Steve Beaver
1605d94079
New login design back-ported from 2.4
2017-08-14 12:49:02 -04:00
jim-p
5d336c75ce
Change IPsec widget tunnel status to handle newer strongSwan childid format. Fixes #7499
...
(cherry picked from commit 4de753e52d
2017-08-07 14:10:17 -04:00
Steve Beaver
640d1b6456
pfSense 2.4 setHelp syntax was applied to v 2.3 - arguments should be provided in an array
2017-08-07 09:31:58 -04:00
Renato Botelho
ba43afdbf2
Remove .empty files from trusted/revoked directories
2017-08-04 11:15:38 -03:00
Felix Wolfsteller
b36b36eea1
improve README by full stop and link to github-help
...
(cherry picked from commit 47dc4743a8
2017-08-03 08:27:59 -03:00
Renato Botelho
036b32b57e
Fix #7625 : Auto select '128' as mask for IPv6
2017-08-01 16:57:38 -03:00
PiBa-NL
f4c3483a1c
rc.gateway_alarm, add syslog message that shows that a alarm was raised/cleared and what the parameters were
...
This helps clarify why sometimes services are restarted when reading through the syslogs.
(cherry picked from commit 48196bf0b2
2017-07-31 17:32:45 -03:00
Fernsehkind
2839bb1319
Use correct wording for menu entry "Reset All States" in "System/Advanced Network"
...
(cherry picked from commit ee7bdbe69b
2017-07-31 17:32:18 -03:00
Fernsehkind
c5ad7e261b
Use correct wording for log output when IP address has changed and states are killed accordingly
...
(cherry picked from commit 8e7d47feda
2017-07-31 17:32:17 -03:00
Ralph Haussmann
0ffce5fdd6
Add GUI entry for ip_change_kill_states in Network/Advanced (See #1629 )
...
(cherry picked from commit 66a405929e
2017-07-31 17:32:17 -03:00
Ralph Haussmann
ba2500cf27
Improve log output when ip_change_kill_states is set.
...
(cherry picked from commit a84da2286c
2017-07-31 17:32:16 -03:00
Renato Botelho
d33bdb2705
Merge pull request #3774 from phil-davis/sort-if-names-RELENG_2_3
2017-07-31 16:41:19 -03:00
PiBa-NL
ac789c952c
ipsec, prevent simultaneous/repeated calling of vpn_ipsec_configure() by /etc/rc.newipsecdns
...
(cherry picked from commit 7c6f38e49a
2017-07-31 16:38:10 -03:00
PiBa-NL
898d5161fb
Trafficshaper, show interface names for disabled interfaces, dont just show a kinda 'empty' spot..
...
(cherry picked from commit 725aee3f19
2017-07-31 16:37:38 -03:00
marjohn56
8f212c6423
Correct typo's as per Jim's request
...
(cherry picked from commit 3e86fa9913
2017-07-31 16:36:52 -03:00
marjohn56
8420b94480
Add Option to use static IPV6 over v4 parent ( PPPoE
...
A new option when setting a v6 static on the WAN to allow the connection to use the V4 interfaces i.e. PPPoE
(cherry picked from commit b73313837b
2017-07-31 16:36:51 -03:00
stilez
514233eee2
typo
...
"Networked" not "network" - "Internet of Things" especially.
(cherry picked from commit d751dee379
2017-07-31 16:35:14 -03:00
stilez
23dcfc7525
grammar fix
...
(cherry picked from commit 94ef78afa9
2017-07-31 16:35:12 -03:00
stilez
8347777187
format %1$s etc in help
...
(cherry picked from commit ef77e40e0c
2017-07-31 16:35:10 -03:00
stilez
5c9bc79843
Improve the HELP note about what will/won't work if TLD is set to ".local"
...
For example, some people won't use mDNS and won't know other things might break; also it's not clear that while ".local" is a problem, ".local.lan" isn't.
(cherry picked from commit b45746a37c
2017-07-31 16:35:09 -03:00
Lorenz Schori
a32a2d04ce
Add support for IPv6 AUTO_LINKLOCAL flag on bridge interfaces
...
(cherry picked from commit b060e08c9d
2017-07-31 16:34:42 -03:00
hamnur
64876ec1aa
Use attribute rekey_enable as usual but optionally allow to set margintime if rekeying is not disabled
...
(cherry picked from commit 376e6f6719
2017-07-31 16:33:52 -03:00
hamnur
a69de2f673
Fix indent of if-block
...
(cherry picked from commit 9d472f01c3
2017-07-31 16:33:50 -03:00
hamnur
8f03bc0481
Check if margintime is numeric and smaller than P1 lifetime
...
(cherry picked from commit af729f53f3
2017-07-31 16:33:47 -03:00
hamnur
f7c409fe15
Hide margintime if rekeying is disabled
...
(cherry picked from commit e18ddb3844
2017-07-31 16:33:46 -03:00
hamnur
04c2c66259
Activate RADIUS accounting for mobile ipsec if it was selected on the auth server view
...
(cherry picked from commit 1e0442e061
2017-07-31 16:33:39 -03:00
hamnur
9ca72a7701
Add strongswan rekeymargin attribute to vpn ipsec phase1 view
...
(cherry picked from commit 9542011684
2017-07-31 16:33:38 -03:00
marjohn56
ccf8bd86b8
dhcp6c Advanced Config prefix interface
...
Currently, when using dhcp6c advanced configuration the prefix interface is WAN, this is not very useful!
The changes here allow the user to select the interface that the PD will be applied on..
(cherry picked from commit 58a185aede
2017-07-31 16:32:28 -03:00
PiBa-NL
1528ee4e95
dns, allow deleting last row for "Additional Names for this Host"
...
(cherry picked from commit f6cf3687d2
2017-07-28 13:56:57 -03:00
Renato Botelho
6b47375788
Enable REDIS option for suricata
2017-07-26 14:08:37 -03:00
Renato Botelho
47683c9483
Do not re-create core pkg repo when running with -r
2017-07-20 14:04:18 -03:00
jim-p
67fea03620
Use an alternate method to stop unbound and fix #7326
...
(cherry picked from commit 782453b4db
2017-07-14 14:47:24 -04:00
jim-p
f0da1eda7c
If a client address is in the webConfiguratorlockout table, do not allow them to access the GUI. Print an error and kill their states. Ticket #7693
...
Extra check to be sure that an existing open state cannot bypass lockout controls.
(cherry picked from commit cc9b0f76da
2017-07-14 09:57:14 -04:00
jim-p
930914fd81
Fix typo
...
(cherry picked from commit 2c3b9ac554
2017-07-13 20:17:27 -04:00
PiBa-NL
1fdecbe6ee
cron, fix job removal by index splice and write valid schedules for ramdrive backups
...
(cherry picked from commit ce3371fe96
2017-07-13 16:06:38 -03:00
PiBa-NL
aeb0e915c2
cron, dont write_config() when nothing changed.
2017-07-13 16:05:22 -03:00
PiBa-NL
bef8ce513e
bootup, change message to "Checking config backups consistency..." to tell whats taking time, as there is usually little to cleanup involved
...
(cherry picked from commit c253048797
2017-07-13 15:58:47 -03:00
PiBa-NL
04cd314bce
nat, portforwards should not make up a new destination information when a configured dhcp interface does not currently have an address.
...
fixes: https://forum.pfsense.org/index.php?topic=127585.msg733528#msg733528
(cherry picked from commit 5a8a8bbea3
2017-07-13 15:58:24 -03:00
jim-p
021332fa29
Restructure how unbound zone data is written to fix processing of "redirect" zone entries. Fixes #7690
...
Also corrects some other misc issues for formatting of zone data.
While here, add an option, not exposed in the GUI, for users to get the previous behavior of defining short names for hosts.
2017-07-13 13:58:29 -04:00
jim-p
fa628b1a15
Improve the way the auth server list is generated and account for a key being removed from the array when deleting. Fixes #7682
2017-07-10 12:15:13 -04:00
Renato Botelho
7da9f1e5fe
Stop using pecl-ssh2
2017-07-06 15:27:44 -03:00
Renato Botelho
b91d55c39b
Deprecate pfSense freeradius2 package in favor of freeradius3
2017-07-06 15:23:57 -03:00
Robbert Rijkse
2f55e55156
Removed MSS clamping exclusions
...
(cherry picked from commit 53c26adeca
2017-07-06 08:27:11 -04:00
jim-p
c59b2bc36d
Several complaints of unbound problems after commiting, so back this out. Revert "Change the way unbound is stopped when the process is being restarted, to give the old process enough time to exit cleanly. Fixes #7326 "
...
This reverts commit 0577d9df46
2017-07-06 08:21:28 -04:00
jim-p
c369871083
Fix missing line from openssl.cnf
2017-07-05 15:06:57 -04:00
Renato Botelho
12e31e8726
Include User Agent information when update bogons list
2017-07-05 13:56:48 -03:00
Renato Botelho
0d3d86c8f0
Remove extra spaces from User Agent
2017-07-05 13:27:46 -03:00
Renato Botelho
48600bc6d4
Send uniqueid instead of UUID on user-agent
2017-07-05 13:22:10 -03:00
Renato Botelho
7928e41968
Declare user_agent variable in the function it's used
2017-07-05 13:22:08 -03:00
Renato Botelho
cb61e2d844
Move uniqueid read to a function system_get_uniqueid()
2017-07-05 13:00:40 -03:00
