mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity
25,166 Commits 27 Branches 53 Tags 494 MiB
24dadbee06
Commit Graph

13253 Commits

Author SHA1 Message Date
Chris Buechler
24dadbee06 add granular control of state timeouts. Ticket #4509 
Conflicts:
	etc/inc/filter.inc
 2015-03-11 13:29:44 -05:00
Renato Botelho
0d443728d5 Explicit disable ssl.use-compression on lighty config. It should fix #4230 2015-03-11 14:09:22 -03:00
Renato Botelho
3a0a59c812 Remove BEAST protection option since default cipher is now good and works with hifn cards 2015-03-11 14:03:29 -03:00
Renato Botelho
a03974a3fa Add a log message when hostres SNMP module is ignored on APU boards 2015-03-11 10:07:25 -03:00
Renato Botelho
05036071e2 Disable SNMP hostres module on APU boards until we figure out why it's crashing on this specific board. Ticket #4403 2015-03-11 09:44:27 -03:00
Chris Buechler
80dfff9a2b Leave adaptive.start and end at their defaults (60% and 120% of the state limit, respectively) if not user-overridden. 2015-03-11 01:30:14 -05:00
Chris Buechler
0f57551162 Update cipher-list in web interface to prefer PFS. Ticket #4230 2015-03-11 00:25:56 -05:00
Chris Buechler
23cb405565 Check for not up, rather than down, as there are a variety of potential 
statuses that are not up. Ticket #4502
 2015-03-10 20:21:09 -05:00
Chris Buechler
34ba4e5d32 Need global $ipsec_idhandling here. 2015-03-10 19:20:16 -05:00
Chris Buechler
24acc8f466 Don't enable interfaces_use by default. Add checkbox to enable on Advanced 
tab, in case there are scenarios where it's desirable. Ticket #4341
 2015-03-10 17:20:42 -05:00
Phil Davis
7926283050 Code style etc inc vwx3 
rebased version with conflicts resolved due to a bunch of recent changes
in vpn.inc
 2015-03-09 14:06:24 -03:00
Renato Botelho
7ac524dd18 Merge pull request #1541 from phil-davis/Code-Style-etc-inc-z 2015-03-09 06:59:14 -03:00
Renato Botelho
588d3cf606 Check if it's an array before call foreach(). Ticket 2015-03-06 11:45:36 -03:00
Renato Botelho
b93bc1fd49 Stop trying to fix dns_split during strongswan config generation, we have an upgrade code in place for that, it should fix #4418 2015-03-06 11:29:25 -03:00
Renato Botelho
877740eed5 dns_split was a comma separated list and moved to use space as separator, provide upgrade code to make sure old configs are converted. Since there was a config upgrade version 11.7 only on master, I pushed it to 11.8 and used dns_split one as 11.7 to be able to backport it to RELENG_2_2. Ticket #4418 2015-03-06 11:28:40 -03:00
Chris Buechler
a115e2e14a Use get_failover_interface here to find appropriate interface. Ticket #4482 2015-03-06 00:55:42 -06:00
Chris Buechler
c406924f3e same change as previous commit, for IPv6. Ticket #4482 2015-03-06 00:45:37 -06:00
Chris Buechler
29de629ebd Use the parent interface, not the _vip for interfaces_use. Part of Ticket #4482 2015-03-06 00:39:31 -06:00
Chris Buechler
df96662660 Destroy stf interface when 6rd or 6to4 tunnel is disabled. Fixes #4471 2015-03-05 23:49:14 -06:00
Phil Davis
a97a77a2a5 Be nicer when checking if alias is numeric 
Because an ordinary port can be numeric here.
Forum https://forum.pfsense.org/index.php?topic=89906.0
 2015-03-06 10:12:08 +05:45
Chris Buechler
5c7c369f5f Remove the harden-glue option entirely and hard code it to yes. Ticket #4402 2015-03-05 19:35:12 -06:00
Chris Buechler
9bfb45ab28 Skip any numeric-only aliases in the ruleset to prevent errors from those 
who configured them on previous versions where that was allowed. Ticket
 2015-03-04 15:46:30 -06:00
jim-p
24ad8e26a6 Add missing comma. Fixes #4485 2015-03-04 07:23:00 -05:00
Chris Buechler
e03b6bbcf5 Enable UnicastOnly in radvd for ovpn* interfaces. Ticket #4455 2015-03-03 23:40:03 -06:00
jim-p
1dbe220c9b Tweak the carp demotion factors slightly to avoid CARP transitions that are most likely unnecessary. 2015-03-03 14:19:25 -05:00
Phil Davis
6cf2c8b0a0 Code style etc inc z 
end of code style review for the etc folder tree
 2015-03-03 17:51:34 +05:45
Renato Botelho
adbbd4f976 Merge pull request #1533 from phil-davis/Code-Style-etc-inc-u 2015-03-03 08:03:57 -03:00
Renato Botelho
52886a07f8 Merge pull request #1532 from phil-davis/Code-Style-etc-inc-r-s 2015-03-03 08:02:23 -03:00
Renato Botelho
cb743abb72 Merge pull request #1531 from phil-davis/patch-2 2015-03-03 08:01:26 -03:00
Chris Buechler
58c58dcfa7 Remove "Prefer old SA" option, and ignore it in all existing configurations. Breaks things in many cases with strongSwan. For the very rare circumstances where this is actually desirable, it's just a sysctl that can be set in tunables. 2015-03-03 00:16:33 -06:00
Phil Davis
751533a2c8 Code style etc inc u 2015-03-03 00:39:50 +05:45
Phil Davis
61e047a503 Code style etc in r s 2015-03-03 00:11:10 +05:45
Phil Davis
860842334c Be safe use require_once in zeromq 
I was testing code and just doing stuff like:
require_once("zeromq.inc");
in Diagnostics->Command Prompt, PHP Execute
That brings an error because underneath that PHP Execute code it has already included auth.inc
I guess zeromq.inc is used quite separately to the rest of the system, and must be OK just having a "require" here. But it seems safer to always use require_once, just in case it gets called in a new way/sequence.
Comments welcome.
 2015-03-02 22:48:59 +05:45
Renato Botelho
8f5f40c9fc Merge pull request #1529 from phil-davis/Code-Style-pkg-utils 2015-03-02 09:10:38 -03:00
Renato Botelho
0f6a1db103 Merge pull request #1528 from phil-davis/Code-Style-putil 2015-03-02 09:08:31 -03:00
Renato Botelho
76de1b3fee Merge pull request #1526 from phil-davis/Code-Style-openvpn 2015-03-02 08:55:03 -03:00
Renato Botelho
969a579330 Merge pull request #1525 from phil-davis/Code-Style-etc-inc-i-to-p 2015-03-02 08:51:08 -03:00
Phil Davis
839966e396 Ancient bug on upgrade_014_to_015 
This code looked silly the way it was, with the construct:
$var = $var;
unset($var);

Seems it was accidentally changed to this way many years ago by 588a183b0e
IMHO we want to do the conversion to $config['system']['gateway'] here so that later config conversion will then process it as expected.
Note that in a current (2.2) config there is not $config['system']['gateway'] but that is switched over later in upgrade_021_to_022 - which switches back to $config['interfaces']['wan']['gateway'] and then later config conversions do their thing with that.
I guess this will only effect people who upgrade from some really old config (or monowall?)
 2015-03-01 21:31:48 +05:45
Phil Davis
49aec489d8 Code style for pkg-utils 2015-02-28 23:09:31 +05:45
Phil Davis
23a193dabc Code style for pfsense-utils 2015-02-28 20:25:02 +05:45
Phil Davis
472da675cc Semi-colon went AWOL in dyndns.class 
after putting it back the code runs much better :)
 2015-02-28 18:41:39 +05:45
Phil Davis
ef00af3c3a Code style openvpn.inc 2015-02-28 14:46:21 +05:45
Phil Davis
b37a2e8c90 Code style for etc inc i to p 2015-02-28 14:25:49 +05:45
Renato Botelho
139deffb0f Merge pull request #1524 from phil-davis/Code-Style-Guide-Interfaces-inc 2015-02-27 11:35:13 -03:00
Renato Botelho
e59410d569 Merge pull request #1523 from phil-davis/patch-2 2015-02-27 10:57:54 -03:00
Renato Botelho
fd74eeeaa6 Merge pull request #1522 from phil-davis/Code-Style-Guide-etc-inc-f-to-g 2015-02-27 10:36:49 -03:00
Phil Davis
cf73302fd7 Code style guide interfaces.inc 
This is another big file that has many diffs so Github refuses to
display them. I thought it best to keep doing individual commit-pull for
ones like this.
 2015-02-27 11:13:45 +05:45
Phil Davis
918bdf0d45 More style guide changes 
In gwlb.inc at line 676 and 779 I added an extra set of brackets. In the
"if" clause as a whole there were a mix of && and || used that were
relying on the PHP standard that && has precedence over ||
In actual fact the original code should have been working fine, the
extra brackets make sure that the intention is clear.
 2015-02-26 22:24:00 +05:45
Phil Davis
e6cbfb6528 Code style guide changes for filter.inc 2nd version 
This is the changes to filter.inc as per the commits in https://github.com/pfsense/pfsense/pull/1521 but done in just 1 clean commit.
 2015-02-26 21:44:30 +05:45
jim-p
a41d910c6e Fix type (trime->trim) 2015-02-26 08:26:31 -05:00