Commit Graph

17547 Commits

Author SHA1 Message Date
Seth Mos
2fb056d81a More DHCPv6 server fixes, split the function out into seperate v4 and v6. Make the router advertisement stand alone on the dhcp server page. 2011-05-04 10:58:40 +02:00
Seth Mos
ab1047d46d Make sure to send both the managed and other config flags. 2011-05-03 21:20:25 +02:00
Seth Mos
dcb846e3cd Merge remote branch 'upstream/master'
Conflicts:
	usr/local/www/status_rrd_graph_img.php
2011-05-03 10:09:06 +02:00
Ermal
8c218e1d01 Give time to filterdns to exit gracefully and after that start a new process. 2011-05-02 22:26:56 +00:00
Ermal
9b0ddd8cf3 Resolves #1486. When sticky option is selected under advanced->misc honor it even in the relayd.conf setting. 2011-05-02 22:04:56 +00:00
Ermal
0b1321e2dc Bring back the optimization on max-packets at pf(4) level now that the issues with daemon have been identified. 2011-05-02 20:57:50 +00:00
Ermal
81e14406ba Bring back the optimization on max-packets at pf(4) level now that the issues with daemon have been identified. 2011-05-02 20:57:50 +00:00
Ermal
2dc14ea286 Now that layer7 daemon issues are resolved bring back this optimization.
Revert "Do not write ont rules anymore max-packets. This apparently was done by me in a previous commit, it helps with Ticket #636."

This reverts commit c8703797e5.
2011-05-02 20:57:50 +00:00
jim-p
b01adece6e Set default colors explicity, the theme can then override them. This prevents missing colors in themes from crashing the graphs. 2011-05-02 15:32:04 -04:00
jim-p
49825b1711 If the rrd multiplier is negative, use 5% for out instead of 95% for the 95th percentile line. 2011-05-02 14:36:04 -04:00
Ermal
3bae60be17 Add a newline to the igmpproxy config to resolve issues of it not parsing correctly the file. Reported-by: http://forum.pfsense.org/index.php/topic,36279.0.html 2011-05-02 16:53:38 +00:00
jim-p
c639315e3c Set password on the OS instead of just the gui. Fixes #1485 2011-04-29 15:43:02 -04:00
Ermal
f7ea050596 Remove static routes that are added for dns servers when allow override is allowed when a ppp interface goes down. Code borrowed from dhclient-script. 2011-04-29 18:23:11 +00:00
Ermal
a73a9886e7 Ticket #1408. Honor the allow override settings even for ppp devices. 2011-04-29 18:19:57 +00:00
Ermal
e5f3359c33 Send route delete message to blackhole. 2011-04-29 18:15:54 +00:00
Ermal
cfe9257765 Ticket #1408. Do not add static routes for automatically learned dns servers from dhcp if Allow override is not selected. 2011-04-29 18:13:57 +00:00
Ermal
9cf46050fc Correct saving of qinq specified members and also correctly destroy parent vlan when deleteing the interfaces. Also take care of attaching to netgraph now that we detach by default. 2011-04-28 21:21:11 +00:00
Ermal
a7ee577720 Remove rndtest sysctl since the kernel module is not anymore part of our kernels. Leftover noticed by: Jim 2011-04-28 20:44:31 +00:00
Ermal
2d14181b91 Remove rndtest sysctl since the kernel module is not anymore part of our kernels. 2011-04-28 20:31:28 +00:00
Ermal
27dfd84846 Bring comment up-to-date 2011-04-28 19:53:41 +00:00
Ermal
65531b4bc8 Make sure that openvpn tunnels are not impacted by hitting 'Save' on the Interface->Configuration page when assigned. 2011-04-28 19:33:18 +00:00
Ermal
d1ae97052d Use the needed variable here so hitting 'Save' from Interface->Configuration section does not leave the assigned gif interfaces without tunnel addresses. 2011-04-28 19:29:10 +00:00
Ermal
40b0c024db Correct code description during assignment 2011-04-28 19:16:18 +00:00
Ermal
d7f1891bf6 Some configurations might have gre/gif on top of carp. Make sure to handle this configurations and to bring the tunnel correctly up. 2011-04-28 19:09:00 +00:00
Seth Mos
03f824a5e5 Remove the quotes, these break the advertisement 2011-04-28 16:25:35 +02:00
Seth Mos
61fbafc2d7 Hopefully fix the router advertisement 2011-04-28 15:27:27 +02:00
Seth Mos
fcdc894353 Merge remote branch 'upstream/master'
Conflicts:
	etc/inc/pfsense-utils.inc
2011-04-28 11:33:48 +02:00
Seth Mos
753bd64dff Change the rtadvd daemon options to a more readable format that should hopefully work better. 2011-04-28 11:09:13 +02:00
Chris Buechler
1dfb77950b fix typo 2011-04-27 21:10:02 -04:00
jim-p
b0c2087e17 Comment out debug print 2011-04-27 20:25:32 -04:00
jim-p
f35abee2f7 Whitespace cleanup, code cleanup, add choice to filter on ipv4/ipv6 and also accept a subnet to filter on via the host field. 2011-04-27 12:03:09 -04:00
jim-p
c41997ce79 Allow users to select SSL/TLS+User Auth with external authentication sources. 2011-04-26 17:08:05 -04:00
jim-p
7100a85c32 No need to include head.inc twice 2011-04-26 14:37:43 -04:00
jim-p
0b9d02f367 Don't just blindly echo to the ntpd.log, it's a clog file and that will break it. 2011-04-26 10:18:12 -04:00
Seth Mos
787de45a89 Push the ipv6 routes for the local network with push route-ipv6 2011-04-26 09:05:20 +02:00
Seth Mos
97ffc51364 Add the ipv6 configuration options for routing ipv6 over the tunnel. Currently only a /64 is supported for the routed network, so use a /64 and then route the /56 2011-04-25 22:12:48 +02:00
jim-p
9f5d14ce72 Show OpenVPN instances on Status > Traffic Graphs, with descriptions. 2011-04-25 15:50:53 -04:00
Seth Mos
b1ba04cf4a Add ipv6 tunnel remote subnets 2011-04-25 19:17:30 +02:00
Ermal
e3dc055a4f Actually correct check meaning. 2011-04-22 19:48:29 +00:00
Ermal
bd17f93d4a Do not an ip of all 1s as a gateways since it cannot be pinged. 2011-04-22 19:23:37 +00:00
Ermal
bce14123ad Actually call interfaces_carp_setup after the carp interfaces are created so carp traffic can only flow after we have all vips up and running. This prevents premption more early than necessary. Ticket #1432. 2011-04-22 18:28:01 +00:00
jim-p
d8da6350bc Provide a method for rebrands to force a theme. Otherwise upgrading nanobsd from pfSense to a rebrand image without the theme in the config.xml will have a broken GUI since the theme isn't there. 2011-04-22 11:23:43 -04:00
Chris Buechler
de7222fbf0 correctly unmount drives where a config doesn't exist 2011-04-21 20:31:14 -04:00
Ermal
2d4003aab1 If the bandwidth value is coming from radius scale it up to the requested Kbit/s unit. 2011-04-21 21:39:03 +00:00
jim-p
908cbaf91a Set user when removing privileges, otherwise things like the user's shell would not be reset until pressing save, which is inconsistent with that step not being needed when adding privileges. 2011-04-21 15:33:13 -04:00
jim-p
1f0c76cfd7 Fix PPPoE upgrade, the <pppoe> tag is considered an array these days and the upgrade code wasn't treating it properly, accessing it directly instead of using the first entry ([0]). Fixes #1439 - PPPoE credentials upgrade properly now. 2011-04-21 13:10:32 -04:00
jim-p
46698c3f3c Reject encrypted CA private keys. Resolves #1446 2011-04-21 10:33:38 -04:00
jim-p
0cc5ab4226 Confirmed working fix for ticket #1417 - with this change I have two-way connectivity on Site-to-Site (SSL/TLS) with iroutes. 2011-04-21 09:59:09 -04:00
jim-p
bd24573bb0 Backing out changes from ticket #1417, it was not a valid openvpn config that the user was trying to make. 2011-04-19 19:59:29 -04:00
Scott Ullrich
673ee7b1e8 Harden SSL settings a bit. Verified OK with @cmb and @billm 2011-04-19 17:06:00 -04:00