Scott Ullrich
|
a005424e17
|
Start DHCPD before DNSMASQ to avoid this error on embedded:
Jul 12 01:34:39 dnsmasq[588]: failed to access /var/dhcpd/var/db/dhcpd.leases: No such file or directory
|
2007-07-12 01:41:06 +00:00 |
|
Seth Mos
|
77109a5f7a
|
Commit missed checkin, supress debug message
|
2007-07-09 12:52:32 +00:00 |
|
Seth Mos
|
d852c5260a
|
Unbreak IPSEC, correct pathnames
|
2007-07-08 21:06:23 +00:00 |
|
Scott Ullrich
|
7a5e1563bf
|
CAPS kills. Literally. Do not set the description to upper case LAN when we are looking for lower case.
|
2007-07-07 03:42:42 +00:00 |
|
Scott Ullrich
|
efb9942fd2
|
Kill off old pftpx processes correctly
|
2007-07-07 03:20:05 +00:00 |
|
Scott Ullrich
|
8a58063d28
|
Improve the load balancing pool edit screen.
Submitted-by: Chris Daniel
|
2007-07-06 18:46:44 +00:00 |
|
Scott Ullrich
|
0bdbb9ea3c
|
Remove extra PasswordAuthentication line.
Ticket #1374
|
2007-07-06 18:16:37 +00:00 |
|
Scott Ullrich
|
8e537b3c6e
|
Use $lanif for lan anti-lockout rule
|
2007-07-05 22:04:29 +00:00 |
|
Scott Ullrich
|
f2d7bc114c
|
Escape $lan correctly
|
2007-07-05 20:40:45 +00:00 |
|
Scott Ullrich
|
6f82a11f10
|
Do not use $iface as source or destination as it may be a member of a bridge without an ip address and pfctl will complain.
|
2007-07-05 20:38:57 +00:00 |
|
Scott Ullrich
|
7f37926c72
|
Since we are matching traffic on incoming interface, do not link wan or lan to bridgeX
|
2007-07-05 19:00:47 +00:00 |
|
Scott Ullrich
|
2b6e777def
|
Only pass anti-lockout traffic on $lan
|
2007-07-05 18:51:51 +00:00 |
|
Seth Mos
|
b9d8cc51ef
|
Fix loading and reloading config for IPSEC.
MFC: Possible candidate, works for seth. Needs test.
|
2007-07-04 12:11:30 +00:00 |
|
Seth Mos
|
be41c19386
|
Supress debug logging
|
2007-07-04 12:09:04 +00:00 |
|
Scott Ullrich
|
b770450e52
|
Cleanup IPSEC rules. We where blocking port = 500 UDP on CARP interfaces, for one.
|
2007-07-01 19:59:32 +00:00 |
|
Scott Ullrich
|
5e4b6e3515
|
Be more verbose on logging so that we can correctly deterimine protocol, etc.
Ticket #1348
|
2007-07-01 19:24:12 +00:00 |
|
Scott Ullrich
|
d08299cc61
|
$config needs to be global
|
2007-06-30 22:25:39 +00:00 |
|
Scott Ullrich
|
6e35cf3ff9
|
unbreak policy routing rules network access to LAN IP
Ticket #1320
|
2007-06-30 22:04:34 +00:00 |
|
Scott Ullrich
|
6f20377b6f
|
Correctly move upnp to base since LiveCD cannot write files to /usr/local/etc or /usr/local/etc/rc.d/
Ticket #1342
|
2007-06-30 21:48:29 +00:00 |
|
Scott Ullrich
|
d739dbe9cc
|
Kill trailing space
|
2007-06-30 21:20:21 +00:00 |
|
Scott Ullrich
|
c876662c7e
|
Remove openvpn csc file when option is disabled.
Ticket #1339
|
2007-06-30 21:19:41 +00:00 |
|
Scott Ullrich
|
66cc67c6ec
|
Add ASN1DN identities support to IPSEC.
Subbmitted-by: Nic Bernstein <nic_AT_onlight.com>
|
2007-06-30 20:57:30 +00:00 |
|
Scott Ullrich
|
d584a8978e
|
Do not antispoof on wan when it is bridged.
Ticket #1352
|
2007-06-30 20:38:03 +00:00 |
|
Scott Ullrich
|
8cf7463418
|
Move CARP and PFSYNC allow traffic before USER_RULES section. If a person has a restrictive ruleset then it is possible to disallow traffic.
|
2007-06-29 16:22:20 +00:00 |
|
Martin Fuchs
|
8fc63cd85d
|
Add Type-Of-Service-passthru for server and client
|
2007-06-24 21:03:25 +00:00 |
|
Timo Boettcher
|
2cd5c34010
|
remove part of solution of problem solved elsewhere
|
2007-06-21 13:07:02 +00:00 |
|
Timo Boettcher
|
cd72ded386
|
Make OpenVPN usable in status_service.php
|
2007-06-21 13:01:01 +00:00 |
|
Scott Ullrich
|
10f4ac6c24
|
Default to nat-reflection inactivity of 2000 which is roughtly 33 minutes.
|
2007-06-19 20:23:22 +00:00 |
|
Scott Ullrich
|
b35521f73c
|
Correct location of use_rrd_gateway.
|
2007-06-18 05:24:56 +00:00 |
|
Scott Ullrich
|
251ca0224a
|
Make sure we are writable for /etc/crontab
|
2007-06-09 21:02:06 +00:00 |
|
Scott Ullrich
|
1fadb31de4
|
Unbreak captive portal images.
|
2007-06-09 20:54:54 +00:00 |
|
Scott Ullrich
|
5c6c1712b8
|
Cleanup logging line so that it is more readable.
|
2007-06-09 20:04:42 +00:00 |
|
Scott Ullrich
|
a2b58f83b2
|
find_interface_ip() requires a real interface
|
2007-06-09 20:02:25 +00:00 |
|
Martin Fuchs
|
6d03107144
|
correct code formatting
|
2007-06-07 18:11:23 +00:00 |
|
Martin Fuchs
|
54816afd75
|
Add OpenVPN CSC-DHCP Options (override per Client), add TLS-Authentication, add connection-limit for server
|
2007-06-07 16:28:51 +00:00 |
|
Scott Ullrich
|
8f262ce2fd
|
Restore previous PPTP changes.
|
2007-06-04 22:47:11 +00:00 |
|
Scott Ullrich
|
50db0bd767
|
With the tweaks that have occured today fastcgi can now run again on 64 megabyte machines.
|
2007-06-03 21:00:58 +00:00 |
|
Scott Ullrich
|
4f1fbb19ad
|
Reset terminals on blank input which could be a console reload war between some kind of strange "new spawned console".
|
2007-06-03 20:50:57 +00:00 |
|
Scott Ullrich
|
6f954b495a
|
Set the recv and send space to 4096 when folks use pfSense on 64 megabyte machines.
|
2007-06-03 19:48:59 +00:00 |
|
Daniel Stefan Haischt
|
d0a371bf98
|
* fix: background on login screen
|
2007-06-03 18:25:27 +00:00 |
|
Scott Ullrich
|
9bda224101
|
Close STDIN ($fp) handle before returning back to shell. Major doh's.
|
2007-06-02 22:20:40 +00:00 |
|
Scott Ullrich
|
3121018425
|
Close STDIN ($fp) handle before returning back to shell. Major doh's.
|
2007-06-02 22:05:30 +00:00 |
|
Timo Boettcher
|
ed4b63b097
|
SSH-Key(only) Login
|
2007-06-02 21:58:50 +00:00 |
|
Scott Ullrich
|
942ed037d0
|
Close STDIN ($fp) handle before returning back to shell. Major doh's.
|
2007-06-02 21:50:33 +00:00 |
|
Scott Ullrich
|
fc041d5516
|
use killall
|
2007-06-02 21:17:32 +00:00 |
|
Scott Ullrich
|
4614df6ba3
|
* Flush SPD's on reload
* Kilall -HUP racoon if its already running since racoonctl is brokie brokie
|
2007-06-02 21:10:16 +00:00 |
|
Scott Ullrich
|
2eae7fc9fe
|
* Remove path from racoon grep
* Remove [r] from racoon and simply grep for racoon
|
2007-06-02 20:51:33 +00:00 |
|
Scott Ullrich
|
c9b0942dac
|
Correct ps location
|
2007-06-02 20:49:34 +00:00 |
|
Scott Ullrich
|
bcc49d35d1
|
Instead of skipping DHCP server on LAN in a bridged environment, simply log an error letting the operator know that DHCP Server is enabled on LAN in a bridging environment.
|
2007-05-31 16:33:03 +00:00 |
|
Scott Ullrich
|
06110a2a3a
|
Do not check for disabled nat reflection before installing tftp helper.
|
2007-05-30 01:22:06 +00:00 |
|