Commit Graph

12535 Commits

Author SHA1 Message Date
Chris Buechler
76d450e23a fix input validation, = is OK here 2015-01-29 03:06:50 -06:00
Renato Botelho
b601f897a5 Accept port range on Outbound NAT. Fixes #4300 2015-01-28 16:45:58 -02:00
Warren Baker
a27f0c10a9 Add support for 0x20 DNS random bit support. Fixes #4205 2015-01-28 13:33:57 -02:00
Phil Davis
7c7c2ba2f0 Support for Office365 Mail
https://redmine.pfsense.org/issues/4176
Allow the user to choose SMTP authentication mechanism PLAIN or LOGIN.
For existing configs with this option not set, PLAIN is the default, and will appear first in the dropdown box, so next time the user saves the SMTP Notification settings, PLAIN will be the value selected and saved.
2015-01-28 13:23:54 -02:00
Phil Davis
4c40e2a764 Unimportant typos in user and group manager
that do not effect anything.
2015-01-28 06:55:49 -02:00
Renato Botelho
04c8360c72 Teach ufslabels.sh to deal with DESTDIR, useful on installation 2015-01-27 12:22:35 -02:00
Renato Botelho
8c392069ff Improve a bit sh syntax and fix it for multiple swap devices 2015-01-27 12:22:35 -02:00
Renato Botelho
802956d6cf Fix sed syntax, -i requires a space before the parameter. Also fix regex to find swap device 2015-01-27 10:38:58 -02:00
Chris Buechler
a8b61be689 use example.com for examples 2015-01-27 00:26:06 -06:00
Chris Buechler
5e3affe26d these descriptions were flipped. Ticket #4273 2015-01-27 00:21:37 -06:00
Renato Botelho
8e24d1dacd Make sure radvd is reconfigured when CARP is enabled/disabled. It should fix #4252 2015-01-22 10:01:37 -02:00
Renato Botelho
ca276264ee Add missing require for filter.inc since vpn_ipsec_configure() calls filter_configure(). It should fix #4236 2015-01-19 09:25:51 -02:00
Jared Dillard
1195a12d3b move jquery ui css to theme folders 2015-01-16 18:02:43 -06:00
Phil Davis
5b7c33fc7e Firewall Rules Apply be friendly to other languages
Forum: https://forum.pfsense.org/index.php?topic=86808.0
Redmine: https://redmine.pfsense.org/issues/3886

print_info_box_np() when called with just the first $msg parameter has some rough tests to decide if the "Apply" button should be displayed. It checks if the translation of "apply", "save" or "create" appears in the $msg string (which is a translated string itself). If the $msg string did not translate, and thus remains in English, but gettext("apply") does translate then the e.g. Turkish word for "apply" is not going to appear in the English $msg string. So things go wrong.

print_info_box_np already has extra parameters to tell it explicitly $showapply - and for this stuff we know we want the apply button, regardless of how the various text string translations work out. Thus I have provided those parameters here.

I also changed the construction of the text to pass as $msg, breaking it up like in firewall_aliases.php - this means that the string "You must apply the changes in order for them to take effect." translates and you get at least that Turkish displayed.

IMHO it would be beneficial to change lots of these print_info_box_np calls to explicitly set $showapply=true - that will ensure that the apply button shows (and thus the user can perform the needed actions) regardless of how well/not well the translation of the text turns out.
2015-01-15 19:05:32 -02:00
Ermal LUÇI
8d4e768a27 Time to let these go 2015-01-15 21:42:00 +01:00
Ermal LUÇI
f579c0fb42 Add EAP-MSChapv2 implementation for Windows ipsec support as reported here https://forum.pfsense.org/index.php?topic=81657.15 2015-01-15 09:29:40 +01:00
Ermal LUÇI
3a56c14663 Actually remove rekey/reauth from config to avoid strange issues. Ticket #4208 2015-01-13 20:43:59 +01:00
Ermal LUÇI
b40137258e To avoid issues with clashing SAIDs go back to specifying the reqid in strongswan config.
To be able to manage this first upgrade the config to assign each phase2 an reqid
Second use that during config generation

Ticket #4208
2015-01-13 19:57:28 +01:00
xbipin
6db7ee23db Improving aesthetics.
Make title color more consistent with other pages.
Improving aesthetics.
2015-01-13 13:01:07 -02:00
Chris Buechler
156938a87e Where the P1 is disabled, show the P2s as disabled since they will be, same as in previous versions. 2015-01-12 19:25:47 -06:00
Renato Botelho
d71f979475 Fix IPsec widget for multiple P2, it fixes #4164 2015-01-12 21:50:52 -02:00
Ermal LUÇI
2ea976b71c Properly handle large passthrough entries even here. 2015-01-12 12:31:03 +01:00
Ermal LUÇI
6a752ca21a Put the value of password under double quotes(") to avoid issues with special characters in passwords. Ticket #4177 2015-01-12 11:49:12 +01:00
Ermal LUÇI
21165e6455 Prevent echo to insert a newline(\n) at the secret string. Fixes #4177 2015-01-12 11:40:46 +01:00
Ermal LUÇI
7001542e3e Fix typos and set needed variable 2015-01-12 09:33:20 +01:00
Ermal LUÇI
c9f04cd055 properly apply the passthrough entries when apply is hitr. 2015-01-12 09:30:56 +01:00
Ermal LUÇI
64ed3e60f5 Fix inherent issues with isset and empty values set as true by our parser. This made the piep configuration to be wrong at least for passthrough entries. Ticket #3932 2015-01-12 09:27:09 +01:00
Chris Buechler
ab54ec9f8d Bring back showing of default value like previous versions. 2015-01-11 19:33:46 -06:00
Ermal LUÇI
7025c4fa7a Remove debug code 2015-01-11 16:38:25 +01:00
Ermal LUÇI
30656f6640 Fixes #4177 convert password to base64 to be submitted to avoid issues with special chars in shell and HTTP GET parameter passing. Probably should add POST support to fcgicli. 2015-01-11 16:38:25 +01:00
Phil Davis
fc03ca0112 Fix POST typo in interfaces_assign.php
Obviously a typo. But this section is inside:
if (isset($_POST['add_x']) && isset($_POST['if_add'])) {
and I cannot find where 'add_x' is ever sent here, so I do not see how this whole code section is ever executed (and that will be why this typo bug has no symptoms). What is the history here? Can the whole block of code be removed?
The code normally executed is the section for 'Submit' lower down.
2015-01-11 11:03:51 -02:00
Ermal LUÇI
83b0a21ac4 Properly rename the var Ticket #4164 2015-01-10 21:50:31 +01:00
Chris Buechler
ed5c6e894e Default to only AES and SHA1 for new P2s. 2015-01-09 22:08:51 -06:00
Chris Buechler
6f7960c3a0 Default IPsec to AES 2015-01-09 22:00:53 -06:00
Chris Buechler
c182616905 Default IPsec to main mode, unless mobile client. 2015-01-09 21:59:21 -06:00
Ermal LUÇI
422a2007d5 Do not count twice the phase2 entries 2015-01-09 23:12:30 +01:00
Ermal LUÇI
832ec9fee9 Just some reshufling and cleanup 2015-01-09 22:47:38 +01:00
Chris Buechler
0515117ed7 This broke a variety of things. Revert "Deprecated and non-static method messages"
This reverts commit 91b9a02fb1.
2015-01-09 00:40:18 -06:00
Ermal LUÇI
d97dd42437 Make this code less memory hungry and fix route command generation 2015-01-08 23:58:02 +01:00
Phil Davis
bad9dec5e6 Deprecated and non-static method messages
Fix various files that can emit messages like:
PHP Strict Standards:  Non-static method SimplePie_Misc::array_unique()
should not be called statically, assuming $this from incompatible
context in /etc/inc/simplepie/simplepie.inc on line 5508
php-fpm[16262]: /rc.newipsecdns: PHP ERROR: Type: 8192, File:
/etc/inc/shaper.inc, Line: 4365, Message: Assigning the return value of
new by reference is deprecated

Some of these style messages have been reported on the forum, e.g.
https://forum.pfsense.org/index.php?topic=86448.0

I had RSS widget on, and simplepie sent the system beserk telling about
all this stuff.
2015-01-08 14:26:02 -06:00
Renato Botelho
7c1c70d5ea Improve URL and URL ports alias update data:
- Move redundant code to a function parse_aliases_file(). Before the max
number of items was not being respected when URL content is updated,
only when alias was saved. Same was happening with ip/subnet/port
validation and user could end up with a bad pf.conf
- Remove unused variables

These changes were based on Pull Request #1264. It should fix #4189

Submitted by:▸  PiBa-NL
2015-01-08 16:17:03 -02:00
Chris Buechler
8948f12590 Also include /127 for IPv6, it works fine. Ticket #3657 2015-01-07 23:47:34 -06:00
Chris Buechler
13358d35ae Allow for configuring /31 masks on interfaces.php. The rest of the code was updated accordingly some time ago, and an employee with Cox Communications has confirmed this allows things to work on their circuits deployed with /31s. Ticket #4190 2015-01-07 23:42:10 -06:00
Chris Buechler
05b47f2d31 fix up text 2015-01-07 23:04:34 -06:00
Ermal LUÇI
845f9f7819 Provide an advanced setting to be able to disable Unity Plugin(Cisco extensions) 2015-01-07 22:06:51 +01:00
Ermal LUÇI
3c36413133 split is deprecated move to explode 2015-01-07 20:22:16 +01:00
Ermal LUÇI
f3ab0e7468 split is deprecated move to explode 2015-01-07 20:20:35 +01:00
Ermal LUÇI
91456048a7 split is deprecated move to explode 2015-01-07 20:15:57 +01:00
Chris Buechler
2a8a09a9fe fix text 2015-01-07 12:48:47 -06:00
Chris Buechler
d2884b9ae0 fix spelling of compression 2015-01-07 12:47:42 -06:00