Activity
From 06/27/2017 to 07/26/2017
07/26/2017
-
11:44 PM pfSense Packages Bug #7729 (Resolved): pfBlockerNG orders NAT licked rules to the bottom of firewall rules
- When I use pfBlockerNG and rules order as this https://snag.gy/yFQa5b.jpg after rules update my NAT linked non-pfBlo...
-
10:25 PM Bug #7723 (Not a Bug): Cannot focus username or password input fields
-
06:45 PM Bug #7723: Cannot focus username or password input fields
- I upgraded to 2.3.4p1 and can no longer reproduce. Thanks!
-
05:08 PM Revision 508a84ed: Enable REDIS option for suricata
-
05:08 PM Revision 6b473757: Enable REDIS option for suricata
-
05:08 PM Revision d1637ec2: Enable REDIS option for suricata
-
03:12 PM Bug #7728: 1:1 NAT: Destination IP Alias not displayed as web link
- image of bad behaviour
-
03:10 PM Bug #7728 (Resolved): 1:1 NAT: Destination IP Alias not displayed as web link
- If you define a 1:1 NAT rule with a destination IP (source/destination match) this destination IP may be an alias. In...
- 02:50 PM Revision 1fea5a2e: Fixed 7128
-
02:37 PM Bug #7629: FreeBSD PR affecting pfsense
- Since JimP has confirmed 2.4.x will move to 11.1 then this bug is effectively resolved "after" that change occurs.
- 02:11 PM Revision 38af638a: Allow recheck on refresh if JSON not available
-
01:44 PM Revision e14c441b: Make rules that deal with IP+MAC pairs to be layer2 only
-
12:30 PM pfSense Packages Bug #7278 (Feedback): Suricata Service - Advanced Configuration Pass-Through not working
- Merged, thanks!
-
12:05 PM Feature #7593 (Rejected): Enable FreeBSD 11 pvclock module in 2.4 builds
- pvclock is not a module, it's a standard piece of the kernel as you can see at original review at https://reviews.fre...
-
11:48 AM Feature #7727: uPnP fails to properly give out subsequent reservations when multiple gaming systems are playing the same game/using the same port
- the game in question is "For Honor", but im pretty sure it affects any game that uses peer to peer matchmaking. There...
-
11:46 AM Feature #7727 (Resolved): uPnP fails to properly give out subsequent reservations when multiple gaming systems are playing the same game/using the same port
- It's a bug with pfsense, at least in my eyes (nearly 15 years experience in IT and am a senior security engineer with...
-
11:01 AM Bug #7474: Problems adding gateway from interface edit
- Already in master by PR https://github.com/pfsense/pfsense/pull/3700
So it happens already in 2.4 - no need to push ... -
08:54 AM Bug #7474: Problems adding gateway from interface edit
- Push to 2.4.1
-
10:32 AM Bug #7128 (Resolved): system_advanced_network.php - fugly IPv6 over IPv4 input field alignment
- Looks good now
-
09:52 AM Bug #7128 (Feedback): system_advanced_network.php - fugly IPv6 over IPv4 input field alignment
- Changed layout to use two separate fields + JS hide/show
-
09:09 AM Feature #7549 (Resolved): Enable Python support in Unbound
- Anything we need to do on the OS side is done already, the rest is up to the actual scripts to setup mounts/libraries...
-
08:55 AM Bug #7268 (Feedback): System Info Widget "All" button does not work with "Disable the automatic dashboard auto-update check"
- Merged
-
08:54 AM pfSense Packages Feature #7548 (Feedback): Add absolute offset stat to NTP monitoring display
- Merged, thanks!
-
08:49 AM Todo #6606 (Feedback): Adapt captive portal to work without multi-instance ipfw
- Work is now complete
-
07:16 AM Bug #7724 (Rejected): Captive portal not blocking unauthorized MAC addresses
- This is not a general problem that can be reproduced here, and there is not enough detail in your report to speculate...
-
07:09 AM Bug #6400: assign_interfaces.php issues with large numbers of interfaces
- See also: #7726
-
07:08 AM Bug #7726 (Duplicate): Many VLANS and php-fpm 100%CPU Hangs web gui
- Duplicate of #6400
-
05:43 AM Bug #7726 (Duplicate): Many VLANS and php-fpm 100%CPU Hangs web gui
- This problem was reported some time ago already:
https://forum.pfsense.org/index.php?topic=102607.0
https://forum... -
03:14 AM Feature #1219: Ship DTRACE enabled kernels in the images
- +1
I would not even bother if dtrace kernel was an extra image for pfsense 2.4. -
12:05 AM Bug #7725 (Resolved): Support for iwm
- FreeBSD 11-Current added support for the Intel Dual Band Wireless AC 3160/7260/7265 IEEE 802.11ac network adapters (h...
07/25/2017
-
11:39 PM Bug #7724 (Rejected): Captive portal not blocking unauthorized MAC addresses
- We are using pfSense
Serial: 57625aa6-71ba-11e7-8e29-0800275891eb
Netgate Device ID: f3ad8559b22bd5e94b4d
From... -
09:03 PM Revision 239b15fb: Add some info to HELP text (no code change otherwise)
- NTP background isn't going to be widely known. So provide a bit of info so that it's done properly if someone cares.
... -
06:55 PM Revision f6e6ff31: Restore calls to pfSense_ipfw_table_zerocnt(), it's fixed now
-
05:10 PM Revision f4c867e0: Remove unused parameters
-
05:08 PM Revision 5f6825bb: Do not associate IP and MAC on down table
-
05:04 PM Revision 75395abf: Fix syntax
-
04:56 PM Revision fa6ae0ea: Remove leftover debug
-
04:47 PM Revision 3c4fcd5b: Ressurrect nomacfilter option on CP now IPFW supports combined tables with IP and MAC address
- 02:53 PM Revision b060e08c: Add support for IPv6 AUTO_LINKLOCAL flag on bridge interfaces
-
02:49 PM Revision d751dee3: typo
- "Networked" not "network" - "Internet of Things" especially.
-
02:48 PM Revision 94ef78af: grammar fix
-
02:37 PM Revision ef77e40e: format %1$s etc in help
-
02:33 PM Revision b45746a3: Improve the HELP note about what will/won't work if TLD is set to ".local"
- For example, some people won't use mDNS and won't know other things might break; also it's not clear that while ".loc...
-
02:18 PM Bug #6223: IPsec + OpenBGPD fails with "PF_KEY socket: No buffer space available"
- Only in that we're making progress on replacing OpenBGPD with FRR, which hopefully will not suffer from the same issu...
-
02:14 PM Bug #6223: IPsec + OpenBGPD fails with "PF_KEY socket: No buffer space available"
- Any progress on this?
-
12:21 PM Bug #7723 (Feedback): Cannot focus username or password input fields
- No problems here on Chrome with Android 7.1.2 and Chrome 59.0.3071.125 (Tablet) or Android 7.0 (Droid Turbot 2), in p...
-
11:51 AM Bug #7723 (Not a Bug): Cannot focus username or password input fields
- The username and password input fields cannot be focused when using Chrome on Android.
h2. Steps to reproduce
1... -
12:04 PM Revision b40b4a3e: Re-introduce Captive Portal statistics
-
10:07 AM Bug #4218: Bridge does not have AUTO_LINKLOCAL flag
- PR: https://github.com/pfsense/pfsense/pull/3788 (simple checkbox, does not detect whether or not ipv6 is configured ...
-
06:43 AM Bug #4218: Bridge does not have AUTO_LINKLOCAL flag
- I think this feature could be implemented as follows:
* Provide a new advanced configuration option on the bridge ... -
09:46 AM Bug #7500: Upgrade From 2.3.3_p1 to 2.4 Fails (libssl.so.8 not found)
- See also: #7722
-
09:46 AM Bug #7722 (Duplicate): PHP Startup: Unable to load dynamic library '/usr/local/lib/php/20131226/ssh2.so' - Shared object "libssl.so.7" not found, required by "libssh2.so.1" in Unknown on line 0
- Duplicate of #7500
-
09:33 AM Bug #7722 (Duplicate): PHP Startup: Unable to load dynamic library '/usr/local/lib/php/20131226/ssh2.so' - Shared object "libssl.so.7" not found, required by "libssh2.so.1" in Unknown on line 0
- Upgraded through WebGUI 2.3.4 to 2.4.0-BETA (amd64) everything seems to go smooth except I receive this error...
C... -
06:02 AM Bug #7721 (Closed): NTPd stops using external peers if listening on one interface only in a muliwan setup
- In a multiwan setup, when selecting only one listening interface (eg. LAN), NTPd does not select external peers as th...
07/24/2017
-
09:32 PM Feature #7720 (New): Add general watchdog kernel modules (like ichwd) and watchdogd support in the GUI.
- Per this topic, enabling watchdogd seems to be harder than it should be: https://forum.pfsense.org/index.php?topic=10...
-
03:56 PM Bug #7719 (Resolved): Dynamic DNS updates not working on interface failover
- I realized that dynamic DNS hostnames are not being updated on interface failover. When manually marking a gateway as...
-
11:12 AM Revision eb0a2a94: Update translation files
-
11:04 AM Revision 46b206d7: Regenerate pot
-
10:05 AM Feature #7718 (New): Hostname for Custom DynDNS Updater.
- Hi,
right now I'm using a custom DynDNS service for VPN connectivity. The problem is that you can't set the hostna... -
09:34 AM pfSense Packages Bug #7191 (Resolved): squid package EN-US grammar errors
-
09:29 AM pfSense Packages Bug #7191: squid package EN-US grammar errors
- Also fixed in 0.4.37 so I am sure this bug can be closed now.
-
09:18 AM pfSense Packages Bug #7674: Issue Downloading Snort Alert Log Download
- Ryan Eckenrode wrote:
> I have found that I am no longer able to download the Alert Logs from the snort_alerts.php p... -
03:32 AM Bug #4310: Limiters + HA results in hangs on secondary
- Jose Duarte wrote:
> For those still with problems you can use limiters in HA with any version w/out kernel panic bu...
07/22/2017
-
07:26 AM Feature #7717 (Closed): DNS Resolver update to Unbound-1.6.4 to get RPZ / fastrpz support
- We'll pick it up automatically once it hits the proper ports branches used by 2.3.x and 2.4.x.
-
06:26 AM Feature #7717 (Closed): DNS Resolver update to Unbound-1.6.4 to get RPZ / fastrpz support
- We would like to be able to use Reverse Policy Zones (RPZ) using the "fastrpz" patch which Unbound has included into ...
07/21/2017
-
07:08 PM pfSense Packages Bug #7716 (Resolved): Suricata - Barnyard2 webui configuration updates result in base64-encoded value written to the config for the password
- Any changes to the Suricata barnyard configuration page requires that you update the password as well, otherwise the ...
-
11:47 AM Bug #7715: Update from 2.3.4 to -p1 mangled many config entries including users, patches, other config
- ok
-
11:42 AM Bug #7715 (Rejected): Update from 2.3.4 to -p1 mangled many config entries including users, patches, other config
- Please discuss a problem such as this on the forum or mailing list rather than jumping right to assuming it's a bug a...
-
11:35 AM Bug #7715: Update from 2.3.4 to -p1 mangled many config entries including users, patches, other config
- Logs
-
11:35 AM Bug #7715 (Rejected): Update from 2.3.4 to -p1 mangled many config entries including users, patches, other config
- I updated my test router 2.3.4 to 2.3.4-p1 and a load of config got wiped out in the process, including users reset a...
-
09:49 AM Bug #7714 (Confirmed): NTP Widget Time Display
- Note: The time itself is correctly fetched from the firewall, but is being adjusted to the wrong time _zone_ when dis...
-
09:45 AM Bug #7714 (Resolved): NTP Widget Time Display
- NTP Widget on 2.3.4-RELEASE-p1 is showing a time other than the received NTP time. Timezone is set to Etc/UTC as per ...
-
09:33 AM Feature #7245: NTP widget shows client time instead of server time
- Start a new bug report for that. It may be using the local time _zone_ incorrectly but it is not using the local cloc...
-
09:31 AM Feature #7245: NTP widget shows client time instead of server time
- Jim Pingle wrote:
> The fix was in 2.3.4 and any release after that.
>
> It is not pulling local time. I just con... -
09:29 AM Feature #7245: NTP widget shows client time instead of server time
- The fix was in 2.3.4 and any release after that.
It is not pulling local time. I just confirmed it by loading the ... -
09:19 AM Feature #7245: NTP widget shows client time instead of server time
- This appears to still be pulling local time in 2.3.4-RELEASE-p1.
Was this fix part of 2.3.4 or am I misreading somet... -
06:31 AM Bug #7713 (Rejected): APU2C4 + TRAFFIC SHAPER CBQ = KERNEL PANIC
- Please discuss the problem on the forum before opening a bug report.
It is highly unlikely that we will make speci... -
04:37 AM Bug #7713: APU2C4 + TRAFFIC SHAPER CBQ = KERNEL PANIC
- The issue occur with a simple install with at least 1 vlan (vlan number2).
Without VLAN the issue doesn't occur.
... -
03:17 AM Bug #7713 (Rejected): APU2C4 + TRAFFIC SHAPER CBQ = KERNEL PANIC
- Hardware APU2C4
Pfsense 2.3.4_1
Coreboot 4.0.7
As soon as you activated traffic shaper with CBQ, there is a kern... -
04:19 AM Bug #4310: Limiters + HA results in hangs on secondary
- For those still with problems you can use limiters in HA with any version w/out kernel panic but for that you need ad...
07/20/2017
-
10:59 PM Feature #4606 (Duplicate): PKI : CA signing external CSR
- Superseded by #7383
-
06:42 PM Feature #7712: Support NPt with Dynamic WAN Interfaces
- Jim Pingle wrote:
> Duplicate of #4881
Oops. My apologies, my search was incomplete. -
06:31 PM Feature #7712 (Duplicate): Support NPt with Dynamic WAN Interfaces
- Duplicate of #4881
-
05:39 PM Feature #7712 (Duplicate): Support NPt with Dynamic WAN Interfaces
- Currently, using Multi-WAN with IPv6 requires a static IPv6 address on all WAN connections. Mass market cable and DS...
- 05:41 PM Revision a911c65a: Support widget visible by default
- 05:34 PM Revision b96b6d3b: Add customer support widget
-
05:04 PM Revision 629be5fd: Do not re-create core pkg repo when running with -r
-
05:04 PM Revision 47683c94: Do not re-create core pkg repo when running with -r
-
05:04 PM Revision 31fd94b3: Do not re-create core pkg repo when running with -r
-
09:53 AM Bug #7711: Traffic Shapper = Kernel Panic
- Ok, I will do more testing and keep you inform.
Thanks. -
09:52 AM Bug #7711: Traffic Shapper = Kernel Panic
- Like most other x86/x86-64 hardware, while it may work, we do not specifically test on that platform to ensure compat...
-
09:40 AM Bug #7711: Traffic Shapper = Kernel Panic
- Ok but APUC4 is a compatible pfsense hardware no?
-
09:39 AM Bug #7711 (Rejected): Traffic Shapper = Kernel Panic
- Please discuss the problem on the forum before opening a bug report.
It's entirely possible that even if it isn't ... -
09:34 AM Bug #7711: Traffic Shapper = Kernel Panic
- The stability of the APU2C4 was perfect for 5 months before traffic shapper testing...
Same issue with 3 other APU... -
09:33 AM Bug #7711 (Rejected): Traffic Shapper = Kernel Panic
- Hardware APU2C4 with SSD 16Gb
As soon as I configure traffic shapper (wizard or not), my pfsense is completely stu... -
04:23 AM Bug #7709: raspberry pi or anything that can emulate ethernet gadget over usb mac id not read
- i had filed a bug request on bugzilla on freebsd site and the devs there provided a patch to test but i have no clue ...
07/19/2017
-
02:05 PM Revision e266811c: Update the base package exclude files list.
-
01:54 PM Revision 57ee53b6: Build frr for testing
-
08:36 AM Bug #7326 (Resolved): Unbound fails to start during rc.wanipchange when using large enough dns lists
- I still haven't been able to replicate the original problem here, but unbound appears to be restarting OK on WAN fail...
-
08:07 AM Bug #7693 (Resolved): Brute force protection does not kill states, so additional login attemps may be possible in some cases
- Works. States get killed, client cannot make new connections.
-
07:50 AM Bug #7709: raspberry pi or anything that can emulate ethernet gadget over usb mac id not read
- well the mac spoofing works in gui but the base mac id keeps changing so pfsense doesnt query for the new mac id when...
-
07:07 AM Bug #7709: raspberry pi or anything that can emulate ethernet gadget over usb mac id not read
- That would be the same as setting a MAC address to spoof on the interface configuration in the GUI. If that doesn't w...
-
06:48 AM Bug #7709: raspberry pi or anything that can emulate ethernet gadget over usb mac id not read
- there is a way mentioned here https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=174464
no idea if this can be implem... -
07:41 AM Todo #7708 (Resolved): bsdinstall does not have a "Recover config.xml" option like the previous installer
- Works!
07/18/2017
-
09:47 PM Bug #7697: NAT port forward rule using "WAN address" doesn't work as expected if router does not acquire a WAN address on startup
- I'll try to test it out in the next couple of weeks hopefully. Thanks for the fix.
-
04:03 PM Revision 396a2796: Fix license
-
03:35 PM Revision e5aeaeb6: Add installer script to optionally recover config.xml off an existing drive. Implements #7708
-
01:49 PM Bug #7710 (Resolved): IGMP Proxy
- IGMP Proxy failed on SG-1000, its been working O.K and for some reason the recent updates have caused it to fail agai...
-
11:34 AM Bug #7709 (Needs Patch): raspberry pi or anything that can emulate ethernet gadget over usb mac id not read
- If it's a FreeBSD bug, which it appears to be, report it upstream to FreeBSD. Once they fix it, the change will trick...
-
11:23 AM Bug #7709 (Needs Patch): raspberry pi or anything that can emulate ethernet gadget over usb mac id not read
- based on the discussion here
https://forum.pfsense.org/index.php?topic=133695.0
it seems like a freebsd issue whe... -
10:50 AM Todo #7708 (Feedback): bsdinstall does not have a "Recover config.xml" option like the previous installer
- Applied in changeset commit:e5aeaeb6a8b46c9532119285630f4e42d0e79b24.
-
10:12 AM Todo #7708 (Resolved): bsdinstall does not have a "Recover config.xml" option like the previous installer
- The new bsdinstall installer does not have an option to recover an existing config.xml from a previous installation.
... -
09:56 AM Feature #7707 (Resolved): Captive Portal - Radius Time out configuration field
- Captive Portal Radius Server connection function has a hardcoded timeout value of '3' there are instances where it i...
07/17/2017
- 12:48 PM Revision ee8e4e73: Prevent iOS auto-capitalization on username field
- 12:14 PM Revision 376e6f67: Use attribute rekey_enable as usual but optionally allow to set margintime if rekeying is not disabled
- 11:59 AM Revision c21d913d: Change login page links to absolute paths
-
10:30 AM pfSense Packages Feature #7706 (Resolved): Add option to write certificate to the filesystem after renew
- In some cases it would be handy to have the certificate data written out to the filesystem so that action scripts cou...
-
05:24 AM Revision f72f2fac: add "very"
-
05:22 AM Revision 49bb19eb: slight further text/format improvement
-
05:11 AM Revision b0fc769a: Improve help text for promiscuous mode
- "promiscuous mode" is often quoted but not always understood. Also its possible drawbacks (other than compatibility w...
07/16/2017
-
10:04 AM Feature #7705 (Resolved): Support dynamic interface address for 1:1 NAT
- Currently, in the 1:1 NAT UI, the "External subnet IP" field cannot be populated with options such as "WAN address" o...
-
09:42 AM Feature #7704 (Resolved): Destination port range "Any" in Port Forward UI doesn't work
- If you set "Any" as the Destination port range for a Port Forward TCP or UDP entry, upon saving the new rule you get ...
07/15/2017
-
03:44 PM Bug #7702: Unattended Reboot Failing
- OK, NP - thought it was best to capture ... I admit, not sure of the link between the forum and redmine. Sorry!
FY... -
03:38 PM Bug #7702 (Not a Bug): Unattended Reboot Failing
- This is not happening on any systems here. Please do not open bug reports until the problems have been properly evalu...
-
03:12 PM Bug #7702 (Not a Bug): Unattended Reboot Failing
- Hi,
I have been seeing this in recent v2.4 builds, thinking it's something that should be fixed. When I reboot (or... -
03:39 PM Bug #7703 (Not a Bug): HW Acceleration in OpenVPN
- This is a topic for a forum discussion, not a bug report. This is not a discussion or question/answer support platform.
-
03:33 PM Bug #7703 (Not a Bug): HW Acceleration in OpenVPN
- Hi,
This may be me, but just in case - likely good to log it, in case it's not.
Trying to use HW acceleration i... -
02:13 PM Bug #4695: TAP (OpenVPN) Traffic Blocked
- OK, thanks! Wasn't sure if that state was equal to closed or not. Sorry for the extra "traffic".
-
02:10 PM Bug #4695: TAP (OpenVPN) Traffic Blocked
- It's already closed: "Not a bug".
Thanks. -
02:01 PM Bug #4695: TAP (OpenVPN) Traffic Blocked
- Agreed, resolved - close this out (I don't know how, sorry!).
-
02:11 PM Bug #7701 (Rejected): Shell Command (daemon) Stops Other Services
- Hi,
It may just be me (sorry if it is!), but similar to this thread ... I'm finding that some custom shell command... -
02:08 PM Bug #7700 (Closed): Port Forwarding Failing - with Alias
- Hi,
As captured in this thread - it seems that recently Port Forwarding / NAT is broken, when using aliases (works... -
02:00 PM Bug #4696: OpenVPN Status / Client List
- Working correctly in v2.4.0, so this one should be closed - I'd close it, not sure how ... :(.
Thanks! -
01:58 PM pfSense Packages Feature #7699 (New): OpenVPN Client Export - Default Gateway
- Hi,
Just a thought, but - it would be nice to be able to set this option in Client Export, not just in the server ... -
07:41 AM Bug #7698 (Duplicate): Umlauts are no longer displayed properly
- This has already been fixed, the 2.3.4-p1 release is about to come out and includes this correction.
https://doc.pfs... -
06:13 AM Bug #7698 (Duplicate): Umlauts are no longer displayed properly
- In the newest Version on the DHCP Status Page (/status_dhcp_leases.php) Umlauts in the Description Field are no longe...
07/14/2017
-
07:36 PM Revision 3c05905d: Bump PRODUCT_REVISION to 2.3.4-p1
-
06:48 PM Revision db3b3afb: Use an alternate method to stop unbound and fix #7326
- (cherry picked from commit 782453b4dbb77e5bc97a43f56b95a006c5434d65)
(cherry picked from commit 67fea036201f5af338338... -
06:47 PM Revision 67fea036: Use an alternate method to stop unbound and fix #7326
- (cherry picked from commit 782453b4dbb77e5bc97a43f56b95a006c5434d65)
-
06:46 PM Revision 782453b4: Use an alternate method to stop unbound and fix #7326
-
05:40 PM Bug #7692: andwidthd date on daily report incorrect.
- I have created a report with bandwidthd here:
https://sourceforge.net/p/bandwidthd/bugs/50/ -
03:29 PM Bug #7692: andwidthd date on daily report incorrect.
- I don't have it installed on either of my SG-1000s right now. It's possible there is an ARM-specific bug that affects...
-
02:58 PM Bug #7692: andwidthd date on daily report incorrect.
- It is not the browser cache, the date seems to change on every graph generation, and the software was installed just ...
-
07:10 AM Bug #7692 (Not a Bug): andwidthd date on daily report incorrect.
- Most likely something is cached in your browser. Try ctrl+F5 or shift+click reload. It is fine on all of my systems w...
-
07:04 AM Bug #7692 (Not a Bug): andwidthd date on daily report incorrect.
- Bandwidthd shows incorrect date (changing between graphs) in daily report.
See attachment for screenshot.
Env... -
04:28 PM Bug #7697: NAT port forward rule using "WAN address" doesn't work as expected if router does not acquire a WAN address on startup
- The pull-request was pulled yesterday. https://github.com/pfsense/pfsense/commit/40c09b6dadb04928dc9a279969193b620ff1...
-
03:58 PM Bug #7697 (Resolved): NAT port forward rule using "WAN address" doesn't work as expected if router does not acquire a WAN address on startup
- This forum post:
https://forum.pfsense.org/index.php?topic=127585.msg733528#msg733528
Describes what I'm seeing:
<... -
03:25 PM Bug #4479: Firewall rules won't match GRE interface after applying IPSEC transport encryption on GRE tunnel
- I don't see any target version on this bug. Is this being worked on? Any chances this could be fixed for 2.4?
-
03:23 PM Todo #7689 (Resolved): bsdinstall does not automatically copy config.xml from USB drive like the previous installer
- Looks good, multiple confirmations that it works.
-
03:18 PM pfSense Packages Bug #7696 (Resolved): Telegraf Package Saving Incorrect Password
- The contents of the password field are not being passed properly to the telegraf.conf file. The password is being en...
-
02:59 PM Bug #6529: dhcp6c fails to start with track6 on a bridge interface
- I am adding a sighting. My logs are as follows:
@Jul 12 06:23:21 pfSense dhcp6c[17300]: /var/etc/dhcp6c_wan.conf:13 ... -
02:00 PM Bug #7326 (Feedback): Unbound fails to start during rc.wanipchange when using large enough dns lists
- Applied in changeset commit:782453b4dbb77e5bc97a43f56b95a006c5434d65.
-
01:57 PM Revision 7505efe7: If a client address is in the webConfiguratorlockout table, do not allow them to access the GUI. Print an error and kill their states. Ticket #7693
- Extra check to be sure that an existing open state cannot bypass lockout controls.
(cherry picked from commit cc9b0f... -
01:57 PM Revision f0da1eda: If a client address is in the webConfiguratorlockout table, do not allow them to access the GUI. Print an error and kill their states. Ticket #7693
- Extra check to be sure that an existing open state cannot bypass lockout controls.
(cherry picked from commit cc9b0f... -
01:55 PM Revision cc9b0f76: If a client address is in the webConfiguratorlockout table, do not allow them to access the GUI. Print an error and kill their states. Ticket #7693
- Extra check to be sure that an existing open state cannot bypass lockout controls.
-
01:54 PM Bug #7693 (Feedback): Brute force protection does not kill states, so additional login attemps may be possible in some cases
- Moving the sshlockout portion to #7695
-
10:29 AM Bug #7693: Brute force protection does not kill states, so additional login attemps may be possible in some cases
- GUI portion is done. It also kills states if someone tries to access the GUI while in the table, so if it isn't feasi...
-
07:46 AM Bug #7693 (Resolved): Brute force protection does not kill states, so additional login attemps may be possible in some cases
- The way that browsers and ssh clients work, it may be possible to exceed brute force protection limits enforced by ss...
- 10:44 AM Revision 9d472f01: Fix indent of if-block
- 10:36 AM Revision 7683e057: Merge branch 'master' of https://github.com/hamnur/pfsense into HEAD
- 10:29 AM Revision af729f53: Check if margintime is numeric and smaller than P1 lifetime
- 09:58 AM Revision e18ddb38: Hide margintime if rekeying is disabled
-
12:17 AM Revision 47914246: Fix typo
- (cherry picked from commit 2c3b9ac554cc3940962e7f9b1799857583c394ab)
(cherry picked from commit 930914fd813130b0d1bd8... -
12:17 AM Revision 930914fd: Fix typo
- (cherry picked from commit 2c3b9ac554cc3940962e7f9b1799857583c394ab)
-
12:17 AM Revision 2c3b9ac5: Fix typo
07/13/2017
-
07:52 PM Revision 725aee3f: Trafficshaper, show interface names for disabled interfaces, dont just show a kinda 'empty' spot..
-
07:49 PM Revision f6cf3687: dns, allow deleting last row for "Additional Names for this Host"
-
07:06 PM Revision 1fdecbe6: cron, fix job removal by index splice and write valid schedules for ramdrive backups
- (cherry picked from commit ce3371fe969733c92cd91fe31d2acb69fc877986)
-
07:05 PM Revision aeb0e915: cron, dont write_config() when nothing changed.
-
06:59 PM Revision ea7b8b00: Merge pull request #3771 from PiBa-NL/20170701-cron-fix
-
06:58 PM Revision bef8ce51: bootup, change message to "Checking config backups consistency..." to tell whats taking time, as there is usually little to cleanup involved
- (cherry picked from commit c2530487978f68c46c663fee9c9049479f267925)
-
06:58 PM Revision d991f97b: Merge pull request #3772 from PiBa-NL/20170703-boot-config-check-message
-
06:58 PM Revision 04cd314b: nat, portforwards should not make up a new destination information when a configured dhcp interface does not currently have an address.
- fixes: https://forum.pfsense.org/index.php?topic=127585.msg733528#msg733528
(cherry picked from commit 5a8a8bbea33ec2... -
06:56 PM Revision 40c09b6d: Merge pull request #3782 from PiBa-NL/20170712-nat-configure-skip-no-dest
-
06:09 PM pfSense Packages Feature #7691 (New): Allow for custom icap services for squid
- We would like to integrate additional icap services into the pfsense squid configuration, but there is no way add the...
-
05:58 PM Revision 324bbc3f: Restructure how unbound zone data is written to fix processing of "redirect" zone entries. Fixes #7690
- Also corrects some other misc issues for formatting of zone data.
While here, add an option, not exposed in the GUI, ... -
05:58 PM Revision 021332fa: Restructure how unbound zone data is written to fix processing of "redirect" zone entries. Fixes #7690
- Also corrects some other misc issues for formatting of zone data.
While here, add an option, not exposed in the GUI, ... -
04:37 PM Revision 4541f84d: Restructure how unbound zone data is written to fix processing of "redirect" zone entries. Fixes #7690
- Also corrects some other misc issues for formatting of zone data.
While here, add an option, not exposed in the GUI, ... -
02:58 PM Bug #4031: Notifications mail bomb in some gateway failure circumstances
- This could help quite a bit imho :) https://github.com/pfsense/pfsense/pull/3768
-
01:32 PM Bug #7690 (Resolved): System Domain Local Zone Type option Redirect is broken
- Works
-
01:10 PM Bug #7690 (Feedback): System Domain Local Zone Type option Redirect is broken
- Applied in changeset commit:021332fa29f0c08bff833ce1c7ddcb9ac9a769b1.
-
11:50 AM Bug #7690 (Confirmed): System Domain Local Zone Type option Redirect is broken
- Still needs the fix ported to 2.3.x, it did not cherry-pick cleanly.
-
11:50 AM Bug #7690 (Feedback): System Domain Local Zone Type option Redirect is broken
- Applied in changeset commit:4541f84d12c86775022b0e49d527d6f4f9a6911f.
-
11:50 AM Bug #6318: IPsec dashboard widget causes GUI failure
- I think this bug's priority should be raised since it also breaks openvpn functionality.
-
07:14 AM Bug #5319: Error message "No config named" in charon daemon
- This bug is also present in 2.3.4, I have to kill the charon process every 2-3 days to keep the problem from appearing.
07/12/2017
-
08:16 PM Revision 5a8a8bbe: nat, portforwards should not make up a new destination information when a configured dhcp interface does not currently have an address.
- fixes: https://forum.pfsense.org/index.php?topic=127585.msg733528#msg733528
-
02:46 PM Bug #7690 (Resolved): System Domain Local Zone Type option Redirect is broken
- If user chose option 'Redirect' on 'System Domain Local Zone Type' in services_unbound.php unbound doesn't start with...
-
01:19 PM Todo #7689 (Feedback): bsdinstall does not automatically copy config.xml from USB drive like the previous installer
- Change committed to freebsd-src repo, should show up in snapshots soon.
-
01:14 PM Todo #7689 (Closed): bsdinstall does not automatically copy config.xml from USB drive like the previous installer
- Feature is described here:
https://doc.pfsense.org/index.php/Automatically_Restore_During_Install
Basically: Loca... -
12:46 PM Bug #7615: User / Group Privileges for the "Status: Monitoring" page.
- Ok. It appears that when the package "Status_Traffic_Totals" is installed it replaces "Status: Monitoring" in the use...
-
07:53 AM pfSense Packages Feature #7189: Letsencrypt acme sync in HA environment
- Relevant Commits:
2.4:
https://github.com/pfsense/FreeBSD-ports/commit/119d687658b46a0310a481c22f5a435e5de9625f
... -
07:51 AM pfSense Packages Feature #7189 (Resolved): Letsencrypt acme sync in HA environment
- Works on both 2.4 and 2.3.x now.
07/11/2017
-
04:52 PM Bug #7604: Bug #6594 is not resolved: Waiting for Internet connection to update pkg metadata and finish package reinstallation
- A quick workaround:
Interrupt update process with ctrl+c and enter to a shell. Then:
vi /usr/local/etc/pkg/repos/... -
03:59 PM pfSense Packages Feature #7189 (Feedback): Letsencrypt acme sync in HA environment
- Pushed a fix for 2.3.x versions now.
-
03:29 PM pfSense Packages Feature #7189 (Assigned): Letsencrypt acme sync in HA environment
- Well, it works on 2.4, needs some adjustments for 2.3.x yet.
-
03:11 PM pfSense Packages Feature #7189 (Feedback): Letsencrypt acme sync in HA environment
- I just pushed a new feature to the ACME package, it can now send service restart commands via XMLRPC using the system...
-
12:50 PM Bug #7146: install_cron_job() causes inexplicable issues when saving package configuration
- I went through and tried a few of the packages and some did need the write, others did not. I didn't test the whole l...
-
12:11 PM Feature #7688 (Rejected): AutoConfigBackup - Info Icon - username only
- It would be beneficial to include a hover icon (info tip) on the AutoConfigBackup setup page that informs users to us...
-
07:45 AM Bug #7675 (Resolved): Remove MSS clamping exclusions on pppoe, l2tp, pptp
- Thanks for testing!
-
07:43 AM Bug #7675: Remove MSS clamping exclusions on pppoe, l2tp, pptp
- I have updated to the last few snapshots and I have not had any issues with the MSS clamping being set on the PPPOE c...
-
07:11 AM Bug #7687 (Not a Bug): File permissions to open for /var/etc/mpd_wan.conf
- It's also in /conf/config.xml where it can be read by anyone on the box.
At the moment, it's all a part of how the... -
05:11 AM Bug #7687 (Not a Bug): File permissions to open for /var/etc/mpd_wan.conf
- Considering this file has the clear text password to the ISP account it needs to have something less than world reada...
07/10/2017
-
04:15 PM Revision 02068d31: Improve the way the auth server list is generated and account for a key being removed from the array when deleting. Fixes #7682
- (cherry picked from commit fa628b1a15a1c03343caa2735e09de291ae4e382)
-
04:15 PM Revision fa628b1a: Improve the way the auth server list is generated and account for a key being removed from the array when deleting. Fixes #7682
-
04:12 PM Revision 4e4cac0d: Improve the way the auth server list is generated and account for a key being removed from the array when deleting. Fixes #7682
-
03:34 PM Bug #7682 (Resolved): system_authservers delete UI bugs
- Works.
-
11:30 AM Bug #7682 (Feedback): system_authservers delete UI bugs
- Applied in changeset commit:4e4cac0dd53afcf26aa2b523dc16916730d92133.
-
08:35 AM Bug #7682: system_authservers delete UI bugs
- The fix seems to work but it could be better/simpler, see my comments on PR 3780.
-
03:24 PM Bug #7685 (Resolved): OpenVPN Auth Digest Algorithm list contains entries that are functionally identical and thus redundant
- Fixed.
Only actual digest algorithms show now, and not their aliases. Configurations that referenced an alias are ... -
09:40 AM Bug #7685 (Feedback): OpenVPN Auth Digest Algorithm list contains entries that are functionally identical and thus redundant
- I pushed a fix for this in commit:f49ef559060ec8cad5c7a3a548d509cf08b5549b but forgot to put this ticket number on th...
-
08:52 AM Bug #7685: OpenVPN Auth Digest Algorithm list contains entries that are functionally identical and thus redundant
- This also appears to be confirmed by @openssl list-message-digest-algorithms@, which lists which names/aliases map to...
-
07:37 AM Bug #7685 (Resolved): OpenVPN Auth Digest Algorithm list contains entries that are functionally identical and thus redundant
- The way "openvpn --show-digests" works it ends up listing several algorithms that are functionally equivalent but som...
-
02:36 PM Revision f49ef559: Fix OpenVPN Auth Digest Algorithm selection so it does not use duplicate/alias names in the list, and fix existing entries on upgrade so they use the actual digest name and not an alias.
-
09:44 AM pfSense Packages Bug #7681: OpenVPN client export utility - Exporting Android inline configuration can include incorrect client auth method in .ovpn file
- Thank you Jim! Makes sense.
-
07:37 AM pfSense Packages Bug #7681: OpenVPN client export utility - Exporting Android inline configuration can include incorrect client auth method in .ovpn file
- I made a different issue entry for the actual underlying problem here: https://redmine.pfsense.org/issues/7685
-
07:36 AM pfSense Packages Bug #7681 (Not a Bug): OpenVPN client export utility - Exporting Android inline configuration can include incorrect client auth method in .ovpn file
- It does appear that they are the same, but different versions of OpenSSL or different libraries that are OpenSSL-like...
-
08:29 AM pfSense Packages Feature #7686: Add option in HAProxy to configure SSL defaults based on the Mozilla SSL Configuration Generator
- oops, misspelled configure in the subject line
-
08:27 AM pfSense Packages Feature #7686 (New): Add option in HAProxy to configure SSL defaults based on the Mozilla SSL Configuration Generator
- Would be nice to have "Modern | Intermediate | Old" options in the configuration of HAProxy for SSL cipher suites, ba...
-
06:25 AM Bug #6559: OpenVPN 'mode server' directive missing
- If it's remote access, you need to give it a tunnel network. It is not valid for remote access without a tunnel netwo...
-
06:04 AM Bug #6559: OpenVPN 'mode server' directive missing
- Jim Pingle wrote:
> or you have to setup bridging, etc.
>
> It is only doing what it is told (or not told, as the...
07/09/2017
-
08:05 PM Bug #7684: Web Configurator - IP address is cutoff in the Gateways widget
- The gateway x.y.104.1 is the IP address of the router that is upstream from the pfSense WAN.
Dynamic DNS should set ... -
08:04 PM Bug #7684: Web Configurator - IP address is cutoff in the Gateways widget
- Jim Pingle wrote:
> They are not the same thing.
Oops. Where is the "embarassed" emoji when I need it?
-
07:59 PM Bug #7684 (Rejected): Web Configurator - IP address is cutoff in the Gateways widget
- One of those is your upstream ISP gateway (gateways widget)
The other is your firewall's own IP address (Dynamic D... -
07:56 PM Bug #7684 (Rejected): Web Configurator - IP address is cutoff in the Gateways widget
- I currently have an IP address that is XX.XX.XXX.XXX and in the Gateways widget the last 2 digits on the right are mi...
-
02:39 PM Revision 19be2fc2: Reduce complexity of checking whether system should be rebooted after RAM Disk option change.
- Also fix the issue when RAM Disk option is changed, but there is an input error and thus on subsequent form submittin...
07/08/2017
-
10:50 PM pfSense Packages Feature #7683 (New): Splunk Universal Forwarder Package
- It would be nice to have a Splunk Universal Forwarder package so we can send logs and other monitor capable files e.g...
-
10:01 PM Bug #7682: system_authservers delete UI bugs
- master: https://github.com/pfsense/pfsense/pull/3780
RELENG_2_3:https://github.com/pfsense/pfsense/pull/3778
RELENG... -
09:46 PM Bug #7682 (Resolved): system_authservers delete UI bugs
- 1) In system_authservers, have a list of at least 3 extra auth servers defined, and Local Database will be at the end...
-
07:40 PM pfSense Packages Bug #7681 (Not a Bug): OpenVPN client export utility - Exporting Android inline configuration can include incorrect client auth method in .ovpn file
- Intro:
Hello this is my first bug entry. I hope I have done a good job reporting the specifics of what I believe to ...
07/07/2017
-
09:07 PM Revision 2504e3f1: Fix CA reference so serial increases properly. Remove variable for feature that didn't work out. Ticket #7527
-
03:46 PM Bug #7206 (Resolved): Authentication Method Used in Bug 6751 Removed by Amazon
- PR was merged months ago, no recent complaints. Should be OK.
https://github.com/pfsense/pfsense/pull/3608 -
03:45 PM Bug #7213: Hyper-V install, no disk found
- That's something that will need to be addressed by FreeBSD. If it's fixed in 11-STABLE, perhaps our next release afte...
-
03:20 PM Bug #4696 (Not a Bug): OpenVPN Status / Client List
- No additional confirmation or responses in several years/versions, and it wasn't clear it was ever a problem to begin...
-
03:18 PM Bug #7446 (Resolved): RFC2136 Dynamic DNS needs local directive so updates are sourced correctly
-
03:14 PM pfSense Packages Bug #7263 (Resolved): FreeRADIUS - complete lack of input validation
- Seems to be good.
-
03:13 PM Bug #6967 (Resolved): DH Groups 22, 23, 24 missing from Phase 2 selection GUI
-
03:12 PM Bug #7295 (Resolved): RFC2136 not updating at boot time
- It's working here as well, no problems with RFC2136 at boot on 2.4.
-
03:11 PM Bug #6758 (Resolved): 2 x Crash with "PHP Fatal error: Call to undefined function pfSense_interface_listget() in /etc/inc/interfaces.inc on line 80"
- The PHP extensions setup has been completely changed since this report, it's not valid any longer.
-
03:11 PM Bug #6629 (Resolved): Can't update to "update" update (e.g. 2.3.1_5)
- Lots of upgrade issues have been fixed since this report. Most anything left is either cosmetic, caused by network co...
-
03:09 PM Bug #6559 (Not a Bug): OpenVPN 'mode server' directive missing
- No response or confirmation from anyone else seeing the issue on recent versions.
As stated before, it isn't that ... -
03:07 PM Bug #4237 (Closed): Error "macro IPsec not defined" once after firmware upgrade
- No recent reports on supported versions, unless this can be reproduced on 2.4 it appears to be solved.
-
03:04 PM Bug #5741 (Closed): IPs from Random Aliases Lists Are Added to Routes Table
- No response or confirmation from anyone else seeing the issue on recent versions.
-
03:03 PM Bug #4113 (Resolved): multiple instances of /var/db/rrd/updaterrd.sh
- No response or confirmation from anyone else seeing the issue on recent versions.
-
02:39 PM pfSense Packages Bug #7237 (Resolved): ACME - first table row on certs tab does not autoexpand the fields
- This has been fixed for a while now
-
02:29 PM Bug #7667 (Resolved): Calls to unbound-control are missing configuration path so they fail
-
02:29 PM Bug #7649 (Resolved): pkg_edit.php - The last row cannot be deleted with ntopng.xml
-
01:43 PM Bug #7326: Unbound fails to start during rc.wanipchange when using large enough dns lists
- Here is a patch to try, for those who had problems with the previous commit.
-
01:28 PM Bug #7326: Unbound fails to start during rc.wanipchange when using large enough dns lists
- BBcan177 . wrote:
> I would recommend the following command (And also for the other Unbound start/reload etc...)
> ... -
01:11 PM Bug #7677 (Resolved): Cert manager not creating server cert
- Fixed
-
01:10 PM Feature #7527 (Resolved): Sign CSRs - subjectAlternateNames
- Works
-
10:51 AM Bug #7680: Wrong IP address being entered against pfSense host name on a multi-interface system in /etc/hosts
- Jim Pingle wrote:
> There isn't any viable method to override that and adding one would be a lot of work for little ... -
10:27 AM Bug #7680 (Needs Patch): Wrong IP address being entered against pfSense host name on a multi-interface system in /etc/hosts
- There isn't any viable method to override that and adding one would be a lot of work for little benefit. If someone w...
-
10:23 AM Bug #7680 (Needs Patch): Wrong IP address being entered against pfSense host name on a multi-interface system in /etc/hosts
- I'm running pfSense 2.3.4 and it has multiple interfaces. It chooses one of its IP address and enters it in /etc/hos...
-
09:56 AM Feature #6038: Add ability to configure which interface is chosen for defining hostname IP in /etc/hosts
- Nicki Messerschmidt wrote:
> I stumbled over this problem also. In my case I have several LAN interfaces and the wro... -
07:14 AM Bug #7679: Dynamic DNS don't select GW, only default gateway from kernel
- It's ok!
Thank you =) -
07:07 AM Bug #7679 (Rejected): Dynamic DNS don't select GW, only default gateway from kernel
- Please post on the forum for assistance with your Dynamic DNS problem. I, and many others, use Dynamic DNS with multi...
-
06:55 AM Bug #7679 (Rejected): Dynamic DNS don't select GW, only default gateway from kernel
- Acredito que seja um bug, pois testei várias formas e realmente ele só assume o GW do kernel, quando utilizo tanto o ...
-
06:14 AM Bug #7678 (Duplicate): Bad HTML-encoding on the status_dhcp_leases.php page
- This has already been fixed in 2.3.4-p1 (which is not yet released) and snapshot images.
https://doc.pfsense.org/i... -
12:38 AM Bug #7678 (Duplicate): Bad HTML-encoding on the status_dhcp_leases.php page
- It seems that the 2.3.4 release reintroduced an old bug, see #6079. The description column currently shows HTML entit...
07/06/2017
-
06:27 PM Revision 5764c363: Stop using pecl-ssh2
-
06:27 PM Revision 7da9f1e5: Stop using pecl-ssh2
-
06:23 PM Revision b91d55c3: Deprecate pfSense freeradius2 package in favor of freeradius3
-
06:23 PM Revision 6761daa4: Deprecate pfSense freeradius2 package in favor of freeradius3
-
05:47 PM Revision 7db12011: Add another possible CSR Armor string when validating. Ticket #7383
-
05:30 PM Revision 0c82b8c2: Restructure how certificate types and SANs are handled in the cert manager when making a Cert/CSR/Signing, so each section can properly use the controls without duplicating. It is now possible to add SANs and EKUs to certificates when signing using the certificate manager. Fixes #7527 and also Fixes #7677
- NOTE: Attributes such as SANs and KU/EKU cannot be copied from a CSR when signing due to a deficiency in OpenSSL's x5...
-
04:57 PM Bug #7326: Unbound fails to start during rc.wanipchange when using large enough dns lists
- Instead of using this stop command
mwexec("echo '/usr/local/sbin/unbound-control stop' | /usr/bin/su -m unboun... -
07:33 AM Bug #7326 (Assigned): Unbound fails to start during rc.wanipchange when using large enough dns lists
-
07:30 AM Bug #7326 (Feedback): Unbound fails to start during rc.wanipchange when using large enough dns lists
- Applied in changeset commit:6e094e04f7d9634c7151bd9aa68ad93c71584d80.
-
07:22 AM Bug #7326 (Assigned): Unbound fails to start during rc.wanipchange when using large enough dns lists
- Several complaints of unbound not starting/stopping correctly after that last patch was added, so I backed it out for...
-
02:10 PM Feature #1801 (Rejected): Intermediate SSL certs box
- Just import intermediates into the CAs tab directly. See #2800
-
02:07 PM pfSense Packages Bug #4756 (Not a Bug): OpenVPN Client Export fails when using "real" certificate
- It works fine if you import the chain, see #2800, which would include the case of a public CA (which should still nev...
-
02:04 PM Bug #5317 (Not a Bug): CSR signed certificates shows issuer as external
- Import the CA cert (cert only), any intermediate CA certs, and the signed cert. It will pick up the issuer correctly ...
-
02:00 PM pfSense Packages Bug #7170 (Resolved): FreeRADIUS built-in certificate manager defaults to MD5 (!!!), no support for SHA2
- This has all been removed from FreeRADIUS. Cert handling in FreeRADIUS is 100% done in the Cert Manager now on 2.3.4 ...
-
01:48 PM Feature #7666 (Resolved): Adding SAN DNS:username to User Certificates that are created via User Manager the same way as it is done via Cert. Manager
- Works fine now.
-
01:34 PM Feature #7527: Sign CSRs - subjectAlternateNames
- wow. Great. I'll try this out first thing tomorrow morning. Thank you very much :-)
-
12:40 PM Feature #7527 (Feedback): Sign CSRs - subjectAlternateNames
- Applied in changeset commit:0c82b8c2a77bba6b2b3ab42a880c0e478ebc70f6.
-
12:35 PM Feature #7527 (Assigned): Sign CSRs - subjectAlternateNames
-
12:51 PM Feature #7383: system_certmanager.php?act=new: Add new select option to sign a CSR
- Also, as of commit:0c82b8c2a77bba6b2b3ab42a880c0e478ebc70f6 I have changed how this operates slightly, there were a c...
-
12:50 PM Feature #7383: system_certmanager.php?act=new: Add new select option to sign a CSR
- Larry Westfall wrote:
> Below is the request:
> -----BEGIN NEW CERTIFICATE REQUEST-----
That's the problem, it h... -
12:40 PM Bug #7677 (Feedback): Cert manager not creating server cert
- Applied in changeset commit:0c82b8c2a77bba6b2b3ab42a880c0e478ebc70f6.
-
08:31 AM Bug #7677 (Assigned): Cert manager not creating server cert
- I'm in the middle of some certificate work. It should have been in an OK state when I left it yesterday but it's poss...
-
08:24 AM Bug #7677 (Resolved): Cert manager not creating server cert
- Current snap
2.4.0-BETA (amd64)
built on Thu Jul 06 07:22:07 CDT 2017
FreeBSD 11.0-RELEASE-p10
Cert Manager not... - 12:27 PM Revision eb3435be: Removed MSS clamping exclusions
- 12:27 PM Revision b2e4bb17: Removed MSS clamping exclusions
- (cherry picked from commit 53c26adecad735f7a015466dbbcba3f22655a902)
- 12:27 PM Revision 2f55e551: Removed MSS clamping exclusions
- (cherry picked from commit 53c26adecad735f7a015466dbbcba3f22655a902)
-
12:21 PM Revision 53e138c0: Several complaints of unbound problems after commiting, so back this out. Revert "Change the way unbound is stopped when the process is being restarted, to give the old process enough time to exit cleanly. Fixes #7326"
- This reverts commit 863804a917987ea10993433c84399b5711c3c352.
-
12:21 PM Revision c59b2bc3: Several complaints of unbound problems after commiting, so back this out. Revert "Change the way unbound is stopped when the process is being restarted, to give the old process enough time to exit cleanly. Fixes #7326"
- This reverts commit 0577d9df462063bb3d26f0805c1e06fbdb359157.
-
12:20 PM Revision 6e094e04: Several complaints of unbound problems after commiting, so back this out. Revert "Change the way unbound is stopped when the process is being restarted, to give the old process enough time to exit cleanly. Fixes #7326"
- This reverts commit 38d110824c87ff60c6289c0432d55009586ceee4.
-
08:22 AM Bug #7676 (Rejected): L2TP Settings not retained
- Please discuss this on the forum for help diagnosing your issue. That is not a general problem, and more information ...
-
08:13 AM Bug #7676 (Rejected): L2TP Settings not retained
- Trying to configure L2TP VPN Server for a small company, we were able to login through L2TP but when checking again o...
-
07:28 AM Bug #7675 (Feedback): Remove MSS clamping exclusions on pppoe, l2tp, pptp
- PR Merged
07/05/2017
-
08:41 PM Revision 282b6c66: Add the ability to set certificate type and SAN attributes in a CSR. Ticket #7527
- TODO: They are not carried over after signing in the GUI
-
07:12 PM Bug #6099: igmpproxy does not recognize upstream interface
- Diogo Quintela wrote:
> Rai Wol wrote:
> > Can someone confirm its working in 2.4?
> >
> > Doesn't stop after 3... -
07:07 PM Revision a3507259: Fix missing line from openssl.cnf
- (cherry picked from commit c369871083ee6a5be958129df5457c8e952aa9e2)
-
07:06 PM Revision c3698710: Fix missing line from openssl.cnf
-
07:03 PM Revision 5c985ed2: Fix missing line from openssl.cnf
-
06:12 PM Bug #7675: Remove MSS clamping exclusions on pppoe, l2tp, pptp
- Pull request created to fix this:
https://github.com/pfsense/pfsense/pull/3777 -
05:43 PM Bug #7675 (Resolved): Remove MSS clamping exclusions on pppoe, l2tp, pptp
- As per https://forum.pfsense.org/index.php?topic=132918.0
Creating an issue to track removing the exclusions setup... -
05:53 PM Revision 276f8ce0: Do not ship .po files on images
-
05:49 PM Revision ba47d6fd: Update translation files
-
05:49 PM Revision 1d8a0e66: Regenerate pot
-
05:30 PM Revision b767fe6c: Add the username as the first SAN when making a user certificate from the user manager creation screen. Fixes #7666
-
05:30 PM Revision 2e1809dd: Fix some additional cases for CN->SAN handling, and move some code to a function to avoid duplication for other pending uses. Ticket #7666
-
04:56 PM Revision 2485e772: Include User Agent information when update bogons list
-
04:56 PM Revision 12e31e87: Include User Agent information when update bogons list
-
04:56 PM Revision 7fbb45be: Include User Agent information when update bogons list
-
04:27 PM Revision 6cc74faa: Remove extra spaces from User Agent
-
04:27 PM Revision 0d3d86c8: Remove extra spaces from User Agent
-
04:27 PM Revision ba7d82b0: Remove extra spaces from User Agent
-
04:22 PM Revision 41744bf9: Send uniqueid instead of UUID on user-agent
-
04:22 PM Revision ea8abb80: Declare user_agent variable in the function it's used
-
04:22 PM Revision e927083e: Move uniqueid read to a function system_get_uniqueid()
-
04:22 PM Revision 48600bc6: Send uniqueid instead of UUID on user-agent
-
04:22 PM Revision 7928e419: Declare user_agent variable in the function it's used
-
04:21 PM Revision 2bf67a6f: Send uniqueid instead of UUID on user-agent
-
04:05 PM Revision d49ad309: Declare user_agent variable in the function it's used
-
04:00 PM Revision cb61e2d8: Move uniqueid read to a function system_get_uniqueid()
-
03:59 PM Revision 2f8793b7: Move uniqueid read to a function system_get_uniqueid()
-
02:55 PM pfSense Packages Bug #7674 (Resolved): Issue Downloading Snort Alert Log Download
- I have found that I am no longer able to download the Alert Logs from the snort_alerts.php page. I have attempted di...
-
12:40 PM Feature #7666 (Feedback): Adding SAN DNS:username to User Certificates that are created via User Manager the same way as it is done via Cert. Manager
- Applied in changeset commit:b767fe6cdf7977916d2f245ea529f84f7e0d1f30.
-
11:02 AM Bug #7673 (Not a Bug): multi wan 0.0.0.0
- Hi,
Once it detects that there is the same ip address multiple times whenever you save something, the web server l...
07/04/2017
-
02:40 PM Bug #7672 (Rejected): Enabling DNS Resolver returns erorr
- Please discuss the problem on the forum to diagnose your problem and identify any potential bugs. If there is a repea...
-
01:33 PM Bug #7672 (Rejected): Enabling DNS Resolver returns erorr
- Hi
I am getting this error when I try to enable DNS Resolver. I haven't been using the DNS Resolver before because... - 02:57 AM Revision 3666d731: Add user option to sort interface names RELENG_2_3
- Signed-off-by: Phil Davis <phil@jankaritech.com>
07/03/2017
-
10:24 PM Revision 7c6f38e4: ipsec, prevent simultaneous/repeated calling of vpn_ipsec_configure() by /etc/rc.newipsecdns
-
10:04 PM Feature #6753: Interfaces list order not consistent
- It works in master 2.4, but it never got backported to RELENG_2_3 or RELENG_2_3_4.
This was the PR in master: https:... -
12:04 PM Feature #6753: Interfaces list order not consistent
- Thank you guys for taking this into account. It works well, much better to use now!
May I ask for one last thing? Th... -
08:15 PM Revision c2530487: bootup, change message to "Checking config backups consistency..." to tell whats taking time, as there is usually little to cleanup involved
-
11:19 AM Feature #7671: Gateway Monitoring Via Custom Script or Telnet.
- many ISPs in India also do a similar thing and etisalat in UAE do a similar thing, if the bill isnt paid by the 15th ...
-
11:08 AM Feature #7671 (New): Gateway Monitoring Via Custom Script or Telnet.
- It would be very helpful to have the ability to monitor gateways via a custom script or telnet. ISPs are beginning to...
07/02/2017
-
04:53 PM pfSense Packages Bug #7670 (Not a Bug): Bind : Serial for slave zone is missing in IHM
- Using bind as slave server, the page https://localhost:8443/pkg.php?xml=bind_zones.xml does not display the zone seri...
07/01/2017
-
09:01 PM Revision ce3371fe: cron, fix job removal by index splice and write valid schedules for ramdrive backups
-
07:52 PM Bug #7659 (Resolved): Crash "Invalid argument supplied for foreach() in /etc/inc/gwlb.inc on line 1739" when defining a IPv4 or IPv6 IP + adding gateway.
-
07:52 PM Bug #7452 (Resolved): Adding a gateway from interfaces.php does not work
-
05:09 PM Bug #7452: Adding a gateway from interfaces.php does not work
- As mentioned by Philip Davis in #7659 the fix for the crash has now been implemented in https://github.com/pfsense/pf...
06/30/2017
-
01:58 PM pfSense Packages Bug #7669: ACME Certificates
- But we need to have a discussion -- on the forum -- about why that happened before it can be called a bug. The upgrad...
-
01:11 PM pfSense Packages Bug #7669: ACME Certificates
- I get that freeradius isn't related to acme. You just rejected the root of my problem which is no CA key for ACME gen...
-
12:18 PM pfSense Packages Bug #7669 (Rejected): ACME Certificates
- Please post on a new forum thread and discuss this before opening a bug report. It's possible something else went wro...
-
12:15 PM pfSense Packages Bug #7669 (Rejected): ACME Certificates
- version 2.4.0-beta. My letsencrypt certificates are about to expire and my certificates in acme certificates didn't m...
-
10:00 AM Feature #7668: MAC Address spoofing
- https://forum.pfsense.org/index.php?topic=132947.msg730892#msg730892
-
09:56 AM Feature #7668 (Closed): MAC Address spoofing
- The wording under the Interface -> General Configuration -> MAC Address box could do with stating that if the interfa...
- 08:41 AM Revision ab95d1fa: Merge remote-tracking branch 'upstream/master'
- 08:41 AM Revision 1e0442e0: Activate RADIUS accounting for mobile ipsec if it was selected on the auth server view
06/29/2017
-
04:34 PM Revision 863804a9: Change the way unbound is stopped when the process is being restarted, to give the old process enough time to exit cleanly. Fixes #7326
- (cherry picked from commit 38d110824c87ff60c6289c0432d55009586ceee4)
-
04:34 PM Revision cad82db7: unbound-control needs to know the config path or else it can't work properly. Fixes #7667
- (cherry picked from commit 8a0aa42c197361ebb82387e5bdc8378e5440837f)
-
04:34 PM Revision 0577d9df: Change the way unbound is stopped when the process is being restarted, to give the old process enough time to exit cleanly. Fixes #7326
- (cherry picked from commit 38d110824c87ff60c6289c0432d55009586ceee4)
-
04:34 PM Revision eb95f88c: unbound-control needs to know the config path or else it can't work properly. Fixes #7667
- (cherry picked from commit 8a0aa42c197361ebb82387e5bdc8378e5440837f)
-
04:32 PM Revision 38d11082: Change the way unbound is stopped when the process is being restarted, to give the old process enough time to exit cleanly. Fixes #7326
-
04:21 PM Revision 8a0aa42c: unbound-control needs to know the config path or else it can't work properly. Fixes #7667
- 02:18 PM Revision 95420116: Add strongswan rekeymargin attribute to vpn ipsec phase1 view
-
02:02 PM Revision 1a96a3a9: Set a value for this variable in each case, so a previous value isn't re-used in a loop.
- (cherry picked from commit faab657a256f9385d5e0ffb4084666e760b515a5)
(cherry picked from commit 86ab9eb54b30b591703e7... -
02:02 PM Revision 86ab9eb5: Set a value for this variable in each case, so a previous value isn't re-used in a loop.
- (cherry picked from commit faab657a256f9385d5e0ffb4084666e760b515a5)
-
02:01 PM Revision faab657a: Set a value for this variable in each case, so a previous value isn't re-used in a loop.
-
12:18 PM Bug #7148 (Duplicate): Spoofed mac addresses on VLAN interfaces apply to the same physical interface
- Duplicate of #1337
-
12:09 PM Revision 39eeab69: Enable Python support for Unbound. Implements #7549
-
11:54 AM Bug #7326: Unbound fails to start during rc.wanipchange when using large enough dns lists
- ok thank you for fixing this, I will test the fix as soon as possible on my firewall.
-
11:43 AM Bug #7326: Unbound fails to start during rc.wanipchange when using large enough dns lists
- Be aware that if you attempt to add a patch for this manually, you also need to apply the patch from #7667 first.
-
11:40 AM Bug #7326 (Feedback): Unbound fails to start during rc.wanipchange when using large enough dns lists
- Applied in changeset commit:38d110824c87ff60c6289c0432d55009586ceee4.
-
11:31 AM Bug #7326: Unbound fails to start during rc.wanipchange when using large enough dns lists
- Back to me, I have some changes ready that appear to fix this.
-
11:40 AM Bug #7667 (Feedback): Calls to unbound-control are missing configuration path so they fail
- Applied in changeset commit:8a0aa42c197361ebb82387e5bdc8378e5440837f.
-
11:31 AM Bug #7667 (Resolved): Calls to unbound-control are missing configuration path so they fail
- Calls to unbound-control inside @do_as_unbound_user()@ in /etc/inc/unbound.inc do not pass the configuration file loc...
06/28/2017
- 09:01 PM Revision 626aefbe: Revise Dark gray color code for login page
-
06:48 PM Bug #7659: Crash "Invalid argument supplied for foreach() in /etc/inc/gwlb.inc on line 1739" when defining a IPv4 or IPv6 IP + adding gateway.
- Hi Philip,
I updated the PF to 2.4.0-BETA (amd64) built on Wed Jun 28 16:02:43 CDT 2017 today and redid the proced... -
01:40 PM Feature #7666: Adding SAN DNS:username to User Certificates that are created via User Manager the same way as it is done via Cert. Manager
- Thank you sooo much!
I am constantly sitting on the 2.4 beta edge (currently 2.4.0.b.20170627.1443), just let me now... -
01:29 PM Feature #7666 (Assigned): Adding SAN DNS:username to User Certificates that are created via User Manager the same way as it is done via Cert. Manager
- Current certificate best practices are to have the CN be the first SAN, so it shouldn't be optional. That small initi...
-
01:24 PM Feature #7666: Adding SAN DNS:username to User Certificates that are created via User Manager the same way as it is done via Cert. Manager
- It could also be made optional in _User Manager_.
By default there is no SAN (just as now), but there would be possi... -
01:11 PM Feature #7666 (Resolved): Adding SAN DNS:username to User Certificates that are created via User Manager the same way as it is done via Cert. Manager
- h1. Adding SAN DNS:username to User Certificates that are created via User Manager same way as it is done via Cert. M...
-
11:41 AM Bug #7665 (New): Host range validation for Aliases is not strict enough
- Steps to reproduce:
1. Enter an invalid host range for an IP alias, such as 192.168.1.1-10, and click Save.
The... -
08:09 AM pfSense Packages Todo #7664 (Rejected): https filtering in pfsense without configuring proxy settings in client browser .
- What can be done, is already there. Splice to see domains or you have to install CA on clients. Post on the forum, do...
-
08:07 AM pfSense Packages Todo #7664 (Rejected): https filtering in pfsense without configuring proxy settings in client browser .
- https filtering in pfsense without configuring proxy settings in client web browser .
-
12:55 AM Bug #7641: Multiple reboots without error message
- I checked the freebsd bugreports and found a similar issue but with an amd system. I added a comment there so here is...
06/27/2017
- 03:01 PM Revision a33ece86: Fix missing '>' on /span tag
-
02:56 PM Feature #7383: system_certmanager.php?act=new: Add new select option to sign a CSR
- Larry Westfall wrote:
> Build 2.4.0.b.20170527.2111
>
> External generated CSR failed with
> The following input... -
02:45 PM Bug #6406: Web process becomes unresponsive producing 502 Bad Gateway nginx
- Bryan Fehl wrote:
> Christoffer Öhman wrote:
> > I can not even use it before it locks.
> >
> > As soon as I try... -
10:59 AM Bug #6406: Web process becomes unresponsive producing 502 Bad Gateway nginx
- Christoffer Öhman wrote:
> I can not even use it before it locks.
>
> As soon as I try to change something, it lo... -
10:45 AM Bug #6406: Web process becomes unresponsive producing 502 Bad Gateway nginx
- I can not even use it before it locks.
As soon as I try to change something, it loads a really long time before it... -
02:04 PM Bug #7663 (Closed): Persistent CARP Maintenance Mode doesn't work right in upgrade from 2.3.3-RELEASE-p1 to 2.3.4
- Upgrading the OS to 2.3.4 from 2.3.3-RELEASE-p1 with Persistent CARP Maintenance Mode selected, the OS rebooted with ...
- 12:28 PM Revision 79cd920c: Add "Dark Gray" login page color
-
10:40 AM Revision 50153f21: Update translation files
-
10:37 AM Revision 651ad331: Regenerate pot
-
10:25 AM Feature #4821: PPPoE WANs do not take full advantage of NIC driver queues for receiving traffic
- As of the June 2, 2017 build, it does not look like it. Receiving over PPPoE is still limited to one queue.
-
10:23 AM Bug #7604: Bug #6594 is not resolved: Waiting for Internet connection to update pkg metadata and finish package reinstallation
- This is happening to me too, have a fresh 2.3.4 install. I will restore config from another 2.3.4 install. Sure enoug...
-
10:02 AM Bug #7662 (Resolved): Missing close span in login page 2.4.0-BETA
- Fixed. Thanks for pointing that out.
-
09:43 AM Bug #7662 (Resolved): Missing close span in login page 2.4.0-BETA
- Using 2.4.0-BETA, the login page miss a close span
https://github.com/pfsense/pfsense/blob/master/src/etc/inc/authgu... -
06:38 AM Bug #2218: CARP VIPs can become master too early at boot time
- I didn't close the ticket and say it wouldn't be addressed eventually. When this old ticket was opened, maintenance m...
-
04:01 AM Bug #2218: CARP VIPs can become master too early at boot time
- Jim, what about if you have a power failure on the master firewall (and you have each firewall connected to different...
Also available in: Atom