i didn't know running the wizard would fix anything. i tried it and my traffic and packet started working. still no quality graph or system logs. but i did an upgrade to april 3rd and everything works, but it might have just needed the reboot.
although i did get this error on startup and it is the 1st time i have seen it, but everything seems to be working anyway.

Starting syslog…Apr  5 00:15:40  syslogd: /var/log/relayd.log: No such file or directory

As I'm not skilled enough to fix the problem with virtual IP aliases not being reported as interfaces when trying to add a CARP IP, I bypassed to check in the GUI and backend code.

The next problem I ran into, is that CARP addresses on IP alias networks did not startup correctly on boot.

I believe the problem lies in:

/etc/inc/interfaces.inc around line 710

It appears that CARP is being configured before IP alias interfaces on boot.  As a result, CARP is unable to determine the physical interface to attach to.  Reversing the startup order has fixed this specific problem.

@tohil:

hi guys

a bug:

if you change the password of the admin user, via webgui. passwort is changed for http/https login. and this passwort also works for root access via ssh. but is still possible to connect as admin / pfsense with ssh.

passwd admin

Changing local password for admin
New Password:
Retype New Password:
passwd: pam_chauthtok(): error in service module

someone who can rebuild the issue?

yes it is. there's still some problem with the web GUI of 2.0 but i still loved its efficiency and power. ;)

try to SSH, and vi /usr/local/pkg/squid.inc and change cache setting, (and others) for squid. you can search in the forums too on how to do it. it's simply more powerful than just relying on the GUI.

it worked for me.

and more too, search about changing /boot/loader.conf for squid to be much faster.

just my little cents… :)

I am getting this since upgrade to laest build

MAIN GATEWAY  87.198.23x.xxx  87.198.23x.xxx 
Warning, Latency Last success Apr 1 18:44:02 2009

WEB SERVERS GATEWAY 87.198.14x.xxx 87.198.14x.xxx
Online Last success Apr 1 18:44:02 2009

Both gateways are provided via the same dsl connection from my isp. Why would one be showing latency?
What is the significance of this latency and should I be concerned?

Some changes were made last night by sullrich/GeekGod to bring clog back into the mix, but also to make logging a little more generalized, so there may be options for clog and fifolog both in the long run.

It should be back to normal with a snapshot from today, but I haven't tested it yet.

nocer, I can not replicate that issue. They have been working normally for me.

I suspect your databases might be broken. If you have been updating a lot in the timeframe I was working on this it might well have broken your databases.

Yup, problem seems to be sorted after latest build. Getting minimum of 12mbps download on all interfaces now…

Hi
here somes logs from client side using DD-wrt

root@DD-WRT:/etc/init.d# openvpn --config /tmp/openvpn/openvpn.conf Sat Mar 28 19:12:54 2009 OpenVPN 2.0.9 mipsel-unknown-linux [SSL] [LZO] [EPOLL] built on May 24 2008 Sat Mar 28 19:12:54 2009 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA.  OpenVPN 2.0-beta16 and earlier used 5000 as the default port. Sat Mar 28 19:12:55 2009 LZO compression initialized Sat Mar 28 19:12:55 2009 UDPv4 link local: [undef] Sat Mar 28 19:12:55 2009 UDPv4 link remote: 83.x.x.x:1194 Sat Mar 28 19:12:57 2009 [server] Peer Connection Initiated with 83.x.x.x:1194 Sat Mar 28 19:12:58 2009 OpenVPN ROUTE: OpenVPN needs a gateway parameter for a --route option and no default was specified by either --route-gateway or --ifconfig options Sat Mar 28 19:12:58 2009 OpenVPN ROUTE: failed to parse/resolve route for host/network: 192.168.0.1 Sat Mar 28 19:12:58 2009 TUN/TAP device tun0 opened Sat Mar 28 19:12:58 2009 Initialization Sequence Completed Sat Mar 28 19:12:57 2009 [server] Peer Connection Initiated with 83.x.x.x:1194 Sat Mar 28 19:12:58 2009 OpenVPN ROUTE: OpenVPN needs a gateway parameter for a --route option and no default was specified by either --route-gateway or --ifconfig options Sat Mar 28 19:12:58 2009 OpenVPN ROUTE: failed to parse/resolve route for host/network: 192.168.0.1 Sat Mar 28 19:12:58 2009 TUN/TAP device tun0 opened Sat Mar 28 19:12:58 2009 Initialization Sequence Completed

//–- 1.2.3 conf fille----

writepid /var/run/openvpn_server1.pid #user nobody #group nobody daemon keepalive 10 60 ping-timer-rem persist-tun persist-key dev tun proto udp cipher BF-CBC up /etc/rc.filter_configure down /etc/rc.filter_configure server 172.16.1.0 255.255.255.0 client-config-dir /var/etc/openvpn_csc lport 1194 push "dhcp-option DOMAIN 192.168.0.98" push "dhcp-option DNS 192.168.0.98" push "dhcp-option WINS 192.168.0.98" route 192.168.200.0 255.255.255.0 ca /var/etc/openvpn_server1.ca cert /var/etc/openvpn_server1.cert key /var/etc/openvpn_server1.key dh /var/etc/openvpn_server1.dh comp-lzo push "route 192.168.0.0 255.255.255.0"

//–---2.0 conf file ----

dev ovpns1 dev-type tun dev-node /dev/tun1 writepid /var/run/openvpn_server1.pid #user nobody #group nobody daemon keepalive 10 60 ping-timer-rem persist-tun persist-key proto udp cipher BF-CBC up /etc/rc.filter_configure down /etc/rc.filter_configure local 83.x.x.x tls-server ifconfig 10.0.1.1 10.0.1.2 lport 1194 management 127.0.0.1 1194 push "route 192.168.0.1 255.255.255.0" route 192.168.200.1 255.255.255.0 ca /var/etc/openvpn/server1.ca cert /var/etc/openvpn/server1.cert key /var/etc/openvpn/server1.key dh /etc/dh-parameters.1024 comp-lzo

i didn't realize you could go to status.php and get the boot logs even when you're not booting from the hard drive (it seems to save it to the hard drive anyways) so i will post some of what i'm getting because you had asked me for that before

All buffers synced. Copyright (c) 1992-2009 The FreeBSD Project. Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 The Regents of the University of California. All rights reserved. FreeBSD is a registered trademark of The FreeBSD Foundation. FreeBSD 7.1-RELEASE-p4 #0: Thu Mar 26 04:11:38 EDT 2009     sullrich@builder7-HEAD.pfsense.org:/usr/obj.pfSense/usr/pfSensesrc/src/sys/pfSense_SMP.7 Timecounter "i8254" frequency 1193182 Hz quality 0 CPU: Intel(R) Core(TM)2 Duo CPU    E7400  @ 2.80GHz (2800.12-MHz 686-class CPU)   Origin = "GenuineIntel"  Id = 0x1067a  Stepping = 10   Features=0xbfebfbff <fpu,vme,de,pse,tsc,msr,pae,mce,cx8,apic,sep,mtrr,pge,mca,cmov,pat,pse36,clflush,dts,acpi,mmx,fxsr,sse,sse2,ss,htt,tm,pbe>Features2=0x408e39d<sse3,dtes64,mon,ds_cpl,est,tm2,ssse3,cx16,xtpr,pdcm,sse4.1,<b26>>   AMD Features=0x20100000 <nx,lm>AMD Features2=0x1 <lahf>Cores per package: 2 real memory  = 3623550976 (3455 MB) avail memory = 3541700608 (3377 MB) ACPI APIC Table: <080808 APIC1821> FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs cpu0 (BSP): APIC ID:  0 cpu1 (AP): APIC ID:  1 ioapic0 <version 2.0=""> irqs 0-23 on motherboard wlan: mac acl policy registered kbd1 at kbdmux0 cryptosoft0: <software crypto=""> on motherboard acpi0: <080808 RSDT1821> on motherboard acpi0: [ITHREAD] acpi0: Power Button (fixed) acpi0: reservation of ffc00000, 300000 (3) failed acpi0: reservation of fee00000, 1000 (3) failed acpi0: reservation of 0, a0000 (3) failed acpi0: reservation of 100000, d7f00000 (3) failed Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000 acpi_timer0: <24-bit timer at 3.579545MHz> port 0x808-0x80b on acpi0 pcib0: <acpi host-pci="" bridge=""> port 0xcf8-0xcff on acpi0 pci0: <acpi pci="" bus=""> on pcib0 uhci0: <uhci (generic)="" usb="" controller=""> port 0x9400-0x941f irq 16 at device 26.0 on pci0 uhci0: [GIANT-LOCKED] uhci0: [ITHREAD] usb0: <uhci (generic)="" usb="" controller=""> on uhci0 usb0: USB revision 1.0 uhub0: <intel 1="" 9="" uhci="" root="" hub,="" class="" 0,="" rev="" 1.00="" 1.00,="" addr=""> on usb0 uhub0: 2 ports with 2 removable, self powered uhci1: <uhci (generic)="" usb="" controller=""> port 0x9480-0x949f irq 21 at device 26.1 on pci0 uhci1: [GIANT-LOCKED] uhci1: [ITHREAD] usb1: <uhci (generic)="" usb="" controller=""> on uhci1 usb1: USB revision 1.0 uhub1: <intel 1="" 9="" uhci="" root="" hub,="" class="" 0,="" rev="" 1.00="" 1.00,="" addr=""> on usb1 uhub1: 2 ports with 2 removable, self powered uhci2: <uhci (generic)="" usb="" controller=""> port 0x9800-0x981f irq 19 at device 26.2 on pci0 uhci2: [GIANT-LOCKED] uhci2: [ITHREAD] usb2: <uhci (generic)="" usb="" controller=""> on uhci2 usb2: USB revision 1.0 uhub2: <intel 1="" 9="" uhci="" root="" hub,="" class="" 0,="" rev="" 1.00="" 1.00,="" addr=""> on usb2 uhub2: 2 ports with 2 removable, self powered ehci0: <ehci (generic)="" usb="" 2.0="" controller=""> mem 0xfbffec00-0xfbffefff irq 18 at device 26.7 on pci0 ehci0: [GIANT-LOCKED] ehci0: [ITHREAD] usb3: EHCI version 1.0 usb3: companion controllers, 2 ports each: usb0 usb1 usb2 usb3: <ehci (generic)="" usb="" 2.0="" controller=""> on ehci0 usb3: USB revision 2.0 uhub3: <intel 1="" 9="" ehci="" root="" hub,="" class="" 0,="" rev="" 2.00="" 1.00,="" addr=""> on usb3 uhub3: 6 ports with 6 removable, self powered ugen0: <vendor 0="" 2="" 0x0bda="" rtl8187_wireless,="" class="" 0,="" rev="" 2.00="" 1.00,="" addr=""> on uhub3 pcib1: <acpi pci-pci="" bridge=""> irq 17 at device 28.0 on pci0 pci6: <acpi pci="" bus=""> on pcib1 pcib2: <acpi pci-pci="" bridge=""> irq 16 at device 28.1 on pci0 pci5: <acpi pci="" bus=""> on pcib2 pcib3: <acpi pci-pci="" bridge=""> irq 18 at device 28.2 on pci0 pci4: <acpi pci="" bus=""> on pcib3 re0: <realtek 8168="" 8168b="" 8168c="" 8168cp="" 8168d="" 8111b="" 8111c="" 8111cp="" pcie="" gigabit="" ethernet=""> port 0xd800-0xd8ff mem 0xf7eff000-0xf7efffff,0xf7ee0000-0xf7eeffff irq 18 at device 0.0 on pci4 re0: Chip rev. 0x3c000000 re0: MAC rev. 0x00400000 miibus0: <mii bus=""> on re0 rgephy0: <rtl8169s 8110s="" 8211b="" media="" interface=""> PHY 1 on miibus0 rgephy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-FDX, auto re0: Ethernet address: 00:19:66:89:19:99 re0: [FILTER] pcib4: <acpi pci-pci="" bridge=""> irq 19 at device 28.3 on pci0 pci3: <acpi pci="" bus=""> on pcib4 atapci0: <jmicron jmb368="" udma133="" controller=""> port 0xcc00-0xcc07,0xc880-0xc883,0xc800-0xc807,0xc480-0xc483,0xc400-0xc40f irq 19 at device 0.0 on pci3 atapci0: [ITHREAD] ata2: <ata 0="" channel=""> on atapci0 ata2: [ITHREAD] pcib5: <acpi pci-pci="" bridge=""> irq 16 at device 28.5 on pci0 pci2: <acpi pci="" bus=""> on pcib5 re1: <realtek 8168="" 8168b="" 8168c="" 8168cp="" 8168d="" 8111b="" 8111c="" 8111cp="" pcie="" gigabit="" ethernet=""> port 0xb800-0xb8ff mem 0xf7dff000-0xf7dfffff,0xf7de0000-0xf7deffff irq 17 at device 0.0 on pci2 re1: Chip rev. 0x3c000000 re1: MAC rev. 0x00400000 miibus1: <mii bus=""> on re1 rgephy1: <rtl8169s 8110s="" 8211b="" media="" interface=""> PHY 1 on miibus1 rgephy1:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-FDX, auto re1: Ethernet address: 00:19:66:89:19:97 re1: [FILTER] uhci3: <uhci (generic)="" usb="" controller=""> port 0x9880-0x989f irq 23 at device 29.0 on pci0 uhci3: [GIANT-LOCKED] uhci3: [ITHREAD] usb4: <uhci (generic)="" usb="" controller=""> on uhci3 usb4: USB revision 1.0 uhub4: <intel 1="" 9="" uhci="" root="" hub,="" class="" 0,="" rev="" 1.00="" 1.00,="" addr=""> on usb4 uhub4: 2 ports with 2 removable, self powered uhci4: <uhci (generic)="" usb="" controller=""> port 0x9c00-0x9c1f irq 19 at device 29.1 on pci0 uhci4: [GIANT-LOCKED] uhci4: [ITHREAD] usb5: <uhci (generic)="" usb="" controller=""> on uhci4 usb5: USB revision 1.0 uhub5: <intel 1="" 9="" uhci="" root="" hub,="" class="" 0,="" rev="" 1.00="" 1.00,="" addr=""> on usb5 uhub5: 2 ports with 2 removable, self powered uhci5: <uhci (generic)="" usb="" controller=""> port 0xa000-0xa01f irq 18 at device 29.2 on pci0 uhci5: [GIANT-LOCKED] uhci5: [ITHREAD] usb6: <uhci (generic)="" usb="" controller=""> on uhci5 usb6: USB revision 1.0 uhub6: <intel 1="" 9="" uhci="" root="" hub,="" class="" 0,="" rev="" 1.00="" 1.00,="" addr=""> on usb6 uhub6: 2 ports with 2 removable, self powered ehci1: <ehci (generic)="" usb="" 2.0="" controller=""> mem 0xfbfff800-0xfbfffbff irq 23 at device 29.7 on pci0 ehci1: [GIANT-LOCKED] ehci1: [ITHREAD] usb7: EHCI version 1.0 usb7: companion controllers, 2 ports each: usb4 usb5 usb6 usb7: <ehci (generic)="" usb="" 2.0="" controller=""> on ehci1 usb7: USB revision 2.0 uhub7: <intel 1="" 9="" ehci="" root="" hub,="" class="" 0,="" rev="" 2.00="" 1.00,="" addr=""> on usb7 uhub7: 6 ports with 6 removable, self powered pcib6: <acpi pci-pci="" bridge=""> at device 30.0 on pci0 pci1: <acpi pci="" bus=""> on pcib6 ath0: <atheros 5212=""> mem 0xfdce0000-0xfdceffff irq 22 at device 1.0 on pci1 ath0: [ITHREAD] ath0: WARNING: using obsoleted if_watchdog interface ath0: Ethernet address: 00:0f:3d:c1:b3:cd ath0: mac 5.9 phy 4.3 radio 4.6 vgapci0: <vga-compatible display=""> mem 0xfc000000-0xfcffffff,0xd8000000-0xdfffffff irq 23 at device 2.0 on pci1 isab0: <pci-isa bridge=""> at device 31.0 on pci0 isa0: <isa bus=""> on isab0 atapci1: <intel ahci="" controller=""> port 0xa880-0xa887,0xa800-0xa803,0xa480-0xa487,0xa400-0xa403,0xa080-0xa09f mem 0xfbfff000-0xfbfff7ff irq 19 at device 31.2 on pci0 atapci1: [ITHREAD] atapci1: AHCI Version 01.20 controller with 6 ports detected ata3: <ata 0="" channel=""> on atapci1 ata3: [ITHREAD] ata4: <ata 1="" channel=""> on atapci1 ata4: [ITHREAD] ata5: <ata 2="" channel=""> on atapci1 ata5: [ITHREAD] ata6: <ata 3="" channel=""> on atapci1 ata6: [ITHREAD] ata7: <ata 4="" channel=""> on atapci1 ata7: [ITHREAD] ata8: <ata 5="" channel=""> on atapci1 ata8: [ITHREAD] pci0: <serial bus,="" smbus=""> at device 31.3 (no driver attached) acpi_button0: <power button=""> on acpi0 speaker0: <pc speaker=""> port 0x61 on acpi0 atkbdc0: <keyboard controller="" (i8042)=""> port 0x60,0x64 irq 1 on acpi0 atkbd0: <at keyboard=""> irq 1 on atkbdc0 kbd0 at atkbd0 atkbd0: [GIANT-LOCKED] atkbd0: [ITHREAD] sio0: configured irq 4 not in bitmap of probed irqs 0 sio0: port may not be enabled sio0: configured irq 4 not in bitmap of probed irqs 0 sio0: port may not be enabled sio0: <16550A-compatible COM port> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0 sio0: type 16550A sio0: [FILTER] cpu0: <acpi cpu=""> on acpi0 ACPI Warning (tbutils-0243): Incorrect checksum in table [OEMB] -  F4, should be F3 [20070320] est0: <enhanced speedstep="" frequency="" control=""> on cpu0 p4tcc0: <cpu frequency="" thermal="" control=""> on cpu0 cpu1: <acpi cpu=""> on acpi0 est1: <enhanced speedstep="" frequency="" control=""> on cpu1 est: CPU supports Enhanced Speedstep, but is not recognized. est: cpu_vendor GenuineIntel, msr 6164a2306004a23 device_attach: est1 attach returned 6 p4tcc1: <cpu frequency="" thermal="" control=""> on cpu1 pmtimer0 on isa0 ata0 at port 0x1f0-0x1f7,0x3f6 irq 14 on isa0 ata0: [ITHREAD] ata1 at port 0x170-0x177,0x376 irq 15 on isa0 ata1: [ITHREAD] ppc0: parallel port not found. sc0: <system console=""> at flags 0x100 on isa0 sc0: VGA <16 virtual consoles, flags=0x300> sio1: configured irq 3 not in bitmap of probed irqs 0 sio1: port may not be enabled vga0: <generic isa="" vga=""> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0 Timecounters tick every 1.000 msec IPsec: Initialized Security Association Processing. acd0: DVDR <optiarc dvd="" rw="" ad-7220a="" 1.01=""> at ata2-master PIO4 ad12: 76319MB <wdc wd800aajs-00waa0="" 58.01d58=""> at ata6-master SATA300 SMP: AP CPU #1 Launched! GEOM_LABEL: Label for provider acd0 is iso9660/pfSense. Trying to mount root from cd9660:/dev/iso9660/pfSense md0.uzip: 1304 x 65536 blocks Generating MFS /var partition Generating MFS /etc partition Looking for pfi.conf on acd0c done. Looking for pfi.conf on done. Looking for config.xml on done. Generating a MFS /conf partition... done. Generating a MFS /home partition... done.     ___ ___/ f \\ / p \\___/ Sense \\___/  \\     \\___/ Welcome to pfSense 2.0-ALPHA-ALPHA  ... Mounting filesystems... done. Mounting unionfs directories: usr root bin sbin boot conf.default ... done. Creating symlinks... . . . done. Launching PHP init system... done. Initializing... . . . . . . . . . . . . . . . done. Starting device manager (devd)... done. Loading configuration... . . . done. Network interface mismatch -- Running interface assignment option. Valid interfaces are: re0    00:19:66:89:19:99  (down) RealTek 8168/8168B/8168C/8168CP/8168D/8111B/8111C/8111CP PCIe Gigabit Ethernet re1    00:19:66:89:19:97  (down) ath0    00:0f:3d:c1:b3:cd  (down) Do you want to set up VLANs first? If you are not going to use VLANs, or only for optional interfaces, you should say no here and use the webConfigurator to configure VLANs la</wdc></optiarc></generic></system></cpu></enhanced></acpi></cpu></enhanced></acpi></at></keyboard></pc></power></serial></ata></ata></ata></ata></ata></ata></intel></isa></pci-isa></vga-compatible></atheros></acpi></acpi></intel></ehci></ehci></intel></uhci></uhci></intel></uhci></uhci></intel></uhci></uhci></rtl8169s></mii></realtek></acpi></acpi></ata></jmicron></acpi></acpi></rtl8169s></mii></realtek></acpi></acpi></acpi></acpi></acpi></acpi></vendor></intel></ehci></ehci></intel></uhci></uhci></intel></uhci></uhci></intel></uhci></uhci></acpi></acpi></software></version></lahf></nx,lm></sse3,dtes64,mon,ds_cpl,est,tm2,ssse3,cx16,xtpr,pdcm,sse4.1,<b26></fpu,vme,de,pse,tsc,msr,pae,mce,cx8,apic,sep,mtrr,pge,mca,cmov,pat,pse36,clflush,dts,acpi,mmx,fxsr,sse,sse2,ss,htt,tm,pbe>

Thanks again!
I made the upgrade to the March 26th snapshot and do indeed see the field for shared secret.

However, it is still failing and without comprehensive logs (osx client logging stinks, nothing on PFsense yet) its hard to say why.

Anyone have any insight?

Thanks

@billm:

@TechMOGogy:

It may just be me but I don't like the pfSense logo and color scheme on the log on page
I just think that if someone stumbles upon my IP address (which would be blocked but hey you never know) it should not
tell them what it is (ie. pfsense.org)

Just my 2 cents worth
Other wise I am loving 2.0 Alpha Alpha so far

Thanks,

Anything we do could be fingerprinted.  Sure, it "shouts" it out now, but at least it's obvious that it is, instead of pretending that it's secure.  Besides, it's not like you left it with the default username/password combo did you? :)

–Bill

the real security hole is when someone can access your webgui, wich shouldn't.

many security product manufacturer use logos on there webguis. Juniper, Checkpoint, Astaro, and so one, have webguis with a logo.

just allow trustet networks connecting to the webgui. and use https instead of http. this is security enough. just a logo allows you not to hack or to be secure, when no logo is shown.

sorry 'bout that, thanks

What I personally do is take a snapshot using VMWARE of a good stable 2.0 build and then if something messes up with an upgrade I just roll it back to the snapshot.

@janttu:

Hello,

This may not help your problem exactly, but I got my Alix 2D3 succesfully running full version of 2.0-ALPHA 19.3.2009 20:00. I followed the steps mentioned in first response (StarScream) from here: http://blog.pfsense.org/?p=175. The most difficult part was to use vi editor to update the fstab ;)

–
Janne

thanks for your post. ive tried the last snapshot pfSense-2.0-ALPHA-ALPHA-20090322-0610.img and this works without editing the fstab table.

thanks anyway