Commit Graph

35313 Commits

Author SHA1 Message Date
Luiz Souza
44b1c00050 Do no configure the virtual IPs if the parent is disabled.
Ticket #6677
2018-01-25 15:28:32 -02:00
Luiz Souza
fccdc01ad1 off-by-one fix in an error text.
No functional change.
2018-01-25 13:51:14 -02:00
Steve Beaver
c7027903d4 Fixed #8296 2018-01-24 22:19:58 -05:00
Luiz Souza
97e6ec0974 Fixes a bug in primary DHCPD host detection for failover.
Properly detect the master host based on CARP skew at setup time when used with HA.
2018-01-24 13:39:59 -06:00
Luiz Souza
f1dc05b706 Merge pull request #3862 from marjohn56/pfsense 2018-01-22 21:30:30 -06:00
Luiz Souza
688721698d Fix get_cpu_crypto_support() to not overwrite $cpucrypto_type. 2018-01-22 19:35:46 -06:00
Steve Beaver
71cf75cb56 Merge pull request #3902 from stensonb/fix-typo 2018-01-19 10:34:50 -05:00
Renato Botelho
4b90e92716 Add sysutils/devcpu-data 2018-01-19 08:18:53 -02:00
Bryan Stenson
19e87bb36b fix typos 2018-01-19 01:35:57 -08:00
Steve Beaver
b1c01d8051 Merge pull request #6400 from loonylion/master 2018-01-17 17:05:17 -05:00
Steve Beaver
61b6c22a50 Merge pull request #3898 from alistair23/alistair/master 2018-01-17 07:24:12 -05:00
jim-p
4cad9a5bd1 Change sshd compression to 'delayed' to match current FreeBSD default. Fixes #8245 2018-01-16 14:15:06 -05:00
jim-p
900663a44f Add an update source control to RFC2136 dynamic DNS updates. Implements #8278 2018-01-16 12:05:14 -05:00
jim-p
618faaf262 Add localhost to list of interfaces for packet capture. Implements #8257 2018-01-16 11:07:14 -05:00
jim-p
163255d64c Add ospf6d to routing logs. 2018-01-16 10:02:51 -05:00
Steve Beaver
8dc334885b Merge pull request #3889 from kangtastic/master 2018-01-15 15:37:56 -05:00
Steve Beaver
f5d55ac663 Merge pull request #3899 from PiBa-NL/20180111-bootup-step-messages 2018-01-15 15:37:03 -05:00
Steve Beaver
0fc473ad6f Merge pull request #3900 from PiBa-NL/20180111-pf-busy 2018-01-15 15:36:17 -05:00
Steve Beaver
d23d1a0690 Merge pull request #3901 from earlchew/issue-7357 2018-01-15 15:35:31 -05:00
Anders Lind
f95579a6c4 Follow-up to syntax, file order and other changes
Notes:
* Those able to check a proper failover configured system please check if
the Pool Staus table shows up in the top of the Status DHCPv6 Leases page
and that the leases are showing up fine. Thanks

* I am in doubt about the markdown readme file parser_readme.md where it
should be placed in the file system?

Changes since last commit - brief:
1. Making requested changes to follow coding guide lines re. input from jim-p
plus other smaller corrections.

2. Better handling of binding state 'expired'.

3. Style changes to IAID, DUID and Mac/vendor columns on leases table for better
overview / UX and to avoid user scrolling horizontaly, because viewport of table
would otherwise be too small to show all content at once.

4. Removed unused $dip variable from Status DHCPv6 Leases page.

5. Updated $mappings array to an extra dimension to also consist of IAID of the IA-NA.

6. Reordered "Routed to" to have its own column in the prefix table on the lease page
and at the same time include the IAID of the IA-NA, because it gives a better overview
and remembers people that IAID for IA-NA is not necessary the same as the IAID for the
IA-PD.

7. The prefixes table may now break the DUID string anywhere to avoid a scrollbar in
the table.

8. Less code when assigning values, automatic checking + debug enhancements.
All made to better handle when values are assigned to entries that go into the arrays.

Changes since last commit - explained:
2. It has been found during tests that 'expired' was missing. If no other lease has taken
over then we would like to set the fa-ban icon on the status dhcpv6 leases page (it is
shown after the button 'Show all configured leases' has been clicked.)
It has also happened while testing that devices are online while their leases have expired!

3. We allow DUID to break the word onto multiple lines and with a smaller font size for
DUID and IAID. Mac address and vendor id are now on different lines and the vendor id is
shown with smaller text. All done to give the user a better overview.

5. If we didn't the $mappings entry would become overriden by one device (DUID) having
two interfaces (IAIDs) e.g. a cabled+wifi enabled device where both interfaces are on link.

6.  It uses a foreach since in rare situation there may be more - but atm. we are not
determining which is the real route! See considerations for the future below re. B.

8. Assigning values gets checked. It is possible to specify a function for assigning
further values and print extra debug messages. If an index in an entry previously has
been set a debug message will be printed (e.g. when the entries of $mappings get
substituted with newer values.)

Things to consider for the future:
A. Should Static DHCPv6 Mapping (services_dhcpv6_edit.php) besides DUID also
consist of an IAID part since one DUID may be shared between different IAIDs?

B. It would be beneficial to pair the prefixes (from the lease table on the
Status DHCPv6 Leases page) with the routes from netstat so that we can show
which routes are actually alive. Also in the rare event where one device (DUID)
has more interfaces (IAID) that are on/off link with pfSense this can come in
useful to see which routes are actually live. When a route is not existing
or we are not on link with the sub router we might want to grey that route out
in the prefixes table of the Status DHCPv6 Leases page.

C. When minimizing arrays (removing superseded entries) for leases, prefixes,
failover pools it might be better to check by (end) date/time than assuming
that the leases nearer to the bottom of the lease file are newer leases
(remove_duplicate).
Two wins:
* We would be sure that nothing overwrites newer entries (does not seem to be
happen though today, because order is followed: Newest entries of a IAID+DUID
is in the bottom.)
* We would remove duplicates while building the arrays and not afterwards.
We would however need to be able to handle situations where newer entries contain
invalid content e.g. missing (end) dates and we would also need to know how to
properly handle failover entries in the pools array.

D. Obviously one day when a proper DHCPv6 server service exists with a proper API
then it would be very interesting to use that instead of reading, parsing and
handling content of a lease file so that current values are simply requested and
returned via the API.
2018-01-14 22:52:53 +01:00
Earl Chew
247f571945 [services_dyndns_edit] Clarify use of @ for Cloudflare
Add GUI prompts corresponding to #7357 that allows users to
enter @ for the hostname, and have it replaced with an empty hostname.

Signed-off-by: Earl Chew <earl_chew@yahoo.com>
2018-01-13 20:34:49 -08:00
jim-p
19a1cf348b Fix certificate SAN input validation so it does not improperly allow an IP address when FQDN is selected. Fixes #8275 2018-01-12 14:49:40 -05:00
PiBa-NL
a0f991ecb8 openvpn, clear route also for /31 for ptp interfaces 2018-01-11 22:50:06 +01:00
PiBa-NL
66e6198f4d pf, device-busy, add another item DIOCADDRULE to the list of results to retry 2018-01-11 21:57:48 +01:00
PiBa-NL
1da0c79443 bootup, add information about what bootup step is being done 2018-01-11 21:27:17 +01:00
Steve Beaver
af17dba166 Fixed #8268 2018-01-10 12:41:39 -05:00
jim-p
498f7e20b6 Add an option to push a gatewy address to bridged tap clients. Implements #8267 2018-01-10 11:58:09 -05:00
Alistair Francis
3048dd47ae
upgrade_config.inc: Remove all restore_rrd() calls
Commit 0869605131 removed the
restore_rrd() function. To avoid errors when restoring older configs
remove all callers to it.

Bug: https://redmine.pfsense.org/issues/8231
Signed-off-by: Alistair Francis <alistair@alistair23.me>
2018-01-09 17:16:39 -08:00
Steve Beaver
016260fe43 Fixed #8266 by removing JS alerts 2018-01-09 11:33:45 -05:00
loonylion
87489e5cce re-adding changes made to fix bug#6400, includes fixes for bug#8222 and bug#8223 that were introduced with the initial commit of this code.
original pull request was #3868
2018-01-08 18:50:37 +00:00
PiBa-NL
77a6cafbc0 Change get_interface_subnet() to use configured value if available. 2018-01-06 20:16:49 +01:00
PiBa-NL
10a8b5eea6 openvpn, fix the ifconfig ip1 ip2 when subnet /31 is used 2018-01-06 19:33:53 +01:00
jim-p
2f7d3a1f3c Encode rangedescr before display in firewall_schedules.php. Fixes #8259 2018-01-05 16:53:29 -05:00
jim-p
88be34ad80 Fix foreach error on hosts that have no dyndns entries. 2018-01-05 16:42:45 -05:00
Luiz Souza
5391d05ceb Sort package entries, remove unused packages (elinks, asterisk). 2018-01-05 08:45:44 -06:00
Luiz Souza
51796ceda3 Small cosmetic fix. 2018-01-05 07:50:19 -06:00
Luiz Souza
b8f91b7c6b Update the Copyright notice for pfSense. 2018-01-05 07:44:37 -06:00
jim-p
31bb3fb620 Merge pull request #3893 from JoeriCapens/ddns-rfc2136-algorithm-choice 2018-01-04 14:27:14 -05:00
Joeri Capens
c0305bb853 Add keyalgorithm input validation. 2018-01-02 21:49:48 +01:00
Joeri Capens
16f8df9a89 Delete keytype field from config, remove unnecessary file cleanup. 2018-01-02 21:49:12 +01:00
jim-p
e562fca2e6 Change how SANs are generated from the CN, considering that not all CNs will produce a valid SAN. Fixes #8252 2018-01-02 11:49:46 -05:00
jim-p
fbdf0a084d Do not make a bypasslan IPsec config block when it should be disable/empty. Fixes #8239 2018-01-02 10:55:56 -05:00
Steve Beaver
48a6bb9272 Update language selections 2017-12-29 09:58:14 -05:00
Joeri Capens
0ccfd70e2c Remove old dnssec-keygen style files during upgrade 2017-12-29 00:24:11 +01:00
Joeri Capens
ab1112eed9 Add RFC 2136 Client key algorithm choice. Implements #8244 2017-12-29 00:01:46 +01:00
Joeri Capens
16c260fac2 Use consistent variable order, remove unused variable. 2017-12-28 23:46:33 +01:00
Joeri Capens
7ca8845b3d Replace Dynamic DNS dnssec-keygen style files with simpler ddns-confgen style file. 2017-12-28 23:43:29 +01:00
Steve Beaver
f0584e6dfe Merge pull request #3887 from JoeriCapens/dhcp-ddns-algorithm-choice 2017-12-27 09:39:46 -05:00
jim-p
918ef12c73 Add missing $cpzone declaration. Fixes #8238 2017-12-27 08:32:16 -05:00
PiBa-NL
5a1ee50e6b ipsec, multiple phase1 ciphers, make use of 'repeatable' group 2017-12-22 15:42:15 +01:00