Commit Graph

8320 Commits

Author SHA1 Message Date
Chris Buechler
36362c616d touch up text
Ticket #1644
2008-02-14 02:25:44 +00:00
Chris Buechler
3d897248d2 fix typo
Ticket #1645
2008-02-12 23:06:28 +00:00
Scott Ullrich
b5aebbf5d1 Make scripts XSS input safe.
Pointed-out: by hoopercharles@gmail.com
2008-02-12 04:33:24 +00:00
Chris Buechler
6c13d55182 touch up text
Ticket #1627
2008-02-07 23:56:18 +00:00
Seth Mos
fa22abe57b MFC from releng_1. Do not run pfctl -ss 4 times.
Dated Nov 15 2007
2008-02-06 21:20:22 +00:00
Scott Ullrich
b5c12e7b11 Do not show Apply button twice. 2008-02-06 00:10:08 +00:00
Scott Ullrich
8dd629d06b Correctly deterimine if /boot/loader.conf exists. 2008-02-05 17:40:18 +00:00
Seth Mos
73a9865736 With the current Racoon we need to inform that we are reloading
our SPD entries with a SIGHUP
2008-02-05 09:11:59 +00:00
Scott Ullrich
b096010e1c Only check disabled/enabled status on OPTX interfaces. WAN and LAN are
assumed to always be enabled.
2008-02-04 21:57:57 +00:00
Scott Ullrich
1288bfc1dc When a CARP parent interface is down or disabled, ignore the CARP IP
address as this will introduce a panic situation in FreeBSD.
2008-02-04 21:09:59 +00:00
Chris Buechler
de6b5ecee9 correct bogons file location 2008-02-03 23:19:46 +00:00
Scott Ullrich
8de7d3615b Tag as RC5. We might not release RC5 but we need to seperate the previous
release from all of the misc changes made this week.  All of the changes
should work okay but it will be good to know this information if a bug
report comes in so we can seperate the last release from what is in the
tree at this point.
2008-02-03 20:10:42 +00:00
Chris Buechler
62d3ad831c Prevent users from entering queue names that break the ruleset
sort of related to Ticket #1612
2008-02-03 06:00:59 +00:00
Chris Buechler
a8e5fc7ffb Trim long interface names to prevent broken rulesets.
Ticket #1612
2008-02-03 05:47:06 +00:00
Scott Ullrich
0a532641b4 Do not load CARP IP address if we cannot find a matching subnet on a
real interface.
2008-02-03 05:06:05 +00:00
Chris Buechler
fcc2fc6c3c shorten description field to prevent creating rulesets that won't load.
Ticket #1619
2008-02-03 04:37:29 +00:00
Seth Mos
cf7a51617b Update to racoon-0.7-cvs with Timo Teras patches.
Use setkey -f because spd loading works normally now.
2008-02-01 21:32:13 +00:00
Scott Ullrich
008da4cf1d Do not pass traffic on user proxy which can cause deadlocks in freebsd 2008-01-31 06:19:51 +00:00
Scott Ullrich
2eaa947d17 Lower threshold to 86. Noticed a scenario where slbd was chewing up
roughtly 91% of the cpu.
2008-01-31 04:36:45 +00:00
Scott Ullrich
0e7fe2ade7 Cleanup if(). Remove additional save message. 2008-01-29 00:10:19 +00:00
Scott Ullrich
3b7abf1c4a Use ip_in_subnet() to correctly determineif we have a matching real ip
address defined somewhere before allowing the CARP address to be added.
2008-01-28 23:56:49 +00:00
Chris Buechler
ee9551786b touch up text
Ticket #1610
2008-01-27 20:48:10 +00:00
Scott Ullrich
276a350f68 When changing the IP address, reassign all static routes.
Tested-by: Gary Buckmaster via ORU
2008-01-22 21:31:41 +00:00
Chris Buechler
555a00ac9d Revert dhclient timeout to the default of 60 seconds (originally didn't realize it was in there two more times). 2008-01-22 03:20:36 +00:00
Chris Buechler
855645a8c3 Remove accidentally added debug code 2008-01-21 06:57:36 +00:00
Chris Buechler
b448e2cb09 Revert dhclient timeout to the default of 60 seconds. Setting it to 20 minutes
is a bit insane (if you haven't gotten a reply in 60 seconds, you aren't
getting one), and causes systems to hang 20 minutes during
"Configuring WAN" at boot when there is no DHCP server available
on the WAN interface.
2008-01-21 06:54:51 +00:00
Chris Buechler
17912fda5d clarify wording in tabs to appropriately reflect purpose of these pages 2008-01-16 07:13:09 +00:00
Scott Ullrich
9d8a09fad2 Only process /boot/loader.conf if it exists avoiding a
somehwhat ugly looking error on cdrom boot.
2008-01-16 01:23:00 +00:00
Seth Mos
0282154320 attempt loading SPD entries 4 times 2008-01-15 17:29:04 +00:00
Seth Mos
989f0b0827 Somehow sending a SIGHUP before flushing and reloading works better then
after. Technically a SIGHUP to racoon should not do anything.
2008-01-15 11:36:24 +00:00
Seth Mos
81cf1a89f3 Flush both SA and SPD entries 2008-01-15 08:22:13 +00:00
Scott Ullrich
4311b11448 Fix copy and pasto. 2008-01-15 01:24:42 +00:00
Scott Ullrich
555db5b9d8 * Use correct package name
* Include filter rules
2008-01-15 01:19:07 +00:00
Scott Ullrich
70c51c7719 Add sipproxd hooks. 2008-01-14 23:17:37 +00:00
Seth Mos
abd9c0367f Make 3 passes at loading the SPD entries as this will fail on large configurations > 250 tunnels
Tested by smos@ 399 tunnels 239 active, ok by sullrich@
2008-01-14 21:37:47 +00:00
Scott Ullrich
0aeab9f19f Make sure $d_fwupenabled_path is defined since it is initially defined
in guiconfig.inc.   At some point in the future these variables should
be moved to globals.inc.
2008-01-12 22:43:45 +00:00
Chris Buechler
68ca6bf8ba remove DynDNS cache in services_dyndns_reset()
Ticket #1589
2008-01-12 19:21:22 +00:00
Chris Buechler
695f801f92 touch up text
Ticket #1586
2008-01-12 19:03:31 +00:00
Scott Ullrich
4394fafc35 Automatically assume the embedded platform on update if the platform
is set to embedded or wrap.  We do not include any kernels outside
of embedded anyways for this paticular platform.
2008-01-11 18:00:37 +00:00
Scott Ullrich
2ebbc64270 * Do not allow the image to go read only during download / upgrade ops
* If a previous /root/firmware.tgz file exists before download, unlink
  the file to avoid a out of space error if the prior download operation
  happens to fail (or if / becomes rw again)
2008-01-11 17:53:14 +00:00
Chris Buechler
7e74b5bf4c touch up text
Ticket #1578
2008-01-11 04:14:23 +00:00
Chris Buechler
9ba4e2e3e7 touch up text
Ticket #1577
2008-01-11 03:58:29 +00:00
Chris Buechler
34b1223400 touch up text
Ticket #1576
2008-01-11 03:47:14 +00:00
Chris Buechler
fa17183fd8 remove unnecessary grep
Ticket #1573
2008-01-10 03:31:56 +00:00
Chris Buechler
5c99e8ef6f touch up text
Ticket #1569
2008-01-08 02:14:44 +00:00
Chris Buechler
d6528238b5 touch up text
Ticket #1569
2008-01-08 02:04:59 +00:00
Scott Ullrich
80e3d298fe Do not reset every hour. Wait until the process goes out of control. 2008-01-07 21:38:00 +00:00
Chris Buechler
a43b93942e add vr(4) VLAN support
Ticket #1561
2008-01-05 07:43:19 +00:00
Scott Ullrich
211c96c8aa Time to bump to 1.2-RC4. This RC is dedicated to Adam Armstrong. 2008-01-05 05:45:57 +00:00
Scott Ullrich
2f381b82fa Reapply patches from ticket #1532 2008-01-05 05:04:57 +00:00