Renato Botelho
cb7d18d561
Replace php calls to php-cgi, binary is not being renamed anymore
2015-08-20 10:34:37 -03:00
Renato Botelho
df275cbe71
Use new base.mtree installed by upcoming core package
2015-08-17 17:09:35 -03:00
Renato Botelho
c1367bd116
Fix path for pre and post upgrade scripts
2015-08-17 17:05:29 -03:00
Renato Botelho
8f400b8fdd
Move scripts from /tmp -> /usr/local/share/pfSense
2015-08-17 17:05:29 -03:00
jim-p
c4a9f99a8d
Fix GUI auth from RADIUS to grab group names from the Class attribute. Implements #935
...
The RADIUS server must populate the Class attribute with a string, semicolon-separated, of user groups. Similar to LDAP, local groups must exist with matching names, and privileges are determined by the local matching groups.
2015-08-12 12:20:10 -04:00
Renato Botelho
5779ade670
Introduce a new item to $g global, 'product_version' and stop reading /etc/version all around
2015-07-31 10:03:34 -03:00
Renato Botelho
6fed300c6a
Remove FreeBSD repo
2015-07-31 09:41:51 -03:00
Chris Buechler
9d454891c5
fix whitespace
2015-07-30 15:07:39 -05:00
Jared Dillard
aa14a0f43e
Add NUT package help location
2015-07-30 15:02:04 -05:00
Renato Botelho
3e3b15a6eb
Remove WipePackages.php
2015-07-30 12:21:19 -03:00
Renato Botelho
687631c683
Remove bdiff support
2015-07-30 12:21:18 -03:00
Chris Buechler
f688185c9f
remove more old, unused platform stuff
2015-07-30 00:49:07 -05:00
Chris Buechler
c7ea65c25a
Fix killing of individual states for IPv6. Ticket #4906
2015-07-30 00:38:22 -05:00
Chris Buechler
324ce0b913
fix whitespace
2015-07-30 00:28:35 -05:00
Chris Buechler
c5dbb02f91
Use the appropriate source and dest IPs for all state types. Ticket #4907
2015-07-30 00:17:18 -05:00
jim-p
83a05b663a
Add "sockstat" output to status.php
2015-07-29 11:40:38 -04:00
Renato Botelho
31e66b412d
Move cleargpt.sh and cleargmirror.sh scripts to main repo
2015-07-27 17:05:05 -03:00
Chris Buechler
b099481141
Add 'any' option for peer ID, for mobile IPsec scenarios where you can't or don't want to check peer ID.
...
Conflicts:
usr/local/www/vpn_ipsec_phase1.php
2015-07-25 17:00:57 -05:00
Chris Buechler
4d7568404c
Remove "auto", it's just a synonym for IKEv2. Ticket #4873
...
Conflicts:
usr/local/www/vpn_ipsec_phase1.php
2015-07-23 14:47:56 -05:00
Chris Buechler
0dea741f39
include vpn.inc so IPsec CRL reload works. require_once filter.inc in
...
vpn.inc for callers there that haven't already included it.
2015-07-23 14:31:05 -05:00
Chris Buechler
d55f6326c4
Most of the flowtable bits were removed some time ago, take out the last of them too.
2015-07-23 00:34:14 -05:00
Chris Buechler
6141f51ac4
When a CRL is updated, refresh strongswan's CRLs.
2015-07-23 00:21:23 -05:00
Phil Davis
a95acf1210
Add isset check for strictcrlpolicy
...
To be consistent with the checks in the rest of this code.
2015-07-23 06:39:27 +05:45
Chris Buechler
df4de32d34
Add IPsec advanced option for strict CRL checking
2015-07-22 15:03:56 -05:00
Chris Buechler
0be67fe5fe
fix typo
2015-07-22 13:31:41 -05:00
Phil Davis
a607968ab4
Handle IPsec Advanced Settings save before IPsec is enabled
...
If the Advanced Settings are saved before any other IPsec is set up then $config['ipsec'] can be just the empty string. As a result you can get:
a) If you select some debug settings then those are not saved. The code to save those settings was only executed when $config['ipsec'] was already an array. Actually the code already did the necessary "if isset() then unset()" stuuf. So I just took the the "if is_array()" away from the code block.
b) Some potential unset() can go wrong with errors like:
Fatal error: Cannot unset string offsets in /usr/local/www/vpn_ipsec_settings.php on line 168
This is corrected by adding more "if (isset())" checks.
Fixes Redmine #4865
2015-07-22 19:36:09 +05:45
Phil Davis
9cbdb6e3c3
Interfaces widget use more obscure separator
...
when acquiring the interface data. In particular the media information
can have commas in it already as reported in Redmine bug #4859
2015-07-22 09:36:27 +05:45
jim-p
775b46fa4b
Add "netstat -ni" to status.php
2015-07-21 08:48:24 -04:00
jim-p
abad402c6b
Allow pre-filling (but no automatic action) of the download filename on exec.php. Setup a link to download the status output.tgz in status.php
2015-07-21 08:47:59 -04:00
doktornotor
7b2811fb46
Fix caps
2015-07-18 21:59:49 +02:00
doktornotor
4dbd95d451
Bug #4551 - consistent usage of Forwarder/Resolver across the WebGUI
...
Clarify that this applies to DNS Resolver as well. Update the translations template.
2015-07-18 21:44:02 +02:00
doktornotor
896607c3a5
Bug #4551 - consistent usage of Forwarder/Resolver across the WebGUI
...
Clarify that this applies to DNS Resolver as well.
2015-07-18 20:34:43 +02:00
doktornotor
612da35583
Bug #4551 - consistent usage of Forwarder/Resolver across the WebGUI
...
Clarify that this applies to DNS Resolver as well.
2015-07-18 20:32:54 +02:00
Renato Botelho
117948fdaa
Merge pull request #1738 from phil-davis/Static-Routes
2015-07-18 14:36:05 -03:00
Phil Davis
205178aa82
Switch logic of $disabled tests system_gateways
2015-07-18 23:02:10 +05:45
doktornotor
0f12516093
Fix Firewall - Aliases GUI inconsistencies for URL Table type aliases
...
The GUI should show descriptions according to what's selected from the dropdown, but currently does not for URL Table (IPs) and URL Table (Ports) type of aliases.
2015-07-17 22:29:17 +02:00
Renato Botelho
f84945f329
Merge pull request #1758 from phil-davis/patch-2
2015-07-17 09:29:38 -03:00
Chris Buechler
a296286b43
Revert "myid_data and peerid_data fields are not relevant with asn1dn."
...
This reverts commit 0e19c4bba6
2015-07-16 17:24:32 -05:00
Chris Buechler
0e19c4bba6
myid_data and peerid_data fields are not relevant with asn1dn.
...
Conflicts:
usr/local/www/vpn_ipsec_phase1.php
2015-07-16 17:17:48 -05:00
Chris Buechler
348c7c8751
Remove old, unused NetUtils.js
2015-07-16 11:45:06 -05:00
Phil Davis
8235e7304e
Restrict serial ports glob to cua followed by alpha
...
Improve this a little more to match only alpha after /dev/cua (/dev/cuau for example)
2015-07-16 21:35:51 +05:45
Phil Davis
72b2811532
Make serial ports glob cope with many more possibilities
...
It originally coped with things like cuau1 cuau1.1
Then I made it cope with things like cuau1 cuau11 but it stopped working for cuau1.1
This one copes with:
cuau1
cuau1.1
cuau1.11
cuau11
cuau11.1
cuau11.11
That should allow for all sorts of reasonable device name files without matching other stuff in /dev (like cuau1.init cuau1.lock) that we need to ignore.
Please think if I have covered the bases here.
2015-07-16 10:52:28 +05:45
Renato Botelho
d8b221ebb5
Merge pull request #1742 from phil-davis/patch-3
2015-07-15 12:03:23 -03:00
Renato Botelho
41ec196dea
Merge pull request #1743 from phil-davis/patch-4
2015-07-15 12:00:30 -03:00
Renato Botelho
124bf68c6d
Merge pull request #1745 from phil-davis/patch-6
2015-07-15 10:30:54 -03:00
Renato Botelho
a9d6ae1734
Merge pull request #1746 from phil-davis/patch-7
2015-07-15 10:20:52 -03:00
Renato Botelho
fe05aacf24
Merge pull request #1747 from phil-davis/patch-8
2015-07-15 10:18:24 -03:00
Renato Botelho
5e3999791f
Merge pull request #1749 from phil-davis/cancel-referer
2015-07-15 10:16:07 -03:00
Chris Buechler
ccf504fc30
Merge pull request #1752 from phil-davis/patch-9
2015-07-14 18:25:17 -05:00
Chris Buechler
e65ebe325e
Fix adding of VoIP rules from traffic shaper wizard where IP/alias is not
...
specified.
2015-07-14 17:55:05 -05:00
