Activity
From 02/02/2017 to 03/03/2017
03/03/2017
-
10:53 PM Bug #6937 (Feedback): Inbound traffic on enc0 is not creating a state with mobile IPsec
- New changes were made to handle this issue. Waiting on JimP comments.
-
- Fixed in latest update.
-
07:57 PM Bug #7272: 6rd not functioning on 2.4.0-BETA
- Hi guys,
I'm just chiming in to ask for this as well. I'm using Charter's 6rd service and was about to open a tick... -
07:56 PM Bug #7206: Authentication Method Used in Bug 6751 Removed by Amazon
- Pull #3608
-
- It helps if I completely reverted the items I changed for the region being added to the zone. Just needed to step awa...
-
- Okay I've done more testing with this and I'm getting more random errors that don't make any sense to me. The same co...
-
07:24 PM Revision 1cd02ef7: igmp, fix apply button, remove save button
-
03:40 PM Revision adb19456: Adjust fix for ticket #7294 for 2.3.x, it used a setHelp change that was only valid on 2.4.
-
02:17 PM Todo #6944: dhcp6c releasing allocation
- Close this one.
-
01:16 PM Bug #7339: Dyndns RFC2136 client, don't send updates via TCP.
- Tks Jim.. it is clear now...
-
- You have broken the update by blocking UDP. It performs the _update_ via TCP, but it performs other parts of the acti...
-
- Jim:
The packets in the filter log (pfsense 167.61.xxx.xx) shows port 53 UDP output packets insteads TCP.
I make ... -
- That is an error from your DNS server, not the client.
TCP updates work well from here on 2.3.3.
Search for tha... -
10:15 AM Revision 1008f6fd: Sanitize linebreaks for textarea fields in packages on save (Bug #5306)
-
08:19 AM
Bug #7334: SG-1000 Update failure
- I still see a failure on update as the PID file is deleted, but it now happens later in the update process....
-
-
12:10 AM pfSense Packages Bug #7211: DNS Made Easy ACME script not parsing domain IDs properly
- I got a notification in my install that 0.1.13 was available and saw that those changes were merged into it. After t...
-
06:08 AM Bug #7344: Pfsense should be able to PXE boot directly from ISO file
- Jim Pingle wrote:
> If it still doesn't work on 2.4, it will have to wait until FreeBSD fixes it upstream, and then ... -
05:05 AM Bug #7346 (Rejected): favicon is horrible
- It's a bugtracker for pfSense software
-
01:40 AM Bug #7346 (Rejected): favicon is horrible
- you have a nice responsive design website . one of the major points of a responsive design website is phones and tabl...
-
04:15 AM Bug #5306: textarea fields should have linebreaks sanitized automatically on save
- This is for XML packages:
https://github.com/pfsense/pfsense/pull/3605 -
03:50 AM Bug #7338: ME909u-521 missing serial port
- Jim Pingle wrote:
> That's what a proper discussion will determine.
On doc.pFsense.com this card is supported but... -
-
- 01:59 AM Revision 42565652: Fix parsing "::/0" as "::/128" on OpenVPN IPv6 Tunnel Remote network
-
01:11 AM Revision f51eab94: RAM Disk Settings GUI
- Update notice re: log data loss. The log directory is now also backed up.
Group settings to consolidate.
03/02/2017
-
-
- Here's a diff on my pfsense fork: https://github.com/pfsense/pfsense/compare/master...jxmx:7206_route53
I don't ha... -
- Glad you got it working. There shouldn't be anything coding unsafe with base64. Feel free to look through the signatu...
-
08:01 PM Bug #7206: Authentication Method Used in Bug 6751 Removed by Amazon
- I created new credentials and it worked this time. I'm not sure what went wrong before. Is there any chance that ce...
-
- You can use the attached PHP script to test r53.class. I just ran everything through its paces and didn't have any is...
-
- NOT THIS ONE
-
- I've looked for evidence that the only Route53 region is US-EAST-1 and I've never been able to find a definitive stat...
-
-
-
- I thought it might be due to it running twice in some cases but even only being run once, for some reason it's not st...
-
- 2.3.3/2.3.4, really anything after adding the chrooted socket commit to syslogd.
https://redmine.pfsense.org/proje... -
- Was this on 2.3.2 or 2.3.3?
It also affects tinc, happens every time it is added or removed on 2.4 - 07:53 PM Revision 956b03cd: Fix 7294 keep full rule description
- Signed-off-by: Phil Davis <phil.davis@inf.org>
(cherry picked from commit 680e15baef76a9c598d52d3f2b9ab498077336a8) -
-
- See Bug #5306.
(cherry picked from commit 117776e0c01e68a8b65584d86d7b8b56fe75c9d0) -
07:50 PM Feature #7122: Add filters to various dashboard widgets
- Note: The traffic graph widget already had a multi-selector box prior to this feature. That box never got changed to ...
-
11:49 AM Feature #7122: Add filters to various dashboard widgets
- # Interfaces
# Interface Statistics
# Gateways
# System information
# Traffic Graphs
# SMART
I am able ... -
-
-
- Make status column sort order work correctly with the icons.
Also refactor get_service_status_icon() output string co... -
-
- (cherry picked from commit dc0f5e46a03e0ea797fb74df03e09c58f44a5c1a)
-
-
- Make status column sort order work correctly with the icons.
(2.4, 2.3)
(cherry picked from commit 0fdbaca8f16d0424... -
-
- (cherry picked from commit 7fd7fbcff3304285f4407bec2ae62bab7195bcc4)
-
-
- (cherry picked from commit 9c91c7bd747074b8cdaa90e8810f0c2df081f72d)
-
- (cherry picked from commit 9c91c7bd747074b8cdaa90e8810f0c2df081f72d)
-
-
- If it still doesn't work on 2.4, it will have to wait until FreeBSD fixes it upstream, and then we'll pick it up from...
-
- Hello,
I set up in my xenserver a "Cifs ISO Library" to make ISOs available for installations. I downloaded the la... -
- I've pushed a fix on pfSense-upgrade 0.19.
pfSense-upgrade was considering its new version as a new firmware versi... -
04:28 PM Bug #7343: On 2.3.3, Updater reports that the latest version is 0.18_1
- Updated example of the homepage widget (previous version exposed PII): http://ookla.d.pr/rHOW
Example of the actual ... -
- On pfSense 2.3.3, we are occasionally seeing that the UI is retrieving the latest version of pfSense as 0.18_1 and do...
-
-
05:34 PM Bug #7345 (Resolved): nanobsd upgrades still fail bacause of lacking resolv.conf
- As I wrote in a comment to the closed bug #6557, the upgrade procedure still fails, because copying the source file o...
-
05:34 PM Bug #6099: igmpproxy does not recognize upstream interface
- Rai Wol wrote:
> Rai Wol wrote:
> > Just upgraded to 2.4.
> >
> > Interfaces are recognized correctly. So actual... -
11:29 AM Bug #6099: igmpproxy does not recognize upstream interface
- Rai Wol wrote:
> Just upgraded to 2.4.
>
> Interfaces are recognized correctly. So actual bug is fixed.
>
> B... -
12:06 AM Bug #6099: igmpproxy does not recognize upstream interface
- I see the same messages on my system but my streams do not cut out after any time. They are really stable and channel...
-
-
04:19 PM pfSense Packages Bug #7342 (Rejected): Acme Certificates option to change the order of certificates is broken
- There is an anchor icon saying it will move the checked certificates to it on click. Clicking the anchor with certif...
-
- New domains created for ACME fail with the nsupdate method as the nsupdate keys are not created in /tmp/acme/KEYNAME/...
-
- It would be much more convenient for a large number of domains to assign a DNSSEC update-key to the firewall and allo...
-
04:06 PM Feature #4821: PPPoE WANs do not take full advantage of NIC driver queues for receiving traffic
- The problem with the patch mentioned in comment 12 was that it was a kludge for igb(4) only, not a fix for the underl...
-
- Duplicate of #6832
-
02:42 PM Feature #7137: Add support for Sierra MC7455
- Now it works
see: https://redmine.pfsense.org/issues/6832 (the same idProduct)
-
- How on earth did I miss that one. I'll close this one and update that.
Duplicate of #7256 -
- I filed identical bug about haproxy before - Bug #7256. Yeah, nothing package-specific except for having their own lo...
-
- The status output works fine when there is data. That said, after installing or uninstalling the tinc package, syslog...
-
07:15 AM Bug #7336 (Duplicate): syslogd is not running after installing or uninstalling a package with logging (e.g. tinc, haproxy)
- Status page shows no active connections, no info under "Virtual network device statistics, all known nodes, edges and...
-
- The work-round I used back in the days of the pfSense 2.2.x BIND port was to call rndc-confgen with the "-p <control ...
-
- Hi, when i use dyndns rfc2136 client update, I check "Use TCP instead of UDP", the ouput command nsupdate add correct...
-
02:41 PM Bug #7272: 6rd not functioning on 2.4.0-BETA
- Ah, indeed. It would be great if we can get 6rd support committed to upstream FreeBSD.
-
01:45 PM Bug #7272: 6rd not functioning on 2.4.0-BETA
- this is probably related to freebsd 11 not having support for 6rd. in the current pfsense stable version there is a c...
-
01:41 PM Feature #7327: add working sftp support to sshd daemon
- ok apologies for wasting time on this
-
- Admin has never worked for SCP/SFTP and it's been documented that way for years. Always use root or a different accou...
-
- I had a look and it was missing scp privledges which I added but it had no affect.
Then I found this page
https... -
- More likely it's related to your account settings / privileges / config but that's all things we should discuss on th...
-
- Will leave this as it is, and just keep my local system, patched, if you decide you want to look into it, I can work ...
-
- Those all work here. So perhaps it is a configuration issue or a completely different problem. Let's move this to the...
-
- ok here is output from pfsense sftp client using the default configuration
@root@PFSENSE backup # sftp admin@127.0... -
- filezilla not working at all
Response: fzSftp started, protocol_version=5
Command: keyfile "F:\Users\Chris\My Doc... -
- Jim I should clarify the error comes from pfsense SSHD daemon, the client only reports the error sent from the server...
-
- The current setup works in every scp/sftp client we typically see. scp, filezilla, winscp, ultraedit, etc.
We can'... -
- Well the current system is broken as well. If you can provide an example on how to test ssh tunneling (I dont use ss...
-
- Yeah, the "internal" SFTP thing was completely broken last time I tried that for #7012 - better not touched.
-
- Testing that change, it breaks our chroot mechanism, and breaks the ssh tunnel only user, in both cases they get more...
-
-
- PR has been merged, thanks!
-
- Pig Monkey wrote:
> Renato Botelho wrote:
> > Which version were you upgrading to?
>
> 2.3.2
It has a fix on ... -
- Kill Bill wrote:
> Someone test this, perhaps? https://github.com/pfsense/pfsense/pull/3582
>
> Dunno, but it see... -
-
-
-
-
- Just verified as well, but a little late to the plate it appears. fresh install of CE from 20170302(https://snapshot...
-
- A fresh install has the column active in the firewall log as expected.
-
- Fixed on pfSense-upgrade 0.18
-
- We experienced the same issue today on an APU board. Looks like GUI stopped tracking pfSense-upgrade json and conside...
-
- Looks good. Input validation prevents the incorrect configuration from happening, and even if the incorrect configura...
-
- That's what a proper discussion will determine.
-
- Jim Pingle wrote:
> Please post on the forum to discuss and diagnose the problem. The serial port in your log does n... -
- Please post on the forum to discuss and diagnose the problem. The serial port in your log does not match the descript...
-
- Hi,
before upgrading pfsense, I was using properly Huawei ME909u-521.
pFsense was create for modem port (/dev/cuaU0... -
- Works
-
- Confirmed on a snapshot here, too. Thanks for testing!
-
- An initial packet capture was taken over the LAN interface to capture a sample of active MAC addresses on the network...
-
- Works as expected. Upgrading users that did not have aesni enabled will have cryptodev loaded on upgrade or with a ne...
-
- This works nicely for Status > Monitoring, a similar error happens on the traffic graph widget and Status > Traffic g...
-
- Works well!
Spoof MAC -> New MAC shows on the interface
Remove spoofed MAC -> Original MAC returns just like we w... -
- As others noted, the formatting is still not quite right.
-
- Looks good now, only has a few expected entries.
-
- That is, indeed, the desired result. :-)
Thanks for testing -
- Setting "Backup Count" to zero does not cause any errors visible from the GUI. In fact, it drops all previously stor...
-
- Confirmed fixed here, too, thanks for testing!
-
- OpenVPN Client options:
# CRL (Peer Certificate Revocation List?) is not visible when "Server Mode" is set to "Pe... -
08:27 AM Bug #7337: IP Aliases Limited or Not accepting more than 2,000 IPs.
- When I load it in Chrome its cut off in the middle when I have 12 x /24s. I then reloaded it again, and the cut off ...
-
- I tried with 10 /24 nets = 10 * 256 = 2560 individual entries. It displayed in Firefox 51.0.1, but of course it takes...
-
- We do not impose any limits on the number of VIPs, but if you "need" that many than you are most likely designing or ...
-
- To Replicate :
Firewall > Aliases > IP > Add
• Name : Anything
• Description : Anything
• Type : Host(s)
In... -
- I added some notes to the book and doc wiki articles in question to clarify what options to use.
Thanks! -
- Brandon lockley wrote:
> Regarding the original issue. I think it may still be a bug because highly doubt that is th... -
03:00 AM Bug #7333: RADIUS accounting packets are broken.
- Regarding the original issue. I think it may still be a bug because highly doubt that is the intended behavior for St...
-
- @jimp - There are some extremely bad articles about FreeRADIUS, such as one suggesting to install some third-party Sa...
-
05:37 AM Feature #6832: [PATCH] Add the USB ID for the Sierra MC7430
- Thank you very much!
-
- I've cherry-picked it to RELENG_2_4 and RELENG_2_3
03/01/2017
-
- I tried it, but received an error. Here's the log with redactions:...
-
- Many do not yet exist, but can easily be created.
-
-
-
- https://doc.pfsense.org/index.php/Using_Captive_Portal_with_FreeRADIUS
The only setting i changed was "Accounting ... -
- What specific settings did you have active before and after? (RADIUS and things like re-authenticate and so on)
An... -
- Seems this is only an issue when "Accounting updates" is set to Start/Stop (Which is the mode specifically recommende...
-
- Instead of recalculating a users data traffic each minute it seems pfsense is just collecting the data the first minu...
-
-
04:41 AM Bug #7167: Error creating higher VLAN ID on SG-1000
- I've tested the new update and it worked as expected. Client connected to Guest Wifi from Airport Extreme worked on V...
-
03:15 PM Feature #7193: NTP process PGRMF
- In my original config I had GPGGA and PGRMF enabled and it seems that it prefers GPGGA then:...
-
04:25 AM Feature #7193: NTP process PGRMF
- Pär Wedin wrote:
> I have the hardware to test this and I have enabled the "Process PGRMF" option, but I don't know ... -
03:08 PM Feature #4821: PPPoE WANs do not take full advantage of NIC driver queues for receiving traffic
- This should definitely be marked as a bug and not a feature.
Has anybody tried the igb driver patch from https://wik... -
03:03 PM Bug #7335: DNS Forwarder exposed internal DNS Information to the outside world
- Hello Mr Pingle,
are you sure about that?
I didnt change the configuration, i just did a update from 2.3.2 to 2... -
- Please post on the forum for discussion. This is a configuration issue, not a bug.
-
- Hello dear devops,
im running pfsense 2.3.3. Im using the DNS Forwarder.
In General Setup - DNS Server Settings ... -
- Just upgraded to 2.4.
Interfaces are recognized correctly. So actual bug is fixed.
But multicast stream still ... -
09:28 AM Bug #6099: igmpproxy does not recognize upstream interface
- Hi,
I can confirm that the bug fix is working (at least for me: IPTV in Germany, no BNG)
Runs since two weeks wit... -
- Can someone confirm its working in 2.4?
Doesn't stop after 3-4 min? -
10:08 AM Feature #6626: Support for IPv6 firewall entries with dynamic delegated prefix and static host address
- Note I also have the issue with configuring DHCPv6 and RAs and in configuring somme OpenVPN configurations that are i...
-
- I would also like to see such a feature. My work around currently is to manually create an aliases that contains the...
-
06:58 AM
Bug #7334 (Resolved): SG-1000 Update failure
- Upgrade shows Failure notice after although it completes successfully.
Investigation has shown the upgrade script ...
02/28/2017
-
-
- Having both aesni and cryptodev loaded at the same time appears to only negatively impact performance, no gains, so a...
-
- Previous performance and display issues do not appear to be a problem any longer. See https://redmine.pfsense.org/iss...
-
-
05:26 PM Bug #5993: dhcp6c not started until an RA received
- The new patches address issues 7145 and 7185. The other issue I was thinking of is 6944 (DHCP no release), but it has...
-
- Definitely no, but the original problem for which this issue was raised has been fixed by a PR that was merged previo...
-
12:15 PM Bug #5993: dhcp6c not started until an RA received
- Daryl, are you saying the marjohn56 patches are no longer needed?
-
- Renato Botelho wrote:
> Not finished yet
This issue has been fixed in both 2.3.3 release and 2.4.0 beta. -
04:16 PM Feature #7332 (Resolved): Provide certificate expiry warning
- Just logged into one of my HP MSM controllers and was warned about certificates that are about to expire. This would ...
-
- I have the hardware to test this and I have enabled the "Process PGRMF" option, but I don't know what to look for. Ca...
-
- Applied in changeset commit:be4acfd167788719d16b795d5491646fd88bd23f.
-
- Some options are not quite correct on OpenVPN clients and servers. In particular:
OpenVPN Client options that shou... -
- Had to look up POLA :)
In case I wasn't the only one:
https://en.m.wikipedia.org/wiki/Principle_of_least_astonishment -
- I just pushed a GUI change to add it in as a choice next to aesni. Testing revealed no benefit to having both aesni a...
-
12:54 PM Bug #7330: IPv6 Prefix is deleted on PPPoe reset, but not reapplied.
- Ah... Sorry!
The interesting Logs are all 04:* ... I somehow missed to truncate the 19:* entries.... -
- On boot all adresses are correctly assigned.
On PPPoe reconnect (by provider or by clicking disconnect and connect i... -
- I changed the default value in the stock config.xml rather than trying to do any sort of complicated shuffling of con...
-
- Applied in changeset commit:88aceb2573acab8fbc7e4d467e31280f701ba9cd.
-
- Applied in changeset commit:6aa85955fc074d9d35de782c32f7363391b945df.
-
- I'll take this, it wasn't too difficult to implement, I've got a working set of changes to push.
-
09:33 AM Bug #7329 (Closed): DHCP Not Updating DNS
- The DHCP server setting "Register DHCP leases in DNS forwarder" does register the host in the DNS server. However, i...
-
- Ok I will submit later today and for the script that generates.
The client is flashfxp. -
08:43 AM Bug #7328: Allow several connections with the same gateway (no load balancing, but Multi-WAN)
- Actually most of the discussions about it I read end with "discussed hundreds of times" and no real reason. Coming fr...
-
- It is not valid at the operating system level because FreeBSD doesn't support having two interfaces in the same subne...
-
- Why not? What is "valid"? Valid in a technical sense, or valid in a pf-sense, or valid in a "community support" sense?
-
- You cannot have two interfaces on the same subnet. It is not a valid configuration.
-
- I am not sure how load balancing works and it is not my goal to implement. May main goal is to use both of my cable m...
-
08:06 AM pfSense Packages Bug #6305: Quagga problems updating routes / mistakenly showing "kernel"-routes while they are not
- Looks like Zebra sets RTF_PROTO1 flag on the routes it installs in the routing table.
So I assume in order to get... -
-
- The segfaults occur, when a "clog" file gets truncated like: ...
02/27/2017
-
-
07:51 PM Feature #6240: vxlan driver
- +1
-
- Should be fixed once https://github.com/pfsense/FreeBSD-ports/pull/318 is pulled.
-
- What client does not work?
It looks like the internal method is preferred now, that line in our config hasn't chan... -
- A very trivial change is required to have sftp support working. The existing code sftp fails in my ftp client.
At... -
- attaching file again, first one is wrong
-
- Current pfsense code manually kills unbound, waits just one second and then starts it again, however if unbound doesn...
-
- Nice timings. ;) Just for a giggle, I tried with Alix and 2.3.3: the times are ~ 6.5s with 50 lines and ~25s with 500...
-
- It is worth noting that the above numbers were with a minimal ruleset, it would be worth repeating the test with a mo...
-
- I had initially insisted that option default to off because it was horribly slow on ALIX and other low-end platforms ...
-
- One of the 'Display as column' or 'Display as second row' options should be the default. From the forums, it's very m...
-
- There are fixes in 2.3.3 for fsck, see #6340
That is a potentially a different problem from this, however, but hop... -
07:10 AM Bug #5592: fsck sometimes fails to repair filesystem automatically, resulting in Panic: ufs_dirbad bad dir ino ... mangled entry
- Is it fixe now in 2.3.3? Or we again need to run into single user mode in order to run the fsck command?
-
05:45 AM Bug #7325 (Closed): IPsec VPN Phase2 assigned with idem reqid routing a other VPN Phase2
- before create new vpn ipsec :...
-
03:39 AM Bug #7324 (Resolved): DHCPv6 Dynamic DNS hostname
- According to 2.3.3 New Features and Changes it is now possible to force a Dynamic DNS hostname in DHCP/DHCP6 Server ...
- 02:49 AM Revision 9eb0a09c: Merge pull request #3588 from phil-davis/widget-filter-all-fix
- 02:49 AM Revision 7067e174: Fix #7317 Widget Filter All button
-
- 02:13 AM Revision 39079706: Fix #7300 provide default value for ipprotocol for old rules
- 02:13 AM Revision 1877e4d9: Fix #7300 provide default value for ipprotocol for old rules
-
- 01:38 AM Revision e660ca55: Merge pull request #3581 from phil-davis/patch-11
- 01:22 AM Revision ad4913d7: Merge pull request #3550 from phil-davis/patch-5
-
- Make status column sort order work correctly with the icons.
Also refactor get_service_status_icon() output string co...
02/26/2017
- 10:52 PM Revision 61ea29be: Fix #7299 and other stuff
- As far as I can see, filter_generate_user_rule() is always supposed to be called with 'ipprotocol' set to 'inet' or '...
- 10:52 PM Revision 568b607a: Fix #7299 and other stuff
- As far as I can see, filter_generate_user_rule() is always supposed to be called with 'ipprotocol' set to 'inet' or '...
-
-
- Make status column sort order work correctly with the icons.
(2.4, 2.3) -
-
- Applied in changeset commit:c8ebd4d088890adab15eec0c1e83c3a6c08cf7c7.
-
- PR https://github.com/pfsense/pfsense/pull/3588
-
- Note: This mostly just looks confusing if users notice it.
If the user clicks All and then Save in the current widge... -
- 1) Add 2 widgets to the dashboard that have the capability to filter the displayed data (e.g. System Information and ...
-
- Applied in changeset commit:d0e4f6271cae97996fb8495a1578943348780c42.
- 08:05 PM Revision 499ac306: Added help text and field visibility controls for Dreamhost DNS.
- 08:04 PM Revision a71deb5a: Switched API key usage from username to password fields for protection.
- This prevents accidentally leaking the Dreamhost API key to casual
router administrators. -
-
- Applied in changeset commit:da57defa02e49ae76a7d397a772467680d5068b2.
-
- OK, some update here:
> - a simple tag in the packages service definition pointing to the package configuration va... -
- Cool idea.
https://github.com/pfsense/pfsense/pull/3595 -
- Please read the note next to the advanced options box.
!http://i.imgur.com/HBrczJs.png! -
- Yeah, it's not saved correctly because https://redmine.pfsense.org/issues/5306
-
02:21 PM Bug #7322 (Not a Bug): OpenVPN client configuration isn't saved/read well
- When I have an OpenVPN server in pfSense 2.3.3 with some clients with their own configuration (like in this image htt...
-
- This change isn't in 2.3.3 but it's in 2.4. It will most likely stay. Even though they are not recommended they might...
-
02:14 PM Feature #7321 (Resolved): DynDNS - Add DreamHost DNS support
- I have been a customer of DreamHost (https://www.dreamhost.com/) for many years with several domains and subdomains. ...
-
-
-
-
- Long done, can be closed.
-
-
- Works.
-
-
- Works.
-
- We show what OpenVPN reports via its management interface. If it's wrong, OpenVPN is reporting it wrong. If you can s...
-
01:05 PM Bug #7320 (Rejected): OpenVPN Status shows wrong (old) IP
- The local Pfsense is OpenVPN server.
On Dashboard and Status->OpenVPN the shown Remote-Host IP is wrong.
I think it... -
- https://github.com/pfsense/pfsense/pull/3594
-
- PR https://github.com/pfsense/pfsense/pull/3593
-
- On a system with a lot of interfaces or whatever entries to display in the dashboard widget, the list can be filtered...
- 10:32 AM Revision 54936b49: Fix syntax error in services_wol_edit.php
-
- https://github.com/pfsense/FreeBSD-ports/pull/317
-
05:40 AM pfSense Packages Bug #7319 (Rejected): Tinc uninstall leaves an entry in the firewall rules tab.
- After an uninstall of tinc there's still an entry left in the firewall rules tab.
- 06:44 AM Revision c8ebd4d0: Fix #7317 Widget Filter All button
-
- Apparently no longer an issue due to input validation, the field accepts IP or FQDN only, not URL.
https://github....
02/25/2017
-
-
-
-
02:47 PM Feature #4828: Advanced option to show hidden firewall rules in web gui
- I'd like to see this too.
Supposedly there are automatic/invisible rules for passing IPSec, yet my IPSec doesn't w... -
-
- 12:47 PM Revision 57dd76d1: Fix #7316 Alias Edit keep pattern, placeholder, title in sync on all rows
-
- https://github.com/pfsense/pfsense/pull/3584
-
- It's probably much lower now. Since January, all the major browsers warn upon SHA1 certs. Regardless, the ticket sub...
-
- Yeah, last time I checked (~Oct/Nov 2016) an estimate was that ~35% of websites were still using SHA1 certificates. O...
-
- PR https://github.com/pfsense/pfsense/pull/3583
-
- Pretty sure I already fixed this at least once: https://redmine.pfsense.org/projects/pfsense/repository/revisions/0f1...
-
- Yes, that field has multiple uses depending if it is an IP, Port or URL alias. It would be nice if the "hover text" c...
-
04:33 AM Bug #7316 (Resolved): Fail Boostrap format port in
- Incorrect Boostrap format port in Firewall / Aliases / Edit
in
2.3.3-RELEASE (amd64)
built on Thu Feb 16 06:5... -
06:36 AM Bug #7297: system_certmanager.php: Following a link from a user to add a certificate does not present the "Choose an existing certificate" option
- Has the option "Choose an existing Certificate" now (2.4.0.b.20170224.1423)
-
-
- Duplicate of Feature #1192
-
03:01 AM Feature #7315 (Duplicate): Certificates exported from Certificate Manager has no password set
- Certificates exported from Certificate Manager has no password set. I can import such certificate in Firefox certific...
02/24/2017
-
- DH Groups 22-24 are inadvisable:
https://wiki.strongswan.org/projects/strongswan/wiki/IKEv2CipherSuites
Did thi... -
- I don't actually use squid, but given this week's SHA-1 collision https://shattered.it, I thought I'd ping this ticke...
-
- I upgraded to the new 2.3.3 today and saw this same "dancing". Was going to file a bug, but I'll just +1 this one. :)
-
- And I can't imagine a firewall admin who would work in anything other than ISO 8601 format. :)
But yeah +1 to this... -
- It is perhaps noteworthy that US NIST's new password recommendations explicitly state that unicode characters should ...
-
08:58 PM Bug #4061: dhcpd doesn't send client-hostname to peer, breaking DHCP lease registrations w/HA
- Jim Pingle wrote:
> 4.3.5 is in pfSense 2.3.3 and 2.4. Just update and try it.
Ah bummer, I did my testing on 2.3... -
08:37 PM Bug #7314 (New): Discrepancy in ntp monitoring view
- When I go to the Status-monitoring view, and select ntp, there's a discrepancy in the scale and the "hover over" numb...
-
- The worst thing is that there are no rules loaded and the pfsense is unusable.
-
-
03:04 PM Bug #7313 (Closed): Crazy behviour of Virtual IP
- Hello,
We are using PFSense cluster in our environment (both nodes are running version 2.3.2-p1).
We have are usi... -
01:08 PM Bug #7312 (Assigned): Trafic Graph Widget Bug
-
12:47 PM Bug #7312 (Not a Bug): Trafic Graph Widget Bug
- I just upgraded to 2.3.3 and noticed that there is an extra interface showing in the traffic graph widget under the D...
- 11:47 AM Revision 00f718d0: Remove unused ntpWidgetUpdateFromServer() from NTP widget
- I don;t see where this is used at all. Nothing seems to break if I remove it.
-
-
- Someone test this, perhaps? https://github.com/pfsense/pfsense/pull/3582
Dunno, but it seems to me someone has mis... -
-
- This is a bug tracker, not a support forum. Kindly use https://forum.pfsense.org/ for discussions.
- 04:57 AM Revision 9a3ec9a5: Implemented Dreamhost ISP dynamic DNS updates.
- Dreamhost does not allow direct record updates through their API.
Records must be deleted and then added. Unfortunat... - 04:50 AM Revision b11c8ef6: Added Dreamhost and Dreamhost V6 to list of DYNDNS services.
02/23/2017
-
11:17 PM pfSense Packages Todo #7311 (Rejected): Lightsquid queries
- Hello All,
i have some query in pf sense
I want to see the user’s website visit log by user base. Currently IP... -
- Only write if changed or missing.
Vast majority of reboots will not have a change so don't hit the file system with ... -
- 4.3.5 is in pfSense 2.3.3 and 2.4. Just update and try it.
-
- It looks like this may have been fixed upstream in version 4.3.5, is this something that could be easily tested? Hap...
-
- 03:45 PM Revision 27bc5848: Fix #7306 Correctly filter log widget entries by interface description
-
02:17 PM Bug #6594: Package reinstallation post-config restore hangs if no Internet connectivity
- Renato Botelho wrote:
> Which version were you upgrading to?
2.3.2 -
- Pig Monkey wrote:
> I was just hit by this as well. In my case I am preparing to replace a device at a remote site. ... -
- Kevin Wojniak wrote:
> I'm running into this right now. Not a big network guy, just trying to replace our small busi... -
- See Bug #5306.
-
12:28 PM Feature #6743: Packet Capture - Filter MAC
- Jim Pingle wrote:
> This is already partially done, commit:151b4e35eead8d1b1a9ccd1d1c3b3c4fb0e6620a
>
> Though th... -
- This is already partially done, commit:151b4e35eead8d1b1a9ccd1d1c3b3c4fb0e6620a
Though the calls to is_macaddr() c... -
- Duplicate of Bug #7229.
-
- Upgrading from 2.3.3 to 2.4 removes Snort from the drop-down.
During the upgrade process I see this:... -
- Applied in changeset commit:69860ee4f5ff9f1e5b87bc6fdcb6dfea66062726.
-
- Using the latest 2.4 factory ADI image.
When rebooting after installing pfSense with ZFS, the file-system isn't ge... -
- ZFS installer fails on the SG-2220 due to the small size of the internal storage (4 GB). The default swap size in ZFS...
-
- Using the following image: pfSense-netgate-memstick-ADI-2.4.0-BETA-amd64-latest.img (downloaded today)
When perfor... -
10:53 AM Bug #6370: IPSEC bound to WAN gateway group and Dynamic DNS doesn't to fail back tunnel to WAN on DDNS update
- I too have this issue in 2.3.2. Internet fails back to primary interface but IPsec does not always fail back to prima...
-
- Im still seeing this issue in 2.3.2 and the "Force IPsec reload on failover" option under advanced ipsec settings is ...
-
- PR https://github.com/pfsense/pfsense/pull/3577
This currently does not work on 2.3.3 and 2.4-BETA and I suppose i... -
- 1) Put some rules with logging on an interface(s)
2) Change the description of those interface(s) from LAN, WAN OPT1... - 08:54 AM Revision 81b1b44a: Redmine #7301 Put dot after the word break
- Signed-off-by: Phil Davis <phil.davis@inf.org>
-
08:25 AM Bug #6318: IPsec dashboard widget causes GUI failure
- Nick Wenos wrote:
> We are also having what appears to be the same issue running on version 2.3.2 As a side affect ... -
- 07:01 AM Revision 138e79d4: Redmine #7301 Provide word-break opportunity for dynamic DNS host names
- Signed-off-by: Phil Davis <phil.davis@inf.org>
- 05:49 AM Revision d0e4f627: Fix #7300 provide default value for ipprotocol for old rules
-
- /usr/local/share/clamav-db is NOT the path to the ClamAV DB for anything but boxes with the /var ramdisk madness. (An...
-
05:18 AM Bug #7305 (Resolved): widget "squid antivirus status"
- the widget is using the old path for clamav db "/var/db/clamav"
you must modify the file /usr/local/www/widgets/widg... -
- Is there any plan to finally do something about this, or should I start filing bugs for individual pages, starting wi...
- 04:56 AM Revision da57defa: Fix #7299 and other stuff
- As far as I can see, filter_generate_user_rule() is always supposed to be called with 'ipprotocol' set to 'inet' or '...
-
04:29 AM Bug #6650: Option needed to disable HSTS
- Another thing, if the pfSense GUI is behind a reverse proxy (in my case Nginx) you can't enable HSTS on Nginx as it w...
-
-
03:40 AM Feature #7304 (Resolved): DHCP: Enable OMAPI Config
- There's currently no method to configure DHCP OMAPI settings other than modifying dhcpd.conf directly.
-
03:16 AM Bug #7303 (New): ipv6 connectivity lost on pfSense reboot
- We get everything working, start up pingers to ipv4 and ipv6, then reboot pfSense. We expect all connectivity to be r...
-
- PR https://github.com/pfsense/pfsense/pull/3574
-
12:24 AM pfSense Packages Bug #7302 (Resolved): Acme AWS/Route 53 DNS Verification fails
- With the shipping package for acme the acme.sh script for DNS verification with AWS has a bug which is essentially ht...
02/22/2017
-
- Long host/domain names do not line wrap causing IP address to be past margin with horizontal scroll bar. Same will p...
-
- PR https://github.com/pfsense/pfsense/pull/3573
-
- 1) Upgrade from a config that has an old rule that:
a) does not have 'ipprotocol' in its config (from the days be... -
- On 2.3.3
Vertical bar is being used in the cache files as the delimiter. Dnydns and widget are exploding on colon.
... -
- https://github.com/pfsense/pfsense/pull/3572 has a more general fix that should catch any other ways that rules from ...
-
- https://github.com/pfsense/pfsense/pull/3571 for minimal fix to this particular problem.
-
- 1) Have an old config with a rule that specifies Protocol ICMP and ICMP type "Echo Request" (for example)
The old... - 06:17 PM Revision 27d15a21: Fixed typo in $POST/$_POST
- 06:11 PM Revision e35d7d0e: Fixes #7296
- HTML tags not allowed in selector option values
(cherry picked from commit 57f4327a60c0cabf43161a6cfde98479b42a7092)... - 06:11 PM Revision 8dbde62f: Fixes #7296
- HTML tags not allowed in selector option values
(cherry picked from commit 57f4327a60c0cabf43161a6cfde98479b42a7092) -
- 06:06 PM Revision 57f4327a: Fixes #7296
- HTML tags not allowed in selector option values
-
-
- ok, I found the issue with my system and it seems to work again.
As in my previous post described, the issue had to ... -
- (cherry picked from commit e83c9b733c86f39a14a874b115f2b8e0adc952e7)
-
- (cherry picked from commit c6d03f09e035806dca8ac3314b41a3eaf523ab3f)
-
- (cherry picked from commit 13fca9bcb3fdecfb6f9707e621b49f89569abfd7)
-
- (cherry picked from commit 3d8b01e8c6392b4177572d540c8160c7e6e071ca)
-
-
- 03:08 PM Revision 680e15ba: Fix 7294 keep full rule description
- Signed-off-by: Phil Davis <phil.davis@inf.org>
- 02:43 PM Revision 17f622b6: Fixed #7203 by visually separating the legend area
- Make legen area fixed rather than AJAX data
-
-
01:05 PM Bug #6318: IPsec dashboard widget causes GUI failure
- We are also having what appears to be the same issue running on version 2.3.2 As a side affect of php-fpm going down...
-
12:46 PM Bug #7298 (Closed): IPv6 on a second interface doesn't work until the router is pinged
- I'm using 6rd for IPv6 and have two LAN interfaces both of them configured to Track WAN interface and each has a uniq...
-
12:42 PM
Bug #7296 (Resolved): system_certmanager.php: HTML tags in certificate description drop-down
-
12:41 PM Bug #7296: system_certmanager.php: HTML tags in certificate description drop-down
- Tested via system patches on 2.3.3-R. Looks good here.
-
12:20 PM
Bug #7296: system_certmanager.php: HTML tags in certificate description drop-down
- Applied in changeset commit:8dbde62f220234c8fcfe472b97cdba606779bc22.
-
12:13 PM
Bug #7296: system_certmanager.php: HTML tags in certificate description drop-down
- HTML tags are not permitted in selector option values. - Removed and replaced with braces.
-
12:10 PM
Bug #7296 (Feedback): system_certmanager.php: HTML tags in certificate description drop-down
- Applied in changeset commit:57f4327a60c0cabf43161a6cfde98479b42a7092.
-
- Also affects 2.4, but see #7297 first (can't test it without the fix I just pushed for that ticket).
-
- If you navigate to the Certificate Manager via the User Manager to add a certificate to a user, and select choose an ...
-
-
- Applied in changeset commit:12e3e735d8e0f6f0256175ad73f07a9fd196d1e9.
-
- Edit an existing user and click the + to add a certificate and the browser is taken to system_certmanager.php?act=new...
-
- It's broken even with snapshots. The goddamn thing reliably bombs out during post-"upgrade" reboot on
@pkg: https:... -
11:13 AM
Bug #7203 (Resolved): pkg_mgr_installed.php - visually separate the legend
-
- Works nicely, thanks.
-
08:50 AM
Bug #7203: pkg_mgr_installed.php - visually separate the legend
- Applied in changeset commit:17f622b69c9743f7091864fc9977be14ebfff733.
-
08:46 AM
Bug #7203 (Feedback): pkg_mgr_installed.php - visually separate the legend
- Legend area changed to alert-info class to distinguish it from the package list
-
- Fixed in 0.4.36
-
- PR has been merged, thanks
-
- PR https://github.com/pfsense/pfsense/pull/3570
-
- That's a pf limitation. We prefix user rules with "USER_RULE: " (11 chars) then the description and the total length ...
-
- firewall_rules_edit.php
@strncpy($filterent['descr'], $_POST['descr'], 52);@
I wonder why it limits that to 52?
... -
06:54 AM Bug #7294 (Resolved): Lenght of description of firewall rules
- When adding or modifying a firewall rule, the description field accept more characters than are saved, so the descrip...
-
09:09 AM
Feature #7181: Add Top and Add Bottom on Seperator
- While this might add some convenience, the same argument could be made for all of the action buttons, and even for mo...
-
09:03 AM Bug #7295 (Resolved): RFC2136 not updating at boot time
- Tracking pppoe interface, is not updating after IP change/reboot.
In logs, after forcing a manual update:... -
04:10 AM Bug #4674: invalid state table entries after WAN IP change
- SIP behind pfSense with changing WAN IP address is with this bug *impossible*.
I must delete every day the old states. -
- Joao Dinis Neves wrote:
> Do you guys know if this is fixed on version 2.3.3.
>
> Thanks.
Read the comment rig... -
02:12 AM Bug #6099: igmpproxy does not recognize upstream interface
- Do you guys know if this is fixed on version 2.3.3.
Thanks. -
- Also filed an upstream bug: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=217288
-
- There's a ton of logspam when this kernel option is disabled.
https://forums.freebsd.org/threads/59348/
https://f... -
02:04 AM Bug #6481: loading EAP_RADIUS method failed
- Smallish update 2.3.2-RELEASE-p1 still suffers from the same problem.
-
-
-
-
02/21/2017
-
- Needs step 1800 added: https://forum.pfsense.org/index.php?topic=117036.msg695224#msg695224
-
-
-
- Sort includes, use full path to pkill and remove openntpd while here.
-
07:13 PM Revision 8d679b24: Captive portal: fix "Disconnect All" button
- (cherry picked from commit 4fb2b17772928f39add5fc0529e94ed07a09de31)
-
-
- Use icon for status rather than textual asterisk to indicate disabled account.
(2.4, 2.3)
(cherry picked from commi... -
-
-
-
- https://github.com/pfsense/pfsense/pull/3568
-
-
- This is fixed with https://github.com/pfsense/pfsense/pull/2902 on full installs, and nanobsd is indeed dead.
Saf... -
04:56 PM Feature #7292 (New): DynamicDNS configuration does not sync to HA secondary
- If DynamicDNS is configured on the HA primary firewall, it's configuration will not be duplicated to the secondary. ...
-
- That does appear to be what it was. If it can still be reproduced somehow on 2.4 we can dig in more.
-
- OK, so this would seem to be caused by the space in groupname - that appears to be handled by input validation now [1...
-
-
- Duplicate of #6265 and fixed with https://github.com/pfsense/pfsense/commit/776b6190d2f98825e93ddc320c3e99f24ce5b08f
-
- Duplicate of #6927 (already resolved)
-
- This was fixed with https://github.com/pfsense/pfsense/pull/3299, can be closed.
-
- https://github.com/pfsense/pfsense/pull/3567
-
-
- Merged, done.
-
- Eh... Broken packages should be fixed or removed. The Status (alpha/beta/rc/stable) column is gone altogether with th...
-
- Seems like it's been there for a while?
WebCfg - Services: Captive Portal Voucher Rolls
WebCfg - Services: Captiv... -
-
- Must have been factory, that change wasn't synchronized yet. Done now, next snap will be fine. CE was already good.
-
- Factory
-
- Factory or CE?
-
- 2.4.0.b.20170220.1014 Today's build
-
- Are you on a current snapshot? If so, what date? This is fixed on the latest snapshot already. See commit:d54107b1b16...
-
- When clicking save and force update no actions happen.
Changing arbitrary fields, click save and force update, no ... -
11:10 AM Feature #4068: CAs present on CERT manager are not trusted from pfSense
- Just submitted a pull request to resolve this issue:
https://github.com/pfsense/pfsense/pull/3558
Working now on ... -
- Erm, people, it's already done, the sorting is back.
-
08:53 AM Feature #6753: Interfaces list order not consistent
- robi robi wrote:
> +1 for making the interfaces list sorted alphabetically by their DESCRIPTION (NAME) defined in /i... -
- The Dynamic DNS Widget reports that RFC2136 entries are not updated (entry is red) even when the cached IP address is...
-
- Here's a mock up of that do to with the orphaned "Logout" button, changing it to an "Actions" menu. https://github.co...
-
-
-
07:24 AM Feature #7245: NTP widget shows client time instead of server time
- Fix confirmed on real HW.... Thanks!
-
- Daniel Subert wrote:
> Things to fix this (and make the menu less cluttered) could be:
> - Add an option to change/... -
06:22 AM Bug #7288: The field 'Distinguished name Organization' contains invalid characters
- Kind of duplicate. It's status has been changed to resolv and that's not a solution for this problem! (neither for th...
-
- Duplicate of Bug #6432.
-
- I'd like to create a certificate which "Organizational Unit" contains a german form of organisation, namely @GmbH & C...
-
- If you look at the associated revisions you'll see, that he only wants @A-Z, a-z, space, underscore, and dash@
Th... -
- I've already did changes on pfSense-upgrade to force it to upgrade (or even downgrade) pfSense-repo package. Lets tak...
-
- My workaround for that was switching to development then back to stable.
Procedure at https://forum.pfsense.org/inde... -
- So now it doesn't even find the final release upgrade... and I'm not alone with that: https://forum.pfsense.org/index...
-
- When I try to create a 4096bit Certificate a receive a @504 Gateway Timeout@. Netherless the Certificate will be gene...
02/20/2017
-
10:32 PM Bug #6223: IPsec + OpenBGPD fails with "PF_KEY socket: No buffer space available"
- I'm also seeing this issue over Ovpn site to site tunnels with static keys on 2.3.2-RELEASE-p1 (i386). The remote sit...
-
10:27 PM pfSense Packages Bug #7278: Suricata Service - Advanced Configuration Pass-Through not working
- I will make some time to check into this. I had not realized the Advanced Pass-Through code was missing in Suricata....
-
- Add support for driver 18 ACTS ref clock.
PR https://github.com/pfsense/pfsense/pull/3562 -
05:58 PM Bug #7286 (Incomplete): OpenVPN client is unreliable when you have multiple tunnels
- I've installed a new pfSense router to route my (Gigabit) WAN connection. My goal was to have it setup such that it b...
- 03:57 PM Revision d54107b1: Fix "Save and Force" action
- 03:28 PM Revision 9267c6c9: Remove newline in error msg
- 03:18 PM Revision 32048df9: Spelling
- 03:16 PM Revision 85ea9d46: Fixed #7231
- This avoids the problem rather than fixing it by requiring the user to remove any queues from the if before deleting
-
-
-
- 01:42 PM Revision 68b21600: Merge pull request #3533 from phil-davis/fw-rules-iface-selector
-
-
-
-
09:20 AM
Bug #7231 (Feedback): Web UI does not properly remove priq shaping rules when deleting an interface which causes subsequent rule failures without warning in the UI
- Applied in changeset commit:85ea9d468ed5ac21a207554a53d4638f4b7547c9.
-
07:50 AM
Bug #7231 (Assigned): Web UI does not properly remove priq shaping rules when deleting an interface which causes subsequent rule failures without warning in the UI
- Traffic shaper queue test has been added to the validation when deleting an interface. The user must now delete any q...
-
07:54 AM
Feature #4083 (Resolved): Replace GET by POST
- Marking this as resolved. Any further conversions, or the replacement of anchor tags with buttons tags can be opened ...
-
07:52 AM
Bug #6958 (Resolved): services_dhcp_relay.php: Needs to be converted to more recent rowhelper standard
-
07:42 AM
Bug #7254 (Feedback): Selection from long tab list that uses dropdown does not POST correctly
- Fixed via Phil D PR
-
07:39 AM
Bug #7262 (Closed): pkg_edit.php - Method Form_Group::__toString() exception with rowhelperfields with a total width >10
-
- PR Merged
-
-
- Duplicate of Bug #4674
-
- Firewall / NAT / Outbound -> Hybrid Outbound NAT rule generation.
Static port for Source/Destination udp/5060 interf...
02/19/2017
-
-
05:07 PM
Bug #7277 (Resolved): Drag/Drop a LAN Rule Followed by Save Makes Unwanted Changes
-
- Ah yes. That's much better. Thanks.
-
05:48 AM
Bug #7277: Drag/Drop a LAN Rule Followed by Save Makes Unwanted Changes
- You are right. - Sorry.
Working fix has now been pushed. -
- See https://redmine.pfsense.org/issues/4544#note-4
-
-
- Certainly works just fine now.
-
- Sounds like another duplicate of Bug #6237
-
- Are you talking about this? Bug #6237
-
- It would be nice to have the option to attempt to auto configure the baud rate for a GPS device.
Useful if you don't... -
-
- Duplicate of Bug #6454 and already fixed.
-
- Yeah that's been correct for a while.
Fixed by commit:daed7646d7e8e5d555676299ce660408b490ef81 from PR https://githu... -
- Jos van de Ven wrote:
> There is a bug in system.inc in generating the custom access restrictions:
>
> [...]
> T... -
-
01:11 PM pfSense Packages Bug #7283: Update ntopng to 2.4.2017.01.20
- Apologies - I did check, but missed it. This is a duplicate of #7247.
-
- Hi. There's an updated port of ntopng available - 2.4.2017.01.20_1 - see https://www.freshports.org/net/ntopng
Ple... -
-
- Rick Strangman wrote:
> Does this mean that the DHCVP daemon is restarting every 2 seconds or is it just log file sp... -
- See #4383
-
- Sorry, but this is on purpose. See https://redmine.pfsense.org/issues/4383
(Certainly a whole LOT worse the other ... -
- There isn't any reason that section would act differently. If someone manages to reproduce it, start a forum thread t...
-
- -1. I've been creating CAs and certs with AD "Administrator" user logged in, for years. Certainly not reproducible as...
-
-
- https://github.com/pfsense/pfsense/pull/3560
-
- 11:46 AM Revision 285aa44d: Save tab value (if) in HTML
-
-
- Merged in 2.3.3 and 2.4, can be closed.
-
- Sorry for my delay. I was not at home these days.
I tried restarting the service. If I try to restart the service ... -
- No problems here with ESX 6.5.
Even if there were, that isn't an area we touch. Reproduce it with a stock FreeBSD ... -
10:43 AM Bug #7282 (Closed): ESXi 6.5 SCSI errors on 2.4
- Installed the 20170219044210 build on my ESXi box, using the LSI Parallel driver and a single 8GB drive, and I'm gett...
-
- https://github.com/pfsense/pfsense/pull/3559
-
- Works here as well. Yay, finally!
-
- I guess the system could limit a user1 with "WebCfg - System: User Manager page" privileges to be only able to grant ...
-
07:50 AM
Feature #7281 (New): OpenVPN: Add support for IPv6 dynamic prefix selection
- When WAN is obtaining an IPv6 prefix that allows multiple prefix IDs (i.e. smaller than /64), allow selection of an I...
-
02/18/2017
- 10:24 PM Revision 7c40255c: Fixed #7277
-
- Not fixed.
Not sure how $pconfig = $_POST would be expected to fix this. $pconfig is not used anywhere in firewal... -
04:30 PM
Bug #7277: Drag/Drop a LAN Rule Followed by Save Makes Unwanted Changes
- Applied in changeset commit:7c40255c3a101e848580b22482d90022683b1c60.
-
04:25 PM
Bug #7277 (Feedback): Drag/Drop a LAN Rule Followed by Save Makes Unwanted Changes
- Fixed.
Thanks for reporting. -
- Dragging and dropping a rule on the LAN tab to change order followed by a Save results in rules being duplicated on L...
-
- See https://redmine.pfsense.org/issues/4154. No need for users to waste their time with debugging packets black hole.
-
- Well the above should give you a hint on what to add where. LOL. :-P
This package is actively maintained by https:... -
07:48 PM pfSense Packages Bug #7278: Suricata Service - Advanced Configuration Pass-Through not working
- LMFAO~!
Is there a workaround you can suggest?
Thanks for the update!
-
- OK... So, this is the code that's handling that in Snort:
https://github.com/pfsense/FreeBSD-ports/blob/devel/secur... -
- > This is just ... mess.
Interesting wording, that's what I thought of the feature.
Description
* Issue: A... -
- Please, use the @pre@ button to post code/command output. This is just unreadable mess.
-
- * Issue: *Advanced Configuration Pass-Through not working* under pfSense > Services > Suricata > Edit Interface Setti...
-
-
- Figured it out. It goes into a reboot loop if you set the boot option to boot from EFI instead of BIOS. The looping e...
-
- I just downloaded the latest nightly, pfSense-CE-2.4.0-BETA-amd64-20170218-1625.iso.gz, but attempting to install it ...
-
- Duplicate of #7270
-
06:27 PM Bug #7279 (Duplicate): VLAN Trash Icon not working - Cannot delete VLAN entry
- Hi,
Upon creating a test VLAN via Interfaces -> Assignments -> VLAN -> Add
I cannot remove the VLAN. I have inspe... -
- Timon Esser wrote:
> privilege to manage only non-admins and certain groups.
That wouldn't make any sense as ther... -
- Perhaps use Snort and OpenAppID.
-
-
- /etc/rc.firmware and all the related code is gone from 2.4. Irrelevant bug.
-
- Duplicate of Feature #2386 (and yeah, it's extremely annoying.)
-
- Luke Hamburg wrote:
> it's been removed?? Can anyone confirm?
No, not removed. Adding a relevant PR link:
htt... -
- Can someone look into this? Sounds to me like the ordering here is indeed just wrong.
-
- Unless someone wants to these to the GUI, this can be closed.
-
- Can someone fix the misleading subject? If does have link-local IPv6 just fine here, what's missing is the AUTO_LINKL...
-
- After wasting my time once again with hitting the same issue and seeing the total ignorance of the issue by PHP devs,...
-
-
- Duplicate of Feature #3895
-
-
- Creating aliases using AS numbers is available in pfBlockerNG.
-
-
- Irrelevant bug, close please.
-
-
- Yeah, it's indeed a duplicate of Bug #4068 which at least describes the issue in a comprehensible way.
-
-
- Fixed with https://redmine.pfsense.org/projects/pfsense/repository/revisions/6186cdc4be779b37df38e875c76faa5f6d671baa...
-
- Yeah that's been in place for some time now
-
- Not exactly sure what's missing here:
!https://i.imgsafe.org/8b4756c868.png!
-
-
- Already done for quite some time. Close, please.
-
-
- GIF can use IP aliases just fine with 2.3+.
-
-
- Can be just safely closed. No new sign-ups with SixXS since 2016.
https://www.sixxs.net/signup/
https://www.sixxs... -
-
- Merged, can be closed.
-
- Mentioning the Pull Request is good enough. I usually paste the whole link to it, like this:
https://github.com/pfse... -
- After *Round 5* (same output as Round 4 and another reboot later), the next generation thing by some huge miracle act...
-
- *Third round of pkg idiocy*, now pkg getting more schizo, first wants to reinstall itself, then changes its mind, fir...
-
- Really starting to lose my patience with pkg. :-X...
- 03:25 AM Revision ff45928a: Added help descriptions for DNSMadeEasy
-
- This is a couple of seconds late depending on how much stuff people have on dashboard, but at least displays the serv...
02/17/2017
-
- Fixed.
-
- Thank you again Constantine!
I'll upstream this fix. -
05:39 AM Bug #7166: During bandwidth test 4860 with 2.4 got Fatal trap 12: page fault while in kernel mode
- I updated 4860 on last firmware and made tests. And I got very good result.
There is not problem with performance an... -
- Fixed.
-
- Please, check #7176 too (probably related)
-
- Currently running on a SG-1000:
2.4.0-BETA (arm)
built on Thu Feb 16 08:46:33 CST 2017
FreeBSD 11.0-RELEASE-p7
... -
- Constantine, I cannot reproduce these issues.
I can use VLANs on LAN interface (but need to add the default pass r... -
09:30 PM Feature #7275: Add help text for DNS Made Easy
- I guess I'm not sure what I should do next - do I need to link this to Github pull request 3554 somehow, and/or mark ...
-
- I didn't know if I should directly make a pull request to master, and quite frankly, I'm not all that familiar with g...
-
- @Jeremy, since you know exactly what data should go in the fields, it will be easy if you go to:
https://github.com/... -
- src/usr/local/www/services_dyndns_edit.php
domainname field: Add "DNS Made Easy: Dynamic DNS ID (NOT hostname)"
u... - 09:18 PM Revision 64d53c69: Fixed #7274
-
- https://github.com/pfsense/pfsense/pull/3553
-
- Use icon for status rather than textual asterisk to indicate disabled account.
(2.4, 2.3) -
-
-
-
- Looks good to me, everything is using POST now
-
03:20 PM
Bug #7274 (Feedback): status_ipsec.php: connect/ikedisconnect/childdisconnect actions still use GET, not POST
- Applied in changeset commit:64d53c6939c0e81cc0e53631006a1b2fc4af4b0a.
-
- On status_ipsec.php the buttons for connect, ikedisconnect, and childdisconnect actions still use GET, not POST. Addi...
-
01:01 PM
Bug #6662 (Resolved): pkg_edit.php checkbox alignment issue when using the sethelp xml tag
-
- Long fixed, close please.
-
- Applied in changeset commit:3057a2ba467c5a4bcda3a004f876a43758d6e129.
-
- On diag_confbak.php the Backup Count text says to use "0" to keep no backups. The form type is 'number' which prevent...
- 11:55 AM Revision 4a03ae0a: Fixed #7270
-
- Agreed. Move the BIND port instead.
-
- Yeah, I'd definitely rather move the BIND control port than mess with default ports for a default pfSense resolver th...
-
05:39 AM pfSense Packages Bug #7271 (Resolved): Co-existence of unbound and BIND/named
- Problem: both packages (want to) use same port 953 on 127.0.0.1 for (remote) control. If BIND is installed and enable...
-
06:47 AM
Bug #7270 (Resolved): interfaces_vlan.php: Can't delete VLAN
-
06:15 AM Bug #7270: interfaces_vlan.php: Can't delete VLAN
- thank you
-
06:00 AM
Bug #7270: interfaces_vlan.php: Can't delete VLAN
- Applied in changeset commit:4a03ae0a97a58e8526765f8de500edd5ddf7b5a0.
-
05:55 AM
Bug #7270 (Feedback): interfaces_vlan.php: Can't delete VLAN
- Fixed.
-
- "Delete VLAN" button do nothing
-
- With all log files empty, I get an segfault when running syslogd:...
-
- I am trying to debug #7264 and have the problem that the log files don't recieve any update from syslogd. The last by...
-
- Sorry. I totaly misread your sentence. -I'll close this- as it will be fixed in 2.4 and is not capable in 2.3 [edit] ...
-
- Note: "Disable the automatic dashboard auto-update check" is often selected on nanoBSD installs, so nanoBSD users mig...
-
- 1) In System, Update, Settings, select "Disable the automatic dashboard auto-update check"
2) On the dashboard, clic... -
- @restart_service_if_running()@ is a completely useless function as designed. The issue is fixed in https://github.com...
-
12:22 AM Bug #7176: IPv6 Monitor IP does not seem to propagate
- The bind address appears to be invalid.
02/16/2017
-
08:27 PM Bug #7176: IPv6 Monitor IP does not seem to propagate
Got to play a little today- This is the error in the log when restarting dpinger.
Feb 16 18:23:01 php-fpm 7...-
- The log entry doesn't make any sense to me. Please go to Status / Services and restart the dpinger daemon. Then post ...
-
- If I look at Status -> System logs -> gateways I only see the following message:...
-
04:54 PM pfSense Packages Bug #7267 (Resolved): Status Traffic Totals - Stacked Bar - Scale not high enough
- On the Status / Traffic Totals, if you use Bar (Stacked) type, the vertical axis scale is only high enough for the TX...
-
- It seems to be fixed only on devel branch (2.4 only): https://github.com/pfsense/FreeBSD-ports/commits/devel/net/igmp...
- 10:07 AM Revision a597e44f: System Info Widget enable All button when disable firmware check is set
- If system firmware disablecheck is set, then the click event for the filter "All" button is also not included in the ...
-
- This setup worked for a quite long time. I went back to disable Gateway Monitor over all, but the problems still occu...
-
- Steve Beaver wrote:
> The disadvantage is that you have to live within the grid. You can have a maximum of 12 column... -
- The SNMP daemon built into pfSense is bsnmpd, which is not capable of using IPv6 right now.
On 2.4 we have an addi... -
- Are we talking about the same net-snmp package? (http://net-snmp.sourceforge.net/)
"SNMP is a suite of application... -
- It isn't capable.
The net-snmp package, available on pfSense 2.4, does support IPv6 SNMP. -
- $ sockstat -4 -l | grep 161
root bsnmpd 13792 6 udp4 192.168.0.1:161 *:*
$ sockstat -6-l | grep ... -
- Hopefully all done.
@Phil: You like to break this kind of things, in case you are bored. :P - 05:14 AM Revision df4c21fc: Update services_dyndns_edit.php
- 05:12 AM Revision 74533d41: Update dyndns.class
- 05:06 AM Revision 1bfa0695: Update services.inc
02/15/2017
-
- Use a single file for vendor MAC retention (vendor_mac).
a) Writes only one file during boot up rather than a file f... -
- Relocate the vendor MAC retention file to /var/db directory.
a) It's more at home here with other network interface ... -
- Only use the vendor MAC retention file for restoring the vendor MAC when not booting.
a) During boot up the current ... -
- Rename 'spoof_mac' var to generic 'mac_addr'.
a) It may be the vendor MAC or a spoofed MAC.
b) Update the comment r... -
- Is there anything in the system log for dpinger?
-
05:03 PM Bug #7265 (Assigned): Service dpinger does not start after upgrade from 2.3.3 to 2.4.0-Beta
-
- From the day I upgraded my system to version 2.4.x dpinger did not start anymore and in the list of gateway I only se...
-
- I must be extremely dense. Why's this marked as resolved?! Where's a working version available?
-
09:18 AM Bug #6099: igmpproxy does not recognize upstream interface
- Hello,
Okay guys I recognize that one of my latest patches has messed up the behavior earlier. The version that lo... -
-
-
-
- 05:53 PM Revision 09ba8bb7: Fixed: #7251
- Force JS and CSS files to reload if hte file mtimes change
-
-
-
-
-
-
-
-
- Time to RELEASE
This reverts commit 2722f4c257ddd532ad31a4851c4580b3bd667482. -
01:28 PM
Feature #4083 (Feedback): Replace GET by POST
- All delete, toggle,disable and similar actions have been converted to POST via Javascript
There are two exceptions... -
- Seems to work fine. I upgraded a VM that was on a snapshot from before all of the GET/POST conversion and when upgrad...
-
12:00 PM
Feature #7251: JavaScript & CSS are cached too aggressively by browsers, add URL fingerprint or other cache control mechanism
- Applied in changeset commit:09ba8bb752171fe02c67c7983bc8ceeab63f804c.
-
11:55 AM
Feature #7251 (Feedback): JavaScript & CSS are cached too aggressively by browsers, add URL fingerprint or other cache control mechanism
-
11:54 AM
Feature #7251: JavaScript & CSS are cached too aggressively by browsers, add URL fingerprint or other cache control mechanism
- The above solution seems to work as expected. I have added it to head.inc and foot.inc
-
-
-
-
-
-
-
-
-
10:04 AM
Bug #7262: pkg_edit.php - Method Form_Group::__toString() exception with rowhelperfields with a total width >10
- Well - pfSense uses the Twitter Bootstrap framework for its GUI. That framework uses a grid system with 12 columns an...
-
- To reproduce:
- take e.g. this file - https://github.com/pfsense/FreeBSD-ports/blob/devel/net/pfSense-pkg-freeradius... -
- https://github.com/pfsense/FreeBSD-ports/pull/308
(Work in progress ATM.) -
- Well, it's not called "free" RADIUS for nothing - validation-free at least.
-
- No input validation whatsoever done anywhere. Nothing, zilch, nada...
-
08:10 AM Bug #6836: Wrong queue length on "/status_queues.php" page under heavy traffic
- I'm experiencing the same issue. Is this being tracked somewhere? My search has come up empty so far.
-
- Using more than one WAN with the same gateway has never been a supported configuration. You can't have two interfaces...
-
- Here is the setup:
Two cable modems from the same provider, one is used for VPN connections, the other one for all... -
- Looks good with OpenVPN 2.3 being back
-
04:34 AM Feature #3474: Openvpn client-specific-overrides ip conflicts
- If we declare ifconfig-pool in custom options, the server doesn't work because of the "server" directive.
We would... -
- Yep, usable again. Thanks.
-
- Seems OK after revert
02/14/2017
- 09:31 PM Revision 8d58ebae: GET/POST conversion
- 09:16 PM Revision 33ebc875: Fix Apply action
- 09:14 PM Revision 7411a41d: Fix Apply action
- 09:06 PM Revision cbb82e6b: GET/POST conversions
-
-
- Merged and working, can be closed.
- 08:33 PM Revision 9f2bbdb4: GET/POST conversion
- 07:42 PM Revision 13541a81: GET/POST conversions
- 06:11 PM Revision c946d721: GET/POST conversion - services part 1
-
-
-
- 05:25 PM Revision 8a90abc5: Add "required field" highlighting
-
- 05:21 PM Revision 44f59761: Add "required field" highlighting
-
-
- Jani,
This is a bug reporter for pfSense in general and it doesn't sound like you have a bug but perhaps an issue ... -
04:38 PM Bug #7261 (Rejected): pfSense serial console appears unresponsive
- Hello!
I'd like to report a problem with a brand new pfSense SG-4860 with factory installed firmware:
2.3.2-R... -
-
- Merged and working, can be closed.
-
-
- Works, can be closed.
-
- It works
-
- What's in the GUI is fine for the purpose it serves. No need to get that complicated for an example.
-
- Latest FreeBSD: 5.2
Latest Windows: Vista
Latest MacOS: 9.2
No Android, Mac OS X, iOS, macOS, etc. - 11:25 AM Revision d2e001aa: Only save valid widget locations in config
- Some widgets create extra panels, e.g. the widgets that now have the filter functionality. Those panels are processed...
- 11:24 AM Revision 65bd77d4: Only save valid widget locations in config
- Some widgets create extra panels, e.g. the widgets that now have the filter functionality. Those panels are processed...
-
- 11:22 AM Revision 5952db66: Allow 5 dashboard columns to work
- Selecting 1,2,3,4 or 6 dashboards columns results in an exact integer result here and all is good. But 5 columns resu...
- 11:22 AM Revision 63c0e334: Allow 5 dashboard columns to work
- Selecting 1,2,3,4 or 6 dashboards columns results in an exact integer result here and all is good. But 5 columns resu...
-
-
-
-
-
-
-
-
-
-
-
-
- 09:57 AM Revision 621dd536: Only save valid widget locations in config
- Some widgets create extra panels, e.g. the widgets that now have the filter functionality. Those panels are processed...
-
08:09 AM Bug #7243: Openvpn route only first network in IPv4 Remote network(s) to local net
- The Internet service provider used by the many subnets are the same as in my company's offices, so solution adding ru...
-
- Please post details on a forum thread for discussion. This appears to be a configuration issue, not a bug.
-
- if server openvpn IPv4 Remote network(s) set to 192.168.0.0/16 оnly after this, routing works on local net to 192.168...
- 07:44 AM Revision d86cff7f: Allow 5 dashboard columns to work
- Selecting 1,2,3,4 or 6 dashboards columns results in an exact integer result here and all is good. But 5 columns resu...
-
- Prefer they be stored in /var/db directory along with some of the other network stuff. Also friendlier for write cyc...
-
- NOYB NOYB wrote:
> What is so difficult about clearing browser cookies?
Nothing except that it's completely usele... -
- Kill Bill wrote:
> Most importantly, it makes switching back to HTTP pretty much impossible without stupid browser-s... -
- So what is the actual issue that replacing the underscore with space in the displaying of the rules creates? Is ther...
- 02:28 AM Revision 6a951c86: Merge pull request #3543 from phil-davis/patch-5
- 02:26 AM Revision eb6984fd: Comment typos head.inc
02/13/2017
- 10:46 PM Revision 24fc15e6: Fixed DIVIDER issue caused by the addition of msorts to the menu
- 09:23 PM Revision 1a8b6554: GET/POST conversion for status*
- 08:30 PM Revision 7f4268b6: Revisions to GET/POST conversion limiting POSTs to save, apply, and delete functions - Diagnostics
- 07:29 PM Revision 84147b7b: Revisions to GET/POST conversion limiting POSTs to save, apply, and delete functions - Firewall
-
- The root issue appears to be #4068.
-
- I am interested in implementing a related feature that allows a "private CA" to be installed as a trusted root that i...
-
- This is a duplicate of #4068. I am considering addressing this issue, as it affects our operations using pfSense on a...
- 06:12 PM Revision 4401107f: Revisions to GET/POST conversion limiting POSTs to save, apply, and delete functions - Interfaces
-
-
-
- 05:31 PM Revision 1355f71c: Accommodate locales by testing for $_POST['va'] only
- 05:29 PM Revision eeb68412: Revisions to GET/POST conversion limiting POSTs to save, apply, and delete functions - VPN
-
- Fix #7051
This reverts commit 04665e78537906f7375668ca665cba17f95a4864. -
- Fix #7051
This reverts commit 04665e78537906f7375668ca665cba17f95a4864. -
03:56 PM
Bug #6711 (Resolved): diag_states_summary # States and # States twice (explain one is per protocol)
-
10:14 AM
Bug #6711 (Assigned): diag_states_summary # States and # States twice (explain one is per protocol)
- 03:48 PM Revision 4611e283: Revisions to GET/POST conversion limiting POSTs to save, apply, and delete functions
-
- Phillip Davis wrote:
> The 'done' and the dots are output by steps of the boot script as it gets to various points i... -
- The 'done' and the dots are output by steps of the boot script as it gets to various points in the code. That comes o...
-
- Noticed the same thing - have not seen them before. Running 2.4 snap 2.4.0.b.20170213.0512...
-
- pfSense-upgrade 0.15 should fix it
-
- Today GUI is using it's own logic to detect when a new pfSense version is available. pfSense-upgrade offers this opti...
-
01:30 PM Feature #7259 (Duplicate): Automatic Rollback of Unsucessful changes
- One Critical feature that most professional Routers have that PfSense does not is a "do this, but roll it back if you...
-
- Works
-
- Applied in changeset commit:eb5bc42b04ead009b2e09f3ed002eecded240864.
-
- On vpn_ipsec_phase1.php, when editing a Mobile Phase 1 a user cannot save the settings when Authentication Method is ...
-
- This reverts commit c7c79905d3e0fd01172d373a15a1d0d77a5728e8.
-
- This reverts commit 855826896509a1a0bec77a51535a8f004b4ca570.
-
- 11:19 AM Revision c7c79905: Use cached groups in get_user_privileges
- (cherry picked from commit 7abc3f992e5dd5bff53495844ce944163d6d1d9b)
- 11:19 AM Revision 85582689: Use cached groups in get_user_privileges
- (cherry picked from commit 7abc3f992e5dd5bff53495844ce944163d6d1d9b)
-
- 11:16 AM Revision 42a2f7da: Fix ldap_get_groups return value when down
- In some places ldap_get_groups has:
```
return memberof;
```
It should have the "$" in front, so it will return the $... - 11:16 AM Revision fd6a81e1: Fix ldap_get_groups return value when down
- In some places ldap_get_groups has:
```
return memberof;
```
It should have the "$" in front, so it will return the $... -
- 11:15 AM Revision 3129d3e9: IPv4 Tunnel Network is required for OpenVPN server
- (cherry picked from commit e4488e51cf424907e06ef7cc73370aa0657e5e25)
- 11:15 AM Revision 1a4e4d04: IPv4 Tunnel Network is required for OpenVPN server
- (cherry picked from commit e4488e51cf424907e06ef7cc73370aa0657e5e25)
-
- 11:11 AM Revision 3fbee483: Update version string at end of boot RELENG_2_3
- When there is an upgrade, the echo here was outputting a stale value of the version. For example, on first upgrade fr...
-
-
-
- The next build has a different fix for this issue, it probably has better performance too.
Could you, please, chec... -
- Change reverted from RELENG_2_3 and RELENG_2_3_3
-
- Yes, the easy fix is to revert 3322 from 2.3.3. The extra functionality is not that exciting!
And this issue shoul... -
- Can we just revert https://github.com/pfsense/pfsense/pull/3322 for 2.3.3? This non-issue with displayed notices that...
-
- My bad, I did to revert it because the field that controls cache time is a 2.4.0 only feature. Sorry about the noise.
-
- I've applied both PRs to RELENG_2_3_3. Could you please confirm the fix on next snapshot?
-
- OpenVPN port was downgraded to 2.3.x
-
- No, it will work fine for everyone (Well, 99.999%). OpenVPN won't have any compatibility issues between the two. It w...
-
09:34 AM Bug #7252: OpenVPN widget, connect time of roadwariors shows a number
- so if someones on 2.3.3 with opnvpn 2.4 will change back to 2.3 have ramifications ??
-
- We're moving 2.3.3 back to OpenVPN 2.3 since it appears to be the path of least disruption.
-
-
07:41 AM pfSense Packages Feature #7189: Letsencrypt acme sync in HA environment
- Since the certs automatically sync between active and passive nodes, I am inclined to agree that acme should not be i...
-
- Just FYI: That's not my patch, see the URL :)
-
07:15 AM Bug #4474: IP address change triggers reload of all packages
- User "Kill Bill" wrote a patch that disables this behaviour for 2.2.2 and linked it in https://redmine.pfsense.org/is...
-
- Here's some more context:...
-
- Suspect it's related to Feature #4898. Last log entry:...
- 05:30 AM Revision 0fafb3cd: getAllowedPages consistent code format
- 05:15 AM Revision 7abc3f99: Use cached groups in get_user_privileges
- 02:56 AM Revision 0241b34f: Fix ldap_get_groups return value when down
- In some places ldap_get_groups has:
```
return memberof;
```
It should have the "$" in front, so it will return the $... -
02:06 AM Bug #6223: IPsec + OpenBGPD fails with "PF_KEY socket: No buffer space available"
- In 2.4 it flaps constantly... I mean every 40 seconds or so, but it varies
startup
rereading config
route decisi...
02/12/2017
-
- I added a commit to https://github.com/pfsense/pfsense/pull/3538 that checks the $allowed_groups actually is an array...
-
- See PR https://github.com/pfsense/pfsense/pull/3539 for a bug in ldap_get_groups() where it can return something that...
-
- Phillip Davis wrote:
> (Code changes needed for 2.3.3 should be similar to what is in the PR for 2.4)
The patch a... -
- I made PR https://github.com/pfsense/pfsense/pull/3538 to cache group/priv information within get_user_privileges() i...
-
- When creating a firewall alias and entering "www.bücher.ch" as the FQDN, pfsense gives an error stating:
"www.büch... -
- Pillip, yes, using "www.xn--bcher-kva.ch" as the FQDN in the alias works. ex:, with such a rule, a traceroute from my...
- 02:25 PM Revision e8813e51: Allow up to siz dashboard columns
- 01:34 PM Revision e4488e51: IPv4 Tunnel Network is required for OpenVPN server
-
- I didn't notice that OpenVPN 2.4 was on pfSense 2.3.3. That means there are probably more OpenVPN 2.4-isms to account...
-
- I didn't test architecture 'all' but likely yes.. As for priority, its a display issue, actual functionality of the o...
-
- Shouldn't this be architecture All?
-
- At the moment the field is displaying one of the byte counts, so it will be completely misleading to leave it like th...
-
- Pull Request https://github.com/pfsense/pfsense/pull/3537
Actually I think it could be done just by cherry-picking... - 10:18 AM Revision 66a40592: Add GUI entry for ip_change_kill_states in Network/Advanced (See #1629)
- 10:18 AM Revision a84da228: Improve log output when ip_change_kill_states is set.
- 08:42 AM Revision b8ad7df3: Do POST for long tab array dropdown
- 05:18 AM Revision 55f81e30: Update version string at end of boot
- 05:12 AM Revision c0044174: Update version string at end of boot RELENG_2_3
- When there is an upgrade, the echo here was outputting a stale value of the version. For example, on first upgrade fr...
-
03:46 AM Revision 065bd33d: Fix incorrect sorting for various dropdown lists.
-
- And here is a way to "fix" breadcrumb links: https://github.com/pfsense/pfsense/pull/3534
But of course it does not ... -
- Note issue https://redmine.pfsense.org/issues/7254
The dropdown list of interface names in Firewall Rules was still ... -
- PR https://github.com/pfsense/pfsense/pull/3533 provides a fix that works for me. It will at least get functionality ...
-
- 1) Have a lot of interfaces with long names.
2) Got to Firewall->Rules
3) Try to access the rules of a different in...
02/11/2017
-
- Unlikely
-
-
- Nuked the above code, sanity restored. It's evil, get it out of the head.inc please. (Plus, get_user_privileges() obv...
-
- I never set up any timeout anywhere. The point is it tries to look up a *local* user in LDAP, over and over again, ca...
-
- What's your server timeout set to in the LDAP auth server settings? It should be defaulting to 25s, you can lower it ...
-
- No idea when this regressed, but I get this when AD in unreachable:...
-
-
05:49 PM Feature #7199: SG-1000 cpsw nics don't support ALTQ
- SG-1000
2.4.0.b.20170211.0742
Test and working. Thank you for implementing that! -
-
- SG-1000
2.4.0.b.20170211.0742
Can confirm that ALTQ with vlans now works.
-
- OpenVPN widget, connect time of roadwariors shows a number
-
-
-
-
- 12:51 PM Revision af36378e: System Information widget filter gettext()
- (cherry picked from commit f5d762f90924510c097a9065dff135dab01f46f0)
- 12:48 PM Revision 3204c695: System Information Widget Filter
- (cherry picked from commit 718b3b0b1b75de09a87866cb37b5a0752643283a)
- 12:40 PM Revision d99503fb: Fix cut-paste error in Breadcrumb Links
- (cherry picked from commit 0e5ee5ae260c42a05b79edf74fb491fca52bacb4)
- 12:40 PM Revision de02dc29: Breadcrumb links
- (cherry picked from commit edcd75357f0e93b124159314d3306197d5312e6c)
- 12:40 PM Revision 990bc1fb: Breadcrumb links support
- (cherry picked from commit c50f228a1583fe694993778e8576322877a15bba)
-
- Yes, that is the goal. It isn't only about accidental actions, though, but also CSRF protection.
-
- Isn't the principle here that anything that changes stuff (makes a config change, stops/starts a service, applies cha...
-
08:24 AM
Feature #4083: Replace GET by POST
- Good points. I'll give that some thought.
-
- The recent work here is excellent, for delete, enable/disable, and other actions that result in a config change or fi...
-
- Graham Collinson wrote:
> yes it was on 2.3.2
It was changed since 2.3.2. New code is on 2.3.3 and 2.4.0 snapshots. -
07:35 AM Bug #6340: fsck hangs boot in background, fails to produce any action, resulting in broken firewall
- yes it was on 2.3.2
-
07:06 AM
Feature #7251: JavaScript & CSS are cached too aggressively by browsers, add URL fingerprint or other cache control mechanism
- A simple way to deal with this might be to prevent caching on the login page. That way all the CSS and JS is re-loade...
-
- I knew I was forgetting something!
Updated subject/descr
Thanks -
- There is the same problem with CSS.
-
-
02/10/2017
-
- 10:07 PM Revision ce437697: logout via POST
-
- JavaScript and CSS are cached too aggressively by browsers, so when any significant change happens, users must manual...
-
- I can't reproduce this with clients or servers. "Permission denied" implies that a firewall rule is blocking the traf...
-
-
-
-
-
-
-
-
-
-
- As you see, it already adds the PTR records.
-
-
- 09:22 PM Revision 4b72f68f: Replace '_' with '_<wbr> when displaying alias names. Allows long alias names with underscores to word-break better.
- 08:49 PM Revision 8b2cb5a4: GET/POST conversion firewall_virtual_ip*
-
- Can't reproduce. It works fine on 2.3.2_1, 2.3.3, and 2.4. The server has to be set for net30 and you have to specify...
- 08:34 PM Revision e3947e77: GET/POST conversion firewall_rules
- guiconfig.php display_top_tabs supports "usepost" as an optional 4th argument
- 07:40 PM Revision a1371557: GET/POST conversion firewall_nat_out*
- 07:33 PM Revision 01b30fa7: GET/POST conversion firewall_nat_npt*
- 07:26 PM Revision b9205559: GET/POST firewall_nat_1to1 bis
- 07:21 PM Revision d0737076: GET/POST conversion
- 07:07 PM Revision 31bdcffb: GET/POST conversion firewall_nat*
- 06:53 PM Revision d1fd8c3b: GET/POST conversion firewall_aliases*
- 06:40 PM Revision c6b6c4bf: GET/POST conversion vpn_ipsec_server
- 06:35 PM Revision cb5a1026: GET/POST conversion vpn_openvpn_csc
- 06:31 PM Revision bae64f1f: GET/POST conversion vpn_openvpn_client
- 06:26 PM Revision 84450372: GET/POST conversion vpn_l2tp*
-
- - change $do_ping default value to 'true' (which emulates the previous default behavior) to avoid any unexpected resu...
-
- - Reworked based on recent comments from @rbgarga
(cherry picked from commit c516cb287a78f7b05459e7fcba410f443d8eb8af) -
- - incorporate suggestions from @rbgarga with slight modification
(cherry picked from commit 6c2f093000b05285546e81dd... -
- /etc/inc/util.inc:
- arp_get_mac_by_ip() updated to support IPv6
- attempt at code streamline
/usr/local/www/service... -
- - added ndp call to get MAC addr if remote client is connected via IPv6
- automatically hide `Copy MAC` button if arp... -
-
05:46 PM Bug #7249: firewall_rules.php & firewall_nat.php: Replaces underscores with spaces in aliase names
- Cool... This will help pfBlockerNG as all the Auto rules are *pfB_<aliasname>_v4*... Thanks Steve!
-
04:28 PM
Bug #7249: firewall_rules.php & firewall_nat.php: Replaces underscores with spaces in aliase names
- Yes. Missed it by an hour :)
-
04:19 PM Bug #7249: firewall_rules.php & firewall_nat.php: Replaces underscores with spaces in aliase names
- Steve Beaver wrote:
> Changed the code to replace '_' with '_<wbr>' (word break opportunity). Allows a long alias n... -
03:25 PM
Bug #7249 (Feedback): firewall_rules.php & firewall_nat.php: Replaces underscores with spaces in aliase names
- Changed the code to replace '_' with '_<wbr>' (word break opportunity). Allows a long alias name to word-wrap, but r...
-
03:08 PM
Bug #7249: firewall_rules.php & firewall_nat.php: Replaces underscores with spaces in aliase names
- That is not exactly a bug, the underscore is deliberately replaced with a space for display. It seems to have been a ...
-
- I have a number of firewall aliases that contain underscores. The underscore is replaced with a space when viewing a ...
-
-
-
-
-
- 05:39 PM Revision 3093b965: Fix for bug 6966 https://redmine.pfsense.org/issues/6966
- Change-Id: I9471c2bbd8941e70965a86d369c8de87be9a4417
(cherry picked from commit 109a304e154a179bd340b06880ce95baec4da... -
- 05:22 PM Revision 7603794b: GET/POST conversion vpn_ipsec*
- 05:06 PM Revision 3312b65f: GET/POST conversion interfaces_assign
- 05:02 PM Revision 8dce7a92: GET/POST conversion interfaces_wireless*
-
- User feedback suggests the sorted menu was better, despite the lack of consistency elsewhere.
This reverts commit 96f... -
- User feedback suggests the sorted menu was better, despite the lack of consistency elsewhere.
This reverts commit e5d... - 04:57 PM Revision 965717c4: GET/POST conversion interfaces_vlan_edit
- 04:54 PM Revision 5b075645: GET/POST conversion interfaces_vlan
- 04:45 PM Revision 87b458b5: GET/POST conversion interfaces_qinq*
- 04:40 PM Revision f34455d8: GET/POST conversion interfaces_ppps*
- 04:34 PM Revision 41063bd7: GET/POST conversion interfaces_lagg*
- 04:25 PM Revision e1a5d73c: GET/POST conversion interfaces_groups*
- 04:21 PM Revision 5947395d: GET/POST conversion interfaces_gre*
-
- Thank you! Using Network(s) instead of Host(s) worked.
-
- You can't use a host type alias for a masked network like that, use a Network type alias instead.
-
- I'm trying to create a IP Alias with a /16 subnet. This fails with the following error.
* Subnet is too large to e... -
- 04:18 PM Revision b591908c: GET/POST conversion interfaces_gif*
- 04:16 PM Revision 2c391a23: Required fields - Alias Type
- should be a required field. And this 1-char change can also be backported to RELENG_2_3. I noticed this while looking...
-
-
- trafficgraph: Don't update the on screen visual graph while invisible,
which avoids creating a large queue of pending... - 04:12 PM Revision c5ae2b4d: GET/POST conversion interfaces_bridge*
-
04:11 PM
Todo #6767 (Resolved): Change logout from GET to POST request
-
- trafficgraph: Don't update the on screen visual graph while invisible,
which avoids creating a large queue of pending... - 04:10 PM Revision 8ea10c11: Required fields - Alias Type
- should be a required field. And this 1-char change can also be backported to RELENG_2_3. I noticed this while looking...
-
04:09 PM
Bug #7202 (Resolved): "Warning: sprintf(): Too few arguments in /usr/local/www/classes/Form/Group.class.php on line 65 Call Stack:
-
-
- 04:04 PM Revision edf69b0c: Example of setting required items
- (cherry picked from commit 32a85c63c9411463c98a0605772b3e2c01702971)
- 03:55 PM Revision 85877e3c: Require Name field in Shaper
- (cherry picked from commit 40dcb4b61a2c1213a0b3e213c78fddac845a0117)
- 03:17 PM Revision ddd3ffaf: GET/POST conversion system_routes*
- 02:54 PM Revision 20231404: GET/POST conversion system_groupmanager*
- 02:12 PM Revision ac5e11a7: Revise setHelpText to accommodate required fields
- 02:12 PM Revision 5f6c3712: Provide Javascript set_Required function
- 02:12 PM Revision 5b18b8a4: Provide CSS for required fields
- 02:12 PM Revision cc8783a5: Add "Required field" capability to Groups.class.php
-
- Tested 2.3.3 and 2.4, correct subnet is used.
-
- ops, untested yet
-
- works
-
- To be clear, what's the fix? Does it merely warn to use only ASCII, or does it now support Unicode properly?
-
- works
-
- upgraded hardware due to c2000 restored config and this now works so guess somethin in my dhcp6 leases file had a pro...
-
- This is a regression
- 01:35 PM Revision a04f6658: GET/POST conversion system_gateways*
-
- I tried to break it again and couldn't after last changes. Instead of closing it without hearing from more people I'l...
-
- Graham Collinson wrote:
> I saw an issue like this on the first power cycle of a new SG-2440.
> manually running fs... -
- I saw an issue like this on the first power cycle of a new SG-2440.
manually running fsck didn't find an issue but e... -
- Everything looks OK now. Thanks Phil!
-
- I believe it's all done now
-
- I have noted on GitHub a couple of commits in master that did not get back-ported. @rbgarga is back-porting them righ...
-
- Oh, I see now that you just committed that supporting code to RELENG_2_3. I noticed the issue this morning my time (w...
-
09:16 AM
Bug #7083: Put back some visual hint for required fields
- On which page do you see that Phil?
I assumed you synced in the last few minutes? -
- Reported in forum: https://forum.pfsense.org/index.php?topic=125403.0
I am seeing the "*" displayed in the (some) pl... -
08:43 AM
Bug #7083: Put back some visual hint for required fields
- The mechanism required to do this has been ported to 2.3.3 but it looks like quite a few pages do not yet have the '*...
-
- Looks like this was partially merged back to 2.3.3 but not all of it. Fields have the * before the name and are not s...
-
- works
- 01:21 PM Revision ba14d48e: GET/POST conversion system_gateway_groups*
- 01:18 PM Revision 109a304e: Fix for bug 6966 https://redmine.pfsense.org/issues/6966
- Change-Id: I9471c2bbd8941e70965a86d369c8de87be9a4417
- 01:05 PM Revision bda120a4: GET/POST conversion system_crlmanger.php bis
- 01:03 PM Revision d565c182: GET/POST conversion system_crlmanger.php
-
- works
-
- PR has been merged
-
- works
- 12:52 PM Revision 59d06739: GET/POST conversion system_authservers.php
-
- works
-
- PR has been merged, thanks!
-
-
- pull request for fix on github
https://github.com/pfsense/pfsense/pull/3522 -
- This simple patch appears to work.
Might want to add in further checking or change the way of identifying whether it... -
- Looks like this is caused because there's a mismatch between the ikeid in $config['ipsec']['phase1'] and the ikeid re...
-
- Reproduced issue with two test VMs. Setup a simple IKEv2 between the two with one child sa. When split connections ...
-
- I've seen a similar issue on a production system with IKEv2 and split connections ticked (Enable this to split connec...
-
- works
-
- works
-
- Applied in changeset commit:804f6a165fbb80deac018be43e8d41607fa67594.
-
- Since 2.3.3 is likely the last 2.3.x release and people may be running it a while, it would be good to pull in the ch...
-
- If you are going to backport this to 2.3.3 Bug #7206 is also needed.
-
- works (haproxy for instance)
-
- works
-
- I've spent several days getting my VPN working and learned a lot in the process.
I've made a little patch here:
h... -
- really fixed now!
-
- works
-
- works
-
- Not finished yet
-
- Well it the update doesn't fix those, you should submit them upstream (or at least FreeBSD bugzilla).
-
- I have 3 recent coredumps saved - are these of any use to anyone for debugging or should I toss them?
-
- Attempting to fix the never ending core dumps with the current version. (Happens pretty much on any restart.)
-
-
-
-
- Commit reverted.
-
- I'll take this, looks like maybe the consistency doesn't weigh up against the inconvenience of the menu being unsorte...
-
-
- Don't have a solution (yet) but FYI in case some people are watching this ticket and not the others/forums, I did cre...
-
10:53 AM Feature #1189: Gateway: Multiple monitor ips
- I would also like to see this as a feature. This one has been open for a while now, and many of the hardware solution...
-
- Yep, that's better, thanks!
-
- This one shows up under "pfSense packages". Maybe because the category is set to "Unbound".
Other "modern" unbound i... -
-
-
-
-
-
-
-
- Applied in changeset commit:7790e0dfaee5f4f1707a8bb6c6e8abf03b2001c2.
-
- 03:50 AM Revision 06f6b161: GET/POST conversion
-
- The javascript nonsense dating back to Windows 9x/IE5 days actually shows local time on the client, severely confusin...
-
- Should work now: https://github.com/pfsense/FreeBSD-src/commit/5c1daa5ea1098b67d4c331d5e21b39178d616031
-
12:35 AM Feature #7244 (New): Publish pfsense as a Vagrant Basebox
- Hello pfsense!
The pfsense project should make it easy to provision pfsense by publishing an official pfsense vagr...
02/09/2017
- 10:35 PM Revision 878d6f72: GET/POST conversion system_advanced_ioctl
- 10:01 PM Revision fe914124: Typo
- 09:53 PM Revision e8afd822: GET/POST conversion for camanager and certmanager
-
- Chris Linstruth wrote:
> Or are you talking about installing a CA in pfSense so connections *it* makes outbound can ... -
- Or are you talking about installing a CA in pfSense so connections *it* makes outbound can be trusted/verified when c...
-
- This looks like another redmine that should be a forum post.
Sending the self-signed CA along with the certificate... -
- Kill Bill wrote:
> Apparently we have a language problem here, so perhaps let's try again in a more simple way: WTH ... -
- Apparently we have a language problem here, so perhaps let's try again in a more simple way: WTH is "included in SSL"...
-
- Kill Bill wrote:
> Am I the only one who cannot make sense of the request? No, self-signed certs will never be seaml... -
- Am I the only one who cannot make sense of the request? No, self-signed certs will never be seamless with browsers, o...
-
- Option to have an internal or imported CA (such as an imported self-signed CA) included in SSL for verify peer for do...
-
- - change $do_ping default value to 'true' (which emulates the previous default behavior) to avoid any unexpected results
-
02:15 PM Feature #4821: PPPoE WANs do not take full advantage of NIC driver queues for receiving traffic
- Hi Jim, just wondering if this is still something that might make it into pfSense 2.4.0? I would love to use the maxi...
- 01:52 PM Revision e04daed0: Allow GET-to-POST js to handle confirmation dialogs on delete (anything)
- 12:54 PM Revision 3e142087: setHelp and gettext format vpn*
-
-
-
-
-
-
-
-
- 10:51 AM Revision dd23f616: status_upnp remove nested getext()
- I don't think this does anything useful.
(cherry picked from commit 3224663a3759935b47406c789b9f5cea3eb88136) -
-
-
-
- Fixed in 0.52_5
- 10:37 AM Revision 781d9ce4: setHelp and gettext for system*
- 10:31 AM Revision 4dd437e4: Fix keylength.com href in system_usermanager
- The literal <a href=... text was displaying here, not an actual link to keylength.com
While here, reformat to take th... - 09:45 AM Revision 83d31192: Fix system_gateways_edit setHelp sprintf warning
- The code at line 759 emitted a warning because of the bare '%' in the string.
Other changes are to clarify and tidy u... - 07:40 AM Revision 7f0d6ccf: setHelp and getttext format for status*
- 07:34 AM Revision 3224663a: status_upnp remove nested getext()
- I don't think this does anything useful.
-
- Steve Wheeler wrote:
> I ran some tests with this and was unable to make it work. Adding 'route-to lo0' to the pass ... -
- Openvpn Peer to Peer (ssl\tls) 2 client connection
Openvpn route only first network in server openvpn IPv4 Remote ne... -
- - Reworked based on recent comments from @rbgarga
-
05:10 AM Bug #7209: Something is seriously wrong with firewall aliases
- 2.4-latest as of today, fresh install - confirmed NOT fixed. Just as I already said in one of my prev posts
>And I d... -
04:40 AM Bug #7241 (Not a Bug): OpenVPN CSC Tunnel Network not accepting net30 addresses
- I'm migrating a client to pfSense, and they have an OpenVPN server which still uses net30 topology, with some client-...
-
04:31 AM Bug #7116: a floating 'match' rule on LAN does not put traffic from a broswer on a clientpc into a shaper queue
- Pi Ba wrote:
> Without quick it didn't work either. Only changing it to 'pass' made it work.
I'm seeing the same ... - 04:06 AM Revision 046346e0: services_dyndns_edit % needs to be escaped
-
02:44 AM pfSense Packages Feature #7221: ACME package : add standalone mode & specify port used
- Having the package automatically open/close ports 80 and 443 when issuing/renewing certificates would be great. I don...
-
- It did not help.
Ok. I restored uFw settings on factory. Assigned VLAN 11 on cpsw0 and chose it as WAN
I can see ... -
01:22 AM Bug #7240: OpenVPN Client bug
Time Process PID Message
Feb 9 17:15:10 openvpn 40490 Initialization Sequence Completed
Feb 9 17:15:10 openvpn 40...-
- Latest snapshot has led to the following log entry and failure to utilise the OpenVPN gateway:
Feb 9 17:13:24 open... -
01:18 AM Feature #7239: DNS Resolver enable reverse dns override for single host
- mehh, probably invalid.
Creating a host override already creates a pointer entry as well.
eg /var/unbound/host...
02/08/2017
-
- DNS resolver only allows individual host overrides for forward lookups, not reverse.
Use case: (sloppy) ISP doesn'... -
10:32 PM Bug #7238 (New): Menu layout broken when using "Hostname in Menu" with long hostnames
- It is good to have the hostname in the menu for quickly identifying the gateways, however almost all of our hostnames...
-
- Jim Pingle wrote:
> PR was merged
Confirm fixed. - 08:23 PM Revision f0136b17: Automatic GET to POST functions moved to pfSenseHelpers.js so they can be used by any page
- 07:22 PM Revision d3f59a8c: Improve comments
- 07:15 PM Revision f5c9c0c7: Experimental method to convert GET calls to POST
- 04:47 PM Revision 71ffc048: Merge branch 'master' into sethelp-7
- 04:43 PM Revision 3fd41815: setHelp strings for services*
-
04:28 PM Bug #7202: "Warning: sprintf(): Too few arguments in /usr/local/www/classes/Form/Group.class.php on line 65 Call Stack:
- I navigated in almost all screens previously affected and can confirm everything is fixed with the pages previously a...
-
08:17 AM
Bug #7202: "Warning: sprintf(): Too few arguments in /usr/local/www/classes/Form/Group.class.php on line 65 Call Stack:
- This problem has now been fixed in a more generic within the Form classes so there should be no other cases, with or ...
-
07:46 AM
Bug #7202: "Warning: sprintf(): Too few arguments in /usr/local/www/classes/Form/Group.class.php on line 65 Call Stack:
- Fixed embedded '%' in squidguard.inc
-
- This problem remains with SquidGuard, in several tabs, like this in
Services > SquidGuard Proxy Filter > Common AC... -
- - incorporate suggestions from @rbgarga with slight modification
-
03:35 PM Bug #6406: Web process becomes unresponsive producing 502 Bad Gateway nginx
- I've seen this symptom frequently with pfBlockerNG and large lists. I also don't run the IPsec widget.
The comm... -
12:05 PM Bug #6406: Web process becomes unresponsive producing 502 Bad Gateway nginx
- Just Restarted PHP-FPM on a system with the following (no pfblocker installed):
* System Information
* Traffic Gr... -
11:56 AM Bug #6406: Web process becomes unresponsive producing 502 Bad Gateway nginx
- Jim Pingle wrote:
> Which dashboard widgets do you have visible?
Right now I have the following widgets open:
* ... -
- Bryan Fehl wrote:
> I just ran into this myself. Strangely, this issue causes all clients who try to connect with O... -
- Steve Beaver wrote:
> Sorry to re-hash this, but since it has just been assigned to me I need an update.
>
> Some... - 03:34 PM Revision d030ca9c: services_dhcpv6_relay fix setHelp array parameter
- same thing here
- 03:16 PM Revision 13fa32eb: services_dhcp_relay fix setHelp array parameter
- Another one using the old array format.
- 03:02 PM Revision 2241553c: Rever changes escaping '%' chars in help text. No longer required.
-
- Added standalone HTTP and TLS options with configurable port.
A bind address isn't going to be viable at the momen... - 02:07 PM Revision c74b018d: Only use sprintf in setHelp() if more than one argument is received
- This should eliminate all the issues caused by packages with embedded '%' in their text
-
- Fixed in ACME 0.1.11 which was just pushed, you can now choose the key type and algorithm.
-
- No, I haven't tried it on 2.4 yet, however I digged into sources on 2.3.2_p1 and reproduced it step-by-step while col...
-
- Did you try it on 2.4 as requested?
Either you are leaving out a config state/step or it's not an issue we can rep... -
- What? Rejected based on _assumptions_ that it _possibly_ just me screwed up something on my instance or that it _poss...
-
- Whole lot better indeed. ;)
!https://i.imgsafe.org/b65eeb532c.png! -
- Finally figured it out, fix is coming in 0.1.10 that I just pushed. Also made the box take up the whole width.
-
- That would be a better fit for a separate bug report. This formatting issue is enough of a PITA on its own.
-
- Yeah, I also failed to find any relevant code fix. LOL.
Also, the first row in the "Table" does not autoexpand the... -
- I've been looking at that but not having any luck so far. The code, by all appearances, should be taking up the whole...
-
- This one's so bad that I have no clue what to enter where.
!https://i.imgsafe.org/b3aab299c4.png! -
- Well yeah, the thing is not exactly simple readable code :D Being hidden wouldn't really be much of an issue if peopl...
-
- The input validation does need work but it's going to be rather complex to pull off. That should probably be a separa...
-
- Also, apparently there's lack of input validation here (i.e., at least those fields should be required so that people...
-
- In the Domain SAN list, the first row in the table does not auto-expand the fields with required settings. See screen...
- 09:49 AM Revision 5dd8682c: setHelp format for services_captiveportal
- 09:21 AM Revision 310f4f21: Part fix #7233 keep correct staticmap_array_index
- The index needs to be incremented even for entries that were skipped for display because they (for whatever reason) h...
-
- 09:17 AM Revision 9aa3c5e8: Part fix #7233 keep correct staticmap_array_index
- The index needs to be incremented even for entries that were skipped for display because they (for whatever reason) h...
- 09:05 AM Revision c940afee: Part Fix #7233 Allow deletion of empty static map entries
- (cherry picked from commit 2ea70e1a474fd871a007c76841f2a33f34082c58)
-
-
- /etc/inc/util.inc:
- arp_get_mac_by_ip() updated to support IPv6
- attempt at code streamline
/usr/local/www/service... -
- Kill Bill wrote:
> There's already #6023 for netmap + shaping.
"Shaping" is a hack that shouldn't have happened. -
- Steven Kreitzer wrote:
> Sandeep K V wrote:
> > Hi Steven Kreitzer and Jim Thompson isn't this the expected way the... -
- In general, I'd say people who wish to use Snort/Suricata as IPS should look into divert sockets instead. The netmap ...
- 04:26 AM Revision 2ea70e1a: Part Fix #7233 Allow deletion of empty static map entries
-
04:05 AM Bug #7164: NTP page allows adding more time server rows than it saves to the configuration
- Build 2.4.0.b.20170207.2344
Test:
* Under Services -> NTP
* Attempt to add 11 server addresses
Result: Er... -
-
- Build 2.4.0.b.20170207.2344
Test actions:
* Install tftpd
* Remove tftpd
The status displays the packag... -
03:59 AM pfSense Packages Bug #7229: Package Manager Update "Suricata" failed
- Actually i copied the failure message from the one i've found in pfsense forum, but mine was very similar. Problem is...
-
- Just to be sure, did you put a firewall pass rule onto the interface that is the VLAN? It will need that in order to ...
-
I have updated to ...-
- Applied in changeset commit:2ea70e1a474fd871a007c76841f2a33f34082c58.
-
- During IPsec performance tests on 4860 I did not observe significant IPsec performance increasing if HW acceleration ...
-
- During performance test 2440 I noticed quite strange behavior of ntpd. One overloads CPU core during IPsec session if...
02/07/2017
-
- PR https://github.com/pfsense/pfsense/pull/3506 will let people delete an empty entry, if they get one somehow.
-
- Pull Request https://github.com/pfsense/pfsense/pull/3505 to make sure the index counter in status_dhcp_leases keeps ...
-
- Forum: https://forum.pfsense.org/index.php?topic=125180.0
In the past, somehow (and I have seen it on systems of m... - 09:35 PM Revision 0f742e51: diag_backup do not use button text for comparisons
- (cherry picked from commit 9a7e1c9580c5779c86bc97d6d82c43401c7a4b12)
-
-
- Fixed
-
- Applied in changeset commit:5baea4da88fd6c093582d9c3e9b67cce5d6a1013.
-
- update_config_field() in wizard.php needs to use eval to construct a variable name that is several array levels deep....
-
- Fixed
-
- Applied in changeset commit:6ac61204bc9e4cff54c818ecc71d20d2626a02e1.
-
- On pkg.php "pkg_filter" is not encoded before output - It requires a package use pkg.php and that it has include_filt...
-
- Fixed
-
- Applied in changeset commit:0f026089f65d92328d680443de5f9a90af50115c.
-
- easyrule.php allows parameters passed by GET without a confirmation step, which makes it possible to add firewall rul...
-
- Fixed
-
- Applied in changeset commit:2c06742d784cb7ec85151327fd753536d98fbcc1.
-
- The "from" and "to" parameters on pkg_mgr_install.php need htmlspecialchars() before output or they can be used as an...
-
-
-
-
- PR was merged
-
- PR merged
-
- The confirmation page displays the submitted parameters for an extra user sanity check. Also fixed a bunch of page fo...
-
- The confirmation page displays the submitted parameters for an extra user sanity check. Also fixed a bunch of page fo...
-
- The confirmation page displays the submitted parameters for an extra user sanity check. Also fixed a bunch of page fo...
-
-
- Kill Bill wrote:
> NOYB NOYB wrote:
> > My guess is pear Mail will never be patched to fix this STRIPTLS security h... -
- NOYB NOYB wrote:
> My guess is pear Mail will never be patched to fix this STRIPTLS security hole.
Well, certain... -
- Jim Pingle wrote:
> Lobby to the PEAR crew to import the patch and we'll add support once it's in there. We have mai... -
- Lobby to the PEAR crew to import the patch and we'll add support once it's in there. We have maintained a lot of cust...
-
- Kill Bill wrote:
> Well, I'd hazard to say because it's just another thing to maintain with pretty much no gain? Wan... -
- Well, I'd hazard to say because it's just another thing to maintain with pretty much no gain? Want to be sure TLS is ...
-
- Why can't pfSense customization be made to the pear Mail package, like is done for some others packages, to add the r...
-
- We switched over to the Pear Mail package and at the moment I'm not seeing any equivalent option in their code. It wo...
-
- That wasn't worded very well. Strike that first sentence. This has nothing to do with the "Enable SMTP over SSL/TLS...
-
- The "Enable SMTP over SSL/TLS" option does not enforce the use of encryption.
Previous versions also had "Enable S... - 05:06 PM Revision 9570449e: interfaces_ppps_edit remove embedded HTML from setHelp string
- There was only one of these remaining to do.
- 04:58 PM Revision dcef6e2d: interfaces_ppps_edit fixes that will work on 2.3.3 also
- 1) Make "The MTU is too big" message actually come out. The code around line 300 was rubbish (maybe from before boots...
-
- 04:52 PM Revision 36245b2f: Fix #7226 Package installation message is incomplete
- This makes it remember pkgname after the install finishes and the form is re-submitted.
(cherry picked from commit d1... -
- 04:52 PM Revision c0e46e9a: pkg_mgr_install remove embedded HTML from result strings
- (cherry picked from commit 682008ff758b942d85ed007b485e0b2fa8e3a11c)
-
-
-
-
- 04:42 PM Revision d12bc864: Fix #7226 Package installation message is incomplete
- This makes it remember pkgname after the install finishes and the form is re-submitted.
-
- Would like to see support for NAT64/DNS64 in pfsense. Deployment of DNS64 outside of the gateway is somewhat convolu...
- 04:29 PM Revision 682008ff: pkg_mgr_install remove embedded HTML from result strings
-
- That's very interesting to know that we are having similar issues Joe!
I hope that either this can be resolved or ... -
03:57 PM pfSense Packages Bug #7223: IPv4 Rules not working in Inline Mode
- James Webb wrote:
> James Webb wrote:
> > Kill Bill wrote:
> > > Your own IP as in something from HOME_NET? Not ex... -
- James Webb wrote:
> Kill Bill wrote:
> > Your own IP as in something from HOME_NET? Not exactly useful test either.... -
- Kill Bill wrote:
> Your own IP as in something from HOME_NET? Not exactly useful test either. In general, taking sim... -
- Your own IP as in something from HOME_NET? Not exactly useful test either. In general, taking similar things to the f...
-
- Kill Bill wrote:
> Just to be clear here - If you are looking at the Blocks tab, that is NOT the place to look at wi... -
- Just to be clear here - If you are looking at the Blocks tab, that is NOT the place to look at with the inline mode.
-
- After adding the following rule to custom.rules:
@drop ip [108.74.97.21, 82.132.247.191] any <> $HOME_NET any (msg... -
-
-
-
-
- There is no such code in Suricata package. This is pkg(7) bug. Remove and reinstall the package.
-
- Error message while updating suricata to 3.1.2_2
Also happened from 3.0_7 to 3.0_8 (reported on pfsense forum: [[h... -
-
-
03:48 PM Bug #7232 (Resolved): haproxy_pool_edit.php -- sprintf() too few arguments
- https://github.com/pfsense/FreeBSD-ports/blob/devel/net/pfSense-pkg-haproxy/files/usr/local/www/haproxy/haproxy_pool_...
-
03:35 PM Bug #7231: Web UI does not properly remove priq shaping rules when deleting an interface which causes subsequent rule failures without warning in the UI
- I think this was accidentally posted in the pkg's section. Could someone move it to the proper area of pfSense?
-
- Reproduce:
1. Provision pfSense 2.3.2 with 1 WAN and multiple LAN's.
2. Configure priq traffic shaper to limit... -
- I can't reproduce this, it's possible it's a side effect of something else in your configuration. Even on 2.3.2_1 eve...
-
- 12:52 PM Revision 3cc22ff2: interfaces_ppps_edit fixes that will work on 2.3.3 also
- 1) Make "The MTU is too big" message actually come out. The code around line 300 was rubbish (maybe from before boots...
-
-
-
-
-
- This reverts commit e6068596baf4307fe3eb9866072800e4c23b6840.
- 11:58 AM Revision e6068596: setHelp formatting for interfaces.php
- There was a fair bit of it, so I have put this in its own pull request.
1) Gets HTML out of the strings that go for t... -
- 11:58 AM Revision baae9d9f: fbegin.inc and fend.inc obsolete
- (cherry picked from commit 5af0922d75724e1eac89017173457f57842387f8)
- 11:58 AM Revision bd44e2af: fbegin.inc and fend.inc are no longer used
- (cherry picked from commit c09188a21938f7b1d19fd845fa7e5b0712dd4a83)
-
- 11:40 AM Revision 690db956: Internationalization graph.php
- 1) A few extra strings to be translated.
2) The scale_type code values 'up' and 'follow' need to be kept as those str... -
-
- (cherry picked from commit 49f90f17bfaf2422d56160ad06ef5e2513beb1ba)
-
- (cherry picked from commit ac5ee07ee1daef2f43e728895290ca6d11efe0f3)
-
- (cherry picked from commit cb5961d1fa64a45cbec5ef5d677b57f8d62f50b5)
-
-
- @smtp.inc@ is gone from 2.4, it's using pear-Net_SMTP and other pear stuff. This bug is not really relevant any more.
-
- Maybe this could help? (Although it's in norweign, the code itself is pretty easy and simple)
http://www.webforumet.... - 11:14 AM Revision 93eae66f: license.php getext formats and breadcrumbs
- 1) I added a breadcrumb because the "?" "help on this page" icon does not display nicely without the breadcrumbs sect...
-
- Applied in changeset commit:d12bc864ceb5d656fc094bde7cf5ec96e24bdde9.
-
- See PR https://github.com/pfsense/pfsense/pull/3503
-
- I noticed this on 2.4-BETA, and tried 2.3.3-DEVELOPMENT and 2.3.2-p1 and they all do this.
I suspect this is due t... -
- Install, reinstall or delete a package. At successful end of the action a message is given in the GUI like:
'pfSen... - 10:20 AM Revision 7ae1b34f: setHelp and getttext for i*.php files
-
- While it would be nice, the output from iftop is not printed in a way that would be easy to parse programmatically.
... -
- Due to the lack of ipv6 functionality in rate and also it's development state (not developed since 2011, please corre...
- 08:48 AM Revision 398821c4: interfaces_bridge_edit setHelp and input_errors formatting
- This had enough things to be worth its own pull request.
1) Get embedded HTML out of setHelp etc strings.
2) Fix some... -
- Installed build 2.4.0.b.20170207-1441 and same errors appears in
* Services > Squid Proxy Server
* Services > Squ... -
- It loads shaper rules without error, I see traffic in queues. I pushed a commit to is_altq_capable() in interfaces.in...
- 07:39 AM Revision 4d0c9c59: setHelp formatting for interfaces.php
- There was a fair bit of it, so I have put this in its own pull request.
1) Gets HTML out of the strings that go for t... -
- PR has been merged, thanks!
- 01:15 AM Revision 5af0922d: fbegin.inc and fend.inc obsolete
02/06/2017
-
- I tried applying that patch to the script on my pfSense install, and the ACME challenge process worked just fine afte...
- 04:50 PM Revision c09188a2: fbegin.inc and fend.inc are no longer used
-
04:34 PM pfSense Packages Feature #7221: ACME package : add standalone mode & specify port used
- In acme.sh there are several options:
*Standalone mode:*
@acme.sh --issue -d aa.com --standalone --httpport 8... -
- Added the standalone mode, to be able to specify port used for the challenge and the possibility to automatically ope...
-
- - adds `Copy DUID` convenience button/js
- no page refresh or AJAX -
- - added ndp call to get MAC addr if remote client is connected via IPv6
- automatically hide `Copy MAC` button if arp... -
-
03:55 PM Revision 328f2789: Revert PERL related default options from net-mgmt/net-snmp
- (cherry picked from commit 282d025d9756ba8ace2bcfa092e87d5ad6d338da)
-
- (cherry picked from commit 282d025d9756ba8ace2bcfa092e87d5ad6d338da)
-
-
-
- 03:43 PM Revision 21e768ec: Do not attempt to translate '-DIVIDER-'
- '-DIVIDER-' is a keyword here. If someone does translate this, then the divider is going to go missing when in their ...
- 03:38 PM Revision f8a1be56: user/local/www inc file gettext improvements
-
- No change on the latest snap built after that commit.
-
- Jimp, can you check the latest build ?
Relevant commit: https://github.com/pfsense/FreeBSD-src/commit/5d8a65f506d8... -
- Should work now: https://github.com/pfsense/FreeBSD-src/commit/b95dbdb097fd2d5b148098bcc68e1f57b7dab544
-
- Fixed in acme pkg version 0.1.8 which will be available shortly
-
- Pushed a fix for this in acme pkg version 0.1.7, will be available shortly.
-
- 12:54 PM Revision 678f1131: Internationalization graph.php
- 1) A few extra strings to be translated.
2) The scale_type code values 'up' and 'follow' need to be kept as those str... -
-
- This reverts commit 7b25b213ee572f9d5471c29a3b3a1cff99cc55d3.
-
- This reverts commit e25261e4e210376e3db382a1ac52b61b9753a79c.
-
-
-
- (cherry picked from commit 1048585a08ac824057eea35c57fe359b9e6a48fe)
-
- 10:20 AM Revision 85ba2f8b: Use unique var names in Input.class.php
- (cherry picked from commit a66177645191359e5ce854d733e9be40ada3535b)
-
-
-
-
-
-
- 09:15 AM Revision 9a7e1c95: diag_backup do not use button text for comparisons
- 08:58 AM Revision a6617764: Use unique var names in Input.class.php
-
- * System > Advanced > Firewall & NAT
* Services > DNS Resolver > Advanced
Tested, no PHP errors displayed in b... -
- Stage1 done - PR 3456 has been merged. So users can cut down the amount of content in the existing widget.
Now to th... -
- The problem, as stated, was incorrect. It's a problem with vlan(4) ALTQ support in general, not specific to any hardw...
-
- What version of pfSense - 2.3.2-p1, 2.3.3-DEVELOPMENT or 2.4-BETA?
-
- Adding a VLAN interface on the Traffic Shaper doesn't work.
rc.filter_configure_sync: New alert found: There were... -
07:34 AM pfSense Packages Feature #7220: ACME client port and service config
- Jim Pingle wrote:
> That's a security limitation of Let's Encrypt. Nothing we can do about it.
>
> https://commun... -
- That's a security limitation of Let's Encrypt. Nothing we can do about it.
https://community.letsencrypt.org/t/let... -
- Hi, any way to configure a port of the http server, i dont use 80 or 443 and is not possible to active letsencrypt.
-
07:31 AM pfSense Packages Bug #1620: Can't use transparent proxy when using bridge.
- I ran some tests with this and was unable to make it work. Adding 'route-to lo0' to the pass rule did not allow this ...
-
- There are several assumptions that had to be made there for the time being to get it working in a basic fashion (key ...
- 06:06 AM Revision 500272bb: Do not pass empty string to gettext
-
- 03:55 AM Revision 1e3443df: Remove unused restore_ver from diag_backup
- I cannot see where this is used any more. The functionality seems to now be done in diag_confbak
- 01:44 AM Revision f64a22e8: Escape '%' in help text
-
-
- Fixed in the latest snapshot.
-
- This may be the tradeoff of the fix, in reality won't disable the multiple queues but only one is going to be used an...
-
- Fixed in 2.4.
02/05/2017
-
11:49 PM
pfSense Packages
Bug #7218: acme_inc.sh hard codes 'HMAC-MD5.SIG-ALG.REG.INT' for nsupdate key types
- The file is acme_sh.inc not acme_inc.sh.
-
11:47 PM
pfSense Packages
Bug #7218 (Resolved): acme_inc.sh hard codes 'HMAC-MD5.SIG-ALG.REG.INT' for nsupdate key types
- 'HMAC-MD5.SIG-ALG.REG.INT' is hardcoded in acme_inc.sh so that is the only type of key that can be used for dns-nsupd...
-
07:45 PM
Bug #7202: "Warning: sprintf(): Too few arguments in /usr/local/www/classes/Form/Group.class.php on line 65 Call Stack:
- Got it. Thanks.
-
- I just did a click through every page that my device has and found one more for which I couldn't find an existing rep...
-
06:55 PM
Bug #7202: "Warning: sprintf(): Too few arguments in /usr/local/www/classes/Form/Group.class.php on line 65 Call Stack:
- System -> Advanced -> Firewall & NAT has already been fixes and will be in the next snap
The two Squid warnings were... -
- SG-1000
2.4.0.b.20170204.2301
I was getting this issue on the Status Page. Can confirm that it is now resolved.
... -
- That isn't possible in pf. If you need time quotas, you'll have to use something that can hook into RADIUS for accoun...
-
02:06 PM pfSense Packages Feature #7217 (Rejected): x hrs per day total
- Currently there is a schedule feature in pfsense, where you can allow an IP from 4pm to 5:59pm for example, Mo-Su
... - 12:59 PM Revision 1a147fcd: setHelp and gettext changes for firewall* pages
- 12:37 PM Revision 01b34665: Firewall Rules Edit translate Source and Destination
- These bits were not translating.
Line 1406 could possibly be like:
```
$group = new Form_Group($name . ' ' . gettext... -
- Duplicate of Bug #6962 and fixed in 2.4 as noted above. Move on.
-
11:11 AM
Bug #7214: OpenVPN dh parameters above 4096 are not in /etc/
- Sorry if I wasn't clear, and this very well could have been fixed already in 2.4.
The main issue on 2.3 is not tha... -
09:28 AM
Bug #7149: igb driver queue related crashes
- After completely removing the queues entry in loader.conf.local and more than 5 days uptime, I think this issue is re...
-
- Works fine here with pfSense-pkg-haproxy-0.52_4.
-
-
- This is not a bug. The webroot method assumes you have a webserver already running. It won't run any webserver on its...
-
03:57 AM pfSense Packages Bug #7215 (Not a Bug): ACME challenge fails
- ACME challenge fails for "webroot local folder" method because no web server is listening on HTTP 80.
Setup:
1. p... - 07:35 AM Revision 5db70796: Remove HTML from strings in diags files
-
07:15 AM pfSense Packages Bug #7211: DNS Made Easy ACME script not parsing domain IDs properly
- Has been fixed upstream for a while:
https://github.com/Neilpang/acme.sh/commit/3cf85634ebb955ecee7616e88f4e1cef4458... -
- Comments please, if there is more/different flexibility that would be useful.
-
- In various places dates and times are displayed, e.g. rule creation and update date/time stamp.
It would be nice if ... - 04:34 AM Revision 08dbe1c5: Remove HTML from translated shaper setHelp
- and sections must not be translated - examples of IP address formats 255.255.255.255 and so on.
- 03:14 AM Revision dfbc9267: Merge pull request #3469 from phil-davis/fw-nat-out-edit-other-subnet
- 03:13 AM Revision 76f23988: Merge pull request #3472 from phil-davis/patch-2
- 03:13 AM Revision c846ce45: Merge pull request #3474 from lukehamburg/lukehamburg-patch-1
- 03:11 AM Revision 772faea6: Merge pull request #3471 from phil-davis/patch-1
02/04/2017
-
- You have to make them yourself if you want to use the larger ones.
Non-existing entries are hidden on 3.Here is wh... -
08:17 PM
Bug #7214 (Not a Bug): OpenVPN dh parameters above 4096 are not in /etc/
- In 2.3.2 (didn't check earlier versions) there is an option to select the dh parameter length when configuring a new ...
-
- 08:21 PM Revision e402b079: Do not sort the list of locales. That way it is easier to get to the language you want afte accidentally selecting something you no longer understand.
- 08:10 PM Revision 1e0c91d3: Fixed embedded '%' that was breaking setText.
-
07:13 PM Bug #7213 (Resolved): Hyper-V install, no disk found
- *Issue:* When installing 2.4 on Hyper-V 2012R2 Gen1 VM, the installer does not see any drives.
*Workaround:* From ... -
06:10 PM Bug #7210: Unable to set a Alias with FQDN's for IPv6 networks
- I know that it doesn't mean that it is www.google.com, that wasn't the point we are talking about networks here not o...
-
- Well that's an interesting idea but not exactly valid. If @2a00:1450:401b:803::2004@ is www.google.com, it doesn't me...
-
- You are right /128 is not reasonable, but /64 would be nice.
Example:
www.google.com AAAA record is 2a00:1450:400... -
- The hint could maybe be more clear. Network aliases can contain single hosts, and FQDN entries are always assumed to ...
-
- And what exactly do you imagine to happen with a thing like www.google.com/128? Yeah, the hint is piece of crap, the ...
-
- I am using the right place. I want to create a alias for an ipv6 network not for a ipv6 host. It shoud be possible, i...
-
- 1/ The mask is absolutely irrelevant for hostname.
2/ You are using the wrong place to do the job, select 'Hosts' fr... -
- As soon as a FQDN is entered, the CIDR mask changes to /32, therefore it's impossible to create a alias for IPv6 netw...
-
-
-
-
- 05:35 PM Revision 1c3608b3: system_advanced_admin remove href from setHelp strings
- I think that giving long strings that contain various HTML tags in-line through for translation is going to be error-...
- 05:09 PM Revision 31d71150: system_advanced_admin remove setHelp array
-
- As per this thread, there is no FREEBSD driver available for the SG-1000 crypto accelerator:
https://forum.pfsense... -
- I'm currently running pfSense 2.3.2_1, and I tried the new ACME package (0.1.5) with DNS Made Easy verification. How...
-
02:10 PM
Bug #7202: "Warning: sprintf(): Too few arguments in /usr/local/www/classes/Form/Group.class.php on line 65 Call Stack:
- Fixed. Thanks for finding those. Embedded '%' that needed to be escaped.
-
- Seeing the same issue as Dustin on System > Advanced > Firewall. Tested with 2.4.0.b.20170203.2002.
- 01:18 PM Revision dd4ecd98: Fix firewall_nat_out_edit dependency on English
-
- Also, wanted to note that the use of v4 signing enables newer regions that didn't support the legacy authentication t...
-
- I've tested changes and created a pull request to resolve this issue: https://github.com/pfsense/pfsense/pull/3473.
... -
- Yes, they are both 'hopefully' put to sleep with the changes done in the script patch I sent you and with dhcp6c chan...
-
- Patch is working well so far!
I think possibly #6944 and #7145 should be merged into this ticket? -
- Confirmed that affects OpenVPN clients that get assigned interfaces. I am running latest snap 2.4.0.b.20170203.2002.
-
02:44 AM Bug #7187: IPSec IKEv2 additional P2 not written to config
- By enabling _Split connections_ on P1 I was able to make it work, and now _statusall_ shows all the routing.
I don... - 02:30 AM Revision f5d762f9: System Information widget filter gettext()
-
- pfS version is 2.3.2-p1.
Unbound host overrides used in FW aliases:
- server.home 192.168.201.1
-- nas.home ... -
02/03/2017
-
-
- I think the report is erroneous. There should be no state association beyond a single ICMP Echo Request and it's Echo...
-
- Broken again.
https://forum.pfsense.org/index.php?topic=124915.0 -
09:26 PM
pfSense Packages
Bug #7208 (Resolved): ACME ftpwebroot doesn't work
- Below is the output of trying to use ftpwebroot. I redacted some data. As you can see from the log it doesn't appea...
-
07:45 PM Bug #7207 (Closed): Updates and Package Manager broken when pfSense accessed via SSH port forward
- Hello,
i am still setting up my pfSense device, so at this point it is just a client device connected to my netwo... -
- Service no longer works in that is receives a signing error even though all details are correct.
-
- It appears that Route53 has stopped working with the AWS3-HTTP authentication method sometime in the last month. This...
-
-
06:00 PM pfSense Packages Bug #7205 (Resolved): ACME package ignores DNS-Manual method, defaults to http-01
- My initial run using DNS-Manual as the method failed with the log suggesting DNS was ignored and http-01 was attempte...
-
-
-
-
-
- 03:49 PM Revision 4ebcee24: Several more fixes for setHelp to assist with translation
-
- To confirm, with the latest Let's Encrypt package, you can get by with LE only on the primary node. It can generate t...
- 03:07 PM Revision 4b329613: Fix #7202
- Fix several sprintf errors by escaping '%'s and removing '[ ]' which had been use to pass arguments to setHelp as an ...
-
-
02:29 PM pfSense Packages Bug #7197: Freeradius ldap authentication failed after update 1.7.5 to 1.7.6
- Thanks it's work fine
-
- PR has been merged, thanks!
-
-
02:12 PM Feature #7204 (Duplicate): Router Advertisements: Option to not advertise default routes
- I'm using a pfSense appliance in a temporary role mainly to enable "proper" IPv6 support on our network, though it wi...
-
02:00 PM Feature #6753: Interfaces list order not consistent
- +1 for making the interfaces list sorted alphabetically by their DESCRIPTION (NAME) defined in /interfaces.php.
T... -
- The interface order on Interfaces > Assignments is significant for HA purposes but otherwise alphabetical tends to be...
-
- Can I protest against this change? I upgraded to 2.4 and so far this is the only change that is really causing me a l...
-
- Some users think that it's related to the last package in the list, instead of being a legend.
https://forum.pfse... -
- Fixed by https://github.com/pfsense/FreeBSD-ports/commit/73246541879f9256f4241b2a22dc61e6e31e6bd2
-
- I figured out a way to fix this. It's not pretty but the way the client passes data and processes the api commands do...
-
- I am seeing a similar error on System -> Advanced -> Firewall & NAT
Warning: sprintf(): Too few arguments in /usr/... -
09:10 AM
Bug #7202: "Warning: sprintf(): Too few arguments in /usr/local/www/classes/Form/Group.class.php on line 65 Call Stack:
- Applied in changeset commit:4b329613ee7bb2dc85dd72035709853b83061a58.
-
08:59 AM
Bug #7202: "Warning: sprintf(): Too few arguments in /usr/local/www/classes/Form/Group.class.php on line 65 Call Stack:
- Thanks. Looks like there are a few embedded '%' that now need to be escaped, and arguments passed as an array in [ ] ...
-
- Just double checked it's not my patch. :) Clean snapshot update shows it.
-
- Posted by one of my testers after patching one of mine for testing, this is what he posted,
Martin if I goto the e... -
08:23 AM
Bug #7202 (Feedback): "Warning: sprintf(): Too few arguments in /usr/local/www/classes/Form/Group.class.php on line 65 Call Stack:
-
08:18 AM
Bug #7202: "Warning: sprintf(): Too few arguments in /usr/local/www/classes/Form/Group.class.php on line 65 Call Stack:
- I knew there would be some :) Could you attach the call stack or tell me which page you had selected when this occured?
-
- Problem with changes to the setHelp function or calls to it.
-
-
-
-
-
- (cherry picked from commit 821110e8ff76564c23783c554fc89cd9458683ac)
-
- (cherry picked from commit 6924a2bf34a70cd33284a28ca3575f33f9834375)
-
-
- ok, thanks for checking
-
- I got onto a production 2.3.2-p1 system and yes, it has that bug.
I expect it was fixed for 2.3.3 and 2.4 onwards by... -
- With 2.3.2 whatever hostname I query the urls are appended with _Array_. I'll try to setup a testing VM
-
- I tried on 2.3.3-DEVELOPMENT and 2.4-BETA and cannot reproduce this. If I put a valid name, then it gives me ip=1.2.3...
-
- The two links gets the _ip=_ parameter, but the generated url have _Array_ instead of the actual queried IP address
... -
- Fixed by commit:042911d34ab846e7241deeb9fd6469a1460febcf
-
- PR https://github.com/pfsense/pfsense/pull/3468
-
-
- In 2.4.0-BETA (arm) built on Thu Feb 02 12:37:50 CST 2017
Validation seems OK now, following description instructio... - 03:31 AM Revision 430f8fbc: Merge pull request #3466 from phil-davis/sethelp-gettext
- 03:27 AM Revision 314a088a: Remove unneeded sprint and gettext in setHelp
-
- 2.4.0-BETA (arm) built on Thu Feb 02 12:37:50 CST 2017
Still not fixed.
Not using RAM disk:
drwxrwxrwt 4 root ... -
- Can't see any change, but it would look less silly if the input field was below the Tick box
-
-
02/02/2017
-
- Thank you very much. I am testing these now. I got the binaries scp'd onto the test box. I moved the stock binarie...
-
- You cannot patch it Luke, it's an exe. I can send it to you when I am back at my desk.
-
- Martin, could you provide a link to the PR?
-
- According to this thread and posts from jimp the cpsw NICs in the SG-1000 don't support ALTQ at the moment:
jimp:
... -
-
-
-
-
-
-
-
- There may potentially be a need to prevent caching too. Even if pfSense doesn't cache it, there could be CDN's such ...
-
- Applied in changeset commit:186c7a6ca49af0d848c1082bfd7f6d9f0cde7046.
-
- Given the impressive number of details provided, my crystal ball says that - out of the ~4500 lines of code changed i...
-
- Hi
After updating freeradius package from 1.7.4 to 1.7.5 version, it's failed to authenticate via Ldap.
My Con... -
- 05:13 PM Revision d2a2f018: Remove unneeded sprintf from setHelp calls
- 04:56 PM Revision a9a7de59: COnvert the setHelp method(s) to accept conventioanl printf style argument lists. e.g.: setHelp("%d interfaces have been detected", $numIfs);
-
- I'll take it
-
02:21 PM Bug #7198 (Resolved): nginx-error.log is not circular and can fill filesystem
- Unlike almost all of the other log files contained in @/var/log@, nginx-error.log is not circular. Because it grows ...
- 01:14 PM Revision 718b3b0b: System Information Widget Filter
-
11:33 AM
Feature #7196 (Resolved): setHelp method should use more conventiol argument syntax
-
11:33 AM
Feature #7196 (Resolved): setHelp method should use more conventiol argument syntax
- The setHelp methods currently use an array to pass position arguments to sprintf. This has caused people to employ sp...
-
- In the config for igmpproxy, Network populates altnet and has to be in subnet format. Since the GUI has a drop-down f...
-
- When messing with another piece of JS for Squid, I figured out that I'd rather not be missing with it. :P So, it woul...
-
- I can't reproduce this on a current 2.4 snapshot. Additional addresses fail over all at once as expected.
-
- If you set a CARP VIP e.g. an address on the WAN subnet xxx.xxx.xxx.xx1/28. Then set another address, be it another C...
-
-
-
- It has come up before, at least on the forum, but I don't see an existing ticket for it yet. I agree it would be nic...
-
- And I have a feeling that breaking up the System Information widget has been discussed before, so there may be anothe...
-
- PR https://github.com/pfsense/pfsense/pull/3465 provides a first part of addressing this. It allows the user to choos...
-
- It's not his modem, he's getting a prefix, all is well there. Just looked at the video. Let me think on it...
Go... -
- PR https://github.com/pfsense/pfsense/pull/3463
-
- The Garmin only NMEA sentence PGRMF can be used by NTP as the time sync. Unlike the other NMEA sentences PGRMF includ...
-
- Constantine Kormashev wrote:
> I noticed with new firmware SG4860 uses CPU resources *on 25% more* than on previous ... -
- I noticed with new firmware SG4860 uses CPU resources *on 25% more* than on previous version.
Now it is 185% CPU IDL...
Also available in: Atom