I was using a free shell account when I was trying to compile a wifi adapter driver and they were FreeBSD 8.3 which is why it wouldn't work on pf 2.0.1 but the have upgraded to 9.0 now :-/  I found one with FreeBSD 8.1 and I got the wifi working but access point didn't work so I went and got a TP Link 851 and finished my wireless ap project. You can look for a free shell maybe you get lucky..

@Alan87i: (…) After testing the latest july 7 snap with CP marked as "should be fixed" Captive portal appears too count correctly now. (...) This sounds good - at least for the CP accounting :)

Thanks!

Here is the output of 4 variations: var_dump($config['installedpackages']['miniupnpd']); string(0) "" var_dump(isset($config['installedpackages']['miniupnpd'])); bool(false) var_dump($config['installedpackages']); string(0) "" var_dump(isset($config['installedpackages'])); bool(true) $config['installedpackages'] seems to really be set to the empty string. $config['installedpackages']['miniupnpd'] gets interpreted as $config['installedpackages'][0] - PHP thinks that the string key needs to be a numeric string index in this case and makes it 0. When the string is blank, then each offset returns blank, I can even feed in $config['installedpackages'][999] and it tells me it is a blank string. This behaviour happens when using what you intend to be an array key, but the actual variable is a string. But when you check with isset, it really looks at the string keys you supply and realises that you must mean that these should be array keys, not string offsets. So it returns true or false based on the existence of the array entries. Just for fun, PHP does not think any of these are arrays: var_dump(is_array($config['installedpackages']['miniupnpd'])); bool(false) var_dump(is_array($config['installedpackages'])); bool(false) You could also test with is_array($config['installedpackages']['miniupnpd']) - because the following code is only to be executed if this is an array.

Ok, the latest version of pfSense and packages seems to have cured this problem. Great!

Techinically speaking it is not needed its just there from laziness of not including it. It normally is present as a hidden input and also each zone has its own dedicated port number. Can you provide screenshots and where in the login process this happens to see if i can remove it?

@louis-m: Was playing with this a bit further and it appears that if you enter the portal name in UPPERCASE, pfsense reports it as not started in services even though it is. Once I changed the portal name to LOWERCASE everything appears OK. I created another portal to confirm this and the same happened. There's one more patch that has to be pulled afterwards that should be fixed.

Zabbix agent and proxy should be OK now, once the package repo picks up the new versions (should show a new version if you already have it installed).

@dhatz: Which country are you in ? And does anyone have some idea how widespread this -bad- practice actually is ? We work with companies in over 30 countries on 6 continents, and I've never heard of anywhere that actually does this in the past decade outside of this thread. His IP is in the Philippines.

I noticed that the buttons on the main screen didn't work, but once the AV database downloaded, I just went to the Settings tab and pressed Save and it started up.

I thought I saw some more code committed, so updated to: 2.1-BETA0 (i386) built on Tue Jul 3 17:55:06 EDT 2012 FreeBSD 8.3-RELEASE-p3 Made an OPT1first gateway group, with OPT1 as tier1, WAN as tier2. Configured the OpenVPN client for interface OPT1first. Client connects out OPT1. Then before I tried any failover testing, the ISP on OPT1 went down - very convenient, it's not every day that you thank your ISP for a failure. OPT1 status was down. But the OpenVPN client did not move over to WAN. It seemed to remain stuck trying to escape out OPT1. So I guess there is not enough code there just yet to support this, or it needs tweaking.

Known issue: http://redmine.pfsense.org/issues/2506

On review of the screenshot it appears that the limiter is not assigning a bucket for IPv6 traffic denoted by "BKT 0". Additionally it appears that the limiter is not identifying the source/destination of IPv6 traffic properly as denoted by "::/0" for source and destination for each connection. IPv4 traffic has "0.0.0.0/0" for either source or destination and an IPv4 address for the other.

This worked, thanks for the tip!

This still isn't working. This is what my syslog has to say, after I re-save the WAN interface setting to acquire the IPv6 address through DHCP: Jul 2 12:18:56 dhcp6c[14797]: check_exit: exiting Jul 2 12:18:56 check_reload_status: Syncing firewall Jul 2 12:19:36 php: /interfaces.php: Calling interface down for interface wan, destroy is Jul 2 12:19:39 php: /interfaces.php: Deny router advertisements for interface wan Jul 2 12:19:39 php: /interfaces.php: Accept router advertisements on interface lagg0 Jul 2 12:19:39 check_reload_status: Reloading filter Jul 2 12:19:42 dhcp6c[1363]: dhcp6_ctl_authinit: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory Jul 2 12:19:42 dhcp6c[1363]: dhcp6_ctl_authinit: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory Jul 2 12:19:42 dhcp6c[1363]: client6_init: failed initialize control message authentication Jul 2 12:19:42 dhcp6c[1363]: client6_init: failed initialize control message authentication Jul 2 12:19:42 dhcp6c[1363]: client6_init: skip opening control port Jul 2 12:19:42 dhcp6c[1363]: client6_init: skip opening control port Jul 2 12:19:42 dhcp6c[1639]: client6_recvadvert: advertise contains NoAddrsAvail status Jul 2 12:19:43 php: /interfaces.php: Found IPv6 default gateway 'fe80::290:bff:fe1a:a6ac' by RA. Jul 2 12:19:43 php: /interfaces.php: ROUTING: setting default route to 123.45.67.89 Jul 2 12:19:43 php: /interfaces.php: ROUTING: setting IPv6 default route to fe80::290:bff:fe1a:a6ac%lagg0 Jul 2 12:19:43 dhcp6c[1639]: client6_recvadvert: advertise contains NoAddrsAvail status Jul 2 12:19:45 dhcp6c[1639]: client6_recvadvert: advertise contains NoAddrsAvail status Jul 2 12:19:46 check_reload_status: updating dyndns wan Jul 2 12:19:49 check_reload_status: Reloading filter Jul 2 12:19:49 php: /interfaces.php: Creating rrd update script Jul 2 12:19:50 dhcp6c[1639]: client6_recvadvert: advertise contains NoAddrsAvail status Jul 2 12:19:59 dhcp6c[1639]: client6_recvadvert: advertise contains NoAddrsAvail status Jul 2 12:20:16 dhcp6c[1639]: client6_recvadvert: advertise contains NoAddrsAvail status Jul 2 12:20:51 dhcp6c[1639]: client6_recvadvert: advertise contains NoAddrsAvail status Jul 2 12:21:59 dhcp6c[1639]: client6_recvadvert: advertise contains NoAddrsAvail status Jul 2 12:22:34 dhcp6c[1639]: check_exit: exiting Jul 2 12:22:34 check_reload_status: Syncing firewall Jul 2 12:22:37 php: /interfaces.php: Calling interface down for interface wan, destroy is Jul 2 12:22:40 php: /interfaces.php: Deny router advertisements for interface wan Jul 2 12:22:40 php: /interfaces.php: Accept router advertisements on interface lagg0 Jul 2 12:22:40 check_reload_status: Reloading filter Jul 2 12:22:43 dhcp6c[29917]: dhcp6_ctl_authinit: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory Jul 2 12:22:43 dhcp6c[29917]: dhcp6_ctl_authinit: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory Jul 2 12:22:43 dhcp6c[29917]: client6_init: failed initialize control message authentication Jul 2 12:22:43 dhcp6c[29917]: client6_init: failed initialize control message authentication Jul 2 12:22:43 dhcp6c[29917]: client6_init: skip opening control port Jul 2 12:22:43 dhcp6c[29917]: client6_init: skip opening control port Jul 2 12:22:44 dhcp6c[30127]: client6_recvadvert: advertise contains NoAddrsAvail status Jul 2 12:22:45 php: /interfaces.php: Found IPv6 default gateway 'fe80::290:bff:fe1a:a6ac' by RA. Jul 2 12:22:45 php: /interfaces.php: ROUTING: setting default route to 123.45.67.89 Jul 2 12:22:45 php: /interfaces.php: ROUTING: setting IPv6 default route to fe80::290:bff:fe1a:a6ac%lagg0 Jul 2 12:22:45 dhcp6c[30127]: client6_recvadvert: advertise contains NoAddrsAvail status Jul 2 12:22:47 dhcp6c[30127]: client6_recvadvert: advertise contains NoAddrsAvail status Jul 2 12:22:48 check_reload_status: updating dyndns wan Jul 2 12:22:51 check_reload_status: Reloading filter Jul 2 12:22:51 php: /interfaces.php: Creating rrd update script Jul 2 12:22:51 dhcp6c[30127]: client6_recvadvert: advertise contains NoAddrsAvail status Jul 2 12:23:00 dhcp6c[30127]: client6_recvadvert: advertise contains NoAddrsAvail status Obviously, the 123.45.67.89 address is just a placeholder here, for the real thing.

Old version is not working for me. Thanks.

@cmb: @Roots0: I believe there are major changes in the config between 1.2.3 and 2.1 True @Roots0: and using a config from 1.2.3 is not recommended for security reasons! Not true. The config will be converted to the new format automatically, if it's restored in full. Partial config restores are only supported on the same version. In that case it just won't work, no security reasons. OP: are you restoring the full config or just part of it? If going to backup/restore and selecting restore all counts as a full restore then yes. I did see another options over in advanced setup, but I don't know what it does. Th only problem is that every time I restore it in my VM, it caused a kernel panic on the host machine. I don't know if it's because of virtio or what, so it could be the config never fully uploads. I like 2.1, it has alot of things I need, captive portal zones, virtio support, auto update, actual 1:1 mapping for public to private addresses. An improvement over the workaround of using virtual ip proxy arp setup.

When I use Dynamic DNS client Service type for Custom,it is can't auto update. I am use Update URL  http://192.168.101.6/ddns?ip=%IP%&ttl=1200