mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity
21,785 Commits 27 Branches 53 Tags 494 MiB
2b125a17e9
Commit Graph

21785 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
jim-p
2b125a17e9 Be a lot more verbose in the logs during package reinstallation. 2013-06-28 14:54:12 -04:00
jim-p
866b1d615d If the script_name is blank, try another method to locate what our filename is so we don't log an empty script name. 2013-06-28 14:54:04 -04:00
jim-p
210eea2caa Fix CP status sorting to properly respect the zone. 2013-06-28 12:36:44 -04:00
Ermal Luçi
4023ebb063 Merge pull request #678 from johnbyronent/master 
Add  Dyn Dns Euro Dns Provider
 2013-06-28 00:04:41 -07:00
John Byron
ec66caa672 DynDns Euro Dns Provider 
Add Dyn Dns Euro Dns Provider
 2013-06-27 23:31:34 +02:00
jim-p
9d79318707 Add a note about the LDAP hostname matching the server cert's CN. 2013-06-27 14:34:54 -04:00
Ermal Luçi
d7df6a6ea0 Merge pull request #677 from plinss/master 
Proposed fix for bug #3057
 2013-06-25 00:46:41 -07:00
plinss
8c78e692ca Update services.inc 
Turn on AdvManagedFlag and AdvOtherConfigFlag for both 'managed' and 'assist' ramodes.
 2013-06-24 22:58:45 -06:00
jim-p
4efdada8f3 Add option and code to sync Auth servers with XMLRPC. 2013-06-24 15:33:16 -04:00
jim-p
fc1f4960ca Add AAAA support to RFC2136 updates. Based on http://forum.pfsense.org/index.php/topic,50164.msg269138.html#msg269138 2013-06-24 13:33:34 -04:00
Renato Botelho
d13b736330 Fix #2887, based on NAT states that will be killed, also kill firewall states for same source and destination 2013-06-24 11:40:22 -03:00
Ermal Luçi
e06263e112 Merge pull request #674 from PiBa-NL/SystemGroupmanager_16charName 
System: Group manager, set max length for groupname to 16 characters
 2013-06-22 03:55:15 -07:00
PiBa-NL
3db408b303 System: Group manager, set max length for groupname to 16 characters 2013-06-22 00:40:01 +02:00
Ermal Luçi
b6aecb2798 Merge pull request #673 from phil-davis/master 
Use "Probe Interval" to describe this advanced gateway parameter
 2013-06-21 02:06:47 -07:00
Phil Davis
490cd4388b Use Probe Interval on gateway advanced settings 2013-06-21 08:33:29 +05:45
jim-p
94744c2710 Correct gateway down/probe interval text. 2013-06-19 08:47:21 -04:00
Ermal
6870b5cebe Correct the comments describing the error with correct values 2013-06-19 08:42:15 +00:00
jim-p
d5e4f7c947 Use the name of the interface (lan, opt1, etc) rather than a loop-derived number for the DHCP failover peer name. This should be more accurate in cases where DHCP changes for interfaces happen out of order on CARP clusters, or when somehow an interface's configuration exists on one but not the other. 2013-06-18 15:55:57 -04:00
jim-p
40e6086ada Allow removing CA and Cert entries that are blank/empty. Fixes #3005 2013-06-18 14:43:25 -04:00
jim-p
7ddfa92266 Add an option to force IPsec to reload on failover, which is needed in some cases for IPsec to fail from one interface to another. Ticket #2896 2013-06-18 14:00:41 -04:00
jim-p
6743ab2887 Add a brief description about bandwidth vs bursting. 2013-06-18 13:31:56 -04:00
jim-p
57c83fd606 Add a field to allow rejecting DHCP leases from a specific upstream DHCP server. 2013-06-18 13:00:26 -04:00
jim-p
f03cf8920b A better fix for conditionally including burst. 2013-06-18 12:01:50 -04:00
jim-p
012cd3ba99 Burst of 0 is also valid 2013-06-18 11:57:20 -04:00
jim-p
f1a17b1a08 Only add burst if a burst is defined 2013-06-18 11:53:39 -04:00
jim-p
45e12bad5c No need for this block of code, it will always have flags by this point if they are needed. 2013-06-18 11:01:57 -04:00
jim-p
5015ec4cd0 Ensure that we only add a state type on pass, and that we only add flags to a TCP reject rule if they were not added previously. Fixes #3050 2013-06-18 10:54:04 -04:00
jim-p
d17c7b79f1 Change test after IPsec apply to check for any value >= 0. If a user has hostnames vpn_ipsec_configure() now returns the number of hostnames, so the previous test failed and the "apply changes" button would never go away. 2013-06-18 10:05:30 -04:00
Renato Botelho
dc21d4d561 Fix #3049, set $config as global to it can be read 2013-06-18 07:48:12 -03:00
Renato Botelho
ab3ab2acc2 Allow user to set interval between attempts to resolve hostnames configured on aliases 2013-06-17 12:24:46 -03:00
Ermal
4981f88105 Include the burst size in the limiter. Submitted-by: http://forum.pfsense.org/index.php/topic,62470.0.html 2013-06-17 13:25:43 +00:00
Ermal
615d7f0a59 Add warning comment about missing IPv6 implementation 2013-06-17 09:27:34 +00:00
Ermal
fafcae72dd Add used binary 2013-06-17 09:25:58 +00:00
Ermal
bf8c7971fc Remove referenced binary not used anymore 2013-06-17 09:25:03 +00:00
Ermal
4cbc0ae995 Remove unused code and spurious alert 2013-06-17 09:23:32 +00:00
Ermal
de82ec90ab Use file_put_contents for simplicity and readbility 2013-06-17 09:23:01 +00:00
Ermal
06886ae39b * Use when needed the family for get_real_interface 
* During dhcp setup use -n for cp to avoid coping uselessly
 2013-06-17 08:59:43 +00:00
Ermal
be544a5ebc Use family parameter for v6 to get correct interface 2013-06-17 08:26:49 +00:00
Ermal
8026f19c93 Remove useless variable and also correct some style 2013-06-17 08:12:38 +00:00
Ermal
81d0281d61 Do not do the same tricks here that are done on get_real_interface but just call the function directly 2013-06-17 08:05:47 +00:00
Ermal
314b9b2c2e Get interface from inet6 domain 2013-06-17 08:00:12 +00:00
Ermal
a432c1322d Use trim rather than str_replace. Also no need to sleep anymore since dhcp will configure first the interface 2013-06-17 07:59:29 +00:00
Ermal
1944af4152 Remove unreferenced binaries. correct some formatting and also to make function clear to track correct the curly placement 2013-06-17 07:54:33 +00:00
Ermal
12f77b0336 Provide full path to route binary 2013-06-17 07:44:53 +00:00
Ermal
59b9908920 Provide full path to route binary 2013-06-17 07:43:58 +00:00
Chris Buechler
4cdf35a433 Don't flip the IPv6 allow setting just because people are upgrading. Just upgrading versions shouldn't change this behavior. As much as most of us would like people to start deploying IPv6, the vast majority aren't going to be immediately post-upgrade, and changing this can change the firewall policy behavior by allowing v6 that previously wasn't allowed. Upgrades should never change the firewall behavior like that. At the time it was done, everyone using the 2.1 code base was using it for IPv6, so of course it tripped up quite a few people. 2013-06-17 00:32:27 -05:00
Chris Buechler
9a0a9fc1a8 not true you have to log in again since HTTP basic auth was deprecated. 2013-06-17 00:23:50 -05:00
Chris Buechler
a6c032978f add MSS clamping to setup wizard. Now that MTU and MSS are separate, the MTU description was wrong, and both need to be there. 2013-06-17 00:16:29 -05:00
Chris Buechler
e8ddd3a89a TCP flags are valid on any type of rule, don't skip them on block or reject rules 2013-06-14 19:07:38 -05:00
Renato Botelho
df78d8cc18 Fix max length for wpa passphrase, it fixes #3034 2013-06-14 16:33:58 -03:00