Subcategories

  • Discussions about development snapshots for pfSense Plus 25.07

    61 Topics
    872 Posts
    luckman212L

    adding here from https://redmine.pfsense.org/issues/16331 for more discussion and eyes:

    On my home 6100 that I factory erased and formatted with a fresh 25.07RC via Netgate installer (25.07.r.20250715.1733) I am having a bad situation occur where the default route (0.0.0.0/0) gets removed if the link drops (no carrier) on my WAN. This includes during operation, or at boot-time. The default route is not replaced by anything, thus breaking just about everything.

    I thought it might have been because I have a S2S Wireguard tunnel that uses Policy Based Routing and has a Peer with "Allowed IPs" set to 0.0.0.0/0 but I tried disabling that peer and the behavior continued. I have tried rebooting a few times to be sure this wasn't a one-off.

    If I manually go to System > Routing and choose a specific V4 gateway (my Tier2) then things start to work again.

    Similarly, if I ssh in and type

    route add default <ip_of_my_tier2_gw>

    That gets things working temporarily as well.

    My setup is:

    FIOS via a 10Gtek SFP+ adapter on ix0 as Tier1 (DHCP+DHCP6) a Teltonika RUTX11 as my Tier2 WAN on ix2 (RJ45) LAN on ix1 (another SFP+ to a Unifi 10G switch)

    Packages installed currently are:

    acme arping aws-wizard Backup Cron Filer iperf ipsec-profile-wizard mDNS-Bridge Netgate_Firmware_Upgrade Nexus pfBlockerNG Shellcmd softflowd sudo System_Patches Tailscale WireGuard

    I have a couple of status_output.tgz debug archives collected before and immediately after a reboot. Happy to send those off to whoever @netgate to help troubleshoot this, or any other sort of troubleshooting. I'm surprised nobody else has hit this during the beta testing.

  • Img files generated, but no iso

    10
    0 Votes
    10 Posts
    3k Views
    Z

    Since I do not use any display managers like gdm/kdm/xdm etc., that is not in my case. I directly boot into xserver using startx command. No display managers are active. I use i3 as desktop environment (i3-wm.org) with free OSes, fyi.

  • Build 2.1-DEVELOPMENT + RELENG_8_3

    23
    0 Votes
    23 Posts
    11k Views
    Z

    UPDATE: Running './build_pfPorts.sh b43-fwcutter' solved the problem. However this ./build_iso.sh failed to build iso (just memstick images were built) and the memstick image has the same kernel panic as stated in my above posts. :-( )

    Now, I am getting the following error during ./build_pfPorts.sh

    File not found b43-fwcutter /usr/ports/sysutils/b43-fwcutter /usr/local/bin/b43-fwcutter - /usr/local/bin/b43-fwcutter
    Building athstats…main.c: In function 'getfmt':
    main.c:73: warning: implicit declaration of function 'strcasecmp'
    Done!
    Building tools/crytpo...Done!

    I checked with whether b43-fwcutter is available and it is there:

    dev# ls -lah /usr/ports/sysutils/b43-fwcutter/
    total 32
    drwxr-xr-x    3 root  wheel  512B Aug 22 19:01 .
    drwxr-xr-x  1078 root  wheel    21k Aug 22 19:04 ..
    -rw-r–r--    1 root  wheel  428B Aug 22 19:01 Makefile
    -rw-r--r--    1 root  wheel  141B Aug 22 19:01 distinfo
    drwxr-xr-x    2 root  wheel  512B Aug 22 19:01 files
    -rw-r--r--    1 root  wheel  113B Aug 22 19:01 pkg-descr

    Did anyone encouter something like this?

  • Set Version

    2
    0 Votes
    2 Posts
    1k Views
    jimpJ

    It cleans up old remnants of patches (e.g. .orig, .rej files) and similar things.

    You can build an iso right after, though I normally run this first:

    ./update_git_repos.sh && ./clean_build.sh && ./apply_kernel_patches.sh
  • Building (only) a custom kernel for pfsense for 2.1 …

    5
    0 Votes
    5 Posts
    2k Views
    jimpJ

    It is safest to make a stock image first, test it, and make sure you have everything working. Then make changes. Otherwise you don't know if something went wrong because of your changes, or because of the builder in general.

    There was just a recent thread where I explained the various ways to tweak the kernel options (e.g. EXTRA_OPTIONS in pfsense-build.conf) and I updated the doc here:
    http://devwiki.pfsense.org/BuildTimeOptions

    What you want to do can be accomplished by just adding one line to your pfsense-build.conf once you have made a good ISO.

    I mentioned the path to the resulting kernels in a previous post in this thread already.

  • Obtaining FreeBSD sources….

    2
    0 Votes
    2 Posts
    1k Views
    jimpJ

    RELENG_8_3 is an errata branch, which can get updates from time to time. It must always check to make sure they are completely current and stock before starting. So it doesn't matter if you already have them, it will still check for updates and revert any local alterations to that tree before it starts so it's back to a stock FreeBSD base, ready for our patches to apply.

  • Custome ISO with pre-installed packages

    6
    0 Votes
    6 Posts
    2k Views
    jimpJ

    No. I wouldn't expect a fix until closer to 2.2, if then.

  • Why freebsd 8.3?

    5
    0 Votes
    5 Posts
    3k Views
    jimpJ

    Build? Maybe. Work? Probably not.

    The work on 9.x was abandoned. Even if it built, the patches would be old/out of date, mostly left in case we decided to pick it up again.

    The work on 10.x is still in progress. I don't believe it builds/works yet. That probably won't be good/stable until a lot farther into the 2.2 development cycle.

  • Build log end message

    6
    0 Votes
    6 Posts
    3k Views
    jimpJ

    The code is updated from git on every builder run, nothing to manually do there.

    Not sure why they weren't showing before as the code was there/in place… shrug

    It works now, not going to worry about it. :-)

  • Builder_Profiles, Are they applicable to v 2.1?

    2
    0 Votes
    2 Posts
    1k Views
    jimpJ

    They haven't been touched by anyone in a long time, they likely do not work with 2.1

  • Atheros wireless driver in pfsense 2.1

    17
    0 Votes
    17 Posts
    18k Views
    Z

    @DigitalSpirit:

    Atheros driver from freebsd 9.0 compiles and works on pfsense
    But in kernels that I maked has been broken pfctl
    and full image creation stops on php

    I am having the same problem with image creation halting at php (http://forum.pfsense.org/index.php/topic,61074.msg354170.html#msg354170).

    Can you tell me how did you overcome the problem? I am asking because you reported above that you could finally create the NanoBSD images. Thanks!

  • Configuration portability

    4
    0 Votes
    4 Posts
    2k Views
    K

    @mikeisfly:

    I'm assuming I could take a full backup file and edit it to my needs and restore that without corrupting the whole system right? Assuming I don't make any mistakes.

    That's the only way it can reasonably work. What you want is the separation of Interface Assignments (e.g. LAN is em0, WAN is em1) and "the rest". So you can prepare a new box with Interface Assignments (e.g. LAN: ra0, WAN: ra1) and pull all the additional information from an Interface-Assigment-less configuration file.

    Well, it should work in such a simple case. But what about VLANs? Ouch. An automated decision which VLANs to keep and which to ignore would be quite complex, if not immpossible.

    The only safe way is to manually edit the configuration file with a text editor before restoring it on the target machine. It's quite simple, in most cases. In some more complex cases, I did a partial pre-configuration of the target machine and then manually merged the config fiels from the old and the new machine.

  • Helper Script

    5
    0 Votes
    5 Posts
    2k Views
    B

    Okay thanks. I will try this.

  • Question concerning package development (OpenJDK and MongoDB)

    12
    0 Votes
    12 Posts
    6k Views
    cmcdonaldC

    So I'm trying to get back into this. I have been doing quite a bit of research into jails. I think running the controller in a jail is absolutely imperative for a few reasons: 1) It keeps the system has "vanilla" as possible (easy to install/uninstall without touching the underlying system). 2) It isolates what could potentially be a security threat. So basically, can a pfSense package create a jail and install software into it without having the PfJailctl package installed?

  • How to add a new language ?

    7
    0 Votes
    7 Posts
    8k Views
    D

    The same remark from my own experience of translation - some of the buttons in forms at their translation into another language no longer work. Therefore, in its version of the name translation, I left the fields and buttons in English - and all had to work as it should.

    And I think 100% Gui translation is not needed, because you might lose the meaning of the names of the terms that will worsen the understanding of the end user.

    But it is my opinion only.

  • Ntpd still broke

    1
    0 Votes
    1 Posts
    2k Views
    No one has replied
  • Captive Portal's index.php file

    6
    0 Votes
    6 Posts
    7k Views
    K

    @Lectrician:

    Well, it seems to have cut down on the amount of duplicate entries, but there seems to still be two or three each day, but only single duplicates, not multiple.

    I guess because some users bail out faster than the session data gets written.

    As an additional measure you could check your logfile if the last 1000 bytes or so already contain the currrent user's MAC address (with a timestamp not older than a few minutes). As you perform locking on the file, you'll have not trouble with race conditions, I think.

  • Amazing piece of code…

    6
    0 Votes
    6 Posts
    4k Views
    E

    It was wrong mareclloc :)

  • Backports, Reintegration, Parallel Development…?

    3
    0 Votes
    3 Posts
    1k Views
    K

    Thanks for your answer. So, backporting is the strategy.

    I submitted my changes (as a pull request) to the master branch now as well.

    The repository pfsense-tools, where I had to patch the DSCP kernel patch (for FreeBSD versions 8.3, 9.0, 10.0), appears to be organized a bit differently though.

  • Data Storage Methods used?

    4
    0 Votes
    4 Posts
    2k Views
    C

    Thanks for the info…

  • Tell Me About The Development

    2
    0 Votes
    2 Posts
    2k Views
    jimpJ

    That's a fairly vague question and not one that's easy to answer. Can you be more specific about what exactly you're looking to find out about?

Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.