Activity

30 days up to

User

Subprojects

Activity

From 05/05/2018 to 06/03/2018

06/03/2018

03:35 PM Feature #8546: Ability to download pfSense updates via another gateway: Understood, thank you very much. Stéphane Lapie
02:31 PM Feature #8546 (Duplicate): Ability to download pfSense updates via another gateway: This is already covered by other things here, and likely is already solved on 2.4.4 by the new feature where you can ... Jim Pingle
11:10 AM Feature #8544: Routed IPsec using FreeBSD if_ipsec(4) VTI: Jim Pingle wrote:
> Once a new snapshot is up with the later two commits it should be OK for testing.
Just tested... Michael OBrien

06/02/2018

09:13 AM Bug #8498 (Not a Bug): cloudflare Dynamic DNS is not working: Jim Pingle
09:00 AM Bug #8498: cloudflare Dynamic DNS is not working: This was an issue in your configuration and no bug oft pfsense.
You had no entry makkawi.win in cloudflare. So pf... Michael Geiger
09:12 AM Feature #3652: OpenVPN - Dynamic IPv6 Tunnel Network: Feature #7281 is a duplicate of that
I would love to see this feature too. Unfortunatley it is not easy to implem... Michael Geiger

06/01/2018

01:19 PM Revision 4069207f: Use recently created RELENG_2_4_4 branch for FreeBSD-src: Renato Botelho
06:38 AM pfSense Packages Feature #8547 (New): fwknop Port Knocking Package: "fwknop":http://www.cipherdyne.org/fwknop is a quite well established "next generation" advance on simple port knocki... Stilez y

05/31/2018

09:38 PM Feature #8546 (Duplicate): Ability to download pfSense updates via another gateway: I am mainly using pfSense in a CARP+HAproxy scenario (with a WAN and a LAN interface), and have to face a little conu... Stéphane Lapie
09:22 PM Revision be7c1319: PHP7 fixed illegal string offset warning: Stephen Jones
07:36 PM Bug #8489: DHCPv6 Client Failure to Initialize with "Do not wait for RA": Jim Pingle wrote:
> I still can't replicate this here even by checking "Do not wait for RA", but I do not have a pro... Daryl Morse
06:43 PM Revision a74b4e30: Enable ACB2 build: Renato Botelho
03:09 PM Revision 78031530: Add the missing new line.: Luiz Souza
02:41 PM Revision 5ecce9d0: Fix reference to non-existent variable in IPsec P1. Fixes #8543: (cherry picked from commit ac976b7e061f19d108a6f60a57ce6866dd0a9499) Jim Pingle
02:40 PM Revision ac976b7e: Fix reference to non-existent variable in IPsec P1. Fixes #8543: Jim Pingle
01:53 PM Revision e8f7e051: A couple vpn.inc refinements for VTI. Ticket #8544: Jim Pingle
01:15 PM Revision 50c4282d: Add vpn.inc changes for IPsec VTI that missed the previous commit. Ticket #8544: Jim Pingle
09:59 AM Bug #8545: LACP can't be established on QLogic NetXtreme II BCM57810 NICs: That should probably be tested on FreeBSD directly to see if the problem happens there as well. It sounds like a driv... Jim Pingle
06:50 AM Bug #8545 (Rejected): LACP can't be established on QLogic NetXtreme II BCM57810 NICs: I created LAGG interface with two network cards (QLogic NetXtreme II BCM57810 10GbE (B0) BXE v:1.78.90) and assigned ... Alex Kolesnik
09:50 AM Feature #8544: Routed IPsec using FreeBSD if_ipsec(4) VTI: Once a new snapshot is up with the later two commits it should be OK for testing. Jim Pingle
09:50 AM Bug #8543 (Feedback): IKE Phase 1 configuration not working: Applied in changeset commit:ac976b7e061f19d108a6f60a57ce6866dd0a9499. Jim Pingle
09:41 AM Bug #8543 (Confirmed): IKE Phase 1 configuration not working: OK, I can replicate it in IE and confirm the fix. Pushing momentarily. Jim Pingle
12:41 AM Bug #8543: IKE Phase 1 configuration not working: I used chrome Version 57.0.2987.133 (64-bit) and MS-IE 11.431.162990 (32 and 64 bit) on Windows 10.
This depends o... Thomas Eckardt
09:35 AM Feature #7029 (Closed): GRE interfaces not available as SPAN port: As far as I can tell, FreeBSD doesn't support it. If you want ERSPAN support for FreeBSD GRE interfaces, the issue ne... Jim Pingle
05:45 AM Feature #7029: GRE interfaces not available as SPAN port: Any news on this one? In our virtualized world, it would be awesome to be able to forward copy of traffic over L3. Es... Idar Lund

05/30/2018

08:53 PM Revision bd4c337c: Please welcome routed IPsec using if_ipsec VTI interfaces. Implements #8544: To use, create a P1/P2 and set P2 to VTI using local/remote network as tunnel endpoint addresses, then assign the int... Jim Pingle
08:45 PM Bug #6974: radvd enabled on a disconnected interface kills RA completely on all interfaces: and... should be fixed by radvd-2.17_5. Check #8429 for the current bug. Luiz Souza
08:43 PM Bug #8429 (Feedback): radvd/IPv6 broken in 2.4.3 when using a LAN bridge: Should be fixed with radvd-2.17_5. Please check with the next 2.4.4 snapshot.
Sorry for the breakage. Luiz Souza
04:10 PM Feature #8544 (Feedback): Routed IPsec using FreeBSD if_ipsec(4) VTI: Applied in changeset commit:bd4c337c061f989c4be1bbeaf207447cd8af4989. Jim Pingle
03:53 PM Feature #8544 (Resolved): Routed IPsec using FreeBSD if_ipsec(4) VTI: Add routed IPsec using @if_ipsec(4)@ VTI (Virtual Tunnel Interfaces) from FreeBSD 11.1 and later with strongSwan.
... Jim Pingle
03:06 PM Revision a342020d: Do not disable rekeying by default on IPsec P1 entries. Fixes #8540: Jim Pingle
02:49 PM Revision 5f04221b: Do not disable rekeying by default on IPsec P1 entries. Fixes #8540: Jim Pingle
01:53 PM Revision 15f5dea7: Fix crash reporter download button display when there are only PHP errors, no textdumps.: (cherry picked from commit 3db214ddb99bea076c964bd90538d5975287456b) Jim Pingle
01:53 PM Revision 3db214dd: Fix crash reporter download button display when there are only PHP errors, no textdumps.: Jim Pingle
10:05 AM Bug #8543 (Feedback): IKE Phase 1 configuration not working: I can't replicate this problem here. I see what you mean about that variable not being populated, but the page still ... Jim Pingle
10:00 AM Bug #8540 (Feedback): Disable Rekey Checkbox Should be Disabled on New IPsec Tunnels: Applied in changeset commit:5f04221b2b4e448e7502a2e9f88f0d1295a67f03. Jim Pingle
09:30 AM Bug #8489 (New): DHCPv6 Client Failure to Initialize with "Do not wait for RA": I still can't replicate this here even by checking "Do not wait for RA", but I do not have a provider that requires i... Jim Pingle

05/29/2018

01:34 PM Revision cee46a8f: Use the variable and not a constant: Renato Botelho
01:34 PM Revision 9b11388d: Fix syntax: Renato Botelho
01:34 PM Revision 7aefd1fa: Do not depend of pfSense-builder meta package, track dependencies using pkg: Renato Botelho
01:33 PM Revision ffeac248: Use the variable and not a constant: Renato Botelho
01:32 PM Revision 1386a2e4: Fix syntax: Renato Botelho
01:30 PM Revision 1b40e1a6: Do not depend of pfSense-builder meta package, track dependencies using pkg: Renato Botelho

05/28/2018

11:56 PM Bug #8543 (Resolved): IKE Phase 1 configuration not working: issue:
strongSwan uses only AES 128, because keylen is empty in the pfsense config file.
... Thomas Eckardt
09:07 PM Bug #8542 (Closed): Web GUI did not prompt for NIC reassignment when config restore on hardware with different NICs was performed: Old system: SG-1000 pfsense 2.4.3
New system: amd64 mini-PC pfsense 2.4.3 freshly installed with two realtek NICs na... Jakub Osika
08:54 PM Bug #8541 (Rejected): pf blocking OpenVPN connection causing OpenVPN fail repeatedly and then connecting successfully when connection is no longer being blocked: Hey,
I recently switched to development snapshots and I have noticed that suricata and openvpn together give out s... rub man
08:26 PM pfSense Packages Todo #8433: Upgrade NRPE-SSL Package to NRPE3: The only valid test would be on 2.4.4 or 2.3.5-p2 (where it wasn't intended to be yet, but ended up after the last re... Jim Pingle
08:25 PM pfSense Packages Todo #8433: Upgrade NRPE-SSL Package to NRPE3: How can I go about testing it on 2.4.3-p1 to help out? I currently just have the nrpe3 package installed from the Fre... Ken Sim
07:51 PM pfSense Packages Todo #8433: Upgrade NRPE-SSL Package to NRPE3: I haven't had any feedback on how well (if at all) that it works. If it can get some testing, at least on 2.4.4, then... Jim Pingle
07:34 PM pfSense Packages Todo #8433: Upgrade NRPE-SSL Package to NRPE3: Jim,
Is it possible to get it back ported to 2.4.3-p1 or is there still some issues that need to be worked out?
... Ken Sim
05:07 PM Bug #8540 (Resolved): Disable Rekey Checkbox Should be Disabled on New IPsec Tunnels: When a new IPsec Phase 1 tunnel is created the Disable Rekey checkbox is checked by default.
I would argue that th... Chris Linstruth

05/27/2018

08:12 PM pfSense Packages Todo #8433: Upgrade NRPE-SSL Package to NRPE3: Good timing. Ubuntu 18.04 ships with a new version of OpenSSL that stops @check_nrpe@ from contacting old versions be... Yehuda Katz
03:45 PM Bug #8539 (Resolved): ACLs not configurable in German Language UI: Webinterface does not save ACL entries or changes to existing ones when WebUI is set to German language. Works fine w... Marcus Scholz
12:22 PM Bug #8489: DHCPv6 Client Failure to Initialize with "Do not wait for RA": Is this error: May 21 14:51:51 dhcp6c 49073 transmit failed: Input/output error generated by pfsense or freebsd? I no... Daryl Morse
07:04 AM Bug #7600: Unable to save DNS Resolver settings: I can agree that is in the 2.4.3-RELEASE-p1 (amd64) as well!!
My solution was to deactivate and deinstall "pfBlock... E P

05/26/2018

01:15 PM Bug #8489: DHCPv6 Client Failure to Initialize with "Do not wait for RA": Jim Pingle wrote:
> I can't reproduce this here on any hardware I have, real or virtual.
>
> It might be in that ... Daryl Morse
08:21 AM Bug #8489 (Not a Bug): DHCPv6 Client Failure to Initialize with "Do not wait for RA": I can't reproduce this here on any hardware I have, real or virtual.
It might be in that NIC driver, or some other... Jim Pingle

05/25/2018

06:19 PM Revision 5adda2a2: Make sure gnid, crypto tools and athstats are build with proper compiler: Renato Botelho
06:19 PM Revision 06c13973: Make sure gnid, crypto tools and athstats are build with proper compiler: Renato Botelho
03:26 PM Revision 901916d4: Fix crash reporter "submit" wording (can't submit anymore!): (cherry picked from commit ca06add8b4a61c8ad020e97cb55471bf52c0929c) Jim Pingle
03:26 PM Revision ca06add8: Fix crash reporter "submit" wording (can't submit anymore!): Jim Pingle
03:24 PM Revision c8975d3a: Rework crash reporter page so users can download the data files directly rather than submitting to a server.: Jim Pingle
03:23 PM Revision da6af9ce: Rework crash reporter page so users can download the data files directly rather than submitting to a server.: Jim Pingle
02:50 PM Bug #8070: IKEv2 IPSec tunnel under load crashes pfSense when AES-NI is enabled: Jan Jurkus wrote:
> I want to refer you to this forumpost: https://forum.pfsense.org/index.php?topic=139146.0
>
>... Paul Youngberg
12:46 PM Revision da246f54: Make sure core packages are built with proper ABI information: Renato Botelho
12:46 PM Revision dff2bf9c: Make sure core packages are built with proper ABI information: Renato Botelho
11:58 AM Revision 21c6fa05: Use already defined variable: Renato Botelho
11:18 AM Bug #8537: Update from 2.3.5_1 to 2.3.5_2 on nanobsd failed: I cannot confirm this.
Update from 2.3.5_1 to 2.3.5_2 on nanobsd successful here. Chris Palmer
09:03 AM Bug #8537: Update from 2.3.5_1 to 2.3.5_2 on nanobsd failed: Jim Pingle wrote:
> "Secondary partition (/dev/ufs/pfsense1), used for upgrade not found" reads like you didn't writ... Laurent BONNIN
07:46 AM Bug #8537 (Not a Bug): Update from 2.3.5_1 to 2.3.5_2 on nanobsd failed: "Secondary partition (/dev/ufs/pfsense1), used for upgrade not found" reads like you didn't write a full NanoBSD imag... Jim Pingle
06:46 AM Bug #8537 (Not a Bug): Update from 2.3.5_1 to 2.3.5_2 on nanobsd failed: Update process from GUI failed due to Duplicate slice missing.
See below detailled informations from GUI textare
... Laurent BONNIN
10:03 AM pfSense Packages Bug #8538: arpwatch missing ethercodes.dat: actually, this is syntax error -- single-quote vs double-quote issue on line 149 of the .inc
changing it to ARPWAT... ROB VANHOOREN
09:35 AM pfSense Packages Bug #8538 (Closed): arpwatch missing ethercodes.dat: attached script will pull down the current mac address data from IEEE and parse it for arpwatch (and nmap, fwiw)
i... ROB VANHOOREN

05/24/2018

04:12 PM Feature #2358: NAT64 support: I would like to see this added as well. Large companies such as Microsoft are using NAT64 and going IPv6 only because... Isaac McDonald
01:12 PM pfSense Packages Bug #8438: haproxy: can't use ACL for cert with http-response actions: Thanks for checking.
- Inconsistent method of reordering list entries
I thought i removed those up/down arrows. T... Pi Ba
08:24 AM pfSense Packages Bug #8438: haproxy: can't use ACL for cert with http-response actions: Done some quick test and it seems mostly fine, even the configuration was "migrated" successfully.
Just few things I... Petr H
08:37 AM Bug #8536 (Duplicate): Logout not working as intended: Appears to be a duplicate of #8441
Try on 2.4.3-p1, not 2.4.3. Jim Pingle
08:29 AM Bug #8536 (Duplicate): Logout not working as intended: Hi,
On 2.4.3, we using multiple CP with multiple virtual interface (vlan tagging).
When a user disconnect (or an ... Nymous Ano

05/23/2018

09:16 PM Bug #8535 (Duplicate): SMTP fails to work with STARTTLS and TLS: Problems:
1) I read on the pfSense forums that the new Pear-Mail should automatically use STARTTLS if the server off... Jeremy 99
08:41 PM Revision 60682dd2: Restrict entry of DHCP options (ticket #8534): Michael Newton
06:08 PM pfSense Packages Bug #8438: haproxy: can't use ACL for cert with http-response actions: Ive added a set of commits to this branche for now..: https://github.com/PiBa-NL/FreeBSD-ports/tree/20180521-haproxy-... Pi Ba
04:12 PM Revision 7c41a378: PHP 7.2 fixed string offset and undefined constant: Stephen Jones
03:42 PM Bug #8534: Invalid DHCP options can be added: See https://github.com/pfsense/pfsense/pull/3943 Michael Newton
03:37 PM Bug #8534 (Resolved): Invalid DHCP options can be added: Had a user who wanted to temporarily "disable" a DHCP option so he set it to zero. This corrupted the DHCP response. ... Michael Newton
12:23 PM Revision 3f1791a2: Update translation files: Renato Botelho
12:23 PM Revision 57d932e8: Regenerate pot: Renato Botelho
03:03 AM Bug #8498: cloudflare Dynamic DNS is not working: Now it is working with 2.4.3 p1
Also I added dynamic in cloudflare and in the host name
See attached picture Mohammad Makkawi

05/22/2018

08:59 PM Bug #8533: OpenVPN with 2 site to site tunnels adds routes to first OpenVPN interface only: My apologies, the update information on the firewall was telling me I was already on the latest version, will investi... Jonathan Trott
08:53 PM Bug #8533 (Rejected): OpenVPN with 2 site to site tunnels adds routes to first OpenVPN interface only: Highly unlikely there is a bug here, it's most likely a configuration issue. Please post on the forum (when it comes ... Jim Pingle
08:32 PM Bug #8533 (Rejected): OpenVPN with 2 site to site tunnels adds routes to first OpenVPN interface only: We had setup a single OpenVPN site to site connection to a remote Sophos XG firewall with no issues. pfSense being th... Jonathan Trott
02:24 PM Revision 1b5fbae4: PHP 7.2 Migration. Replace is_numeric() with ctype_xdigit() to check for valid hex string: Stephen Jones
01:25 PM Revision 03ce1107: Add switch config to status output. Implements #8525: Jim Pingle
08:40 AM Feature #8525 (Feedback): add to status.php: Applied in changeset commit:03ce110725129b5f35c62f4985f631a1e3b5d046. Jim Pingle
07:45 AM Feature #8532 (New): Ability to add metric to pushed routes: By default GUI for OpenVPN server creates line as:... Pawel Szafer
12:17 AM Feature #336: Option to create lagg under assign interfaces: If you only needed the LAGG, VLANs and the interfaces :... Stéphane Lapie

05/21/2018

11:02 PM Feature #336: Option to create lagg under assign interfaces: I decided to go the very nasty route, and use PHP Shell :... Stéphane Lapie
09:06 PM Revision 059d8a71: PHP migration 7.2 enforce type array: Stephen Jones
05:23 PM Bug #8531: URL Table aliases don't support FQDNs or names that return >1 IP: I added timeout values to the dig command, but rather than 2 separate commits for this tiny patch, I made a new branc... → luckman212
03:08 PM Bug #8531 (Resolved): URL Table aliases don't support FQDNs or names that return >1 IP: In my testing (pfSense 2.4.3-p1 as well as 'master') the only Alias type that supports FQDNs is "Host". This is limit... → luckman212
05:03 PM Bug #8489: DHCPv6 Client Failure to Initialize with "Do not wait for RA": I performed a clean installation from the latest snapshot (May 21st). The problem is still present.
These DHCP log... Daryl Morse
03:54 PM Bug #6481: loading EAP_RADIUS method failed: I can confirm the bug is still on 2.4.3. Friedrich Schnabel
09:35 AM Bug #8530 (Resolved): Delete allowed hostname/ip doesn't work if captive portal is not enabled.: I noticed in a captive portal zone you can add new allowed hostnames and allowed IP's while the captive portal zone i... Anonymous
07:49 AM Bug #8528: IPsec does not start at boot: That is a topic for a discussion platform (forum, reddit, list) not a bug tracking system. Jim Pingle
07:46 AM Bug #8528: IPsec does not start at boot: Hi,
But there is no any logs in system. 2 times ipsec starts ok, and third fail. How to at least track it? There i... Dmitriy Stark
07:18 AM Bug #8528 (Not a Bug): IPsec does not start at boot: You appear to have something unrelated happening on your system causing some startup tasks to fail. There is no confi... Jim Pingle
05:29 AM Bug #8528 (Not a Bug): IPsec does not start at boot: Hi,
I setup reboot pfSense everynight to avoid memory leak. I understand that this is not really good idea, but be... Dmitriy Stark
07:41 AM pfSense Packages Bug #8514: Captiveportal save or update: Jim Pingle wrote:
> Try on a 2.4.4 snapshot, there were changes recently which may have improved situations where lo... Mehmet Ali Gökbaş
07:27 AM Bug #8429: radvd/IPv6 broken in 2.4.3 when using a LAN bridge: Same here Nicolas Vollmar
07:26 AM Bug #6974: radvd enabled on a disconnected interface kills RA completely on all interfaces: Spencer Hakim wrote:
> Hi, the fix to this bug breaks radvd for bridge interfaces, which subsequently breaks IPv6 ro... Nicolas Vollmar
07:19 AM Bug #8529 (Not a Bug): shellcmd does not run service: You appear to have something unrelated happening on your system causing some startup tasks to fail. There is no confi... Jim Pingle
05:38 AM Bug #8529 (Not a Bug): shellcmd does not run service: Hi,
I'm trying to collect statistic from pfSense with Prometheus node_exporter. node_exporter installed from with:... Dmitriy Stark
03:52 AM Bug #8527 (Resolved): VLANs losing parent interface on LAGG change: Hi, I am using 2.4.3_1 and seem to be experiencing a regression of Issue 3976 https://redmine.pfsense.org/issues/3976... Thomas Spaziani

05/20/2018

05:50 AM Bug #8429: radvd/IPv6 broken in 2.4.3 when using a LAN bridge: Same here:... Michael Duller

05/19/2018

10:09 PM Bug #6406: Web process becomes unresponsive producing 502 Bad Gateway nginx: Chris Collins wrote:
> As an experiment I manually adjusted the php-fpm server configuration so there is more childr... Serrjo Downe
09:53 PM Bug #8526: DHCP client ignores server replies when 802.1q tagging is used: PR: https://github.com/pfsense/FreeBSD-src/pull/9
Nuno Subtil
09:52 PM Bug #8526 (New): DHCP client ignores server replies when 802.1q tagging is used: Some ISPs (notably AT&T Gigapower) will send 802.1q-encapsulated DHCP replies, which get filtered out by the BPF filt... Nuno Subtil
02:12 PM Bug #8515: ts wizard syntax error (as of 2.4.4.a.20180514.0905): No "PHP Warning: Invalid argument supplied for foreach() in /usr/local/www/wizards/traffic_shaper_wizard_dedicated.in... Anonymous
01:41 PM Bug #8507: FreeBSD 11.2-BETA dhclient always uses server MTU value: The patch looks good. Setting a supersede of 0 in the dhclient config now allows the MTU change to be ignored. The te... Jim Pingle
01:39 PM Bug #8506 (Duplicate): Constant link cycling on some DHCP interfaces causes connectivity problems and other issues: Closing this as a duplicate of #8506 -- they had the same root cause, and the information on #8507 is closer to the r... Jim Pingle

05/18/2018

06:04 PM Revision 5fed4bf2: Supercede the DHCP server MTU to avoid setting it improperly and/or causing a link state loop. Ticket #8507 Ticket #8506: This requires a patch from https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=206721#c12 which garga has imported into... Jim Pingle
03:14 PM Revision 28ad96a5: PHP 7 migration Added () for isset. Not sure how this worked in php 5: Stephen Jones
03:07 PM Feature #8525 (Resolved): add to status.php: Can we add etherswitchcfg output to the status.php file. Chris Macmahon
02:16 PM Bug #8506 (Feedback): Constant link cycling on some DHCP interfaces causes connectivity problems and other issues: Working under the assumption this is related to #8507, a patch was added to help address the issue. If it's still bro... Jim Pingle
02:16 PM Bug #8507 (Feedback): FreeBSD 11.2-BETA dhclient always uses server MTU value: Renato committed a patch that was added to the FreeBSD PR that should let supesede work, next snapshots should be bet... Jim Pingle
10:25 AM Bug #8507: FreeBSD 11.2-BETA dhclient always uses server MTU value: Updated the subject to be more accurate.
I also dropped a note on https://bugs.freebsd.org/bugzilla/show_bug.cgi?i... Jim Pingle
10:18 AM Bug #8507: FreeBSD 11.2-BETA dhclient always uses server MTU value: I tried setting an explicit request list in the generated dhclient configuration which does not send a request for th... Jim Pingle
01:52 PM Revision 2f79135c: PHP 7.2 Migration fixed count() issue: Stephen Jones
11:28 AM pfSense Packages Todo #8433 (Feedback): Upgrade NRPE-SSL Package to NRPE3: This should be up and ready for testing now. Jim Pingle
08:25 AM pfSense Packages Todo #8433 (Assigned): Upgrade NRPE-SSL Package to NRPE3: Looks like this does need some changes in the package to function. I've got it working here, will push shortly.
nr... Jim Pingle
10:53 AM Bug #8273: IPv6 GRE tunnel over PPPoE fails on startup: I've stumbled onto a similar problem in my unrelenting quest to get IPv6 to work (but in DHCPv6+PD on WAN + VIP): the... Mickaël FALCK

05/17/2018

09:46 PM Revision 4a588de1: Array checking for PHP 7.2 migration: Stephen Jones
08:26 PM Revision eb06df8f: Store the old LAN IP address and temporarily add it to the alt hostnames to work around a referer check issue in the setup wizard. Fixes #8524: (cherry picked from commit 21f630def08b5505f5504606958ead93dbb9358d) Jim Pingle
08:25 PM Revision 21f630de: Store the old LAN IP address and temporarily add it to the alt hostnames to work around a referer check issue in the setup wizard. Fixes #8524: Jim Pingle
04:51 PM Revision b2383d46: PHP7 - Resolve count() error: Steve Beaver
04:48 PM Revision 49bd212f: Enable pfBlockerNG-devel build: Renato Botelho
04:14 PM Revision 659a1bc1: Merge pull request #3942 from teicee/master: Steve Beaver
03:40 PM Bug #8524 (Feedback): HTTP_REFERER issue if changing the LAN IP in setup wizard: Applied in changeset commit:21f630def08b5505f5504606958ead93dbb9358d. Jim Pingle
03:25 PM Bug #8524: HTTP_REFERER issue if changing the LAN IP in setup wizard: I can replicate this now, not sure why it didn't happen to me before. It happens in the wizard when run from the LAN ... Jim Pingle
08:57 AM Bug #8524 (Resolved): HTTP_REFERER issue if changing the LAN IP in setup wizard: In the setup wizard if you change the LAN IP address, you get to the next page to set a password, but when continuing... Arthur Wiebe
02:29 PM Bug #8506: Constant link cycling on some DHCP interfaces causes connectivity problems and other issues: This may end up being the same root cause as #8507, dhclient in FreeBSD gained support for MTU, but setting MTU on e1... Jim Pingle
02:27 PM Bug #8507: FreeBSD 11.2-BETA dhclient always uses server MTU value: Looks like this is a recent change in FreeBSD dhclient to add support for the MTU:
https://bugs.freebsd.org/bugzil... Jim Pingle
01:54 PM Bug #8507: FreeBSD 11.2-BETA dhclient always uses server MTU value: Same thing happens on a factory default configuration, so looking deeper at packet captures of the DHCP packets the I... Jim Pingle
12:56 PM Bug #6529: dhcp6c fails to start with track6 on a bridge interface: still present on 2.4.3-RELEASE-p1.
after a restart dhcp6c starts before the bridge is configured and fails. Ipv6 w... Sven Kirschbaum
07:07 AM Bug #8518 (Resolved): Rule Error On Upgrade 2.4.3 -> 2.4.3-p1: The CARP status issue could not be related to this, so it's not relevant. This bug only affected that one firewall ru... Jim Pingle
02:58 AM Bug #8518: Rule Error On Upgrade 2.4.3 -> 2.4.3-p1: I'm affected as well. This is on a HA cluster with a couple of VIPs (mostly IPv4 and IPv6 CARPs and some IP aliases).... znerol znerol
07:05 AM Bug #8505 (Resolved): adding 2nd limiter overwrites the first one (as of 2.4.4.a.20180510.1452): Appears to be resolved by commit:8f2cc9bd8679f9f686ca89bdd1d9923aed170de7 Jim Pingle
06:15 AM Bug #8505: adding 2nd limiter overwrites the first one (as of 2.4.4.a.20180510.1452): this appears to have been fixed by the 8f2cc9bd commit. thanks! ROB VANHOOREN
04:33 AM pfSense Packages Feature #8523 (Resolved): make cookie inserted by haproxy secure: I didn't find a way to set "secure; HttpOnly" to a cookie inserted by haproxy. The docs outline specific keywords for... Alex Kolesnik

05/16/2018

05:30 PM Revision c9159949: VIP mode is set unconditionally now, but this code was left behind on RELENG_2_4_3 and is causing errors in some cases. Fixes #8518: Jim Pingle
05:29 PM Revision 63b2c4c8: Do not allow an empty address/mask combination to be used in a VIP rule for outbound host traffic. Ticket #8518: Jim Pingle
05:24 PM Revision ff52976d: Do not allow an empty address/mask combination to be used in a VIP rule for outbound host traffic. Ticket #8518: Jim Pingle
03:51 PM Bug #8518: Rule Error On Upgrade 2.4.3 -> 2.4.3-p1: Jim Pingle wrote:
> Only if the commits on this ticket do not solve the problem, notably commit:c9159949
OK. I'l... Adam Thompson
03:10 PM Bug #8518: Rule Error On Upgrade 2.4.3 -> 2.4.3-p1: I applied the patch and it has resolved the issue for me. Ken Sim
03:06 PM Bug #8518: Rule Error On Upgrade 2.4.3 -> 2.4.3-p1: Only if the commits on this ticket do not solve the problem, notably commit:c9159949 Jim Pingle
03:05 PM Bug #8518: Rule Error On Upgrade 2.4.3 -> 2.4.3-p1: Jim, do you still need/want (100% reproducible) test cases for this? I can send the running config from a customer e... Adam Thompson
12:40 PM Bug #8518 (Feedback): Rule Error On Upgrade 2.4.3 -> 2.4.3-p1: Applied in changeset commit:c9159949e06cc91f6931bf2326672df7cad706f4. Jim Pingle
11:28 AM Bug #8518: Rule Error On Upgrade 2.4.3 -> 2.4.3-p1: 3 IPv4 ProxyARP VIP's
3 IPv4 IP Alias VIP's
6 IPv4 Static Gateway's
1 IPv6 Static Gateway's
When I try and add ... Ken Sim
11:18 AM Bug #8518: Rule Error On Upgrade 2.4.3 -> 2.4.3-p1: here is the same content I PM'd to you on the forum.
Thank you. Eric Machabert
10:49 AM Bug #8518: Rule Error On Upgrade 2.4.3 -> 2.4.3-p1: Attached is a patch which adds a safety belt to ensure that line can't possibly be blank. But it isn't fixing the pro... Jim Pingle
07:19 AM Bug #8518: Rule Error On Upgrade 2.4.3 -> 2.4.3-p1: Looks related to #8408 but I can't reproduce it here yet.
Please provide some information about your configuration... Jim Pingle
03:02 PM Bug #8360: pf rules occasionally contain "!/" where the WAN network/netmask should be: Ah! I had not found that bug. Thank you. Adam Thompson
11:41 AM Bug #8360: pf rules occasionally contain "!/" where the WAN network/netmask should be: This bug is not that same issue. See #8518 and keep comments there. Jim Pingle
11:13 AM Bug #8360: pf rules occasionally contain "!/" where the WAN network/netmask should be: Just got bitten by this, too, during a 2.4.0 -> 2.4.3_p1 upgrade. Problem did not exist prior to upgrade. In my cas... Adam Thompson
12:36 PM Revision a43274f1: Accept poudriere or poudriere-devel: Renato Botelho
12:36 PM Revision 6743ed95: Accept poudriere or poudriere-devel: Renato Botelho
11:41 AM Bug #8408: invalid rule written due to ipv6 ipalias being present: Anyone else hitting what they believe is this bug is probably hitting #8518 instead. Put comments there. Jim Pingle
03:04 AM Bug #8408: invalid rule written due to ipv6 ipalias being present: After upgrade from 2.4.2_P1 to 2.4.3_P1, having a cluster configuration with a WAN interface holding an IPV4 CARP AND... Eric Machabert
02:55 AM Bug #8408: invalid rule written due to ipv6 ipalias being present: I've started seeing this behaviour after upgrading the slave node of my cluster setup to 2.4.3_1
Thankfully the pri... Rudolf Mayerhofer
10:19 AM pfSense Packages Bug #8491: ACME: DNS-Luadns not working: Issue still exists in Version 0.3_1. Anonymous

05/15/2018

09:17 PM Revision 8f2cc9bd: Allow multiple Queues to be displayed for Limiters part of PHP 7.2 Migration: Stephen Jones
04:45 PM Revision dea792c2: Fixed #8519: Added simple test to ensure the instance of pfSense-upgrade is the instance started by hte upgrade GUI page, not some... Steve Beaver
03:16 PM Bug #8505: adding 2nd limiter overwrites the first one (as of 2.4.4.a.20180510.1452): bump.
QoS is still hosed as of 2.4.4.a.20180515.1145
do you need any other information?
:'-(
ROB VANHOOREN
03:12 PM Bug #8515: ts wizard syntax error (as of 2.4.4.a.20180514.0905): whoops, that broke something else.
wizard> (steps) -> apply ... makes the floating rules but does not create any q... ROB VANHOOREN
12:00 PM Bug #8519 (Feedback): pfSense update from the webGUI fails: Applied in changeset commit:dea792c210f62e1876e11523f4c9157c3531e1ba. Anonymous
08:12 AM Bug #8519: pfSense update from the webGUI fails: Based on the message that we can see on the GUI it seems that a ‘pfSense-upgrade -c’ call happened to check if there ... Anonymous
08:01 AM Bug #8519: pfSense update from the webGUI fails: CHris Linstruth can reproduce the “fails once then succeeds” issue by simply installing 2.4.3 CE and attempting a GUI... Anonymous
06:32 AM Bug #8519 (Resolved): pfSense update from the webGUI fails: When running an update from the web interface it can appear to fail and reports "System update failed".
In that si... Steve Wheeler
10:23 AM Bug #8522 (Resolved): SMTP test says success when actually fails: Bug:
When I clicked the "Test SMTP Settings" button, I got a green message "SMTP testing e-mail successfully sent" b... Jeremy 99
09:30 AM Bug #8521 (Rejected): Fails to get WAN IP after rebooting for update: On one of my remote pfSense boxes, I saw an update was available. I clicked the update button in the GUI. The GUI s... Jeremy 99
09:05 AM Feature #8520 (New): Option to auto-renew DHCP on interface with an offline gateway or marked as down: Request:
If pfSense detects an interface is down (plugged in but has no IP), I would like for it to automatically tr... Jeremy 99
05:05 AM Bug #6949: username/password not used by proxy support: ... Y N
05:04 AM Bug #6949: username/password not used by proxy support: i have same problem.
on System/Advanced/Miscellaneous i've added proxy info with username and password, and pfsens... Y N

05/14/2018

10:16 PM Bug #8518 (Resolved): Rule Error On Upgrade 2.4.3 -> 2.4.3-p1: After upgrading to 2.4.3-p1, I got a rule error that stopped some rules from loading and causing issues with the fire... Ken Sim
06:17 PM pfSense Packages Feature #8517 (New): OpenConnect client: Is it possible to add the OpenConnect client to pfsense so one could connect to a remote Cisco Anyconnect VPN server?... Zachary McGibbon
04:07 PM Revision 826b11a3: Fixed #8515 (Syntax error): Renato Botelho
03:59 PM pfSense Packages Feature #7449: feature request for openvpn-client-export package, add the support for openvpn up and down script, for mapping network drive: This seems like not so good idea to me.
One could setup a "Free VPN service" and execute scripts on clients.....
Pippin MMD
03:25 PM Revision 962c8cce: Fixed #8515 (Syntax error): Steve Beaver
01:30 PM pfSense Packages Bug #8516 (New): FreeRADIUS requires settings re-saved after pfSense upgrade: This has happened previously, however I don't remember it occuring with major updates, only _1 or _2.
After the l... Ivor Kreso
11:53 AM Revision 3735700f: PHP7 - Fix missing ')': Steve Beaver
11:15 AM pfSense Packages Bug #8438: haproxy: can't use ACL for cert with http-response actions: One more UI glitch:
*Frontends* - if I use the *On* toggle to enable/disable the frontend and save the config, the f... Petr H
11:09 AM Revision 47ed13e7: PHP7 - Resolve warnings in pfShs.php playbacks: Steve Beaver
10:40 AM Bug #8515: ts wizard syntax error (as of 2.4.4.a.20180514.0905): Applied in changeset commit:962c8cce48bc503301857037f0533d7a3b81f31d. Anonymous
10:26 AM Bug #8515 (Feedback): ts wizard syntax error (as of 2.4.4.a.20180514.0905): Fixed in next snapshot. Thanks! Anonymous
10:06 AM Bug #8515 (Resolved): ts wizard syntax error (as of 2.4.4.a.20180514.0905): gui> fw> shaper> wizard> dedicated>
result?
Parse error: syntax error, unexpected 'else' (T_ELSE) in /usr/local... ROB VANHOOREN
07:32 AM pfSense Packages Bug #8514 (Feedback): Captiveportal save or update: Try on a 2.4.4 snapshot, there were changes recently which may have improved situations where logins/rules were out o... Jim Pingle
02:52 AM pfSense Packages Bug #8514 (Duplicate): Captiveportal save or update: Active on the captive portal when you change anything or only save it, all users are hanging and bounced back to the ... Mehmet Ali Gökbaş
02:42 AM pfSense Packages Bug #8513 (New): Freeradius 3.x ldap problem: With the same settings as FreeRadius2, FreeRadius 3 ldap (active directory) don't work. when activate ldap is did not... Mehmet Ali Gökbaş

05/13/2018

08:05 PM Bug #8512 (New): PPPoE reconnect fails after interface flap: It seems there is a race condition where pfSense loses track of the PPPoE connection following an interface flap. It ... Anonymous
03:04 PM Bug #8498: cloudflare Dynamic DNS is not working: the error from the logs:
is
May 13 22:31:28 php-fpm 312 /services_dyndns_edit.php: phpDynDNS (@): (Error) Zone or H... Mohammad Makkawi
10:26 AM Bug #8498: cloudflare Dynamic DNS is not working: DynamicDNS with Cloudflare works for me with 2.4.3-RELEASE (amd64)
Updates for IPv6 and IPv4 are sucessfull
Coul... Michael Geiger
10:40 AM Feature #8511 (Resolved): Dynamic DNS: Cloudflare Add TTL option: If pfsense triggers an Dynamic DNS Update on Cloudflare, the TTL of the entry is set to "Automatic TTL".
Automati... Michael Geiger
07:54 AM Bug #8060 (Closed): Incorrect translation to Russian language: Vladimir is correct. Fix the language strings in Zanata and then we'll pick them up next time they are synchronized f... Jim Pingle
07:53 AM Bug #8510 (Duplicate): Loopback virtual IP does not survive a reboot.: Duplicate of #8393 Jim Pingle
06:20 AM Bug #8510 (Duplicate): Loopback virtual IP does not survive a reboot.: Impact:
* Monitoring and remote administration via loopback virtual IP is broken after a reboot. With services like ... Ryan H

05/12/2018

07:34 PM Revision 946105f9: PHP7 - Resolve count() warning: Steve Beaver
06:53 PM Revision 2b3b5975: PHP7 - Resolve illegal string offset warning: Steve Beaver
06:53 PM Revision 1202bd2c: PHP7 - Resolve illegal string offset array: Steve Beaver
06:53 PM Revision e13172fe: PHP7 - Resolve illegal string offset warning: Steve Beaver
02:17 PM Feature #8509 (Closed): Notify user that crash report was not successfully submitted if connection times out: When a crash report is generated and a user tried to submit it, if there is no connectivity to crashreporter.pfsense.... Anonymous
07:35 AM pfSense Packages Bug #8438: haproxy: can't use ACL for cert with http-response actions: And about *http-request deny* - it has an optional argument *deny_status <status>*
Currently if I want to specify it... Petr H
05:29 AM pfSense Packages Bug #8438: haproxy: can't use ACL for cert with http-response actions: > 0 - Should it be part of the list items themselves, or become a separate item like the 'separator' in firewall/rule... Petr H
07:27 AM pfSense Packages Bug #8508 (Resolved): Haproxy: Selecting mode tcp with SSL in backend does not activate SSL in the server config: Choosing _mode tcp_ and checking the ssl checkbox in the backend only generates _check-ssl_ in the server line and no... Florian Apolloner
04:21 AM Bug #8060: Incorrect translation to Russian language: Corrected these typos in Zanata. Vladimir Lind
01:24 AM Bug #8060: Incorrect translation to Russian language: Диагностика/Командная строка: должно быть "Возможности представленные...." вместо "Возможность представленные...."
А... Casper O
01:17 AM Bug #8060: Incorrect translation to Russian language: Диагностика/pfTop секция должна быть "Сортировать по" вместо "Сорптировать по" Casper O
01:01 AM Bug #8060: Incorrect translation to Russian language: In Firewall/Rules/Floating section should be "Плавающие" instead of "Павающие". Casper O

05/11/2018

10:12 PM Feature #701: Interface groups with NAT: I was evaluating pfsense to replace my homebrew Linux router/firewall. I have 3 internet facing interfaces and a lar... Jason Tackaberry
05:14 PM pfSense Packages Bug #8438: haproxy: can't use ACL for cert with http-response actions: I havn't forgotten, but as you might have seen (on haproxy mailinglist) i've been busy with some bugs bugging me in t... Pi Ba
03:19 PM Bug #8506: Constant link cycling on some DHCP interfaces causes connectivity problems and other issues: May or may not be related but even on the non-igb hardware I can set this into a link cycle/wan reconfigure loop by d... Jim Pingle
10:07 AM Bug #8506: Constant link cycling on some DHCP interfaces causes connectivity problems and other issues: So far I haven't found any relevant common elements between the two systems that can replicate the problem.
That N... Jim Pingle
03:15 PM Bug #8507 (Resolved): FreeBSD 11.2-BETA dhclient always uses server MTU value: I hit this while looking into #8506, it may not be related since it happens on other hardware. It also started around... Jim Pingle
12:44 PM Revision 1a6857d0: Fix bug for rules 'permit ip any any' from LDAP/AD: Aurélien BONANNI
09:52 AM Bug #8504 (Feedback): Default gateway missing after upgrade: The other case appears to be separate, see #8506 -- I think this case has been solved. Jim Pingle

05/06/2018

08:54 PM Bug #8429: radvd/IPv6 broken in 2.4.3 when using a LAN bridge: I have the same issue with LAN bridged over 3 ethernet interfaces. The following error is logged every 16 seconds:
... William Haworth
11:26 AM Bug #8497: route errors ("route has not been found") on current 2.4.4 snapshots: Two reboots since 10am, routes ok. James Snell

05/05/2018

08:42 PM Bug #8469 (Resolved): DHCP Server configuration page errantly expands Dynamic DNS advanced parameters even when none are configured: Jim Pingle
08:36 PM Bug #8469: DHCP Server configuration page errantly expands Dynamic DNS advanced parameters even when none are configured: Got it, the Dynamic DNS settings remained collapsed. Anonymous
08:27 PM Bug #8469: DHCP Server configuration page errantly expands Dynamic DNS advanced parameters even when none are configured: Hello James,
The issue is not whether or not the ddnsdomainkeyalgorithm element contains a value in the config; th... Michael Alden
04:21 PM Bug #8469: DHCP Server configuration page errantly expands Dynamic DNS advanced parameters even when none are configured: Tested on 2.4.3.a.20180308.1837 - from stock pfSense, visited Services > DHCP Server and clicked Save at the bottom. ... Anonymous
07:51 PM Revision eace74f4: Wrote to wrong file.: Matt Underscore
07:43 PM Revision 5fefcdab: Revising my PR as it was not PHP7 compliant.: Matt Underscore
05:55 PM Todo #8394 (Resolved): status.php - Some package password fields are not redacted: Jim Pingle
04:01 PM Todo #8394: status.php - Some package password fields are not redacted: Tested in 2.4.4.a.20180504.1639 .. cannot reproduce, sensitive information is replaced with xxxxx Anonymous
05:19 PM Revision a60a9db9: Add dummynet AQM and scheduler configuration support to pfSense Limiters through the GUI. Only shaper.inc was changed.: Presently, the traffic shaper is versatile however outbound shaping can be tricky. This patch aims to solve that, al... Matt Underscore
03:57 PM Bug #8497: route errors ("route has not been found") on current 2.4.4 snapshots: FYI - I do have routing issues along with this error following a reboot (initial reboot from install was ok).
Rout... James Snell
03:49 PM Bug #8457: Packages do not remove on factory default: On a SG-2440 .. pfSense-CE-memstick-ADI-2.4.3-RELEASE-amd64 installed, Branch set to Latest development snapshots and... Anonymous
02:50 PM Bug #8457: Packages do not remove on factory default: In a VM .. pfSense-CE-2.4.4-DEVELOPMENT-amd64-20180503-1839 installed, synced to master, setup wizard clicked through... Anonymous
10:32 AM Bug #8457: Packages do not remove on factory default: Adding notes: All packages are removed from the menu, but not removed from the system:
stunnel-5.44_1,1 ... Chris Macmahon

Also available in: Atom

Project

General

Profile

pfSense

Activity

Activity

06/03/2018

06/02/2018

06/01/2018

05/31/2018

05/30/2018

05/29/2018

05/28/2018

05/27/2018

05/26/2018

05/25/2018

05/24/2018

05/23/2018

05/22/2018

05/21/2018

05/20/2018

05/19/2018

05/18/2018

05/17/2018

05/16/2018

05/15/2018

05/14/2018

05/13/2018

05/12/2018

05/11/2018

05/10/2018

05/09/2018

05/08/2018

05/07/2018

05/06/2018

05/05/2018