Activity
From 01/12/2017 to 02/10/2017
02/10/2017
-
10:14 PM Revision 5bf8ac30: Set _IS_RELEASE for RC in this branch
- 10:07 PM Revision ce437697: logout via POST
-
09:53 PM Feature #7251 (Resolved): JavaScript & CSS are cached too aggressively by browsers, add URL fingerprint or other cache control mechanism
- JavaScript and CSS are cached too aggressively by browsers, so when any significant change happens, users must manual...
-
- I can't reproduce this with clients or servers. "Permission denied" implies that a firewall rule is blocking the traf...
-
-
-
-
-
-
-
-
-
-
- As you see, it already adds the PTR records.
-
-
- 09:22 PM Revision 4b72f68f: Replace '_' with '_<wbr> when displaying alias names. Allows long alias names with underscores to word-break better.
- 08:49 PM Revision 8b2cb5a4: GET/POST conversion firewall_virtual_ip*
-
- Can't reproduce. It works fine on 2.3.2_1, 2.3.3, and 2.4. The server has to be set for net30 and you have to specify...
- 08:34 PM Revision e3947e77: GET/POST conversion firewall_rules
- guiconfig.php display_top_tabs supports "usepost" as an optional 4th argument
- 07:40 PM Revision a1371557: GET/POST conversion firewall_nat_out*
- 07:33 PM Revision 01b30fa7: GET/POST conversion firewall_nat_npt*
- 07:26 PM Revision b9205559: GET/POST firewall_nat_1to1 bis
- 07:21 PM Revision d0737076: GET/POST conversion
- 07:07 PM Revision 31bdcffb: GET/POST conversion firewall_nat*
- 06:53 PM Revision d1fd8c3b: GET/POST conversion firewall_aliases*
- 06:40 PM Revision c6b6c4bf: GET/POST conversion vpn_ipsec_server
- 06:35 PM Revision cb5a1026: GET/POST conversion vpn_openvpn_csc
- 06:31 PM Revision bae64f1f: GET/POST conversion vpn_openvpn_client
- 06:26 PM Revision 84450372: GET/POST conversion vpn_l2tp*
-
05:57 PM Revision 5eb5856a: 5th try
- - change $do_ping default value to 'true' (which emulates the previous default behavior) to avoid any unexpected resu...
-
- - Reworked based on recent comments from @rbgarga
(cherry picked from commit c516cb287a78f7b05459e7fcba410f443d8eb8af) -
- - incorporate suggestions from @rbgarga with slight modification
(cherry picked from commit 6c2f093000b05285546e81dd... -
- /etc/inc/util.inc:
- arp_get_mac_by_ip() updated to support IPv6
- attempt at code streamline
/usr/local/www/service... -
- - added ndp call to get MAC addr if remote client is connected via IPv6
- automatically hide `Copy MAC` button if arp... -
-
05:46 PM Bug #7249: firewall_rules.php & firewall_nat.php: Replaces underscores with spaces in aliase names
- Cool... This will help pfBlockerNG as all the Auto rules are *pfB_<aliasname>_v4*... Thanks Steve!
-
04:28 PM
Bug #7249: firewall_rules.php & firewall_nat.php: Replaces underscores with spaces in aliase names
- Yes. Missed it by an hour :)
-
04:19 PM Bug #7249: firewall_rules.php & firewall_nat.php: Replaces underscores with spaces in aliase names
- Steve Beaver wrote:
> Changed the code to replace '_' with '_<wbr>' (word break opportunity). Allows a long alias n... -
03:25 PM
Bug #7249 (Feedback): firewall_rules.php & firewall_nat.php: Replaces underscores with spaces in aliase names
- Changed the code to replace '_' with '_<wbr>' (word break opportunity). Allows a long alias name to word-wrap, but r...
-
03:08 PM
Bug #7249: firewall_rules.php & firewall_nat.php: Replaces underscores with spaces in aliase names
- That is not exactly a bug, the underscore is deliberately replaced with a space for display. It seems to have been a ...
-
- I have a number of firewall aliases that contain underscores. The underscore is replaced with a space when viewing a ...
-
-
-
-
-
- 05:39 PM Revision 3093b965: Fix for bug 6966 https://redmine.pfsense.org/issues/6966
- Change-Id: I9471c2bbd8941e70965a86d369c8de87be9a4417
(cherry picked from commit 109a304e154a179bd340b06880ce95baec4da... -
- 05:22 PM Revision 7603794b: GET/POST conversion vpn_ipsec*
- 05:06 PM Revision 3312b65f: GET/POST conversion interfaces_assign
- 05:02 PM Revision 8dce7a92: GET/POST conversion interfaces_wireless*
-
- User feedback suggests the sorted menu was better, despite the lack of consistency elsewhere.
This reverts commit 96f... -
- User feedback suggests the sorted menu was better, despite the lack of consistency elsewhere.
This reverts commit e5d... - 04:57 PM Revision 965717c4: GET/POST conversion interfaces_vlan_edit
- 04:54 PM Revision 5b075645: GET/POST conversion interfaces_vlan
- 04:45 PM Revision 87b458b5: GET/POST conversion interfaces_qinq*
- 04:40 PM Revision f34455d8: GET/POST conversion interfaces_ppps*
- 04:34 PM Revision 41063bd7: GET/POST conversion interfaces_lagg*
- 04:25 PM Revision e1a5d73c: GET/POST conversion interfaces_groups*
- 04:21 PM Revision 5947395d: GET/POST conversion interfaces_gre*
-
- Thank you! Using Network(s) instead of Host(s) worked.
-
- You can't use a host type alias for a masked network like that, use a Network type alias instead.
-
- I'm trying to create a IP Alias with a /16 subnet. This fails with the following error.
* Subnet is too large to e... -
- 04:18 PM Revision b591908c: GET/POST conversion interfaces_gif*
- 04:16 PM Revision 2c391a23: Required fields - Alias Type
- should be a required field. And this 1-char change can also be backported to RELENG_2_3. I noticed this while looking...
-
-
- trafficgraph: Don't update the on screen visual graph while invisible,
which avoids creating a large queue of pending... - 04:12 PM Revision c5ae2b4d: GET/POST conversion interfaces_bridge*
-
04:11 PM
Todo #6767 (Resolved): Change logout from GET to POST request
-
- trafficgraph: Don't update the on screen visual graph while invisible,
which avoids creating a large queue of pending... - 04:10 PM Revision 8ea10c11: Required fields - Alias Type
- should be a required field. And this 1-char change can also be backported to RELENG_2_3. I noticed this while looking...
-
04:09 PM
Bug #7202 (Resolved): "Warning: sprintf(): Too few arguments in /usr/local/www/classes/Form/Group.class.php on line 65 Call Stack:
-
-
- 04:04 PM Revision edf69b0c: Example of setting required items
- (cherry picked from commit 32a85c63c9411463c98a0605772b3e2c01702971)
- 03:55 PM Revision 85877e3c: Require Name field in Shaper
- (cherry picked from commit 40dcb4b61a2c1213a0b3e213c78fddac845a0117)
- 03:17 PM Revision ddd3ffaf: GET/POST conversion system_routes*
- 02:54 PM Revision 20231404: GET/POST conversion system_groupmanager*
- 02:12 PM Revision ac5e11a7: Revise setHelpText to accommodate required fields
- 02:12 PM Revision 5f6c3712: Provide Javascript set_Required function
- 02:12 PM Revision 5b18b8a4: Provide CSS for required fields
- 02:12 PM Revision cc8783a5: Add "Required field" capability to Groups.class.php
-
- Tested 2.3.3 and 2.4, correct subnet is used.
-
- ops, untested yet
-
- works
-
01:52 PM Bug #6432: Relative distinguished names should accept unicode during CA creation.
- To be clear, what's the fix? Does it merely warn to use only ASCII, or does it now support Unicode properly?
-
- works
-
01:40 PM Bug #6852: Commit 8f86722 breaks DHCPv6 leases status page
- upgraded hardware due to c2000 restored config and this now works so guess somethin in my dhcp6 leases file had a pro...
-
- This is a regression
- 01:35 PM Revision a04f6658: GET/POST conversion system_gateways*
-
- I tried to break it again and couldn't after last changes. Instead of closing it without hearing from more people I'l...
-
- Graham Collinson wrote:
> I saw an issue like this on the first power cycle of a new SG-2440.
> manually running fs... -
04:34 AM Bug #6340: fsck hangs boot in background, fails to produce any action, resulting in broken firewall
- I saw an issue like this on the first power cycle of a new SG-2440.
manually running fsck didn't find an issue but e... -
- Everything looks OK now. Thanks Phil!
-
- I believe it's all done now
-
10:16 AM Bug #7083: Put back some visual hint for required fields
- I have noted on GitHub a couple of commits in master that did not get back-ported. @rbgarga is back-porting them righ...
-
- Oh, I see now that you just committed that supporting code to RELENG_2_3. I noticed the issue this morning my time (w...
-
09:16 AM
Bug #7083: Put back some visual hint for required fields
- On which page do you see that Phil?
I assumed you synced in the last few minutes? -
- Reported in forum: https://forum.pfsense.org/index.php?topic=125403.0
I am seeing the "*" displayed in the (some) pl... -
08:43 AM
Bug #7083: Put back some visual hint for required fields
- The mechanism required to do this has been ported to 2.3.3 but it looks like quite a few pages do not yet have the '*...
-
- Looks like this was partially merged back to 2.3.3 but not all of it. Fields have the * before the name and are not s...
-
- works
- 01:21 PM Revision ba14d48e: GET/POST conversion system_gateway_groups*
- 01:18 PM Revision 109a304e: Fix for bug 6966 https://redmine.pfsense.org/issues/6966
- Change-Id: I9471c2bbd8941e70965a86d369c8de87be9a4417
- 01:05 PM Revision bda120a4: GET/POST conversion system_crlmanger.php bis
- 01:03 PM Revision d565c182: GET/POST conversion system_crlmanger.php
-
- works
-
- PR has been merged
-
- works
- 12:52 PM Revision 59d06739: GET/POST conversion system_authservers.php
-
- works
-
- PR has been merged, thanks!
-
-
- pull request for fix on github
https://github.com/pfsense/pfsense/pull/3522 -
- This simple patch appears to work.
Might want to add in further checking or change the way of identifying whether it... -
- Looks like this is caused because there's a mismatch between the ikeid in $config['ipsec']['phase1'] and the ikeid re...
-
- Reproduced issue with two test VMs. Setup a simple IKEv2 between the two with one child sa. When split connections ...
-
- I've seen a similar issue on a production system with IKEv2 and split connections ticked (Enable this to split connec...
-
- works
-
- works
-
- Applied in changeset commit:804f6a165fbb80deac018be43e8d41607fa67594.
-
- Since 2.3.3 is likely the last 2.3.x release and people may be running it a while, it would be good to pull in the ch...
-
12:34 PM Bug #6751: Route53 DynDNS Problems / Replace Route53 DynDNS Module
- If you are going to backport this to 2.3.3 Bug #7206 is also needed.
-
- works (haproxy for instance)
-
- works
-
- I've spent several days getting my VPN working and learned a lot in the process.
I've made a little patch here:
h... -
- really fixed now!
-
- works
-
- works
-
- Not finished yet
-
11:33 AM pfSense Packages Bug #7247: Update net/ntopng to 2.4.2017.01.20
- Well it the update doesn't fix those, you should submit them upstream (or at least FreeBSD bugzilla).
-
- I have 3 recent coredumps saved - are these of any use to anyone for debugging or should I toss them?
-
- Attempting to fix the never ending core dumps with the current version. (Happens pretty much on any restart.)
-
-
-
-
- Commit reverted.
-
- I'll take this, looks like maybe the consistency doesn't weigh up against the inconvenience of the menu being unsorte...
-
-
- Don't have a solution (yet) but FYI in case some people are watching this ticket and not the others/forums, I did cre...
-
10:53 AM Feature #1189: Gateway: Multiple monitor ips
- I would also like to see this as a feature. This one has been open for a while now, and many of the hardware solution...
-
- Yep, that's better, thanks!
-
- This one shows up under "pfSense packages". Maybe because the category is set to "Unbound".
Other "modern" unbound i... -
-
-
-
-
-
-
-
- Applied in changeset commit:7790e0dfaee5f4f1707a8bb6c6e8abf03b2001c2.
-
- 03:50 AM Revision 06f6b161: GET/POST conversion
-
- The javascript nonsense dating back to Windows 9x/IE5 days actually shows local time on the client, severely confusin...
-
12:51 AM Bug #7219 (Feedback): vlan(4) interfaces do not have ALTQ support on pfSense 2.4, they had ALTQ support on 2.3
- Should work now: https://github.com/pfsense/FreeBSD-src/commit/5c1daa5ea1098b67d4c331d5e21b39178d616031
-
12:35 AM Feature #7244 (New): Publish pfsense as a Vagrant Basebox
- Hello pfsense!
The pfsense project should make it easy to provision pfsense by publishing an official pfsense vagr...
02/09/2017
- 10:35 PM Revision 878d6f72: GET/POST conversion system_advanced_ioctl
- 10:01 PM Revision fe914124: Typo
- 09:53 PM Revision e8afd822: GET/POST conversion for camanager and certmanager
-
05:10 PM Feature #7242: SSL Include CA Certs
- Chris Linstruth wrote:
> Or are you talking about installing a CA in pfSense so connections *it* makes outbound can ... -
04:38 PM Feature #7242: SSL Include CA Certs
- Or are you talking about installing a CA in pfSense so connections *it* makes outbound can be trusted/verified when c...
-
- This looks like another redmine that should be a forum post.
Sending the self-signed CA along with the certificate... -
- Kill Bill wrote:
> Apparently we have a language problem here, so perhaps let's try again in a more simple way: WTH ... -
- Apparently we have a language problem here, so perhaps let's try again in a more simple way: WTH is "included in SSL"...
-
- Kill Bill wrote:
> Am I the only one who cannot make sense of the request? No, self-signed certs will never be seaml... -
- Am I the only one who cannot make sense of the request? No, self-signed certs will never be seamless with browsers, o...
-
- Option to have an internal or imported CA (such as an imported self-signed CA) included in SSL for verify peer for do...
-
- - change $do_ping default value to 'true' (which emulates the previous default behavior) to avoid any unexpected results
-
02:15 PM Feature #4821: PPPoE WANs do not take full advantage of NIC driver queues for receiving traffic
- Hi Jim, just wondering if this is still something that might make it into pfSense 2.4.0? I would love to use the maxi...
- 01:52 PM Revision e04daed0: Allow GET-to-POST js to handle confirmation dialogs on delete (anything)
- 12:54 PM Revision 3e142087: setHelp and gettext format vpn*
-
-
-
-
-
-
-
-
- 10:51 AM Revision dd23f616: status_upnp remove nested getext()
- I don't think this does anything useful.
(cherry picked from commit 3224663a3759935b47406c789b9f5cea3eb88136) -
-
-
-
- Fixed in 0.52_5
- 10:37 AM Revision 781d9ce4: setHelp and gettext for system*
- 10:31 AM Revision 4dd437e4: Fix keylength.com href in system_usermanager
- The literal <a href=... text was displaying here, not an actual link to keylength.com
While here, reformat to take th... - 09:45 AM Revision 83d31192: Fix system_gateways_edit setHelp sprintf warning
- The code at line 759 emitted a warning because of the bare '%' in the string.
Other changes are to clarify and tidy u... - 07:40 AM Revision 7f0d6ccf: setHelp and getttext format for status*
- 07:34 AM Revision 3224663a: status_upnp remove nested getext()
- I don't think this does anything useful.
-
- Steve Wheeler wrote:
> I ran some tests with this and was unable to make it work. Adding 'route-to lo0' to the pass ... -
06:05 AM Bug #7243 (Not a Bug): Openvpn route only first network in IPv4 Remote network(s) to local net
- Openvpn Peer to Peer (ssl\tls) 2 client connection
Openvpn route only first network in server openvpn IPv4 Remote ne... -
- - Reworked based on recent comments from @rbgarga
-
05:10 AM Bug #7209: Something is seriously wrong with firewall aliases
- 2.4-latest as of today, fresh install - confirmed NOT fixed. Just as I already said in one of my prev posts
>And I d... -
04:40 AM Bug #7241 (Not a Bug): OpenVPN CSC Tunnel Network not accepting net30 addresses
- I'm migrating a client to pfSense, and they have an OpenVPN server which still uses net30 topology, with some client-...
-
04:31 AM Bug #7116: a floating 'match' rule on LAN does not put traffic from a broswer on a clientpc into a shaper queue
- Pi Ba wrote:
> Without quick it didn't work either. Only changing it to 'pass' made it work.
I'm seeing the same ... - 04:06 AM Revision 046346e0: services_dyndns_edit % needs to be escaped
-
02:44 AM pfSense Packages Feature #7221: ACME package : add standalone mode & specify port used
- Having the package automatically open/close ports 80 and 443 when issuing/renewing certificates would be great. I don...
-
02:04 AM Bug #7167: Error creating higher VLAN ID on SG-1000
- It did not help.
Ok. I restored uFw settings on factory. Assigned VLAN 11 on cpsw0 and chose it as WAN
I can see ... -
01:22 AM Bug #7240: OpenVPN Client bug
Time Process PID Message
Feb 9 17:15:10 openvpn 40490 Initialization Sequence Completed
Feb 9 17:15:10 openvpn 40...-
- Latest snapshot has led to the following log entry and failure to utilise the OpenVPN gateway:
Feb 9 17:13:24 open... -
01:18 AM Feature #7239: DNS Resolver enable reverse dns override for single host
- mehh, probably invalid.
Creating a host override already creates a pointer entry as well.
eg /var/unbound/host...
02/08/2017
-
- DNS resolver only allows individual host overrides for forward lookups, not reverse.
Use case: (sloppy) ISP doesn'... -
10:32 PM Bug #7238 (New): Menu layout broken when using "Hostname in Menu" with long hostnames
- It is good to have the hostname in the menu for quickly identifying the gateways, however almost all of our hostnames...
-
- Jim Pingle wrote:
> PR was merged
Confirm fixed. - 08:23 PM Revision f0136b17: Automatic GET to POST functions moved to pfSenseHelpers.js so they can be used by any page
- 07:22 PM Revision d3f59a8c: Improve comments
- 07:15 PM Revision f5c9c0c7: Experimental method to convert GET calls to POST
- 04:47 PM Revision 71ffc048: Merge branch 'master' into sethelp-7
- 04:43 PM Revision 3fd41815: setHelp strings for services*
-
04:28 PM Bug #7202: "Warning: sprintf(): Too few arguments in /usr/local/www/classes/Form/Group.class.php on line 65 Call Stack:
- I navigated in almost all screens previously affected and can confirm everything is fixed with the pages previously a...
-
08:17 AM
Bug #7202: "Warning: sprintf(): Too few arguments in /usr/local/www/classes/Form/Group.class.php on line 65 Call Stack:
- This problem has now been fixed in a more generic within the Form classes so there should be no other cases, with or ...
-
07:46 AM
Bug #7202: "Warning: sprintf(): Too few arguments in /usr/local/www/classes/Form/Group.class.php on line 65 Call Stack:
- Fixed embedded '%' in squidguard.inc
-
- This problem remains with SquidGuard, in several tabs, like this in
Services > SquidGuard Proxy Filter > Common AC... -
- - incorporate suggestions from @rbgarga with slight modification
-
03:35 PM Bug #6406: Web process becomes unresponsive producing 502 Bad Gateway nginx
- I've seen this symptom frequently with pfBlockerNG and large lists. I also don't run the IPsec widget.
The comm... -
12:05 PM Bug #6406: Web process becomes unresponsive producing 502 Bad Gateway nginx
- Just Restarted PHP-FPM on a system with the following (no pfblocker installed):
* System Information
* Traffic Gr... -
11:56 AM Bug #6406: Web process becomes unresponsive producing 502 Bad Gateway nginx
- Jim Pingle wrote:
> Which dashboard widgets do you have visible?
Right now I have the following widgets open:
* ... -
- Bryan Fehl wrote:
> I just ran into this myself. Strangely, this issue causes all clients who try to connect with O... -
- Steve Beaver wrote:
> Sorry to re-hash this, but since it has just been assigned to me I need an update.
>
> Some... - 03:34 PM Revision d030ca9c: services_dhcpv6_relay fix setHelp array parameter
- same thing here
- 03:16 PM Revision 13fa32eb: services_dhcp_relay fix setHelp array parameter
- Another one using the old array format.
- 03:02 PM Revision 2241553c: Rever changes escaping '%' chars in help text. No longer required.
-
- Added standalone HTTP and TLS options with configurable port.
A bind address isn't going to be viable at the momen... - 02:07 PM Revision c74b018d: Only use sprintf in setHelp() if more than one argument is received
- This should eliminate all the issues caused by packages with embedded '%' in their text
-
- Fixed in ACME 0.1.11 which was just pushed, you can now choose the key type and algorithm.
-
- No, I haven't tried it on 2.4 yet, however I digged into sources on 2.3.2_p1 and reproduced it step-by-step while col...
-
- Did you try it on 2.4 as requested?
Either you are leaving out a config state/step or it's not an issue we can rep... -
- What? Rejected based on _assumptions_ that it _possibly_ just me screwed up something on my instance or that it _poss...
-
- Whole lot better indeed. ;)
!https://i.imgsafe.org/b65eeb532c.png! -
- Finally figured it out, fix is coming in 0.1.10 that I just pushed. Also made the box take up the whole width.
-
- That would be a better fit for a separate bug report. This formatting issue is enough of a PITA on its own.
-
- Yeah, I also failed to find any relevant code fix. LOL.
Also, the first row in the "Table" does not autoexpand the... -
- I've been looking at that but not having any luck so far. The code, by all appearances, should be taking up the whole...
-
- This one's so bad that I have no clue what to enter where.
!https://i.imgsafe.org/b3aab299c4.png! -
- Well yeah, the thing is not exactly simple readable code :D Being hidden wouldn't really be much of an issue if peopl...
-
- The input validation does need work but it's going to be rather complex to pull off. That should probably be a separa...
-
- Also, apparently there's lack of input validation here (i.e., at least those fields should be required so that people...
-
- In the Domain SAN list, the first row in the table does not auto-expand the fields with required settings. See screen...
- 09:49 AM Revision 5dd8682c: setHelp format for services_captiveportal
- 09:21 AM Revision 310f4f21: Part fix #7233 keep correct staticmap_array_index
- The index needs to be incremented even for entries that were skipped for display because they (for whatever reason) h...
-
- 09:17 AM Revision 9aa3c5e8: Part fix #7233 keep correct staticmap_array_index
- The index needs to be incremented even for entries that were skipped for display because they (for whatever reason) h...
- 09:05 AM Revision c940afee: Part Fix #7233 Allow deletion of empty static map entries
- (cherry picked from commit 2ea70e1a474fd871a007c76841f2a33f34082c58)
-
-
- /etc/inc/util.inc:
- arp_get_mac_by_ip() updated to support IPv6
- attempt at code streamline
/usr/local/www/service... -
07:38 AM pfSense Packages Bug #6690: SURICATA IPS Issue - Kills VLANS & Traffic Shaper
- Kill Bill wrote:
> There's already #6023 for netmap + shaping.
"Shaping" is a hack that shouldn't have happened. -
- Steven Kreitzer wrote:
> Sandeep K V wrote:
> > Hi Steven Kreitzer and Jim Thompson isn't this the expected way the... -
- In general, I'd say people who wish to use Snort/Suricata as IPS should look into divert sockets instead. The netmap ...
- 04:26 AM Revision 2ea70e1a: Part Fix #7233 Allow deletion of empty static map entries
-
04:05 AM Bug #7164: NTP page allows adding more time server rows than it saves to the configuration
- Build 2.4.0.b.20170207.2344
Test:
* Under Services -> NTP
* Attempt to add 11 server addresses
Result: Er... -
-
- Build 2.4.0.b.20170207.2344
Test actions:
* Install tftpd
* Remove tftpd
The status displays the packag... -
03:59 AM pfSense Packages Bug #7229: Package Manager Update "Suricata" failed
- Actually i copied the failure message from the one i've found in pfsense forum, but mine was very similar. Problem is...
-
- Just to be sure, did you put a firewall pass rule onto the interface that is the VLAN? It will need that in order to ...
-
I have updated to ...-
- Applied in changeset commit:2ea70e1a474fd871a007c76841f2a33f34082c58.
-
- During IPsec performance tests on 4860 I did not observe significant IPsec performance increasing if HW acceleration ...
-
- During performance test 2440 I noticed quite strange behavior of ntpd. One overloads CPU core during IPsec session if...
02/07/2017
-
- PR https://github.com/pfsense/pfsense/pull/3506 will let people delete an empty entry, if they get one somehow.
-
- Pull Request https://github.com/pfsense/pfsense/pull/3505 to make sure the index counter in status_dhcp_leases keeps ...
-
- Forum: https://forum.pfsense.org/index.php?topic=125180.0
In the past, somehow (and I have seen it on systems of m... - 09:35 PM Revision 0f742e51: diag_backup do not use button text for comparisons
- (cherry picked from commit 9a7e1c9580c5779c86bc97d6d82c43401c7a4b12)
-
-
- Fixed
-
- Applied in changeset commit:5baea4da88fd6c093582d9c3e9b67cce5d6a1013.
-
- update_config_field() in wizard.php needs to use eval to construct a variable name that is several array levels deep....
-
- Fixed
-
- Applied in changeset commit:6ac61204bc9e4cff54c818ecc71d20d2626a02e1.
-
- On pkg.php "pkg_filter" is not encoded before output - It requires a package use pkg.php and that it has include_filt...
-
- Fixed
-
- Applied in changeset commit:0f026089f65d92328d680443de5f9a90af50115c.
-
- easyrule.php allows parameters passed by GET without a confirmation step, which makes it possible to add firewall rul...
-
- Fixed
-
- Applied in changeset commit:2c06742d784cb7ec85151327fd753536d98fbcc1.
-
- The "from" and "to" parameters on pkg_mgr_install.php need htmlspecialchars() before output or they can be used as an...
-
-
-
-
- PR was merged
-
- PR merged
-
- The confirmation page displays the submitted parameters for an extra user sanity check. Also fixed a bunch of page fo...
-
- The confirmation page displays the submitted parameters for an extra user sanity check. Also fixed a bunch of page fo...
-
- The confirmation page displays the submitted parameters for an extra user sanity check. Also fixed a bunch of page fo...
-
-
- Kill Bill wrote:
> NOYB NOYB wrote:
> > My guess is pear Mail will never be patched to fix this STRIPTLS security h... -
- NOYB NOYB wrote:
> My guess is pear Mail will never be patched to fix this STRIPTLS security hole.
Well, certain... -
- Jim Pingle wrote:
> Lobby to the PEAR crew to import the patch and we'll add support once it's in there. We have mai... -
- Lobby to the PEAR crew to import the patch and we'll add support once it's in there. We have maintained a lot of cust...
-
- Kill Bill wrote:
> Well, I'd hazard to say because it's just another thing to maintain with pretty much no gain? Wan... -
- Well, I'd hazard to say because it's just another thing to maintain with pretty much no gain? Want to be sure TLS is ...
-
- Why can't pfSense customization be made to the pear Mail package, like is done for some others packages, to add the r...
-
- We switched over to the Pear Mail package and at the moment I'm not seeing any equivalent option in their code. It wo...
-
- That wasn't worded very well. Strike that first sentence. This has nothing to do with the "Enable SMTP over SSL/TLS...
-
- The "Enable SMTP over SSL/TLS" option does not enforce the use of encryption.
Previous versions also had "Enable S... - 05:06 PM Revision 9570449e: interfaces_ppps_edit remove embedded HTML from setHelp string
- There was only one of these remaining to do.
- 04:58 PM Revision dcef6e2d: interfaces_ppps_edit fixes that will work on 2.3.3 also
- 1) Make "The MTU is too big" message actually come out. The code around line 300 was rubbish (maybe from before boots...
-
- 04:52 PM Revision 36245b2f: Fix #7226 Package installation message is incomplete
- This makes it remember pkgname after the install finishes and the form is re-submitted.
(cherry picked from commit d1... -
- 04:52 PM Revision c0e46e9a: pkg_mgr_install remove embedded HTML from result strings
- (cherry picked from commit 682008ff758b942d85ed007b485e0b2fa8e3a11c)
-
-
-
-
- 04:42 PM Revision d12bc864: Fix #7226 Package installation message is incomplete
- This makes it remember pkgname after the install finishes and the form is re-submitted.
-
- Would like to see support for NAT64/DNS64 in pfsense. Deployment of DNS64 outside of the gateway is somewhat convolu...
- 04:29 PM Revision 682008ff: pkg_mgr_install remove embedded HTML from result strings
-
04:15 PM pfSense Packages Bug #7223: IPv4 Rules not working in Inline Mode
- That's very interesting to know that we are having similar issues Joe!
I hope that either this can be resolved or ... -
03:57 PM pfSense Packages Bug #7223: IPv4 Rules not working in Inline Mode
- James Webb wrote:
> James Webb wrote:
> > Kill Bill wrote:
> > > Your own IP as in something from HOME_NET? Not ex... -
- James Webb wrote:
> Kill Bill wrote:
> > Your own IP as in something from HOME_NET? Not exactly useful test either.... -
- Kill Bill wrote:
> Your own IP as in something from HOME_NET? Not exactly useful test either. In general, taking sim... -
- Your own IP as in something from HOME_NET? Not exactly useful test either. In general, taking similar things to the f...
-
- Kill Bill wrote:
> Just to be clear here - If you are looking at the Blocks tab, that is NOT the place to look at wi... -
- Just to be clear here - If you are looking at the Blocks tab, that is NOT the place to look at with the inline mode.
-
- After adding the following rule to custom.rules:
@drop ip [108.74.97.21, 82.132.247.191] any <> $HOME_NET any (msg... -
-
-
-
-
- There is no such code in Suricata package. This is pkg(7) bug. Remove and reinstall the package.
-
- Error message while updating suricata to 3.1.2_2
Also happened from 3.0_7 to 3.0_8 (reported on pfsense forum: [[h... -
-
-
03:48 PM Bug #7232 (Resolved): haproxy_pool_edit.php -- sprintf() too few arguments
- https://github.com/pfsense/FreeBSD-ports/blob/devel/net/pfSense-pkg-haproxy/files/usr/local/www/haproxy/haproxy_pool_...
-
03:35 PM Bug #7231: Web UI does not properly remove priq shaping rules when deleting an interface which causes subsequent rule failures without warning in the UI
- I think this was accidentally posted in the pkg's section. Could someone move it to the proper area of pfSense?
-
- Reproduce:
1. Provision pfSense 2.3.2 with 1 WAN and multiple LAN's.
2. Configure priq traffic shaper to limit... -
- I can't reproduce this, it's possible it's a side effect of something else in your configuration. Even on 2.3.2_1 eve...
-
- 12:52 PM Revision 3cc22ff2: interfaces_ppps_edit fixes that will work on 2.3.3 also
- 1) Make "The MTU is too big" message actually come out. The code around line 300 was rubbish (maybe from before boots...
-
-
-
-
-
- This reverts commit e6068596baf4307fe3eb9866072800e4c23b6840.
- 11:58 AM Revision e6068596: setHelp formatting for interfaces.php
- There was a fair bit of it, so I have put this in its own pull request.
1) Gets HTML out of the strings that go for t... -
- 11:58 AM Revision baae9d9f: fbegin.inc and fend.inc obsolete
- (cherry picked from commit 5af0922d75724e1eac89017173457f57842387f8)
- 11:58 AM Revision bd44e2af: fbegin.inc and fend.inc are no longer used
- (cherry picked from commit c09188a21938f7b1d19fd845fa7e5b0712dd4a83)
-
- 11:40 AM Revision 690db956: Internationalization graph.php
- 1) A few extra strings to be translated.
2) The scale_type code values 'up' and 'follow' need to be kept as those str... -
-
- (cherry picked from commit 49f90f17bfaf2422d56160ad06ef5e2513beb1ba)
-
- (cherry picked from commit ac5ee07ee1daef2f43e728895290ca6d11efe0f3)
-
- (cherry picked from commit cb5961d1fa64a45cbec5ef5d677b57f8d62f50b5)
-
-
- @smtp.inc@ is gone from 2.4, it's using pear-Net_SMTP and other pear stuff. This bug is not really relevant any more.
-
09:49 AM Bug #3681: Email notifications don't work with IPv6-only SMTP servers
- Maybe this could help? (Although it's in norweign, the code itself is pretty easy and simple)
http://www.webforumet.... - 11:14 AM Revision 93eae66f: license.php getext formats and breadcrumbs
- 1) I added a breadcrumb because the "?" "help on this page" icon does not display nicely without the breadcrumbs sect...
-
- Applied in changeset commit:d12bc864ceb5d656fc094bde7cf5ec96e24bdde9.
-
- See PR https://github.com/pfsense/pfsense/pull/3503
-
- I noticed this on 2.4-BETA, and tried 2.3.3-DEVELOPMENT and 2.3.2-p1 and they all do this.
I suspect this is due t... -
- Install, reinstall or delete a package. At successful end of the action a message is given in the GUI like:
'pfSen... - 10:20 AM Revision 7ae1b34f: setHelp and getttext for i*.php files
-
- While it would be nice, the output from iftop is not printed in a way that would be easy to parse programmatically.
... -
- Due to the lack of ipv6 functionality in rate and also it's development state (not developed since 2011, please corre...
- 08:48 AM Revision 398821c4: interfaces_bridge_edit setHelp and input_errors formatting
- This had enough things to be worth its own pull request.
1) Get embedded HTML out of setHelp etc strings.
2) Fix some... -
- Installed build 2.4.0.b.20170207-1441 and same errors appears in
* Services > Squid Proxy Server
* Services > Squ... -
- It loads shaper rules without error, I see traffic in queues. I pushed a commit to is_altq_capable() in interfaces.in...
- 07:39 AM Revision 4d0c9c59: setHelp formatting for interfaces.php
- There was a fair bit of it, so I have put this in its own pull request.
1) Gets HTML out of the strings that go for t... -
- PR has been merged, thanks!
- 01:15 AM Revision 5af0922d: fbegin.inc and fend.inc obsolete
02/06/2017
-
05:59 PM pfSense Packages Bug #7211: DNS Made Easy ACME script not parsing domain IDs properly
- I tried applying that patch to the script on my pfSense install, and the ACME challenge process worked just fine afte...
- 04:50 PM Revision c09188a2: fbegin.inc and fend.inc are no longer used
-
04:34 PM pfSense Packages Feature #7221: ACME package : add standalone mode & specify port used
- In acme.sh there are several options:
*Standalone mode:*
@acme.sh --issue -d aa.com --standalone --httpport 8... -
- Added the standalone mode, to be able to specify port used for the challenge and the possibility to automatically ope...
-
- - adds `Copy DUID` convenience button/js
- no page refresh or AJAX -
- - added ndp call to get MAC addr if remote client is connected via IPv6
- automatically hide `Copy MAC` button if arp... -
-
03:55 PM Revision 328f2789: Revert PERL related default options from net-mgmt/net-snmp
- (cherry picked from commit 282d025d9756ba8ace2bcfa092e87d5ad6d338da)
-
- (cherry picked from commit 282d025d9756ba8ace2bcfa092e87d5ad6d338da)
-
-
-
- 03:43 PM Revision 21e768ec: Do not attempt to translate '-DIVIDER-'
- '-DIVIDER-' is a keyword here. If someone does translate this, then the divider is going to go missing when in their ...
- 03:38 PM Revision f8a1be56: user/local/www inc file gettext improvements
-
- No change on the latest snap built after that commit.
-
- Jimp, can you check the latest build ?
Relevant commit: https://github.com/pfsense/FreeBSD-src/commit/5d8a65f506d8... -
- Should work now: https://github.com/pfsense/FreeBSD-src/commit/b95dbdb097fd2d5b148098bcc68e1f57b7dab544
-
- Fixed in acme pkg version 0.1.8 which will be available shortly
-
- Pushed a fix for this in acme pkg version 0.1.7, will be available shortly.
-
- 12:54 PM Revision 678f1131: Internationalization graph.php
- 1) A few extra strings to be translated.
2) The scale_type code values 'up' and 'follow' need to be kept as those str... -
-
- This reverts commit 7b25b213ee572f9d5471c29a3b3a1cff99cc55d3.
-
- This reverts commit e25261e4e210376e3db382a1ac52b61b9753a79c.
-
-
-
10:26 AM Revision d414b7eb: certificatemanager, don't show information from previous certificate if no cert or csr is present in the cert
- (cherry picked from commit 1048585a08ac824057eea35c57fe359b9e6a48fe)
-
- 10:20 AM Revision 85ba2f8b: Use unique var names in Input.class.php
- (cherry picked from commit a66177645191359e5ce854d733e9be40ada3535b)
-
-
-
-
-
-
- 09:15 AM Revision 9a7e1c95: diag_backup do not use button text for comparisons
- 08:58 AM Revision a6617764: Use unique var names in Input.class.php
-
- * System > Advanced > Firewall & NAT
* Services > DNS Resolver > Advanced
Tested, no PHP errors displayed in b... -
- Stage1 done - PR 3456 has been merged. So users can cut down the amount of content in the existing widget.
Now to th... -
- The problem, as stated, was incorrect. It's a problem with vlan(4) ALTQ support in general, not specific to any hardw...
-
- What version of pfSense - 2.3.2-p1, 2.3.3-DEVELOPMENT or 2.4-BETA?
-
- Adding a VLAN interface on the Traffic Shaper doesn't work.
rc.filter_configure_sync: New alert found: There were... -
07:34 AM pfSense Packages Feature #7220: ACME client port and service config
- Jim Pingle wrote:
> That's a security limitation of Let's Encrypt. Nothing we can do about it.
>
> https://commun... -
- That's a security limitation of Let's Encrypt. Nothing we can do about it.
https://community.letsencrypt.org/t/let... -
- Hi, any way to configure a port of the http server, i dont use 80 or 443 and is not possible to active letsencrypt.
-
07:31 AM pfSense Packages Bug #1620: Can't use transparent proxy when using bridge.
- I ran some tests with this and was unable to make it work. Adding 'route-to lo0' to the pass rule did not allow this ...
-
- There are several assumptions that had to be made there for the time being to get it working in a basic fashion (key ...
- 06:06 AM Revision 500272bb: Do not pass empty string to gettext
-
- 03:55 AM Revision 1e3443df: Remove unused restore_ver from diag_backup
- I cannot see where this is used any more. The functionality seems to now be done in diag_confbak
- 01:44 AM Revision f64a22e8: Escape '%' in help text
-
-
- Fixed in the latest snapshot.
-
- This may be the tradeoff of the fix, in reality won't disable the multiple queues but only one is going to be used an...
-
- Fixed in 2.4.
02/05/2017
-
11:49 PM
pfSense Packages
Bug #7218: acme_inc.sh hard codes 'HMAC-MD5.SIG-ALG.REG.INT' for nsupdate key types
- The file is acme_sh.inc not acme_inc.sh.
-
11:47 PM
pfSense Packages
Bug #7218 (Resolved): acme_inc.sh hard codes 'HMAC-MD5.SIG-ALG.REG.INT' for nsupdate key types
- 'HMAC-MD5.SIG-ALG.REG.INT' is hardcoded in acme_inc.sh so that is the only type of key that can be used for dns-nsupd...
-
07:45 PM
Bug #7202: "Warning: sprintf(): Too few arguments in /usr/local/www/classes/Form/Group.class.php on line 65 Call Stack:
- Got it. Thanks.
-
07:28 PM Bug #7202: "Warning: sprintf(): Too few arguments in /usr/local/www/classes/Form/Group.class.php on line 65 Call Stack:
- I just did a click through every page that my device has and found one more for which I couldn't find an existing rep...
-
06:55 PM
Bug #7202: "Warning: sprintf(): Too few arguments in /usr/local/www/classes/Form/Group.class.php on line 65 Call Stack:
- System -> Advanced -> Firewall & NAT has already been fixes and will be in the next snap
The two Squid warnings were... -
- SG-1000
2.4.0.b.20170204.2301
I was getting this issue on the Status Page. Can confirm that it is now resolved.
... -
- That isn't possible in pf. If you need time quotas, you'll have to use something that can hook into RADIUS for accoun...
-
02:06 PM pfSense Packages Feature #7217 (Rejected): x hrs per day total
- Currently there is a schedule feature in pfsense, where you can allow an IP from 4pm to 5:59pm for example, Mo-Su
... - 12:59 PM Revision 1a147fcd: setHelp and gettext changes for firewall* pages
- 12:37 PM Revision 01b34665: Firewall Rules Edit translate Source and Destination
- These bits were not translating.
Line 1406 could possibly be like:
```
$group = new Form_Group($name . ' ' . gettext... -
- Duplicate of Bug #6962 and fixed in 2.4 as noted above. Move on.
-
11:11 AM
Bug #7214: OpenVPN dh parameters above 4096 are not in /etc/
- Sorry if I wasn't clear, and this very well could have been fixed already in 2.4.
The main issue on 2.3 is not tha... -
09:28 AM
Bug #7149: igb driver queue related crashes
- After completely removing the queues entry in loader.conf.local and more than 5 days uptime, I think this issue is re...
-
- Works fine here with pfSense-pkg-haproxy-0.52_4.
-
-
- This is not a bug. The webroot method assumes you have a webserver already running. It won't run any webserver on its...
-
03:57 AM pfSense Packages Bug #7215 (Not a Bug): ACME challenge fails
- ACME challenge fails for "webroot local folder" method because no web server is listening on HTTP 80.
Setup:
1. p... - 07:35 AM Revision 5db70796: Remove HTML from strings in diags files
-
07:15 AM pfSense Packages Bug #7211: DNS Made Easy ACME script not parsing domain IDs properly
- Has been fixed upstream for a while:
https://github.com/Neilpang/acme.sh/commit/3cf85634ebb955ecee7616e88f4e1cef4458... -
- Comments please, if there is more/different flexibility that would be useful.
-
- In various places dates and times are displayed, e.g. rule creation and update date/time stamp.
It would be nice if ... - 04:34 AM Revision 08dbe1c5: Remove HTML from translated shaper setHelp
- and sections must not be translated - examples of IP address formats 255.255.255.255 and so on.
- 03:14 AM Revision dfbc9267: Merge pull request #3469 from phil-davis/fw-nat-out-edit-other-subnet
- 03:13 AM Revision 76f23988: Merge pull request #3472 from phil-davis/patch-2
- 03:13 AM Revision c846ce45: Merge pull request #3474 from lukehamburg/lukehamburg-patch-1
- 03:11 AM Revision 772faea6: Merge pull request #3471 from phil-davis/patch-1
02/04/2017
-
- You have to make them yourself if you want to use the larger ones.
Non-existing entries are hidden on 3.Here is wh... -
08:17 PM
Bug #7214 (Not a Bug): OpenVPN dh parameters above 4096 are not in /etc/
- In 2.3.2 (didn't check earlier versions) there is an option to select the dh parameter length when configuring a new ...
-
- 08:21 PM Revision e402b079: Do not sort the list of locales. That way it is easier to get to the language you want afte accidentally selecting something you no longer understand.
- 08:10 PM Revision 1e0c91d3: Fixed embedded '%' that was breaking setText.
-
07:13 PM Bug #7213 (Resolved): Hyper-V install, no disk found
- *Issue:* When installing 2.4 on Hyper-V 2012R2 Gen1 VM, the installer does not see any drives.
*Workaround:* From ... -
06:10 PM Bug #7210: Unable to set a Alias with FQDN's for IPv6 networks
- I know that it doesn't mean that it is www.google.com, that wasn't the point we are talking about networks here not o...
-
- Well that's an interesting idea but not exactly valid. If @2a00:1450:401b:803::2004@ is www.google.com, it doesn't me...
-
- You are right /128 is not reasonable, but /64 would be nice.
Example:
www.google.com AAAA record is 2a00:1450:400... -
- The hint could maybe be more clear. Network aliases can contain single hosts, and FQDN entries are always assumed to ...
-
- And what exactly do you imagine to happen with a thing like www.google.com/128? Yeah, the hint is piece of crap, the ...
-
- I am using the right place. I want to create a alias for an ipv6 network not for a ipv6 host. It shoud be possible, i...
-
- 1/ The mask is absolutely irrelevant for hostname.
2/ You are using the wrong place to do the job, select 'Hosts' fr... -
- As soon as a FQDN is entered, the CIDR mask changes to /32, therefore it's impossible to create a alias for IPv6 netw...
-
-
-
-
- 05:35 PM Revision 1c3608b3: system_advanced_admin remove href from setHelp strings
- I think that giving long strings that contain various HTML tags in-line through for translation is going to be error-...
- 05:09 PM Revision 31d71150: system_advanced_admin remove setHelp array
-
- As per this thread, there is no FREEBSD driver available for the SG-1000 crypto accelerator:
https://forum.pfsense... -
- I'm currently running pfSense 2.3.2_1, and I tried the new ACME package (0.1.5) with DNS Made Easy verification. How...
-
02:10 PM
Bug #7202: "Warning: sprintf(): Too few arguments in /usr/local/www/classes/Form/Group.class.php on line 65 Call Stack:
- Fixed. Thanks for finding those. Embedded '%' that needed to be escaped.
-
- Seeing the same issue as Dustin on System > Advanced > Firewall. Tested with 2.4.0.b.20170203.2002.
- 01:18 PM Revision dd4ecd98: Fix firewall_nat_out_edit dependency on English
-
- Also, wanted to note that the use of v4 signing enables newer regions that didn't support the legacy authentication t...
-
- I've tested changes and created a pull request to resolve this issue: https://github.com/pfsense/pfsense/pull/3473.
... -
11:36 AM Bug #7185: DHCP6c SIGTERM, SIGKILL
- Yes, they are both 'hopefully' put to sleep with the changes done in the script patch I sent you and with dhcp6c chan...
-
- Patch is working well so far!
I think possibly #6944 and #7145 should be merged into this ticket? -
- Confirmed that affects OpenVPN clients that get assigned interfaces. I am running latest snap 2.4.0.b.20170203.2002.
-
02:44 AM Bug #7187: IPSec IKEv2 additional P2 not written to config
- By enabling _Split connections_ on P1 I was able to make it work, and now _statusall_ shows all the routing.
I don... - 02:30 AM Revision f5d762f9: System Information widget filter gettext()
-
- pfS version is 2.3.2-p1.
Unbound host overrides used in FW aliases:
- server.home 192.168.201.1
-- nas.home ... -
02/03/2017
-
-
11:38 PM pfSense Packages Bug #6875: dpinger not switching icmp id automatically
- I think the report is erroneous. There should be no state association beyond a single ICMP Echo Request and it's Echo...
-
- Broken again.
https://forum.pfsense.org/index.php?topic=124915.0 -
09:26 PM
pfSense Packages
Bug #7208 (Resolved): ACME ftpwebroot doesn't work
- Below is the output of trying to use ftpwebroot. I redacted some data. As you can see from the log it doesn't appea...
-
07:45 PM Bug #7207 (Closed): Updates and Package Manager broken when pfSense accessed via SSH port forward
- Hello,
i am still setting up my pfSense device, so at this point it is just a client device connected to my netwo... -
- Service no longer works in that is receives a signing error even though all details are correct.
-
- It appears that Route53 has stopped working with the AWS3-HTTP authentication method sometime in the last month. This...
-
-
06:00 PM pfSense Packages Bug #7205 (Resolved): ACME package ignores DNS-Manual method, defaults to http-01
- My initial run using DNS-Manual as the method failed with the log suggesting DNS was ignored and http-01 was attempte...
-
-
-
-
-
- 03:49 PM Revision 4ebcee24: Several more fixes for setHelp to assist with translation
-
- To confirm, with the latest Let's Encrypt package, you can get by with LE only on the primary node. It can generate t...
- 03:07 PM Revision 4b329613: Fix #7202
- Fix several sprintf errors by escaping '%'s and removing '[ ]' which had been use to pass arguments to setHelp as an ...
-
-
02:29 PM pfSense Packages Bug #7197: Freeradius ldap authentication failed after update 1.7.5 to 1.7.6
- Thanks it's work fine
-
- PR has been merged, thanks!
-
-
02:12 PM Feature #7204 (Duplicate): Router Advertisements: Option to not advertise default routes
- I'm using a pfSense appliance in a temporary role mainly to enable "proper" IPv6 support on our network, though it wi...
-
02:00 PM Feature #6753: Interfaces list order not consistent
- +1 for making the interfaces list sorted alphabetically by their DESCRIPTION (NAME) defined in /interfaces.php.
T... -
- The interface order on Interfaces > Assignments is significant for HA purposes but otherwise alphabetical tends to be...
-
- Can I protest against this change? I upgraded to 2.4 and so far this is the only change that is really causing me a l...
-
- Some users think that it's related to the last package in the list, instead of being a legend.
https://forum.pfse... -
- Fixed by https://github.com/pfsense/FreeBSD-ports/commit/73246541879f9256f4241b2a22dc61e6e31e6bd2
-
- I figured out a way to fix this. It's not pretty but the way the client passes data and processes the api commands do...
-
- I am seeing a similar error on System -> Advanced -> Firewall & NAT
Warning: sprintf(): Too few arguments in /usr/... -
09:10 AM
Bug #7202: "Warning: sprintf(): Too few arguments in /usr/local/www/classes/Form/Group.class.php on line 65 Call Stack:
- Applied in changeset commit:4b329613ee7bb2dc85dd72035709853b83061a58.
-
08:59 AM
Bug #7202: "Warning: sprintf(): Too few arguments in /usr/local/www/classes/Form/Group.class.php on line 65 Call Stack:
- Thanks. Looks like there are a few embedded '%' that now need to be escaped, and arguments passed as an array in [ ] ...
-
- Just double checked it's not my patch. :) Clean snapshot update shows it.
-
- Posted by one of my testers after patching one of mine for testing, this is what he posted,
Martin if I goto the e... -
08:23 AM
Bug #7202 (Feedback): "Warning: sprintf(): Too few arguments in /usr/local/www/classes/Form/Group.class.php on line 65 Call Stack:
-
08:18 AM
Bug #7202: "Warning: sprintf(): Too few arguments in /usr/local/www/classes/Form/Group.class.php on line 65 Call Stack:
- I knew there would be some :) Could you attach the call stack or tell me which page you had selected when this occured?
-
- Problem with changes to the setHelp function or calls to it.
-
-
-
-
-
09:03 AM Revision d1fe01d2: Set ntp gps mode for pgrmf even if no other modes are being set.
- (cherry picked from commit 821110e8ff76564c23783c554fc89cd9458683ac)
-
- (cherry picked from commit 6924a2bf34a70cd33284a28ca3575f33f9834375)
-
-
- ok, thanks for checking
-
- I got onto a production 2.3.2-p1 system and yes, it has that bug.
I expect it was fixed for 2.3.3 and 2.4 onwards by... -
- With 2.3.2 whatever hostname I query the urls are appended with _Array_. I'll try to setup a testing VM
-
- I tried on 2.3.3-DEVELOPMENT and 2.4-BETA and cannot reproduce this. If I put a valid name, then it gives me ip=1.2.3...
-
- The two links gets the _ip=_ parameter, but the generated url have _Array_ instead of the actual queried IP address
... -
- Fixed by commit:042911d34ab846e7241deeb9fd6469a1460febcf
-
- PR https://github.com/pfsense/pfsense/pull/3468
-
-
03:36 AM Bug #7183: Interface Groups can be entered with the same name
- In 2.4.0-BETA (arm) built on Thu Feb 02 12:37:50 CST 2017
Validation seems OK now, following description instructio... - 03:31 AM Revision 430f8fbc: Merge pull request #3466 from phil-davis/sethelp-gettext
- 03:27 AM Revision 314a088a: Remove unneeded sprint and gettext in setHelp
-
- 2.4.0-BETA (arm) built on Thu Feb 02 12:37:50 CST 2017
Still not fixed.
Not using RAM disk:
drwxrwxrwt 4 root ... -
- Can't see any change, but it would look less silly if the input field was below the Tick box
-
-
02/02/2017
-
- Thank you very much. I am testing these now. I got the binaries scp'd onto the test box. I moved the stock binarie...
-
- You cannot patch it Luke, it's an exe. I can send it to you when I am back at my desk.
-
- Martin, could you provide a link to the PR?
-
- According to this thread and posts from jimp the cpsw NICs in the SG-1000 don't support ALTQ at the moment:
jimp:
... -
-
-
-
-
-
-
-
- There may potentially be a need to prevent caching too. Even if pfSense doesn't cache it, there could be CDN's such ...
-
- Applied in changeset commit:186c7a6ca49af0d848c1082bfd7f6d9f0cde7046.
-
- Given the impressive number of details provided, my crystal ball says that - out of the ~4500 lines of code changed i...
-
- Hi
After updating freeradius package from 1.7.4 to 1.7.5 version, it's failed to authenticate via Ldap.
My Con... -
- 05:13 PM Revision d2a2f018: Remove unneeded sprintf from setHelp calls
- 04:56 PM Revision a9a7de59: COnvert the setHelp method(s) to accept conventioanl printf style argument lists. e.g.: setHelp("%d interfaces have been detected", $numIfs);
-
- I'll take it
-
02:21 PM Bug #7198 (Resolved): nginx-error.log is not circular and can fill filesystem
- Unlike almost all of the other log files contained in @/var/log@, nginx-error.log is not circular. Because it grows ...
- 01:14 PM Revision 718b3b0b: System Information Widget Filter
-
11:33 AM
Feature #7196 (Resolved): setHelp method should use more conventiol argument syntax
-
11:33 AM
Feature #7196 (Resolved): setHelp method should use more conventiol argument syntax
- The setHelp methods currently use an array to pass position arguments to sprintf. This has caused people to employ sp...
-
- In the config for igmpproxy, Network populates altnet and has to be in subnet format. Since the GUI has a drop-down f...
-
- When messing with another piece of JS for Squid, I figured out that I'd rather not be missing with it. :P So, it woul...
-
- I can't reproduce this on a current 2.4 snapshot. Additional addresses fail over all at once as expected.
-
- If you set a CARP VIP e.g. an address on the WAN subnet xxx.xxx.xxx.xx1/28. Then set another address, be it another C...
-
-
-
- It has come up before, at least on the forum, but I don't see an existing ticket for it yet. I agree it would be nic...
-
- And I have a feeling that breaking up the System Information widget has been discussed before, so there may be anothe...
-
- PR https://github.com/pfsense/pfsense/pull/3465 provides a first part of addressing this. It allows the user to choos...
-
- It's not his modem, he's getting a prefix, all is well there. Just looked at the video. Let me think on it...
Go... -
- PR https://github.com/pfsense/pfsense/pull/3463
-
- The Garmin only NMEA sentence PGRMF can be used by NTP as the time sync. Unlike the other NMEA sentences PGRMF includ...
-
- Constantine Kormashev wrote:
> I noticed with new firmware SG4860 uses CPU resources *on 25% more* than on previous ... -
- I noticed with new firmware SG4860 uses CPU resources *on 25% more* than on previous version.
Now it is 185% CPU IDL...
02/01/2017
-
10:22 PM Bug #5993: dhcp6c not started until an RA received
- J L wrote:
> Daryl Morse wrote:
> > J L wrote:
> >
> > > Alright. I doubt hardware matters too much, but I'll li... -
07:35 PM Bug #5993: dhcp6c not started until an RA received
- Daryl Morse wrote:
> J L wrote:
>
> > Alright. I doubt hardware matters too much, but I'll list some facts.
> > ... -
- J L wrote:
> Alright. I doubt hardware matters too much, but I'll list some facts.
> WAN gateway: Actiontec V2000... -
- Martin Wasley wrote:
> I'll pm you with my email address.
>
> Edit.. you're not showing yours either.. :)
jtl... -
- Do you have Daryl's pm?
-
- I'll pm you with my email address.
Edit.. you're not showing yours either.. :) -
- PR https://github.com/pfsense/FreeBSD-ports/pull/286
-
- I just installed pfSense-pkg-acme and went to the Cert. Manager - Certificates Page. I see the following output imme...
-
- With multiple domains in the "Domain SAN List" set to nsupdate, it only appears to use the last key entered, rather t...
-
07:46 PM pfSense Packages Bug #7191 (Resolved): squid package EN-US grammar errors
- In the Services > Squid Proxy Server > Antivirus > Enable Manual Configuration section, the warning "Warning: Only en...
-
- There are a couple considerations here to keep straight for GUI use as well.
* One cert with SANs for both hosts i... -
02:13 PM pfSense Packages Feature #7189 (Resolved): Letsencrypt acme sync in HA environment
- Configure the letsencrypt package https://github.com/pfsense/FreeBSD-ports/tree/devel/security/pfSense-pkg-acme to sy...
-
-
- Works.
-
-
- Fixed with https://github.com/pfsense/FreeBSD-ports/commit/df93449ea55537c48bca4304f72aa7ced243a116 - close please.
-
-
- Can be closed. Feature misunderstanding.
-
01:44 PM pfSense Packages Feature #6022: Consider MLVPN for bonded VPN
- This feature would bring high value to the product and really make it stand out from the crowd. Not many solutions a...
-
- Wraps just fine without any CSS, as seen on the screenshot. Close, please.
-
11:55 AM Feature #4405: Traffic shaping doesn't work when applied to a bridge interface
- Any news on this? Issue still exists in 2.3.2. No Traffic shaper on bridge0 even with:
net.link.bridge.pfil_member=0... -
-
- 10:58 AM Revision 702fa4d0: Code with multiple %s in usr/local/www
-
- Already fixed
-
- ...
-
09:27 AM pfSense Packages Bug #7188 (Closed): Squid update issue
- Hi, after updating (yesteray) squid my web ui is not working any more! Here is the error:
Parse error: syntax erro... -
- PR Pushed upstream as fix needed for dhcp6c PID issue - Redmine #7185.
- 09:49 AM Revision 8a6aac94: diag_reseststate sourcetablehelp escape of double-quotes not needed
- The backslash escaping of the double-quotes here displays the backslashes literal on the GUI. Escaping is not needed ...
-
-
- 09:47 AM Revision ab476790: get_service_status_icon fix description_state format
- If "description_state" is requested here, there are too many "%s" substitutions in the string for sprintf().
Also, t... -
-
- Thanks!
- 09:46 AM Revision cf80bd5f: Redmine #7173 Do not allow pkg_ for If, IfGroup, Alias
- (cherry picked from commit c9d93b62b0cc559d1ed4326212b6385cae2eb398)
-
- 09:42 AM Revision 1767e1c6: Fix #7183 Do not allow Interface Groups with the same name
- I should stop trying bad stuff, there seem to be so many holes to find in the validation :)
(cherry picked from commi... -
-
-
09:39 AM Revision 4cb6be62: Remove unused broken functions
- Not sure what was the idea here, but these are not used anywhere, do nothing as they immediately call ```return false...
-
- 09:31 AM Revision 4ede308c: diag_reseststate sourcetablehelp escape of double-quotes not needed
- The backslash escaping of the double-quotes here displays the backslashes literal on the GUI. Escaping is not needed ...
- 08:33 AM Revision 1579e70f: Code with multiple %s in etc
- 08:07 AM Revision b3119a61: get_service_status_icon fix description_state format
- If "description_state" is requested here, there are too many "%s" substitutions in the string for sprintf().
Also, t... -
- And it does not show in the routed connection of _statusall_...
-
- I have a v2 tunnel with a second P2 NATting the OpenVPN subnet to the tunnel which is not working. The traffic from t...
-
- Bump here. This breaks even things running on pfSense itself, such as the darkstat package (HTTP only). It will break...
-
05:51 AM Bug #6624: changes in IPsec config should down the connection
- As a sidenote: When using IPsec mobile clients with PSK keys it would be preferred not to take the entire IPsec servi...
-
05:00 AM Bug #7186 (Resolved): Unable to use national symbols in password fo ACB package
- While using ACB package it is not possible to use national symbols in crypto password. I was trying to set password w...
-
- I have found that when issuing a SIGTERM to dhcp6c that it immediately deletes the pid file, however, if the WAN inte...
-
04:39 AM Bug #7184 (Rejected): FW limits MTU to 1280 when using VPN tunnel to F5
- If I'm using local network behind pfSense I get a tun0 device with MTU limited to 1280.
When using the tunnel behind... - 04:14 AM Revision c9d93b62: Redmine #7173 Do not allow pkg_ for If, IfGroup, Alias
-
04:14 AM Revision 5f3e94fb: More sanitising of ipprotocol and other input fields
- $_POST['ipprotocol'] needs a bit more sanitising. Some conditions test if it's a zero-length string, other conditions...
- 03:57 AM Revision 89ac71d3: Fix #7183 Do not allow Interface Groups with the same name
- I should stop trying bad stuff, there seem to be so many holes to find in the validation :)
-
- Applied in changeset commit:89ac71d38a4c49e1537e4afe2b34b2457d9817a7.
-
- Yeah, I think it should behave like the IPsec/OpenVPN ones, they don't let you mess with those either. :) (Well, exce...
-
- I guess the package should be responsible for deleting the Interface Group as it uninstalls itself.
So the Interface... -
- Heh, none that I'd know of ATM except tinc, but it simply needs to be something, so that some checking can be done fo...
01/31/2017
-
- Martin Wasley wrote:
> OK, I can see dhcp6c is doing its job and launching RTSOLD, which is launching rc.newwanipv6.... -
- What other packages use the "pkg_" prefix to generate names in this namespace?
-
- PR https://github.com/pfsense/pfsense/pull/3458
To fix validation of Interface, Interface Group and Alias names. -
- To get this really fixed, it's needed to
1/ revert a bunch of other commits that allowed that stuff specifically ... -
- Applied in changeset commit:b835c2dd77a09ea46b5d6abd8d2271332bf52367.
-
- PR https://github.com/pfsense/pfsense/pull/3452
The char set allowed should be the same as for Interfaces and Aliases. -
- Woo-hoo, I got allocated PR https://github.com/pfsense/pfsense/pull/3456
-
- 1) Add an Interface Group named "abc"
2) Add an Interface Group named "def"
3) Edit Interface Group "def", change i... - 09:56 PM Revision 65e15a1a: vpn_openvpn_server: fix missing parameter
- 07:51 PM Revision 413cec31: Fixed #7180
- 07:50 PM Revision 070379bb: Fixed #7180
-
- The system widget is quite useful, however there is a lot of information in one place (and it is quite tall, so the s...
-
- Not sure what was the idea here, but these are not used anywhere, do nothing as they immediately call ```return false...
-
- Currently when separators are in use, to add a rule under the separator, you have to create the rule at the bottom of...
-
- Luiz Otavio O Souza wrote:
> Should work now: https://github.com/pfsense/FreeBSD-src/commit/91384809a74dc98ef0d2a173... -
06:18 PM Bug #7156: Change in 'Block bogon networks' or 'Block private netowrks' GUI options kills routing entries for OpenVPN interfaces.
- As I've thought about this more, it seems to me that the correct behavior is for "Apply Changes" to trigger a restart...
-
04:08 PM
pfSense Packages
Bug #7009 (Resolved): syslog_ng Log Viewer page didn't get converted to the new 2.3 bootstrap
-
- Works, thanks for help.
-
12:51 PM
pfSense Packages
Bug #7009 (Feedback): syslog_ng Log Viewer page didn't get converted to the new 2.3 bootstrap
- 03:33 PM Revision 4181014a: Required fields for VPN pages
- (cherry picked from commit 1bbdab13e436f5f2b9e381886be4d9c2d1a4e44f)
-
-
-
-
- 03:14 PM Revision b835c2dd: Fix #7173 Interface Group Name cannot contain dash
-
-
02:00 PM
Bug #7180: Disabled OpenVPN clients are not shaded in the gui
- Applied in changeset commit:070379bbc0cf84d82f52a0adfe2bdc6014695f7e.
-
01:50 PM
Bug #7180 (Feedback): Disabled OpenVPN clients are not shaded in the gui
- Fixed copy/paste error.
Thanks for the report. -
01:19 PM Bug #7180 (Resolved): Disabled OpenVPN clients are not shaded in the gui
- When I disable an openvpn client, it's not indicated in the clients page. All clients appear the same, active.
Lin... -
- 01:55 PM Revision 1bbdab13: Required fields for VPN pages
-
-
-
-
-
-
-
-
09:45 AM
Bug #7178 (Feedback): pfSense themes don't handle package XML field without <description> tag properly
- Unable to reproduce using:
Ubuntu Firefox
macOS Firefox, Safari, Chrome
Tried pfSense and Compact red themes. ... -
- See
Compact-Red (working properly): https://forum.pfsense.org/index.php?topic=124759.msg689034#msg689034
pfSense (... -
-
- PR https://github.com/pfsense/pfsense/pull/3451 is the last set of changes for this.
-
- I think that is it. Unless anyone has another favorite, the dashboard widgets can be given a last test and this can b...
-
08:00 AM pfSense Packages Feature #7179: Package Filer into 2.3
- Also did xmlrpc 2.4 adjustments:
https://github.com/pfsense/FreeBSD-ports/pull/277/commits/8d27c452ce42ca2ef0d65b65b... -
- Pull Request to include the filer package in pfSense >= 2.3
https://github.com/pfsense/FreeBSD-ports/pull/277 -
03:46 AM Bug #7166: During bandwidth test 4860 with 2.4 got Fatal trap 12: page fault while in kernel mode
- Tests repeated as instructed by Constantine - SG4860 did not crash with 2.4 built on Mon Jan 30 22:08:41 CST 2017
-
12:43 AM
Bug #7149: igb driver queue related crashes
- Updated to the lastest snapshot (Mon Jan 30 22:08:41 CST 2017), set queues to 2 and tried this on a DMZ host for a fe...
01/30/2017
-
- Duplicate with #7176. Let's close this one.
-
08:24 PM Bug #7177: IPv6 Monitor IP does not seem to propagate
- Duplicated Issue please close.
-
- 2.3.3 snaps work. This particular install uses a 6to4 tunnel from the ISP.
Setting "Gateway Monitor IP" in 2.4 sna... -
- This commit fix a few obvious issues in igb: https://github.com/pfsense/FreeBSD-src/commit/215ddb035593bc4cee275b9dbb...
-
- This commit fix a few obvious issues in igb: https://github.com/pfsense/FreeBSD-src/commit/215ddb035593bc4cee275b9dbb...
-
- The FreeBSD PR also suggest that disabling the LEGACY_TX support (and ALTQ support altogether) would also fix the cra...
-
- Seems like a know bug in FreeBSD (or sort of): https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=208409#c11
Also d... -
- 2.3.3 snaps work. This particular install uses a 6to4 tunnel from the ISP.
Setting "Gateway Monitor IP" in 2.4 sna... -
- Luiz Otavio O Souza wrote:
> Should work now: https://github.com/pfsense/FreeBSD-src/commit/91384809a74dc98ef0d2a173... -
- Should work now: https://github.com/pfsense/FreeBSD-src/commit/91384809a74dc98ef0d2a173718bd79bd77c13bb
- 03:36 PM Revision 51685157: Required fields for System pages
- (cherry picked from commit 153c3aa61fe65c51d584a57c032a4805048e3062)
-
-
- * rename function args to be clearer what they do ($local_only was quite ambiguous, at first sight it could mean any ...
-
- (cherry picked from commit 2f633b526075b2ed5e0e160ef6f0d025b509bd70)
-
- (cherry picked from commit e5f96a2cb3c0cad0c828148bd7b8d45c130a9b17)
-
- Resubmit of PR #3157 with fix.
The issue in #3157 was that `pkg info` and `pkg search`, undocumented in man pages, s... -
-
03:24 PM pfSense Packages Feature #2825: OpenBGPd: Add options prepend-neighbor and prepend-self
- Hello,
I know it's been a long time since this thread was started, but we started using the openBGPd package and not... - 02:57 PM Revision 153c3aa6: Required fields for System pages
-
- Think ive found the source of the background leak in a growing list of timer objects waiting for a 'requestAnimationF...
- 01:59 PM Revision 678c6a56: Fixed #7171
- Moved setHelpText() to helpers file
-
01:20 PM Bug #7174: OpenVPN Server and Client not detecting Hardware Cryto
- Kill Bill wrote:
> I'd hope that is intentional fix, since enabling HW crypto there actually makes performance _sign... -
- I'd hope that is intentional fix, since enabling HW crypto there actually makes performance _significantly_ worse.
... -
- PC Engines APU2C4, AMD GX412TC SOC CPU.
Cryptographic Hardware AES-NI CPU-based Acceleration enabled.
Dashboard sho... -
01:04 PM Bug #7175 (Not a Bug): SIP MESSAGE UDP packets not passed despite rules & pcaps showing otherwise
- I have two pfSense boxes in failover configuration both running NanoBSD 2.3.2-RELEASE (amd64) and a VoIP server on th...
- 12:32 PM Revision 129a4370: More required fields for NAT pages
- (cherry picked from commit 877be5e6205ada2608b364f57150010ba473e66d)
- 12:31 PM Revision 65b8c1ed: Required fields in NAT pages
- (cherry picked from commit f2e58c16307795f572ff443e999c54eb6a9839e7)
- 12:31 PM Revision edfefd7e: Required fields in diagnostics
- (cherry picked from commit 3e2028f4dca359e715058d2c35ae0df5b939657e)
- 12:29 PM Revision f25e48e4: More required fields for Interface pages
- (cherry picked from commit fb572e810abe247c273c27ffafb129430b13be1f)
- 12:27 PM Revision eb75a6be: Use gettext on Username and Password
- (cherry picked from commit e52b5a409faa41222a4ff0c917355eb66d0ff19a)
- 12:27 PM Revision 23f933df: Required fields in Interfaces pages
- (cherry picked from commit 1095b20410963e748fe13268e6fa8f35ccce2319)
- 12:26 PM Revision 5c914c00: Required fields in Status pages
- (cherry picked from commit f311d3ba11572364488ee25ca9df08a33e42a089)
- 12:26 PM Revision 927c0074: Remaining required fields for Diag pages
- (cherry picked from commit fe54f09154f4116ceea6897bff54a624f1eb63bc)
- 12:26 PM Revision 5c9dcd19: Required fields for firewall*.php
- (cherry picked from commit 8a1b5c561f93611b711eb4e7b58ccb4990577d8e)
- 12:26 PM Revision a6caa27e: Required fields for Captive Portal
- (cherry picked from commit c06865be6de6b164d06ee9bb1768dfe6829d783c)
- 12:25 PM Revision 57965f9b: Required fields in Services pages
- (cherry picked from commit 24b82516e0baac87316245427e870a36fbcda4ac)
-
- To reproduce:
- Create an interface group named like @prefix-test@
- Try to add some firewall rule there and save.
... -
- Final version. Changed static chars to pointers for exit script call. As it's possible to have multiple interfaces on...
-
- Additions and changes to dhcp6c
-
-
- Under "Services > DHCP Server > LAN" if I sort the 'static mappings' table by the hostname column, I get results like...
-
09:35 AM
Bug #7171 (Resolved): system_advanced_firewall.php: setHelpText is changing the field label also.
-
- Works, thanks
-
08:10 AM
Bug #7171: system_advanced_firewall.php: setHelpText is changing the field label also.
- Applied in changeset commit:678c6a56bce239ac152e3d9fe051ad8508ab3ce3.
-
08:01 AM
Bug #7171 (Feedback): system_advanced_firewall.php: setHelpText is changing the field label also.
- Newly added span element accommodated
Function moved to pfSenseHelpers.js -
- I suspect this is a side-effect of the recent changes for marking required fields.
e.g. in system_advanced_firewall.... - 09:27 AM Revision 24b82516: Required fields in Services pages
-
- Konstantin Ab wrote:
> Hmmm, it seems to work!
> records appear in Table
Thanks for testing. Added to this monst... -
- I'll close this ticket as the original issue was fixed by Phillip's commit.
The whole IPv6 input, store and output... -
- * rename function args to be clearer what they do ($local_only was quite ambiguous, at first sight it could mean any ...
-
- That was backported to RELENG_2_3 in commit https://github.com/pfsense/pfsense/commit/93ab5b34e4e0b20baaf10fdd52119dd...
-
02:22 AM Bug #7005: IPsec mss clamping not working for mobile clients
- Hi,
You've listed this as resolved in 2.4, what's the current timeframe for the release of 2.4? If it is some way ... -
- OK, I can see dhcp6c is doing its job and launching RTSOLD, which is launching rc.newwanipv6. As no-one else has repo...
-
- Ooops, there is a loop in rc.newipsecdns, which triggers a filterdns reload, which runs rc.newipsecdns again (where y...
01/29/2017
-
- I'll take it, something is fishy here.
-
-
- Yeah, that's a different issue, can you open a new ticket for it ?
Thanks! -
- Actually just shows "Pending".
Other (2.3) box works. -
- Seems right now I cannot monitor the gateway though if I ping from diagnostics the ping returns fine.
Gateway moni... -
- Confirmed working here as well. Thank You!
-
- Thanks, i can no longer reproduce the panic.
If 6to4 itself works properly now i cant tell, i have not used it bef... -
-
09:27 PM pfSense Packages Bug #6928: freeRADIUS, logging with "Access-Reject" not work in mysql table radpostauth
- Hmmm, it seems to work!
records appear in Table -
- Can you please test this patch? https://github.com/pfsense/FreeBSD-ports/commit/cdf9b05e966f311b8ae83c7a3158479bd5c9e...
-
- i tryed diable SQL. No problem.
I'm watching the security problems in this table. -
- Martin Wasley wrote:
> Just post the dropbox link here..
Fair enough. I looked through the pcap and there's nothi... -
- Just post the dropbox link here..
-
08:45 AM Bug #3703: MTU not applied on reboot
- Is it Resolved ?
2.3.2-RELEASE-p1 (amd64)
built on Fri Sep 30 14:36:56 CDT 2016
FreeBSD 10.3-RELEASE-p9
I hav... -
- +1
It's too bad that pfSense do not have this functionality yet
Many of us use multiple WANs please consider MLVP... -
- Known limitation / Duplicate. See #7011
-
02:16 AM Bug #7169 (Duplicate): MAC address for an interface is not set back to the actual hardware value if a manually entered MAC value in General Configuration under Interfaces is cleared
- Steps to reproduce
1) Set the MAC address to an interface manually in the General Configuration for an Interface
... -
- OK, before I do a PR upstream for this, there is one issue left. This only applied in the default mode not dhcp6witho...
-
- Added a huge deprecation warning to the page as part of https://github.com/pfsense/FreeBSD-ports/pull/272.
-
- I'd rather nuke this redundant thing altogether, however not sure how to handle the transition for unfortunate users ...
01/28/2017
-
- Martin Wasley wrote:
> Just upload them to a dropbox and send me a link.
Sure thing. Can I email you a private link? -
- Just upload them to a dropbox and send me a link.
-
- Fixed.
Relevant commit: https://github.com/pfsense/FreeBSD-src/commit/c050d42a2646d2e582c46cc6f61531150ffb6cb9 -
- Does uncommenting this break things if SQL is *disabled*? The whole thing is a damn complex heap of code, not really ...
-
- I'm running the a recent 2.4 beta snapshot. I'm periodically seeing vague kernel messages in the system log.
Some ... - 02:49 PM Revision b39cebf6: Fixed #7154
- Remove duplication in javascript
-
- Yes, the code did nothing effective. I guess that someone had started thinking about what smarts to put in it, had "t...
-
08:50 AM
Bug #7154: firewall_nat_edit JS function check_for_aliases()
- Applied in changeset commit:b39cebf6f09b7d110d810e3ccff0136751aa1718.
-
08:44 AM
Bug #7154 (Feedback): firewall_nat_edit JS function check_for_aliases()
- Looks like that duplication (several times over) goes back to at least 2.0!
https://github.com/pfsense/pfsense/blo... -
- Also added an EXIT as when the No-release flag it's useful to know that dhcp has exited. Would it be be useful to hav...
-
- Adding "hw.igb.num_queues=1" to /boot/local.conf helps resolving this issue.
_sysctl hw.igb.num_queues
hw.igb.num_q...
01/27/2017
-
- Yes, the messages does not seem related with the original bug (crash at ifconfig laggX destroy).
Let's open a new ... -
- Seems better now, it doesn't crash. Logs of activity in the log, though:...
-
- Fixed in latest snapshot.
Relevant commits:
https://github.com/pfsense/FreeBSD-src/commit/b5996bd8278c710ce6859... -
08:58 PM Bug #6099: igmpproxy does not recognize upstream interface
- I downloaded the 2.3.3 nightly but this fix doesn't appear to be included there, so I built a copy of the proxy from ...
-
07:18 PM Bug #7167 (Resolved): Error creating higher VLAN ID on SG-1000
- SG-1000 connected to an Apple Airport Extreme ac on the LAN interface.
Created a VLAN interface with tag 1003 and as... -
- Martin.
I got a packet capture from the WAN upon bootup (all looks good there), a copy of the system and DHCP logs... -
-
- Looks good here. Thanks!
-
- (cherry picked from commit c18d0d12b3e683f07b4bac933240332cd4d95829)
-
- (cherry picked from commit 950342400bdc75b35c01442c400bd53a18015818)
-
- (cherry picked from commit 5a1d67b17d485697e19ef49d66e8e5f91e7e884d)
-
-
- I've pushed a fix on filterdns 1.0_16 that will make it to run defined cmd only when IP address changes.
-
- I can reproduce this bug.
It happens when I use especial traffic pattern for cisco t-rex which included several pcap... -
- During bandwidth test 4860 on today 2.4 got `Fatal trap 12: page fault while in kernel mode`
FreeBSD pfSense.localdo... -
- All merged. Please test with 1.7.5_1 when available; if it still does not work, describe exactly what actions make it...
-
- PR has been merged, thanks!
-
01/26/2017
-
- The message is about Redirect Target Port (as Jim mentions) which is a field further down the page. The message came ...
-
- Most likely what you're trying to do is invalid. Post on the forum for setup assistance.
Include the following inf... -
04:34 PM Bug #7165 (Rejected): NAT: Source: <port - range> -> Destination:<a single port from 'source' range> -> error message
- For some reason latest pfSense version (2.3.2-RELEASE-p1) is not allowing me to forward NAT range 1100 - 65000 to the...
-
-
04:28 PM Bug #6860 (Feedback): Monitoring (RRD) graphs return "unknown" step value
- I added the missing step (43200) to the lookup table.
-
- I added a better error message in the case that JSON doesn't get returned, but a hint for the user to check that they...
-
- The positions are hard coded at this time so it is hard to account for really long hostnames, but I moved the values ...
-
-
-
- See
- https://github.com/pfsense/FreeBSD-ports/pull/267
- https://github.com/pfsense/FreeBSD-ports/pull/268 -
- Without quick it didn't work either. Only changing it to 'pass' made it work.
-
- According to docs you shouldn't use quick on match rules: https://doc.pfsense.org/index.php/What_are_Floating_Rules
... -
- Have you tried to remove 'quick' from this match rule?
-
- Renato Botelho wrote:
> Luiz, when you are touching it, it would be nice to add code on PHP side to deal with interf... -
- This was actually a duplicate of #6373 which had more info. I noted the PR there.
-
- Items 1 and 2 were completed under #6591 which was resolved by PR https://github.com/pfsense/pfsense/pull/3037
-
- PHP Example:...
-
- Last I heard from Renato this is still missing some important pieces:
* Missing a mixed table with IP and MAC addr... -
- Between #6663 and commit:b42ccf1504eca5e40bfb49b0afb688fffe293a7a this is fixed.
-
- PR https://github.com/pfsense/pfsense/pull/3169 was merged back in October.
Tested on a system on 2.4 with wireles... -
- See also:
#7079
#6257
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=148807
https://bugs.freebsd.org/bugzilla/... -
- I suspect this is not actually from clamav but that is what generates enough load in your environment to trigger it.
... -
- We merged PR for this and tested, should be fine now.
-
- I'm also not seeing a long delay any more. I suspect the fix for #7042 might have also fixed this. The previous delay...
-
- 11:27 AM Revision 20290428: Typo in pppoe_subnet input error message
- (cherry picked from commit 01799e5bd5f363e21c744752760ab0cc591713da)
-
-
- Works
-
- This is a duplicate of #6883
-
- Luke Hamburg wrote:
> Thanks. I first checked out master and didn't find that commit... then drank some coffee & re... -
- Thanks. I first checked out master and didn't find that commit... then drank some coffee & realized it's a PR still ...
-
- If you update to the latest snapshot then you can try patch ID: cdb6c8ac8e65f98a2ac0fa469c963c055a5c522d
There are... -
- This is cool... it works nicely. I'm still messing around with it but I've changed the strings to full reply words su...
-
-
-
-
-
-
- 03:19 AM Revision 01799e5b: Typo in pppoe_subnet input error message
-
- Most likely limited to 10 because historically anything above 10 best servers was discarded as a potential peer [1]. ...
-
12:02 AM Bug #7036: 2.4 ZFS on RCC-VE 2440 hangs
- UFS was mentioned as an issue as well, but wasn't tested?
01/25/2017
-
- I can't answer the question of why other than it is generally not recommended to specify a large number of time serve...
-
09:30 PM
Bug #7164: NTP page allows adding more time server rows than it saves to the configuration
- Why is the page limited to 10 servers? Is this limitation enforced elsewhere in the system?
-
- PR https://github.com/pfsense/pfsense/pull/3446
-
- The NTP configuration page has a button to add more time servers to use as a time source. Only 10 servers are saved t...
-
-
- 06:46 PM Revision 7efef9dd: Captive Portal auth method is required
- When creating a new Captive Portal Zone the user can fail to select any of the Authorization Method radio buttons. No...
-
- 06:44 PM Revision c5a174c7: CP HTTPS Forwards setHelp format
- Add full stop and spacing between sentences.
(cherry picked from commit 0046a7da59fb3015512ce181cba6b37516c0b76f) -
-
- (cherry picked from commit 2559f37539cf37221f8fddd7c0b7928e8e3969a8)
-
- Corrects malformed NMEA sentences by calculating and appending the checksum and adding missing special characters "$"...
-
-
04:56 PM Bug #7149: igb driver queue related crashes
- I also can confirm this issue on my box as well.
I have 6 igb (Intel pro 1000) interfaces (4 on the asus mainboard... -
-
- Pretty sure they will crash in the foreground also.. Think ive found a leak in the code though.
The nv.utils.inherit... -
- Should be fixed now: https://github.com/pfsense/FreeBSD-ports/commit/2f5f4b5ac53ead4c12761273a3cc332b08806e26
Unfo... -
- Not seeing this issue either, Set as Defaults is working fine for me too.
-
- Fresh install and one OpenVPN server seems to work fine for me with fresh install from Dec and no probs with latest b...
-
- "Only letters (A-Z), digits (0-9), '-' and '_' are allowed. The group name cannot end with a digit." appears in lates...
- 01:45 PM Revision 0e5ee5ae: Fix cut-paste error in Breadcrumb Links
-
- I was seeing this issue on all my test VMs too but on recent snapshots it seems to be OK, probably some change have f...
-
- 3 months with no complains is like enough time to consider it fixed
-
- After internal tests, we could install it successfully on 2440 using ZFS. Discussion will continue on forum thread li...
-
- There is no much we can do at this point for a release that seems to be unsupported by Microsoft according https://su...
-
- Ok great, I will definitely try 2.4b then. If you happen to know which commits are relevant to that fix I'd love to l...
-
- Its not, it's a problem that appears from time to time and is quite intermittent. In 2.4b changes have been made whic...
-
- I have a dual WAN 2.3.2-p1 system with only one of the WANs configured for DHCP6 (not PPPoE, just Ethernet) and I am ...
-
- PR has been merged, thanks!
-
- And the fixes are for dhcp6c the WAN client, not dhcpd the LAN server. Different things.
First, enable dhcp6c debu... -
- If someone confirms what the validation requirements are, I can make it so.
-
- IGMP Proxy Edit
Threshold: no validation is done, I can put "abc" "-42"... - I think it must be a positive integer... - 09:05 AM Revision 815398fb: Standardize rules reloading message
-
- This only happens when config file uses the directive 'cmd', in this case, ipsec session is using it:...
-
- With 2.3.2, in a hub and spoke model of IPsec tunnels, when the hub was restarted, about 10 percent of the spoke mode...
-
- Your logs are way too huge! Configure something sane on Logs Mgmt tab. (You can override the memory limit in https://...
-
- That is not a supported configuration, in part due to the issues you have noted. Without connectivity for the seconda...
-
03:45 AM Bug #7162 (Rejected): XMLRPC lock in backup node if offline
- I have 2 Netgate SG-4860 installed with pfsense v. 2.3.2_1, with 1 carp vip on wan. The backup machine, however, rema...
-
- 07:06 AM Revision c06865be: Required fields for Captive Portal
-
- 06:34 AM Revision 0ee22f36: Captive Portal auth method is required
- When creating a new Captive Portal Zone the user can fail to select any of the Authorization Method radio buttons. No...
-
-
05:10 AM Bug #7123: Kernel panic when setting TCP MD5 Password in OpenBGP
- Renato Botelho wrote:
> Possible fix was cherry-picked to FreeBSD-src, please try again on next snapshot
Great, t... - 05:23 AM Revision 0046a7da: CP HTTPS Forwards setHelp format
- Add full stop and spacing between sentences.
-
- https://github.com/pfsense/FreeBSD-ports/pull/265 - that's not a real solution obviously, so kindly leave this bug op...
-
- Use this too, just makes the logging a little tidier. If this is implemented then the dhcp6withoutRA PR I have curren...
-
- Yes, attached..
As dhcp6c only calls the script function when the above reply states happen you don't get quite as...
01/24/2017
- 11:48 PM Revision 47f2a4b9: Revert change to css
-
10:03 PM Feature #4606: PKI : CA signing external CSR
- I'd also love to see this functionality. Many Ubiquiti devices only support outputting a CSR instead of importing a k...
-
-
- Got a source patch for that? If I do manage to try it, I am not keen on running binaries from outside sources.
-
- Try this...
These are pulled from the reply state, and are what is displayed in dhcp6c logs, well mine at least. T... -
- It would probably be good enough if dhcp6c properly populated REASON with what actually happened. If it's a simple re...
-
- I can have a look at dhcp6c, easy enough to add something. What do you want it do do, set an env stating what trigger...
- 05:04 PM Revision d6f1fbac: Require at least one tag value in a QinQ entry
- (cherry picked from commit 4085eb055850e07540145c87fd6d3b5912a865dd)
- 05:04 PM Revision bb742516: Use is_intrange() to validate QinQ tag range
- Note: is_intrange() only tells us that the range is good and might be delimited by a "-" or a ":", so if we want to t...
- 05:04 PM Revision 077474cd: QinQ Tag Value Validation
- Tags must be in the range 1 to 4094
Flag the various input errors and only report them once each.
(cherry picked from... - 05:04 PM Revision 2ae9fc67: QinQ Edit fix row add delete
- 1) Make the row delete button actually work
2) Do not allow ranges that go backwards like 25-20 or just "-" or 1-side... -
-
- 04:09 PM Revision 40dcb4b6: Require Name field in Shaper
-
-
- 03:48 PM Revision 4085eb05: Require at least one tag value in a QinQ entry
- 03:42 PM Revision 71ff866c: Use is_intrange() to validate QinQ tag range
- Note: is_intrange() only tells us that the range is good and might be delimited by a "-" or a ":", so if we want to t...
-
-
-
-
-
-
-
-
- 12:24 PM Revision cb4a6274: Validate POSTed interface description
- Copy-paste error from code that used $_REQUEST. This is more correct to use $_POST.
(cherry picked from commit b07adc... - 12:24 PM Revision 318f514f: Interface description should be required
- I was blanking out stuff to see what input error messages came about fields that are required. I was surprised that t...
-
- 12:18 PM Revision 99a90e92: Interface Group Name should be required
- Do not allow it to be blank. Do not bother with all the other checks on the group name if it is blank.
(At the moment... -
- 12:01 PM Revision 8a1b5c56: Required fields for firewall*.php
-
- This is fixed in the following commit: https://github.com/pfsense/pfsense/commit/d9bad9e8863bb91cb568b3b41470e22a20d9...
-
10:10 AM
Bug #6448 (Feedback): Mousing over aliases on disabled rules makes hint difficult to read
- Applied in changeset commit:d9bad9e8863bb91cb568b3b41470e22a20d9fa6e.
-
- Hmmm? This just broke the vertical alignment altogether and did nothing with the input field?
!https://i.imgsafe.o... -
09:43 AM Bug #7086: stale zfs file systems
- Thank you.
-
- Vladimir Putin wrote:
> What are the risks to continue using updated versions without reinstall?
There are no ris... -
- Sorry, I see no reason, just outrage and not from my side.
-
- rejected for reasons shown in-thread.
-
- Merged.
-
- Add GitSync options selectors to post update GitSync.
Minimal, Diff, Show Files, Show Command, Dry Run
The GitSync o... -
-
-
- Cannot reproduce, plus suspect it's more or less a duplicate of another non-reproducible issue filed by the same user...
-
- The changelog link should point to https://github.com/pfsense/FreeBSD-ports/tree/devel/dns/pfSense-pkg-bind9 while it...
-
-
- No feedback, related to ancient package version, plus apparently not a pfSense issue either. Retest with current pack...
- 07:11 AM Revision fe54f091: Remaining required fields for Diag pages
-
06:35 AM pfSense Packages Bug #5869: Squid non-functional in transparent mode in 2.3
- Here’s the mail I got recently for my problem
I was not able to get to these sites at the time of my first post but ... - 05:51 AM Revision fb572e81: More required fields for Interface pages
- 05:06 AM Revision 877be5e6: More required fields for NAT pages
-
- Corrects malformed NMEA sentences by calculating and appending the checksum and adding missing special characters "$"...
- 03:49 AM Revision e0b7a2e7: QinQ Tag Value Validation
- Tags must be in the range 1 to 4094
Flag the various input errors and only report them once each. -
- Rolf Sommerhalder wrote:
...
> This morning, we have added this potential work around on three systems. No crashes ... -
- 01:53 AM Revision e52b5a40: Use gettext on Username and Password
- 01:50 AM Revision b101627a: Merge branch 'master' into patch-4
- 01:46 AM Revision c1dc085b: Merge branch 'master' into patch-6
- 01:39 AM Revision f311d3ba: Required fields in Status pages
01/23/2017
-
- PR https://github.com/pfsense/pfsense/pull/3433
-
- The current NTP GPS configuration has a field for users to customize the GPS initialization commands. These NMEA comm...
-
- Redmine 7083 provided the infrastructure to mark GUI fields as "required" and the UI implementation underlines fields...
-
- - allow showing different graphs to be shown on different browser tabs (dont use localstorage for graphs to query)
- ... -
-
- - Parse GPS initialization commands for explicitly configured GPS commands
- Add extended GPS status if GPGSV or GPGG... -
- 08:21 PM Revision 5e82a83a: Force compress for where_is_ipaddr_configured check_localip
- (cherry picked from commit f0b1358dfe520ad3b771127127daed970ba2c0a0)
- 08:21 PM Revision c528a112: Force compress for where_is_ipaddr_configured
- (cherry picked from commit cde28bfa0e11f268485ec1f6ccb73a3a2f66448f)
- 08:21 PM Revision 5050b792: Always force compress when calling Net_IPv6
- (cherry picked from commit 587995fb57f91894d1f8eb6b296a9fe2fa111fac)
-
- 08:15 PM Revision 5af7e158: Interface description must be unique including case
- (cherry picked from commit 3692adec74d438eedb41a7be8eae9cd58f6fe5c1)
-
- 08:13 PM Revision a53cd6c8: Required fields in Load Balancer pages
- (cherry picked from commit 275d769e0d99e02984e42e2328cbcb681f9b87fb)
-
- 08:11 PM Revision 895ab5ce: firewal_nat_edit function name typo
- This unrelated fix is in a big diff listing of other stuff related to a proposed RADIUS enhancement https://github.co...
-
- 08:09 PM Revision 31fa9121: 6RD Border Relay input error message
- This field is labelled "6RD Border Relay" on the main UI. It confused me for a moment when I got this message "6RD Bo...
-
- 08:09 PM Revision 121a1ac2: Add required fields to firewall_aliases_import
- (cherry picked from commit b6368b73d921a29e87cc1cd02ab912024ba66d0a)
-
- 08:08 PM Revision c9b688ae: Display input error when no aliases to import
- Currently if you put nothing in the "Aliases to import" box and press Save then the page just reloads - nothing saves...
-
-
-
- What are the risks to continue using updated versions without reinstall?
-
- Tobias Wigand wrote:
> Fresh install worked without problems. Can't say anything about the original problem, not eno... -
-
- 05:15 PM Revision 278eb7de: Fixed #7155 by replacing toggle with jQuery
- 04:50 PM Revision 81fd2101: Fixed #6958
-
- This is not longer an issue. It must have been fixed in a previous commit.
- 04:00 PM Revision 07432828: Fix comment
- 03:52 PM Revision b33d32a5: Fixed #7128
-
03:45 PM Feature #7158 (Rejected): Captive Portal should have logs facilities for blocked sites
- Whenever I have problems connecting to sites from client software that does not have proxy settings there is no way t...
-
- It could probably be documented in a way that calls more attention to it, but it is mentioned in the documentation wh...
-
- How is one supposed to know that this is a requirement? It's exactly not self-evident that changing something as sim...
-
- Any time you save/apply changes on an assigned OpenVPN interfaces you have to restart the VPN. It's always been that ...
-
- It appears that toggling in the 'Block bogon networks' and/or 'Block private netowrks' GUI option kills the automatic...
-
- When the "Keep graphs updated when on inactive tab" option is selected for traffic graphs it can cause the tab to loc...
-
- 03:03 PM Revision 378ed59b: Merge branch 'master' into if-ifg-alias-name-validation
- 02:57 PM Revision 93abbfaa: Merge branch 'master' into patch-4
- 02:46 PM Revision 8c164995: Interface groups setHelp message
- Mention that it is not allowed to end in a digit.
-
- 02:16 PM Revision 34891a27: firewal_nat_edit function name typo
- This unrelated fix is in a big diff listing of other stuff related to a proposed RADIUS enhancement https://github.co...
- 01:48 PM Revision 0be9d722: Fixed #6967
-
- 11:32 AM Revision 275d769e: Required fields in Load Balancer pages
-
11:14 AM
Bug #7155 (Resolved): services_dhcp_relay.php: Section hide/show gets out of synch with enable checkbox
- Replace ->toggle code with jQuery for reliability
-
- Barring unforeseen changes, you should not expect the behaviour to change between now and the release version. I've b...
-
- Thanks.
I'm on the 2.4 snapshot and upon reboot I have to disable and enable the DHCPv6 server for it to properly ... -
- J L wrote:
> Daryl Morse wrote:
> > I installed the additional patch that Martin provided to address the request fo... -
- Daryl Morse wrote:
> I installed the additional patch that Martin provided to address the request for changes. I've ... -
11:00 AM
Bug #6958 (Feedback): services_dhcp_relay.php: Needs to be converted to more recent rowhelper standard
- Applied in changeset commit:81fd21019cd0de8300fa0480cff1973d58d28e03.
-
10:22 AM pfSense Packages Bug #6350: Auto Config Backup - Uncaught Exception
- Steve Beaver wrote:
> Fixed by populating version table when info request fails
I don't remember what package ver... -
09:10 AM
pfSense Packages
Bug #6350 (Feedback): Auto Config Backup - Uncaught Exception
- Fixed by populating version table when info request fails
-
10:00 AM
Bug #7128: system_advanced_network.php - fugly IPv6 over IPv4 input field alignment
- Applied in changeset commit:b33d32a500fe722035de3efc6a6d50c8cdae6f16.
-
09:53 AM
Bug #7128 (Feedback): system_advanced_network.php - fugly IPv6 over IPv4 input field alignment
-
09:24 AM
Bug #6864 (Resolved): Error checking rejects IPv6 addresses with upper case A-F.
-
- Applied in changeset commit:351ef3ef2ac1bbcfb0643a5efc46a3970d06d78c.
-
- Assuming the real requirement is what is in the validation code, I updated the front-end GUI text in:
https://github... -
- Here, it still panics + dumps + reboots same as it did originally.
-
- To be more precise: pfSense does not exactly "crash", as it is still ping-able. And SSH shells that were open from be...
-
-
- Upstream server issue, has nothing to do with pfSense. Close please.
- 08:42 AM Revision 3692adec: Interface description must be unique including case
-
- It should be fixed on next round of snapshots
-
07:50 AM
Bug #6967: DH Groups 22, 23, 24 missing from Phase 2 selection GUI
- Applied in changeset commit:0be9d722226790674bd35c8087286442e5766232.
-
07:48 AM
Bug #6967 (Feedback): DH Groups 22, 23, 24 missing from Phase 2 selection GUI
- 06:19 AM Revision 1095b204: Required fields in Interfaces pages
-
-
- All that could be done here is fixed with https://github.com/pfsense/FreeBSD-ports/pull/254 and https://github.com/pf...
- 05:18 AM Revision d799b943: interfaces.php display correct descr in group name message
- Use the description that the user attempted to enter, not the original (and probably valid) description.
- 05:00 AM Revision 351ef3ef: Fix #7151 Misleading setHelp for Interface Group Name
- Might as well use the same text as is given to the user in the error message already in this code.
-
- On Supermicro SuperServers 5018D-FN8T with X10SDV-TP8F motherboards, that feature six igb and two ix NICs, we experie...
- 03:00 AM Revision ada9b6bc: firewal_nat_edit function name typo
- This unrelated fix is in a big diff listing of other stuff related to a proposed RADIUS enhancement https://github.co...
-
- - Parse GPS initialization commands for explicitly configured GPS commands
- Add extended GPS status if GPGSV or GPGG...
01/22/2017
-
- Add GitSync options selectors to post update GitSync.
Minimal, Diff, Verbose, Dry Run
The GitSync options have utili... -
- I suspect the requirement might be:
If the user enters a port alias in any of destination from/to (dest begin, des... -
- The code in this function seems to be ineffective. e.g. it has sequences like:
@
if ($('#dstbeginport_cust').val... -
- After seeing "Running last steps of Status_Traffic_Totals installation" on every reboot, I did some digging into the ...
- 04:40 PM Revision 477d849b: QinQ Edit fix row add delete
- 1) Make the row delete button actually work
2) Do not allow ranges that go backwards like 25-20 or just "-" or 1-side... - 01:52 PM Revision 3effec3b: Interface Group Name should be required
- Do not allow it to be blank. Do not bother with all the other checks on the group name if it is blank.
(At the moment... - 01:37 PM Revision b07adc11: Validate POSTed interface description
- Copy-paste error from code that used $_REQUEST. This is more correct to use $_POST.
- 12:30 PM Revision f57a3d90: Interface description should be required
- I was blanking out stuff to see what input error messages came about fields that are required. I was surprised that t...
- 11:49 AM Revision 1a9ec5cc: 6RD Border Relay input error message
- This field is labelled "6RD Border Relay" on the main UI. It confused me for a moment when I got this message "6RD Bo...
-
- does reverting this commit in 2.3.3 with a patch (i dont know how) fix this its really annoying not having this popul...
-
- Resubmit of PR #3157 with fix.
The issue in #3157 was that `pkg info` and `pkg search`, undocumented in man pages, s... - 10:23 AM Revision f2e58c16: Required fields in NAT pages
- 10:14 AM Revision b6368b73: Add required fields to firewall_aliases_import
- 10:05 AM Revision f99bbf5e: Display input error when no aliases to import
- Currently if you put nothing in the "Aliases to import" box and press Save then the page just reloads - nothing saves...
-
- I'll take this one.
-
- Yes, option (c) is the most flexible - let users put in whatever format they like (within reason) and deal with it in...
-
- I'd rather avoid input validation here. Would just upset users for no good reason.
-
- There are a few approaches to a full fix throughout the system:
a) Catch this at input validation, always store a "c... -
- PR https://github.com/pfsense/pfsense/pull/3414 should fix the particular bug reported here and make a start on fixin...
-
- Yeah, they definitely should be compressed before comparing. I hit this case since I've copied the local LAN IP from ...
-
- Net_IPv6 validation allows compressed addresses that are not strictly in the "correct" compressed form.
e.g.
2001:2... -
09:58 AM Bug #7152 (New): Unbound / DNS Resolver issue if "Register DHCP static mappings in the DNS Resolver" set before wildcard DNS custom options
- Tested on:
2.3.2-RELEASE-p1 (amd64)
built on Tue Sep 27 12:13:07 CDT 2016
FreeBSD 10.3-RELEASE-p9
To create ... - 09:49 AM Revision 3e2028f4: Required fields in diagnostics
- 08:57 AM Revision f0b1358d: Force compress for where_is_ipaddr_configured check_localip
- 08:52 AM Revision cde28bfa: Force compress for where_is_ipaddr_configured
- 08:28 AM Revision 587995fb: Always force compress when calling Net_IPv6
-
- On the Interface Groups Edit page, Group Name field, it says "No numbers or spaces are allowed. Only characters: a-zA...
-
- _(Posted "on forum":https://forum.pfsense.org/index.php?topic=124335.0 and confirmed by another user)_
Default cle... -
02:55 AM
Bug #7149 (Resolved): igb driver queue related crashes
- Some 2.4 installations tend to crash out of nowhere related to igb driver queues.
Setting...
01/21/2017
-
05:41 PM Feature #4242: Two Factor or OTP Authentication for Admin Interface
- Ping. I'd love this as a built in feature! I'm using the local database and dont want to get into managing another sy...
- 04:37 PM Revision 3903add3: Handle cases when help is the first priv a user has
-
- I installed the additional patch that Martin provided to address the request for changes. I've tested both patches to...
-
09:38 AM
Bug #7086: stale zfs file systems
- Fresh install worked without problems. Can't say anything about the original problem, not enough knowledge in that ar...
-
08:50 AM Bug #7148 (Duplicate): Spoofed mac addresses on VLAN interfaces apply to the same physical interface
- I was replacing a virtual machine with a physical pfSense box. In effort to minimize the change experienced by the ne...
-
04:15 AM Bug #6099: igmpproxy does not recognize upstream interface
- You can find the sources to build the FreeBSD/pfSense package at: https://github.com/pfsense/FreeBSD-ports/tree/devel...
01/20/2017
-
-
- Packages may still need the old behavior but need tested individually. Once all function calls are confirmed to work ...
-
-
- Please also backport to 2.3
(cherry picked from commit d0718a0f9031f9dc7c6eff3e47e472178c900ece) -
-
- This one is working:...
-
04:28 PM Bug #6099: igmpproxy does not recognize upstream interface
- Greg Myran wrote:
> > Where can I download the latest version of IGMPProxy? Or is the only way to upgrade my pfSense... -
04:20 PM Bug #6099: igmpproxy does not recognize upstream interface
> Where can I download the latest version of IGMPProxy? Or is the only way to upgrade my pfSense to the dev version...-
- 03:09 PM Revision 32a85c63: Example of setting required items
-
- Martin Wasley wrote:
> PR #3410
I've been testing this PR since this morning. I've found that pfsense reliably ac... -
- PR #3410
-
- Added lock file creation and check to RTSOLD script creation. This is to
prevent mutliple launches of dhcp6c, this ap... -
- Snapshots from this morning still crash with igb hardware NICs.
-
- I couldn't reproduce it on a VM using em driver, probably something specific to igb as mentioned
- 12:28 PM Revision c744b0de: Refinement to #7083
- Provides setRequired() Javascript function to facilitate making an input required or not dynamically
-
- Saw that, just merged+cherry-picked it all around.
FYI: Uses of install_cron_job in packages:... -
- Thanks for looking into this. Meanwhile, I did https://github.com/pfsense/FreeBSD-ports/pull/261 since it's generally...
-
- I don't see anything in the base system that would be affected by removing the write_config() from install_cron_job()...
-
- The squid issue seems indeed fixed by nuking the @<custom_add_php_command>@ tag. Still would seem desirable to let ju...
-
- There may yet be a problem with install_cron_job() doing a write the way it does, but the squid problem appears to be...
-
- I reproduced this on multiple 2.3.3 boxes.Anything but */$minutes * * * * causes the issue. E.g., tried just changing...
-
- Oddly enough I can't seem to reproduce this, at least on 2.4.
I suspect adding this just after the install_cron_jo... -
- So, this commit https://github.com/pfsense/FreeBSD-ports/pull/254 caused Squid to be unable to save the configuration...
-
- A fresh install using next round of snapshots is required to validate the fix. Thanks!
-
- Yes, it broke ZFS install and I see why. I'll push a fix soon
-
02:55 AM
Bug #7086: stale zfs file systems
- Tried a fresh install, maybe there is a problem with this change?
It gave me... -
- Please also backport to 2.3
-
05:56 AM
Bug #7083: Put back some visual hint for required fields
- I have added a new function to pfSenseHelpers.js to allow an input to be dynamically set as required (or not). e.g.:
... -
- Dependency between Dial On Demand checkbox and Idle Timeout field
-
- Sometimes the "required" status of a field is data dependent and needs to be set/cleared as the page loads depending ...
-
- The change broke saving General settings in Squid. https://forum.pfsense.org/index.php?topic=124218.0; will get that ...
01/19/2017
-
- Yes, that is true. It depends on what "long" does in the environment in which the C is compiled. When compiled in the...
-
05:55 PM Bug #7075: firewall states show negative value for total bytes processed
- This isn't a PHP problem. pfSense_get_pf_rules() is a PHP function written in C as part of php56-pfSense-module. It c...
-
- These are both 32-bit installs (i386). So MAXINT will be int(2147483647) (2 gig). The numbers are returned by:
$rule... -
09:20 PM Feature #4606: PKI : CA signing external CSR
- +1 - I would very much like the ability to use the pfSense managed CA for signing my other internal CSRs within my ne...
-
-
-
- 05:26 PM Revision 67ccbdd3: Add "required field" highlighting
-
- 04:45 PM Revision 19fe69e6: fields with <required/> set now pre-pend an asterisk to the field title, thereby causing it to be displayed as a required field (currently an underline)
- 04:23 PM Revision 57026d17: Fixed #7083
- When composing an element with a form.class or via XML, prepend a '*' to the title to indicate a required field. This...
-
- This seems to work fine as-is. No need to check/validate someone's unintentional misconfiguration. At least it did er...
-
- Works well. I setup my own and tested it out, it queried the script as expected and used the result.
-
- Works, thanks!
-
- Applied in changeset commit:166540830275318c8dec9199d8a9ee0e605f606a.
-
- The "?" or the Help menu item "About this page" point to a URL like:
help.php?page=services_dhcp.php
The code tha... -
- 1) Create a new user "u1". Give the user some page privs (e.g. Services-DHCP) plus "Help - all pages".
2) Logout of ... -
- Works, thanks!
-
- Applied in changeset commit:a5a899e4388f2737a6d1cdc82c7325c20fb72ee4.
-
- Mentioned in forum https://forum.pfsense.org/index.php?topic=123520.0
PR https://github.com/pfsense/pfsense/pull/3402 -
- If you add the privs for pkg.php, pkg_edit.php then all the various package menu items of packages that use package X...
-
- Failed without the new code, works fine with the fix in place. Looks good.
-
- Applied in changeset commit:ddf99718d5f1f4545483c39d3759fdfbb788b0fb.
-
- Yes, the code does not even try to start such an OpenVPN instance, thus there are no logs.
This PR fixes it on my te... -
- Works now
-
- https://github.com/pfsense/pfsense/pull/3384
-
01:55 PM Bug #7112: Traffic Graphs resets graph when browser tab changes
- Pablo Trincavelli wrote:
> The new traffic graphs resets graphs when the actual browser tab is changed, so the graph... -
01:32 PM Bug #6099: igmpproxy does not recognize upstream interface
- I have the same issue to IPTV as Alexandre, and have the same version. Is there anyway to update the patch fix for IG...
-
- Alexandre Paradis wrote:
> Is the change also available to 2.3.3 branch ?
I have the same question. Where can I f... -
01:29 PM Bug #2073: APIPA broadcasts forwarded by route-to
- Jim Pingle wrote:
> There is no GUI knob to disable it, but there is a setting. You can set it in the config.xml dir... -
- I've reviewed which volumes are created during install on ZFS and also made changes on rc script to mount /var and /t...
- 12:31 PM Revision 7c3f1189: Do not show empty menus
- 12:28 PM Revision b1894db1: Fix #7141 Add a priv for UPNP
- so users can grant access to Services->UPNP
Note: Status->UPNP already has a priv and it works.
(cherry picked from c... -
- 12:27 PM Revision 5a1afaa6: Fix #7139 Accessing help about this page
- from a user that does not have admin or all page privilege.
(cherry picked from commit 166540830275318c8dec9199d8a9ee... -
- 12:26 PM Revision 9f8751b5: Fix #7136 Start OpenVPN on ordinary VIP
- (cherry picked from commit ddf99718d5f1f4545483c39d3759fdfbb788b0fb)
-
- 12:22 PM Revision af4ae33e: Fix copy-paste of ipsec.widget.php file name
- Noticed while looking in widget code, might as well fix it.
(cherry picked from commit a80ce1a7e03ca4fa61f83166b747b4... -
- 12:21 PM Revision 59ffba2f: Fix #7134 Interface Stats widget ifdescrs not defined
- When doing testing I had the Interfaces widget open as well as Interface Statistics. $ifdescrs was already populated ...
-
-
-
-
- As they say, this has been an experience.
This whole 5993 started because we needed dhcp6 before RA, and a quick f... -
- Still crashes on the latest factory snapshot: Wed Jan 18 19:49:46 CST 2017
-
-
- Works nicely (tested with a recent 2.3.3 snapshot and bunch of packages - squid, ntopng, shellcmd, ftpproxy). Thanks.
-
10:51 AM
Bug #7083: Put back some visual hint for required fields
- !required.jpg!
-
10:30 AM
Bug #7083: Put back some visual hint for required fields
- Applied in changeset commit:57026d17d43a096c3a594a248c183a6889e7956d.
-
10:28 AM
Bug #7083: Put back some visual hint for required fields
- pkg_edit.php has been updated to automatically add the '*' if <required> is set
-
10:26 AM
Bug #7083 (Feedback): Put back some visual hint for required fields
- Added:
When composing an element with a form.class or via XML, prepend a '*' to the title to indicate a required f... - 11:28 AM Revision a5a899e4: Fix #7141 Add a priv for UPNP
- so users can grant access to Services->UPNP
Note: Status->UPNP already has a priv and it works. -
- Your fix looks good, Phil. The system I could replicate this on is no longer producing errors after a gitsync.
Thanks! - 09:52 AM Revision 16654083: Fix #7139 Accessing help about this page
- from a user that does not have admin or all page privilege.
-
- dhcp6c calls its script for every action, a new binding or a renew and so on. The problem is that rc.newwanipv6 is ru...
-
- Either way -- driver or hardware (chip or that unit) -- it's not something we can address. It needs replicated in Fre...
-
09:19 AM Bug #7144: Intel NIC loosing connection until reboot
- Jim Pingle wrote:
> On the contrary, this is almost certainly a hardware issue, or at least a driver issue:
> "Jan ... -
- On the contrary, this is almost certainly a hardware issue, or at least a driver issue:
"Jan 19 12:09:14 kernel ... -
- Hi
I have a pfsense appliance from applianceshop.eu (https://www.applianceshop.eu/security-appliances/19-rack-app... -
- filterdns is triggering every 16 seconds whether the record has changed or not. It happens for IPsec entries and FQDN...
-
08:15 AM Bug #7142 (Resolved): IPv6: Floating rules on 6rd enabled WAN interfaces doesn't get bound to wan_stf
- Found a bug in the handling of floating rules when they need to be applied to 6rd enabled interfaces (which are split...
- 06:37 AM Revision ddf99718: Fix #7136 Start OpenVPN on ordinary VIP
- 05:17 AM Revision a80ce1a7: Fix copy-paste of ipsec.widget.php file name
- Noticed while looking in widget code, might as well fix it.
- 04:37 AM Revision 8f94fc33: Fix #7134 Interface Stats widget ifdescrs not defined
- When doing testing I had the Interfaces widget open as well as Interface Statistics. $ifdescrs was already populated ...
-
- 1) Create a new user.
2) Add "WebCfg - Help pages" priv for the user.
3) Add some other page privs for the user.
4... -
02:47 AM Bug #7138 (Assigned): Pfsense wide dhcpv6 client doesn't recognise ifid statement
- Right now a user cannot set a specific ipv6 address on a tracked interface. The interface id is autogenerated based o...
01/18/2017
-
- If you have just the Interface Statistics widget on the dashboard (and not the Interfaces widget also) then you still...
-
- Applied in changeset commit:ffb0c1822875bc0ea1e2b7b73109fa0f97c0b6d2.
-
- This also happens on 2.3.3
-
01:41 PM Bug #7134 (Resolved): Crash in the gui related to widget
- From thread : https://forum.pfsense.org/index.php?topic=124155.0
Other people seems to have the same bug.
My ... -
10:26 PM pfSense Packages Bug #7127: Authentication fail in AutoConfigBackup package
- Confirmed. I just installed version 1.47 and it now works just fine with the mixed case ID. Thanks!!!
... um, y... -
- Just want to confirm that this appears to have kept my box from booting. But would restart over and over. No logs to...
-
-
-
- Send gratuitous DHCP release message to server.
Dependency:
To fully relinquish the DHCP lease, the "RELEASE" reason... -
-
- Match Form Input and Function Parameter Names with associated Var Name.
Use "ifdescr" as form input name instead of ... -
05:45 PM Feature #7137 (Duplicate): Add support for Sierra MC7455
- pleace add support for Sierra Wireless MC7455 card, thx
Details:
usbconfig -u 1 -a 4 dump_device_desc
ugen1.... -
- Steps to replicate:
- Create an IP Alias on any interface e.g. 127.0.0.2 on Localhost
- Attempt to bind OpenVPN ser... -
-
-
-
-
- Works
-
- I'll grab this back for testing once the new package is available
-
- 3.0.4_3 should be fixed
-
- Looks like we're missing the latest change to the Makefile for www/lightsquid from earlier this week, CGI.pm was remo...
-
-
01:59 AM pfSense Packages Bug #7130 (Resolved): Lightsquid 3.0.4_2 HTTP 500
- As title says, when one clicks on Open Lightsquid HTTP error 500 appers.
-
- There is no GUI knob to disable it, but there is a setting. You can set it in the config.xml directly or via PHP (e.g...
-
- Except with no way to disable this rule, this can affect bridged interfaces, and since the rule is processed so far i...
-
02:44 PM Bug #7135: Crash in PHP widget module interface_statistics.widget.php
- My bad, sorry for the duplicate.
-
- Duplicate of #7134 which has a fix already.
-
- When returning to the dashboard page, I frequently receive a PHP error warning:
[17-Jan-2017 14:53:51 America/Chic... -
- Applied in changeset commit:790e2a2fad1da3fe6bdd6c858ede2d9e3f34a84a.
-
- On services_router_advertisements.php, for the "RA Interface" selection, the internal name (e.g. OPT1) is shown for t...
-
- I created a zoneedit account (it's free, and you can just make up a domain when testing without actually pointing any...
-
- Possible fix was cherry-picked to FreeBSD-src, please try again on next snapshot
-
- Tested, works. Error and success conditions are logged properly.
-
- Tested Route53, it updates records properly now.
-
- Tested Route53, it updates records properly now.
-
- Tested Route53, it updates records properly now.
- 11:21 AM Revision 82e6d795: Add filter to SMART status widget
- (cherry picked from commit 22e8fa1f6aec0b1536f0c07e1573ac78a291891f)
-
-
- I've cherry-picked FreeBSD-src patches that should fix it:
https://svnweb.freebsd.org/base?view=revision&revision=... -
- Works
-
09:42 AM Bug #7132 (Resolved): PPPoE IP Alias
- If you create a new IP Alias on a PPPoE interface, alias address is never added to pppoe0 interface.
-
- After revision 391d63da the dhcpv6 server settings allows the user to chose between allow, deny or ignore client upda...
-
- Works fine now, it's there after install
-
- Confirmed fix on today's snapshot, keeping it as feedback to hear from JimP test results as well
- 07:41 AM Revision 22e8fa1f: Add filter to SMART status widget
-
- I can't reproduce it even on 2.3.x. This appears to have been duplicated by #6482 which has been fixed.
-
- I've tested it on 2.4.0 and didn't see the issue. Could you please try to replicate it on current snapshots and if yo...
-
06:06 AM Bug #4310: Limiters + HA results in hangs on secondary
- One more here, we always have limiters and HA and we are forced to use the queues. If someone makes a mistake of assi...
-
- All PRs merged, thanks!
-
- Bored enough :) PR https://github.com/pfsense/pfsense/pull/3395
-
-
- Merged, can be closed. Thanks.
-
- Hello!
It would be great to implement those 2:
AdvRDNSSLifetime
AdvDNSSLLifetime
Thanks!
01/17/2017
-
- Send gratuitous DHCP release message to server.
Dependency:
To fully relinquish the DHCP lease, the "RELEASE" reason... -
- Match Form Input and Function Parameter Names with associated Var Name.
Use "ifdescr" as form input name instead of ... -
- I'm also seeing this problem in the latest release.
2.3.2-RELEASE-p1 (i386)
built on Tue Sep 27 12:13:32 CDT 2016... -
- Had confirmation from others internally that it worked on the new version with mixed case login names.
-
- I pushed a fix for this just now. Once version 1.47 shows up for you, reinstall and test it again.
https://github.... -
- Updated a VM that had two UPD6 OpenVPN servers on a HE.net GIF WAN and they were both running after the update. On ol...
-
- I've mispelled ticket # on commit:5280fd8d21c71c6997e1855f8b96265bd81ccb99
-
- It happened in cases where specific IPv6 is selected to bind and interface is in 'tentative' state, as happened in th...
-
-
-
- 06:48 PM Revision 9762d601: Remove get_openvpnent_key()
- (cherry picked from commit 27bf84fc10d723deebb814a38ee9303014b41711)
- 06:48 PM Revision c72410a7: Add Filter to OpenVPN Widget
- (cherry picked from commit a670560bf9a3de550e9e4e20df4ffe1ed2d4f05c)
-
-
- (cherry picked from commit 3988cfa7d281370500a7f58cb5f73f28a931f0ae)
-
- These fields tend to get "helpfully" pre-filled with random crap by built-in browser password managers or extensions ...
-
-
-
-
- 03:00 PM Revision 27bf84fc: Remove get_openvpnent_key()
-
- @Phil: In case you are bored, could you do one for SMART Status? Did one originally for 2.2.x (https://github.com/pfs...
-
- OpenVPN Widget filtering in PR https://github.com/pfsense/pfsense/pull/3392
-
- Fixed installer bits, it should be fine on next round of snapshots
-
-
- Definitely wrong ticket reference in the above commit.
-
- Applied in changeset pfsense:commit:5280fd8d21c71c6997e1855f8b96265bd81ccb99.
-
- Does not make sense otherwise, can only contain stale data.
(cherry picked from commit 8ed692516534248e58a20aec70f8cf... -
-
-
-
-
-
- should be fixed in the latest snapshot.
https://github.com/pfsense/FreeBSD-src/commit/c941deabf9dd3d86632ccfdade9d... -
- These fields tend to get "helpfully" pre-filled with random crap by built-in browser password managers or extensions ...
-
- PR issued, should be the end of this one.
- 06:29 AM Revision a670560b: Add Filter to OpenVPN Widget
-
- Clearly caused by password management in browsers (or password management extensions such as LastPass) helpfully pre-...
-
- - I never enabled/configured/touched this (IOW, this should certainly default to disabled, I'd imagine the number of ...
-
- This really look stupid, is it possible to put it below the checkbox somehow? I'd personally just remove the form gro...
01/16/2017
-
- Dynamic DNS Widget filtering in PR https://github.com/pfsense/pfsense/pull/3386
Commit https://github.com/pfsense/pf... -
- Does not make sense otherwise, can only contain stale data.
-
-
- PR
Status / Interfaces - Relinquish DHCP Lease
https://github.com/pfsense/pfsense/pull/3390 (2.4)
https://github.c... - 06:46 PM Revision 8bb99bd1: Fix #7126 RFC2136 links
- (cherry picked from commit 47b35618f025082b5504eae5518d89c772ae8bd5)
-
- 05:53 PM Revision 47b35618: Fix #7126 RFC2136 links
- 05:35 PM Revision 7eba98e5: Add filter to Dynamic DNS Status Widget
- (cherry picked from commit 5f8a3dc09e550f3aa2ef086c03e7133f78756913)
-
- 04:55 PM Revision 5f8a3dc0: Add filter to Dynamic DNS Status Widget
-
- The list on the server was having a problem updating, which we have corrected. The hosted list is current now, shortl...
-
- Pfsense bogons list is not up to date:
https://files.pfsense.org/lists/fullbogons-ipv4.txt - Tue Nov 22 04:50:02 ... - 01:54 PM Revision e1568616: Fix #7118 icmp-type any
- When 'any' is selected as the ICMP type, do not write 'icmp-type any' in the rule, just leave it out.
-
-
-
- Applied in changeset commit:47b35618f025082b5504eae5518d89c772ae8bd5.
-
- PR https://github.com/pfsense/pfsense/pull/3388
-
- The Dynamic DNS Widget also displays RFC2136 entries these days. But it has an "ondblclick" for each row that always ...
-
-
-
- When I sign in to the PFSense Gold web portal, I enter my ID as mix of upper and lower case letters: BrianKDav. To ...
-
08:41 AM Bug #6625: firewall forwards all traffic through wan interface, via default gateway, even if alternative route had been installed
- Jim Pingle wrote:
> That doesn't change the situation. You're posting on closed duplicate tickets and the floating r... -
- That doesn't change the situation. You're posting on closed duplicate tickets and the floating rules do solve the pro...
-
- Jim Pingle wrote:
> This is a bug reporting system, not a support or discussion platform. Please post on the forum o... -
- This is a bug reporting system, not a support or discussion platform. Please post on the forum or via some other supp...
-
- Jim Pingle wrote:
> We have, it is.
OK so what would be the solution? Because using floating rules has no effect.... -
- We have, it is.
-
- Jim Pingle wrote:
> Duplicate of #1136
Note sure it is really a duplicate. And the #1136 is very old (and seems n... -
- Duplicate of #1136
-
- Remko Lodder wrote:
> We have setup a new pfSense box that will route our VPN traffic between endpoints.
> That goe... -
- Vladimir Putin wrote:
> Could it be related to https://redmine.pfsense.org/issues/6937 ?
I believe not. We just f... -
- Not really sure why's this assigned to me. Either it's a bug in radvd or in pfSense. Either way, I won't fix it. Also...
-
06:57 AM Bug #6406: Web process becomes unresponsive producing 502 Bad Gateway nginx
- We upgraded 2 days ago from 2.2.x to 2.3.1p1.
Same issue and no pfB installed.
We have upgraded only one of our t... -
- Applied in changeset commit:fc1caa413543c9a616ef08061a5861f57a1c0881.
-
- Jim Pingle wrote:
> Duplicate of #1136
>
> If you must have a second gateway on WAN, add floating rules to match ...
01/15/2017
-
10:43 PM pfSense Packages Feature #6022: Consider MLVPN for bonded VPN
- There appears to be a port for MLVPN now:
https://www.freshports.org/net/mlvpn/
This could be used as a basis for... -
-
-
- - allow showing different graphs to be shown on different browser tabs (dont use localstorage for graphs to query)
- ... -
-
- This looks good to me.
Thought there was still an issue but it just turns out one of my test fqdns (www.cnn.com) h... -
02:53 PM pfSense Packages Feature #4461: Squid options too late in squid.conf
- See...
-
-
- No such luck needed, said deficient software is no longer involved, and no loss for me, no-one would have done anythi...
-
- Thanks for "feedback". Pull requests go to https://github.com/pfsense/FreeBSD-ports/, good luck.
-
- Services like plesk control panels do not run on a standard SSL port like 443. Rather than opening several other port...
-
-
- I have hard time understanding what kind of exceptions is being requested here or what's being used by the OP that's ...
-
- Kernel panic when configuring 6to4 on a interface
pfSense on virtualbox: 2.4.0-BETA (amd64) built on Sat Jan 14 10:3... -
- Works
-
- Works
-
- Could it be related to https://redmine.pfsense.org/issues/6937 ?
-
- Config looks right now
-
- So that sort of config should have failed the input validation already prior to his change. The code considers anythi...
-
- Orsiris de Jong wrote:
> Anyone willing to update the patch ?
Updating the patch is a waste of time. If such func... -
- Jim Pingle wrote:
> On 2.4, when changing attributes of an assigned LAGG such as the mode or membership, the firewal...
01/14/2017
-
- Rolf Sommerhalder wrote:
> Setting a TCP6 MD5 password in OpenBGP package triggers a panic in pfSense-2.4 amd64 snap... -
- Setting a TCP6 MD5 password in OpenBGP package triggers a panic in pfSense-2.4 amd64 snapshot from yesterday (Fri 13....
-
-
04:30 PM Bug #6896: unbound root.key file corruption possibly related to full file system
- I just had the same issue. /var/ was at 100%. After trying to recreate the root.key, and noticing that dhcpd.conf cou...
-
- Handle clearing the individual log as well.
-
- ok already had manually added staic route for 8.8.8.8 and 8.8.4.4 causes failure in error checking
-
- that error happens re-saving current setup with 4 dns servers
-
- getting this error whe trying to add more dns servers
A gateway can not be assigned to DNS '8.8.8.8' server which ... -
- Note: I kept this in the General Setup page where it has been since eternity. Just made it so a variable number of DN...
-
- Good catch, thanks.
-
- The PR was close but it needed some backend changes as well, otherwise it was putting blank values in the configurati...
-
10:48 AM Bug #7121: freshclam.conf advanced editing, configuring value of "Checks" has no effect on crontab entry
- safebrowsing was never enabled in my setup. I also didn't investigate further.
-
- Alexander Berkes wrote:
> That really makes no sense in the minute crontab column and it definitely leads to multipl... -
- Thanks for the git link. That makes things more clear.
Sorry I couldn't remember the exact value of the crontab en... -
- This hopefully makes things more obvious: https://github.com/pfsense/FreeBSD-ports/pull/254
@OP: No, the above PR ... -
- "Checks" in freshclam.conf is not using/configuring cron, at all. Switching to manual config and changing freshclam.c...
-
- Yeah you are right, I am talking about the squid package, but especially the freshclam component. Freshclam is execut...
-
- Assuming you are talking about Squid, it's not supposed to do anything with cron. You are totally on your own, this f...
-
- PR merged, works fine. Will wait for it to be in snaps before one last test.
-
- Jim Pingle wrote:
> It works from the Settings tab if you reset all log files, but it doesn't work if you clear the ... -
- Seems to work
-
- PR to hide this defunct stuff from GUI meanwhile: https://github.com/pfsense/FreeBSD-ports/pull/255
-
- Problem on the ticket no longer happens, anything else belongs on a new ticket. Closing.
-
-
- Unable to reproduce, lack of feedback, closing.
-
- Unable to reproduce, lack of feedback, closing.
-
- Yes, this should have a 2.4 target. And it's already been tested, but I tested it again on a current snapshot and it'...
-
- Target version could be set to 2.4.0 and then some independent person test.
-
-
- Merged; test please and report back.
-
-
- Apparently the issue was not with the package, nested aliases now work. Close please.
- 06:25 AM Revision 8ad8e9ab: Format of username in Logout
-
- This has a target version of 2.4.0 - is that really intended?
-
- interfaces.php also has addrtolower()
-
- This just needs an independent person to test it.
-
- The following are completed:
Services Widget UI changes: https://github.com/pfsense/pfsense/pull/3370
Interfaces Wi... -
- Some dashboard widgets can end up with a lot of rows or columns of data to display on bigger systems. It would be nic...
01/13/2017
- 08:59 PM Revision 64f1fef3: Add filter to Interfaces Widget
- (cherry picked from commit 35310a493f19d6758747cbc8e9961c2ca3395246)
-
- 08:59 PM Revision 0f8edf14: Add filter to Interface Statistics widget
- (cherry picked from commit 84a7e840eac8f62a95ccb900089faf14a9a9fc65)
-
- 08:58 PM Revision 2392e876: Add filter to WoL widget
- (cherry picked from commit d82c5cbf4f693d70e55b5a484a34ea84f88fa250)
-
- 08:50 PM Revision d88f26df: Redmine #5549 Allow variable number of DNS Servers
- (cherry picked from commit a2d23e88596deab6bbed2818385a0b72c913843a)
-
- 08:49 PM Revision 848ace91: Check for duplicate Wake on LAN entries
- Currently it is posible to enter an interface+MAC combination that is already in the WoL list. That seems silly.
(che... -
-
- When configuring clamav advanced options, changing the value of "Checks" has no effect on the crontab entry of freshclam
- 08:45 PM Revision e296b399: Tidy up "<script>" tags
- Tidy up <script> tags by adding TYPE attribute
(https://doc.pfsense.org/index.php/Developer_Style_Guide#HTML_Specifi... -
- 08:44 PM Revision 7492e420: Display Dyn DNS type if description not found
- (cherry picked from commit 7b3d8a4b8cee0588ed2ccd272588026002369433)
- 08:44 PM Revision c8e0a211: Remove excess loops in DynDNS Widget
- (cherry picked from commit b84126b5e74473b1e6a576f38da2149a95ab03fc)
-
-
- When pfsense (full install) is configured to use /var as RAM disk, the directory permissions of /var/tmp are set to 7...
-
-
- Seems to be fixed now. I put a file in /usr/local/pkg/ that would work on 2.3.3 and break on 2.4, and it did not affe...
-
- It works from the Settings tab if you reset all log files, but it doesn't work if you clear the log specifically whil...
-
- It's still missing after installing from a current snapshot. /boot/loader.conf contains only:...
-
- PR has been merged, thanks!
- 02:19 PM Revision 46345696: Tidy up "<script>" tags
- Tidy up <script> tags by adding TYPE attribute
(https://doc.pfsense.org/index.php/Developer_Style_Guide#HTML_Specifi... -
- Works
-
-
- New version is there, workarounds are gone. Seems fine.
-
-
- Seems fine now, the behavior is correct and the button has space around it.
-
12:16 PM Bug #7102: This firewall does not have any interfaces assigned that are capable of using ALTQ traffic shaping for igb interface
- do you want me to update my snapshot and test?
-
- Fixed
-
-
-
-
- Seems to work all around. It logs correctly when it is updating, and if it fails that is also logged. It is checking ...
-
- I'm not able to comment on item 2 in the original list due to a dhcpv6 bug in windows 10, but it appears that the lea...
-
- Seems to be fine. No errors on the page with or without leases, with or without RAM disks enabled.
- 11:07 AM Revision d82c5cbf: Add filter to WoL widget
-
- Works
-
-
- OK, nevermind, I ran it again and it's fine. The sync didn't pick that up.
github has been spazzing out today, the... -
- This still fails for me after a gitsync.
There were error(s) loading the rules: /tmp/rules.debug:189: syntax err... -
- Applied in changeset commit:007cfb6ab6d7733c7a98d8fc5baae59028753107.
-
01:16 AM
Bug #7118: ICMP rule with ICMP type "any" fails to load
- Works fine now. Many thanks, Phil!
-
- Pull request to fix: https://github.com/pfsense/pfsense/pull/3377
-
12:33 AM
Bug #7118 (Resolved): ICMP rule with ICMP type "any" fails to load
- Creating a pass rule with ICMP and ICMP type any prevents the ruleset from being loaded.
The following rule is gener... -
- Works well now as far as I can see.
-
- Works fine, a user without access doesn't get the link.
- 10:28 AM Revision 257dd207: Check for duplicate Wake on LAN entries
- Currently it is posible to enter an interface+MAC combination that is already in the WoL list. That seems silly.
-
- On 2.4, when changing attributes of an assigned LAGG such as the mode or membership, the firewall panics and reboots....
-
- Works well
-
- Works well for LDAP. RADIUS already caches the groups in $_SESSION so don't be surprised if you don't see re-auth req...
-
- Also seeing this after upgrading to 2.4.
Initially unable to ping across the tunnel but a packet capture showed pi... - 09:58 AM Revision 84a7e840: Add filter to Interface Statistics widget
-
- New descriptions are more clear, options are labeled in a way that is hopefully obvious.
- 09:26 AM Revision 3bbe2efe: Add username to logout menu and icon
- I find it difficult to work out who I am logged in as. Other software often provides some indication of who is the cu...
-
- Seems to be solid all-around.
-
- Seems to be good here.
-
- It's been available in the repo for a while. Closing.
-
- All graphs look fine now with the dark theme (widget, graph page, and monitoring), they do respect theme colors.
-
- If you checked "push compression to the client" then the server will push the setting to the client and it shouldn't ...
-
09:03 AM pfSense Packages Todo #7055: Update OpenVPN Client Export package with OpenVPN 2.4
- Jim - unknown if this is expected behavior, but the Client Export does not put compression settings in the client fil...
-
- Works fine.
-
08:56 AM Bug #4418: IPsec mobile clients - bogus "p" appended to search domain
- This still happens in 2.3.2-RELEASE-p1. Had to add a dummy second domain to fix it like the others.
resolver #3
... -
- No confirmation, but no complaints. Other posts on the forum indicate CloudFlare is working in general on 2.4 now.
-
- Works
-
- Works
- 06:54 AM Revision 007cfb6a: Fix #7118 icmp-type any
- When 'any' is selected as the ICMP type, do not write 'icmp-type any' in the rule, just leave it out.
-
05:01 AM Feature #4632: Support for Multipath TCP (MPTCP)
- I also would like to see it in PfSense.
I'm using MPTCP to bond my three connections (2x VDSL + LTE). It works per... - 02:53 AM Revision 7b3d8a4b: Display Dyn DNS type if description not found
-
-
-
-
01/12/2017
-
- Initialize cached IP and Time on loop for RFC2136 items, without this
the items used on last loop iteration will be u... -
- Initialize cached IP and Time on loop for RFC2136 items, without this
the items used on last loop iteration will be u... -
- Works for me. Two RFC2136 entries on WAN both get updated now. I wiped the cache files and tested using /etc/rc.dyndn...
-
- Pingle has a way to validate the changes
-
- Applied in changeset commit:ed680fda05f2d2d17a59d2893a6ae45e0cbef164.
-
- Seems to work fine. Rules that resulted in no traffic passing before now pass traffic as expected.
-
- Fixed by: https://github.com/pfsense/FreeBSD-src/commit/65e7874e6faa4fdfd1fb6893d75d8db196a2f599
-
-
-
- Seems OK for now.
-
- pfSense-upgrade 0.12 will not reroot on ZFS systems
-
- Works
-
- Applied in changeset commit:da2a39e2961d22a403df464534b52bf6dbf9cf01.
-
- I confirm this behaviour.
-
- a floating 'match' rule on LAN does not put traffic from a broswer on a clientpc into a shaper queue.
Using Virtua... - 03:59 PM Revision a2d23e88: Redmine #5549 Allow variable number of DNS Servers
- 03:29 PM Revision b84126b5: Remove excess loops in DynDNS Widget
-
02:59 PM Bug #7117 (Resolved): Bump sched buckets limiter log spam in console
- When a limiter is used with source mask, it creates a lot of system log entries over time when active and applied to ...
-
- 02:22 PM Revision c898bd19: Display client id in DHCP Mapping list
- (cherry picked from commit 6e3e95a538c4dda9c9f14b2ab78435eec0debf46)
-
-
- - Stop misusing fsck -F parameter, it's supposed to be used when you
plan to run background fsck after filesystems ... -
- - Stop misusing fsck -F parameter, it's supposed to be used when you
plan to run background fsck after filesystems ... - 10:34 AM Revision 35310a49: Add filter to Interfaces Widget
-
- Please read this https://forum.pfsense.org/index.php?topic=117827
-
- Use remote syslog to retain logs. Or look into the syslog-ng package.
-
08:27 AM Feature #7115 (Rejected): Firewall logs duration
- It would be nice if the firewall log records are archived in the new version
-
- pfSense kernel already has all intel wireless cards / firmwares built-in as you can see at:
https://github.com/pfs... -
- We were misusing fsck -F option. It's supposed to be used when you plan to run background fsck after filesystems are ...
Also available in: Atom