Commit Graph

21833 Commits

Author SHA1 Message Date
jim-p
30adceda1f Disable the BEAST protection by default because the GUI *will* break if you use this and have a Hifn card installed. Others may break similarly. Change it into a checkbox option, off by default, and automatically disable it if a conflicting card has been detected. 2013-07-18 09:35:47 -04:00
jim-p
436a9a88b8 Sync p0f database for OS detection w/current file from FreeBSD 2013-07-17 13:48:42 -04:00
jim-p
bb23692036 This is not a percentage 2013-07-17 11:51:37 -04:00
Renato Botelho
09f26fb7c5 Remove remaining hardcoded theme names 2013-07-17 12:29:27 -03:00
jim-p
dc3fc54a08 Don't blow up the config if someone enters int'l chars in an LDAP attribute/DN field. Ticket #2227 2013-07-17 10:53:21 -04:00
jim-p
298020b2b6 Add LDAP server options to control UTF8-encoding of parameters. Fixes #2227. While I'm here, add a checkbox to prevent the stripping of @ from the LDAP username if the user wants the full name transmitted. 2013-07-17 10:15:21 -04:00
jim-p
f8b0077858 Some more tweaks to state and mbuf update/output on dashboard widget. 2013-07-16 16:09:16 -04:00
jim-p
84962c6306 Use some easier to distinguish colors for mbuf graph 2013-07-16 15:56:05 -04:00
jim-p
bdc3d5ca64 Add a meter for states, too 2013-07-16 15:39:33 -04:00
jim-p
48a0149690 Fixup mbuf stats function 2013-07-16 15:39:32 -04:00
Renato Botelho
eb8e0aa9d6 Call interface_ipalias_cleanup() after $interface is initialized, and get current IP after it 2013-07-16 16:34:47 -03:00
jim-p
e4a0be9bee Make mbufs update via ajax 2013-07-16 15:08:58 -04:00
jim-p
980b9cc6f8 Fix ids 2013-07-16 15:02:42 -04:00
jim-p
476429921d Fix an occasional "blank" cpu freq printing that shouldn't happen. 2013-07-16 14:55:31 -04:00
jim-p
e7da869843 Make mbuf usage a meter, too. 2013-07-16 14:51:32 -04:00
jim-p
0425af7289 Show totals for memory, swap, and disk usage. 2013-07-16 14:42:32 -04:00
jim-p
ae9cb658ae Add an RRD graph for MBUFs under system. Tweaks welcome. 2013-07-16 14:14:10 -04:00
jim-p
8a0c14c3e4 If an account has SSH keys, show them, don't show the checkbox to add keys. Fixes #2729 2013-07-16 13:27:57 -04:00
jim-p
7a10e3ebe7 Don't generate reflection rules if reflection is disabled for that rule. 2013-07-16 09:52:27 -04:00
Ermal
4e69371b20 Do not break ppp type interfaces on v6 2013-07-16 12:52:37 +00:00
Ermal
5128e0feb0 For ppp interfaces the real interface is not present anymore in the xml config section of the interface. Due to this do some more work on extracting the real interface when ipv4 is pppoe/ppp/... and ipv6 configuration files will use the wrong interface to request information from provider. Reported-by: http://forum.pfsense.org/index.php/topic,64483.0.html 2013-07-16 07:47:40 +00:00
Ermal
cd577ebd10 Enable filtering on ipfw sysctl not dependent on ipfw module otherwise issue reported here http://forum.pfsense.org/index.php/topic,64412.0.html happens 2013-07-15 20:05:50 +00:00
Ermal
1ed5aaa83a Ignore errors/warnings from these calls 2013-07-15 13:58:08 +00:00
Jim P
3487a5c26f Merge pull request #683 from dhatz/RELENG_2_1
support mitigating BEAST attack, see http://forum.pfsense.org/index.php/topic,63001.0.html
2013-07-14 13:14:07 -07:00
Phil Davis
23ea4d2a6a services_dhcrelay6_configure developerspew debug text fix 2013-07-14 14:49:01 -04:00
Phil Davis
64ad3cc8b5 Start DHCrelay6 on boot 2013-07-14 14:48:56 -04:00
Phil Davis
fa535f758b Correctly decide if dhcrelay is enabled 2013-07-14 14:24:09 -04:00
Phil Davis
b5cd5163c7 Teach service start stop restart about dhcrelay6 2013-07-13 14:52:39 -04:00
Phil Davis
d86ec4e075 Consistent dhcrelay6 pid file location 2013-07-13 14:52:31 -04:00
Renato Botelho
63b8c4db3b Fix #3091, fix bad var assignment 2013-07-13 11:42:39 -03:00
Warren Baker
74bd3c3f7f Substitute Product name in privileges 2013-07-12 09:58:44 +02:00
Ermal Luçi
c1ecdca2fb Merge pull request #709 from razzfazz/RELENG_2_1
properly handle custom-v6 dyndns entries in web interface
2013-07-11 23:44:08 -07:00
Daniel Becker
6acbb7d2f1 properly handle custom-v6 dyndns entries in web interface 2013-07-11 15:49:02 -07:00
jim-p
fd4fc12087 Move variable declaration to the top, declare it global before defining. Fixes #3090 2013-07-11 15:18:18 -04:00
jim-p
469e33330d Remove irrelevant comment. 2013-07-11 15:18:17 -04:00
Ermal Luçi
d45fdd2a01 Fix copy/pasto introduced in previous commit. 2013-07-11 16:03:05 +02:00
Ermal Luçi
03ffccb928 Merge pull request #707 from razzfazz/RELENG_2_1
Merge to RELENG_2_1: Support for protocol 41 in rules, support for HE.net AAAA record updates, and support for custom DynDNS URLs with IPv6.
2013-07-11 00:02:15 -07:00
Daniel Becker
b54b997d2d Add support for custom IPv6 DDNS. 2013-07-10 19:05:42 -07:00
Daniel Becker
c3101e14c0 Change separator as per JimP's request. 2013-07-10 19:01:36 -07:00
Daniel Becker
93749c103f Add front-end support for dyndns AAAA updates 2013-07-10 19:00:46 -07:00
Daniel Becker
e4ba18aa6e Clean up HE.net AAAA backend support. 2013-07-10 19:00:36 -07:00
Daniel Becker
5a55d9d7d4 Add backend support for HE.net AAAA record updates.
Defines a new DynDNS provider 'he-net-v6' for updating AAAA entries on
dns.he.net.
2013-07-10 19:00:03 -07:00
Daniel Becker
26f80aff92 Add support for protocol 41 in rules. Fixes #3007. 2013-07-10 18:46:29 -07:00
jim-p
f34fcff4b4 Don't automatically add hidden rules to pass all IPv6 traffic to/from delegated prefixes. Default IPv6 from LAN -> any rule covers outbound properly as-is, and WAN rules shouldn't pass in that permissively. Also the prefix length calculation was off and the LAN rule(s) would be too permissive anyhow. 2013-07-10 15:49:19 -04:00
Ermal
bc59bcff38 Implement proper releasing of pipes allocated based on CPzone. Keep track of which zone a pipe is and release those pipes during disabling/deleting of zone. Ticket #3062, Pull request #698 2013-07-10 15:28:00 +00:00
Ermal
de2fe652ca Use empty to cover all needed cases as suggested on #3062. Suggested from pull request #698 2013-07-10 15:27:45 +00:00
jim-p
a19fcb824c Add independent logging choices to disable logging of bogon network rules and private network rules. Add upgrade code to obey the existing behavior for users (if default block logging was disabled, so is bogon/private rule blocking). Also add a checkbox to disable the lighttpd log for people who don't want their system log spammed by lighty. 2013-07-09 12:00:43 -04:00
jim-p
e7bc770e1a Fix the "use ICMP" function for traceroute. 2013-07-09 11:08:18 -04:00
Renato Botelho
e91abcc96e Fix #3079, add a section for DHCPv6 Server backup 2013-07-08 21:10:14 -03:00
Chris Buechler
174e151df8 fix description 2013-07-08 09:20:03 -05:00