Activity
From 08/07/2017 to 09/05/2017
09/05/2017
-
07:31 PM Revision 617bb801: Spell it correct
-
06:51 PM Bug #7272: 6rd not functioning on 2.4.0-BETA
- Morten Freberg wrote:
> This does still not work after a reboot.
>
> Although it works until next reboot if you g... -
03:51 PM Bug #7272: 6rd not functioning on 2.4.0-BETA
- This does still not work after a reboot.
Although it works until next reboot if you go to Interfaces -> WAN and th... -
-
-
- Instructions to help users migrate their nanobsd to full install are here https://doc.pfsense.org/index.php/Upgrading...
-
- nanobsd is dead in 2.4 and future versions
-
-
-
11:57 AM Bug #7838 (Not a Bug): NAT outbound source using alias always shows /32
- When you use an alias, the CIDR drop-down on the NAT page does nothing. Any subnet mask must be specified in a networ...
-
-
11:31 AM Bug #7145: rc.newwanipv6 running in all cases, even for a renew
- Are there any plans to have this fixed with a 2.3.* release?
I'm having the same problem (https://forum.pfsense.o...
09/04/2017
-
09:58 PM Bug #6028: no firewall rules loaded after reboot with invalid ruleset
- I wrote this 4 years ago in #3175
-
02:11 PM Bug #7840 (Resolved): OpenVPN 2.4 Server: Hide Interface when Protocol is Multihome
- This is merely cosmetic, but may also help cut down on some confusion.
If "Protocol" is set for "<UDP/TCP> IPv4 an... -
-
-
- Forum post here https://forum.pfsense.org/index.php?topic=136009.0
When pfsense receives a packet with a TTL of 1,... -
09:56 AM Bug #7778: DHCP relay not working correctly with bridges
- When adding interface that's member of the bridge: yes
When adding the bridge (without it's interfaces): no -
03:21 AM Bug #7838 (Not a Bug): NAT outbound source using alias always shows /32
- Using alias for NAT outbound source network which in our case is a /24 always shows /32 when you edit it again.
If y... -
02:55 AM Bug #7837: fragmented packets not reassembled over IPSec tunnel
- Disabling NAT in the tunnel does not change anything.
09/03/2017
-
- I am trying to ping a machine over an ipsec tunnel:...
-
04:46 AM pfSense Packages Bug #6378: inline background styles in squidguard package
- Someone kindly merge this PR and call it a day. https://github.com/pfsense/FreeBSD-ports/pull/385
It makes things ... -
- Validation has been there for a while.
https://github.com/pfsense/FreeBSD-ports/pull/308
https://github.com/pfsen... -
- I have no idea what's IHM but there's no serial saved in config.xml for slave zones (you cannot even configure it, th...
-
- Test this please.
https://github.com/pfsense/FreeBSD-ports/pull/416
09/02/2017
-
- https://github.com/pfsense/FreeBSD-ports/pull/415
-
- See https://forum.pfsense.org/index.php?topic=135980.msg744283#msg744283 and following.
E.g., having a shared secr... -
04:22 AM Bug #7592: SG-1000: Unbound not always restarting properly after changes in /etc/hosts
- @Sep 2 02:01:45 dhcpleases kqueue error: unkown
Sep 2 02:01:45 dhcpleases Could not deliver signal HUP to process ...
09/01/2017
-
- This reverts commit 5ba35b98a3726ab206931cdfa51e3dd23227b7b2.
-
- This reverts commit 5ba35b98a3726ab206931cdfa51e3dd23227b7b2.
-
08/31/2017
-
03:48 PM
Bug #4703 (Closed): Inconsistent availability of direction on CP IP/MAC/hostname passthrough
-
- The direction has been back for over 2 years.
https://github.com/pfsense/pfsense/commit/ef548f9824380d008722870dd1... -
- Duplicate of Bug #1454, plus should be a non-issue now that UTF-8 is being used.
-
- Duplicate of Bug #7813. No idea why https://github.com/pfsense/pfsense/commit/5f6825bbac6373a909651c90e8ca268242f6eed...
-
08:03 AM Bug #7833 (Resolved): ipfw will not limit download speed - captiveportal
- With a fresh snapshot 2.4.0-RC install, only enabled the captiveportal and set a Default download (Kbit/s).
When I l... -
-
-
-
-
01:08 PM Revision 9686b337: Use spaces in the write_config() message to prevent text wrapping issues in webGUI
- See https://redmine.pfsense.org/issues/6363
(cherry picked from commit 8cb29dac04283045f82303c2ee1d2f772299d238) -
-
- May I suggest "Enter the maximum bandwidth for download in Kbps" and moving on?
-
- Then we can change the description to say kibibit instead. Changing the multiplier would result in people having an u...
-
- Jim Pingle wrote:
> There are 1024 bits in a kilobit. Not 1000. I'll fix the "in in" typo.
Freebsd uses 1000 bits... -
- There are 1024 bits in a kilobit. Not 1000. I'll fix the "in in" typo.
-
- When we add a new radius user, we can set Maximum Bandwidth Down/Up and in the help we can read:
*Enter the maximum ... -
11:35 AM Bug #7817: Login CSRF token fail on boot.
- Jim Pingle wrote:
> What packages do you have installed? Which dashboard widgets?
>
> I update about a dozen lab ... -
- What packages do you have installed? Which dashboard widgets?
I update about a dozen lab systems every day or two ... -
-
09:06 AM Bug #7832: ipv6cp enabled, even with ipv6 disabled
- https://redmine.pfsense.org/issues/7822
-
04:37 AM Bug #7832 (Duplicate): ipv6cp enabled, even with ipv6 disabled
- For a ppp(oe) interface, even when ipv6 is disabled the "set bundle enable ipv6cp" line is present and ipv6cp negotia...
-
- Disabling captiveportal will not flush the ipfw pipes.
Has we can seen with the commands *ipfw table all list ;echo;... -
08:37 AM Bug #7825: missing "BACKUP" in CARP status with IPv6
- okay. Thanks for the hint. Just to complete this issue: The problem was the synchronization of the "Virtual IP Passwo...
-
- OK, so something is amiss in the VIP or interface state on the secondary, but the status page is actually doing all i...
-
- Jim Pingle wrote:
> Is the status OK on the master node?
Yupp. On the master node everything is fine and the text f... -
- I can't reproduce this but the only IPv6-enabled cluster I have handy is on 2.4.0
Is the status OK on the master n... -
04:56 AM Feature #7812: ZFS handling of autopreplace
- ideally, there ought to be a page for managing zfs, like there is for geom mirrors(albiet pretty limited), or at leas...
08/30/2017
-
- Anything new on this?
Any log files we can provide with? -
- Jim Pingle wrote:
> The problem is specific to your hardware and not a general issue. Adding an option for that, whi... -
- The problem is specific to your hardware and not a general issue. Adding an option for that, which would be of no use...
-
- With the current reboot cycle it will just hang at the end, and I tried to disable ACPI and find related settings in ...
-
- While here, fix a couple more ldap_start_tls() calls that need a preceding @.
(cherry picked from commit ff500c90646... -
- While here, fix a couple more ldap_start_tls() calls that need a preceding @.
-
- Applied in changeset commit:ff500c90646c8db5abe77d7efb02c7d191df6902.
-
- When attempting authentication against and LDAP server using SSL/TLS, attempts to bind to the server fail if the serv...
- 12:22 PM Revision 52e5efc8: Restore bad login message
- (cherry picked from commit 7d7c65c2ffa4bcabccc10d0e3e319afbd979192b)
- 12:21 PM Revision 7d7c65c2: Restore bad login message
- 12:15 PM Revision 56de61a7: Restore bad username or password message
- (cherry picked from commit ca44a37cad5e905e3a76b6ce862de6ec5d3bcb06)
- 12:14 PM Revision ca44a37c: Restore bad username or password message
-
11:02 AM Revision 2b58318b: Unbound Serve expired
- Serve expired – Records stay in cache after TTL expires, with a TTL value of 0, if a new lookup is requested the cach...
-
- See also: #7101, #7798
-
- Duplicate of #7719
-
- Duplicate of #7719
-
-
- Confirmed fixed, certificate/CA saved in config and no duplicates generated on reinstall. Thanks.
-
-
01:12 AM Bug #7827: Clicking "Cancel" while deleting a firewall state will still delete it
- I can confirm this is now fixed.
08/29/2017
- 06:15 PM Revision 6ad9ab93: Fixed #7827
- (cherry picked from commit 634d68709128495b22caffef36f9351e3361e2ff)
- 06:14 PM Revision 634d6870: Fixed #7827
-
05:09 PM Bug #7719: Dynamic DNS updates not working on interface failover
- Yes, it looks like the same root cause to me.
Has anyone from the dev team seen these? -
04:37 PM Bug #7719: Dynamic DNS updates not working on interface failover
- Maybe related to Bug #7101?
Problem still present with pfSense 2.3.4-RELEASE-p1 (amd64) -
- OK. I see what you're talking about now.
Those settings do not exist for DNS-Manual. The fact that it displays any... -
- Not enough detail here (what "Method" is selected? What + button?)
The only method with a "Key Type" is nsupdate, ... -
01:49 PM pfSense Packages Bug #7829 (Duplicate): Unable to expand the "Advanced Server Settings" in ACME certificate edit
- Under Services\Acme\Certificate options: Edit, under Domain SAN List, clicking on the + icon next to "Key Type..." ap...
-
- (cherry picked from commit b2c7a79c5ff8eefda4b19cf2718056c1ba6c12ca)
-
-
- This should, I hope, be fixed with 0.13 of the FreeRADIUS3 package.
-
- Duplicate of #7829
-
- Tested on Firefox 54 and Microsoft Edge 40.15063.0.0
-
- Under Services\Acme\Certificate options: Edit, under Domain SAN List, clicking on the + icon next to "Key Type..." ...
-
-
01:20 PM
Bug #7827: Clicking "Cancel" while deleting a firewall state will still delete it
- Applied in changeset commit:634d68709128495b22caffef36f9351e3361e2ff.
-
01:16 PM
Bug #7827 (Feedback): Clicking "Cancel" while deleting a firewall state will still delete it
- Fixed as requested
-
- 2.4.0-RC (amd64)
built on Tue Aug 29 09:29:29 CDT 2017 -
- Hello gents,
On Diagnostic -> States if you click on the bin to delete a firewall state but then you click on Canc... -
- There must be something different about the packet causing it to be dropped. Please post on the forum, list, or reddi...
-
11:02 AM pfSense Packages Bug #7826 (Rejected): rule to open port 4500 udp for ipsec/ikev2 ignored and blocked
- Hello,
on a pfsense 2.3.4_1 installed on a vm ( vmware ), i create a ikev2 ipsec server.
If i try to connect with... -
10:50 AM Bug #7821: GIF does not support broadcast
- I found out the issue. I had to:
* change the tunnel IF IPv6 from None to Static
* access the radvd page for the ... -
- In status_carp.php the descriptive text ("BACKUP") next to the button is missing within an ipv6 CARP-setup:
!carp-ip...
08/28/2017
-
-
-
-
-
06:31 PM Bug #7805: dashboard System Information - inconsistent date formats
- Much better.
Future enhancement: dashboard selection of locale (e.g. date format DD MMM CCYY instead of MMM DD CCY... -
11:05 AM
Bug #7805 (Feedback): dashboard System Information - inconsistent date formats
- Bios date and version check date formats now match other timestamps on the dashboard
Thanks to sjones@netgate.com -
09:15 AM
Bug #7805: dashboard System Information - inconsistent date formats
- We can certainly change the "Version information updated" format. The others will require some research.
- 04:03 PM Revision 5d383489: Partially addresses #7805
- Bios date and version check date formats now match other timestamps on the dashboard
(cherry picked from commit fddb... - 04:02 PM Revision fddb73c7: Partially addresses #7805
- Bios date and version check date formats now match other timestamps on the dashboard
-
-
- Jim Pingle wrote:
> dnsmasq on 2.4 is compiled with NLS enabled
Hmmmm...... -
12:10 PM pfSense Packages Bug #7820: 2.4: dnsmasq can no longer handle punycode, compile time options change?
- Jim Pingle wrote:
> dnsmasq on 2.4 is compiled with NLS enabled, which in turn sets up a dependency for IDN2 and use... -
- dnsmasq on 2.4 is compiled with NLS enabled, which in turn sets up a dependency for IDN2 and uses -DHAVE_LIBIDN2. It ...
-
12:00 PM pfSense Packages Feature #7824 (Resolved): [acme / Let's Encrypt] Bump to the latest acme.sh package
- Our domain names are managed by Gandi, and we cannot use the Gandi Live API for the verification of the domain name o...
-
- Those pf errors are unlikely to be related.
I can now reproduce the php-fpm crash on two units here. It may be a c... -
- At one point in the alert section of the UI I also saw this:...
-
- 1. yes
2.... -
- That 502 gateway timeout error happens when PHP crashes, so that's expected in this problem case. Sometimes it happen...
-
- I have updated to the latest snapshot:...
-
- If you update to a current snapshot, does it still crash? I can only seem to reproduce this on one system here, but i...
- 10:30 AM Revision 745d3779: dyndns: Adding support for ClouDNS (https://www.cloudns.net)
- 07:28 AM Revision c22d9142: MPD Custom Modem Init
-
07:15 AM Feature #7823 (Resolved): Pull request: Add support for dynamic DNS provider ClouDNS
- Hello,
Would be nice to have cloudns as a dynamic dns provider.
Pull request is done already:
https://github.c... -
- See https://redmine.pfsense.org/issues/6363
08/27/2017
-
- Yeah, you have suggested a fix for an issue that noone could reproduce due to bad description and the screenshots com...
-
08:21 PM Bug #6363: AutoConfigBackup Restore Actions column missing due to long XMLRPC sync merge strings in the configuration description
- Sure,
ACB has a problem displaying messages with long strings of text without spaces.
PFBlocker generates messa... -
- Huh? This bug is about ACB.
-
- Sorry, latest version and issue still exists:
Looks like the issue might be the list of PFBlocker lists has no spa... -
-
- As noted above, wraps and works just fine on multiple boxes with Chrome, nothing invisible anywhere.
-
- ...
-
- Please post the output of the following commands:...
-
- Disabling the interface stats widget did not help. I got another crash:...
-
- I don't see any pattern in the URLs. It's crashed with:...
-
- Core dump attached
-
- This might be a regression of #6813. It mentions some errors that are the same as what I'm seeing:...
-
- pppoe gui ivp6 set to none still enables in conf
https://forum.pfsense.org/index.php?topic=135802.0 -
- I filed #7821. Same messages, different version, possibly a different cause.
-
- This might be related to #4455.
I am seeing the same radvd spam under System / Routing logs:... -
07:31 PM
Bug #7804: System info widget CPU usage not updating in IE. Needs Math.trunc() polyfill.
- Need to wait for the next snap. The fix has been applied but not built yet.
-
- IE 11.540 issue still present. "Retrieving CPU data" spinning gear.
-
- OK just updated (screen grabs attached), boot screen came up after update, then waited 30 seconds and tried to login ...
-
- Just noticed this change in dnsmasq 2.77, new in 2.4:
> Remove historic automatic inclusion of IDN support when bu... -
- I've used dnsmasq with a custom hosts file for years, with mappings including the following:
> 0.0.0.0 r7---sn-vgq... -
- Greg Toombs wrote:
> I'm not using OpenVPN, nor accessing the menu, but I still get a segfault that looks similar to... -
- Kill Bill wrote:
> Going to VPN - OpenVPN menu causes php-fpm to segfault.
I'm not using OpenVPN, nor accessing t... -
-
- Merged, can be closed.
-
-
- Can be closed.
08/26/2017
-
- Since 2.4 the NTP clock frequency is always plotted as zero rather than the actual frequency on the monitoring graph.
-
- When rebooting after an update the initial login works then ajax calls start failing a few seconds later and a re-log...
-
-
- Done with https://github.com/pfsense/pfsense/pull/3304, can be closed.
-
09:40 AM Bug #7272: 6rd not functioning on 2.4.0-BETA
- I'm seeing no default route for IPv6 after a reboot until I do another save on the WAN interface.
-
06:52 AM Bug #7272: 6rd not functioning on 2.4.0-BETA
- 2.4.0-RC (amd64) and custom hardware
built on Fri Aug 25 18:40:44 CDT 2017
FreeBSD 11.0-RELEASE-p12
net.link.br... -
- Hey, and thanks for the swift reply.
What about the fact that the firewall's WAN interface is unable to ping6 ipv6... -
- Looks the same as #3965 -- bridges are setup too late for them to be used as a track interface at boot time.
-
- Paal Andreas Lindsetmo wrote:
> My setup:
>
> 2.4.0-RC (amd64) (custom hardware)
> built on Fri Aug 25 18:40:44 ... -
- My setup:
2.4.0-RC (amd64) (custom hardware)
built on Fri Aug 25 18:40:44 CDT 2017
FreeBSD 11.0-RELEASE-p12
... -
- https://github.com/pfsense/pfsense/pull/3805 (interfaces*.php)
https://github.com/pfsense/pfsense/pull/3806 (firewal... -
03:49 AM Bug #7815 (Closed): IPSec MSS Clamping is matching traffic not related to IPSec
- Hello,
IPSec setting "Maximum MSS" (MSS clamping) is acting on traffic that doesn't pass across IPSec, perhaps WAN...
08/25/2017
-
-
- Fixed.
-
06:13 PM Revision 9b6fbf5a: remove old logo from default page
-
-
-
-
-
-
-
-
-
-
-
- Fixed in 0.3
-
-
- The above is included in 2.1.1_10.
-
- Fixed
-
01:42 PM pfSense Packages Bug #7797: Squid Reverse Proxy alternating between destinations
- Kill Bill wrote:
> As noted on another bug (Bug #7752), the reverse proxy part of Squid is pretty much unmaintained.... -
09:35 AM Feature #7814 (Resolved): Unbound serve-expired please add to GU as tickbox
- Suggest default to off
Description of feature here, its pretty killer.
serve-expired: <yes or no>
... -
- Having a fair amount of experience myself managing php hosting systems I can offer some thoughts.
On my own pfsens... -
07:31 AM Bug #7813 (Resolved): Missing download statistics on captive portal with MAC filtering enabled
- I'm testing the captive portal on 2.4 RC (updated to today) and I noticed that when MAC filtering is enabled the byte...
-
- EDIT: I created a new bug #7813
-
04:57 AM Bug #5319: Error message "No config named" in charon daemon
- Bug is still present in 2.3.4-RELEASE-p1. Any news on fixing this?
08/24/2017
-
06:44 PM Feature #7812 (New): ZFS handling of autopreplace
- This idea was posted on the forum. It doesn't look hard and if an install needs ZFS (not just reinstall + use a saved...
- 06:23 PM Revision 6f4e64ec: Fixed #7811
- (cherry picked from commit 0b6c886bd69370842b0137f49add16fde00a0b2f)
- 06:22 PM Revision 0b6c886b: Fixed #7811
- 06:20 PM Revision 7bf76c8c: Merge branch 'RELENG_2_4_0' of gitlab.netgate.com:pfsense/pfsense into RELENG_2_4_0
- 06:20 PM Revision c5180b26: Fixed #7811
- (cherry picked from commit 1562b46aaaa0e402cb3b253d85aae734d4677dec)
- 06:19 PM Revision 1562b46a: Fixed #7811
-
05:33 PM Revision b9a40f9b: I changed the path of egrep
-
-
-
-
03:12 PM
Bug #7811 (Resolved): Installed pacakges dashboard widget breaks if no packages are installed
-
01:30 PM
Bug #7811: Installed pacakges dashboard widget breaks if no packages are installed
- Applied in changeset commit:1562b46aaaa0e402cb3b253d85aae734d4677dec.
-
01:24 PM
Bug #7811 (Feedback): Installed pacakges dashboard widget breaks if no packages are installed
- Fixed and tested in 2.4, 2.4.0, 2.3 & 2.3.4
-
01:18 PM
Bug #7811 (Resolved): Installed pacakges dashboard widget breaks if no packages are installed
- https://forum.pfsense.org/index.php?topic=135637.0
-
-
01:02 PM Bug #7810 (Resolved): openssl/openvpn need to have loaded booth AESNI and cryptodev to accelerate AES operations , but gui alows you load only one at once
- [2.4.0-RC][root@castor.ninex.info]/boot/kernel: kldunload cryptodev
[2.4.0-RC][root@castor.ninex.info]/boot/kernel: ... - 12:52 PM Revision f82af17a: Fixed #7804 Replace Math.trunc with Math.floor to make IE happy
- (cherry picked from commit a1c3244c96b033891136ff2d95be61500a720231)
- 12:50 PM Revision a1c3244c: Fixed #7804 Replace Math.trunc with Math.floor to make IE happy
- 12:49 PM Revision 113caa09: Fixed #7804
- Replace Math.trunc with Math.floor to make IE happy
(cherry picked from commit ab5a3fa10e8dd2b88219a00ac410cb9ea8a0b... - 12:48 PM Revision ab5a3fa1: Fixed #7804
- Replace Math.trunc with Math.floor to make IE happy
-
- Steve Beaver wrote:
> Version 2.4 now checks for updates via Ajax and so no longer "hangs" the dashboard.
??!!
... -
12:34 PM
Bug #5263: Installed Packages widget causes index.php to hang
- Version 2.4 now checks for updates via Ajax and so no longer "hangs" the dashboard.
-
- I don't think there's anything new here. This widget, the dashboard update check and pretty much anything that runs p...
-
11:32 AM Bug #7808: Dashboard brakes when adding widgets
- Sorry, still the same here. I have to reinstall to make it work again. How can I force to reset the GUI configuration...
-
09:56 AM Bug #7808 (Feedback): Dashboard brakes when adding widgets
-
Just tried it on 2.4.0.r.20170823.0033
can't duplicate. please retest with latest version.
-
- Sorry, tested in version 2.4.0_RC
-
- Apparently when adding Installed Packages widget, dashboard brakes and it does not update. Also the menu stop working...
-
- Well that's not a problem. I thought the intent of your latest fix was to have the same code on 2.3 and 2.4; if that'...
-
10:34 AM
Bug #7785: jQuery syntax error: unterminated regular expression literal
- I made a mistake. It was fixed as fast as possible and then fixed more comprehensively. Stuff happens.
The codebas... -
- Steve Beaver wrote:
> Re-written to accommodate old and new refresh systems based on whether register_ajax() functio... -
07:12 AM
Bug #7785: jQuery syntax error: unterminated regular expression literal
- You are right :( Re-written to accommodate old and new refresh systems based on whether register_ajax() function exists.
-
- Applied in changeset commit:79ccd1f2796059a7a60b865a383dc288662f86b7.
-
- Looks like the interface mismatch test comes before the upgrade code, complicating this further.
-
- The wireless interface structure changed on FreeBSD 11 (#6770) but there is no upgrade code to convert 2.3.x and olde...
-
08:00 AM
Bug #7804: System info widget CPU usage not updating in IE. Needs Math.trunc() polyfill.
- Applied in changeset commit:ab5a3fa10e8dd2b88219a00ac410cb9ea8a0b5aa.
-
07:53 AM
Bug #7804 (Feedback): System info widget CPU usage not updating in IE. Needs Math.trunc() polyfill.
-
07:18 AM
Bug #7804: System info widget CPU usage not updating in IE. Needs Math.trunc() polyfill.
- polyfill.js is included by foot.inc so +should+ be available. I will attempt to reproduce. Which version of IE are yo...
-
- Thanks!
-
01:49 AM Bug #7176: IPv6 Monitor IP does not seem to propagate
- 2.4.0-RC (amd64)
built on Wed Aug 23 05:47:05 CDT 2017
FreeBSD 11.0-RELEASE-p12
This now seems resolved.
-
- That is by design. The information in the CPU section is specific to the CPU, and shows up even when support for the ...
-
-
- https://github.com/pfsense/FreeBSD-ports/pull/402 since pretty much any decent browser nags about these nowadays.
-
- You can integrate any of them by putting them to _Custom Options (After Auth)_ (or pretty much any of the advanced cu...
-
- Larry Rosenman wrote:
> on my ATT 6RD Dpinger is now happy with
> Version 2.4.0-RC (amd64)
> built on Wed Aug 23...
08/23/2017
-
11:52 PM Bug #7807 (Duplicate): sg-1000 random reboot when traffic shaping enabled
- Based on this discussion https://forum.pfsense.org/index.php?topic=135450.0
When u enable traffic shaping with tho... -
- 2.4.0-RC (amd64)
built on Wed Aug 23 15:31:27 CDT 2017
FreeBSD 11.0-RELEASE-p12
The pfSense Crypto HW informatio... -
- 2.4.0-RC (amd64)
built on Wed Aug 23 15:31:27 CDT 2017
FreeBSD 11.0-RELEASE-p12
Multiple date formats are in use... -
- @sbeaver: I don't think the Squid change was supposed to go to 2.3.4; it badly breaks the dashboard (cannot add/remov...
-
-
-
-
-
08:20 PM Bug #7804 (Resolved): System info widget CPU usage not updating in IE. Needs Math.trunc() polyfill.
- System info widget CPU usage not updating in IE. Needs Math.trunc() polyfill.
Also affected versions:
2.3.4 (git... -
-
-
-
-
- Fix with conditional instead of removing. - /usr/local/www/js/pfSenseHelpers.js...
-
- on my ATT 6RD Dpinger is now happy with
Version 2.4.0-RC (amd64)
built on Wed Aug 23 15:31:27 CDT 2017
FreeBSD ... -
- Luiz Souza wrote:
> Yes, this bug has been fixed in the latest snapshot.
>
> Thanks for all the debug and testing... -
01:29 AM Bug #7272: 6rd not functioning on 2.4.0-BETA
- Yes, this bug has been fixed in the latest snapshot.
Thanks for all the debug and testing. -
- Explicitly cast $idle_time to integer.
(cherry picked from commit 07df3494bd9a508e568b4ae999369ec8b2d14ec2) -
- Explicitly cast $idle_time to integer.
(cherry picked from commit 07df3494bd9a508e568b4ae999369ec8b2d14ec2) -
- Explicitly cast $idle_time to integer.
(cherry picked from commit 07df3494bd9a508e568b4ae999369ec8b2d14ec2) -
- 06:36 PM Revision 18f786fa: Update system_update_settings.php
- Tidied the Dashboard update settings text
(cherry picked from commit c2fae874e64753eb113dc0618927d9042881fd39) -
-
01:07 PM Feature #7803 (Closed): Include more OpenVPN Options in GUI
- It'd be nice to include more of the OpenVPN options in the GUI:
https://community.openvpn.net/openvpn/wiki/Openvpn23... -
- (cherry picked from commit 61a8cc10858e49051a6976ccc7464ec34fd3ffce)
-
-
- Explicitly cast $idle_time to integer.
-
- Applied in changeset commit:61a8cc10858e49051a6976ccc7464ec34fd3ffce.
-
- 2.4.0-RC (amd64)
built on Wed Aug 23 05:47:05 CDT 2017
FreeBSD 11.0-RELEASE-p12
Under VPN / OpenVPN / Servers... -
- sorry for that than.
-
- OK, if that fixed it, then it isn't related to the problem originally stated on this ticket, which is for a state iss...
-
- good idea, it did the trick.
-
- Add a floating rule to block, quick, in the out direction on that WAN (pppoe0) any GRE traffic, then reboot and see i...
-
- # Working
enc0 gre 1.1.1.1 -> 2.2.2.2 MULTIPLE:MULTIPLE
# Not Working
pppoe0 gre 1.1.1.1 -> 2.2.2.2 ... -
- Wagner Sartori Junior wrote:
> I'm on 2.4-RC... if I reset the states, it starts working.
Check your states for t... -
- I'm on 2.4-RC... if I reset the states, it starts working.
-
- The GRE parts may belong on that ticket, but this ticket originally did not have anything to do with GRE, someone alo...
-
- probably this is a duplicate of #4479 ?
-
- Vincent Sencil wrote:
> Backup:
> 1. Backup by ticking Skip packages
> 2. Backup the Package Manager only
>
> O... -
05:15 AM Bug #7604: Bug #6594 is not resolved: Waiting for Internet connection to update pkg metadata and finish package reinstallation
- Backup:
1. Backup by ticking Skip packages
2. Backup the Package Manager only
On the server where you want to re... -
05:23 AM Bug #6263: Encryption options for every P2 on a given P1 are written to each P2 individually inside ipsec.conf with multiple P2 entries + split conn entries
- Hi,
we had problems with one of our IPSecs. Sometimes it can connect, sometimes not. After a reboot of pfsense, pf...
08/22/2017
-
- Already part of 3.0
-
09:13 PM Feature #7800 (New): Add option for state logging
- It would be nice to have a facility built in for logging states as they are created. The idea is that for compliance...
-
09:17 PM Bug #7801 (Closed): UDP fragments received over IPsec tunnel are not properly reassembled and forwarded
- ...
-
- I would love to see this functionality too. Many apartment complexes are starting to use this and having authenticat...
-
08:46 PM Feature #7799 (New): Make an ajax call to toggle logging by clicking on the logging icon next to a rule
- i think it would be a great added ux/ui improvement to add a simple toggle for the logging and controlling the disabl...
-
-
-
- Does that mean we can expect a fix before -REL?
-
- Luiz duplicated the issue earlier today.
-
- I'm seeing this still on 2.4.0-RC.
ATT Fiber 6RD:
WAN_6RD
2602:300:c533:1510:: 43.4ms 5.3ms 48% Offline
WAN_DHC... -
06:07 PM Bug #7798: DynDNS client does not update when running on a gateway group.
- Also see ticket 25792.
-
- When a DynDNS client is set to run on a gateway group rather than an interface directly it fails to run the update sc...
- 05:57 PM Revision ad0e8610: Fixed #7787
- Always make an IPSec mobiles table, even if none have been configured. Prevents JS null value
error message on consol... -
-
-
- As noted above, this needs to go to the forums to identify the problem.
-
-
-
-
-
- (cherry picked from commit 6d028dc26c129ce1b0b25551142819772664f1e5)
(cherry picked from commit c7fd6ec9b196b0d7c37d1... -
- (cherry picked from commit 6d028dc26c129ce1b0b25551142819772664f1e5)
(cherry picked from commit c7fd6ec9b196b0d7c37d1... -
- (cherry picked from commit 6d028dc26c129ce1b0b25551142819772664f1e5)
-
-
04:17 PM pfSense Packages Bug #7674: Issue Downloading Snort Alert Log Download
- This problem is fixed in the Snort package update to version 3.2.9.5. This ticket can be closed when the pull reques...
-
- This is an upstream bug with no fix and no good workaround for 3.5.x - cf. http://bugs.squid-cache.org/show_bug.cgi?i...
-
02:07 PM
Bug #7787 (Resolved): IPsec widget, JS error in background when switching tabs, Cannot read property 'style' of null
-
02:06 PM Bug #7787: IPsec widget, JS error in background when switching tabs, Cannot read property 'style' of null
- I can confirm the issue is fixed with the change applied.
-
12:55 PM
Bug #7787: IPsec widget, JS error in background when switching tabs, Cannot read property 'style' of null
- Yes it will.
-
- Will the fix be backported to 2.4.0 ?
-
06:50 AM
Bug #7787 (Feedback): IPsec widget, JS error in background when switching tabs, Cannot read property 'style' of null
- Applied in changeset commit:75863a79705fccce21b7e0d0312ce1ef0b0985be.
-
-
-
-
-
-
-
- As noted on another bug (Bug #7752), the reverse proxy part of Squid is pretty much unmaintained. I'd strongly sugges...
-
- Hello,
It's pretty hard to explain this bug, but it seems to be very old bug. This post explain it perfectly: http... -
-
-
-
-
-
-
-
- 12:18 PM Revision da058fe4: fixed #7795
- By changing var name to no longer conflict with ipsec widget
(cherry picked from commit 3ed475b11dfcb2999a7119598749... - 12:14 PM Revision 89c32bf2: fixed #7795
- By changing var name to no longer conflict with ipsec widget
(cherry picked from commit 3ed475b11dfcb2999a7119598749... - 12:10 PM Revision bc2772c1: fixed #7795
- By changing var name to no longer conflict with ipsec widget
(cherry picked from commit 3ed475b11dfcb2999a7119598749... - 12:07 PM Revision 3ed475b1: fixed #7795
- By changing var name to no longer conflict with ipsec widget
-
11:49 AM Bug #7751: Duplicated traffic graphs
- I know this has already been closed but I can also confirm that it working properly now. Thanks Luiz/Jared!
-
- PR was merged months ago and the permissions look correct.
-
- Applied in changeset commit:6d028dc26c129ce1b0b25551142819772664f1e5.
-
- It is validating IPv4/IPv6 addresses but it also happens to also validate subnets as valid addresses. I'll push a fix...
-
- The way the reverse proxy part of the Squid package is written, it will only redirect HTTPS to HTTPS and HTTP to HTTP...
-
-
- As noted in https://redmine.pfsense.org/issues/7391#note-7 the OpenVPN interfaces are not added by design since it ad...
-
-
- Merged long ago, can be closed.
-
- https://github.com/pfsense/FreeBSD-ports/pull/399/
-
- It is most likely an issue with your configuration, and this is not a support platform. Please discuss the problem on...
-
- Hi,
my setup is the following:
Site A:
Lan: 192.168.100.0/24
Lan_IP: 192.168.100.1
Transfer: 10.2.81.0/24
T... -
- I can only seem to reproduce this when the same address is used as both the "GIF tunnel local address" and "GIF tunne...
-
08:49 AM
Bug #7785 (Resolved): jQuery syntax error: unterminated regular expression literal
-
- That worked, thanks. ;)
-
08:09 AM
Bug #7785 (Feedback): jQuery syntax error: unterminated regular expression literal
- Widget has been updated to use the new refresh system, and the regex eliminated by exiting the script where required,...
-
05:46 AM
Bug #7785 (Assigned): jQuery syntax error: unterminated regular expression literal
- Thanks for the update. That explains why I couldn't find it :) I will take care of it today.
-
- Steve Beaver wrote:
> Possibly resolved by #7784
Still there with 2.4 RC. This seems like the Squid widget is cau... -
08:47 AM
Bug #7795 (Resolved): NTP status widget: d.getSeconds is not a function
-
- Steve Beaver wrote:
> Looks like both widgets have a global var called "d". I bet they are stepping on each other.
... -
07:30 AM
Bug #7795: NTP status widget: d.getSeconds is not a function
- Applied in changeset commit:da058fe4c156e607227f1bac03a3ade42c475115.
-
07:20 AM
Bug #7795 (Feedback): NTP status widget: d.getSeconds is not a function
- Applied in changeset commit:3ed475b11dfcb2999a71195987495ccf05808127.
-
06:57 AM
Bug #7795: NTP status widget: d.getSeconds is not a function
- Looks like both widgets have a global var called "d". I bet they are stepping on each other. Would have been a good i...
-
- Already mentioned in #7784 but creating a separate bug for this.
When you select either the tunnels or the mobile... -
- The "Disable FIB Updates" option is the only GUI control to setup stub areas but it is global, not per interface/netw...
-
01:26 AM pfSense Packages Feature #7792 (Resolved): FRR pkg pfsense can not wok as ABR with stub areas (no stub area bit)
- Setup pfsense as ABR with several areas and found one does not work properly if one of areas is stub. There are two m...
-
- The OSPF metric option under Route Maps, "Metric" in the drop-down "Metric Action". The options there are the only op...
-
- There is not @metric-type@ option in OSPF redistribute section of web-interface. By default FRR makes redistribution ...
-
- The input validation is weak to nonexistent all throughout FRR, it's all on my todo list yet.
As it is made now, i... -
- There is not any checking for RID in OSPF6 section in web interface now, but one must be, because in case there is no...
-
- Applied in changeset commit:bad77fc0aca53e560710eaa75b3de198d7edb8f3.
-
06:50 AM
Bug #7728: 1:1 NAT: Destination IP Alias not displayed as web link
- Applied in changeset commit:25b82b200de7e846066bef3c6a3918592527763f.
-
05:48 AM
Feature #4667 (Closed): DNS Resolver - ability to save/restore cache went missing
-
- Just close this, this one's better left as-is.
-
05:47 AM
Bug #7784 (Resolved): IPsec widget breaks dashboard loading
-
- Works in 2.4 RC.
-
01:03 AM Feature #7791 (Resolved): include /usr/bin/strings in core pfSense
- When viewing logs, or performing troubleshootin from the command line when the WebGUI is not available, it would be u...
08/21/2017
-
-
- edit to say- shows pending no matter if gateway ip is used to monitor or if a "monitor IP" is chosen. My original r...
-
-
-
- dpinger / code using it, falsely defines a down gateway as up after dpinger gets restarted.
Or maybe the code that u... -
-
-
-
-
-
-
- (cherry picked from commit bad77fc0aca53e560710eaa75b3de198d7edb8f3)
(cherry picked from commit 50608d158646e32a612f8... -
- (cherry picked from commit bad77fc0aca53e560710eaa75b3de198d7edb8f3)
(cherry picked from commit 50608d158646e32a612f8... -
- (cherry picked from commit bad77fc0aca53e560710eaa75b3de198d7edb8f3)
-
- 02:41 PM Revision 98638326: Eliminate unused functions from functions.inc.php
- (cherry picked from commit 0f2d956be7d14f87776727ab476a4e47a51f6646)
- 02:40 PM Revision 0f2d956b: Eliminate unused functions from functions.inc.php
- 02:36 PM Revision 908b1996: Backport 2.4 getstats format for ease of maintenance
- (cherry picked from commit 96d3d096a3c4c4d4cbc81befde9dbb3977c30a55)
- 02:36 PM Revision 96d3d096: Backport 2.4 getstats format for ease of maintenance
- 02:25 PM Revision e3504522: Fix system information widget display order
- (cherry picked from commit 135da15564e9efb33044195719e4296e86951d87)
- 02:24 PM Revision 135da155: Fix system information widget display order
-
-
-
-
- 01:13 PM Revision b6565b4a: widget comment fix
- 12:30 PM Revision 25b82b20: Fixed #7728
- Revised enabled/disabled diplay to match other firewall pages
-
- The following field (and maybe others) seem not to be properly validated:
GIF tunnel local address
GIF tunnel rem... -
- just found a workaround... reset all the states, and it starts working!
-
- I just upgraded to 2.4.0-RC. My 2.3.4 was working perfectly before that, and after the upgrade immediately after the ...
-
-
-
-
-
-
-
- Just pushed a fix for this. It will show later today once things get synchronized back up.
-
-
07:34 AM
Bug #7728 (Feedback): 1:1 NAT: Destination IP Alias not displayed as web link
- Added alias pop-over and revised enabled/disabled display
-
07:05 AM Todo #1940: Integrate rSyslogd
- Another vote.
-
06:54 AM
Bug #7784: IPsec widget breaks dashboard loading
- Github sync will resume shortly. We are making some changes in anticipation of 2.4 RC and needed to briefly pause it.
-
- Is this actually committed somewhere? Nowhere on GitHub, no new snapshot either.
-
- Was about to setup a feature request for this.
Can this get into a release as it would be helpful.
Thanks, to D...
08/20/2017
- 10:52 PM Revision 6380f917: Avoid JS error by always rendering mobile ipsec DIV, even if empty
- (cherry picked from commit 60138edbd4d7740c2d140e0d8fb4c5ee945db9e5)
- 10:51 PM Revision 60138edb: Avoid JS error by always rendering mobile ipsec DIV, even if empty
- 10:40 PM Revision 75863a79: Fixed #7787
- Always make an IPSec mobiles table, even if none have been configured. Prevents JS null value
error message on console -
- cxl occurs in the array.
-
06:35 PM
Bug #7785 (Feedback): jQuery syntax error: unterminated regular expression literal
- Possibly resolved by #7784
-
05:57 PM
Bug #7788: Irregular updating of widgets like cpu/uptime on system widget.
- This is a consequence of the central refresh system. It will be adjusted to accommodate multiple copies of the same w...
-
- Was using:
2.4.0-BETA (amd64)
built on Fri Aug 18 00:32:41 CDT 2017
FreeBSD 11.0-RELEASE-p11 -
- It tells me cpu usage and uptime at intervals of 2 and 5 seconds. This looks kinda strange for the cpu bar that notab...
-
05:44 PM
Bug #7787: IPsec widget, JS error in background when switching tabs, Cannot read property 'style' of null
- If no mobile clients are configured, no mobile DIV was being displayed, hence the null. The DIV is now always generat...
-
- 2.4.0-BETA (amd64)
built on Fri Aug 18 00:32:41 CDT 2017
FreeBSD 11.0-RELEASE-p11 -
03:57 PM
Bug #7787: IPsec widget, JS error in background when switching tabs, Cannot read property 'style' of null
- Would you post the exact software version you tested with please?
-
- While changing tabs on the ipsec widget.
With 1 inactive tunnel, and no mobile ipsec configured. I get the following...
08/19/2017
- 05:52 PM Revision 24b20350: Merge branch 'RELENG_2_3_4' of gitlab.netgate.com:pfsense/pfsense into RELENG_2_3_4
- 05:50 PM Revision 6ed79b89: Fixed JSON format in IPSec widet per Kill Bill (Thanks!)
- (cherry picked from commit 2438b40dceaff2a23638be66018f8c9dc46d2e01)
- 05:36 PM Revision 2438b40d: Fixed JSON format in IPSec widet per Kill Bill (Thanks!)
- 05:34 PM Revision c79ab2c0: Fix JSON format for mobile IPSec data per Kill Bill (Thanks!)
- (cherry picked from commit ce3a6cfd365f171f6ffff86024a16dabb26803c8)
- 05:32 PM Revision ce3a6cfd: Fix JSON format for mobile IPSec data per Kill Bill (Thanks!)
-
12:59 PM
Bug #7784 (Feedback): IPsec widget breaks dashboard loading
- Updated per your PR. Thank you!
-
- OK, it's caused by the mobile tunnel. If you put...
-
08:04 AM
Bug #7784: IPsec widget breaks dashboard loading
- Thanks for the information. We have still not been able to reproduce but will keep trying.
The IPSec tab you selec... -
- There's just one IPsec tunnel (and mobile IPsec server). I don't think the OS/browser matters. Same thing with Chrome...
-
05:52 AM
Bug #7784: IPsec widget breaks dashboard loading
- I am unable to reproduce.
Would you tell me your OS and browser versions please, as well as your current dashboard... -
- CPU usage does not finish loading, interface statistics, NTP neither....
-
08:46 AM Feature #7495: Ability to set TTL for local for Unbound host overrides and dhcp leases
- Any traction on this? Would be very nice to be able to set ttl via gui for unbound overrides vs having to use custom...
-
- i was setting up traffic shaping on a sg-1000, i found 2 issues:
firstly on wan i added a qinternet and set it to ... -
- On dashboard, this keeps spamming the browser console over and over again....
08/18/2017
-
- Style fix
-
- 07:00 PM Revision 97d53173: PPP down script change
- 06:25 PM Revision 3a5b47dd: Interfaces menu "(Assign)" -> "Assigments"
- Add support for menu divider bars
-
-
-
- Fixed with a workaround. We will get back to it at some point.
Mark as resolved for now. -
- Fixed both quagga and frr
-
-
01:58 AM Bug #7751: Duplicated traffic graphs
- Thanks guys!
Confirmed working OK on todays snap :) -
- Yeah, the packets are being counted twice, I overlooked this change.
It will be fixed in tomorrow snapshot.
Tha... -
12:50 PM Feature #7783 (New): Support for hosting VMs on pfSense using bhyve
- Seems like pfSense would make a great host platform for VMs using bhyve.
-
- The code is pretty good to avoid user confusion and get things working out of the box, however it should set the conf...
-
-
- Fed up with this issue. It breaks fresh 2.4 installs exactly as noted in the above comment - see https://redmine.pfse...
-
- Definitely confirmed as not fixed at all. The easiest way to reproduce is to exploit the pfBNG + unbound bug. Missing...
-
- OK, I'm closing this since, as stated, it isn't a bug.
If you have a USB NIC problem, you will have to try replica... -
07:47 AM Bug #7701: Shell Command (daemon) Stops Other Services
- Yep, understood, and working round the USB NIC. But the shellcmd issue is only showing up in this case ... change the...
-
- USB NICs are not suitable for routers. Definitely unrelated to shellcmd.
-
- More debugging here, it seems to be due to the USB NIC driver ... trying to use it to access the network (at the shel...
-
- There is literally no info to reproduce the problem, neither here, not on the forum thread.
-
- Whatever happened at this point seems to be fixed now. I did several upgrades last days and all of them worked.
-
- PR merged
08/17/2017
- 11:05 PM Revision c8dfbcbe: Remove dashboard update period stuff
- 11:04 PM Revision 73b5c257: Revise CPU load display to eliminate sleep in AJAX call
- (cherry picked from commit c4ec696bf9eae3f8dbbad30b2e0804b9bf7de4b6)
- 11:03 PM Revision c4ec696b: Revise CPU load display to eliminate sleep in AJAX call
- 10:36 PM Revision 0588e31a: No longer experimental so comment removed
- (cherry picked from commit 2ef62d38adee7126141c1b54489cd191f59adc54)
- 10:36 PM Revision 2ef62d38: No longer experimental so comment removed
- 10:33 PM Revision d244e201: No longer experimental so comment removed
-
- Rule separators are available in port forwards (firewall_nat.php) but not manual outbound NAT. (/firewall_nat_out.php...
-
-
-
-
05:13 PM Bug #1943: PPPoE won't reconnect after link loss when using vr(4) NICs on certain ISPs only
- I've run into this the other day... 2.3.4-RELEASE-p1 (amd64). I had to go into status -> interfaces and manually cli...
-
-
- This reverts commit 525bc9f1dbb32e7682fdf03e08e7d1bdc75cd53d.
-
- This reverts commit c694655bb1511c169ff8b0a280c9b34c63e01815.
-
-
-
-
03:24 PM Bug #7604: Bug #6594 is not resolved: Waiting for Internet connection to update pkg metadata and finish package reinstallation
- Same issue as above.
Experienced issues with package updates not registering. Tried to run the command from CLI a... - 03:11 PM Revision 57cea206: Widget comment edit
- 03:05 PM Revision acd2f312: Re-write CPU usage calculation to avoid sleep in AJAX call
-
09:10 AM Bug #7779: Traffic crossing a site-to-site OpenVPN tunnel fails to fragment.
- Steve Wheeler wrote:
> In some circumstances traffic crossing an OpenVPN site-to-site tunnel with packets larger tha... -
08:54 AM pfSense Packages Bug #7780 (Closed): Blacklist update doesn't work on Firefox
- When I click in Download it does nothing. It works on Chrome.
Firefox 55.0.1 x86_64 on Arch Linux. -
- It started OK, but did it actually function as intended?
-
- I have done some testing as requested. The results:
1. Added bridge0 again between the VPN tap interface and lagg0... -
07:10 AM Feature #1904: DHCP server doesn't allow arbitrary config blocks
- I would second that, please add a possibility to add additonal dhcpd.conf options, for example i would like to implem...
08/16/2017
-
- Luiz Souza wrote:
> Can someone provide more info please ?
>
> Is the IPv6 connectivity up but the 6rd gateway is... -
- Can someone provide more info please ?
Is the IPv6 connectivity up but the 6rd gateway is still showing as down or... -
- Ole-Henrik Jakobsen wrote:
> Luiz Souza wrote:
> > Ok, I have committed a couple of new fixes after some tests.
> ... -
-
-
-
- Also for the other shapers 0 is a valid priority
While fairq causes a error loading rules with a priority above 7 so ... -
-
- Further examination did indeed show that the problem is caused by unbound starting before the dhcp6c - RTSOLD - rc.ne...
-
-
-
- This bug is fixed in GUI package version 4.0.0 using the code submitted by the OP.
-
- This bug was fixed in GUI package version 3.2.2_3 via a Pull Request submitted by the OP.
-
- This bug is fixed in GUI package version 4.0.0.
- 02:40 PM Revision edbca480: Don't automatically update CIDR masks if the selector is disabled
- (cherry picked from commit a379a5ff12b170df3a27e643794e576caf316a44)
- 02:37 PM Revision a379a5ff: DOn't automatically update CIDR masks if the selector is disabled
- 02:34 PM Revision a7c47d85: Fixed #7625
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- Example, ticket 23040
-
- In some circumstances traffic crossing an OpenVPN site-to-site tunnel with packets larger that the local network MTU ...
- 12:24 PM Revision 388189cf: Hide dashboard update period control. No longer needed with central refresh system
- (cherry picked from commit 5e024279579ec76486f7cff713eecdb83611ed37)
- 12:24 PM Revision 5e024279: Hide dashboard update period control. No longer needed with central refresh system
- 12:22 PM Revision 6c1f2a1c: Hide dashboard update period control. No longer needed with central refresh system
- 12:14 PM Revision 4d2ed8bc: Convert firewall logs widget to centralized refresh system
- (cherry picked from commit a8c2e827cfeaf74bc99227e087584eefb2c466f2)
- 12:13 PM Revision a8c2e827: Convert firewall logs widget to centralized refresh system
-
12:00 PM Bug #7502: Cannot set router lifetime to 0 in radvd
- I've opened a PR with a fix for this (not including i18n): https://github.com/pfsense/pfsense/pull/3801
- 12:00 PM Revision 0022b113: Convert firewall log widget to centralized refresh system
-
- Can you try this again? There have been several changes to unbound service handling and other areas over the last few...
-
- I haven't had any problems with Factory or CE installers and ZFS in a while now, it all works nicely.
-
- Works, no more syntax errors
-
- That last change has corrected the behavior of CIDR selection for saved IPsec and VIPs, thanks!
-
09:40 AM
Bug #7625 (Feedback): When creating IPv6 firewall rule for single host, netmask improperly displays
- Applied in changeset commit:a7c47d85270fcf8c784e6af61ea2fd09f9d4f5ac.
-
- It is also happening for Virtual IP addresses and their CIDR masks
-
- This has caused a regression, see #7777
In IPsec P2, and presumably other places, a stored IPv4 CIDR mask of /24 i... -
- #7389 is still open and is for the same issue
-
02:31 AM Bug #7775 (Duplicate): When using limiters and transparent proxy at same time downloads aren't being limited
- Tested on:
2.4.0-BETA (amd64)
built on Tue Aug 15 16:03:30 CDT 2017
FreeBSD 11.0-RELEASE-p11
I have my dow... -
- If you modify a VIP, is it removed and readded to the interface. That could cause a tunnel attached to that VIP to dr...
-
03:26 AM Bug #7776 (Not a Bug): IPSec reconnects after changing virtual ip address settings
- Hello,
we are using pfSense 2.3.4-RELEASE-p1 with CARP HA.
After deleting, modifying or adding new virtual ip ... -
- I can confirm the behavior, but this is a regression from the work for #7625 - I put a note there, so this ticket can...
-
- Each time i am modifying P2 settings (Tunnel IPv4), remote network mask is changed back to /32.
So each time user ch... -
- DHCP Relay has been prevented from running on bridges since it was first added to the GUI over 10 years ago. I don't ...
-
- I have running a DHCP relay (IPv4) on 4 network interfaces, but it failed to work on 2 of them.
After looking int... -
- Updated both VMs to 2.4-BETA. Same behavior.
-
- Looks very similar to #6637.
-
- Disable IPsec Transport on both sides routing over GRE tunnel.
On Host A1:
$ telnet -4 smtp.gmail.com 587
Tryi... -
- Reply state not established in pf for TCP connections through GRE tunnel when IPsec transport mode enabled between th...
- 12:18 AM Revision ca23e61e: Revert config version to 15.8 and remove upgrade script
- (cherry picked from commit d800d0f5babe2f6d7bb9a7de8afa709c28e930df)
- 12:17 AM Revision d800d0f5: Revert config version to 15.8 and remove upgrade script
08/15/2017
-
- This is a legal value for this field, RFC 4861 section 4.2.
Fixes Redmine #7502. - 08:43 PM Revision b0e52a17: Add thermal_sensors.inc file to obsoleted files list
- (cherry picked from commit ef68bfa699f7fb1c68cb502dbe23ed3546b94b20)
- 08:43 PM Revision ef68bfa6: Add thermal_sensors.inc file to obsoleted files list
- 08:40 PM Revision 3b940f03: COnvert thermal sensor widget to central refresh system
- (cherry picked from commit 032f6a8963a51195946b6a823967d31af5fffbe0)
- 08:40 PM Revision 032f6a89: COnvert thermal sensor widget to central refresh system
- 08:20 PM Revision df8d3033: COnvert dyndns widget to central refresh system
- (cherry picked from commit 5efa7cae2f2df4974c7de19f00fe5b669fb73485)
- 08:19 PM Revision 5efa7cae: COnvert dyndns widget to central refresh system
- 07:54 PM Revision 1fead8ad: Added refresh icon to version display
- (cherry picked from commit b7a42d09d7ef010b34d6570fb5398b4f98f397b2)
- 07:53 PM Revision b7a42d09: Added refresh icon to version display
- 07:32 PM Revision 6e427ced: Add refresh icon to system info widget version display
- (cherry picked from commit 1557953af1d3a47bc508986688f0b285fa2b43e1)
- 07:31 PM Revision 1557953a: Add refresh icon to system info widget version display
- 07:26 PM Revision 27e6d494: Use central refresh system for dyndns widget
-
-
-
-
-
- 05:34 PM Revision 1f3ca824: Converted thermal sensor widget to use central refresh system
-
05:25 PM Feature #7773 (Closed): IPSec using IKEv2 with split DNS not using provided domain names
- I am not sure if this is rather a defect than a feature.
I am using IPSec with IKEv2. The VPN connection works gre... -
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- 12:02 PM Revision cabbaf7a: ipsec widget converted to JSON formatted refresh
- 11:45 AM Revision e0890bfd: System info widget prepared for background version checks
- 11:44 AM Revision 8e07e708: System info widget prepared for background version checks
-
- Looks good!
-
- Looks good on the latest snapshot.
-
- Luiz Souza wrote:
> Ok, I have committed a couple of new fixes after some tests.
>
> Thanks for the report.
It...
08/14/2017
- 10:04 PM Revision 2156aa9d: Re-wrote ipsec widgt to return JSON formatted AJAX data
- (cherry picked from commit 067109d9fd64d8958408c7f9aaf30523319be91a)
- 10:02 PM Revision c814bc95: First part of dashboard update system
- (cherry picked from commit 8f3a49d7e9c22af2c97f92007aa23d2a45c8e697)
- 09:48 PM Revision 8dd64719: COmpleted conversion of dashboard widget to ventralized refresh system
- (cherry picked from commit fe0eb5b1112791cf28e98e00757c4645d6b9234a)
- 09:46 PM Revision fe0eb5b1: COmpleted conversion of dashboard widget to ventralized refresh system
- 09:46 PM Revision 067109d9: Re-wrote ipsec widgt to return JSON formatted AJAX data
- 09:46 PM Revision 8f3a49d7: First part of dashboard update system
-
- (cherry picked from commit 0e78c2f544ad577234a0a2f87ce2e8caefdfdb77)
(cherry picked from commit de7d6cb87d600c6e093aa... -
- (cherry picked from commit 0e78c2f544ad577234a0a2f87ce2e8caefdfdb77)
-
- 05:13 PM Revision 439ae979: Adding widget and login css files
- 05:12 PM Revision 8dce797c: Adding widget and login css files
- 05:06 PM Revision 60d2ae47: Add Netgate Services and Support widget
- (cherry picked from commit 179991b76e7a330a98ea520531551dfd6befb0b3)
- 05:06 PM Revision 179991b7: Add Netgate Services and Support widget
- 04:49 PM Revision 6e22caab: New login design back-ported from 2.4
- (cherry picked from commit 1605d94079fed5822ef1069eee05541d0ebc20ca)
- 04:49 PM Revision 1605d940: New login design back-ported from 2.4
-
- Looks like it broke loading /interfaces.php?if=lan with static ip masks for both IPv4 and IPv6 now defaulting to 32 a...
- 02:38 PM Revision fde09aa8: Revise error page to comply with login page style
-
02:34 PM Bug #7771: domain missing in reverse lookup of host overrides
- It works with your changes, thanks!
-
- Applied in changeset commit:0e78c2f544ad577234a0a2f87ce2e8caefdfdb77.
-
- I'll take a look at this closer. I changed the order there since it made the code more consistent and it eliminated a...
-
- The order is correct in the OpenVPN configuration and how it is pushed to clients. If your client is choosing a diffe...
-
12:36 PM Bug #7742: 1:1 NAT for IPv6 applies wrong subnet mask to "Single Host"
- -While working through ticket #25935 with Chris Linstruth (from Netgate support) I just observed something very odd o...
-
12:31 PM Bug #7772: Regression of Bug #906
- Found this forum post where someone else had an issue with this from deleting VLAN interfaces as well: https://forum....
-
- Please let me know what if any information beyond this you need from me and I will be happy to provide it to help det...
-
- I read the bug and it says the interface delete code removes firewall rules and that the bug was resolved back in 201...
-
- they did come back after it was cleared, but I think as you said since it was half a year ago and its gone now on the...
-
- OK. Coming from one that old it's a bit more unpredictable. Some errors are expected due to library changes, PHP may ...
-
- I believe it was in january but it may have been february as I have this image still on my hdd.
pfSense-CE-2.4.0-B... -
- Do you happen to recall which snapshot you were on before that update?
-
- I have since clean installed the latest snapshot and the problem is gone, so it looks like the problem was a failure ...
-
- Looking at "how that package operates":https://github.com/AlexandreFenyo/ndproxy#ndproxy as a KLD and using pfil, I d...
-
- Ok, I have committed a couple of new fixes after some tests.
Thanks for the report. -
-
- Resolved
08/13/2017
- 07:36 PM Revision 68c4142e: Merge pull request #3800 from phil-davis/patch-1
-
- It looks like now there is a possible solution of decent quality that can be further built upon to integrate in pfSen...
-
- Add a host override in DNS Forwarder (dnsmasq):
* Host: myhost
* Domain: mydomain
* IP address: 1.2.3.4
Forwa... -
04:36 AM Revision e58d4ccd: Comment typos
08/12/2017
-
03:23 PM Bug #7027: Dynamic DNS dyndns.org no longer updates
- please confirm that dyn.com now requires use of 'client updater key'. this is not an issue with pfsense. a hidden inf...
-
- I updated today to snapshot 20170812.0957
This error persists on every boot as a crash report
@PHP Errors:
[12... -
10:07 AM Feature #7769 (Resolved): DynDNS: Azure integration, update record in Azure (Dynamic DNS Client)
- Hi
I'm woundering if there are anyone (other than me) that are interested in a Dynamic DNS Client for Azure? I'm hav... -
- This has happened before in #3314 and was fixed in https://github.com/pfsense/pfsense-tools/commit/ad55e66a3fb817f8e5...
-
- Use the correct variable and only add the route when the hostname is resolved (if the remote address is a hostname).
... -
-
-
12:57 AM Bug #7768 (Not a Bug): DNS misorder under OpenVPN server configuration
- Hi,
I Believe I have discovered a little bug in the openVPN server config page. When configuring the DNS servers b...
08/11/2017
- 07:30 PM Revision 8150bd51: Fixed #7625
- By:
Separating the source and destination onChange functions
Preventing the mask selector from being automatically up... -
-
04:02 PM Feature #3718: radvd - enhancement proposal: ability to advertise routes and some fixes - patches attached
- Updated the patch for version 2.3.4.
-
- 02:32 PM Revision 9d14b22c: Spelling :(
-
02:31 PM
Bug #7625 (Feedback): When creating IPv6 firewall rule for single host, netmask improperly displays
- Fixed JavaScript in firewall_rules_edit.php and pfSense.js
-
- Steve will handle that
- 02:30 PM Revision 979bbbd4: Improve comments
- 02:24 PM Revision e38ba356: Add AJAX version check
-
-
12:58 PM Bug #7750: unbound refuses ipv6 queries after reboot
- For the record, this problem is also present in 2.3.x for users of the "do not wait for RA" setting.
-
- Proposed fix - https://github.com/pfsense/pfsense/pull/3799
-
-
- Martin Wasley wrote:
> Commit #3799
This fix works perfectly.
Thank you very much. -
- Commit #3799
-
- It really needs to be re-engineered
-
- 12:27 PM Revision a9ad771b: Change refresh link to icon
-
-
10:34 AM Feature #7767 (Resolved): OCSP support for OpenVPN server
- It would be great to have a possibility to enable OCSP checking for OpenVPN Server included in pfSense. It seems to b...
-
- Many improvements were made to reduce the times pkg checks remote metadata. I looks much better now.
-
- Version 0.1.19 should be fine
-
- Looks like we'll have to make a new port for it since the current pecl-ssh2 is only compatible with php 7+
-
- commit af1ebe36a4787997f37a3cc1c1a9178e86286508 in the FreeBSD-ports repo removed pecl-ssh2 from the list of dependen...
-
- Dmitry Ivanov wrote:
> Fatal error: Call to undefined function pfsense_pkg\acme\ssh2_connect() in /usr/local/pkg/acm... -
12:33 AM pfSense Packages Bug #7208: ACME ftpwebroot doesn't work
- PFSense 2.4.0
ACME 0.1.18
Fatal error: Call to undefined function pfsense_pkg\acme\ssh2_connect() in /usr/local/p... -
- Luiz Souza wrote:
> The 6to4 tunnel regression was fixed in the latest snapshot. 6rd situation has improved too, pl... -
- The 6to4 tunnel regression was fixed in the latest snapshot. 6rd situation has improved too, please retest.
-
- Further examination did indeed show that the problem is caused by unbound starting before the dhcp6c - RTSOLD - rc.ne...
-
- Hi!
New details posted here: https://forum.pfsense.org/index.php?topic=134506.0
Seems that it is pfSense bug sinc... -
-
12:02 AM pfSense Packages Bug #7729: pfBlockerNG orders NAT licked rules to the bottom of firewall rules
- Fixed in *PR#390*:
https://github.com/pfsense/FreeBSD-ports/pull/390/files
08/10/2017
-
-
-
-
- 05:57 PM Revision c2e98b94: Revised Netgate Services and Support widget to use AJAX when refreshing the data
- 03:07 PM Revision 94bb17b2: dyndns: changed CloudFlare to Cloudflare - correct spelling
- 02:07 PM Revision 7dfb18da: Update interfaces.php
- Updated as per style guidelines (??) I'm new here, please say if still not right!
- 02:01 PM Revision c2fae874: Update system_update_settings.php
- Tidied the Dashboard update settings text
-
-
-
-
- 01:38 PM Revision ef863b31: Update interfaces.php
- Updated description of "System / Advanced / Firewall & NAT settings"
-
-
-
- 10:42 AM Revision 5b194e16: dyndns: added password help text for cloudflare
-
- The problem is unrelated to OpenVPN, that's a symptom of the actual bug, which is PHP getting wedged. Already covered...
-
08:15 AM Bug #7765 (Duplicate): Openvpn / WebGUI bug ?
- Hi,
i don´t really know where too look or how to debug my problem.
Six servers are connected to my local network vi... -
- It has to be something in your settings causing this. I can't reproduce it here. I have a working MITM transparent se...
-
06:23 AM pfSense Packages Bug #7764 (Not a Bug): Basic setup of squid + squidguard + ssl interception + transparent proxy produces https://http/* error.
- Check this serverfault question:
https://serverfault.com/questions/866660/pfsense-squid-https-filtering-error-url-ca... -
- Patch a921c7da1d1a0529e2f490d3a2d7d19ddfc82036
Commit to main repo will happen once all O.K is given by UK testers.
08/09/2017
-
-
07:11 PM Bug #7116: a floating 'match' rule on LAN does not put traffic from a broswer on a clientpc into a shaper queue
- I can also confirm that the issue seems fixed. Steps taken:
* Deleted all shaping firewall rules
* Deleted traffi... -
05:13 PM Bug #7116: a floating 'match' rule on LAN does not put traffic from a broswer on a clientpc into a shaper queue
- I can now see traffic in all of the queues where there should be traffic. It does indeed seem to be fixed. Any chan...
-
- Seems to work properly for my test box. Thanks!
-
- Fixed in the latest snapshot.
- 06:19 PM Revision e78d5940: Ensure the callback function exists before calling
- 03:41 PM Revision 8bf4cf1f: gateway, ntp, and openVPN widgets updated
-
03:34 PM Feature #5112: LDAP support for Captive Portal
- https://github.com/pfsense/pfsense/pull/3117 implementation works on 2.4 BETA 09 Aug 2017
- 03:03 PM Revision 634bb06a: Remove ajax stuff from installed packages widget
- 02:50 PM Revision 67dd6c11: dd system information widget to central refresh system
- Add ability for a widget to specify how often it wants to be updated
-
- An issue was discovered by a customer running LAGG on ix0 and ix1 on the XG-2758. If a physical link to one of those ...
- 01:24 PM Revision ec922197: Revise upgrade script to insert support widget at the top of column 2
- Add old support widget to obsolete files list
-
-
11:12 AM Bug #6318: IPsec dashboard widget causes GUI failure
- Sounds like a fantastic change. Thanks Steve
-
11:08 AM
Bug #6318 (Feedback): IPsec dashboard widget causes GUI failure
- I have done a LOT of research into this. I believe that since most dashboard widgets have their own timer, their own ...
-
-
- Running pfSense-upgrade as a non-root/admin user will produce errors that are not obviously related to lacking privil...
-
07:31 AM Feature #7761 (New): Add a way to match on IPv6 proto=0 (hop-by-hop header extension)
- https://tools.ietf.org/html/draft-ietf-opsec-ipv6-eh-filtering-03#section-3.4.1
> Since this EH is required to be ... - 02:07 AM Revision 4c05e19b: Repair broken AJAX response (POST vs GET)
08/08/2017
- 08:00 PM Revision 60f485ed: interface_statistics widget added to central refresh system
- 07:51 PM Revision 53547a05: Add ipsec widget to new centralized refresh system
-
- Also for the other shapers 0 is a valid priority
While fairq causes a error loading rules with a priority above 7 so ... - 05:42 PM Revision d7c2f4fe: Experimental centralized widget refresh system
- Used by the interfaces.widget.php widget only for now
-
- Luiz Otavio O Souza wrote:
> The 6rd patch was committed to 2.4 and is available on the latest snapshots. Tests are... -
- It would be a good idea to have a second option to kill states on recovery to keep working states intact if desired. ...
-
03:22 PM Bug #6099: igmpproxy does not recognize upstream interface
- For the records:
Mr J wrote on https://forum.pfsense.org/index.php?topic=134795.0
> These instructions by james_h... -
01:54 PM Bug #7604: Bug #6594 is not resolved: Waiting for Internet connection to update pkg metadata and finish package reinstallation
- Just happened to me, moments ago.
Backup up a 2.3.4 machine (server is unstable) and replaced the server hardware ... -
- Thanks! Another user had also submitted a fix for the EVE JSON log rotation issue. I asked him about incorporating ...
-
11:43 AM pfSense Packages Bug #7756: suricata suricata_check_dir_size_limit() needs to be improved
- Filed https://github.com/pfsense/FreeBSD-ports/pull/389
08/07/2017
-
-
- I'm the volunteer package maintainer for Suricata on pfSense. Thank you for providing a patch to go along with your ...
-
07:32 PM Bug #7412: rtsold will not run on VLAN interfaces
- Has progress been made on this bug? Thanks.
-
- (cherry picked from commit 4de753e52d8bbc732f23f90dd77df1707fbc3912)
-
- This should be fixed in the newer versions of nvd3. I am attempting to upgrade, but there are some kinks to work out.
- 03:04 PM Revision 2306b30e: Update config version
- 03:01 PM Revision 4918554d: Fix upgrade 166 to 167 script
-
- The method for tracking hostnames requires aliases. Using them in rules directly is not possible in pf, and rewriting...
-
02:18 PM Feature #7760 (Rejected): Reverse FQDN lookop from firewall rule
- Currently to use a FQDN in a firewall rule you need to add an alias for it. The alias documentation states:
"Hosts ... - 02:19 PM Revision 2348f688: Rename support widget refresh link to match new widget name
- 01:31 PM Revision 640d1b64: pfSense 2.4 setHelp syntax was applied to v 2.3 - arguments should be provided in an array
-
12:59 PM Bug #7759 (Closed): No version control number showing when going to System > Update
- I am currently on 2.4.0.b.20170802.0604
When I goto System > Update it shows the attached picture (just "Warning" ... -
12:51 PM Bug #6099: igmpproxy does not recognize upstream interface
- Some of these reports seem to miss one very important information: which version of IGMP is used.
IMHO igmpproxy d... -
07:13 AM Bug #6099: igmpproxy does not recognize upstream interface
- igmpproxy does indeed work 100% for UK BT TV, BT Sport 4K (IPTV over BT Infinity FTTC/P) in ver. 2.4.0-BETA (Version ...
-
- Please take this discussion to the forum, mailing list, reddit, etc. If it runs for a few minutes then it is absolute...
-
- _
-
- The way I use igmpproxy it works properly. There are many posts above from other people who confirmed that IPTV works...
-
- This was fixed in this commit: https://github.com/pfsense/pfsense/commit/b8047a1f1d5e5fb529e716a349f153ea3a78280a
-
- This was fixed in the following: https://github.com/pfsense/pfsense/commit/e7d63f568c8e3982ee8f39387369778789593075
-
- That is most likely due to either a compatibility issue with your cipher selection in squid and that site, or with sq...
-
02:08 AM pfSense Packages Bug #7758 (Not a Bug): Error on squid
- I deployed pfsense 2.3.4 and installed Squid 3.5.26. I config squid in transparent mode and enable HTTPS/SSL intercep...
-
Also available in: Atom