Activity
From 04/01/2017 to 04/30/2017
04/30/2017
-
08:15 AM Bug #7015: IPsec not working behind NAT
- The problem I'm seeing with a GIF might be a command ordering or race condition issue.
Using 20170428 I set up a n... -
01:41 AM Bug #4723: Can't forward UDP fragmented packets with scrubbing enabled.
- I'm having this issue with 2.4:
- v2.4.0.b.20170429.0121 running on both firewalls
- local pf is virtualized, off... -
12:31 AM pfSense Packages Bug #7503 (Rejected): Web Interface and possible app configuration issue
- Version: 2.3.3_1
Vulnerability Scanner: OpenVas
Possible Vulnerability #1: SSL/TLS: Missing `secure` Cookie Attribu...
04/29/2017
-
05:23 PM Revision 27db3c75: Set default anguage in General Setup to en_US
- Since https://github.com/pfsense/pfsense/commit/fdcde31b4a910c4e058513c1e3f68a62e722da6b added German to the top of t...
- 04:26 PM Revision e6fa6784: Fix #7501 Add row-column prder option to interface stats widget
-
- in the interface statistics widget.
At the moment, if all the selected interfaces are down, the widget will just disp... -
- If an interface is down, the widget would write the interface description in a column heading but then omit the stats...
-
-
- Try PR https://github.com/pfsense/pfsense/pull/3715
That gives the option to:
1) Select just the interface stats it... -
04:19 AM Bug #7501 (Resolved): Interfaces statistics widget GUI + JSON (2 issues)
- Running 2.3.3-RELEASE-p1 using IE11 this widget has two issues:
1) If there are more than about 2 interfaces it sc... - 10:52 AM Revision 06f41f2f: Allow selection of stats items in interface statistics widget
-
05:35 AM Bug #7502 (Resolved): Cannot set router lifetime to 0 in radvd
- In the Web GUI (services_router_advertisements.php), it is not possible to set the router lifetime to 0. The GUI enfo...
04/28/2017
-
07:54 PM Revision 74ddcdb2: Disable gnid for now
-
-
- 04:24 PM Revision d126064d: Spelling
- 04:19 PM Revision a59c9835: space/tab
- 04:18 PM Revision cff0b00a: Add Netgate ID display to system info widget
-
- Sorry - Affected version is 2.3.3 & 2.3.3_p1, not 2.2.3.
-
- Existing installs and fresh installs of 2.3.3 & 2.3.3_p1 fail upgrade to 2.4 with the following errors:
Shared obj...
04/27/2017
-
-
-
- Some length numbers here do not match the strings they are comparing with. That looks very odd.
Note that:
```
substr... -
-
- Done
-
11:06 AM pfSense Packages Bug #7498: Deprecated option included in OpenVPN client export
- That makes sense. As you stated - if certs are being signed with the correct KU/EKU from 2009 in my mind it seems lik...
-
09:31 AM pfSense Packages Bug #7498: Deprecated option included in OpenVPN client export
- That should work fine for certificates made any time recently on pfSense.
The only potential problem I foresee is... -
- Okay that makes sense - thank you :)
However, surely by having the @ns-cert-type@ option included in all exports y... -
- The verification option you mentioned in the GUI controls verifying the name only, it does not verify the type, so it...
-
- As of OpenVPN 2.4 the directive: @ns-cert-type@ has been deprecated.
However, from my testing, the client export p... -
- IPsec tunnel status is shown correctly on Status > IPsec, but the IPsec widget on the dashboard does not show the cor...
-
07:53 AM Bug #7496: Chrome 58 added cert requirements which make it fail to accept the default self-signed certificates
- Hello!
Certificates work fine for Chrome 58 if you add CN also in 'Alternative Names' -> 'FQDN or Hostname'. -
05:24 AM Bug #6177: pkg update checking with no Internet access kills web GUI
- I can just say I have the same bug with 2.3.2 version. Forcing Ipv4 as indicated in comment 13 worked around this bug.
- 04:13 AM Revision 0fc6d49d: Allow customize of dashboard widget names
-
- Some length numbers here do not match the strings they are comparing with. That looks very odd.
Note that:
```
substr...
04/26/2017
-
09:06 PM Revision 3b010c68: Vendor MAC Retention - Update
- Only write if changed or missing.
Vast majority of reboots will not have a change so don't hit the file system with ... -
- Use a single file for vendor MAC retention (vendor_mac).
a) Writes only one file during boot up rather than a file f... -
- Relocate the vendor MAC retention file to /var/db directory.
a) It's more at home here with other network interface ... -
- Only use the vendor MAC retention file for restoring the vendor MAC when not booting.
a) During boot up the current ... -
- Rename 'spoof_mac' var to generic 'mac_addr'.
a) It may be the vendor MAC or a spoofed MAC.
b) Update the comment r... -
-
-
- (cherry picked from commit a260eda55905607e9adfd5d7c3fd779b115459d5)
-
-
-
03:47 PM Bug #6830: Chelsio T4/T5 CXGBE drivers not loaded as ALTq capable in the PfSense UI
- This bug does not appear to be fixed in 2.3.3-p1.
When I try to use altq with a Chelsio T520-SO-CR I still get an ... -
-
-
-
01:44 PM Bug #6400: assign_interfaces.php issues with large numbers of interfaces
- I'm seeing the same issue with a little over 200 VLAN interfaces on 2.3.3. Attached is the config I used.
-
- Applied in changeset commit:49a6769d99b4ea0306b0d619d14c3c0c841386e9.
-
- A client can send a hostname containing <script> tags and the DHCP daemon will accept it and add it to the leases fil...
-
- That's on my to-do list as well, I was thinking a "view certificate" icon/operation may be more useful, to print all ...
-
10:00 AM Bug #7496: Chrome 58 added cert requirements which make it fail to accept the default self-signed certificates
- Would be probably good to show the SANs in the Cert. Manager (in place/in addition to CN) -- somehow doesn't seem to ...
-
- This fix will be in 2.4 and 2.3.4 snapshots shortly. To apply the fix early, or to apply the fix to existing 2.3.3-p1...
-
- Applied in changeset commit:a636256cf9a7e27cf5d26c7677d0b7961e0fb143.
-
- You'll need to post on the forums in that case before there's some bug identified. The above patch is the only change...
04/25/2017
-
10:48 PM Bug #2800: OpenVPN doesn't work properly with intermediate/chained CAs
- Jim Pingle wrote:
> This works fine in the base system and in the export package. I can make a CA, then make an inte... -
07:31 PM Bug #7496 (Resolved): Chrome 58 added cert requirements which make it fail to accept the default self-signed certificates
- We have received the following report:
https://www.reddit.com/r/PFSENSE/comments/67kigf/pfsense_selfgenerates_cert... -
- 02:11 PM Revision 4d473e17: Add expiration field to NDP listing
- (cherry picked from commit fec2c3b73f05683b674d3b5351529268eadc8dd9)
-
- 02:01 PM Revision 39413152: Fix #7493 only check interface IP if static
- (cherry picked from commit 8c6190e82f83a7907ec2757e72d9a8eac496dd61)
- 02:01 PM Revision 039f3db5: Fix #7493 only check interface IP if static
- (cherry picked from commit 8c6190e82f83a7907ec2757e72d9a8eac496dd61)
-
-
- Luiz will take care of it
-
- when there are no WoL entries
(cherry picked from commit 66a5b767b1b533f6ce508a125404a2d8e3353c41) -
- when there are no WoL entries
(cherry picked from commit 66a5b767b1b533f6ce508a125404a2d8e3353c41) -
-
- when there are no WoL entries
-
- Applied in changeset commit:8c6190e82f83a7907ec2757e72d9a8eac496dd61.
-
- PR https://github.com/pfsense/pfsense/pull/3707 adds the ability to customize the widget title for widgets that have ...
- 02:45 AM Revision 8c6190e8: Fix #7493 only check interface IP if static
04/24/2017
-
- PR https://github.com/pfsense/pfsense/pull/3705
On that PR I describe an easier way to quickly demonstrate the gen... -
- 2.3.3_p1
-
- What version?
(I made some changes to interfaces.php "workflow" recently in 2.4 - so it would be handy to know if I ... -
- Summary:
I'm trying out a new pfSense install for a home lab, in which I modified the interface IPv4 settings. Whe... -
08:52 PM Feature #7495 (New): Ability to set TTL for local for Unbound host overrides and dhcp leases
- The TTL for host overrides and DHCP leases appears to be using a default value of 3600, it would be useful to be able...
-
- pfSense-upgrade 0.22 should fix it
-
10:08 AM Bug #7494 (Closed): SG-1000 - WAN Status UP - Hosts no internet connection
- SG-1000 brought online 12/24/2016 with default config.
Windows 8/10 hosts lost internet connectivity within 24 hou... -
-
-
04/23/2017
- 10:47 PM Revision fec2c3b7: Add expiration field to NDP listing
-
08:08 PM Bug #7492 (Closed): SG-1000 occasionally loses Internet connectivity
- Occassionally my SG-1000 is unable to communicate over the WAN. I can still log in over the LAN and the GUI is workab...
-
- Added an install message and some input validation and other tweaks @ https://github.com/pfsense/FreeBSD-ports/pull/344.
-
09:39 AM Bug #7491: freeradius2 (1.7.8) incorrect ca+crl pem file output format
- Kill Bill wrote:
> https://github.com/pfsense/FreeBSD-ports/pull/344
OK! It works! :-)
-
- https://github.com/pfsense/FreeBSD-ports/pull/344
-
- release 2.4.0.b.20170422.1955
configuring eap-tls ca and crl produce pem file output ( /usr/local/etc/raddb/certs/... -
- Having more is possible but not practical so the limit in the GUI is set at a reasonable maximum for most deployments...
-
05:36 AM Bug #7490 (Rejected): Limitation on number of L2TP users
- The number of L2TP user limited on 256 user
-
- There is nothing in this report except the subject, closing as invalid.
This a bug tracker, not a support system. ... -
-
- This a bug tracker, not a support system. Please post on the forum at https://forum.pfsense.org/ , there are plenty o...
-
07:38 AM Feature #7489: اتصال L2TP کاربران از روی بستر اینترنت و بررسی کندی سرعت
- Agradecia que escrevessem numa Língua mais universal. Sim há tradutores, poderia usá-lo mas vós também o poderias faz...
-
- म तपाइँको समस्या बुझेको छैन
-
- 这是英文版的问题追踪器
-
05:30 AM Feature #7489 (Rejected): اتصال L2TP کاربران از روی بستر اینترنت و بررسی کندی سرعت
- اتصال L2TP کاربران از روی بستر اینترنت و بررسی کندی سرعت
04/22/2017
- 06:37 PM Revision 8fa81c52: Reverted adding array() as second parameter to setHelp() calls.
- This was reimplemented in error as the new sprintf-based setHelp() was
checked in after this initial merge request wa... -
- Jessica Porter wrote:
> The urndis driver would be nice as well.
There's already #6293 for that. (See https://re... - 04:40 AM Revision 9425f22e: last two tab changes.
- 04:38 AM Revision 2ad654da: Added back the help text for DNS Made Easy.
- Not sure how I removed that earlier.
- 04:36 AM Revision 1247e53c: Maybe we are done with tab spacing now. I think it's manageable.
- 04:32 AM Revision 68246684: More tab space tweaks - maybe I'm done?
- 04:28 AM Revision 9055c5e5: Finished resolving spacing / formatting issues.
- This was clouding the real work done. It appears to have been a tab
reformatting issue that went berserk. - 04:21 AM Revision 6c6daeae: Resolved some unusual formatting errors that crept into the request.
- 02:59 AM Revision a741f6e8: Merge branch 'master' of https://github.com/pfsense/pfsense into
- dyndns_dreamhost
-
01:28 AM pfSense Packages Bug #7487: Status Traffic Totals doesnt persist through reboots.
- Sadly someone else will have to test, the system I am using as my router is 32 bit and 2.4 only seems to be available...
04/21/2017
-
08:28 PM Feature #7467: Add iPhone/Android/Generic USB tethering support
- The urndis driver would be nice as well. It would actually be nice if all USB modules were loadable kernel modules ...
-
- Highly unlikely to be a captive portal problem, but something with your local configuration. Could be a package, coul...
-
04:50 PM pfSense Packages Bug #7486 (Rejected): Captive Portal (CP): MS Edge and IE have interner access despite CP
- Well.. This sounds a Little dumb and I dont know wtf is going on tbh.
Well. At first, I better tell you about the ... -
- /var and /tmp handling was changed significantly in 2.4, please re-test there.
-
- Forgot to add the effected version as I did not notice the field till after I submitted, but I am running 2.3.3-RELEA...
-
- The persistent data for vmstat is stored on /var and when you have var and tmp on ramdrives, the data isn't backed up...
-
- PR Was merged and tested
-
- When scrub is enabled, a set of valid fragments can be re-fragmented improperly by scrub when exiting the firewall. W...
- 01:59 PM Revision f56fb70c: Update services.inc
- (cherry picked from commit 2e3768baa8e6e5793ce165f0d8f60b25bdbdb444)
- 01:59 PM Revision 6459f82b: Update services_dyndns_edit.php
- (cherry picked from commit df4c21fc24cc6ff38988ca866928f2f73b97b744)
- 01:58 PM Revision f7118bc8: Update dyndns.class
- (cherry picked from commit 74533d412818113372b7b1a4e46db48313fd965d)
- 01:58 PM Revision f290e28b: Update services.inc
- (cherry picked from commit 1bfa06953e0f440c3d6b71bbb3d671ef524899d4)
-
-
01:56 PM Revision 7663fe00: trafficgraphs, divide bandwidth by time when statistics where gathered to smooth out bumps in the graphs
- (cherry picked from commit eddb01316c7ad06c1798e629b6158db505a86118)
-
-
- Ah yes sorry, got some versions mixed up in my head..
-
01:44 PM pfSense Packages Bug #6182: HAProxy not supporting ALPN
- Pi Ba wrote:
> You can wait, but its still 1.0.2..
>
> [2.4.0-BETA][root@pfSense.localdomain]/root: openssl versi... -
- Pushing to 2.4.1 because the whole function should be changed to be optimized
-
- As of 2.4.0.b.20170421.0857 I'm getting the same ping errors with a GIF. dpinger's attempts to ping do create a state...
-
- This would not be possible without a proxy being involved, in which case you need to setup access controls in the pro...
-
09:30 AM
Bug #7484 (Rejected): Firewall Destination "This Firewall" not blocking all traffic
- A rule blocking traffic from "any" to "This Firewall" does not work if you open an external domain in the browser whi...
-
06:10 AM Feature #4796: Support Multiple FIBs in pfSense
- I see only one on 2.3.3:
@sysctl -a | grep fib
net.my_fibnum: 0
net.add_addr_allfibs: 1
net.fibs: 1
@
04/20/2017
- 09:28 PM Revision 2e3768ba: Update services.inc
-
-
-
-
-
- (cherry picked from commit ac24ac6bbb5b94e1eb8420404a9b7bd9daf998b7)
-
- (cherry picked from commit 11b9896609c2998106d5503fe2581bb3304b4a5f)
-
-
- (cherry picked from commit 64f8ec62ddd57241e4a8a755cade7ca8cd9196a6)
-
-
- 06:48 PM Revision 79a2945a: Do input validation on the actual array passed in
- I was tearing my hair out for a while. If do_input_validation() is passed some array of keys/values that has been ass...
-
-
- 06:00 PM Revision a8bee7cc: Simplify indexing of gateways array
- 05:16 PM Revision 7f8e4d5f: Escape IPv6 when passed to ndp delete command
- (cherry picked from commit 1d92faa34f7c9aaa97b1983f273d2d73285befb5)
- 05:16 PM Revision c14573f7: Add ability to delete NDP entry
- (cherry picked from commit 13105d9c79fe3ac8be2b01c152fb9fb6a95147b4)
-
- 05:03 PM Revision 726756de: Remember original alias name on edit input errors
- (cherry picked from commit 1271754326fe648093204296652398b1edd24912)
- 05:03 PM Revision 9dfd9007: Refactor update_alias_names_upon_change
- (cherry picked from commit 24807bfeaec218948937a1fdc2b4e863319e41a0)
-
-
-
- 02:40 PM Revision 1d92faa3: Escape IPv6 when passed to ndp delete command
-
- Using the setup described above I’ve also been having issues when trying to use IPsec Transport mode with either a GR...
-
- You can wait, but its still 1.0.2..
[2.4.0-BETA][root@pfSense.localdomain]/root: openssl version
OpenSSL 1.0.2k-f... -
- Ok, thanks that makes sense.
I excitedly wait for pfSense 2.4, and an ALPN capable HAProxy then.
-
- Joshua Ruehlig wrote:
> Ok, just to clear up my understanding. Is the following correct?
>
> If we build a port w... -
- Ok, just to clear up my understanding. Is the following correct?
If we build a port with openssl from ports, it no... -
- It would only fail if your NPS policy requires a specific NAS Identifier rather than using the client address. You ca...
-
11:39 AM Bug #7483 (Not a Bug): After renaming a WAN Interface its looses his Tier
- Hello,
after renaming a WAN Interface its looses his tier in all GatewayGroups.
If you rename your primary WAN it w... -
11:31 AM pfSense Packages Bug #6690: SURICATA IPS Issue - Kills VLANS & Traffic Shaper
- Jim Thompson wrote:
> Steven Kreitzer wrote:
> > Sandeep K V wrote:
> > > Hi Steven Kreitzer and Jim Thompson isn'... -
- I can't reproduce this on 2.3.3-p1 or 2.4 snapshots. I can use an LDAP name 50+ characters long and it still works in...
-
06:57 AM Revision a5c7f533: Fix a typo to add a missing space during the initial NIC setup on console.
-
03:25 AM Bug #6957: CARP arp reply with wrong src mac
- We have the same problems in our setup.
A switch is connected to two pfsense firewalls with a CARP setup. Since th...
04/19/2017
-
- It isn't a bug, it's a missing feature.
-
08:35 PM Feature #4821: PPPoE WANs do not take full advantage of NIC driver queues for receiving traffic
- Could we please have this changed from "Feature" to "Bug"?
- 04:04 PM Revision 563478f6: Revise row helper delete class
- 02:35 PM Revision 1059fc88: Fixed various issues with adding/deleting ACLs
-
- I'm sorry you feel that way, but that does not mean you can open a bug report for what is most likely a configuration...
-
01:52 PM Bug #7482: found 1 matching config, but none allows pre-shared key authentication using Main Mode
- By the way, I'm not going to post anything on the forum, I'm coming from there, other people is experiencing similar ...
-
- Very helpful, Jim Pingle, thanks a lot.
-
- This is not a support ticket system. Please discuss the issue on the forum. If a specific bug is identified, only the...
-
- pfSense 2.3.2-RELEASE
We have many site-to-site vpn's configured in our pfSense, an i386 vm running on vmware.
T... -
- Reverted
-
- Already added to factory installed
-
- I've reviewed deinstall functions for all packages and removed commands that can cause this symptom. It still can hap...
-
12:51 PM Feature #2358: NAT64 support
- Upvote
-
12:12 PM Bug #6223: IPsec + OpenBGPD fails with "PF_KEY socket: No buffer space available"
- Has anyone been able to test this with 2.4? Unfortunately I don't have a good test environment with IPSEC + BGP.
-
- First, that isn't the way you set OpenSSL to use the port now. It would be:...
-
- Pi Ba wrote:
> The extra build flag should probably be added to: https://github.com/pfsense/pfsense/blob/master/tool... -
-
-
-
-
-
-
-
-
-
-
-
- 03:34 AM Revision 3e20b9ca: Fix var/empty operation not permitted
-
- I made some tests with simple DNS answer/reply and noticed problem with states overload (250 clients and 250 servers ...
04/18/2017
-
-
-
- There is no way to NOT configure EAP in the package. Simply said, configuring the certs in the CA manager is *mandato...
-
- You may not realize it is enabled, but it must be, or you wouldn't get that error. At this point it is not a bug, but...
-
11:34 AM pfSense Packages Bug #7479: freeRadius not started after update to 1.7.8
- Jim Pingle wrote:
> Given the error, you had to have used it in the past.
eap? no, i not used EAP, never.
this... -
- A server certificate is necessary for EAP. Given the error, you had to have used it in the past.
-
- i not use Cert Manager. And EAP.
It is necessary? -
- Support for the old and redundant certificate manager in FreeRADIUS was removed. Create or import a server certificat...
-
- I upgrade freeraius and freeraius not started now
In log:
Apr 18 23:21:00 radiusd 11844 rlm_eap: SSL error err... -
-
-
-
-
-
-
- The extra build flag should probably be added to: https://github.com/pfsense/pfsense/blob/master/tools/conf/pfPorts/m...
-
- Kill Bill wrote:
> Joshua Ruehlig wrote:
> > Is it possible to set build options for dependent ports?
>
> See th... -
12:26 PM Bug #7481: pkg-framework - rowhelper ignores <advancedfield/>
- its a pkg framework issue, not a squid related bug.
-
- rowhelpers itens ignores <advancedfield/>
-
- while using textarea on a rowhelperfield, it saves contents on xml but does not show on gui.
also, it ignores the ... - 04:40 AM Revision b4538739: Add new IPv6 gateway to correct selectbox
- 04:22 AM Revision e8113404: Reload new gateway params after input errors
- 03:17 AM Revision de145400: Remove obsolete isAjax array key handling
-
03:04 AM Feature #4826: Allow configuration of multiple phase1 proposals
- this limitation of the pfSense GUI is getting more severe as older crypto gets more and more out of date. Right now, ...
-
02:32 AM Bug #7478 (Rejected): Diagnostic/Authentification test fails on Radius since 2.3.3
- since the changed NAS Identifier in v2.3.3 (https://redmine.pfsense.org/issues/6609) from systemname to "openVPN" the...
04/17/2017
-
- As stated on that page, the BNF is not complete. It isn't a specification, it is a rough guide.
-
10:09 PM Bug #7477 (Rejected): Log data does not match documented schema
- RE: https://doc.pfsense.org/index.php/Filter_Log_Format_for_pfSense_2.2
For example:
sequence-number="285519477... -
- I've identified numerous cases where log lines appear to contain extraneous data beyond the actual end of the line. F...
- 06:51 PM Revision a9dbf4df: Merge branch 'master' into ifgwadd
- 06:42 PM Revision f1bb5c7f: Validate gateway and interface together
-
-
- 03:32 PM Revision 4df266f5: Do input validation on the actual array passed in
- I was tearing my hair out for a while. If do_input_validation() is passed some array of keys/values that has been ass...
-
-
-
- 12:27 PM Revision dfafd8c2: Refactor IPv4 gateway add so field names are consistent with the IPv6 code
- 12:24 PM Revision 36ac7244: Fix IPv6 gateway add
- 11:56 AM Revision 1ede6e4d: Fix #7452 save new IPv6 gateway
- This is also needed, just like for IPv4 in commit https://github.com/pfsense/pfsense/commit/f3278171b1990622792256319...
- 11:02 AM Revision 7e45af77: Refactor gateway save
-
- See also: #7468
-
- Duplicate of #6293
- 07:20 AM Revision 161cd113: Refactor gateway parameter validation
-
- See PR https://github.com/pfsense/pfsense/pull/3697 for the same fix for adding an IPv6 gateway.
-
- Joshua Ruehlig wrote:
> Is it possible to set build options for dependent ports?
See the previous comment.
-
- Is it possible to set build options for dependent ports?
Maybe we can add an OPTION to set 'WITH_OPENSSL_PORT= yes' ...
04/16/2017
- 10:48 PM Revision 13105d9c: Add ability to delete NDP entry
-
06:25 PM Feature #7475 (Rejected): Status\System Logs\Firewall\Summary View
- Graphic by country - Traffic pass and block
-
- 11:19 AM Revision 80fe8369: Refactor get_configured_interface_list remove unused parameter
- 10:23 AM Revision f625f76c: Refactor get_configured_interface_list_by_realif remove unused parameter
- 10:18 AM Revision f593f80b: Refactor get_configured_interface_with_descr remove unused parameter
- 09:21 AM Revision 12717543: Remember original alias name on edit input errors
- 09:14 AM Revision 24807bfe: Refactor update_alias_names_upon_change
-
- Edit an interface. Choose "Static IPv4" and/or "Static IPv6".
Click the "Add a new gateway" button.
Scenario 1: E... -
-
- Duplicate of #7394
-
- 1) Edit an existing Alias that is used in a Rule/NAT etc - e.g. oldaliasname
2) Change the name - e.g. newaliasname
... -
- See also: #7473
And PR at https://github.com/pfsense/pfsense/pull/3694
04/15/2017
-
10:02 AM Bug #7468: Add Android tethering support - add urndis driver
- Already requested here: https://redmine.pfsense.org/issues/6293
I tested this and it works OK with my Nexus 4.
... -
02:58 AM Bug #7451: vpn_openvpn_client.php - Fields not hidden/processed correctly in chrome
- Looks good here. Thank you.
04/14/2017
-
08:53 PM
Bug #7444 (Resolved): pfSenseHelpers.js typo breaks captive portal stop/start/restart
-
08:52 PM
Bug #7445 (Resolved): pfSenseHelpers.js service naming restrictions plus lack of error handling
-
07:30 PM pfSense Packages Bug #7471: Cellular pkg errors on install
- Reassign to pkg author if this is specific to the cellular pkg
-
- Upgraded 2.3.3 to 2.3.3-p1, then installed cellular. Pkg install dialog:
> >>> Installing pfSense-pkg-cellular... ... -
06:16 PM Bug #6594: Package reinstallation post-config restore hangs if no Internet connectivity
- On 2.4.0.b.20170407.1403, backed up config, restored with no WAN connectivity, pfSense WEBGUI was accessible, console...
-
05:07 PM
Bug #7472 (Not a Bug): External Authentication servers with names longer than 48 characters fail to authenticate with OpenVPN server configured for TLS + User Auth
- Configure an external LDAP Authentication Server
Give it a name that exceeds 48 characters like 12345678901234567890... -
- We have seen that sort of thing in the past. A byproduct of how the weeks/months line up and perhaps a dash of DST in...
-
- Here's some better description: https://forum.pfsense.org/index.php?topic=127774.0
-
08:33 AM
pfSense Packages
Bug #7470 (Closed): Status Traffic Totals - March 2017 is missing
- March 2017 is missing in the Monthly view. Noticed by several users in the forum:
https://forum.pfsense.org/index.ph... -
- Renato Botelho wrote:
> I've found the way to reproduce it. It happens when you click on fa-trash icon. If you click... -
- This still has broken behaviour (to see Delete, you need to click Add), plus the whole thing needs backport to 2.3.x
... -
- Duplicate of #7310
-
- Over to Luiz
-
- A workaround was added on pkg for specific packages and versions when same situation happened there. In our case a co...
-
- After dig into it I found the root cause of the problem, which I will describe here and work on a fix later.
Durin... -
-
- Merged.
Note: This needs to go to 2.4 release notes. Configuring the certs is no longer optional, it's simply a re... -
12:53 AM Bug #7461: pftop no longer shows ALTQ "queue" view
- Can confirm this is resolved in version 2.4.0.b.20170412.1325
04/13/2017
- 11:05 PM Revision ef6e941e: Revise dev_mode change handler
- (cherry picked from commit 8a0af41adc9c29ccf7b8dabb3b7658abf46054a6)
- 11:04 PM Revision 8a0af41a: Revise dev_mode change handler
-
06:03 PM
Bug #7451: vpn_openvpn_client.php - Fields not hidden/processed correctly in chrome
- Took care of that one too
-
- Testing using system patches on 2.3.3. Looks good for vpn_openvpn_client.php. Still needs a second click for dev_mode...
-
07:20 AM
Bug #7451: vpn_openvpn_client.php - Fields not hidden/processed correctly in chrome
- Applied in changeset commit:dd3c646fa5744a550f91524035a92f509d6162cf.
-
07:14 AM
Bug #7451: vpn_openvpn_client.php - Fields not hidden/processed correctly in chrome
- onchange handlers revised to correct this issue
-
07:05 AM
Bug #7451: vpn_openvpn_client.php - Fields not hidden/processed correctly in chrome
- I am able to reproduce this on MacOS & Chrome. Looking at it now.
-
- Looks like mode does the right thing on the vpn_openvpn_server.php but dev_mode also requires that second click to up...
-
- Hmm. That's frustrating. I know what I saw. Tested multiple times.
Currently when I select SSL/TLS I get the share... - 12:13 PM Revision 3290b312: Fixed #7451
- Revised onchage handlers to obviate need for second click in Chrome on MacOS
(cherry picked from commit dd3c646fa574... - 12:12 PM Revision dd3c646f: Fixed #7451
- Revised onchage handlers to obviate need for second click in Chrome on MacOS
-
- Still Producing issues for me. Had to re-install pfSense on both devices in HA after encountering this bug.
-
- Queue view is working again
04/12/2017
-
06:06 PM Feature #7122: Add filters to various dashboard widgets
- Looks like the PR went in about 48hours after the last note.
Tested using build 2.4.0.b.20170412.1256
Checked... -
-
-
- I can't reproduce this at all here.
On 2.3.x the CRL field shows when it shouldn't, but that has been fixed on 2.4... -
-
- Confirmed here as well. Installing to eMMC (not mSATA) requires kern.cam.boot_delay="10000" and it is not added to lo...
-
- When a firewall has many local accounts, the time it takes for local_sync_accounts() to finish grows large enough to ...
-
10:39 AM pfSense Packages Bug #7438: Squid 0.4.36_2 Remote Cache Parent not working
- I had my linux guy edit the files with the lines you requested.
Same result
12.04.2017 11:36:14
10.24.1.70
TCP_... -
- I can't reproduce this on a fresh installation or upgraded firewall using the latest snapshot. Sounds like maybe your...
-
08:50 AM pfSense Packages Bug #7466 (Rejected): Status > Monitoring does not work
- When I got to Status > Monitoring I get this error: Error: JSON not returned. Check to make sure you have an active s...
-
- It works fine here when I test it. I don't have anything running on the target itself, but the connection and packets...
-
02:29 AM Bug #7463 (Rejected): FQDN Alias as "NAT Redirect target IP" fails to expand to IP
- When using a FQDN alias in the "Redirect target IP" field of a NAT rule, the rule will fail to work.
Steps to repr... -
- Please post on the forum or mailing list for discussion and diagnosis before opening a bug report. Once a specific bu...
-
03:06 AM Bug #7464 (Rejected): IPSec VPN - roadwarrior connexion - vpnc client
- Hi,
Whe have upgraded our pfSense to the latest version (2.3.3). Since, we have problems with IPSec VPN.
We can't u... -
- I can't reproduce this. There is nothing special about a /19 in a network alias. It works fine as a source and as a d...
-
05:44 AM Bug #7465 (Rejected): Firewall rules fail if using a /19 in an alias as destination
- Having a new phone system here so added in a /19 network into an alias and created the firewall rule so source intern...
-
- Relevant https://forum.pfsense.org/index.php?topic=119419.msg660754#msg660754
-
- iPhone tethering driver is present in FreeBSD https://www.freebsd.org/doc/handbook/network-usb-tethering.html
Abou... -
Android tethering driver is present in FreeBSD https://www.freebsd.org/doc/handbook/network-usb-tethering.html
A...
04/11/2017
-
-
-
-
- This reverts commit 1d7a414705794f2527dc1b7b3bb5419db1024bb6.
-
- This reverts commit d2495e5893baa63b2973b66f7c1b9787fada2e30.
-
01:25 PM Bug #4218: Bridge does not have AUTO_LINKLOCAL flag
- I can confirm that this is still an issue with 2.3.3-RELEASE-p1 - although either adding the link-local address manua...
-
- I'm seeing this now as well on 2.4. Just a basic run through the shaper, tell it to prioritize a couple things like H...
-
08:02 AM pfSense Packages Bug #7462 (New): HAproxy not rebinding properly after WAN DHCP IP change
- Hi,
This is copy/pasted from the forum (https://forum.pfsense.org/index.php?topic=121345.0?) as i have the same is... -
01:35 AM Bug #1943: PPPoE won't reconnect after link loss when using vr(4) NICs on certain ISPs only
- I am experiencing this issue with PFsense 2.3.2, running i386 nanobsd on an alix board.
Every time the upstream ro...
04/10/2017
-
-
- I'm not sure if this helps, but the bug persists when:
* Traffic shaper is deleted
* A new shaper is created using ... -
-
-
-
-
- On CSRF, call phpsession_end() before exit to avoid syslog warning
about open session
Submitted by: PiBa-NL -
-
-
- On CSRF, call phpsession_end() before exit to avoid syslog warning
about open session
Submitted by: PiBa-NL -
-
- 04:53 PM Revision 98ba645a: Fix UTF8 in base64 decode
- (cherry picked from commit 557e082696823ea5fa09a36d98f01775bf1e0c77)
- 04:53 PM Revision 557e0826: Fix UTF8 in base64 decode
-
-
-
10:19 AM pfSense Packages Feature #7456: pfblockerNG add supportto add or modify self-modified easylist style rule
- The next version of the package will have all of the Language specific EasyList feeds hardcoded.
Unfortunately, al... -
10:02 AM Bug #7309: ZFS - Can't find zroot, error 5
- OK, I could fix the issue by adding kern.cam.boot_delay="10000" to /boot/loader.conf.local
The problem possibly af... -
- Same issue here with an SG-4860 running ADI image (build date 09-04-2017):
Root mount waiting for: usbus0
Root mo... -
- Applied in changeset commit:6e71610ea3d146df3e620fb062ca2569a4e96ebf.
-
- On 2.4 the pftop command no longer has a "queue" view.
The port had ALTQ changed into an option, and now defaults ... -
09:17 AM Bug #6318: IPsec dashboard widget causes GUI failure
- I am also seeing this on 2.3.3. Is there any known work around other than removing the ipsec widget? Maybe changing...
-
-
- Oops forget about this issue. I have been mislead by the rough ergonomy of the screen. I didn't figure I had to valid...
-
- During 2.4 beta installation (09-04-2017 build), when trying to select the keyboard type "French Macbook / Macbook pr...
04/09/2017
-
02:40 AM Feature #7459: "Refresh" button for Diagnostics/Tables display
- There is an Update button for some tables but it's unclear whether this means refesh the display or update the table
-
- When viewing a table, using the browser refresh produces a resend/resubmit dialog.
The only other way to refresh the...
04/08/2017
-
- I've made change 'a' on one of my installs to allow setting a default tab to display. I've attached a patch file and...
-
07:06 AM pfSense Packages Bug #7454: bridge is up after reboot while the enable interface box is not checked
- the system log is indeed limited to a fix size, however the suid service genarate cache log(path: /var/squid/logs/cac...
-
- giskard rt wrote:
> if a user want to disable squid service for some time, then he or she maybe think the service is...
04/07/2017
-
- maybe now I can only solve the ramfs related problem by completely backup /var and restore it on boot up, maybe with ...
-
- Kill Bill wrote:
> giskard rt wrote:
> > I uncheck the enable box in the interface configuration tab, it works for ... -
- Interfaces exist at the OS level even when they are not enabled. The GUI only controls settings applied to the interf...
-
- giskard rt wrote:
> I uncheck the enable box in the interface configuration tab, it works for the change. however wh... -
- the similar problem also exist with some other add-ons, like:
1,squid, though it's not enabled, it generate a lot or... -
- as described, I add an bridge to bind two different interface, but I do not want the bridge be brought up, so I unche...
-
- Kill Bill wrote:
> No idea what's this request about. If you are talking about the DNSBL feature, the "easylist styl... -
- Please post on the forum to discuss and confirm problems before opening issues here on Redmine.
-
- No idea what's this request about. If you are talking about the DNSBL feature, the "easylist style rule" support is a...
-
- easylist rule is so convinient and the specific language variant rules cover almost all I need,
But pfblockerNG seem... -
-
-
- I would also like to see this enhancement
-
- This looks much better now. Failures have a short and meaningful error message instead of a stack trace.
-
- Button shows as expected now, and works properly.
-
- This seems to behave much better now. On a DHCPv6 VM, before these changes I had a never-ending stream of rc.newwanip...
-
-
-
-
- Please post on the forum to discuss and confirm problems before opening issues here on Redmine.
-
07:28 AM Bug #7458 (Rejected): web interface very slow
- web interface very long open any menu item, if one gateway in gateway group is down or high loss
-
-
- Duplicate of Bug #6603
-
- I'd like to say, the var on ramfs is very useful, but the way to handle it is not well considered to back up the var ...
-
- Please post on the forum to discuss and confirm problems before opening issues here on Redmine. This is not a bug.
-
- This is a bug tracker, please use https://forum.pfsense.org/index.php?board=61.0 for performance tuning tips. The mem...
-
- first of all, As official wiki said, pfsense has removed layer7 packets filter feature after version 2.3 for the poor...
04/06/2017
-
- This reverts commit 44aa913b92a0415f0fc26194ff74d3c6803693e3.
-
- This reverts commit e200d7e439cf734f811c078536362fc672a2ee6d.
-
-
-
-
-
09:13 PM
Bug #7413: status_dhcpv6_leases.php: Some DHCPv6 leases are not displayed in the GUI
- Yeah, my DHCPv6 status page is only showing one lease, which happens to be a static reservation. None of the rest of ...
- 12:40 PM Revision c6d4f4ee: Merge pull request #7452 from phil-davis/patch-5
- 11:54 AM Revision f3278171: Fix #7452 save new gateway
-
10:54 AM pfSense Packages Bug #7453 (Closed): DNS-ovh need to save or display consumer key
- Consumer key is generated at the first connection to OVH ([Thu Apr 6 17:46:00 CEST 2017] OVH consumer key is empty, L...
-
- Applied in changeset commit:f3278171b199062279225631903685e608285d3a.
-
- PR https://github.com/pfsense/pfsense/pull/3689
-
- After pressing the Add button, actually the new gateway is not created.
It uses AJAX to system_gateways_edit but the...
04/05/2017
-
- In Chrome (Version 57.0.2987.133 (64-bit) Mac tested) when you edit an OpenVPN Client and switch to shared-key mode, ...
-
-
11:31 AM Bug #7450: Virtual IP replication before "applying" config
- Jim Pingle wrote:
> That is expected. "Apply changes" only affects the host you are configuring. Changes are applied... -
- That is expected. "Apply changes" only affects the host you are configuring. Changes are applied on sync to the secon...
-
- Hi;
the setup to reproduce is easy this is a HA cluster as described here : https://doc.pfsense.org/index.php/C... -
10:17 AM pfSense Packages Feature #7449 (New): feature request for openvpn-client-export package, add the support for openvpn up and down script, for mapping network drive
- Hi,
hope i write this to the right place. Someone on the IRC suggested me to post my idea here.
Here is the off... -
- The underlying program, rate, still doesn't work with IPv6 as far as I'm aware.
I'd love to see rate swapped out f... -
09:31 AM Bug #3334: Status/Traffic Graph isn't IPv6 ready
- When will this be resolved? This is a really old bug.
-
- We just moved to the new quarterly ports branch so there are a number of updates to various things there now or comin...
-
- ...
- 02:54 AM Revision c00c6f67: Merge branch 'master' of https://github.com/pfsense/pfsense into
- dyndns_dreamhost
04/04/2017
-
10:19 PM pfSense Packages Bug #7437: Mail Report package 3.1 removed support for STARTTLS
- I just spent some time, installed pfSense 2.4 in Hyper-V and tested.
Yes, there is no STARTTLS setting anymore, wh... -
-
-
-
- Can you please try it again on recent snapshots? There were fixes in this area and I couldn't reproduce it at home wh...
-
-
- Applied in changeset commit:593f052172b0969dfe9e9db755a9a41200e67ab1.
-
- To me, I have a patch.
-
- On 2.4, if an XMLRPC sync attempt fails, a notice is displayed by the firewall but it contains a cURL exception error...
-
-
- I’m testing routing all IPv4 and IPv6 LAN traffic through a remote VPN server and am having issues with IPv6 that mig...
-
12:36 PM Revision d169c6c6: add validation via validate_ipv4_list to interfaces.inc
-
- - Forum thread: https://forum.pfsense.org/index.php?topic=124046.msg705100#msg705100
- related dhclient source:
https... -
-
- - Forum thread: https://forum.pfsense.org/index.php?topic=124046.msg705100#msg705100
- related dhclient source:
https... -
-
-
- That is a different problem as it involves remote parent proxies. It already has a ticket. If that is your problem, t...
-
11:16 AM Bug #7447: SquidGuard not filtered in Transparent Proxy mode
- Good morning,
It does not seem to me that it's just
[[https://forum.pfsense.org/index.php?topic=128019.0]]
[[http... -
- Please post on the forum for diagnosis and discussion. The current version works for others, there is not a general p...
-
- Good morning,
I realized that after a last update SquidGuard not filtered.
For safety, I made a clean machine and i... -
-
- Merged, please test with latest 2.3.4/2.4 snapshot.
-
-
- Merged, please test with latest 2.4 snapshot.
-
04:56 AM Bug #1819: DNS Resolver Not Registering DHCP Server Specified Domain Name
- I don't know how tracert exactly works, but when using tracert it is resolving the "wrong" subdomain to the right one...
04/03/2017
-
-
07:45 PM Revision 6df0114b: vslb.inc - Add missing include, use sigkillbyname()
-
-
-
-
- See https://redmine.pfsense.org/issues/4154. No need for users to waste their time with debugging packets black hole.
-
-
- See https://redmine.pfsense.org/issues/4154. No need for users to waste their time with debugging packets black hole.
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- Been no-op for ages (https://github.com/pfsense/pfsense/commit/0027de0a544438f146cfc94f005fd6f4ba9f94d7).
-
- Been no-op for ages (https://github.com/pfsense/pfsense/commit/0027de0a544438f146cfc94f005fd6f4ba9f94d7).
-
-
-
-
-
-
-
- 02:47 PM Revision cbc2e8be: Variable syntax correction. Fixes #7446.
- 02:47 PM Revision e3020ddc: Add separate bindip for usepublicip case. Fixes #7446.
- 02:47 PM Revision 1bf69a00: Add local directive to nsupdate file. Fixes #7446.
- 02:42 PM Revision a0ef9714: Fixed #7445
- Now properly handles service names that contain hyphens
(cherry picked from commit 21a8edd7836baf1e4ee2f347fdc1bafb4... - 02:40 PM Revision 21a8edd7: Fixed #7445
- Now properly handles service names that contain hyphens
-
- @OP: Need some feedback here.
- 02:04 PM Revision df384862: Merge pull request #3687 from doktornotor/patch-1
- (cherry picked from commit 7c820a5d1ddb0ecf66ccaf1c4c82cc6361e15a6b)
- 02:01 PM Revision 7c820a5d: Merge pull request #3687 from doktornotor/patch-1
-
11:27 AM Bug #7116: a floating 'match' rule on LAN does not put traffic from a broswer on a clientpc into a shaper queue
- Pass makes it work but of course it will also circumvent filtering on the firewall.
To make it work "and" not circum... -
10:23 AM Bug #7443: Issues Creating IPv6 Static Mappings
- This issue is with the 2.4 beta.
-
10:10 AM
Bug #7178 (Closed): pfSense themes don't handle package XML field without <description> tag properly
-
10:10 AM
Bug #7154 (Resolved): firewall_nat_edit JS function check_for_aliases()
-
10:00 AM
Bug #7446 (Feedback): RFC2136 Dynamic DNS needs local directive so updates are sourced correctly
- Applied in changeset commit:1bf69a00b9f6c1b8e98ed6dc4c78c8cb8403dc68.
-
- Fixed by commit:45b4a966b4b0db69d32c697f683aef94e15f56a6
https://github.com/pfsense/FreeBSD-ports/commit/45b4a966b4b... -
09:50 AM
Bug #7445: pfSenseHelpers.js service naming restrictions plus lack of error handling
- Applied in changeset commit:21a8edd7836baf1e4ee2f347fdc1bafb4d96c9d9.
-
09:42 AM
Bug #7445 (Feedback): pfSenseHelpers.js service naming restrictions plus lack of error handling
- Now properly handles service names that contain hyphens
-
09:44 AM
Bug #7444 (Feedback): pfSenseHelpers.js typo breaks captive portal stop/start/restart
- Fixed via PR 3687
-
-
-
-
-
-
-
- Add release and renew to actions.
04/02/2017
-
- https://github.com/pfsense/pfsense/pull/3688
-
- RFC2136 nsupdatecmds0 lacks the local directive so updates from other than the WAN with the default gateway fail.
-
- Code in pfSenseHelpers.js [1] introduced probably in this commit [2]
[1] https://github.com/pfsense/pfsense/blob/ma... -
-
- https://github.com/pfsense/pfsense/pull/3687
04/01/2017
-
11:27 PM
Bug #6340: fsck hangs boot in background, fails to produce any action, resulting in broken firewall
- After power cycling an appliance running 2.4.0.b.20170401.1306 with UFS FS for over an hour, dozens of fsck's were tr...
-
- There are a few issues creating IPv6 static mappings.
When entering the address for IPv4 static mapping, the entir... -
09:36 PM
Bug #6594: Package reinstallation post-config restore hangs if no Internet connectivity
- On 2.4.0.b.20170401.1306, when a backup from 2.4.0.b.20170328.1156 is restored with no WAN connectivity the attached ...
-
08:14 PM
Bug #7075: firewall states show negative value for total bytes processed
- Can not duplicate this behavior in 2.4.0.b.20170401.1306, only positive numbers in the States column
-
08:01 PM
Bug #7231: Web UI does not properly remove priq shaping rules when deleting an interface which causes subsequent rule failures without warning in the UI
- On 2.4.0.b.20170401.1306, when attempting to delete an interface with traffic shaping configured, there is a warning ...
-
07:52 PM
Bug #7254: Selection from long tab list that uses dropdown does not POST correctly
- Could not reproduce this on 2.4.0.b.20170401.1306 with twelve interfaces configured
-
07:41 PM
Bug #7316: Fail Boostrap format port in
- On 2.4.0.b.20170401.1306 when editing a port alias, hovering over the Port field shows 'A port number, port number ra...
-
07:37 PM
Bug #7422: Typo in OpenVPN NCP description
- Today's latest snapshot 2.4.0.b.20170401.1306 also does not have the 'z'.
-
07:33 PM
Bug #7435: Cannot edit IP address in a host override
- I am not able to reproduce this in DNS Resolver (unbound) on 2.4.0.b.20170401.1306.
-
06:21 PM pfSense Packages Bug #7440: Tinc package WEB GUI not picking up changes made on filesystem
- Ok. Thank you. I can understand it would be difficult to write a parser for these config files, especially since they...
-
- Put the settings in the GUI. That's how every part of pfSense works. Manual changes to files will always be overwritt...
-
- I understand that this is not the approved way to do things, but now that I have done it, is there any way to get the...
-
- That's not how it's meant to work. All settings must go into the GUI, and the filesystem contents are written out fro...
-
- I have been setting up a tinc VPN using a pfsense firewall/router as one of the nodes and everything is working fine,...
-
- Add status to NDP Table.
Add delete to NDP Table.
Add ping to ARP Table and NDP Table.
Add selection box so ... -
- Display start and end for static leases. (Even if address is reserved, it's useful to know the status.)
Add ping t... -
02:29 PM
pfSense Packages
Feature #6651: Loopback interfaces
- +1 for this request. The ability is there as Chris mentioned, but IPs can only be bound to lo0. Additionally, an opti...
Also available in: Atom