mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity
21,730 Commits 27 Branches 53 Tags 494 MiB
2cfde694da
Commit Graph

21730 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Phil Davis
2cfde694da Handle comma-separated list arg to rc.openvpn 
The argument passed to rc.openvpn can be a comma-separated list of gateways - not just 1 gateway. Enhance the code to loop and process each gateway.
 2013-06-30 09:21:48 -03:00
jim-p
b275b65896 Be a lot more verbose in the logs during package reinstallation. 2013-06-28 14:53:26 -04:00
jim-p
f09f3d6fb9 If the script_name is blank, try another method to locate what our filename is so we don't log an empty script name. 2013-06-28 14:52:55 -04:00
jim-p
1e7fa7cd9d Fix CP status sorting to properly respect the zone. 2013-06-28 12:37:09 -04:00
jim-p
1525fe1f2d Add a note about the LDAP hostname matching the server cert's CN. 2013-06-27 14:34:00 -04:00
jim-p
69937c0527 Add option and code to sync Auth servers with XMLRPC. 2013-06-24 15:32:48 -04:00
jim-p
2aacbacf83 Add AAAA support to RFC2136 updates. Based on http://forum.pfsense.org/index.php/topic,50164.msg269138.html#msg269138 2013-06-24 13:33:02 -04:00
Renato Botelho
efe42b5a05 Fix #2887, based on NAT states that will be killed, also kill firewall states for same source and destination 2013-06-24 11:40:58 -03:00
PiBa-NL
63b69d3427 System: Group manager, set max length for groupname to 16 characters 2013-06-22 11:01:46 +00:00
Phil Davis
51f1fc586f Use Probe Interval on gateway advanced settings 2013-06-21 18:06:36 -05:00
jim-p
94fb9f2d97 Correct gateway down/probe interval text. 2013-06-19 08:45:16 -04:00
Ermal
b7d6c7f6bb Correct the comments describing the error with correct values 2013-06-19 08:42:26 +00:00
jim-p
4f0710f32f Use the name of the interface (lan, opt1, etc) rather than a loop-derived number for the DHCP failover peer name. This should be more accurate in cases where DHCP changes for interfaces happen out of order on CARP clusters, or when somehow an interface's configuration exists on one but not the other. 2013-06-18 15:54:20 -04:00
jim-p
2706c79b47 Allow removing CA and Cert entries that are blank/empty. Fixes #3005 2013-06-18 14:42:52 -04:00
jim-p
8744a1130e Add an option to force IPsec to reload on failover, which is needed in some cases for IPsec to fail from one interface to another. Ticket #2896 2013-06-18 14:03:16 -04:00
jim-p
a27403c4e6 Add a brief description about bandwidth vs bursting. 2013-06-18 13:28:46 -04:00
jim-p
850324a23e Add a field to allow rejecting DHCP leases from a specific upstream DHCP server. 2013-06-18 13:01:07 -04:00
jim-p
c32e058108 A better fix for conditionally including burst. 2013-06-18 12:01:09 -04:00
jim-p
e43fa2ac99 Burst of 0 is also valid 2013-06-18 11:57:49 -04:00
jim-p
1142199675 Only add burst if a burst is defined 2013-06-18 11:52:52 -04:00
jim-p
f63733e05b No need for this block of code, it will always have flags by this point if they are needed. 2013-06-18 11:02:48 -04:00
jim-p
57fa70112a Ensure that we only add a state type on pass, and that we only add flags to a TCP reject rule if they were not added previously. Fixes #3050 2013-06-18 10:52:29 -04:00
jim-p
bca506d431 Change test after IPsec apply to check for any value >= 0. If a user has hostnames vpn_ipsec_configure() now returns the number of hostnames, so the previous test failed and the "apply changes" button would never go away. 2013-06-18 10:06:16 -04:00
Renato Botelho
ef01b77f6d Fix #3049, set $config as global to it can be read 2013-06-18 07:48:40 -03:00
Renato Botelho
9507aa0ec0 Allow user to set interval between attempts to resolve hostnames configured on aliases 2013-06-17 12:26:23 -03:00
Ermal
b48e2e6bcc Include the burst size in the limiter. Submitted-by: http://forum.pfsense.org/index.php/topic,62470.0.html 2013-06-17 13:25:55 +00:00
Ermal
70a9e13176 Remove referenced binary not used anymore 2013-06-17 09:25:19 +00:00
Ermal
8cea45e4f8 Remove unused code and spurious alert 2013-06-17 09:24:06 +00:00
Ermal
891dfb2496 Use file_put_contents for simplicity and readbility 2013-06-17 09:23:59 +00:00
Ermal
1005484304 * Use when needed the family for get_real_interface 
* During dhcp setup use -n for cp to avoid coping uselessly
 2013-06-17 09:00:57 +00:00
Ermal
f960f9dd20 Use family parameter for v6 to get correct interface 2013-06-17 08:27:13 +00:00
Ermal
10ce1ac1cd Remove useless variable and also correct some style 2013-06-17 08:13:12 +00:00
Ermal
ca2b90ec7e Do not do the same tricks here that are done on get_real_interface but just call the function directly 2013-06-17 08:06:23 +00:00
Ermal
d90ea5ffd5 Get interface from inet6 domain 2013-06-17 08:06:16 +00:00
Ermal
08efe4e6f3 Use trim rather than str_replace. Also no need to sleep anymore since dhcp will configure first the interface 2013-06-17 08:06:08 +00:00
Ermal
6756d9eed6 Remove unreferenced binaries. correct some formatting and also to make function clear to track correct the curly placement 2013-06-17 07:55:25 +00:00
Ermal
50a88d93fd Provide full path to route binary 2013-06-17 07:55:17 +00:00
Ermal
85a389c9f1 Provide full path to route binary 2013-06-17 07:55:10 +00:00
Chris Buechler
af600fe246 Don't flip the IPv6 allow setting just because people are upgrading. Just upgrading versions shouldn't change this behavior. As much as most of us would like people to start deploying IPv6, the vast majority aren't going to be immediately post-upgrade, and changing this can change the firewall policy behavior by allowing v6 that previously wasn't allowed. Upgrades should never change the firewall behavior like that. At the time it was done, everyone using the 2.1 code base was using it for IPv6, so of course it tripped up quite a few people. 2013-06-17 00:39:36 -05:00
Chris Buechler
891ecd18f8 not true you have to log in again since HTTP basic auth was deprecated. 2013-06-17 00:24:26 -05:00
Chris Buechler
7b79e0cb85 add MSS clamping to setup wizard. Now that MTU and MSS are separate, the MTU description was wrong, and both need to be there. 2013-06-17 00:15:05 -05:00
Chris Buechler
bcd94190b1 TCP flags are valid on any type of rule, don't skip them on block or reject rules 2013-06-14 19:06:49 -05:00
Renato Botelho
2ca432514e Fix max length for wpa passphrase, it fixes #3034 2013-06-14 16:34:21 -03:00
Renato Botelho
c9322c5ceb Allow queues to be deleted, it fixes #3037 2013-06-14 15:44:48 -03:00
Renato Botelho
d60629b071 Update list of mobile service providers 2013-06-14 09:45:08 -03:00
jim-p
654ed9e0c4 Update the default firmware URL (it was still pointing to HEAD on RELENG_2_1) 2013-06-13 16:48:44 -04:00
jim-p
94860e9e5e Fix exec perms on mail.php 2013-06-13 13:13:05 -04:00
jim-p
185f24c35e Add a simple CLI mail script capable of sending an SMTP message using echo/piped input, e.g. ifconfig -a | mail.php -s"ifconfig output" 2013-06-13 13:03:37 -04:00
jim-p
95dfe4f55c Split actual SMTP send into its own function. 2013-06-13 12:52:04 -04:00
jim-p
f09926869f Add the ability to disable Growl or SMTP notifications but keep their settings intact. Remove automatic test messages on save. Add individual test buttons for Growl and SMTP that work even if the service(s) are disabled. 2013-06-13 12:19:35 -04:00