Well its not working here (using 1.2.3-RC2 built on Thu Jul 23 17:25:52 EDT 2009) /tmp/igmpproxy.conf(as created by the gui): ##------------------------------------------------------ ## Enable Quickleave mode (Sends Leave instantly) ##------------------------------------------------------ quickleave phyint ng0 upstream ratelimit 0 threshold 1 altnet 239.35.0.0/16 altnet 217.0.119.0/24 altnet 193.158.35.0/24 phyint em0 downstream ratelimit 0 threshold 1 altnet 192.168.0.0/24 rules on wan interface (upstream): [image: 86f21e43007101.gif] rules on lan interface (downstream): [image: 0c3a6f42796697.gif] Advanced Options-> Checkbox is enabled and fields are blank on all rules. Debug output from igmpproxy: # igmpproxy -d -c /tmp/igmpproxy.conf igmpproxy, Version 0.1 beta2, Build 090427 Copyright 2005 by Johnny Egeland <johnny@rlo.org>Distributed under the GNU GENERAL PUBLIC LICENSE, Version 2 - check GPL.txt Debu: Searching for config file at '/tmp/igmpproxy.conf' Debu: Config: Quick leave mode enabled. Debu: Config: Got a phyint token. Debu: Config: IF: Config for interface ng0. Debu: Config: IF: Got upstream token. Debu: Config: IF: Got ratelimit token '0'. Debu: Config: IF: Got threshold token '1'. Debu: Config: IF: Got altnet token 239.35.0.0/16. Debu: Config: IF: Altnet: Parsed altnet to 239.35/16. Debu: Config: IF: Got altnet token 217.0.119.0/24. Debu: Config: IF: Altnet: Parsed altnet to 217.0.119/24. Debu: Config: IF: Got altnet token 193.158.35.0/24. Debu: Config: IF: Altnet: Parsed altnet to 193.158.35/24. Debu: IF name : ng0 Debu: Next ptr : 0 Debu: Ratelimit : 0 Debu: Threshold : 1 Debu: State : 1 Debu: Allowednet ptr : 2820c030 Debu: Config: Got a phyint token. Debu: Config: IF: Config for interface em0. Debu: Config: IF: Got downstream token. Debu: Config: IF: Got ratelimit token '0'. Debu: Config: IF: Got threshold token '1'. Debu: Config: IF: Got altnet token 192.168.0.0/24. Debu: Config: IF: Altnet: Parsed altnet to 192.168.0/24. Debu: IF name : em0 Debu: Next ptr : 0 Debu: Ratelimit : 0 Debu: Threshold : 1 Debu: State : 2 Debu: Allowednet ptr : 2820c060 Debu: Adding Physical Index value of IF 'em0' is 1 Debu: buildIfVc: Interface em0 Addr: 192.168.0.10, Flags: 0xffff8843, Network: 192.168.0/24 Debu: Adding Physical Index value of IF 'lo0' is 8 Debu: buildIfVc: Interface lo0 Addr: 127.0.0.1, Flags: 0xffff8049, Network: 127/8 Debu: Adding Physical Index value of IF 'ng0' is 10 Debu: buildIfVc: Interface ng0 Addr: 79.238.127.78, Flags: 0xffff88d1, Network: 79.238.127.78/32 Debu: Found config for em0 Debu: Found config for ng0 Note: adding VIF, Ix 0 Fl 0x0 IP 0x0a00a8c0 em0, Threshold: 1, Ratelimit: 0 Debu:        Network for [em0] : 192.168.0/24 Debu:        Network for [em0] : 192.168.0/24 Note: adding VIF, Ix 1 Fl 0x0 IP 0x4e7fee4f ng0, Threshold: 1, Ratelimit: 0 Debu:        Network for [ng0] : 79.238.127.78/32 Debu:        Network for [ng0] : 239.35/16 Debu:        Network for [ng0] : 217.0.119/24 Debu:        Network for [ng0] : 193.158.35/24 Debu: Got 262144 byte buffer size in 0 iterations Debu: Joining all-routers group 224.0.0.2 on vif 192.168.0.10 Note: joinMcGroup: 224.0.0.2 on em0 Debu: SENT Membership query  from 192.168.0.10    to 224.0.0.1 Debu: Sent membership query from 192.168.0.10 to 224.0.0.1\. Delay: 10 Debu: Created timeout 1 (#0) - delay 10 secs Debu: (Id:1, Time:10) Debu: Created timeout 2 (#1) - delay 21 secs Debu: (Id:1, Time:10) Debu: (Id:2, Time:21) Debu: Packet from 192.168.0.10: proto: 2 hdrlen: 24 iplen: 8 or 2048 Note: RECV V2 member report  from 192.168.0.10    to 224.0.0.2 (ip_hl 24, data 8) Note: The IGMP message was from myself. Ignoring. Debu: Packet from 192.168.0.10: proto: 2 hdrlen: 20 iplen: 8 or 2048 Note: RECV Membership query  from 192.168.0.10    to 224.0.0.1 (ip_hl 20, data 8) Debu: Packet from 192.168.0.1: proto: 2 hdrlen: 24 iplen: 8 or 2048 Note: RECV V2 member report  from 192.168.0.1    to 239.255.255.250 (ip_hl 24, data 8) Debu: Should insert group 239.255.255.250 (from: 192.168.0.1) to route table. Vif Ix : 0 Debu: No existing route for 239.255.255.250\. Create new. Debu: No routes in table. Insert at beginning. Info: Inserted route table entry for 239.255.255.250 on VIF #0 Debu: Joining group 239.255.255.250 upstream on IF address 79.238.127.78 Note: joinMcGroup: 239.255.255.250 on ng0 Debu: Current routing table (Insert Route); ----------------------------------------------------- Debu: #0: Dst: 239.255.255.250, Age:2, St: I, OutVifs: 0x00000001 Debu: ----------------------------------------------------- Debu: Eliminate compiler warning for field type = 22 Debu: Packet from 79.238.127.78: proto: 2 hdrlen: 24 iplen: 8 or 2048 Note: RECV V2 member report  from 79.238.127.78  to 239.255.255.250 (ip_hl 24, data 8) Note: The IGMP message was from myself. Ignoring. Debu: Packet from 192.168.0.2: proto: 2 hdrlen: 24 iplen: 8 or 2048 Note: RECV V2 member report  from 192.168.0.2    to 239.35.129.11 (ip_hl 24, data 8) Debu: Should insert group 239.35.129.11 (from: 192.168.0.2) to route table. Vif Ix : 0 Debu: No existing route for 239.35.129.11\. Create new. Debu: Found existing routes. Find insert location. Debu: Inserting at beginning, before route 239.255.255.250 Info: Inserted route table entry for 239.35.129.11 on VIF #0 Debu: Joining group 239.35.129.11 upstream on IF address 79.238.127.78 Note: joinMcGroup: 239.35.129.11 on ng0 Debu: Current routing table (Insert Route); ----------------------------------------------------- Debu: #0: Dst: 239.35.129.11, Age:2, St: I, OutVifs: 0x00000001 Debu: #1: Dst: 239.255.255.250, Age:2, St: I, OutVifs: 0x00000001 Debu: ----------------------------------------------------- Debu: Eliminate compiler warning for field type = 22 Debu: Packet from 79.238.127.78: proto: 2 hdrlen: 24 iplen: 8 or 2048 Note: RECV V2 member report  from 79.238.127.78  to 239.35.129.11 (ip_hl 24, data 8) Note: The IGMP message was from myself. Ignoring. Debu: Packet from 192.168.0.2: proto: 2 hdrlen: 24 iplen: 8 or 2048 Note: RECV V2 member report  from 192.168.0.2    to 239.35.129.11 (ip_hl 24, data 8) Debu: Should insert group 239.35.129.11 (from: 192.168.0.2) to route table. Vif Ix : 0 Info: Updated route entry for 239.35.129.11 on VIF #0 Debu: Current routing table (Insert Route); ----------------------------------------------------- Debu: #0: Dst: 239.35.129.11, Age:2, St: I, OutVifs: 0x00000001 Debu: #1: Dst: 239.255.255.250, Age:2, St: I, OutVifs: 0x00000001 Debu: ----------------------------------------------------- Debu: Eliminate compiler warning for field type = 22 Debu: Packet from 192.168.0.2: proto: 2 hdrlen: 24 iplen: 8 or 2048 Note: RECV V2 member report  from 192.168.0.2    to 224.0.0.251 (ip_hl 24, data 8) Debu: Should insert group 224.0.0.251 (from: 192.168.0.2) to route table. Vif Ix : 0 Debu: No existing route for 224.0.0.251\. Create new. Debu: Found existing routes. Find insert location. Debu: Inserting after route 239.255.255.250 Info: Inserted route table entry for 224.0.0.251 on VIF #0 Debu: Joining group 224.0.0.251 upstream on IF address 79.238.127.78 Note: joinMcGroup: 224.0.0.251 on ng0 Debu: Current routing table (Insert Route); ----------------------------------------------------- Debu: #0: Dst: 239.35.129.11, Age:2, St: I, OutVifs: 0x00000001 Debu: #1: Dst: 239.255.255.250, Age:2, St: I, OutVifs: 0x00000001 Debu: #2: Dst: 224.0.0.251, Age:2, St: I, OutVifs: 0x00000001 Debu: ----------------------------------------------------- Debu: Eliminate compiler warning for field type = 22 Debu: Packet from 79.238.127.78: proto: 2 hdrlen: 24 iplen: 8 or 2048 Note: RECV V2 member report  from 79.238.127.78  to 224.0.0.251 (ip_hl 24, data 8) Note: The IGMP message was from myself. Ignoring. Debu: Packet from 79.238.127.78: proto: 2 hdrlen: 24 iplen: 8 or 2048 Note: RECV V2 member report  from 79.238.127.78  to 239.35.129.11 (ip_hl 24, data 8) Note: The IGMP message was from myself. Ignoring. Debu: Packet from 192.168.0.10: proto: 2 hdrlen: 24 iplen: 8 or 2048 Note: RECV V2 member report  from 192.168.0.10    to 224.0.0.2 (ip_hl 24, data 8) Note: The IGMP message was from myself. Ignoring. Debu: Packet from 192.168.0.2: proto: 2 hdrlen: 24 iplen: 8 or 2048 Note: RECV Leave message      from 192.168.0.2    to 224.0.0.2 (ip_hl 24, data 8) Debu: Got leave message from 192.168.0.2 to 239.35.129.11\. Starting last member detection. Debu: Leaving group 239.35.129.11 upstream on IF address 79.238.127.78 Note: leaveMcGroup: 239.35.129.11 on ng0 Debu: SENT Membership query  from 192.168.0.10    to 239.35.129.11 Debu: Sent membership query from 192.168.0.10 to 239.35.129.11\. Delay: 10 Debu: Created timeout 3 (#1) - delay 8 secs Debu: (Id:1, Time:2) Debu: (Id:3, Time:8) Debu: (Id:2, Time:13) Debu: Packet from 192.168.0.2: proto: 2 hdrlen: 24 iplen: 8 or 2048 Note: RECV V2 member report  from 192.168.0.2    to 239.35.140.11 (ip_hl 24, data 8) Debu: Should insert group 239.35.140.11 (from: 192.168.0.2) to route table. Vif Ix : 0 Debu: No existing route for 239.35.140.11\. Create new. Debu: Found existing routes. Find insert location. Debu: Inserting after route 239.35.129.11 Info: Inserted route table entry for 239.35.140.11 on VIF #0 Debu: Joining group 239.35.140.11 upstream on IF address 79.238.127.78 Note: joinMcGroup: 239.35.140.11 on ng0 Debu: Current routing table (Insert Route); ----------------------------------------------------- Debu: #0: Dst: 239.35.129.11, Age:2, St: I, OutVifs: 0x00000001 Debu: #1: Dst: 239.35.140.11, Age:2, St: I, OutVifs: 0x00000001 Debu: #2: Dst: 239.255.255.250, Age:2, St: I, OutVifs: 0x00000001 Debu: #3: Dst: 224.0.0.251, Age:2, St: I, OutVifs: 0x00000001 Debu: ----------------------------------------------------- Debu: Eliminate compiler warning for field type = 22 Debu: Packet from 79.238.127.78: proto: 2 hdrlen: 24 iplen: 8 or 2048 Note: RECV V2 member report  from 79.238.127.78  to 239.35.140.11 (ip_hl 24, data 8) Note: The IGMP message was from myself. Ignoring. Debu: Packet from 192.168.0.2: proto: 2 hdrlen: 24 iplen: 8 or 2048 Note: RECV V2 member report  from 192.168.0.2    to 239.35.140.11 (ip_hl 24, data 8) Debu: Should insert group 239.35.140.11 (from: 192.168.0.2) to route table. Vif Ix : 0 Info: Updated route entry for 239.35.140.11 on VIF #0 Debu: Current routing table (Insert Route); ----------------------------------------------------- Debu: #0: Dst: 239.35.129.11, Age:2, St: I, OutVifs: 0x00000001 Debu: #1: Dst: 239.35.140.11, Age:2, St: I, OutVifs: 0x00000001 Debu: #2: Dst: 239.255.255.250, Age:2, St: I, OutVifs: 0x00000001 Debu: #3: Dst: 224.0.0.251, Age:2, St: I, OutVifs: 0x00000001 Debu: ----------------------------------------------------- Debu: Eliminate compiler warning for field type = 22 Debu: Packet from 79.238.127.78: proto: 2 hdrlen: 24 iplen: 8 or 2048 Note: RECV V2 member report  from 79.238.127.78  to 239.255.255.250 (ip_hl 24, data 8) Note: The IGMP message was from myself. Ignoring. Debu: About to call timeout 1 (#0) Debu: Aging routes in table. Debu: Current routing table (Age active routes); ----------------------------------------------------- Debu: #0: Dst: 239.35.129.11, Age:2, St: I, OutVifs: 0x00000001 Debu: #1: Dst: 239.35.140.11, Age:2, St: I, OutVifs: 0x00000001 Debu: #2: Dst: 239.255.255.250, Age:1, St: I, OutVifs: 0x00000001 Debu: #3: Dst: 224.0.0.251, Age:1, St: I, OutVifs: 0x00000001 Debu: ----------------------------------------------------- Debu: Packet from 79.238.127.78: proto: 2 hdrlen: 24 iplen: 8 or 2048 Note: RECV V2 member report  from 79.238.127.78  to 224.0.0.251 (ip_hl 24, data 8) Note: The IGMP message was from myself. Ignoring. Debu: Packet from 217.0.119.33: proto: 2 hdrlen: 24 iplen: 12 or 3072 Note: RECV Membership query  from 217.0.119.33    to 224.0.0.1 (ip_hl 24, data 12) Debu: Packet from 79.238.127.78: proto: 2 hdrlen: 24 iplen: 8 or 2048 Note: RECV V2 member report  from 79.238.127.78  to 224.0.0.251 (ip_hl 24, data 8) Note: The IGMP message was from myself. Ignoring. Debu: Packet from 79.238.127.78: proto: 2 hdrlen: 24 iplen: 8 or 2048 Note: RECV V2 member report  from 79.238.127.78  to 239.255.255.250 (ip_hl 24, data 8) Note: The IGMP message was from myself. Ignoring. ^CWarn: select() failure; Errno(4): Interrupted system call Note: Got a interupt signal. Exiting. Debu: clean handler called Debu: Removing route entry for 239.35.129.11 Note: Route is not active. No kernel updates done. Debu: Leaving group 239.35.129.11 upstream on IF address 79.238.127.78 Note: leaveMcGroup: 239.35.129.11 on ng0 Warn: MRT_DROP_MEMBERSHIP failed; Errno(49): Can't assign requested address Debu: Removing route entry for 239.35.140.11 Note: Route is not active. No kernel updates done. Debu: Leaving group 239.35.140.11 upstream on IF address 79.238.127.78 Note: leaveMcGroup: 239.35.140.11 on ng0 Debu: Removing route entry for 239.255.255.250 Note: Route is not active. No kernel updates done. Debu: Leaving group 239.255.255.250 upstream on IF address 79.238.127.78 Note: leaveMcGroup: 239.255.255.250 on ng0 Debu: Removing route entry for 224.0.0.251 Note: Route is not active. No kernel updates done. Debu: Leaving group 224.0.0.251 upstream on IF address 79.238.127.78 Note: leaveMcGroup: 224.0.0.251 on ng0 Note: All routes removed. Routing table is empty. Info: Shutdown complete.... #</johnny@rlo.org>

Thanks so much Josh, your help was excellent. I send you a hug from Peru Pfsense is and will be the best firewall

Until you see an "all clear" message it's probably best to just leave them alone and not poke around that server, unless you want to potentially break your router. http://twitter.com/sullrich/status/2697689264

thanx much!

2.0-ALPHA-ALPHA built on Mon Jul 13 14:32:13 EDT 2009 FreeBSD 7.2-RELEASE-p2 Fixed

Should be ok next snap.

Scratch that question  ;D

hey, that's good. :) anyways, keep using the good stuff(pfsense) mate… i chose to read your post coz we are on the same area... have a nice day! ;)

It's still alpha software and heavily under development.  Things will break, things will be flaky.  That's why its alpha, its not for general use, its made available for testing only.

I fixed it. Just some whitespace errors.

Should be fixed now. http://redmine.pfsense.org/issues/show/29

@jjstecchino: Also add require_once('certs.inc'); to /etc/openvpn.inc Otherwise it cannot lookup certification authority. thanks this was a helpful thread - had a crash last night and reinstalling using current snapshot was presenting a problem without certs… is there another file for openvpn? I dont seem to have a /etc/openvpn.inc edited to add: it appears to be broken elsewhere - I was able to add the code above and create the CA and cert... but switching to https left me without a GUI. Resetting the WebConfigurator errors out from /etc/system.inc looking for require_once("certs.inc"); added it to the file and was able to reset, but still no gui