Commit Graph

748 Commits

Author SHA1 Message Date
Bill Marquette
0dd62c8813 strip (#) comments out of files 2005-02-26 01:24:04 +00:00
Scott Ullrich
98b779400b If line begins with #, unset it 2005-02-25 23:43:10 +00:00
Scott Ullrich
e3f41a28e4 * back out \$ interface change
* do not return () around interfaces
2005-02-25 23:13:06 +00:00
Scott Ullrich
038970280a Macros do not need $ in front of them in the ruleset.
Pointy-hat-to: me
2005-02-25 23:03:57 +00:00
Scott Ullrich
afe53428c6 * Move the set networking interfaces code into a function in config.inc. Call this function instead of requiring the rc.initial.setports file
* Alter rc.initial.setports to call the set_networking_interfaces_ports() function
2005-02-25 22:43:08 +00:00
Scott Ullrich
b425d956eb * Require rc.initial.setports if first boot
* Do not reboot if setting ports on first boot
2005-02-25 22:25:28 +00:00
Scott Ullrich
d836899344 Use system instead of mwexec 2005-02-25 22:09:48 +00:00
Scott Ullrich
afde8c220c Extra ) 2005-02-25 21:59:10 +00:00
Scott Ullrich
7c231abbea Extra ] 2005-02-25 21:48:56 +00:00
Scott Ullrich
aa01f2f21d On bootup, if the interfaces dont exist run the set interface wizard. 2005-02-25 21:37:38 +00:00
Scott Ullrich
9ad7c60961 If the wan or lan interface does not match the defined interfaces, ie: one of them doesnt exist, then do not setup the filter rules. 2005-02-25 21:34:53 +00:00
Scott Ullrich
38833ef2a6 Alert user of final firewall rules pass 2005-02-25 21:15:56 +00:00
Scott Ullrich
e3939e202c * Full path to cut and grep
* global $config in many missed locations
2005-02-25 20:55:39 +00:00
Scott Ullrich
b964717db8 Do not parse aliases entries unless they are defined 2005-02-25 20:40:19 +00:00
Scott Ullrich
c0c8d62c3a * Raise upload max filesize to 16M
* Raise post_max_size to 15M
2005-02-25 17:30:52 +00:00
Bill Marquette
f1bccb83e1 turn on some of the "security" sysctls 2005-02-25 05:19:24 +00:00
Bill Marquette
1e137ab5fa comment 2005-02-25 04:31:05 +00:00
Bill Marquette
fe693b894c IPSec passthru option is finally here 2005-02-25 04:28:38 +00:00
Bill Marquette
a93456b51c typo - really allow for hardware accel. 2005-02-25 02:56:23 +00:00
Scott Ullrich
c9b4da103a * Correct variable mispelling in pfsense-utils.inc
* Correct a missing brace in interfaces.inc
2005-02-25 00:37:21 +00:00
Scott Ullrich
7acb651698 Do not create an outgoing rule if there is no ip on the interface. 2005-02-24 20:33:32 +00:00
Scott Ullrich
387ce517bd Revert back to 1.162 2005-02-24 20:26:25 +00:00
Scott Ullrich
86f3fc0083 Run custom_php_command_before_form commands before
custom_php_resync_config_command if they exist
2005-02-24 20:07:49 +00:00
Scott Ullrich
179c142275 Version bump 2005-02-24 19:39:49 +00:00
Scott Ullrich
32d60bd2f2 * Continue wrapping interfaces around ()
* Convert $wanif variables to pf macro "wan"
* Convert $lanif variables to pf macro "lan"
2005-02-24 19:24:25 +00:00
Scott Ullrich
ed0595718d * Cleanup carp code. Add a function to show how many carp interfaces are currently created.
* Add () around interfaces for bridging code
* Add link 0 (hardware acceleration) features for fxp chipsets
2005-02-24 19:06:51 +00:00
Bill Marquette
0abcd86ee8 Fix rules with state type of "none" 2005-02-24 06:36:41 +00:00
Bill Marquette
bf64867948 spelling 2005-02-24 05:54:52 +00:00
Bill Marquette
87b10bedc1 spelling mistake and whitespace cleanup 2005-02-24 05:54:07 +00:00
Bill Marquette
9c96aff526 We can now reorder outbound NATs (just like rules!) 2005-02-24 05:47:54 +00:00
Scott Ullrich
4983ed8cfb Do not query interface if it does not exist. 2005-02-23 23:17:41 +00:00
Scott Ullrich
aab579262b Correctly handle the new "Do not backup packages" flag 2005-02-23 21:18:31 +00:00
Scott Ullrich
60e440fab1 Move carp rules to carp_rules.sh (in the package) and use the new package framework. 2005-02-23 20:12:38 +00:00
Scott Ullrich
962f7d25d4 make sure carp interface exists before querying 2005-02-23 20:11:53 +00:00
Scott Ullrich
737ae333e2 Link aliases to all carp interfaces that are in the same subnet 2005-02-23 06:37:24 +00:00
Scott Ullrich
38e5dd7a84 Add packageearly and packagelate anchors 2005-02-23 06:02:48 +00:00
Scott Ullrich
a1ad1bc385 Allow package plugins to adjust rules 2005-02-23 05:41:49 +00:00
Scott Ullrich
6944dd736e Bump to 0.39 2005-02-23 05:09:33 +00:00
Scott Ullrich
fa65a62b76 Automatically assign carp aliases with a ip on the same subnet to a interface.
Example:

lan = "{ fxp1 carp0 }"
wan = "{ fxp0 carp1 }"
2005-02-23 05:07:53 +00:00
Scott Ullrich
f8269a6f97 Correctly find carp interface 2005-02-23 04:01:53 +00:00
Scott Ullrich
ffeca18d6a Redirect all errors and package messages to /tmp/bootup_messages 2005-02-23 03:42:52 +00:00
Scott Ullrich
4fd676588c Eliminate extra white space 2005-02-23 03:30:59 +00:00
Scott Ullrich
8c8e67929c Use full path to pfctl 2005-02-23 03:18:28 +00:00
Scott Ullrich
dbf71e7834 Add a anchor for carp rules 2005-02-23 03:15:58 +00:00
Scott Ullrich
a35f1242d1 Add label to add_rule_to_anchor 2005-02-23 02:37:08 +00:00
Scott Ullrich
0f076aacba use anchor:anchorname when adding rules to anchors 2005-02-23 02:29:52 +00:00
Colin Smith
5e9e6ea289 Sync pfSense CSS with m0n0wall latest. 2005-02-23 00:10:30 +00:00
Scott Ullrich
334d3f7686 Version bump to 0.38 2005-02-22 17:59:57 +00:00
Scott Ullrich
802dc5c8ae Cleanup extra > shell rc.d system 2005-02-22 17:28:28 +00:00
Bill Marquette
c22767b120 Only allow tcp rules to use alternate keep state methods 2005-02-22 16:47:27 +00:00