Commit Graph

13528 Commits

Author SHA1 Message Date
jim-p
b34f5937e0 Fix ix test for 2.2.x, fixes #5923 2016-03-03 14:12:59 -05:00
NOYB
e87f056ebf ICMPv6 Firewall Log Display - Fixes 5933 - RELENG_2_2
ICMPv6 logging was not being displayed in firewall log.
2016-02-27 13:38:18 -08:00
Renato Botelho
eda5cb845f Backport ipsec_dump_mobile() from 2.3 to make it work witn new strongswan port (without stroke_list.c patch) 2016-02-17 20:02:17 -02:00
WilliamHiles
7696b7b642 Fix typo in RCC update 2016-02-17 02:20:02 -06:00
Jeremy Porter
f7c6105b85 add RCC, fix XG-1540 name, ensure serial port is set on RCC 2016-02-15 19:31:49 -06:00
Nick Holloway
e7733965b4 Fix #5890 find disk slices as candidates for loading "config.xml" at boot
In commit 873c1701, the call to "/bin/ls /dev/{$disk}s*" was surrounded
with "escapeshellarg" so the wildcard is not expanded.

Use "glob" to find the slices for a disk instead.
2016-02-14 14:05:31 +00:00
Chris Buechler
efebd867ec Prefer dnsmasq's host overrides when it's enabled. Ticket #5883 2016-02-11 17:52:25 -06:00
jim-p
b76fd2a056 Encode parameters in Limiters and L7 before display. Fixes #5877 2016-02-10 13:29:12 -05:00
jim-p
6a109e3eaf Make RRD lists global, validate graph name using whitelist of known values rather than blacklist of characters, beef up validation and escaping of related values while here. Fixes #5874 for 2.2.x 2016-02-10 12:09:57 -05:00
Chris Buechler
ec0643f7f1 Merge pull request #2575 from davidjwood/RELENG_2_2-ppp-ipv6-new 2016-01-30 04:06:00 -06:00
Renato Botelho
ca052b35b1 Initialize $stop_time inside foreach to make sure it resets to proper value each iteration since it's changed inside loop. Reported on https://github.com/pfsense/pfsense/pull/2487 2016-01-20 15:22:00 -02:00
Renato Botelho
b5b8f1117b Bump version to 2.2.7-DEVELOPMENT 2016-01-19 12:48:08 -02:00
Chris Buechler
fdc515af33 Update URL for dyns to match their current docs. Reported by GP^ on IRC 2016-01-11 16:25:58 -06:00
David Wood
0faf330066 Insert missing close brace 2016-01-06 19:17:49 +00:00
David Wood
20d6e88a88 Attempt to ensure interface_dhcpv6_configure() is called at the most appropriate time
* ppp-ipv6 for PPP type with dhcp6usev4iface (or PPP without dhcp6usev4iface, as dhcp6usev4iface appears to be a no-op on this type of connection)
* rc.newwanip for non-PPP type with dhcp6usev4iface (no change in this commit)
* interface_configure() in all other cases
2016-01-06 09:19:52 +00:00
David Wood
5a640581b6 Stop enabling router advertisements by default 2016-01-06 03:49:42 +00:00
David Wood
a31457d961 Make ppp-ipv6 the only way interface_dhcpv6_configure() is called on PPP connections using PPP as the IPv6 parent interface 2016-01-06 02:38:06 +00:00
David Wood
e68cb72f3e Set temporary bogon (RFC 5737) IPv4 addresses when initialising PPP interfaces during boot to work round mpd5 IPv6CP issue causing random IPv6 interface identifiers
Details at https://forum.pfsense.org/index.php?topic=101967.msg570519#msg570519 .
2016-01-06 02:23:54 +00:00
David Wood
918b19a62c Set temporary bogon (RFC 5737) IPv4 address to work round mpd5 IPv6CP issue causing random IPv6 interface identifier during boot
Details at https://forum.pfsense.org/index.php?topic=101967.msg570519#msg570519 .
2016-01-06 02:23:54 +00:00
David Wood
682d280755 Make ppp-ipv6 the only way interface_dhcpv6_configure() is called on PPP interfaces 2016-01-06 02:23:54 +00:00
jim-p
392796a461 Encode parameters in shaper queues before display. 2015-12-21 15:37:25 -05:00
jim-p
4fa888b46c Encode hostname before printing; remove some related dead code. 2015-12-21 10:15:30 -05:00
Chris Buechler
d59733f55e bump to 2.2.6-RELEASE 2015-12-18 18:27:47 -06:00
Chris Buechler
07917f7df5 Flush zone's tables if its db must be reset to avoid leaving behind any table entries. Ticket #5622 2015-12-17 18:59:08 -06:00
Chris Buechler
7c4b3b2060 Add busytimeout of 60 seconds for CP database access. This matches the default value PHP uses with sqlite 2.x versions (pfSense 2.1.x and earlier) and prevents the issues noted in Ticket #5622 2015-12-17 16:17:59 -06:00
Chris Buechler
1eb6993723 add these three strongswan libs to the obsoletedfiles list. They haven't been included in any releases, but were briefly included in snapshots in mid April 2015. 2015-12-16 23:21:26 -06:00
jim-p
012e80df44 Fix handling of 0-byte files uploaded to the CP file manager. 2015-12-15 15:12:25 -05:00
Renato Botelho
919916d426 Merge pull request #2213 from PiBa-NL/pferrormessage-22 2015-12-14 08:03:07 -02:00
PiBa-NL
55752439f4 fix showing when a error happens parsing pf rules
For example a queue interface speed mismatch could go unnoticed.

backport from 2.3 of #2165
2015-12-12 19:14:52 +01:00
Renato Botelho
c33fd4cc00 Fix typo, gateway entry in config has a field called monitor, not monitorip 2015-12-11 11:06:26 -02:00
Renato Botelho
03fff067bc Merge pull request #2162 from phil-davis/patch-1 2015-12-07 13:24:49 -02:00
Phil Davis
6ae579b560 Redmine #4279 Package reinstall displayed when shutting down before upgrade
Use a different flag file to indicate that a package reinstall is
required after a reboot is done first. This avoids the possibility that
the user navigates in the webGUI during the time while the shutdown is
in progress and is accidentally presented with the reinstall all
packages GUI button.
Early in rc.bootup switch the flag file to use its ordinary name, so
that all subsequent code in boot scripts and webGUI will work as it
already does to handle the package reinstall and notifying the user that
a package reinstall is about to be done or in progress...
2015-12-07 11:14:16 +05:45
Phil Davis
026e2441bb Fix duplicate syslog messages - Redmine #5606 for RELENG_2_2
The generated syslog.conf needs to have the system.log selections combined into a single line in 2 places. The OP on redmine 5606 just showed 1 place in the diff there.
On my system, this gets rid of the duplicated message on login:
php-fpm[11074]: /index.php: Successful login for user 'my.name' from: 10.11.12.13

Note: for some reason old line 848 includes local4.none - but local4.none does not appear in old line 864. What is that about? Is that another different bug?
I did not mess with that, but I noticed that the OPs diff listing did also add in local4.none where it seems to be missing.
2015-12-06 22:58:31 +05:45
jim-p
2bfa7dbfb4 Include ipsec.inc here otherwise the global is undefined when called when restoring a config in the GUI. 2015-12-04 15:39:43 -05:00
Chris Buechler
43180e9c49 Sanitize the session_id/logout_id in captive portal. 2015-12-02 18:22:55 -06:00
Phil Davis
baa4325b0c Backport #5512 RADIUS secret
Another little easy thing to backport just in case.
2015-11-23 21:56:04 +05:45
Renato Botelho
da6e3b6447 Merge pull request #2014 from phil-davis/patch-1 2015-11-19 07:42:37 -02:00
Renato Botelho
fa49ec387e Merge pull request #2069 from jean-m-cyr/RELENG_2_2 2015-11-19 07:26:51 -02:00
Jean Cyr
f6fb637223 Add missing stratum parameter
Add missing stratum parameter  in ntpd.conf when specified on Serial GPS
page.
2015-11-15 22:36:36 -05:00
Phil Davis
f2220c6848 Ticket #5451 for RELENG_2_2
Actually this can be fixed by adding just a space after "from any".
The code here builds up $tmprule and each time it adds a new clause it puts a space at the end, ready for if there is another clause to come. The "from any" here was the only offender in this scheme.
It seems good to me to still backport little easy fixes to RELENG_2_2. That way production users can get them easily if they like (with system patches or...).
2015-11-15 17:00:50 +05:45
Renato Botelho
eb836ace21 Change version to 2.2.6-DEVELOPMENT 2015-11-06 12:41:35 -02:00
Renato Botelho
de0ecc0e07 A new fix for #4130:
The fix added for this bug, that check xml file size is < 200 to decide
if file must or not be read created a new issue, single entry is not
showed.

Instead of doing this, check parse_xml_config() return and return empty
array when it's -1

While here, prevent errors saying parse_xml_config() doesn't exist and
make sure xmlparse.inc is required
2015-11-03 17:54:57 -02:00
Renato Botelho
d6d9144e20 Only call pfSense_ipsec_list_sa() when IPsec is enabled 2015-11-03 16:58:58 -02:00
Chris Buechler
b31b713d68 bump to 2.2.5-RELEASE 2015-11-02 21:01:39 -06:00
Chris Buechler
f2fcc67c9f fix whitespace 2015-11-02 17:37:12 -06:00
Phil Davis
5196767911 Fix firewall log dynamic rule lookup
for rows that are dynamically added as time goes by.
2015-11-02 21:06:48 +05:45
Renato Botelho
2bd69a578a Deprecate strongswan smp components 2015-10-30 16:11:12 -02:00
Renato Botelho
93277f2c87 Remove ipsec_smp_dump_status(), last dependency of strongswan XMP module 2015-10-30 16:03:57 -02:00
jim-p
50de9fa885 Set leftsendcert=always for IKEv2 configurations with certificates to better accommodate OS X and iOS manual configurations. Fixes #5353 2015-10-28 13:49:24 -04:00
Chris Buechler
52005a0642 fix logging config upgrade. Ticket #5340 2015-10-26 15:41:36 -05:00