Activity

30 days up to

User

Subprojects

Activity

From 05/10/2017 to 06/08/2017

06/08/2017

08:12 PM Bug #7605: State Killing on Gateway Success: Another doubt about the same feature. On a multi-wan environment, is it possible to kill the states just of the fai... Michel Santello
07:26 PM Revision a550ca4e: Change the port list to use the pfSense FreeRADIUS 3.x package instead of freeradius3 directly.: Jim Pingle
06:48 PM pfSense Packages Bug #7617: OpenBGP not restarting on new WAN IP or firewall reload: I need to withdraw this report, assuming my assessment below is correct. Apologies for any effort wasted on this.
... Phil Biggs
04:44 PM Bug #4310: Limiters + HA results in hangs on secondary: Has this had any development recently?
This is the primary reason I can't use limiters in my HA setup, and the ass... Scott Rosenberg
03:21 PM pfSense Packages Bug #7632: CVE-2016-2107 in OpenSSL: Are you certain that your pfSense installation is current? We ran that same test against a 2.3.4 system with HAProxy ... Jim Pingle
02:45 PM pfSense Packages Bug #7632: CVE-2016-2107 in OpenSSL: Sorry, I follow what you are saying now!
The SSLLabs test still says that we are vulnerable when we test the site.... Adrian James
02:24 PM pfSense Packages Bug #7632: CVE-2016-2107 in OpenSSL: We have 2.3.4 in use, hosting a website with HAProxy TLS offload. SSLLabs confirms that it is vulnerable to Oracle P... Adrian James
08:12 AM pfSense Packages Bug #7632 (Rejected): CVE-2016-2107 in OpenSSL: FreeBSD patches OpenSSL in its own way, relying on the version number is not accurate to determine vulnerabilities.
... Jim Pingle
07:45 AM pfSense Packages Bug #7632 (Rejected): CVE-2016-2107 in OpenSSL: pfSense 2.3.4 uses OpenSSL 1.0.1s which is vulnerable to CVE-2016-2107 Oracle Padding attack. HAProxy TLS terminatio... Adrian James
01:10 PM Bug #7629: FreeBSD PR affecting pfsense: An update, I pulled the Freebsd-src from the repo and have actually now compiled the kernel patched and have it runni... Chris Collins
12:47 AM Bug #7629: FreeBSD PR affecting pfsense: another one and again turnstile_broadcast
db:0:kdb.enter.default> bt
Tracing pid 65385 tid 100750 td 0xfffff8001... Chris Collins
12:23 PM Revision f18475cb: Fix anchor tag location: Steve Beaver

06/07/2017

10:28 PM Bug #7604: Bug #6594 is not resolved: Waiting for Internet connection to update pkg metadata and finish package reinstallation: Just happened to me as well. Brand new SG-2440 from Netgate with 2.3.4 pre-installed. I restored a config from the ol... Oliver Hansen
09:37 PM pfSense Packages Feature #7631: Please allow static IPs be assigned from the DHCP range: For future readers:
And if you have a bit of address space that you want to use for static IPs in the middle of the ... Phillip Davis
02:33 PM pfSense Packages Feature #7631: Please allow static IPs be assigned from the DHCP range: Read the link, it's all explained there. Jim Pingle
02:21 PM pfSense Packages Feature #7631: Please allow static IPs be assigned from the DHCP range: why in the would all other vendors allow this and no pfSense? Yuri Weinstein
02:09 PM pfSense Packages Feature #7631 (Rejected): Please allow static IPs be assigned from the DHCP range: https://doc.pfsense.org/index.php/Why_can't_I_have_static_mappings_inside_my_DHCP_range Jim Pingle
02:04 PM pfSense Packages Feature #7631 (Rejected): Please allow static IPs be assigned from the DHCP range: Currently if a client was selected from the Leases table and a user wants to make an IP static pfSense forces it to b... Yuri Weinstein
03:38 PM Revision 88fbd229: Merge pull request #3750 from PiBa-NL/20170606-denyconfigwrite: Jim Pingle
11:23 AM pfSense Packages Bug #7630 (Needs Patch): UEFI Booting: When trying to boot using UEFI mode, installer hangs at 'Consoles: EFI Consoles'
Using Dell Optiplex 7010 or 9010 ... Dan Collins
10:35 AM Bug #7584 (Feedback): privileges abuse with page-diagnostics-dns: PR was merged Jim Pingle
09:47 AM Bug #6594: Package reinstallation post-config restore hangs if no Internet connectivity: I opened a new ticket for that problem, as the old one (this one) is closed
https://redmine.pfsense.org/issues/7604
... Marco Hofmann
09:39 AM Bug #6594: Package reinstallation post-config restore hangs if no Internet connectivity: Just happened to me as well. Brand new SG-2440 from Netgate with 2.3.4 pre-installed. I restored a config from the ol... Oliver Hansen

06/06/2017

09:52 PM Revision 6356e3e8: permissions, log when user tries to save the configuration but has the 'deny config write' permission: Pi Ba
07:57 PM Bug #7629: FreeBSD PR affecting pfsense: Affected version is 2.4 built on Wed Mar 15 18:17:17 CDT 2017
FreeBSD 11.0-RELEASE-p8 Chris Collins
07:56 PM Bug #7629 (Resolved): FreeBSD PR affecting pfsense: IS it possible to test the patch on a build of PFSense 2.4 which I am willing to test.
The patch is here
https:... Chris Collins
12:31 PM Revision 5e17c8e3: Change FreeRADIUS3 build options, previous build failed.: Jim Pingle
10:01 AM Bug #7628 (Not a Bug): The IP address must lie in the LAN subnet: Assigned openvpn interfaces do not work that way. You do not set an IP address on the interface like that, and they d... Jim Pingle
09:55 AM Bug #7628 (Not a Bug): The IP address must lie in the LAN subnet: Hello,
I found this was a problem one year ago:
https://redmine.pfsense.org/issues/5651
It however turns out... Hollander Hollander
07:38 AM Bug #7627 (Rejected): SG-1000 pfSense 2.4.0-BETA: Unbound domain overides with multiple DNS: Please post on the forum or mailing list to discuss configuration issues. There is no bug here.
You can define mul... Jim Pingle
07:28 AM Bug #7627 (Rejected): SG-1000 pfSense 2.4.0-BETA: Unbound domain overides with multiple DNS: Unbound domain overrides configuration does not allow multiple IP. d j

06/05/2017

11:39 PM Bug #6340: fsck hangs boot in background, fails to produce any action, resulting in broken firewall: I just wanted to add the following, as this was one of the #1 reasons I was nervous about using PFSense.
Before t... brennen smith
10:50 PM Feature #7626 (New): Add IPoE support for WAN: Many ISPs are moving away from PPPoE to IPoE for WAN connectivity. Please add IPoE native support for WAN connections.
Steven Perreau
08:44 PM Revision a8238357: Activate FreeRADIUS3 OS package for dev/testing (no GUI component yet): Jim Pingle
04:07 PM Revision 9fa31c24: dhcp-relay, replace the dhcprelay specific implementation of get_realinterface_for_destination() by the generic guess_interface_from_ip(): Pi Ba
03:24 PM Revision de147d3d: Add more checks to eliminate empty config tags in package settings. Fixes #7624: Jim Pingle
01:08 PM Bug #7601: Dynamic DNS - Hostname should not be required for DNS-O-Matic: Please see the attached trivial patch to make the hostname optional for DNS-O-Matic. Scott Reynolds
11:32 AM Bug #7625 (Resolved): When creating IPv6 firewall rule for single host, netmask improperly displays: When creating a firewall rule (I tested with a pass rule on WAN):
Address Family: IPv6
Source: Single Host or ali... Chris Linstruth
10:30 AM Bug #7624 (Feedback): Empty <config/> tags in package settings are still causing issues: Applied in changeset commit:de147d3d614c877df2022d85d37256a93047764c. Jim Pingle
10:10 AM Bug #7624 (Resolved): Empty <config/> tags in package settings are still causing issues: In some cases, packages can still end up with an empty @<config></config>@ or @<config/>@ tag which leads to problems... Jim Pingle
08:25 AM Feature #7623: Allow L2TP user passwords to contain special characters: The validation for L2TP user account passwords is the same as it has been since pfSense 2.0 when it was first added. ... Jim Pingle
08:16 AM Bug #7611 (Feedback): Diagnostics/Routes ipv6 ( netstat ), causes kernel panic: I can't seem to reproduce this as stated. I have a system with a GIF tunnel and I can disable/enable its WAN (it's a ... Jim Pingle
07:36 AM Bug #7615 (Rejected): User / Group Privileges for the "Status: Monitoring" page.: Maybe your user already has the privilege?
It's there on a normal install. It has to be specific to your installat... Jim Pingle
07:29 AM Bug #7612 (Rejected): No internet access through DHCP unless using static assigned address: Agreed. DHCP is not broken, at least in general. Post on the forum or mailing list for assistance.
If there is som... Jim Pingle

06/03/2017

10:55 AM Feature #7321: DynDNS - Add DreamHost DNS support: Any progress on this? I'd love to use it. Looking at the possibility of combining this with the acme and haproxy pack... Corey Boyle
09:51 AM Feature #7623 (Resolved): Allow L2TP user passwords to contain special characters: In older versions of pfSense, special characters (!@#$%^& etc) where allowed in passwords.
Since a while back this... Roland Giesler
07:31 AM Bug #7622 (Resolved): Don't include disabled ipsec phase2 entries on pf table vpn_networks: PF Table vpn_networks is populated with disabled Phase 2 entries.
This may lead to underperformance if
(a) You ha... Spike R.D.

06/02/2017

02:04 PM pfSense Packages Feature #7621: OpenVPN Client Export name whens is a windows installer have the same name its a bit confused: Fixing the sentence:
So, will be like that for Windows Vista, 64 bits: pfSense-udp-1194-prolinx-x64-win6-install.exe André Araujo
01:30 PM pfSense Packages Feature #7621 (Resolved): OpenVPN Client Export name whens is a windows installer have the same name its a bit confused: When you export a OpenVpn files it's not possible distinguished by the name file between win6, x86, x64, xp, etc.
... André Araujo
12:52 PM Bug #7620 (Resolved): State table cannot be displayed because lack of PHP memory: Please see [[https://forum.pfsense.org/index.php?topic=130797.0]]
@
Crash report begins. Anonymous machine infor... Luzemario Dantas

06/01/2017

06:19 PM Bug #7606: Using limiters and VLANs on Supermicro Xeon D boards crashes with kernel panic: I was able to capture the very beginning of the crash, see pic putzomatic none
05:46 PM Bug #7606: Using limiters and VLANs on Supermicro Xeon D boards crashes with kernel panic: I dont think I can provide a crash dump without swap on my build but here are some screencaps of the console once the... putzomatic none
01:32 PM Revision 7cdddd8b: Remove memorydisk support: Renato Botelho
01:15 PM Revision 067a2bdf: Improve comment: Steve Beaver
12:58 PM Revision de88f421: Use the section ID as an anchor so that hyperlinks can jump directly to that sectiom: e.g.: $section = new Form_Section("My section", "a_here");
then: https://firewall/system_somepage.php#a_here Steve Beaver
12:27 PM Bug #7619 (Closed): Enable Enhanced networking on AWS: https://svnweb.freebsd.org/base?view=revision&revision=293739
https://aws.amazon.com/ec2/instance-types/#enhanced_... Chris Macmahon
12:05 PM pfSense Packages Bug #7524: Squid MITM/SSL-Bump broken with Chrome due to missing SAN in generated certificates: Looks like the Squid developers are getting ready to push v3.5.26, which appears to have a fix for bug 4711:
http:... ryon m
09:32 AM pfSense Packages Bug #7524: Squid MITM/SSL-Bump broken with Chrome due to missing SAN in generated certificates: Patricio Stegmann wrote:
> I can confirm the bug in pfSense 2.3.4 and the fix on squid issue tracker at http://bugs.... Kill Bill
08:12 AM Feature #7618 (Resolved): Add support for user-supplied Host-Uniq tag and handle PADM messages in Netgraph PPPoE: Hi,
can this patch already working be added to pfSense to enable it to deal with custom Host-Uniq tags?
A new input... Uccio Papa

05/31/2017

08:39 PM pfSense Packages Bug #7617: OpenBGP not restarting on new WAN IP or firewall reload: Attaching some system and routing logs. Phil Biggs
06:55 PM pfSense Packages Bug #7617: OpenBGP not restarting on new WAN IP or firewall reload: A symptom of this is that a table maintained by OpenBGP is not updated after a WAN IP change or firewall reload.
S... Phil Biggs
06:07 PM pfSense Packages Bug #7617 (Closed): OpenBGP not restarting on new WAN IP or firewall reload: OpenBGP does not reload/restart with other packages when the WAN IP changes or the firewall rules are reloaded.
... Phil Biggs
04:49 PM Bug #7600: Unable to save DNS Resolver settings: There is validation of DNSBL after each feed is downloaded and parsed.
If you add the include line in /var/unbound/u... BBcan177 .
04:19 PM Bug #7600: Unable to save DNS Resolver settings: I can reproduce the issue. Load up an assload (technical term) of lists in the pfBlockerNG plugin in the DNSBL Feeds ... Jason Smith
02:53 PM Bug #7116: a floating 'match' rule on LAN does not put traffic from a broswer on a clientpc into a shaper queue: Suffering same, any plans this would get fixed soon because converting rules to a pass isn't feasible in my situation... Bipin Chandra
01:49 PM pfSense Packages Bug #7278: Suricata Service - Advanced Configuration Pass-Through not working: Hi all,
i just run into this bug as i was testing configs for an other feature i'm currently developing for suric... Julian Wecke
01:26 PM Bug #7611: Diagnostics/Routes ipv6 ( netstat ), causes kernel panic: For easiest reproduction ive found the following settings:
Gif interface with parent:wan ,gifremote: 4.4.4.4 ,gift... Pi Ba

05/30/2017

09:47 PM Bug #7615: User / Group Privileges for the "Status: Monitoring" page.: Well this is interesting.. The file /etc/inc/priv/pfSense-Status_Monitoring.priv.inc is there, but it doesn't show up... Landon Wubbels
08:24 PM Bug #7615: User / Group Privileges for the "Status: Monitoring" page.: It is there in the list for me, and works when I give it to a user.
Status monitoring is provided in pfSense like a ... Phillip Davis
11:40 AM Bug #7615 (Rejected): User / Group Privileges for the "Status: Monitoring" page.: I'm not sure if this is a bug or if it needs to be a feature request. I'm was just attempting to make a new pfsense u... Landon Wubbels
07:14 PM pfSense Packages Bug #7616 (Closed): Barnyard2 webui configuration updates result in ****** written to the config for the password: Any changes to the barnyard configuration page requires that you update the password as well, otherwise ****** is wri... Scott Zawalski
03:31 PM Bug #5413: Reduce disruptions when changing DNS records from DHCP leases in Unbound: Sadly, I've faced the same problem with Unbound. This issue forced me to use RAM disks. I hope there will be a fix in... Dmitriy K
06:42 AM Bug #5413: Reduce disruptions when changing DNS records from DHCP leases in Unbound: Hi all
I'm facing same issue on our pfSense boxes.
We're using unbound and configured dhcp server to update unb... Anonymous
11:23 AM Bug #7614 (Resolved): Port forwards where the destination is a network alias can create invalid refection rules if multiple subnets are in that alias.: For example if the chosen destination is 'WAN net' and there is a VIP on the WAN in the different subnet.
NAT refl... Steve Wheeler
10:44 AM Revision 3ca59456: Fix preg_match call without delimiter and also use preg_quote() to variable used in pattern: Renato Botelho
10:44 AM Revision 63cbb655: Fix preg_match call without delimiter and also use preg_quote() to variable used in pattern: Renato Botelho
05:32 AM pfSense Packages Bug #7613: quagga not starting after upgrade - initial boot: forgot to mention that quagga is mainly used to supply routes over openvpn site2site tunnels jeroen van breedam
03:47 AM pfSense Packages Bug #7613 (Closed): quagga not starting after upgrade - initial boot: initial boot after upgrade:
* quagga not started, it is upgraded/installed
* service can be started manually by GU... jeroen van breedam

05/29/2017

10:01 PM Bug #7612: No internet access through DHCP unless using static assigned address: DHCP is not broken in 2.4. There must be another issue in play. Please take this to the forum and post specifics ther... Chris Linstruth
09:46 PM Bug #7612 (Rejected): No internet access through DHCP unless using static assigned address: Currently running 2.4.0-BETA (amd64) built on Mon May 29 17:12:34 CDT 2017
This issue has persisted since updatin... Brad Endsley
07:06 PM Bug #7611 (Not a Bug): Diagnostics/Routes ipv6 ( netstat ), causes kernel panic: Diagnostics/Routes ipv6 ( netstat ), causes kernel panic
Several crashdumps uploaded past few hours.. (my ip ends ... Pi Ba
06:20 PM Revision ce5e2867: Don't create system notices for errors in user-entered ad-hoc PHP (diag_command.php): (cherry picked from commit ff4e29fb9d048162f0d4d28b0c3e818ed2c1fd8e) Stilez y
06:20 PM Revision 39dc4fc5: Various updates to PR: 1) convert echo to print, and add infobox, as requested in PR comments
2) If no identifiable line number, say so
3) E... Stilez y
06:20 PM Revision ad6be377: create global for user code dir, in diag_command.php: Going to try and stop user code generating notices, by putting it in a specific dir which doesn't give notices for sy... Stilez y
06:20 PM Revision 6be84d7f: add comment: (cherry picked from commit d2d58d6ad1b32e0ccce094bfd247547f353e38ba) Stilez y
06:20 PM Revision 1ca0f7f7: typo: (cherry picked from commit 4711322b4a6ecedba6a4a11c1f7f04ef8427b46e) Stilez y
06:20 PM Revision 5c1fea17: If user-entered PHP errors out, display the error line in context to help the user: If the user enters PHP in the command-line page, and it errors out, it's usually a typo or something minor. But the u... Stilez y
06:20 PM Revision 7c2ca154: Merge pull request #3740 from stilez/patch-59: Renato Botelho
06:20 PM Revision b4ff414a: Removed htmlspecialchars when loading leases from config: (cherry picked from commit 2322e9f3cb6dea9203d63a17c6a27de3a2c6b8bc) Yoann Lecuyer
06:19 PM Revision d4d9aa66: Merge pull request #3731 from ylecuyer/ylecuyer-patch-1: Renato Botelho
05:50 PM pfSense Packages Bug #7610: Squid use all memory ram.: I did the update to pfsense 2.3.4 with new verion of squid, but still have the problem, memory used by squid only gro... Rodrigo Rafael
02:30 PM pfSense Packages Bug #7610: Squid use all memory ram.: I am using Pfsense version
2.3.3-RELEASE (amd64)
built on Thu Feb 16 06:59:53 CST 2017
FreeBSD 10.3-RELEASE-p... Rodrigo Rafael
02:27 PM pfSense Packages Bug #7610 (Closed): Squid use all memory ram.: We have this forum https://forum.pfsense.org/index.php?topic=126309.0, and i have the same version of the problem on ... Rodrigo Rafael
11:28 AM Revision 1ab06215: Update translation files: Renato Botelho
11:25 AM Revision 766084d3: Regenerate pot: Renato Botelho
09:35 AM Bug #7609 (Resolved): NTP Status not parsing all NTP Access Restrictions preventing status display when it is actually allowed: Status/NTP displays "Statistics unavailable because ntpq and ntpdc queries are disabled in the NTP service settings",... Jed Clear
12:00 AM Revision 06d8454b: dhcp-relay, combine clean and fix code for destination interface discovery: Pi Ba

05/28/2017

02:16 PM Feature #7383: system_certmanager.php?act=new: Add new select option to sign a CSR: Build 2.4.0.b.20170527.2111
External generated CSR failed with
The following input errors were detected:
•This s... Larry Westfall
01:43 PM Revision 8452bfc2: Code cleanup, and add an info message under widget list: Minor code cleanup/simplifying. Also many pages have their settings in their built-in settings panel, so the fact tha... Stilez y
09:08 AM pfSense Packages Feature #7608: Captive Portal amount of traffic Account + Free Radius+Mysql: It is up to the RADIUS server/database to count traffic and decide when to cut the user off, not Captive Portal. Capt... Jim Pingle
01:47 AM pfSense Packages Feature #7608 (New): Captive Portal amount of traffic Account + Free Radius+Mysql: limitation on amount of traffic does not work when used CP and Free Radiusand and Mysql to gether
It seams... mohsen abbaspour

05/27/2017

07:05 PM Bug #7607: Chelsio T4/T5 CXGBE drivers not loaded as ALTq capable in the PfSense UI: Also tested on 2.3.4 non-functional Justin Smith
06:53 PM Bug #7607 (Resolved): Chelsio T4/T5 CXGBE drivers not loaded as ALTq capable in the PfSense UI: ( Please reference https://redmine.pfsense.org/issues/6830 ) Information below duplicated from this ticket. Testing e... Justin Smith
06:45 PM Bug #6830: Chelsio T4/T5 CXGBE drivers not loaded as ALTq capable in the PfSense UI: Using Chelsio T4 on;
2.4.0-BETA (amd64)
built on Fri May 26 19:15:04 CDT 2017
FreeBSD 11.0-RELEASE-p10
This ... Justin Smith
01:14 PM Revision ff4e29fb: Don't create system notices for errors in user-entered ad-hoc PHP (diag_command.php): Stilez y
12:49 PM Revision 1155cd63: Various updates to PR: 1) convert echo to print, and add infobox, as requested in PR comments
2) If no identifiable line number, say so
3) E... Stilez y
12:44 PM Revision 8d80a771: create global for user code dir, in diag_command.php: Going to try and stop user code generating notices, by putting it in a specific dir which doesn't give notices for sy... Stilez y

05/20/2017

10:30 PM Bug #7584: privileges abuse with page-diagnostics-dns: PR https://github.com/pfsense/pfsense/pull/3735 Phillip Davis
04:10 PM Bug #7584 (Resolved): privileges abuse with page-diagnostics-dns: my user has
page-diagnostics-dns privilege which provides DNS lookups
but also allowed the user to create an alias
... Jeremy C. Reed
05:22 PM Bug #7591: services_captiveportal.php suggest default auth_method, and old links: I ended up describing this two ways. It now doesn't accept it (per 0ee22f364ca62b8305ff36447954dacdbc3c3cce)
but pl... Jeremy C. Reed
05:19 PM Bug #7591 (Resolved): services_captiveportal.php suggest default auth_method, and old links: services_captiveportal.php
If don't select radio button for "Authentication method" it stays empty
so no authentica... Jeremy C. Reed
05:04 PM Bug #7590 (New): diag_edit do not save when nothing to sae (in directory browse view): diag_edit.php
if you are browsing directory hiererchy, and enter a filename
and click save, it will write a zero by... Jeremy C. Reed
05:02 PM Bug #7589 (Resolved): ``diag_edit.php`` warning is not cleared after picking non-directory to load: diag_edit.php will give warning "Loading a directory is not supported."
but after clicking Browse and getting a dire... Jeremy C. Reed
04:48 PM Bug #7588 (Resolved): missing label for form in services_dyndns_edit: services_dyndns_edit "Verify SSL peer" checkbox
doesn't show its corresponding form label. It is set to "null".
(So... Jeremy C. Reed
04:37 PM Todo #7587 (Resolved): sort system_groupmanager_addprivs privileges: system_groupmanager_addprivs.php
feature request.
Please sort the list of privileges in the form
like is done in t... Jeremy C. Reed
04:31 PM Todo #7586 (Resolved): system_usermanager_addprivs show user name: feature request: system_usermanager_addprivs.php
should say what user and fullname is having the privileges added to... Jeremy C. Reed
04:20 PM Bug #7585 (Resolved): system_usermanager.php showcert does nothing: system_usermanager.php
The checkbox for showcert "Click to create a user certificate"
when adding a new user does n... Jeremy C. Reed
04:08 PM Bug #7583 (Needs Patch): pkg_mgr confusing versions: pkg_mgr.php
The table shows Version for the package then
the dependencies show same package name with different ver... Jeremy C. Reed
04:03 PM Todo #7582 (Rejected): diag_dump_states and non-existent IP: diag_dump_states.php
enter a non-existent but valid IP address and will get a Kill States
button but no states list... Jeremy C. Reed
04:01 PM Bug #7581 (Resolved): etc/pfSense.obsoletedfiles wrong path for diag_system_pftop.php: /etc/pfSense.obsoletedfiles
has wrong path for diag_system_pftop.php
(missing www)
see 1af5edbf04e0e3bbbc55981f6fc... Jeremy C. Reed
03:58 PM Bug #7580 (Resolved): pftop impossible options in web gui: diag_pftop.php should not have sort options choices of Peak
and Rate since only useful
if have cached information ... Jeremy C. Reed
03:56 PM Bug #7579 (Resolved): pftop size sort is same as none: diag_pftop.php has "Size" for sorttype which is not a order type
known by pftop. (sort_size_callback in pftop is "By... Jeremy C. Reed
03:35 PM pfSense Packages Bug #7578 (Resolved): Suricata -- Removing Hosts from Block Table via Alerts: Hi there,
I am running the pfSense 2.4 beta with Suricata 3.2.1_1.
I have noticed that when clicking the leftmo... James Webb
10:35 AM Todo #7577 (Resolved): growl and notification suggestions: system_advanced_notifications.php has a button to test
growl, but no indication locally (in the GUI) if use... Jeremy C. Reed
10:27 AM Todo #7576 (Needs Patch): invalid sysctl tunables: system_advanced_sysctl.php allows adding a tunable with
a bogus name (like a space in it or doesn't exist) or bogus ... Jeremy C. Reed
10:19 AM Bug #7575 (Resolved): openvpn client and --route-up: vpn_openvpn_client.php
Does the route_no_exec feature for "Don't add/remove routes"
even work? I don't see any use ... Jeremy C. Reed
10:16 AM Bug #7574 (Rejected): openvpn ifconfig using IP instead of subnet mask: /etc/inc/openvpn.inc
The openvpn manual says:
Note: Using - -topology subnet changes the interpretation of ... Jeremy C. Reed
10:10 AM Todo #7573 (Resolved): openvpn tunnel networks and "second network address will be assigned": vpn_openvpn_client.php
text for Tunnel Networks says "The second network address will be assigned".
It uses openvpn... Jeremy C. Reed
10:04 AM Bug #7572 (Resolved): openvpn client resolv-retry infinite issues: vpn_openvpn_client.php and /etc/inc/openvpn.inc
Has checkbox to enable "Infinitely resolve server"
but the resolv-r... Jeremy C. Reed
10:01 AM Bug #7571 (Rejected): openvpn client shortcut wrongly points to "server" configuration: vpn_openvpn_client.php has Related settings shortcut to
vpn_openvpn_server.php
but that is misleading and for norm... Jeremy C. Reed
09:59 AM Bug #7570 (Not a Bug): openvpn_wizard old error message: openvpn_wizard.xml
skipped creating a cert and when finished it took me back to
select or add a certificate. After... Jeremy C. Reed
09:57 AM Bug #7569 (Resolved): openvpn wizard reused settings cause wrong defaults: wizards/openvpn_wizard.xml
This is a wizards behavior which can cause confusion or mistake.
A wizard saves its set... Jeremy C. Reed
09:55 AM Bug #7568 (Resolved): unused openvpn client_mgmt_port ?: vpn_openvpn_server.php
configures client_mgmt_port
but as far as I can tell this number is not used
and the manage... Jeremy C. Reed
09:51 AM Bug #7567 (Resolved): unused openvpn address pool setting?: vpn_openvpn_server.php
Address Pool
sets pool_enable.
I don't see any code that uses it, like not in /etc/inc/open... Jeremy C. Reed
09:46 AM Bug #7566 (Rejected): need more dh-parameters files or generate it: /etc/inc/openvpn.inc
used vpn_openvpn_server.php to set dh_length
but only three /etc/dh-parameters.NUM files are a... Jeremy C. Reed
09:25 AM Bug #7565 (Resolved): openvpn and port 0: openvpn_validate_port() has:
if (empty($value ...
so when passing zero to it complains
(because empty(0) is FAL... Jeremy C. Reed
09:24 AM Bug #7564 (Resolved): l2tp broken logging shortut: The logging shortcuts for vpn_l2tp.php and vpn_l2tp_users.php
and vpn_l2tp_users_edit.php all go to same:
status_lo... Jeremy C. Reed
09:22 AM Feature #7563 (New): l2tp Suggestion: consider allowing IP/Subnet for the user.: vpn_l2tp_users.php
Suggestion: consider allowing IP/Subnet for the user.
mtp supports this for restricting to a ran... Jeremy C. Reed
09:21 AM Bug #7562 (Resolved): l2tp remoteip confusion: in vpn_l2tp.php
Remote address range remoteip is required even if
RADIUS issued IPs radiusissueips is set.
Per v... Jeremy C. Reed
09:19 AM Bug #7561 (Resolved): l2tp turn off local user database: vpn_l2tp.php says when RADIUS is set "The local user database will
not be used."
and vpn_l2tp_users.php also shows:... Jeremy C. Reed
09:17 AM Todo #7560 (Resolved): vpn_l2tp.php dns checks: vpn_l2tp.php
recommend confirming that DNS servers l2tp_dns1 and l2tp_dns2
are IP addresses. Check this right in vp... Jeremy C. Reed
09:14 AM Bug #7559 (Resolved): l2tp wins unused code: vpn_l2tp_configure in /etc/inc/vpn.inc
can use $l2tpcfg['wins'] for NetBIOS name server (NBNS) information
but that... Jeremy C. Reed
09:12 AM Bug #7558 (Resolved): l2tp configure kills and sleeps even if first time: vpn_l2tp_configure in /etc/inc/vpn.inc
has killbypid and sleep(8) even if starting it for first time.
I suggest it ... Jeremy C. Reed
07:06 AM Bug #6594: Package reinstallation post-config restore hangs if no Internet connectivity: Hello everybody.
I'm at a customer site today with several branch offices. I sit at the head quarter and prepare thr... Marco Hofmann

05/19/2017

11:11 PM Revision 6bf2a650: pkg_edit, fix empty config tag check: Pi Ba
04:21 PM Revision 03af3cfd: Use recently added hwaddr field to restore original MAC address: Renato Botelho
03:13 PM Revision 8ce97259: Use recently added hwaddr field to restore original MAC address: Renato Botelho
11:27 AM Revision 97b5bfe3: Use specific branch for gnid: Renato Botelho
08:00 AM Bug #7400: Traffic Graphs show bad data on 2.3.3_1: Yhea, the scale can confuse. 2.4 have same same results. I need see on my interfaces Bandwidth on Mb/s . This can be... Luis Garcia
07:55 AM Revision f0dc8b68: Make consistent rule information section: Phillip Davis
12:48 AM Bug #7557: Unbound (DNS Resolver) Domain Overrides need "." at the end to work: It didn't work for me otherwise.
I want (or more correctly need) to forward DNS-Queries about my local domain to my ... Militades Sunfire

05/18/2017

08:48 PM Revision 2322e9f3: Removed htmlspecialchars when loading leases from config: Yoann Lecuyer
04:53 PM Bug #6099: igmpproxy does not recognize upstream interface: Rai Wol wrote:
> Can someone confirm its working in 2.4?
>
> Doesn't stop after 3-4 min?
igmproxy_all.zip mad... Diogo Quintela
03:11 PM Bug #7256 (Resolved): syslogd is not running after installing or uninstalling a package with logging (e.g. tinc, haproxy): Working fine on the latest 2.3.x snapshots as well. Closing. Jim Pingle
03:04 PM Bug #7557: Unbound (DNS Resolver) Domain Overrides need "." at the end to work: No they don't. (Plus, .local is not valid use case in the first place, reserved for mDNS.) Kill Bill
06:42 AM Bug #7557 (Rejected): Unbound (DNS Resolver) Domain Overrides need "." at the end to work: Adding domain overrides in unbound requires the format "company.local.", DNS Forwarder works with "company.local".
A... Militades Sunfire
01:11 PM Revision ee8f5c6a: Improve indenting/readability: Steve Beaver
05:52 AM Feature #7556 (Duplicate): Adding keepalive fields to OpenVPN config rather than forcing defaults: Duplicate of #3473 Renato Botelho

05/17/2017

11:49 PM Feature #7556 (Duplicate): Adding keepalive fields to OpenVPN config rather than forcing defaults: "keepalive 10 60" is currently hardcoded into the OpenVPN configs. This simply adds configuration prompts to allow t... Jeremy Nelson
06:21 PM Revision 77c53e65: virtualips, ability to sort the table: Pi Ba
05:24 PM Bug #7400: Traffic Graphs show bad data on 2.3.3_1: Scale of the graph is in MB/s while on the hosts bandwidth it shows in Mb/s. This accounts for a factor 8 difference.... Pi Ba
04:16 PM Bug #6642: Cant access certain IP's: It's a configuration issue, not a bug. Should have been closed sooner. This isn't a support system. Jim Pingle
04:05 PM Bug #6642: Cant access certain IP's: Is the issue resolved or why is it closed? Jesper Nissen
03:43 PM Bug #6642 (Closed): Cant access certain IP's: Jim Pingle
03:36 PM Bug #6642: Cant access certain IP's: Not a firewall issue: http://cloud.wnb.dk/3r410y2N0D3f Jesper Nissen
03:53 PM Revision a828f612: Revert "Updated d3.js and d3pie.js to latest versions": This reverts commit 47d4784602466d723a84bb1af6d313c4ba5a0115. Steve Beaver
03:07 PM Revision 37bcfa60: Backport changes for syslogd handling to fix #7256: (cherry picked from commit 576cbe26c184734e93f59320d43aeb2e510c9804) Jim Pingle
03:06 PM Revision 576cbe26: Backport changes for syslogd handling to fix #7256: Jim Pingle
03:04 PM pfSense Packages Bug #7555 (Resolved): Snort settings show translation metadata when creating a new interface that is not yet defined: A few places in snort call @gettext("{$if_friendly}")@ but that ends up showing translation metadata when it is a new... Jim Pingle
02:57 PM Revision eb3bee50: Backport syslogd service definition/control to RELENG_2_3. Ticket #4382: (cherry picked from commit 5917696ded82c3343d52c03b850d4ce564a159b4) Jim Pingle
02:57 PM Revision 5917696d: Backport syslogd service definition/control to RELENG_2_3. Ticket #4382: Jim Pingle
01:29 PM Feature #7554: Sort list of Virtual-IPs: Pullrequest send: https://github.com/pfsense/pfsense/pull/3730 Pi Ba
06:33 AM Feature #7554 (Resolved): Sort list of Virtual-IPs: If you have a large number of Virtual IPs (VIPs) its very hard to keep track of them. A sort feature would be a great... Tobias H
12:40 PM Bug #7553 (Confirmed): Captive portal on a parent interface blocks traffic on VLAN interfaces too: This does appear to be the case on 2.3.x and 2.4.x. It used to work, not sure when it stopped.
That said we always... Jim Pingle
03:32 AM Bug #7553 (Resolved): Captive portal on a parent interface blocks traffic on VLAN interfaces too: Using PfSense 2.3.4, I enabled a captive portal on interface em2. Then, as I needed another interface, I added a tagg... Daniel Berteaud
10:20 AM Bug #7256: syslogd is not running after installing or uninstalling a package with logging (e.g. tinc, haproxy): Applied in changeset commit:576cbe26c184734e93f59320d43aeb2e510c9804. Jim Pingle
10:09 AM Bug #7256 (Feedback): syslogd is not running after installing or uninstalling a package with logging (e.g. tinc, haproxy): As far as I've been able to tell, it appears that syslogd will not stay running in the background as a daemon when it... Jim Pingle
12:28 AM Bug #7256: syslogd is not running after installing or uninstalling a package with logging (e.g. tinc, haproxy): Seems much better. Reinstalled haproxy a couple of times and syslogd keeps logging. Still wondering what's the real b... Kill Bill
10:10 AM Feature #4382 (Resolved): Add syslogd as a service under Status > Services: This was merged a while ago and works well, now also merged back to RELENG_2_3 and RELENG_2_3_4 Jim Pingle
06:44 AM Feature #7085: Edit Firewall Rules Seperator: +1! That would be great! Tobias H
01:32 AM pfSense Packages Bug #6736: Snort fails to start after upgrade to 2.3.2-RELEASE: 2.3.4-RELEASE (amd64)
built on Wed May 03 15:13:29 CDT 2017
FreeBSD 10.3-RELEASE-p19
snort security 3.2.9.2_1... Donald Johnson

05/16/2017

06:04 PM Revision 72e2fb75: Fix kernel and kernel-debug packages on 11: Renato Botelho
06:04 PM Revision 0b62713f: Revert "Fix kernel and kernel-debug packages on 11": This reverts commit 46fff8a576813fa1dfa9a5289f8ca9e05583af3c. Renato Botelho
05:49 PM Revision b880cf8c: t revert 47d4784602466d723a84bb1af6d313c4ba5a0115qMerge branch 'master' of gitlab.netgate.com:pfsense/pfsense: Steve Beaver
05:22 PM Revision 46fff8a5: Fix kernel and kernel-debug packages on 11: Renato Botelho
04:04 PM pfSense Packages Feature #7535: Snort messages filling System / General. Should have its own log.: As far as I know, anything pertaining to logging is set to the default. It is set to send alerts to the system log. F... Daryl Morse
03:30 PM pfSense Packages Feature #7535: Snort messages filling System / General. Should have its own log.: Do you have it configured to log alerts to the system log? Otherwise, it does not put too much info into the system ... Bill Meeks
04:03 PM Bug #7552: IPFW crashes on load or unload of modules: Oi, you're right.
Anthony Hernandez
04:02 PM Bug #7552: IPFW crashes on load or unload of modules: Jim Pingle wrote:
> Nowhere in the pfSense source does it ever kldunload ipfw.ko or dummynet.ko.
>
> Is there a w... Anthony Hernandez
03:27 PM Bug #7552 (Feedback): IPFW crashes on load or unload of modules: Jim Pingle
03:27 PM Bug #7552: IPFW crashes on load or unload of modules: Nowhere in the pfSense source does it ever kldunload ipfw.ko or dummynet.ko.
Is there a way to replicate this usin... Jim Pingle
03:22 PM Bug #7552 (Rejected): IPFW crashes on load or unload of modules: https://customercare.netgate.com/requests/show/index/id/20338
Complete kernel crash on Netgate branded servers. ... Anthony Hernandez
02:48 PM Bug #7256: syslogd is not running after installing or uninstalling a package with logging (e.g. tinc, haproxy): On the latest 2.4 snapshot I can install and uninstall tinc and haproxy and syslogd never dies, and it appears to rel... Jim Pingle
02:26 PM Bug #7551 (Resolved): Dynamic IPsec endpoints not added to rule set after WAN down/up: IPsec endpoint using FQDN as remote IPsec endpoint does not add rules for that endpoint after a single WAN down/up ev... Chris Linstruth
12:51 PM Revision 90429354: Update translation files: Renato Botelho
12:37 PM Todo #7546: d3pie version update: can this be reverted on master too?? Michael Kellogg
12:23 PM Revision 733a641f: Regenerate pot: Renato Botelho
06:58 AM Feature #7550 (Rejected): Free Radius &Mysql: MySQL server should be run on a separate server or virtualized. This is a firewall, not a database server. Jim Pingle
06:55 AM Feature #7550 (Rejected): Free Radius &Mysql: ,as you Know , MySQL is important for Managing of Users
, lack of Mysql make , users have many problem
on free... mohsen abbaspour

05/15/2017

08:54 PM Revision 3a0df77e: Refine some syslogd restarts, add a way to send it a HUP to reload w/o a full restart. Part of ticket #7256: Jim Pingle
08:30 PM Revision ddd54e83: auth_check, move the cmp_page_matches() to its own file so it can be shared by both auth_check.inc and priv.inc: Pi Ba
07:20 PM Revision 38a47119: Small adjustment to dmesg parsing for CPU package/core count.: Jim Pingle
05:55 PM Revision 203b1110: Only add include section to unbound config when regovpnclients config option is enabled: Lorenz Schori
05:41 PM Revision ae764da6: Enable Python support for Unbound. Implements #7549: Jim Pingle
05:40 PM Revision a357737c: Use full paths for more binaries: Lorenz Schori
05:33 PM Revision a29361a2: Remove stray debug-code (/tmp/script): Lorenz Schori
04:23 PM Revision 48384795: Clarify checkbox help text: Lorenz Schori
04:14 PM Revision bb38fe11: Always use braces around variable names: Lorenz Schori
04:10 PM Revision 5d518166: Check whether tmp/config files exist before using/removing them: Lorenz Schori
04:03 PM Bug #7256: syslogd is not running after installing or uninstalling a package with logging (e.g. tinc, haproxy): With commit:3a0df77eebf27d027d512a61dcbf80adefd630c4 I can now install/remove haproxy and tinc without affecting sysl... Jim Pingle
05:18 AM Bug #7256: syslogd is not running after installing or uninstalling a package with logging (e.g. tinc, haproxy): Erm, guys, this is super-annoying. Lost logging on many boxes on recent HAproxy updates without realizing what happen... Kill Bill
03:38 PM Revision 035283be: Use full paths for binaries: Lorenz Schori
02:28 PM Revision 76258fa4: Remove trailing whitespace: Lorenz Schori
02:24 PM Revision e3657e09: When removing old entries, do not take into account new/changed IP: Lorenz Schori
02:19 PM Revision f4e8b87a: Ensure that $IP can be used in a file name: Lorenz Schori
01:51 PM Revision 58733b40: Validate domain parameter for the learn-address script: Lorenz Schori
01:14 PM Revision ad31954e: Merge pull request #3725 from sestary/master: Renato Botelho
01:12 PM Revision 3000b44d: Use is_numeric() to make sure $prefix is not 0: Renato Botelho
01:12 PM Revision 64d2b953: Use is_numeric() to make sure $prefix is not 0: Renato Botelho
01:11 PM Revision fa946568: Fix parsing "::/0" as "::/128" on OpenVPN IPv6 Tunnel Remote network: (cherry picked from commit 425656522f01ea6fe5f702c4b3b16a628054869e) enukane
01:10 PM Revision f5775694: Merge pull request #3604 from enukane/fix/openvpn-ipv6-remote-netmask-0-treated-as-128: Renato Botelho
12:54 PM Revision 6c2f38f4: Enable snmptt package build: Renato Botelho
12:50 PM Feature #7549 (Feedback): Enable Python support in Unbound: Applied in changeset commit:ae764da6ef91f0e9f440d423dfbdb72f44b33276. Jim Pingle
12:40 PM Feature #7549 (Resolved): Enable Python support in Unbound: Unbound has optional Python support, which is not currently enabled. Enabling this option will allow packages such as... Jim Pingle
12:38 PM Revision df0b717d: Fix net.inet.ip.random_id tunable description (Bug #6087): (cherry picked from commit 77408e612de12311d9fd517b2de2de586f4c0ddb) Doktor Notor
12:38 PM Revision 6605a0c3: Merge pull request #3556 from doktornotor/patch-3: Renato Botelho
12:27 PM Revision 8740bd5e: Request PD even if no interfaces are set to track6 (Bug #4544): See https://redmine.pfsense.org/issues/4544#note-4
(cherry picked from commit b0837cebf9836c4cdd5873b3e463f1afb8403811) Doktor Notor
12:27 PM Revision c4d3a133: Merge pull request #3559 from doktornotor/patch-4: Renato Botelho
12:11 PM Bug #6400: assign_interfaces.php issues with large numbers of interfaces: I'm having the same issue with about 230 VLAN interfaces on 2.3.3.
Assign_Interfaces.php ist not usable and all conf... Jonas Dreher
08:59 AM Todo #7507 (Resolved): Investigate and potentially add options for fast-io and sndbuf/rcvbuf tweaks to OpenVPN: Thanks for testing! Jim Pingle
12:37 AM Todo #7507: Investigate and potentially add options for fast-io and sndbuf/rcvbuf tweaks to OpenVPN: we were already using those params as advanced settings till date and now that it appears in GUI it works well, can b... Bipin Chandra
07:54 AM Bug #4544: PD not requested if no interfaces set to track6: Thanks as well. :) Kill Bill
07:28 AM Bug #4544 (Feedback): PD not requested if no interfaces set to track6: PR has been merged, thanks! Renato Botelho
05:30 AM Bug #4544: PD not requested if no interfaces set to track6: Can someone kindly review the PR before it's again too late even for 2.4? Kill Bill
07:39 AM Bug #6087 (Feedback): Missmatching description to default value on net.inet.ip.random_id under system tunables: PR has been merged, thanks! Renato Botelho
06:23 AM Revision 3c6a58ef: Use braces around shell variables to reduce ambiguity: Lorenz Schori
06:18 AM Revision 4f4de341: Only add learn_address script in tun-mode: Lorenz Schori
06:18 AM Revision de8d3c07: Specify chroot and directory when testing config, use variables for common paths: Lorenz Schori
06:18 AM Revision 0cc17a06: Register CN of OpenVPN clients in DNS Resolver: Lorenz Schori

05/14/2017

03:15 PM Revision 2684f8d5: Revert "Updated d3.js and d3pie.js to latest versions": This reverts commit 47d4784602466d723a84bb1af6d313c4ba5a0115. Steve Beaver
03:14 PM Revision b036b5e5: Revert "Updated d3.js and d3pie.js to latest versions": This reverts commit 47d4784602466d723a84bb1af6d313c4ba5a0115. Steve Beaver
10:22 AM Todo #7546: d3pie version update: Reverted Anonymous
08:11 AM Todo #7546: d3pie version update: Seems the compatibility check failed.
https://forum.pfsense.org/index.php?topic=130533.0... Pi Ba
07:50 AM Feature #7529 (Resolved): CPU Type: Jim Pingle
01:12 AM Feature #7529: CPU Type: works fine now, this can be closed Bipin Chandra
07:49 AM Todo #7545 (Resolved): OpenVPN 2.4.2: Jim Pingle
01:13 AM Todo #7545: OpenVPN 2.4.2: new snap has upgraded openvpn now and works well, this can be closed Bipin Chandra
12:50 AM pfSense Packages Feature #7548: Add absolute offset stat to NTP monitoring display: PR https://github.com/pfsense/FreeBSD-ports/pull/355
Has a full refactoring of the code first, then adding this feat... Phillip Davis

05/13/2017

12:58 PM Revision f8339acf: Fix active AES-NI test. Ticket #7529: Jim Pingle
12:21 PM pfSense Packages Feature #7548: Add absolute offset stat to NTP monitoring display: PR https://github.com/pfsense/FreeBSD-ports/pull/354 (now closed) Phillip Davis
12:15 PM pfSense Packages Feature #7548 (Resolved): Add absolute offset stat to NTP monitoring display: In Status Monitoring, NTP, the graph and stats data below it show the time offset. This varies plus and minus from ze... Phillip Davis
08:00 AM Feature #7529: CPU Type: I shuffled that block of code around so much trying to get the wording/formatting right that one slipped by. I pushed... Jim Pingle
04:33 AM Feature #7529: CPU Type: Looking at the commit, I think there is an error in functions.inc.php :
the line:
$cpucrypto_active = is_module_loa... Jo S

05/12/2017

07:09 PM Bug #7352: pfSense IPv6 static route is dumped after a WAN flap: Michael Zieher wrote:
> What happens if you just open a page (WAN Interface maybe), click 'save' without changing an... JC Denton
05:42 PM Revision a84e59a2: Show if a CPU has AES-NI/CPU crypto support even if the module isn't loaded. Implements #7529: Jim Pingle
04:12 PM Bug #7547 (Resolved): Static routes using aliases are not automatically updated when alias content changes: When adding a new static route into an Alias group the route does not populate until a resave.
Steps to reproduce:
... Chris Macmahon
03:37 PM Revision d5530198: Updated d3.js and d3pie.js to latest versions: Fixed #7546
(cherry picked from commit 47d4784602466d723a84bb1af6d313c4ba5a0115) Steve Beaver
03:35 PM Revision 47d47846: Updated d3.js and d3pie.js to latest versions: Fixed #7546 Steve Beaver
02:47 PM Bug #4310: Limiters + HA results in hangs on secondary: Hmmm.... this is very much no not ideal. :( I was going to do this in a new environment as we have soft limits in our... Matthew Brown
12:50 PM Feature #7529 (Feedback): CPU Type: Applied in changeset commit:a84e59a27094e3ccc4f13b596ff1bb80e3ae267a. Jim Pingle
10:37 AM Todo #7546: d3pie version update: Thanks Steve! BBcan177 .
10:36 AM Todo #7546 (Resolved): d3pie version update: Updated as requested Anonymous
10:17 AM Todo #7546: d3pie version update: Checking for compatibility Anonymous
09:59 AM Todo #7546 (Resolved): d3pie version update: pfSense has d3pie v0.1.6, while the latest version is 0.2.1
https://github.com/benkeen/d3pie
Can this ... BBcan177 .
09:37 AM Todo #7545: OpenVPN 2.4.2: Great - I'll be sure to check it out when it's compiled into a snapshot.
Thanks Jim James Webb
09:33 AM Todo #7545: OpenVPN 2.4.2: I just cherry-picked the OpenVPN 2.4.2 port update commit to the ports branch for pfSense 2.4 snapshots, so the next ... Jim Pingle
09:29 AM Todo #7545: OpenVPN 2.4.2: Fantastic - that's great news.
James James Webb
09:28 AM Todo #7545: OpenVPN 2.4.2: Yep, that's already on our to-do list. It was just updated in the FreeBSD ports tree late last night.
The export p... Jim Pingle
09:26 AM Todo #7545 (Resolved): OpenVPN 2.4.2: Hi there,
I am unsure whether the pfSense 2.4 version will include the OpenVPN 2.4.2 version or just 2.4. However,... James Webb
09:11 AM Bug #7542 (Rejected): Enter Persistent CARP Maintenance Mode is broken in pfsense 2.4: It works correctly on 2.3.4 and 2.4, no problems with a proper configuration. You may have something else wrong with ... Jim Pingle
04:32 AM Bug #7542 (Rejected): Enter Persistent CARP Maintenance Mode is broken in pfsense 2.4: Just upgraded my pfsense ha-cluster to v2.4. If i try to switch one of my nodes into persistent CARP maintenance mode... Kilian Ries
06:46 AM pfSense Packages Bug #7543: pfBlockerNG doesn't appear to pull IP block lists that are marked as "OFF" if previously they were enabled: It's a bug. The update message should reflect the deletion of the IP ranges associated with the list set to "OFF". ... Andrew -
06:38 AM pfSense Packages Bug #7543 (Rejected): pfBlockerNG doesn't appear to pull IP block lists that are marked as "OFF" if previously they were enabled: Jim Pingle
06:25 AM pfSense Packages Bug #7543: pfBlockerNG doesn't appear to pull IP block lists that are marked as "OFF" if previously they were enabled: Andrew - wrote:
> Please can you confirm whether pfBlockerNG is properly pulling lists of IPs that are changed from ... Kill Bill
04:39 AM pfSense Packages Bug #7543: pfBlockerNG doesn't appear to pull IP block lists that are marked as "OFF" if previously they were enabled: If you have various IPv4 lists and set one of them to "ON", but then subsequently set it to "OFF", it appears that pf... Andrew -
04:35 AM pfSense Packages Bug #7543 (Rejected): pfBlockerNG doesn't appear to pull IP block lists that are marked as "OFF" if previously they were enabled: Andrew -
06:36 AM Feature #7544 (Rejected): Graphing hits against firewall rules.: That is not possible, there is no such keyword for pf, and there isn't any viable way for us to handle that on the fi... Jim Pingle
05:09 AM Feature #7544 (Rejected): Graphing hits against firewall rules.: In the Extra Options in the filewall rule would it be possible to add the following under Log packets that are handle... Andy Kniveton

05/11/2017

08:57 PM Bug #4723: Can't forward UDP fragmented packets with scrubbing enabled.: Conducted another test:
(From my workstation 10.3.70.40)
ping 10.11.2.15
ping -l 1500 10.11.2.15
(From my vir... ryon m
08:38 PM Revision 83d2b83a: Allow a wider range of characters to be used in certificate fields, as laid out by RFC 4514. Fixes #7540: Jim Pingle
08:06 PM Revision d777679c: Start sending snapshots to nfs1: Renato Botelho
08:06 PM Revision 7a5b8b4e: Start sending snapshots to nfs1: Renato Botelho
07:53 PM Revision c07071cb: auth_check lowers cpu usage for checking if the user has permission for the page requested when used in place of guiconfig, especially useful for frequent requests like those made by stats and traffic widgets: Pi Ba
04:03 PM Feature #7541 (New): ZFS Install, add hot spare option: Since the 2.4 beta installer has the option to setup ZFS, and a lot of parameters, I would like to see the installer ... T M
03:50 PM Todo #7540 (Feedback): Fix ca/cert input validation to allow currently blocked characters: Applied in changeset commit:83d2b83af9953ecbcc5917d935f077e7dabe8e10. Jim Pingle
03:33 PM Todo #7540 (Resolved): Fix ca/cert input validation to allow currently blocked characters: We currently prevent some valid characters from being used in fields such as Organization, such as ".", "!", "~", and... Jim Pingle
02:27 PM Revision 9c34bf7b: Send files only to NFS1: Renato Botelho
02:26 PM Revision 449a980f: Send files only to NFS1: Renato Botelho
02:15 PM Revision d78520bd: Start sending files to nfs1.nyi: Renato Botelho
02:14 PM Revision a4e8ba01: Start sending files to nfs1.nyi: Renato Botelho
10:27 AM pfSense Packages Bug #7539 (Rejected): OpenVPN dashboard widget shows 1194 for client connections: We report what OpenVPN's management interface reports. In this case, that is actually the remote client's _source_ po... Jim Pingle
10:25 AM pfSense Packages Bug #7539 (Rejected): OpenVPN dashboard widget shows 1194 for client connections: I have never submitted a bug before, but I have noticed this issue now that I have built a second VPN server to play ... machstem machstem
01:01 AM Revision 791bdfd5: Merge branch 'master' into if-stats-widget-settings: Phillip Davis

05/10/2017

09:05 PM Revision ed8dbc04: Fix the extra "of" in the help text.: Robbert Rijkse
07:55 PM Revision 7618a842: Add OpenVPN GUI Option for "sndbuf" and "rcvbuf", using the same value for both. Fixes #7507: Jim Pingle
06:59 PM Revision e9fe3847: Rename Netgate Coreboot Upgrade package directory to better reflect port name: Renato Botelho
06:59 PM Revision c564c8b3: Rename Netgate Coreboot Upgrade package directory to better reflect port name: Renato Botelho
06:56 PM Revision 12d2dedf: Rename Netgate Coreboot Upgrade package directory to better reflect port name: Renato Botelho
06:45 PM Revision 0bbcbe8b: get_pkg_info improve installed_pkgs_only case: (cherry picked from commit dd6ecfa27246935ca03747162b802fcd4ba36100) Phil Davis
06:45 PM Revision 3459c6ec: Merge pull request #3719 from phil-davis/no-packages: Renato Botelho
06:28 PM Revision 6e0bfeb2: Merge pull request #3579 from frankthetank/dyndns_dreamhost: Renato Botelho
06:27 PM Revision c7937601: Merge pull request #3726 from phil-davis/multi-widget-optional: Renato Botelho
06:27 PM Revision dd3f0e7d: Merge pull request #3710 from phil-davis/edit-widget-title1: Renato Botelho
06:24 PM Revision 2df5d9ee: Add OpenVPN GUI option for "fast-io" to clients and servers. Ticket #7507: Only compatible with UDP modes, and also not compatible with "shaper". Jim Pingle
03:15 PM Revision 6ee05a88: Add "netstat -nWx" to status.php output: (cherry picked from commit 6252b47062a3bf2be19a43be480fd0acd56b75d0)
(cherry picked from commit 5479efd16933d28d697b4... Jim Pingle
03:15 PM Revision 5479efd1: Add "netstat -nWx" to status.php output: (cherry picked from commit 6252b47062a3bf2be19a43be480fd0acd56b75d0) Jim Pingle
03:14 PM Revision 6252b470: Add "netstat -nWx" to status.php output: Jim Pingle
03:13 PM Todo #7507: Investigate and potentially add options for fast-io and sndbuf/rcvbuf tweaks to OpenVPN: This seemed safe enough and reports of significant speed increases, especially on SG-1000, made this desirable for 2.... Jim Pingle
03:10 PM Todo #7507 (Feedback): Investigate and potentially add options for fast-io and sndbuf/rcvbuf tweaks to OpenVPN: Applied in changeset commit:7618a842d54eade58007ab72c751b1f1a900f840. Jim Pingle
12:37 PM Feature #7537 (Resolved): Include mellanox mlx4 and mlx5 ethernet driver: Hello Devs,
I know you guys doesn't like infiniband, but since there is a lot of cheap option with mellanox card, ... Alexandre Paradis
11:35 AM Bug #7536 (Duplicate): <sendpacket> sendmsg on cpsw0: Permission denied: I noticed the following log entry and I'm not sure what it indicates. This is on an SG-1000. I noticed this because I... R Minnich
11:19 AM pfSense Packages Feature #7535 (New): Snort messages filling System / General. Should have its own log.: I'm running 2.3.4. Snort is completely burying other messages in System / General. It should have its own log. Daryl Morse
08:02 AM Bug #7534 (Not a Bug): gif interface with /64 subnet gets configured as /128: A gif tunnel (with tunnelbroker.net) has been configured with /64 nets in GIF settings, as well as on OPT6 interface ... Marcus Scholz
06:17 AM Bug #7518 (Resolved): Not all language choices show selected text: Renato Botelho
05:19 AM Bug #7518: Not all language choices show selected text: Fixed - all languages in the drop-down now work,
2.4.0-BETA (amd64)
built on Tue May 09 13:43:38 CDT 2017
FreeBSD ... Phillip Davis

Also available in: Atom

Project

General

Profile

pfSense

Activity

Activity

06/08/2017

06/07/2017

06/06/2017

06/05/2017

06/03/2017

06/02/2017

06/01/2017

05/31/2017

05/30/2017

05/29/2017

05/28/2017

05/27/2017

05/26/2017

05/25/2017

05/24/2017

05/23/2017

05/22/2017

05/21/2017

05/20/2017

05/19/2017

05/18/2017

05/17/2017

05/16/2017

05/15/2017

05/14/2017

05/13/2017

05/12/2017

05/11/2017

05/10/2017