Commit Graph

25772 Commits

Author SHA1 Message Date
Phil Davis
028ff8f8a3 Fix #4813 validation of enable/disable of gateways and static routes
1) A disabled gateway can always be enabled - no extra validation
needed.
2) When disabling an enabled gateway, check to see that the gateway is
not used in any gateway group or enabled static route (similar tests to
what is already checked before deleting a gateway).
3) A static route can always be disabled - no extra checks needed.
4) When enabling a static route, check that the selected gateway is
enabled - you cannot have a static route enabled on a disabled gateway.
5) Do the address family cross-check between static route and gateway
even when the static route is disabled - we do not want to save
mismatched   IP address families in any case.
This covers all the cases I can see to ensure that the enable/disable
status combinations of Gateways and Static Routes is always valid.
2015-07-05 23:18:04 +05:45
Chris Buechler
5af646023e remove debug.pfftpproxy, it no longer exists. 2015-07-04 01:47:35 -05:00
Chris Buechler
2300307e5f de-activate sync on upgrade where it's enabled now that the root passwd/group problem is fixed. Ticket #4523 2015-07-03 23:11:11 -05:00
Chris Buechler
d44e7dc081 Fix keyid identifers, and go back to using %any in ipsec.secrets as in previous versions, fixing a variety of other ID issues. Latter will break some mobile IPsec circumstances, fix for that to come after more testing. Ticket #4811 2015-07-03 20:06:12 -05:00
Renato Botelho
96f980719c Merge pull request #1736 from phil-davis/patch-1 2015-07-03 15:47:05 -03:00
Phil Davis
6135a11fd9 Fix put static route destination in config change description
When enabling or disabling a route by using the enable/disable button on the Routes page, the destination network was not being put in the config change description, although the code intended it to be there.
This fixes it.
2015-07-04 00:20:29 +05:45
jim-p
9195a83780 Improve handling of port ranges in relayd, fixes #4810 2015-07-01 16:10:28 -04:00
Chris Buechler
9924ebd4af Remove the unnecessary deletion of rc.conf. Add an empty rc.conf with a
note so people don't think they should be using it.
2015-07-01 15:01:28 -05:00
Renato Botelho
45521d7c75 Remove $array_keys references and use $pkg_info. Spotted-by: phil-davis 2015-07-01 14:33:55 -03:00
jim-p
b75cdd94a7 Encode ca/cert descr in system_certmanager.php 2015-07-01 11:36:22 -04:00
jim-p
b741d2ef00 Encode ca/cert descr in system_certmanager.php 2015-07-01 11:32:25 -04:00
jim-p
234cde4b5d Encode ca/cert/crl descr in system_crlmanager.php 2015-07-01 11:27:43 -04:00
jim-p
28bb81784f Encode ca/cert descr in vpn_openvpn_server.php 2015-07-01 11:19:50 -04:00
jim-p
8bcc385b3a Encode ca/cert descr in vpn_openvpn_client.php 2015-07-01 11:17:45 -04:00
jim-p
d6a94eda00 Encode ca/cert descr in vpn_ipsec_phase1.php 2015-07-01 11:15:31 -04:00
jim-p
a14571438d Encode ca/cert descr in system_authservers.php 2015-07-01 11:14:37 -04:00
jim-p
11df032059 Encode ca/cert descr in system_usermanager.php 2015-07-01 11:12:13 -04:00
jim-p
0d45890317 Encode cert/ca descr in system_advanced_admin.php 2015-07-01 11:11:22 -04:00
jim-p
e67c70a3b3 Encode cert/ca descr in services_captiveportal.php 2015-07-01 11:10:06 -04:00
jim-p
636dfa9528 Encode ca/cert info in openvpn_wizard.inc 2015-07-01 11:07:02 -04:00
Renato Botelho
3d3e30b3a5 Modify pkg_mgr.php to deal with pkg 2015-07-01 11:29:13 -03:00
Renato Botelho
29d84dd47e Fix install_package calls and check for failures 2015-07-01 10:58:57 -03:00
Renato Botelho
5e51b5b9be Simplify logic and use correct calls for install_package 2015-07-01 10:58:27 -03:00
Renato Botelho
fad3ad5973 Fix install_package() return for failure 2015-07-01 10:57:26 -03:00
Renato Botelho
6a3380dd99 Remove old and unnecessary code 2015-07-01 10:22:57 -03:00
Renato Botelho
b27ac7863d Stop using undefined variable and create a single package debug file 2015-07-01 10:20:05 -03:00
Renato Botelho
9b1aa8d9a7 Improve debug messages 2015-07-01 10:19:15 -03:00
Renato Botelho
666c49ced7 Fix call to undefined function read_pkg_config 2015-07-01 10:18:46 -03:00
Renato Botelho
0d579b5985 Only try to remove pkg if it's installed, otherwise just cleanup xml part 2015-07-01 10:18:28 -03:00
Renato Botelho
65c94077e4 Implement get_pkg_info() 2015-07-01 10:17:55 -03:00
Renato Botelho
e138258955 Make pkg_delete() more verbose 2015-07-01 10:17:03 -03:00
Renato Botelho
e7553e1bab Remove packages from cache after install, also add debug messages 2015-07-01 10:16:26 -03:00
Renato Botelho
26994952a4 Mute call to 'pkg info -e' used to check if pkg is installed 2015-07-01 10:15:29 -03:00
Renato Botelho
6fd37d0479 Re-implement pkg_call() using proc_open() and stream_select() and also implement pkg_exec() 2015-07-01 10:14:40 -03:00
Renato Botelho
1e8644ca5b pfsense-utils.inc is being required, there is no chance of update_status() and update_output_window() don't exist 2015-07-01 10:09:30 -03:00
Renato Botelho
0e71518672 Make rc.packages deal with fcgicli call 2015-06-30 12:40:41 -03:00
Renato Botelho
f4f884bcb0 Merge pull request #1732 from phil-davis/traffic-graphs-widget 2015-06-29 07:31:33 -03:00
jim-p
a2cbbb7475 Use interface-automatic for Unbound when the interfaces list is empty (same as All) otherwise it breaks with a default CARP config. 2015-06-26 09:45:12 -04:00
Phil Davis
f3ec49e148 Only process Traffic Graph object if it is open
The Traffic Graphs widget puts a graph object for every interface into
the HTML of the widget. Underneath the graph object for every interface
makes the call to graph.php to get data for the graph, and the refresh
interval also keeps happening, which keeps gathering the data every
refresh interval for every interface.
This wastes a lot of CPU back on the pfSense box gathering data
repeatedly if the system has a lot of interfaces and only has the
Traffic Graph enabled for 1 or a few of them. e.g. on my poor little
Alix at home I had setup 6 VLANs to test some stuff, so I had WAN, LAN,
OPT1 and 6 tagged VLANS - 9 interfaces. When I enable the Traffic Graphs
widget on the dashboard, the Alix CPU is driven 100% trying to keep up
with gathering data for 9 interfaces every 10 seconds, even though I
only have 1 graph actually opened!
I couldn't see a way to enable/disable the graph.php object from
executing. So this change puts the object in and out of the HTML:
a) At first display the graph.php object HTML is only put in the
relevant "div" if the graph is actually set to be shown in the config.
b) When a graph is opened by the user, the Java Script puts the
necessary graph.php object HTML into the div. The graph data then starts
being requested...
c) When a graph is minimised by the user, the Java Script removes the
graph.php object HTML from the div. The actions of graph.php stop
happening.
I can see the difference by just watching "top" from the command line on
a low-power system and open/minimizing the graphs on the dashboard.
If there is a better way to enable/disable an object like this I am
happy to learn about it.
2015-06-26 16:40:06 +05:45
Renato Botelho
608f682881 Merge pull request #1717 from phil-davis/traffic-graph-description 2015-06-25 10:22:02 -03:00
Renato Botelho
72e2a4283a Merge pull request #1725 from phil-davis/gateways-widget 2015-06-25 09:39:11 -03:00
Renato Botelho
03e4bd0c14 Merge pull request #1730 from phil-davis/patch-2 2015-06-25 08:48:53 -03:00
Renato Botelho
7d6b8b9bee Merge pull request #1729 from phil-davis/widget-iform 2015-06-25 08:47:56 -03:00
Renato Botelho
aa676b7549 Merge pull request #1719 from N0YB/XHTML_Compliance_Diagnostics_Tables 2015-06-25 08:29:54 -03:00
Phil Davis
90ad3a76ed Display any advanced DHCP server settings
when the page is first displayed.
This has annoyed me a few times and it annoyed me again just now. I had some settings in one of the advanced boxes that were no longer wanted, but when the services_dhcp page is shown the contents of advanced settings are not shown to the user - the user has to click on each advanced button to see if there are any settings already there.
This change displays the settings automatically, if there is something already specified. It works the same way as the Firewall Rules advanced boxes.
2015-06-24 22:45:40 +05:45
Matt Smith
47b09af7b0 Add D1540-XG. 2015-06-23 14:32:07 -05:00
Renato Botelho
ba8c6e376f Introduce Netgate RCC-DFF to the list of known platforms 2015-06-23 15:36:41 -03:00
Renato Botelho
96072f52f6 rereadall is not enough here, restore reload call to make sure everything works. Ticket #4785 2015-06-23 14:31:37 -03:00
Renato Botelho
9edeadc593 Replace ipsec rereadsecrets + reload by single rereadall, that will re-read also cert changes. Ticket #4785 2015-06-23 14:15:42 -03:00
Renato Botelho
dbd43cc24d Instead of sending USR1, just call ipsec reload. And before it, call ipsec rereadsecrets to make sure new secretes are updated. It should fix #4785 2015-06-23 14:12:29 -03:00