- 1) Create a new user.
2) Add "WebCfg - Help pages" priv for the user.
3) Add some other page privs for the user.
4... -
02:47 AM Bug #7138 (Assigned): Pfsense wide dhcpv6 client doesn't recognise ifid statement
- Right now a user cannot set a specific ipv6 address on a tracked interface. The interface id is autogenerated based o...
01/18/2017
-
- If you have just the Interface Statistics widget on the dashboard (and not the Interfaces widget also) then you still...
-
- Applied in changeset commit:ffb0c1822875bc0ea1e2b7b73109fa0f97c0b6d2.
-
- This also happens on 2.3.3
-
01:41 PM Bug #7134 (Resolved): Crash in the gui related to widget
- From thread : https://forum.pfsense.org/index.php?topic=124155.0
Other people seems to have the same bug.
My ... -
10:26 PM pfSense Packages Bug #7127: Authentication fail in AutoConfigBackup package
- Confirmed. I just installed version 1.47 and it now works just fine with the mixed case ID. Thanks!!!
... um, y... -
08:41 PM Bug #7124: Kernel panic when configuring 6to4 on a interface
- Just want to confirm that this appears to have kept my box from booting. But would restart over and over. No logs to...
-
-
-
- Send gratuitous DHCP release message to server.
Dependency:
To fully relinquish the DHCP lease, the "RELEASE" reason... -
-
- Match Form Input and Function Parameter Names with associated Var Name.
Use "ifdescr" as form input name instead of ... -
05:45 PM Feature #7137 (Duplicate): Add support for Sierra MC7455
- pleace add support for Sierra Wireless MC7455 card, thx
Details:
usbconfig -u 1 -a 4 dump_device_desc
ugen1.... -
05:26 PM Bug #7136 (Resolved): OpenVPN not binding to IP Aliases -> NO LOGS generated
- Steps to replicate:
- Create an IP Alias on any interface e.g. 127.0.0.2 on Localhost
- Attempt to bind OpenVPN ser... -
-
-
-
-
- Works
-
- I'll grab this back for testing once the new package is available
-
- 3.0.4_3 should be fixed
-
- Looks like we're missing the latest change to the Makefile for www/lightsquid from earlier this week, CGI.pm was remo...
-
-
01:59 AM pfSense Packages Bug #7130 (Resolved): Lightsquid 3.0.4_2 HTTP 500
- As title says, when one clicks on Open Lightsquid HTTP error 500 appers.
-
- There is no GUI knob to disable it, but there is a setting. You can set it in the config.xml directly or via PHP (e.g...
-
- Except with no way to disable this rule, this can affect bridged interfaces, and since the rule is processed so far i...
-
02:44 PM Bug #7135: Crash in PHP widget module interface_statistics.widget.php
- My bad, sorry for the duplicate.
-
- Duplicate of #7134 which has a fix already.
-
- When returning to the dashboard page, I frequently receive a PHP error warning:
[17-Jan-2017 14:53:51 America/Chic... -
- Applied in changeset commit:790e2a2fad1da3fe6bdd6c858ede2d9e3f34a84a.
-
- On services_router_advertisements.php, for the "RA Interface" selection, the internal name (e.g. OPT1) is shown for t...
-
- I created a zoneedit account (it's free, and you can just make up a domain when testing without actually pointing any...
-
- Possible fix was cherry-picked to FreeBSD-src, please try again on next snapshot
-
- Tested, works. Error and success conditions are logged properly.
-
- Tested Route53, it updates records properly now.
-
- Tested Route53, it updates records properly now.
-
- Tested Route53, it updates records properly now.
- 11:21 AM Revision 82e6d795: Add filter to SMART status widget
- (cherry picked from commit 22e8fa1f6aec0b1536f0c07e1573ac78a291891f)
-
-
- I've cherry-picked FreeBSD-src patches that should fix it:
https://svnweb.freebsd.org/base?view=revision&revision=... -
- Works
-
09:42 AM Bug #7132 (Resolved): PPPoE IP Alias
- If you create a new IP Alias on a PPPoE interface, alias address is never added to pppoe0 interface.
-
- After revision 391d63da the dhcpv6 server settings allows the user to chose between allow, deny or ignore client upda...
-
- Works fine now, it's there after install
-
- Confirmed fix on today's snapshot, keeping it as feedback to hear from JimP test results as well
- 07:41 AM Revision 22e8fa1f: Add filter to SMART status widget
-
- I can't reproduce it even on 2.3.x. This appears to have been duplicated by #6482 which has been fixed.
-
- I've tested it on 2.4.0 and didn't see the issue. Could you please try to replicate it on current snapshots and if yo...
-
06:06 AM Bug #4310: Limiters + HA results in hangs on secondary
- One more here, we always have limiters and HA and we are forced to use the queues. If someone makes a mistake of assi...
-
- All PRs merged, thanks!
-
- Bored enough :) PR https://github.com/pfsense/pfsense/pull/3395
-
-
- Merged, can be closed. Thanks.
-
- Hello!
It would be great to implement those 2:
AdvRDNSSLifetime
AdvDNSSLLifetime
Thanks!
01/17/2017
-
- Send gratuitous DHCP release message to server.
Dependency:
To fully relinquish the DHCP lease, the "RELEASE" reason... -
- Match Form Input and Function Parameter Names with associated Var Name.
Use "ifdescr" as form input name instead of ... -
- I'm also seeing this problem in the latest release.
2.3.2-RELEASE-p1 (i386)
built on Tue Sep 27 12:13:32 CDT 2016... -
- Had confirmation from others internally that it worked on the new version with mixed case login names.
-
- I pushed a fix for this just now. Once version 1.47 shows up for you, reinstall and test it again.
https://github.... -
- Updated a VM that had two UPD6 OpenVPN servers on a HE.net GIF WAN and they were both running after the update. On ol...
-
- I've mispelled ticket # on commit:5280fd8d21c71c6997e1855f8b96265bd81ccb99
-
- It happened in cases where specific IPv6 is selected to bind and interface is in 'tentative' state, as happened in th...
-
-
-
- 06:48 PM Revision 9762d601: Remove get_openvpnent_key()
- (cherry picked from commit 27bf84fc10d723deebb814a38ee9303014b41711)
- 06:48 PM Revision c72410a7: Add Filter to OpenVPN Widget
- (cherry picked from commit a670560bf9a3de550e9e4e20df4ffe1ed2d4f05c)
-
-
06:47 PM Revision ab34907e: Do not nag people about passwords mismatch when SMTP notifications are disabled (Bug #7129)
- (cherry picked from commit 3988cfa7d281370500a7f58cb5f73f28a931f0ae)
-
- These fields tend to get "helpfully" pre-filled with random crap by built-in browser password managers or extensions ...
-
-
-
-
- 03:00 PM Revision 27bf84fc: Remove get_openvpnent_key()
-
- @Phil: In case you are bored, could you do one for SMART Status? Did one originally for 2.2.x (https://github.com/pfs...
-
- OpenVPN Widget filtering in PR https://github.com/pfsense/pfsense/pull/3392
-
- Fixed installer bits, it should be fine on next round of snapshots
-
-
- Definitely wrong ticket reference in the above commit.
-
- Applied in changeset pfsense:commit:5280fd8d21c71c6997e1855f8b96265bd81ccb99.
-
- Does not make sense otherwise, can only contain stale data.
(cherry picked from commit 8ed692516534248e58a20aec70f8cf... -
-
-
-
-
-
- should be fixed in the latest snapshot.
https://github.com/pfsense/FreeBSD-src/commit/c941deabf9dd3d86632ccfdade9d... -
- These fields tend to get "helpfully" pre-filled with random crap by built-in browser password managers or extensions ...
-
- PR issued, should be the end of this one.
- 06:29 AM Revision a670560b: Add Filter to OpenVPN Widget
-
- Clearly caused by password management in browsers (or password management extensions such as LastPass) helpfully pre-...
-
- - I never enabled/configured/touched this (IOW, this should certainly default to disabled, I'd imagine the number of ...
-
- This really look stupid, is it possible to put it below the checkbox somehow? I'd personally just remove the form gro...
01/16/2017
-
- Dynamic DNS Widget filtering in PR https://github.com/pfsense/pfsense/pull/3386
Commit https://github.com/pfsense/pf... -
- Does not make sense otherwise, can only contain stale data.
-
-
- PR
Status / Interfaces - Relinquish DHCP Lease
https://github.com/pfsense/pfsense/pull/3390 (2.4)
https://github.c... - 06:46 PM Revision 8bb99bd1: Fix #7126 RFC2136 links
- (cherry picked from commit 47b35618f025082b5504eae5518d89c772ae8bd5)
-
- 05:53 PM Revision 47b35618: Fix #7126 RFC2136 links
- 05:35 PM Revision 7eba98e5: Add filter to Dynamic DNS Status Widget
- (cherry picked from commit 5f8a3dc09e550f3aa2ef086c03e7133f78756913)
-
- 04:55 PM Revision 5f8a3dc0: Add filter to Dynamic DNS Status Widget
-
- The list on the server was having a problem updating, which we have corrected. The hosted list is current now, shortl...
-
09:44 AM Todo #7125 (Resolved): fullbogons ipv4 list not up to date
- Pfsense bogons list is not up to date:
https://files.pfsense.org/lists/fullbogons-ipv4.txt - Tue Nov 22 04:50:02 ... - 01:54 PM Revision e1568616: Fix #7118 icmp-type any
- When 'any' is selected as the ICMP type, do not write 'icmp-type any' in the rule, just leave it out.
-
-
-
- Applied in changeset commit:47b35618f025082b5504eae5518d89c772ae8bd5.
-
- PR https://github.com/pfsense/pfsense/pull/3388
-
- The Dynamic DNS Widget also displays RFC2136 entries these days. But it has an "ondblclick" for each row that always ...
-
-
-
- When I sign in to the PFSense Gold web portal, I enter my ID as mix of upper and lower case letters: BrianKDav. To ...
-
08:41 AM Bug #6625: firewall forwards all traffic through wan interface, via default gateway, even if alternative route had been installed
- Jim Pingle wrote:
> That doesn't change the situation. You're posting on closed duplicate tickets and the floating r... -
- That doesn't change the situation. You're posting on closed duplicate tickets and the floating rules do solve the pro...
-
- Jim Pingle wrote:
> This is a bug reporting system, not a support or discussion platform. Please post on the forum o... -
- This is a bug reporting system, not a support or discussion platform. Please post on the forum or via some other supp...
-
- Jim Pingle wrote:
> We have, it is.
OK so what would be the solution? Because using floating rules has no effect.... -
- We have, it is.
-
- Jim Pingle wrote:
> Duplicate of #1136
Note sure it is really a duplicate. And the #1136 is very old (and seems n... -
- Duplicate of #1136
-
- Remko Lodder wrote:
> We have setup a new pfSense box that will route our VPN traffic between endpoints.
> That goe... -
- Vladimir Putin wrote:
> Could it be related to https://redmine.pfsense.org/issues/6937 ?
I believe not. We just f... -
- Not really sure why's this assigned to me. Either it's a bug in radvd or in pfSense. Either way, I won't fix it. Also...
-
06:57 AM Bug #6406: Web process becomes unresponsive producing 502 Bad Gateway nginx
- We upgraded 2 days ago from 2.2.x to 2.3.1p1.
Same issue and no pfB installed.
We have upgraded only one of our t... -
- Applied in changeset commit:fc1caa413543c9a616ef08061a5861f57a1c0881.
-
- Jim Pingle wrote:
> Duplicate of #1136
>
> If you must have a second gateway on WAN, add floating rules to match ...
01/15/2017
-
10:43 PM pfSense Packages Feature #6022: Consider MLVPN for bonded VPN
- There appears to be a port for MLVPN now:
https://www.freshports.org/net/mlvpn/
This could be used as a basis for... -
-
-
- - allow showing different graphs to be shown on different browser tabs (dont use localstorage for graphs to query)
- ... -
-
03:01 PM Bug #6982: Nested Aliases with FQDNs do not populate parent table in some cases
- This looks good to me.
Thought there was still an issue but it just turns out one of my test fqdns (www.cnn.com) h... -
02:53 PM pfSense Packages Feature #4461: Squid options too late in squid.conf
- See...
-
-
- No such luck needed, said deficient software is no longer involved, and no loss for me, no-one would have done anythi...
-
- Thanks for "feedback". Pull requests go to https://github.com/pfsense/FreeBSD-ports/, good luck.
-
- Services like plesk control panels do not run on a standard SSL port like 443. Rather than opening several other port...
-
-
- I have hard time understanding what kind of exceptions is being requested here or what's being used by the OP that's ...
-
- Kernel panic when configuring 6to4 on a interface
pfSense on virtualbox: 2.4.0-BETA (amd64) built on Sat Jan 14 10:3... -
- Works
-
- Works
-
- Could it be related to https://redmine.pfsense.org/issues/6937 ?
-
- Config looks right now
-
- So that sort of config should have failed the input validation already prior to his change. The code considers anythi...
-
- Orsiris de Jong wrote:
> Anyone willing to update the patch ?
Updating the patch is a waste of time. If such func... -
- Jim Pingle wrote:
> On 2.4, when changing attributes of an assigned LAGG such as the mode or membership, the firewal...
01/14/2017
-
- Rolf Sommerhalder wrote:
> Setting a TCP6 MD5 password in OpenBGP package triggers a panic in pfSense-2.4 amd64 snap... -
- Setting a TCP6 MD5 password in OpenBGP package triggers a panic in pfSense-2.4 amd64 snapshot from yesterday (Fri 13....
-
-
04:30 PM Bug #6896: unbound root.key file corruption possibly related to full file system
- I just had the same issue. /var/ was at 100%. After trying to recreate the root.key, and noticing that dhcpd.conf cou...
-
- Handle clearing the individual log as well.
-
- ok already had manually added staic route for 8.8.8.8 and 8.8.4.4 causes failure in error checking
-
- that error happens re-saving current setup with 4 dns servers
-
- getting this error whe trying to add more dns servers
A gateway can not be assigned to DNS '8.8.8.8' server which ... -
- Note: I kept this in the General Setup page where it has been since eternity. Just made it so a variable number of DN...
-
- Good catch, thanks.
-
- The PR was close but it needed some backend changes as well, otherwise it was putting blank values in the configurati...
-
10:48 AM Bug #7121: freshclam.conf advanced editing, configuring value of "Checks" has no effect on crontab entry
- safebrowsing was never enabled in my setup. I also didn't investigate further.
-
- Alexander Berkes wrote:
> That really makes no sense in the minute crontab column and it definitely leads to multipl... -
- Thanks for the git link. That makes things more clear.
Sorry I couldn't remember the exact value of the crontab en... -
- This hopefully makes things more obvious: https://github.com/pfsense/FreeBSD-ports/pull/254
@OP: No, the above PR ... -
- "Checks" in freshclam.conf is not using/configuring cron, at all. Switching to manual config and changing freshclam.c...
-
- Yeah you are right, I am talking about the squid package, but especially the freshclam component. Freshclam is execut...
-
- Assuming you are talking about Squid, it's not supposed to do anything with cron. You are totally on your own, this f...
-
- PR merged, works fine. Will wait for it to be in snaps before one last test.
-
- Jim Pingle wrote:
> It works from the Settings tab if you reset all log files, but it doesn't work if you clear the ... -
- Seems to work
-
- PR to hide this defunct stuff from GUI meanwhile: https://github.com/pfsense/FreeBSD-ports/pull/255
-
- Problem on the ticket no longer happens, anything else belongs on a new ticket. Closing.
-
-
- Unable to reproduce, lack of feedback, closing.
-
- Unable to reproduce, lack of feedback, closing.
-
- Yes, this should have a 2.4 target. And it's already been tested, but I tested it again on a current snapshot and it'...
-
- Target version could be set to 2.4.0 and then some independent person test.
-
-
- Merged; test please and report back.
-
-
- Apparently the issue was not with the package, nested aliases now work. Close please.
- 06:25 AM Revision 8ad8e9ab: Format of username in Logout
-
- This has a target version of 2.4.0 - is that really intended?
-
- interfaces.php also has addrtolower()
-
- This just needs an independent person to test it.
-
- The following are completed:
Services Widget UI changes: https://github.com/pfsense/pfsense/pull/3370
Interfaces Wi... -
- Some dashboard widgets can end up with a lot of rows or columns of data to display on bigger systems. It would be nic...
01/13/2017
- 08:59 PM Revision 64f1fef3: Add filter to Interfaces Widget
- (cherry picked from commit 35310a493f19d6758747cbc8e9961c2ca3395246)
-
- 08:59 PM Revision 0f8edf14: Add filter to Interface Statistics widget
- (cherry picked from commit 84a7e840eac8f62a95ccb900089faf14a9a9fc65)
-
- 08:58 PM Revision 2392e876: Add filter to WoL widget
- (cherry picked from commit d82c5cbf4f693d70e55b5a484a34ea84f88fa250)
-
- 08:50 PM Revision d88f26df: Redmine #5549 Allow variable number of DNS Servers
- (cherry picked from commit a2d23e88596deab6bbed2818385a0b72c913843a)
-
- 08:49 PM Revision 848ace91: Check for duplicate Wake on LAN entries
- Currently it is posible to enter an interface+MAC combination that is already in the WoL list. That seems silly.
(che... -
-
- When configuring clamav advanced options, changing the value of "Checks" has no effect on the crontab entry of freshclam
- 08:45 PM Revision e296b399: Tidy up "<script>" tags
- Tidy up <script> tags by adding TYPE attribute
(https://doc.pfsense.org/index.php/Developer_Style_Guide#HTML_Specifi... -
- 08:44 PM Revision 7492e420: Display Dyn DNS type if description not found
- (cherry picked from commit 7b3d8a4b8cee0588ed2ccd272588026002369433)
- 08:44 PM Revision c8e0a211: Remove excess loops in DynDNS Widget
- (cherry picked from commit b84126b5e74473b1e6a576f38da2149a95ab03fc)
-
-
- When pfsense (full install) is configured to use /var as RAM disk, the directory permissions of /var/tmp are set to 7...
-
-
- Seems to be fixed now. I put a file in /usr/local/pkg/ that would work on 2.3.3 and break on 2.4, and it did not affe...
-
- It works from the Settings tab if you reset all log files, but it doesn't work if you clear the log specifically whil...
-
- It's still missing after installing from a current snapshot. /boot/loader.conf contains only:...
-
- PR has been merged, thanks!
- 02:19 PM Revision 46345696: Tidy up "<script>" tags
- Tidy up <script> tags by adding TYPE attribute
(https://doc.pfsense.org/index.php/Developer_Style_Guide#HTML_Specifi... -
- Works
-
-
- New version is there, workarounds are gone. Seems fine.
-
-
- Seems fine now, the behavior is correct and the button has space around it.
-
12:16 PM Bug #7102: This firewall does not have any interfaces assigned that are capable of using ALTQ traffic shaping for igb interface
- do you want me to update my snapshot and test?
-
- Fixed
-
-
-
-
- Seems to work all around. It logs correctly when it is updating, and if it fails that is also logged. It is checking ...
-
- I'm not able to comment on item 2 in the original list due to a dhcpv6 bug in windows 10, but it appears that the lea...
-
- Seems to be fine. No errors on the page with or without leases, with or without RAM disks enabled.
- 11:07 AM Revision d82c5cbf: Add filter to WoL widget
-
- Works
-
-
- OK, nevermind, I ran it again and it's fine. The sync didn't pick that up.
github has been spazzing out today, the... -
- This still fails for me after a gitsync.
There were error(s) loading the rules: /tmp/rules.debug:189: syntax err... -
- Applied in changeset commit:007cfb6ab6d7733c7a98d8fc5baae59028753107.
-
01:16 AM
Bug #7118: ICMP rule with ICMP type "any" fails to load
- Works fine now. Many thanks, Phil!
-
- Pull request to fix: https://github.com/pfsense/pfsense/pull/3377
-
12:33 AM
Bug #7118 (Resolved): ICMP rule with ICMP type "any" fails to load
- Creating a pass rule with ICMP and ICMP type any prevents the ruleset from being loaded.
The following rule is gener... -
- Works well now as far as I can see.
-
- Works fine, a user without access doesn't get the link.
- 10:28 AM Revision 257dd207: Check for duplicate Wake on LAN entries
- Currently it is posible to enter an interface+MAC combination that is already in the WoL list. That seems silly.
-
- On 2.4, when changing attributes of an assigned LAGG such as the mode or membership, the firewall panics and reboots....
-
- Works well
-
- Works well for LDAP. RADIUS already caches the groups in $_SESSION so don't be surprised if you don't see re-auth req...
-
10:07 AM Bug #7015: IPsec not working behind NAT
- Also seeing this after upgrading to 2.4.
Initially unable to ping across the tunnel but a packet capture showed pi... - 09:58 AM Revision 84a7e840: Add filter to Interface Statistics widget
-
- New descriptions are more clear, options are labeled in a way that is hopefully obvious.
- 09:26 AM Revision 3bbe2efe: Add username to logout menu and icon
- I find it difficult to work out who I am logged in as. Other software often provides some indication of who is the cu...
-
- Seems to be solid all-around.
-
- Seems to be good here.
-
- It's been available in the repo for a while. Closing.
-
- All graphs look fine now with the dark theme (widget, graph page, and monitoring), they do respect theme colors.
-
- If you checked "push compression to the client" then the server will push the setting to the client and it shouldn't ...
-
09:03 AM pfSense Packages Todo #7055: Update OpenVPN Client Export package with OpenVPN 2.4
- Jim - unknown if this is expected behavior, but the Client Export does not put compression settings in the client fil...
-
- Works fine.
-
08:56 AM Bug #4418: IPsec mobile clients - bogus "p" appended to search domain
- This still happens in 2.3.2-RELEASE-p1. Had to add a dummy second domain to fix it like the others.
resolver #3
... -
- No confirmation, but no complaints. Other posts on the forum indicate CloudFlare is working in general on 2.4 now.
-
- Works
-
- Works
- 06:54 AM Revision 007cfb6a: Fix #7118 icmp-type any
- When 'any' is selected as the ICMP type, do not write 'icmp-type any' in the rule, just leave it out.
-
05:01 AM Feature #4632: Support for Multipath TCP (MPTCP)
- I also would like to see it in PfSense.
I'm using MPTCP to bond my three connections (2x VDSL + LTE). It works per... - 02:53 AM Revision 7b3d8a4b: Display Dyn DNS type if description not found
-
-
-
-
01/12/2017
-
- Initialize cached IP and Time on loop for RFC2136 items, without this
the items used on last loop iteration will be u... -
- Initialize cached IP and Time on loop for RFC2136 items, without this
the items used on last loop iteration will be u... -
- Works for me. Two RFC2136 entries on WAN both get updated now. I wiped the cache files and tested using /etc/rc.dyndn...
-
- Pingle has a way to validate the changes
-
- Applied in changeset commit:ed680fda05f2d2d17a59d2893a6ae45e0cbef164.
-
- Seems to work fine. Rules that resulted in no traffic passing before now pass traffic as expected.
-
- Fixed by: https://github.com/pfsense/FreeBSD-src/commit/65e7874e6faa4fdfd1fb6893d75d8db196a2f599
-
-
-
- Seems OK for now.
-
- pfSense-upgrade 0.12 will not reroot on ZFS systems
-
- Works
-
- Applied in changeset commit:da2a39e2961d22a403df464534b52bf6dbf9cf01.
-
- I confirm this behaviour.
-
- a floating 'match' rule on LAN does not put traffic from a broswer on a clientpc into a shaper queue.
Using Virtua... - 03:59 PM Revision a2d23e88: Redmine #5549 Allow variable number of DNS Servers
- 03:29 PM Revision b84126b5: Remove excess loops in DynDNS Widget
-
02:59 PM Bug #7117 (Resolved): Bump sched buckets limiter log spam in console
- When a limiter is used with source mask, it creates a lot of system log entries over time when active and applied to ...
-
- 02:22 PM Revision c898bd19: Display client id in DHCP Mapping list
- (cherry picked from commit 6e3e95a538c4dda9c9f14b2ab78435eec0debf46)
-
-
- - Stop misusing fsck -F parameter, it's supposed to be used when you
plan to run background fsck after filesystems ... -
- - Stop misusing fsck -F parameter, it's supposed to be used when you
plan to run background fsck after filesystems ... - 10:34 AM Revision 35310a49: Add filter to Interfaces Widget
-
- Please read this https://forum.pfsense.org/index.php?topic=117827
-
- Use remote syslog to retain logs. Or look into the syslog-ng package.
-
08:27 AM Feature #7115 (Rejected): Firewall logs duration
- It would be nice if the firewall log records are archived in the new version
-
- pfSense kernel already has all intel wireless cards / firmwares built-in as you can see at:
https://github.com/pfs... -
- We were misusing fsck -F option. It's supposed to be used when you plan to run background fsck after filesystems are ...
01/11/2017
-
10:42 PM Bug #6937: Inbound traffic on enc0 is not creating a state with mobile IPsec
- Found the same problem on a 2 weeks old SG-1000. Kinda annoying since mobile ipsec is the reason I bought it.
-
-
08:05 PM Bug #7110: Empty custom NTP ACL produces syntax error in /var/etc/ntpd.conf
- Can confirm that fix works on current 2.3.3 snapshot. Thanks, Jim!
-
- Applied in changeset commit:d90beba66f545af414f00124ba32a9ae087a29d2.
-
08:18 PM pfSense Packages Bug #7114: OpenBGP - remote syslog output incomplete
- Thanks, Jim.
Confirmed with WireShark to be a limitation of free Kiwi syslog server.
-
- Remote syslog server data is sent immediately as the log entries happen. There are no limits imposed on the data, it ...
-
- 2.3.2-RELEASE-p1 (full install).
I have a table which is updated via OpenBGP and currently contains more than 90... -
-
-
-
- Use system_hosts_entries to generate unbound host_entries.conf
-
- This function will return an array all items to be added to /etc/hosts.
-
- This function will return an array with dhcpd and dhcpdv6 items to be added to
/etc/hosts. -
- This function will return an array with dnsmasq or unbound items to be added to
/etc/hosts -
- Read local items from system_hosts_local_entries()
-
- This function will return an array with 127.0.0.1, ::1 and LAN (or
first interface with no gateway when LAN is not th... -
-
- Looks good now. Forwarder hosts go in /etc/hosts, Resolver hosts go in /var/unbound/host_entries.conf and they appear...
-
- Assigning to Jim Pingle for testing
-
- Applied in changeset commit:ac446eac051c4514666f9904bbdd0609468f2fc5.
-
-
- 04:45 PM Revision 8d058e79: Exclude non-qualified hostnames from hosts file. Ticket #6064
-
- Use system_hosts_entries to generate unbound host_entries.conf
-
- This function will return an array all items to be added to /etc/hosts.
-
- This function will return an array with dhcpd and dhcpdv6 items to be added to
/etc/hosts. -
- This function will return an array with dnsmasq or unbound items to be added to
/etc/hosts -
- Read local items from system_hosts_local_entries()
-
- This function will return an array with 127.0.0.1, ::1 and LAN (or
first interface with no gateway when LAN is not th... -
-
-
- Duplicate of #6758
-
04:30 PM Bug #6422: PHP Fatal error: Call to undefined function gettext() in /etc/inc/rrd.inc on line 60
- Seems to be caused by a file permissions issue.
See https://redmine.pfsense.org/issues/6758
To fix this:
<pr... -
-
-
-
- 01:41 PM Revision 6e3e95a5: Display client id in DHCP Mapping list
-
-
-
-
- 11:36 AM Revision e95b87be: Add requirestatefilter. Implements #7069.
- (cherry picked from commit 88081ea257fa683ed28b588c4c35260589604741)
- 11:35 AM Revision 05a13eba: Add requirestatefilter. Implements #7069.
- (cherry picked from commit 0a3150896bc412868cfb79473293ed81c87a50a7)
-
-
11:32 AM Revision 4c4cd8a7: Captive portal: make captiveportal_disconnect_all() faster
- captiveportal_disconnect_all() removes the users one at a time and in some cases, when many hundreds of users are con...
-
-
- (cherry picked from commit a1b39e949ab3a0e53ac4c1837f5d2c02b28142f3)
-
- (cherry picked from commit 8845e137b630497d47a8ce93fb072e47419f8af5)
-
- 11:28 AM Revision ee8d47c7: Services widget filter checkboxes
- (cherry picked from commit ada6bfa7ca68169408b80af6325afe3948ee85f7)
-
-
- It should fix #7111
Submitted by @ubawurinna at https://github.com/pfsense/pfsense/pull/2687 -
- PR https://github.com/pfsense/pfsense/pull/3373
It seems to work too easily, what have I forgotten? -
05:59 AM Bug #7113 (New): Interface name in Traffic Graphs
- The interface name is not displayed in the traffic graphs, only the real interface name is displayed, lan, wan, opt1,...
-
- The new traffic graphs resets graphs when the actual browser tab is changed, so the graphs starts from the right axis...
-
- PR has been merged, thanks!
-
- Applied in changeset commit:9da4a575f8ff670f4d79bb0b6c19e8ca3f3a3cdc.
-
- Submitted at https://github.com/pfsense/pfsense/pull/2687
-
- Add the hability to select protocol (PAP, MD5-CHAP, MS-CHAPv1 and MS-CHAPv2) on Radius server configuration.
-
- Yes, for packages with XML the pkg.php and pkg_edit.php try to put some reasonable breadcrumb links in (try the Notes...
-
- Phil: That looks great, thanks! I guess the same can be used for packages (the PHP files I mean, not XML), right?
-
- Proposed solution is out for review/test https://github.com/pfsense/pfsense/pull/3369
- 01:39 AM Revision 753280bb: Merge branch 'master' into sysprvwarn2
01/10/2017
-
08:29 PM Bug #4310: Limiters + HA results in hangs on secondary
- I would agree with Vladimir. Just would like to know if this will be definitely be fixed in 2.4 or pushed out furthe...
-
-
- On the NTPD ACL tab [Services/NTP/ACLs] the blank default entry under Custom Access Restrictions results in addition ...
-
- I tested this on two systems that previously reproduced the problem 100% of the time, and now they both work. Looks g...
-
- Fixed by https://github.com/pfsense/FreeBSD-src/commit/114dc4a89011a560c32421ca842ca73f5b29d449
-
-
- 04:30 PM Revision ada6bfa7: Services widget filter checkboxes
- 02:48 PM Revision edcd7535: Breadcrumb links
- 02:46 PM Revision 3870dcb7: Move checkbox styling to the beta file since it produces results that are not consistent across browsers and OS
-
- This reverts commit 46237e23f35db70a917939609061dce7b7f955f9.
-
- This reverts commit e47af756de79d4e8b0356cf22f72f62f09e9ad7d.
-
- definitely like the idea of adding a decision layer the would then open options to create a daemon for other method...
-
06:48 AM Feature #4354: Allow dpinger to ping more than one destination for a gateway.
- I posted a bounty: https://forum.pfsense.org/index.php?topic=123741.0
-
- Jim if you want to test these new findings up to you but here is an update.
I have discovered the match rules crea... -
- Seems to work alright on a couple test boxes here.
-
06:57 AM pfSense Packages Bug #7109: Squid 0.4.29_1 not Exist
- Tank you,
now all is ok -
- This sort of error will clear up on its own after a few moments, or run "pkg update -f" if it keeps happening.
Whe... -
- If tray to install Squid 0.4.29_1 I have this error:...
-
- The thinking was: Without NanoBSD, more people will be running a full install on unreliable media like CF/SD, so we n...
-
- Jim Pingle wrote:
> Seems to be working.
Yeah, this seems to be working, except that noone is getting the fixes. ... -
- Richard Patterson asked me by email to explain in more detail why I want to make these changes, here is my email to h...
-
- OK, it seems we have a solution. It involves a change to dhcp6c, another new flag is added!
The flag, currently 'x...
01/09/2017
-
- I agree that the "right" way to handle this would be to have dpinger remain dumb (for lack of a better term) and simp...
-
- I agree with this analysis. To make this happen, there needs to be a layer between groups of dpinger process(es) and ...
-
07:42 PM Feature #4354: Allow dpinger to ping more than one destination for a gateway.
- Luke opened an issue with dpinger. For reference, I've copied the response here.
-----
Hey Luke,
I understan... -
10:06 PM pfSense Packages Bug #6305: Quagga problems updating routes / mistakenly showing "kernel"-routes while they are not
- Affected me too. I tried settings with OpenVPN server + OpenVPN client.
Both:
Pfsense 2.3.2-RELEASE-p1
Quagga_OS... -
-
- Upgraded RAM disk enabled system. Working fine.
Thanks -
- PR has been merged, thanks!
-
- Trying with TSC-low now. That seems to have done the trick! The time offset is staying relatively stable now. Tha...
-
- OpenNTPD isn't better, it's worse.
-
- Try with TSC or TSC-low. Anyway, this ain't a pfSense bug, needs to go upstream.
-
- Relevant logs:...
-
- I run pfsense virtualized under FreeBSD bhyve. I've read all of the normal advice and have implemented the usual wor...
-
- I'll wait for a confirmed fix for the 'vtype' bug. The aliases are working fine for me, especially since I really on...
-
07:44 PM pfSense Packages Bug #7107: IPv6 blocklists generate IPv4 auto-rules
- *Update:* Its going to be a little more involved to fix this issue... Best to use "Alias type" rules, until the next...
-
- Thanks for the report... I can confirm that there is a bug for the IPv6 Tab. The GeoIP tab doesn't have this issue th...
-
- Yes. I configured the list in the IPv6 tab of pfBlockerNG. When "List Action" is set to "Deny Both" the firewall ru...
-
- Did you add these Lists in the IPv6 pfBlockerNG Tab?
-
- I set up some IPv6 blocklists with pfblocker and noticed that the autorules it created were created as IPv4 protocol ...
-
06:54 PM Bug #6257: Kernel panic with ALTQ
- Also experiencing a very similar crash every few days in the igb driver queue thread after updating to 2.4.0 as long ...
-
-
- Am using pfsense 2.3.3 development snapshot 2017-01-08.
When configuring SMTP notifications using STARTTLS over tc... - 04:50 PM Revision 09744f3a: Merge branch 'RELENG_2_3' of git.netgate.com:pfsense/pfsense into RELENG_2_3
- 04:49 PM Revision 2813a467: Further refine checkbox styling
-
- I had an older rule which did not have an ipprotocol type set inside, which is quite common with configurations that ...
-
- It's still not working here. Port forwards only work on the WAN with the default gateway. Configuration is unchanged ...
-
- JimP, I cannot reproduce this bug with todays snapshot. This is a fresh install with two WANs (DHCP) and two port fo...
-
- ok thanks for taking the time to find the cause.
I respect you want to sort of filter things out on the forum firs... -
- Applied in changeset commit:fc47d47ae50e6b549b2ac38ded2576106be66504.
-
- I found a way to reproduce this one, it's a different problem. If all of the ALTQ-capable interfaces were assigned an...
-
- 01:56 PM Revision eaa55106: Crash Reporter report when no data found
- The glob for $crash_files always returns an array - an empty one in the case when there are no matching crash files. ...
-
-
- 01:52 PM Revision fd2e503a: format_DUID array_walk
- 01:42 PM Revision 5bd45966: format_DUID use str_pad
- 01:22 PM Revision febfd592: format_DUID review
-
- OK I put that back on #7102, it's all unrelated to this ticket. This ticket is now (again) only for vmx(4) lacking AL...
-
- A comment on the original PR says that it's not clear if the rule for this needs to be IPv6 or IPv4 with protocol IPv...
-
- (cherry picked from commit 16fbe9b7ee1abfb8b9504a8d1e90dcd7592f9fe2)
-
- (cherry picked from commit a0052ea3a5fe74246795d90bcacadd025801134a)
-
- (cherry picked from commit a075265e0a076419813622e0d69556915b6f40f2)
-
- * Move the help message to be on the group as a whole not just the IP input field
* Clarify the IP field (label state... -
- 12:24 PM Revision bf68dc41: Remove unusued $heading in genhtmltitle()
- It came into use in https://github.com/pfsense/pfsense/commit/45eebe10a93fa1e2399c6cdf133ad88dc21ee6e7 but genhtmlti...
-
-
-
10:25 AM Bug #7050: Limiter with PFsense 2.4 transparent proxy
- Luiz Otavio O Souza wrote:
> Fixed in the latest snapshot.
>
> https://github.com/pfsense/FreeBSD-src/commit/994e... -
- The workaround is present and prevents the problem case from causing harm.
Rather than close this out, I'll leave... -
-
-
- Works on the latest snap including the patch.
-
- Done. Last commit was cherry-picked
-
- I did not explain how they work because this is not a support system, nor is it a discussion platform. All of this be...
-
- Jim Pingle wrote:
> The forum is the best place to discuss this until a real bug is identified. It is not about keep... - 04:35 AM Revision cb6b7189: Crash Reporter report when no data found
- The glob for $crash_files always returns an array - an empty one in the case when there are no matching crash files. ...
-
-
- Restoring the RAM disk as soon as it is available will make it easier to include additional content that needs to per...
-
- Eliminate rrd dump/restore to/from xlm file. Backup and restore the entire /var/db/rrd/ to/from the RAM Disk Store.
... -
- 1) Treat the RAM disk more like a permanent storage device with content managed/restored by the system and made avail...
- 02:40 AM Revision c50f228a: Breadcrumb links support
- 02:39 AM Revision 70719baf: Add requirestatefilter. Implements #7069.
- 02:36 AM Revision 88081ea2: Add requirestatefilter. Implements #7069.
- 02:03 AM Revision 0a315089: Add requirestatefilter. Implements #7069.
01/08/2017
-
11:35 PM Bug #6990: DDNS IPs not updating after a system restart
- Hi,
yesterday, January 8, my customers router shut down due to a power loss.
When the power returned the router boo... -
- New pull request: https://github.com/pfsense/pfsense/pull/3367
-
08:02 PM Bug #7066: vmx(4) interfaces do not have ALTQ support on pfSense 2.4, they had ALTQ support on 2.3
- Firewall-Traffic Shaper-By Interface. I didn't check the others. If I see traffic in the queues then AltQ should be ...
-
- What page does the error show on, exactly? I can't replicate any problem where that error shows up on a firewall that...
-
- Jim Pingle wrote:
> If there is any issue with igb, I can't replicate it here. On an SG-8860 with igb running 2.4, I... -
- If there is any issue with igb, I can't replicate it here. On an SG-8860 with igb running 2.4, I can use ALTQ and it ...
-
- Chris Collins wrote:
> Jim ALTQ does looks its on the a downward path but still pfSense uses it and the traffic shap... -
- Yeah exactly, this is to file bug reports. Not "ooops something somehow won't work for me, definitely must be a bug" ...
-
- The forum is the best place to discuss this until a real bug is identified. It is not about keeping ticket counts dow...
-
- Kill Bill wrote:
> May I suggest using https://forum.pfsense.org/index.php?board=26.0 until you have a *real* bug? '... -
- I see match mentioned on this page https://home.nuug.no/~peter/pf/en/altqintro.html
But FreeBSD never updated PF t... -
- May I suggest using https://forum.pfsense.org/index.php?board=26.0 until you have a *real* bug? 'cos this one ain't a...
-
- Ok some more information. Step by step of my diagnostics.
1 - Run the wizard and choose the first option, keep as... -
- The rules are created as match rules which is not passing them onto the specific queue.
I am talking about the rul... -
- Fixed in the latest snapshot.
https://github.com/pfsense/FreeBSD-src/commit/994e779f035e9ed49909936d5773f930adfc40... - 03:08 PM Revision f4bbec8b: Helper format_duid() for DUID input
-
- This is what 'Unrestricted IPs' on the ACLs tab was intended for; except that it never worked due a wrong check. Fixe...
-
-
- The configuration is not enough on its own because your interfaces are DHCP. We need to see the addresses on the inte...
-
- is it sufficient to do a backup of the config and send you that backup?
The setup is this.
Dns resolver enabled... -
- The ticket was rejected because I attempted the same configuration and found no problem on current 2.4 snapshots. I h...
-
- It is a bit of a wow that you have rejected a clear report telling you that there is a misleading message in the GUI....
-
- Then you'll need to provide a lot more detail about your NICs & the drivers they use (dmesg, ifconfig output, GUI ass...
-
- I can confirm 100% now ALTQ is working.
1 - if I apply the rules on cli is no error, if altq was broken it would s... -
- The only place I see this message appear is when a NIC is in use that does NOT have ALTQ support (e.g. lagg, cpsw, et...
-
- There is no security issue except the one you made by changing the rules. If there is a problem with the shaper rules...
-
- So take this into consideration
The default dns resolver settings listen on "all" interfaces.
If I follow the... -
- Works
-
- So show me what is applied here and please remove all not applicable redmine "Ts & Cs" links from this site also.
-
- The Ts & Cs of the redmine project don't apply here
-
01/07/2017
-
-
-
- Please point me to the some redmine EULA or law, why I can not use this name anymore like it was used for the 5 last ...
-
- please close and reopen this as someone other than "Vladimir Putin".
not kidding. -
- Jim seems it is working, and its a GUI bug.
the command line doesnt give any errors, however I am not 100% sure as... -
- Possibly yes as it seems also broken on realtek.
I tried to move both cables to the reX ports but it seems my re1 ... -
- Probably a duplicate of #7066 which appears to be a more general issue.
-
- Is intel i350 interface
According to this url it can be patched to work. Can the patches please be made on the pf... -
- I cannot reproduce this on current 2.4 snapshots. I have tried a variety of outgoing and other interface configuratio...
-
- Jim ALTQ does looks its on the a downward path but still pfSense uses it and the traffic shaper is an established key...
-
- Personally, I think ALTQ is dead.
-
10:02 PM Bug #7037: CPU frequency in System Information
- The info might well be redundant, but dynamic resizing from different values is poor design.
-
- A comment on the original PR says that it's not clear if the rule for this needs to be IPv6 or IPv4 with protocol IPv...
-
- Applied in changeset commit:e470f72139ed54972465e653e27536687ce58b23.
-
- assigned to Pingle for resolution.
- 06:48 PM Revision 877b5e10: Merge branch 'RELENG_2_3' of git.netgate.com:pfsense/pfsense into RELENG_2_3
- 06:45 PM Revision ba61a00b: Fix #7100
- 06:44 PM Revision 6d55e876: Fix #7100
-
- Looks like the patch on the FreeBSD bug entry was committed. We should be able to pull it in from there.
-
- Applied in changeset commit:43de83978ed93c9a4886e2844e341af0f3fe9a05.
- 02:26 PM Revision f93e9098: Remove unusued $heading in genhtmltitle()
- It came into use in https://github.com/pfsense/pfsense/commit/45eebe10a93fa1e2399c6cdf133ad88dc21ee6e7 but genhtmlti...
-
01:15 PM
Bug #7100 (Resolved): pkg_edit.php - $("#showadv").prop('value') not working
-
- Works! ;) Thanks.
-
12:50 PM
Bug #7100 (Feedback): pkg_edit.php - $("#showadv").prop('value') not working
- Applied in changeset commit:6d55e876755d422e97bacb336f52f577087aa71c.
-
- This code somehow does not work: https://github.com/pfsense/pfsense/blob/master/src/usr/local/www/pkg_edit.php#L1521 ...
- 12:35 PM Revision 7e33d908: Further internationalization
-
There is code in radvd to stop sending on interfaces that are no longer transmitting.
I don't know how difficult...-
- you would have to teach each affected process to re-run initgroups(3); setgroups(2); in order for them all to have a ...
- 12:08 PM Revision 0a6273e2: Add missing internationalization
-
- I don't think we have any hardware to test this with.
-
11:06 AM Bug #7101: services_dyndns.php not updating via gateway group, ok with the interface
- Sorry, a mistake in line 1...
"with 2 PPPoE connection I have defined 3 DDNS: DDNS1.selfip.net for WADSL, DDNS2.se... -
- Hi,
with 2 connection I have defined 3 DDNS: DDNS1.selfip.net for WADSL, DDNS2.selfip.net for VDSL and DDNS.selfip... -
- I wondered about that also, at the time of the bootstrap conversion, but there was enough going on that I never follo...
-
- Dunno if it's just me, but the entire feature is very much pointless when it's unusable for navigation. Seems pretty ...
-
- Great news!
We'll keep an eye out for it -
- The proposal to add the info to status 2 / 3 has been accepted, and may make it into OVPN 2.4.1. I'll update this whe...
-
- I have a proposal which should make it easier for development.
I suggest removing the interface selection as is (f... -
- RAM Disk Management
https://github.com/pfsense/pfsense/pull/2902
1) Treat the RAM disk more like a permanent stor... -
-
- 02:26 AM Revision a5d486e9: Revise gateway widget config form
- Make non-checked checkboxes more visible by adding an outline
- 02:24 AM Revision b2daca76: Fix username reference
-
- The removal of the extra dhc6c_interface_script call does cause a problem for some, those who use dhcpwithoutra and w...
01/06/2017
-
- PR merged
-
02:41 PM Feature #7097 (Resolved): Authentication cache for LDAP and RADIUS
- Currently PFSense does not remember LDAP or RADIUS authentication to the admin portal between requests. This results ...
-
-
- PR merged
-
- This should fix it:
https://github.com/pfsense/pfsense/pull/3359
assuming it should be "fixed" -
- Ditto, but that VM had apparently been broken in that way for some time and I never noticed until this morning when I...
-
- The code checks for having the specific new privs to view/clear notices or the "all pages" access. If the "root" user...
-
- More info: This appears to have happened because the 'admin' user on that VM was somehow not a member of the 'admins'...
-
- The notice alert/bell isn't displayed to the admin user when this code is in place. If I revert it, they show up.
- 05:42 PM Revision fce3edc0: Allow admin to clear notices
- 04:51 PM Revision 0fa3348b: Merge branch 'master' of git.netgate.com:pfsense/pfsense
- 04:11 PM Revision 49683e45: Etc/GMT timezone text using ngettext()
- (cherry picked from commit 88de4ab06c8a330a3cedf474b3e218a941f6db66)
-
- 02:48 PM Revision 88de4ab0: Etc/GMT timezone text using ngettext()
-
- Looks like reroot doesn't work with ZFS without changing vfs.root.mountfrom
https://bugs.freebsd.org/bugzilla/show... -
- reroot crashes with ZFS. We will have to detect that case and fall back to a traditional reboot (or see if we can get...
- 01:49 PM Revision d4fbcb9f: Merge pull request #3356 from phil-davis/gw_widget_filter
-
- It starts fine if default ALL is selected.
But if specific interfaces are selected instead it prints bind errors a... -
-
- These work opposite to the way mere mortals expect.
Read: https://github.com/eggert/tz/blob/master/etcetera
Based on... -
- These work opposite to the way mere mortals expect.
Read: https://github.com/eggert/tz/blob/master/etcetera
Based on... -
- This is now live for 2.3.2_1 users as well. What little feedback I received was positive. We'll move forward from her...
- 11:46 AM Revision 50af3592: Redmine #7089 Add extra help about timezone
- We could also add some text like this to encourage users to choose the "Continent/City" time zones.
(cherry picked fr... -
-
11:35 AM Feature #7095 (Resolved): Improve Remote Gateway field description for IPSec VPN Phase 1
- I think it would be nice if it would be mentioned that 0.0.0.0 is a valid value for that field
So... -
- Luke Hamburg wrote:
> _"8.8.8.8 is not a good target"_ huhhh? Then why does https://doc.pfsense.org/index.php/Multi-... -
- this is from the manual
Connection Health Check: Uses the following methods to check if the WAN interfaces are stil... -
- let me add to this talk past experiences (as i have a couple of maybe the worst isps anywhere ) I had a old dual wan ...
-
- Luiz:
_"If you monitor a couple of IPs and one of them is really down, the one you really need access, how you are... -
- Phillip Davis wrote:
> I would like to see something like this also. I had been meaning to look at it a long time ag... -
- "excess traffic" -- a 0 byte payload ICMP? I don't think we can call that excess traffic :)
"too much time before... -
- I would like to see something like this also. I had been meaning to look at it a long time ago! Maybe I will play wit...
-
- No matter how multiple targets are handled, it is worse off in some way (excess traffic, too much time before an outa...
-
- Can we get this one re-opened? This "bit" me badly yesterday at a customer site. Monitor IP of 8.8.8.8 started "flap...
-
-
11:22 AM Bug #7034: NTP Orphan Mode stratum setting is not displayed in input field
- Just tested again with @2.4.0-BETA (amd64) built on Fri Jan 06 01:41:07 CST 2017, FreeBSD 11.0-RELEASE-p5@ and it's w...
-
- This one is perhaps complicated to fix.
Currently if a unbound-control reload is issued then unbound will shutdown... -
- The "Outgoing Network Interfaces" incorrectly applies the WAN ipv6 link-local when ALL is not selected and also when ...
-
- These are provided via kernel modules cc_cubic and cc_htcp
I am aware pfsense when its not the endpoint these are ... -
- As announced at [1] igb devices will become em devices on FreeBSD 12. We need to have some upgrade code ready to dete...
- 10:27 AM Revision d2b1c52f: Allow hiding of gateways in Gateways Widget
- Sometimes there are gateways that I do not care about, so it is handy to
be able to save some space on the dashboard ... -
- Wait, _what?_ Default gateway switching is an experimental feature? That checkbox has been there since at least 2.0....
-
- The thing needs to be kept in-line with what the "standard" tz-database distribution is doing. Otherwise, as Jim says...
-
- pfSense is not other products. And the Etc zones are NOT what you want, likely ever. We have been tempted to remove o...
-
08:37 AM Bug #7089: Opposite of + or - is occurring when selecting time zone
- In every other environment I've worked in that I can think of, you can pick the -5 and it's correct. Why is this any ...
-
- You should not be picking what you think is an offset (but is really a special-use time zone). Pick a geographic zone...
-
- Just so I can be clear, you're saying the intended behavior is that - is + and + is minus? Every other device I've ev...
-
- Changes were added to let user know about how it works, as proposed by Phil.
-
- Suggested enhancement to UI:
https://github.com/pfsense/pfsense/pull/3354 -
- There is a good chance this has been fixed by #6132 so it's worth trying on a current 2.4 snapshot.
-
- Gavin
Have you retested on a recent 2.4 snap? - 07:20 AM Revision 0436b9a5: Redmine #7089 Add extra help about timezone
- We could also add some text like this to encourage users to choose the "Continent/City" time zones.
-
- Configuration error. Post on the forum for discussion.
-
01/05/2017
-
- Also, 99.9% of users should be selecting a timezone based on a continent/city in their area. This makes summer time c...
-
- https://en.wikipedia.org/wiki/Tz_database#Area
"The special area of "Etc" is used for some administrative zones, par... -
- Oh and Yes, the time is also incorrect not just the + and the -
-
- I select ETC/GMT-5 on the web interface, and typing 'date' in shell shows the opposite, +5. I changed to -4, it went ...
-
11:21 PM Bug #7090 (Not a Bug): Firewall rule is ignored when action is pass
- Hi,
I've got a firewall rule that reads:
States Protocol Source Port Destination Port Gateway Queue Schedule De... -
-
- Applied in changeset commit:1794ecbb8b37fc97bd1d2fe6ab7ecc19d87a9a68.
-
- The field "radomainsearchlist" in the GUI is not referenced anywhere in the backend. Needs some research/testing
-
10:40 AM Bug #7081 (Resolved): Search Domains not populating from RA using SLAAC
- When I enter nameservers in the DNS list for Router Advertisements in unmanaged mode the client will populate with th...
-
- Applied in changeset commit:80e7011fddd29a387c4c84b68c8c49dce4494729.
-
- This affects the main DHCP settings page not just the pools
is_macaddr() lost its $partial parameter/support require... -
-
04:03 PM Bug #7088 (Resolved): DHCP does not accept input into MAC Control Fields.
- "If a mac allow list is specified, it must contain only valid partial MAC addresses."
Attempted input (I also trie... -
-
- captiveportal_disconnect_all() removes the users one at a time and in some cases, when many hundreds of users are con...
-
-
- Is pfBlocker actually installed, enabled, and properly configured?
Please post on the forum in the pfBlockerNG boa... -
03:51 PM pfSense Packages Bug #7087: DNSBL service does not start
- Other errors:...
-
- Noticed this while configuring 2.4. dnsbl service does not start, and the .pid file has no value.
- 02:14 PM Revision ea02e3cf: Completes fix for #6972
-
- 12:47 PM Revision e551eed0: Correctly report unmonitored gateway status
- If an alternate monitor IP has been entered and saved, then the user
checks "Disable Gateway Monitoring" and saves, t... -
-
- *Current behaviour*
At the moment, get_pkg_info() is used to get all information on packages. The parameter _$local... -
- *Current behaviour*
At the moment, get_pkg_info() is used to get all information on packages. The parameter _$local... -
12:37 PM Bug #7086 (Resolved): stale zfs file systems
- I am not sure if this is a bug or a feature. Seems the 'Auto install'-values are used from the native FreeBSD while p...
-
12:29 PM Feature #7085 (New): Edit Firewall Rules Seperator
- Once a Firewall Rule Separator is added you cannot edit it. You have to delete and add it again to make any changes.
-
- Hey folks,
I wonder if it would be possible to include the if_iwm.ko and related firmware .kos. They are new as of... -
- Pretty sure the convention was that the @<fielddescr>@ for a @<required/>@ field was shown in bold in pfSense before ...
-
- I'm kinda unsure that the <default_value> works like that even for non-rowhelperfield fields. :-) What I see in packa...
-
11:04 AM
Bug #7082: pkg_edit.php - impossible to use default_value with rowhelperfield
- I will investigate.
I presume the desired functionality is that if the element has no current (stored) value, the ... -
- I mean, things like:...
-
- So, is it possible to have the @<description>@ tag printed somehow? (As a hover on the @<fielddescr>@ or whatever?) W...
-
-
- Looks all good here. Thanks. ;)
-
08:15 AM
Bug #6972: "Are you sure you wish to?" prompts and other issues with deleting networks from network-type aliases
- Fixed. Please retest.
-
-
- Well, this was apparently another manifestation of Bug #6972. The issue seems gone with ea02e3cf5d54c9f1ebbe09d9fa552...
-
08:25 AM
Bug #7080 (Feedback): pkg_edit.php - rowhelper fielddescr disappears when last row is deleted
- Unable to reproduce with Safari, Firefox or Chrome. Am I doing something wrong?
!rowhelper.gif! -
- An example: https://github.com/pfsense/FreeBSD-ports/blob/devel/www/pfSense-pkg-squid/files/usr/local/pkg/squid_rever...
-
- yeah, sort of. this is a fallout of 4326 not being properly tested under all conditions (nat, binat and rdr) - they ...
-
- "verbosity 4"? As in the system logs? Sure, it's in the logs, sure, but scraping logs isn't proper status output. It ...
-
- Their initial reply is that it's available if you use verbosity 4... which is correct, but not entirely useful. I'm a...
- 07:57 AM Revision 0c5d4e8d: Correctly report unmonitored gateway status
- If an alternate monitor IP has been entered and saved, then the user
checks "Disable Gateway Monitoring" and saves, t... -
-
- Works (at least for cases where write_config() returns false, and there's not really much else that could be done here.)
-
07:20 AM Bug #7033: Hidden rule break the policy routing
- Jim Pingle wrote:
> Duplicate of #1136
>
> If you must have a second gateway on WAN, add floating rules to match ... -
-
- Merged and works, can be closed.
-
-
- 03:03 AM Revision 383bbc17: vpn_openvpn_client comment typo
- Same stuff was copied here
-
- 02:55 AM Revision c6945de7: Merge pull request #3350 from phil-davis/patch-1
- 02:52 AM Revision 20fb094c: vpn_openvpn_server comment typo
-
01/04/2017
-
- I just pushed this to 2.3.3 as well for more testing.
-
- A new version of OpenVPN client export for pfSense 2.4 with OpenVPN 2.4 is up now for testing.
Key changes:
* Ope... -
- I fixed this up among the other OpenVPN improvements this week.
-
-
-
-
-
-
-
- Applied in changeset commit:531c348639adb8b7e7d190e8fdab709fea61f61a.
-
- Yep, something isn't quite right with how it's doing validation.
-
- I just tested it with the current nightly (@2.4.0-BETA (amd64) built on Wed Jan 04 13:38:53 CST 2017; FreeBSD 11.0-RE...
-
-
-
-
-
- 08:57 PM Revision b191e31e: No longer add "null" to the selector when clicking a blank area
- 08:57 PM Revision 54c90c35: Minor help text change
-
-
-
-
- This reverts commit 0a07be0287189cda229fab27ad733e9de3dc12f5.
-
-
-
-
-
- Applied in changeset commit:b6dd335e6b81c89f2e4dd63cbd638853ebe2a275.
-
-
-
-
- Is the change also available to 2.3.3 branch ?
-
- Luiz Otavio O Souza wrote:
> Ooops. Sorry for the breakage.
>
> Fixed in the latest version.
>
> Thanks for t... -
-
- I'll see what I can do and report back.
-
- Nothing in particular comes to mind, it would be nice to see all of the known parameters for connecting clients/serve...
-
- Will do. Is there something specific I can ask for over there that would make it easier for you?
-
- We have no way to detect that currently. OpenVPN does not report that in any of their status output. Open a feature r...
-
- NCP is great. Not knowing what cipher NCP negotiated is less great.
It would be excellent to add something on the... -
-
-
-
-
-
- Running ClamAV causes sporadic kernel panics and resets with the following syntax:...
-
- Organization, primarily. I have about 100 of them which are are generally speaking associated with different sites. I...
-
- For what purpose? They are all mutually exclusive.
-
- It would be useful to rearrange the client specific overrides in OpenVPN.
-
-
- Looks good
-
04:26 PM
Feature #7072 (Feedback): vpn_openvpn_server.php / vpn_openvpn_client.php : Add controls to OpenVPN for Negotiable Crypto Parameters
- Fixed
-
- There's one little problem left with the NCP list control. Clicking in empty area on the right side adds a "null" ent...
-
- Applied in changeset commit:fa351dd3c13e65dfabfb0f2ac2ed72b332276892.
-
- See also:
* commit:bd07fbdb4b81fc358b8fa55b06469dde7a3870df
* commit:6c00adf3316d2c5214f7e9cf2e5f138c32845d58
* co... -
-
- - trim sat in use
- gps ok for GPGLL
- lat & lon direction for GPGGA & GPGLL
- sat in use text position fixed
(cherr... -
- 06:12 PM Revision bd07fbdb: Partial solution to #7072
- Requires "Back-end" stuff to actually use this, and should be copied to the client page too
-
- Make captiveportal_radius_stop_all() log the disconnections in the system log and fix it so that it works with the zo...
-
-
- Convert rc.prunecaptiveportal to lock()/unlock()/try_lock() and use the lock to ensure that there aren't race conditi...
-
- Captiveportal_disconnect_all() loops through the active users and disconnects them immediately but doesn't remove the...
-
- 04:17 PM Revision 7f799b0b: Make appropriate success or danger boxes in system_crlmanager
- When there is a problem, the messages should be in a "danger" box.
Note: It is a bit difficult to actual get the dang... -
- 04:15 PM Revision 0349ebaa: Remove unused print_info_box($savemsg)
- These are files that make no use of $savemsg.
May as well remove the print_info_box($savemsg) to avoid future
confusi... -
-
- (cherry picked from commit 15dcf1320c08eb9339eda3e6fdf04599c51694b7)
-
-
- (cherry picked from commit 6c1e85e544814d336b47fbc782a6aff77ea7301f)
-
- (cherry picked from commit 3d116b5c8d5c6474821d3a6607f9fa929df2f481)
-
- Make this consistent with System - General Setup - DNS Server Settings.
(cherry picked from commit 58523c575f9d075f0a... -
- - Add missing DNS Resolver references
- Nuke PPTP VPN mentions
- Use letter case consistently.
The "Disable DNS Forw... -
- 04:05 PM Revision 930b2110: firewall_rules_edit stop Floating field displaying
- Seems to fix https://redmine.pfsense.org/issues/7057
But I have not looked underneath the hood - just copied the way ... -
- 03:48 PM Revision 23bd0f9d: Added support for CloudFlares Proxy.
- Included a checkbox to enable and disable this feature when CloudeFlare
type is selected.
Included proxied variable i... -
-
- To reproduce:
1/ Edit some alias
*2/ Add some rows*
3/ Now, try to delete them (or the previously existing rows)... -
02:33 PM
Bug #6972: "Are you sure you wish to?" prompts and other issues with deleting networks from network-type aliases
- I am unable to reproduce this in the updated version. Clicking the trash can icon previously did not delete for me, b...
-
-
- OK, got to testing. As a good news, the annoying prompt is gone. The second symptom (unable to delete added rows when...
-
- Rework openvpn_port_used() to take care of following conflicts after
ticket #7062 was committed:
* "UDP" is dual sta... -
-
-
-
- I tried a few combinations and it all worked. Creating a new instance or using the wizard properly guessed the next h...
-
- Applied in changeset commit:f69e098f41bb3937b244b557969009535a911ef4.
-
- I'll work on it
-
- PR has been merged to 2.4.0 and 2.3.3 snapshots
-
- Works
-
-
10:54 AM Bug #7076 (Duplicate): Packets accepted by IP but rejected because "Allow IP options" is disabled are not logged
- Hi,
I added a rule to allow multicast traffic by IP without "Allow IP options" enabled (because I did not yet know... -
- Works fine on two different systems here, thanks!
-
- The issue was happening on ZFS and should be fixed after commit:b712dd529e2445fc20e983815a80a4e8ea109760
-
- OK, had a look around that bit of code. This is what I have found:
1. RTSOLD still launches multiple dhcp6c client... -
- The dhcpc before RA was originally my fix for an issue we have with Sky ISP in the U.K. I got very busy with work and...
-
- Duplicate of #7010 which is already fixed.
- 09:52 AM Revision 24a4f2ef: Remove unused print_info_box($savemsg)
- These are files that make no use of $savemsg.
May as well remove the print_info_box($savemsg) to avoid future
confusi... - 09:45 AM Revision 61d1ca3e: Make appropriate success or danger boxes in system_crlmanager
- When there is a problem, the messages should be in a "danger" box.
Note: It is a bit difficult to actual get the dang... -
-
01:14 AM Bug #4310: Limiters + HA results in hangs on secondary
- Dear Luiz! Can we expect real fix in 2.4? We are waiting for it too long, and this is a really critical problem, sinc...
-
01/03/2017
-
-
- Luiz Otavio O Souza wrote:
> The issue here is limiter (dummynet) and pf redir on the same interface.
> The transpa... -
- The issue here is limiter (dummynet) and pf redir on the same interface.
The transparent proxy adds a rdr rule to ... -
-
-
-
-
- Currently there is an authentication lookup for every GET; a single page load can cause dozens of lookups and hundred...
-
- Currently there is an authentication lookup for every GET; a single page load can cause dozens of lookups and hundred...
-
09:23 PM Bug #7066: vmx(4) interfaces do not have ALTQ support on pfSense 2.4, they had ALTQ support on 2.3
- I also see this on Hyper-V virtual NICs (not legacy). Perhaps this is a more generalized issue?
-
- This appears to be caused by r263259 in FreeBSD 11 - Add Tx/Rx multiqueue support to vmx(4).
I believe that ALTQ d... -
-
-
05:46 PM Bug #6594: Package reinstallation post-config restore hangs if no Internet connectivity
- I was just hit by this as well. In my case I am preparing to replace a device at a remote site. I used pfsense's rest...
-
-
04:44 PM Bug #6099: igmpproxy does not recognize upstream interface
- No problem, sh** happens ;-)
I updated my box today to version 2.4.0.b.20170103.0147.
Checked igmpproxy for new b... -
-
-
-
-
-
-
-
- It is working on 2.3.3 snapshots as well.
-
11:21 AM pfSense Packages Bug #6987: ntopng needs Google API key for GeoIP map
- Thanks, that's the information I was missing.
-
- ntopng 2.4 is available on pfSense 2.4, and it works there. If/when the package is updated on other branches it will ...
-
- The bug referenced the need for ntopng version 2.4 to resolve the problem, so why is it being closed when version 2.2...
-
-
- Apparently no patching required with ntopng-2.4.2016.10.14 - you can configure the API key in Preferences - Users - G...
-
11:53 AM Bug #7075 (Resolved): firewall states show negative value for total bytes processed
- As seen in the screenshot, the "Firewall >> Rules >> LAN" page shows a negative number for total bytes processed by a...
-
- According to this
https://lists.freebsd.org/pipermail/freebsd-net/2013-May/035564.html
Script that can solve CPU 1... -
- Works
-
- Applied in changeset commit:4cfd15a94a97445d1334ad87bddf0c3700f74bf2.
-
- In OpenVPN 2.4 "client-cert-not-required" is deprecated, the new functional equivalent directive is "verify-client-ce...
-
- Works
-
- Seems to work in every combination I've thrown at it.
-
- After the protocol selection changes needed for #7062, the OpenVPN server page is not adjusting the port numbers like...
-
- OpenVPN 2.4 automatically attempts to negotiate crypto between the client and server, due to this, the tunnel can end...
-
- Applied in changeset commit:c854afcc3d7830414a2514a640248a5b239569a3.
-
- OpenVPN 2.4 added --tls-crypt which works similar to --tls-auth, but also encrypts the control channel. It does not r...
- 08:20 AM Revision 3cb0c7c3: vpn_ipsec_settings - do not redirect on save
- When the user presses save, and there are no input errors, the data is
saved - good. But the page redirects away to i... - 08:16 AM Revision 32973108: Ignore return from system_syslogd_start
- system_syslogd_start returns the retrn value from mwexec_bg, which is
the PID of the background process. It is not an... -
- Applied in changeset commit:3bfb38f99cd1c15b5d502b3dbabc913226550d9c.
-
-
- Basic updates are complete, now dealing with specific changes in separate tickets
-
- Already fixed on 2.4.0 - see #809
-
05:01 AM Bug #7070 (Duplicate): Sync username for xmlrmc seems considerate
- On master I do the folowing configuration:
!pfsense.png!
I have the folowing log on master :
@/rc.filter_sync... - 05:05 AM Revision 44c42356: Report problems applying changes
- 1) Strictly keep track of the accumulating $retval from calls to various
functions that apply changes.
2) Use new fun... -
- There is no such thing needed, simply reboot after installing the package.
-
-
- https://github.com/pfsense/pfsense/pull/3344
-
- Diagnostics > States becomes cumbersome on systems with large state tables. Provide a mechanism to suppress the displ...
-
-
-
12:10 AM Feature #2358: NAT64 support
- UPVOTE!
First of all, thank you for the great open source firewall product. As Apple starts to require all the new...
01/02/2017
-
- On a freshly installed VM I activated the option and when it rebooted, it came up all the way but it shows no package...
-
- I've used wrong ticket # in commit log. Relevant commits are:
commit:9bf6cdc135ddf108bc08f048687130c09cd09f4b and ... -
- Applied in changeset commit:c13c0fd0fe547fa8e35997d7ede7f8a6b33088fa.
-
- OpenVPN 2.4 supports GCM encryption but it cannot be used in Shared Key mode. If you attempt to activate it, OpenVPN ...
-
- Applied in changeset commit:a4b3624650aa46c9dc4a20afc5b522c6b9191904.
-
- HFSC support priorities just as any other scheduler:
hfsc Hierarchical Fair Service Curve. Queues attached ... -
- Is there any possibility to change the target to 2.4.1?
Or... just fix it somebody, please :) -
- 05:28 PM Revision 9187d6f7: Change "privilege" to "access"
- in various text to make it read better
-
- 04:36 PM Revision d9f1170e: Fixed #6972
- I was only able to reproduce tis issue using Chrome, but it should now be resolved
- 04:34 PM Revision fab3c245: Fixed #6972
- I was only able to reproduce tis issue using Chrome, but it should now be resolved
- 03:56 PM Revision 21312954: Use admin rather than root in UI text
-
-
- 03:16 PM Revision 24318185: Revert "Theoretical fix for #6972"
- This reverts commit 335e63d66ce8af690d1a144d4ec6b385cbe39af4.
- 03:10 PM Revision 8ccb89f5: Theoretical fix for #6972
-
-
-
-
-
-
-
-
-
-
-
-
-
- OpenVPN's man page and docs say it should work but it tosses an error on the bind directive.
It appears to do the ... -
- This apparently still needs one more change. The IPv6 only modes need:...
-
-
01:29 PM
Bug #7057 (Resolved): Hidden field displays in browser
-
01:09 PM Bug #7066: vmx(4) interfaces do not have ALTQ support on pfSense 2.4, they had ALTQ support on 2.3
- For what it's worth, I saw the same behavior with igb interfaces after restoring a 2.3 config with a shaper.
-
- Attempting to configure traffic shaping on a pfSense 2.4 VMware VM with vmx NICs results in an error:...
-
-
- I pushed a change with help text for DH & ECDH and also updated the doc wiki a bit: https://doc.pfsense.org/index.php...
-
- A little fix in https://github.com/pfsense/pfsense/pull/3340
- 12:00 PM Revision 57188e47: Add security notes for privilege assignment pages
- Suggested solution for Redmine 2247
-
- Ooops. Sorry for the breakage.
Fixed in the latest version.
Thanks for the report. -
- Works fine. Client receives IPv6 DNS servers if they are configured.
-
- Works!
- 10:50 AM Revision fafdd8f0: Fix #7059 Set expected icmptypes format
- icmptype is a comma-separated list in the config. When attempting to save, the array in $_POST['icmptype'] needs to b...
-
- 10:45 AM Revision b961bc23: Remove redundant gettext() in firewall_rules_edit
- The 'helpmsg' here is already translated with gettext() when the 'helpmsg' array entries are set up, so IMHO there is...
-
- 10:44 AM Revision c603ead7: firewall_rules_edit whitespace
- (cherry picked from commit da391430080cb0e1b2054c6f676c9c678164f957)
-
-
10:42 AM pfSense Packages Bug #7067 (Closed): usbhid-ups - no such file or directory
- After installing NUT and connecting a generic (Costco) CyberPower UPS, I receive the following error in the log:
u... - 10:42 AM Revision 2025ba8c: Standardize privilege name capitalization
- While looking at some privilege stuff, I noticed that various
capitlization looked inconsistent down the list. This m... -
-
10:40 AM
Bug #6972: "Are you sure you wish to?" prompts and other issues with deleting networks from network-type aliases
- Applied in changeset commit:fab3c245cfb52964cebdab2ea47dddb21731352a.
-
10:37 AM
Bug #6972 (Feedback): "Are you sure you wish to?" prompts and other issues with deleting networks from network-type aliases
- I am only able to reproduce this with Chrome but it should now be resolved.
-
-
- reopening since crypto is not cryptodev. Pointy hat to me
-
-
- Working now.
Thanks again for the quick turnaround.
-
- Now it˛`s all good.
Thanks again! -
- Yes it's building right now, we restarted the snapshot builds to make sure it gets picked up.
-
- Thanks for the quick response on this Jim. I assume another snapshot will hit later this morning or early afternoon?
-
- That was probably from before the sync. Clear the error and check again. If you can, reboot and see if the error is g...
-
- I just have this now...
Crash report begins. Anonymous machine information:
amd64
11.0-RELEASE-p5
FreeB... -
- OK. We will wait for it to show up in snapshots and re-test and then if it's OK there, this can be closed.
-
- Yep, all works now.
Thanks! -
- I just pushed another change that should help, give it ~5-10 mins to show up on github and then gitsync or apply that...
-
- Greg M wrote:
> Ummm I`m on: 2.4.0.b.20170102.0439
> Issue persists.
Try to gitsync with master or wait next sna... -
- Ummm I`m on: 2.4.0.b.20170102.0439
Issue persists. -
- This should be fixed by the PR that was merged a short while ago and is already in the latest snapshot. Update to the...
-
- I am seeing the same errors as Greg, though I'm using a DH of 4096 instead of 2048.
Problem is still occurring on... -
- Forgot to add...
If I use ECDH only it works... -
- Hi!
I`m also affected.
First thing:
Crash report begins. Anonymous machine information:
amd64
11.0... -
- The only error that could cause the settings to not be written is if you have selected DH parameters that do not have...
-
- First problem I found is if you edit/save a client, it writes the protocol description to the config, rather than the...
-
- Looks good, no more strlen error.
-
- PR has been merged
- 07:48 AM Revision c6668aba: Fix var name cut-paste error in openvpn.inc
- 07:08 AM Revision 128b93e0: OpenVPN Client 2.4 save correct protocol
- This needs to be fixed the same as vpn_openvpn_server.php
-
04:15 AM Bug #5218: CSRF magic modifies content in pfSense interface
- No, it's back again on my installation (2.3.2), in my case while editing php files with embedded html
-
01/01/2017
-
- After upgrading to the latest release (20170101.1906), OpenVPN server conf files are not populated in the /var/etc di...
-
- Make this consistent with System - General Setup - DNS Server Settings.
-
- - Add missing DNS Resolver references
- Nuke PPTP VPN mentions
- Use letter case consistently.
The "Disable DNS Forw... -
-
-
- OpenVPN 2.4 added support for LZO4 which gets better performance and consumes less CPU...
-
- Applied in changeset commit:f888c35aa25b38cdf5b1a73fc65ed6959451bfe0.
-
- OpenVPN 2.4 added two ECDH-related options:
1. Settings "dh" to "none" tells OpenVPN to use only ECDH and not DH
... -
06:03 PM
Bug #7057: Hidden field displays in browser
- Using the addGlobal() method is the best way to do this as Phil has demonstrated. That creates a simple input without...
-
-
-
-
- Yup. It'd be awesome if those settings were moved to the relevant place (i.e., DNS forwarder/resolver settings). This...
-
- That's for the host resolver itself -- dnsmasq and unbound in forwarding mode will pick up more.
-
- Maybe someone could instead fix/nuke the misleading note from the GUI, instead of putting in more DNS servers that wi...
-
- this is true add ipv6 and it has even more need
-
-
- Applied in changeset commit:ca3666766588538934bedc6933934fbadb9249ef.
-
- OpenVPN 2.4 changed the meaning of "udp" and "tcp" to be dual stack, listening on IPv6 on all interfaces at once. "lo...
-
- Applied in changeset commit:6a638752c8a3861a3309c3dc8d557c8904ff84d6.
-
- OpenVPN 2.4 supports pushing IPv6, allow the GUI to define IPv6 OpenVPN DNS servers to push to clients.
To me, I h... -
11:58 AM Bug #7036: 2.4 ZFS on RCC-VE 2440 hangs
- I also have the same issue on my RCC-VE 2440. I've tried with both Bios 06 and 08, same issue. It takes 15-20 minut...
-
- Applied in changeset commit:bffa3185a63cbdd727701704d3b82abd7c61a78c.
-
- It's finally there in OpenVPN 2.4!
And since it's caused the status page to report fields incorrectly, it needs to... -
10:31 AM Bug #6340: fsck hangs boot in background, fails to produce any action, resulting in broken firewall
Turn off sync mode.
On a clean system, before an issue crops up. It will let UFS do what it does, and not genera...-
- We don't like to move things just to move them, unless it's worth updating all of the documentation and other related...
-
- I'd like to do a quick reorganise of the various backup and restore functions in the GUI. While not a huge problem it...
-
05:32 AM Feature #4632: Support for Multipath TCP (MPTCP)
- Hello,
Could you please add this feature on 2.4.0 version? - 05:16 AM Revision cffe1271: Remove redundant gettext() in firewall_rules_edit
- The 'helpmsg' here is already translated with gettext() when the 'helpmsg' array entries are set up, so IMHO there is...
-
- Next round of possibilities in PR https://github.com/pfsense/pfsense/pull/3337
- 05:09 AM Revision da391430: firewall_rules_edit whitespace
- 04:32 AM Revision 23057964: Fix #7059 Set expected icmptypes format
- icmptype is a comma-separated list in the config. When attempting to save, the array in $_POST['icmptype'] needs to b...
12/31/2016
-
- Try PR https://github.com/pfsense/pfsense/pull/3334
-
- Craft an invalid firewall rule, such as one set for IPv4 with an IPv6 src/dst, and when the input errors are displaye...
- 01:42 PM Revision 48157a04: Standardize privilege name capitalization
- While looking at some privilege stuff, I noticed that various
capitlization looked inconsistent down the list. This m... -
- * Move the help message to be on the group as a whole not just the IP input field
* Clarify the IP field (label state... - 11:25 AM Revision 76895c7f: firewall_rules_edit stop Floating field displaying
- Seems to fix https://redmine.pfsense.org/issues/7057
But I have not looked underneath the hood - just copied the way ... -
- You cannot specify either one in the rule directly because it doesn't make sense. Use an alias with mixed contents in...
-
- In which case flip the question on-end, why does the code (_firewall_rules_edit.php_) seem to disallow IPv4 and IPv6 ...
-
- What's the bug here?
pf allows mixed aliases and only uses appropriate addresses when matching. We allow it becaus... -
- pfSense really needs a more strongly type-checked alias system/API/library.
Current example: often these days a s... -
07:25 AM Bug #6099: igmpproxy does not recognize upstream interface
- edit: 31-12-2016
I've established a working setup, using the develop version, already on theh box.
When I disable... -
- Philipp Haefelfinger wrote:
> Is this commit in the latest build applied? If yes, there seems to be something buggy ... -
- See "PR 3331":https://github.com/pfsense/pfsense/pull/3331 . Note added to assignment pages, probably suffices?
-
- And as soon as you have "Diagnostics->Edit File" you can change whatever code you like, so you can add/modify code to...
-
- I suppose that "WebCfg - All pages" includes shell command prompt, so it's clearly on reflection going to have shell ...
-
- PR https://github.com/pfsense/pfsense/pull/3329
I made the "Floating" field be created with the same construction as... -
- _firewall_rules_edit.php_ on Firefox 50.1, see attached screenshot
Html looks correct (contains "hidden" parameter... -
- As of 2.3.x the original issue is resolved (it's now allowed/valid) so this issue can be closed as resolved
12/30/2016
-
- This is not so easy, there are a lot more relevant commits to MFC, a lot.
-
- This seems to be relevant commit - https://svnweb.freebsd.org/base?view=revision&revision=306433
Assign to Luiz for ... -
- I think I understand why the text under Remote networks is written the way it is now. Apologies for the misunderstan...
-
- All of the settings are from the perspective of the server, even the override. The descriptions reflect this, they do...
-
- Jim Pingle wrote:
> The wording of IPv4 Remote Networks is correct. The box defines a client-side network ("routed _... -
- OpenVPN 2.4 makes it more obvious that you can't mix static IPv4 in an override with dynamic IPv6, so there is a grea...
-
- The wording of IPv4 Remote Networks is correct. The box defines a client-side network ("routed _to_ this client") for...
-
- The OpenVPN Client Specific Overrides page under OpenVPN settings only has a single Tunnel Network field. In fact t...
-
02:37 PM Bug #6981: IPv6, rc.newwanipv6, flooding log and resets connection periodically
- Happy to helped. Last good action for 2016.
Happy new year^^ -
12:02 PM Bug #6981: IPv6, rc.newwanipv6, flooding log and resets connection periodically
- It does work for me now - Marcel's hint to check "Request only an IPv6 prefix" was indeed correct. After two more reb...
-
-
-
-
-
- (cherry picked from commit b1cff5815344220340a218938cd7f3df64687203)
-
- @jim-p wanted this split out from PR 3159 as it wasn't related to that PR.
Puts "any" at the logical place people lo... -
-
- Safari doesn't seem to have editing issues (or else they very quickly fixed it). Removed all white spaces and re-ent...
-
- (cherry picked from commit 43a0cf73f2c2f951b9a1c5e777551de1b82c25f2)
-
- Will pu in separate PR afterwards as requested
(cherry picked from commit 86554b5aecb1d219e2f72c97b14de8b5fef495aa) -
- Code doesn't seem to check that IP protocol is valid (IPv4/6/4+6) or report via $input_errors[] if not. Simple fix. O...
-
- @jim-p commented on the PR that:
> This change is unwarranted. The protocol default should remain TCP, it is set tha... -
- Minor CSS and formatting improvement to layout for icmp types in rules table. With this change, if several icmp types...
- 11:53 AM Revision 744c5ffc: Fix the Safari issue mentioned by @garga
- https://github.com/pfsense/pfsense/pull/3139#pullrequestreview-156718
I ended up having to remove the select element... -
- (cherry picked from commit 97eebb23531bc95af2cde686641080851107c42c)
-
- (cherry picked from commit c7e31e37c1aa0a8e4154528a99a121c46ebf018d)
-
- (cherry picked from commit fa16b2f9c1162ec90bed0099c0ae25e36d9fd9b0)
-
- (cherry picked from commit 91822dc6d0b829a34254638c5d15db72fe70932d)
-
- (cherry picked from commit 16b91b19e08e0778522c16e811754c22f03b5150)
-
- 1. On creating a new rule, $pconfig['ipprotocol'] is undefined, rather than defaults to what is seen in GUI (IPv4). F...
-
- (cherry picked from commit 0e782e9f576aee02d4e2e5147e24bc5def261355)
-
- See main PR for details
(cherry picked from commit cf1aaf9c5afcd34ed6d2bebc577fd527c42c80b4) -
- See main PR for details
(cherry picked from commit 7a4b11b6a495ddc747db5e44f5a62891ef86398c) -
- (cherry picked from commit 58aa4d7ce3d0c602516e8d7691fc0137b593262c)
-
- See main PR details
(cherry picked from commit 4784d8cef74bac4d1397fbfd7312c08912d8890a) -
- 11:48 AM Revision 04665e78: Add privs to control display of notices
- This is a suggested way to allow control of the display and clearing of
notices. The use case is:
1) A user with mini... -
-
-
-
- Luiz good afternoon, I have two files as you requested, one working perfectly, which is called BKP_2.1.5_Functionando...
-
- Package was updated as well
-
- Update OpenVPN to 2.4.0 and make necessary adjustments. Noted after a quick look:
* Remove tun-ipv6 from config si... -
08:08 AM Bug #7056: Add gpg keys to repo for proper iso download verification method
- Ah, I had assumed it was simply two httpd's on the same box as they had an adjacent IP address.
Still however, if ... -
- Duplicate of #4472
That said, a _copy_ of the hash is on the same server as the files, but the hash is also availa... -
- Currently there is no legitimate way to properly verify the .iso download has not been tampered with.
The sha256 f... -
- OpenVPN 2.4 has made a few changes to the Windows installer that may need accounting for. See https://community.openv...
-
- Port aliases work again with that last commit. Will leave it open waiting for feedback to make sure the original issu...
-
- Applied in changeset commit:631217f488c682ce4ffa8af5d0c54b03c016af46.
-
- PR has been merged, thanks!
-
- Ticket #7042
12/29/2016
-
- The last interface IP is always saved in /var/db/${interface}_ip. Use that file, if it exist, to find the main inter...
-
- - trim sat in use
- gps ok for GPGLL
- lat & lon direction for GPGGA & GPGLL
- sat in use text position fixed -
- This fix broke port aliases.
With this commit, port aliases are empty:... -
-
- It's 2.4 only, merged accidentally
This reverts commit 87913c3053c83c5d8473d6e24f39c38833d75b47. -
- were the files I uploaded any help or is something more needed?
-
08:02 PM Bug #6594: Package reinstallation post-config restore hangs if no Internet connectivity
- I'm running into this right now. Not a big network guy, just trying to replace our small business' router with a SG-4...
-
- Packages can declare a function called $pkgname_generate_rules() and it
will be executed during filter reload process... -
- Packages can declare a function called $pkgname_generate_rules() and it
will be executed during filter reload process... -
- This reverts commit af6248407bae4d476b483dcb3a388744fb74b465.
Not necessary at all.
Pointy hat to: me
Ticket #7042 -
-
- Ticket #7042
-
- Make captiveportal_radius_stop_all() log the disconnections in the system log and fix it so that it works with the zo...
-
05:05 PM
Bug #6972: "Are you sure you wish to?" prompts and other issues with deleting networks from network-type aliases
- I'll take care of it :)
-
- Renato Botelho wrote:
> It happens when you click on fa-trash icon. If you click on other areas of the button confir... -
- I've found the way to reproduce it. It happens when you click on fa-trash icon. If you click on other areas of the bu...
-
-
-
-
-
- Is this commit in the latest build applied? If yes, there seems to be something buggy with the fix.
I just updated m... -
-
-
- Applied in changeset commit:fef29f5aee32899b72886f8a0c00205bf0f2fc09.
-
01:01 PM Bug #7052 (Rejected): Fails to monitor ipv6 gateway
- From log...
-
- New traffic graphs respect theme colors. Should be OK now
-
- Keeping it opened for reference but I'm not sure if Bill Meeks will implement it based on his comments on the forum t...
- 12:20 PM Revision 1ca5d09f: Put print_info_box severity class in quotes
- These should be strings in quotes, otherwise PHP looks for them to be
constants and would be issuing notice level "er... -
-
- Convert rc.prunecaptiveportal to lock()/unlock()/try_lock() and use the lock to ensure that there aren't race conditi...
-
- Captiveportal_disconnect_all() loops through the active users and disconnects them immediately but doesn't remove the...
-
- Jim Pingle wrote:
> Doing a reroot style restart works nicely on its own, need to test it during an upgrade to know ... -
- Doing a reroot style restart works nicely on its own, need to test it during an upgrade to know for sure how it handl...
-
- Done. pfSense-upgrade 0.11 on recent 2.4.0 system will do the trick
-
- Nelson, can you submit (even privately if you prefer) a copy of your working settings for the 2.1.x version and also ...
-
- Not sure what's special about 2.4 here; this has _never_ worked since the hidden rules created by the package when se...
-
- Good morning Luiz, is as follows, transparent proxy use with the limiter by ip, what happens is that when setada the ...
-
-
- @jim-p wanted this split out from PR 3159 as it wasn't related to that PR.
Puts "any" at the logical place people lo... -
- Seems to all be working and sufficient. Can add more later if needed.
-
-
- The changes here fix this bug report.
For a followon feature request to implement control of view/clear notices see:... -
- Works great
-
- Fixed
-
- Proposed code in PR https://github.com/pfsense/pfsense/pull/3322
-
- Use case:
A user with minimal page privs (e.g. can just change their password, or access a few status pages or...) s... - 06:28 AM Revision 499adf73: Put print_info_box severity class in quotes
- These should be strings in quotes, otherwise PHP looks for them to be
constants and would be issuing notice level "er... -
- After talk with Nelson on facebook he agreed to open a new ticket in english
-
12/28/2016
-
- Safari doesn't seem to have editing issues (or else they very quickly fixed it). Removed all white spaces and re-ent...
-
-
- Will pu in separate PR afterwards as requested
-
-
-
-
-
- Added:
The firewall platform and serial number
ARP Table
NDP Table
Gateway status (See #7046)
ZFS... -
-
-
-
- boa noite, estou tendo problemas no limiter funcionando com proxy transparente, nas versões acima da 2.1.5, todas tes...
- 03:41 PM Revision 5280f021: Add privs to control display of notices
- This is a suggested way to allow control of the display and clearing of
notices. The use case is:
1) A user with mini... - 03:36 PM Revision 3b56806e: Refactor to use notify_all_remote
- While looking at notices.inc I noticed (pardon the pun) that notify_all_remote did exactly the same as these 2 lines ...
-
-
-
- 03:31 PM Revision ea4f5252: Fix #3454 Do not show Mark All as Read button when no priv
- If the user does not have access to index.php then the "Mark All as Read" button for the notices popup does not work ...
-
- 03:29 PM Revision 063c02c9: Change system admin to firewall admin
- (cherry picked from commit 6f4323f3d3cc7066e833f8a898f0608e6527871d)
- 03:29 PM Revision bc2b824d: Fix #7043 Do not display crash reporter link when no crash_reporter access
- (cherry picked from commit c87eeb08acc6d5d0fd642e50990b93b7137657ee)
-
- 03:17 PM Revision 6f4323f3: Change system admin to firewall admin
- 02:14 PM Revision 46886273: Remove unused get_notices() from xmlrpc.php
-
- Squid's own capabilities mean nothing here. You need support in the underlying OS to work with. Even if I made all th...
-
01:32 PM pfSense Packages Bug #7048: Add IPv6 support to squid
- Regarding the comment, "The NAT used for transparent IPv4 proxy won't work, and there's nothing to hook into regardin...
-
- A couple of notes on this: The only part of Squid working with IPv6 is the reverse proxy (though, that's not advertis...
-
- Corrected subject - This is not a "bypass" in the way that is stated. The squid package only supports IPv4 currently....
-
- Missing IPv6 support in the squid package allows traffic to escape intended inspection and apparently also the firewa...
-
- Last part of this was implemented by #7046
-
- Since the switch to dpinger, there is no easy way to view the gateway status from the shell. Having the gateway statu...
-
- Applied in changeset commit:84fe48d414dc59ffd236b072000f07ea7423380e.
-
- Items to add:
* The firewall platform and serial number
* ARP Table
* NDP Table
* Gateway status (See #7046)
* Z... -
- Applied in changeset commit:337822a39bfd89c011cfda4092a6e5e409a7dbcf.
-
- When running a playback script, there is extra output from pfSsh.php that is unnecessary:...
-
-
- See #6989
-
10:31 AM Feature #7044 (Duplicate): Gateway Monitoring - Add More IPs
- I would like to request that it be possible to add more than one ip to monitor the gateway (s), today we have the pos...
-
-
- Applied in changeset commit:fe80b3aac6ddd661c7a2daf52ad54f1722915590.
-
- Bug fix PR https://github.com/pfsense/pfsense/pull/3319
I will raise another feature issue to discuss what could b... -
- Applied in changeset commit:c87eeb08acc6d5d0fd642e50990b93b7137657ee.
-
- PR https://github.com/pfsense/pfsense/pull/3321
-
- When the user clicks "here" for more information, nothing happens, because they do not have carsh_reporter page acces...
- 07:59 AM Revision c87eeb08: Fix #7043 Do not display crash reporter link when no crash_reporter access
-
07:58 AM pfSense Packages Bug #7028: Squid - all javascript broken by bootstrap conversion
- Steve Beaver wrote:
> Right. It is not "A new bug", it is the original bug that has just been fixed.
https://gith... -
07:56 AM
pfSense Packages
Bug #7028: Squid - all javascript broken by bootstrap conversion
- Right. It is not "A new bug", it is the original bug that has just been fixed.
-
- None of those fixes are in 2.3.2 so it's just pointless to test anything there.
-
- A new bug is revelead, see:
!http://i.imgur.com/U6Ggy4d.png!
The syntax is duplicated.
New installation from... - 06:24 AM Revision 76a13ab1: Remove unused print_noices and print_notice_box
- When looking into how the notices features work these days, I found that these functions are no longer used anywhere....
- 06:16 AM Revision fe80b3aa: Fix #3454 Do not show Mark All as Read button when no priv
- If the user does not have access to index.php then the "Mark All as Read" button for the notices popup does not work ...
- 05:45 AM Revision ee5d140e: Fix get_notices parameter in xmlrpc.php
- This looks to me like the var name here should be $category
Note: I don't see where this get_notices() inside class p... - 05:35 AM Revision a2e35163: Refactor to use notify_all_remote
- While looking at notices.inc I noticed (pardon the pun) that notify_all_remote did exactly the same as these 2 lines ...
-
12/27/2016
-
-
-
-
-
- This is working well for me with changeset applied using system patches on 2.3.2_1 that I was using in my initial tes...
-
- Applied in changeset commit:5d1cf6f5cf85c6371078e288172da1e05df1380c.
-
- Add a function to disconnect all logged in users and a button to call it in the captive portal status page.
(cherry ... -
-
07:38 PM Revision c729f32a: Add new "Ignore client identifiers" DHCP feature
- Exposes the underlying dhcpd configuration option "ignore-client-uids"
in the pfSense "Services / DHCP Server" GUI by... -
- 07:36 PM Revision 145105bb: Add case for 59 to prefix functions
- Maybe these functions should have a case added for prefix length 59?
(cherry picked from commit 231fe9543c696bb2dcdc7... -
- (cherry picked from commit 260f60a9b60d42be7a274b29a8c217c2b4b53507)
-
- (cherry picked from commit 19d905bcaecfed47abdf5e3854f54684d19c3b8f)
-
- 07:34 PM Revision 25e5d826: Fix #3560 correctly handle disabled static routes
- 1) util.inc - add parameter to get_staticroutes() so the caller can
choose to see all static routes or only the ones ... -
-
- Make $use_filterdns a parameter. It needs to be persistent across
recursive calls otherwise it ends up not adding nec... -
- Make $use_filterdns a parameter. It needs to be persistent across
recursive calls otherwise it ends up not adding nec... -
-
- https://github.com/pfsense/FreeBSD-ports/pull/242
Kindly test and report back either here, and/or @ https://forum.... -
- Simplest way to reproduce this is to use a DNS Resolver override for "setfirst" and the firewall's domain, set to an ...
-
- In certain circumstances a DHCP client interface gets configured with an incorrect address. The address that should b...
-
-
- Broken feature gone -> can be closed. Thanks.
-
- PR has been merged, thanks!
- 02:21 PM Revision 4a673efc: PPTP Remote IP is host or V4
- Now that Form_IpAddress() supports a range of types of input, this can be specified as HOSTV4.
(cherry picked from co... -
- 01:44 PM Revision 4890b6ec: PPTP Remote IP is host or V4
- Now that Form_IpAddress() supports a range of types of input, this can be specified as HOSTV4.
-
- PR has been merged, thanks!
-
- See PR https://github.com/pfsense/pfsense/pull/3312
- 12:47 PM Revision 4a1a2050: Form_IpAddress add types remove patterns
- 1) Add alias and host types to Form_IpAddress with the appropriate hover
text.
2) Remove the patterns - the UI of tho... -
-
- (cherry picked from commit 081a46fe3bc2393778c4e270cd8388230d39b38c)
-
- 12:41 PM Revision 29069aed: Fix DNS Server Gateway Check
- If I enter a DNS server IP address that is on a locally connected network, and choose a gateway for it, this code was...
-
- 11:09 AM Revision cf08b49e: Fix #3560 correctly handle disabled static routes
- 1) util.inc - add parameter to get_staticroutes() so the caller can
choose to see all static routes or only the ones ... -
- Works here, too. Gateway status shows it going up/down but no actions are taken when it transitions.
-
- Been working for me, but it would be good to get some feedback from anyone else who has tried/tested this.
- 09:43 AM Revision d8587952: Fix DNS Server Gateway Check
- If I enter a DNS server IP address that is on a locally connected network, and choose a gateway for it, this code was...
-
- PR has been merged, thanks!
-
- PR has been merged, thanks!
-
- Code doesn't seem to check that IP protocol is valid (IPv4/6/4+6) or report via $input_errors[] if not. Simple fix. O...
-
- @jim-p commented on the PR that:
> This change is unwarranted. The protocol default should remain TCP, it is set tha... -
- Minor CSS and formatting improvement to layout for icmp types in rules table. With this change, if several icmp types...
12/26/2016
-
-
09:36 PM Bug #7036: 2.4 ZFS on RCC-VE 2440 hangs
- Running bios version 08 (ADI_RCCVE-01.00.00.08-nodebug) with no change. pfSense-CE-memstick-ADI-2.4.0-BETA-amd64-2016...
-
- Follow the procedure at http://netgate.com/docs/reference/adi-bios-flash.html#adi-bios-flash-procedure and update to ...
-
- Add case for 59 to prefix functions merge_ipv6_delegated_prefix / dhcpv6_pd_str_help
-
- Most likely a configuration error. Please post on the forum for discussion before opening a bug report.
-
07:24 PM Bug #7041 (Rejected): Not all mobile IPsec phase 2 entries pass traffic through the correct interface
- My phase 2 configuration is as follows:
VLAN 10 [Home]- 192.168.1.0/24
VLAN 12 [VMs] - 10.1.2.0/24
VLAN 13 [Lega... -
-
-
- Cannot be downloaded anywhere, another thing killed by Proofpoint.
Close please. - 02:37 PM Revision 9080e20d: Modify DHCP Server messages
- (cherry picked from commit 12e08722bd9264f649e76030dce24259430f2832)
- 02:37 PM Revision 1d52ceac: Customize DHCP Server on interfaces message
- (cherry picked from commit b70904493917a5213ee4b752c5466b7d36f884b8)
-
-
- When MAC filtering is disabled the client MAC address isn't recorded and the relative column is empty. In this case, ...
-
-
- When MAC filtering is disabled the client MAC address isn't recorded and the relative column is empty. In this case, ...
-
- Confirmed, happens even with a very basic config (one interface, dummy password, standard router ID and area filled i...
-
- https://github.com/pfsense/FreeBSD-ports/pull/241
-
- https://github.com/pfsense/FreeBSD-ports/pull/241
Added options matching the reverse proxy options (modern/interme... -
-
- Works.
-
- I am using the interfaces like this :
ix0
ix0_vlan1
ix0_vlan35
I just want to disable only ix0, but still h... -
02:38 AM pfSense Packages Bug #7039 (Feedback): HAProxy backend configuration does not handle intermediate CAs properly
- In HAProxy backend settings, when configuring a server, there is the option to have it validate SSL certificates agai...
-
- I'm confused as to why they would issue a /64 PD on the wan.
dhcp6c does ask for renew, as shown in the attached i...
Also available in: Atom