Commit Graph

8344 Commits

Author SHA1 Message Date
Scott Ullrich
2b9d9a48ba Ensure lock file is cleared after restart.
Noticed-by: mcrane via forum
2008-03-03 05:28:48 +00:00
Scott Ullrich
2701e257ce IE7 graph fixes.
Obtained-from:m0n0wall
2008-03-03 01:26:46 +00:00
Scott Ullrich
f98b71e57b Use escapeshellarg() instead of htmlentities() 2008-02-26 17:34:52 +00:00
Scott Ullrich
64141c80bf Readding file for embedded. 2008-02-24 21:07:18 +00:00
Scott Ullrich
10ed00c6f3 Moving file to /conf.default/ 2008-02-24 21:02:19 +00:00
Scott Ullrich
01dec5a560 Move file to /conf.default/ 2008-02-24 21:01:59 +00:00
Scott Ullrich
b458712246 Trigger initial wizard upon installation 2008-02-24 00:32:34 +00:00
Scott Ullrich
ac08f689b3 Get ready for 1.2-RELEASE. 2008-02-23 04:31:28 +00:00
Scott Ullrich
c5733422af Guard against javascript injection attacks
Ticket #1656
2008-02-22 00:11:58 +00:00
Scott Ullrich
59b2217456 Switch over to the newly provisioned 0.pfsense.pool.ntp.org which
ntp.org has graciously setup for pfSense.
2008-02-18 18:07:55 +00:00
Scott Ullrich
9f5b217f4f Backport -ss syslogd feature from HEAD. Only bind to 127.0.0.1 if we
are not remotely sending logs.
2008-02-18 17:44:16 +00:00
Chris Buechler
711ee16474 fix typo 2008-02-18 05:12:57 +00:00
Scott Ullrich
4d55dfba16 Remove bogus check. 2008-02-17 05:21:49 +00:00
Scott Ullrich
1b7df51e65 Ensure /tmp/y exists before running pkg_delete command. 2008-02-17 05:18:58 +00:00
Scott Ullrich
ca5de7de98 Missing global $g and $config 2008-02-17 05:16:29 +00:00
Scott Ullrich
a142c38d37 File an alert we cannot find a matching subnet for a CARP IP address. 2008-02-16 22:53:03 +00:00
Scott Ullrich
612b579a6d Do not destory CARP interface, simply delete it to avoid FreeBSD panics. 2008-02-16 22:40:00 +00:00
Chris Buechler
79ec2fe165 touch up text 2008-02-16 08:55:35 +00:00
Chris Buechler
ebcd8b53bd clarify text 2008-02-16 08:44:18 +00:00
Scott Ullrich
667889e740 Close off XSS execution hole.
Submitted-by: Charles Hooper
2008-02-14 22:14:05 +00:00
Scott Ullrich
eb5814ae59 Make sure we sync before mounting ro. 2008-02-14 18:41:55 +00:00
Scott Ullrich
d5d2c5145a * Add xmlrpc declarations missed in last commit
* MFC exec_shell() package related function
* MFC exec_php() package related function
2008-02-14 04:57:31 +00:00
Scott Ullrich
cdcb273e5e * Add merge_installedpackages_section_xmlrpc() call used for merging
specific <installedpackages><AREANAME> sub items without replacing
  the entire <installedpackages> area with just this item
* Adjust TinyDNS sync to use this new method to avoid replacing the
  entire destination <installedpackages> area which also whipes
  out all other installd package information.
2008-02-14 04:27:56 +00:00
Chris Buechler
ac65e36e9f touch up text
Ticket #1644
2008-02-14 02:32:40 +00:00
Chris Buechler
36362c616d touch up text
Ticket #1644
2008-02-14 02:25:44 +00:00
Chris Buechler
3d897248d2 fix typo
Ticket #1645
2008-02-12 23:06:28 +00:00
Scott Ullrich
b5aebbf5d1 Make scripts XSS input safe.
Pointed-out: by hoopercharles@gmail.com
2008-02-12 04:33:24 +00:00
Chris Buechler
6c13d55182 touch up text
Ticket #1627
2008-02-07 23:56:18 +00:00
Seth Mos
fa22abe57b MFC from releng_1. Do not run pfctl -ss 4 times.
Dated Nov 15 2007
2008-02-06 21:20:22 +00:00
Scott Ullrich
b5c12e7b11 Do not show Apply button twice. 2008-02-06 00:10:08 +00:00
Scott Ullrich
8dd629d06b Correctly deterimine if /boot/loader.conf exists. 2008-02-05 17:40:18 +00:00
Seth Mos
73a9865736 With the current Racoon we need to inform that we are reloading
our SPD entries with a SIGHUP
2008-02-05 09:11:59 +00:00
Scott Ullrich
b096010e1c Only check disabled/enabled status on OPTX interfaces. WAN and LAN are
assumed to always be enabled.
2008-02-04 21:57:57 +00:00
Scott Ullrich
1288bfc1dc When a CARP parent interface is down or disabled, ignore the CARP IP
address as this will introduce a panic situation in FreeBSD.
2008-02-04 21:09:59 +00:00
Chris Buechler
de6b5ecee9 correct bogons file location 2008-02-03 23:19:46 +00:00
Scott Ullrich
8de7d3615b Tag as RC5. We might not release RC5 but we need to seperate the previous
release from all of the misc changes made this week.  All of the changes
should work okay but it will be good to know this information if a bug
report comes in so we can seperate the last release from what is in the
tree at this point.
2008-02-03 20:10:42 +00:00
Chris Buechler
62d3ad831c Prevent users from entering queue names that break the ruleset
sort of related to Ticket #1612
2008-02-03 06:00:59 +00:00
Chris Buechler
a8e5fc7ffb Trim long interface names to prevent broken rulesets.
Ticket #1612
2008-02-03 05:47:06 +00:00
Scott Ullrich
0a532641b4 Do not load CARP IP address if we cannot find a matching subnet on a
real interface.
2008-02-03 05:06:05 +00:00
Chris Buechler
fcc2fc6c3c shorten description field to prevent creating rulesets that won't load.
Ticket #1619
2008-02-03 04:37:29 +00:00
Seth Mos
cf7a51617b Update to racoon-0.7-cvs with Timo Teras patches.
Use setkey -f because spd loading works normally now.
2008-02-01 21:32:13 +00:00
Scott Ullrich
008da4cf1d Do not pass traffic on user proxy which can cause deadlocks in freebsd 2008-01-31 06:19:51 +00:00
Scott Ullrich
2eaa947d17 Lower threshold to 86. Noticed a scenario where slbd was chewing up
roughtly 91% of the cpu.
2008-01-31 04:36:45 +00:00
Scott Ullrich
0e7fe2ade7 Cleanup if(). Remove additional save message. 2008-01-29 00:10:19 +00:00
Scott Ullrich
3b7abf1c4a Use ip_in_subnet() to correctly determineif we have a matching real ip
address defined somewhere before allowing the CARP address to be added.
2008-01-28 23:56:49 +00:00
Chris Buechler
ee9551786b touch up text
Ticket #1610
2008-01-27 20:48:10 +00:00
Scott Ullrich
276a350f68 When changing the IP address, reassign all static routes.
Tested-by: Gary Buckmaster via ORU
2008-01-22 21:31:41 +00:00
Chris Buechler
555a00ac9d Revert dhclient timeout to the default of 60 seconds (originally didn't realize it was in there two more times). 2008-01-22 03:20:36 +00:00
Chris Buechler
855645a8c3 Remove accidentally added debug code 2008-01-21 06:57:36 +00:00
Chris Buechler
b448e2cb09 Revert dhclient timeout to the default of 60 seconds. Setting it to 20 minutes
is a bit insane (if you haven't gotten a reply in 60 seconds, you aren't
getting one), and causes systems to hang 20 minutes during
"Configuring WAN" at boot when there is no DHCP server available
on the WAN interface.
2008-01-21 06:54:51 +00:00