Commit Graph

4540 Commits

Author SHA1 Message Date
Scott Ullrich
a005424e17 Start DHCPD before DNSMASQ to avoid this error on embedded: Jul 12 01:34:39 dnsmasq[588]: failed to access /var/dhcpd/var/db/dhcpd.leases: No such file or directory 2007-07-12 01:41:06 +00:00
Seth Mos
77109a5f7a Commit missed checkin, supress debug message 2007-07-09 12:52:32 +00:00
Seth Mos
d852c5260a Unbreak IPSEC, correct pathnames 2007-07-08 21:06:23 +00:00
Scott Ullrich
7a5e1563bf CAPS kills. Literally. Do not set the description to upper case LAN when we are looking for lower case. 2007-07-07 03:42:42 +00:00
Scott Ullrich
efb9942fd2 Kill off old pftpx processes correctly 2007-07-07 03:20:05 +00:00
Scott Ullrich
8a58063d28 Improve the load balancing pool edit screen. Submitted-by: Chris Daniel 2007-07-06 18:46:44 +00:00
Scott Ullrich
0bdbb9ea3c Remove extra PasswordAuthentication line. Ticket #1374 2007-07-06 18:16:37 +00:00
Scott Ullrich
8e537b3c6e Use $lanif for lan anti-lockout rule 2007-07-05 22:04:29 +00:00
Scott Ullrich
f2d7bc114c Escape $lan correctly 2007-07-05 20:40:45 +00:00
Scott Ullrich
6f82a11f10 Do not use $iface as source or destination as it may be a member of a bridge without an ip address and pfctl will complain. 2007-07-05 20:38:57 +00:00
Scott Ullrich
7f37926c72 Since we are matching traffic on incoming interface, do not link wan or lan to bridgeX 2007-07-05 19:00:47 +00:00
Scott Ullrich
2b6e777def Only pass anti-lockout traffic on $lan 2007-07-05 18:51:51 +00:00
Seth Mos
b9d8cc51ef Fix loading and reloading config for IPSEC.
MFC: Possible candidate, works for seth. Needs test.
2007-07-04 12:11:30 +00:00
Seth Mos
be41c19386 Supress debug logging 2007-07-04 12:09:04 +00:00
Scott Ullrich
b770450e52 Cleanup IPSEC rules. We where blocking port = 500 UDP on CARP interfaces, for one. 2007-07-01 19:59:32 +00:00
Scott Ullrich
5e4b6e3515 Be more verbose on logging so that we can correctly deterimine protocol, etc. Ticket #1348 2007-07-01 19:24:12 +00:00
Scott Ullrich
d08299cc61 $config needs to be global 2007-06-30 22:25:39 +00:00
Scott Ullrich
6e35cf3ff9 unbreak policy routing rules network access to LAN IP Ticket #1320 2007-06-30 22:04:34 +00:00
Scott Ullrich
6f20377b6f Correctly move upnp to base since LiveCD cannot write files to /usr/local/etc or /usr/local/etc/rc.d/ Ticket #1342 2007-06-30 21:48:29 +00:00
Scott Ullrich
d739dbe9cc Kill trailing space 2007-06-30 21:20:21 +00:00
Scott Ullrich
c876662c7e Remove openvpn csc file when option is disabled. Ticket #1339 2007-06-30 21:19:41 +00:00
Scott Ullrich
66cc67c6ec Add ASN1DN identities support to IPSEC. Subbmitted-by: Nic Bernstein <nic_AT_onlight.com> 2007-06-30 20:57:30 +00:00
Scott Ullrich
d584a8978e Do not antispoof on wan when it is bridged. Ticket #1352 2007-06-30 20:38:03 +00:00
Scott Ullrich
8cf7463418 Move CARP and PFSYNC allow traffic before USER_RULES section. If a person has a restrictive ruleset then it is possible to disallow traffic. 2007-06-29 16:22:20 +00:00
Martin Fuchs
8fc63cd85d Add Type-Of-Service-passthru for server and client 2007-06-24 21:03:25 +00:00
Timo Boettcher
2cd5c34010 remove part of solution of problem solved elsewhere 2007-06-21 13:07:02 +00:00
Timo Boettcher
cd72ded386 Make OpenVPN usable in status_service.php 2007-06-21 13:01:01 +00:00
Scott Ullrich
10f4ac6c24 Default to nat-reflection inactivity of 2000 which is roughtly 33 minutes. 2007-06-19 20:23:22 +00:00
Scott Ullrich
b35521f73c Correct location of use_rrd_gateway. 2007-06-18 05:24:56 +00:00
Scott Ullrich
251ca0224a Make sure we are writable for /etc/crontab 2007-06-09 21:02:06 +00:00
Scott Ullrich
1fadb31de4 Unbreak captive portal images. 2007-06-09 20:54:54 +00:00
Scott Ullrich
5c6c1712b8 Cleanup logging line so that it is more readable. 2007-06-09 20:04:42 +00:00
Scott Ullrich
a2b58f83b2 find_interface_ip() requires a real interface 2007-06-09 20:02:25 +00:00
Martin Fuchs
6d03107144 correct code formatting 2007-06-07 18:11:23 +00:00
Martin Fuchs
54816afd75 Add OpenVPN CSC-DHCP Options (override per Client), add TLS-Authentication, add connection-limit for server 2007-06-07 16:28:51 +00:00
Scott Ullrich
8f262ce2fd Restore previous PPTP changes. 2007-06-04 22:47:11 +00:00
Scott Ullrich
50db0bd767 With the tweaks that have occured today fastcgi can now run again on 64 megabyte machines. 2007-06-03 21:00:58 +00:00
Scott Ullrich
4f1fbb19ad Reset terminals on blank input which could be a console reload war between some kind of strange "new spawned console". 2007-06-03 20:50:57 +00:00
Scott Ullrich
6f954b495a Set the recv and send space to 4096 when folks use pfSense on 64 megabyte machines. 2007-06-03 19:48:59 +00:00
Daniel Stefan Haischt
d0a371bf98 * fix: background on login screen 2007-06-03 18:25:27 +00:00
Scott Ullrich
9bda224101 Close STDIN ($fp) handle before returning back to shell. Major doh's. 2007-06-02 22:20:40 +00:00
Scott Ullrich
3121018425 Close STDIN ($fp) handle before returning back to shell. Major doh's. 2007-06-02 22:05:30 +00:00
Timo Boettcher
ed4b63b097 SSH-Key(only) Login 2007-06-02 21:58:50 +00:00
Scott Ullrich
942ed037d0 Close STDIN ($fp) handle before returning back to shell. Major doh's. 2007-06-02 21:50:33 +00:00
Scott Ullrich
fc041d5516 use killall 2007-06-02 21:17:32 +00:00
Scott Ullrich
4614df6ba3 * Flush SPD's on reload * Kilall -HUP racoon if its already running since racoonctl is brokie brokie 2007-06-02 21:10:16 +00:00
Scott Ullrich
2eae7fc9fe * Remove path from racoon grep * Remove [r] from racoon and simply grep for racoon 2007-06-02 20:51:33 +00:00
Scott Ullrich
c9b0942dac Correct ps location 2007-06-02 20:49:34 +00:00
Scott Ullrich
bcc49d35d1 Instead of skipping DHCP server on LAN in a bridged environment, simply log an error letting the operator know that DHCP Server is enabled on LAN in a bridging environment. 2007-05-31 16:33:03 +00:00
Scott Ullrich
06110a2a3a Do not check for disabled nat reflection before installing tftp helper. 2007-05-30 01:22:06 +00:00