Commit Graph

24977 Commits

Author SHA1 Message Date
jim-p
36dbc14aaa Allow reassignment from PPP types to DHCP. From testing, it appears to work OK, this input validation appears to be outdated.
If there is some edge case that this catches, perhaps it needs to be a more specific test.
2015-03-09 10:35:26 -04:00
jim-p
bf4ea211dd Add missing 'break' statement that broke switching from a PPP type to 'none'. 2015-03-09 10:22:53 -04:00
Phil Davis
aab23249c4 DNS Forwarder Host Override Edit make the pencil symbols appear
In most places in the GUI a little pencil symbol appears before text input fields. For example it already appears for the Host, Domain and Description fields in this very form when you "Enter additional names for this host."
But in the main 4 fields of this form, the pencil does not display.
This fixes it to be the same as elsewhere.
I guess this is the "standard" supposed to be used. If so, then I will find the other places where class="formfld unknown" has the "unknown" missing.
2015-03-09 07:01:10 -03:00
Phil Davis
39dff8e2f9 Fix password box in diag_authentication
In 2.2 when I go to Diagnostics->Authentication the password field shows the little lock icon, but the text input area starts over the top of the icon and as I type in the field the password "dots" go over the lock icon.
This does not happen in 2.1.5 - the password entry cursor sits after the lock icon. This problem is also not evident on most other password entry fields in 2.2
I stared at it for a while, then saw that in other places the password field is not literally called "password", so I thought what the heck, I will change the field name - it fixed the display issue!!! What???
Anyway, this fixes the display issue on my system. If someone knows really why having the field name/id="password" is a problem then they could fix the underlying reason - but this works around whatever is the issue.
If you think this is an OK fix then I will also find the couple of other places swhere this happens and make the same "fix".
2015-03-09 07:00:01 -03:00
k-paulius
478188c221 Add missing opening bracket 2015-03-09 06:55:20 -03:00
Chris Buechler
f973985c84 Update help to current config structure, touch up text while here. Fixes #4492 2015-03-08 00:44:06 -06:00
Chris Buechler
ede74d31d6 Check for console="comconsole* rather than just *comconsole* in loader.conf, so it doesn't match just having comconsole_speed in loader.conf. Ticket #4464 2015-03-07 14:18:23 -06:00
jim-p
7ba5aeebef Expand CARP demotion error, add button to reset demotion status. 2015-03-06 15:00:59 -05:00
Renato Botelho
c17478a649 Check if it's an array before call foreach(). Ticket 2015-03-06 11:45:30 -03:00
Renato Botelho
b47f7d65d3 Stop trying to fix dns_split during strongswan config generation, we have an upgrade code in place for that, it should fix #4418 2015-03-06 11:31:04 -03:00
Renato Botelho
edf370e7e0 dns_split was a comma separated list and moved to use space as separator, provide upgrade code to make sure old configs are converted. Since there was a config upgrade version 11.7 only on master, I pushed it to 11.8 and used dns_split one as 11.7 to be able to backport it to RELENG_2_2. Ticket #4418 2015-03-06 11:30:54 -03:00
Renato Botelho
99572c5380 Remove multiple spaces from dns_split as a seatbelt, also fix the message since field is expected to be space separated and not comma. Ticket #4418 2015-03-06 11:29:35 -03:00
Chris Buechler
9b23ce9088 touch up text 2015-03-06 03:35:47 -06:00
Chris Buechler
9c370fe6d3 Use get_failover_interface here to find appropriate interface. Ticket #4482
Conflicts:
	etc/inc/ipsec.inc
2015-03-06 00:57:11 -06:00
Chris Buechler
d8e4918f0a same change as previous commit, for IPv6. Ticket #4482 2015-03-06 00:46:04 -06:00
Chris Buechler
aeaa61435f Use the parent interface, not the _vip for interfaces_use. Part of Ticket #4482 2015-03-06 00:40:09 -06:00
Chris Buechler
c0e5ab96e7 Destroy stf interface when 6rd or 6to4 tunnel is disabled. Fixes #4471
Conflicts:
	etc/inc/interfaces.inc
2015-03-05 23:51:07 -06:00
Phil Davis
93a72cb88e Be nicer when checking if alias is numeric
Because an ordinary port can be numeric here.
Forum https://forum.pfsense.org/index.php?topic=89906.0
Conflicts:
	etc/inc/util.inc
2015-03-05 22:58:34 -06:00
Chris Buechler
95f1227e3b fix up text 2015-03-05 22:12:48 -06:00
Chris Buechler
1bfb95f38d Don't save config if input validation fails. Add input validation preventing "Harden DNSSEC Data" from being enabled if DNSSEC support isn't enabled. 2015-03-05 21:40:23 -06:00
Chris Buechler
73cdd9f0ca Remove the harden-glue option entirely and hard code it to yes. Ticket #4402 2015-03-05 19:35:59 -06:00
jim-p
5ec3f37fcf Encode and check values for filtering variables in diag_logs_filter.php 2015-03-05 10:08:52 -05:00
jim-p
033663df45 Do not render the services_unbound_acls page with an invalid ID. 2015-03-05 10:00:56 -05:00
jim-p
108be9a529 Stricter validation and encoding for traffic shaper queues. 2015-03-05 09:55:00 -05:00
jim-p
c49db63149 Jettison unused dragtable code from firewall_rules.php, it was broken and inactive and only causing trouble. 2015-03-05 09:40:32 -05:00
jim-p
d9295c2ef6 Improve validation and encoding of the zone for Captive Portal Status 2015-03-05 09:32:05 -05:00
jim-p
707ed023f4 Be more strict about the file to restore or delete when working with full backups. 2015-03-05 09:00:18 -05:00
Chris Buechler
0fe628a62f allow enabling Unbound when dnsmasq is enabled, if they're using diff
ports. Ticket #4332
2015-03-04 16:16:18 -06:00
Chris Buechler
7df02c1e87 Skip any numeric-only aliases in the ruleset to prevent errors from those
who configured them on previous versions where that was allowed. Ticket
2015-03-04 15:51:48 -06:00
jim-p
a832806cba Add missing comma. Fixes #4485 2015-03-04 07:22:36 -05:00
Chris Buechler
227e21466b Enable UnicastOnly in radvd for ovpn* interfaces. Ticket #4455 2015-03-03 23:40:46 -06:00
jim-p
0b3cf7da55 Tweak the carp demotion factors slightly to avoid CARP transitions that are most likely unnecessary. 2015-03-03 14:18:46 -05:00
Phil Davis
6e4c199b63 Make the DHCP network booting options line up
by putting the text and selection boxes into a 2-column table so that it can be rendered with the boxes lined up vertically.
2015-03-03 08:09:24 -03:00
Phil Davis
6cf3278fa7 system_groupmanager edit cancel button looks small
It looks smaller and different to the Save button. This makes it the same.
2015-03-03 08:08:38 -03:00
Phil Davis
f636bc1296 system_usermanager edit cancel button looks small
It looks smaller and different to the Save button. This makes it the same.
2015-03-03 08:08:01 -03:00
Phil Davis
1626b5ad08 Make the Power Mode selection boxes line up
by putting the text and selection boxes into a 2-column table so that it can be rendered with the boxes lined up vertically.
2015-03-03 08:07:12 -03:00
Phil Davis
db949a1904 Standardise power mode selection boxes
I noticed that this looked a little odd, the boxes for AC and Battery Power Mode are 1 after the other on the same line, then the 3rd box for unknown power mode is on a new line.
Maybe make them all on their own line, like this?
2015-03-03 08:07:08 -03:00
Phil Davis
bd5a82681d Add missing BR tags and fix display with pfsense_ng_fs theme
Fixes #4481
Similar issue to commit 5cfd948144
Note: services_dhcpv6_edit.php - these fields are not present so nothing to edit/fix.
2015-03-03 08:05:52 -03:00
Phil Davis
603a97cb57 Be safe use require_once in zeromq
I was testing code and just doing stuff like:
require_once("zeromq.inc");
in Diagnostics->Command Prompt, PHP Execute
That brings an error because underneath that PHP Execute code it has already included auth.inc
I guess zeromq.inc is used quite separately to the rest of the system, and must be OK just having a "require" here. But it seems safer to always use require_once, just in case it gets called in a new way/sequence.
Comments welcome.
2015-03-03 08:01:40 -03:00
Chris Buechler
911cc213ab Remove "Prefer old SA" option, and ignore it in all existing configurations. Breaks things in many cases with strongSwan. For the very rare circumstances where this is actually desirable, it's just a sysctl that can be set in tunables. 2015-03-03 00:18:50 -06:00
Phil Davis
c8703520b5 Ancient bug on upgrade_014_to_015
This code looked silly the way it was, with the construct:
$var = $var;
unset($var);

Seems it was accidentally changed to this way many years ago by 588a183b0e
IMHO we want to do the conversion to $config['system']['gateway'] here so that later config conversion will then process it as expected.
Note that in a current (2.2) config there is not $config['system']['gateway'] but that is switched over later in upgrade_021_to_022 - which switches back to $config['interfaces']['wan']['gateway'] and then later config conversions do their thing with that.
I guess this will only effect people who upgrade from some really old config (or monowall?)
2015-03-02 07:39:26 -03:00
Renato Botelho
59f64414ab Fix track6 prefix id range in error message, reported on Pull Request #1517 2015-02-26 10:34:13 -03:00
jim-p
5b06d6ad44 Fix type (trime->trim) 2015-02-26 08:26:56 -05:00
k-paulius
e607009a49 Check if variables are set before trying to pass them to function substr_count to avoid generating PHP alerts. 2015-02-26 09:31:47 -03:00
Phil Davis
2798bb681f interface_netgraph_needed can miss setting found equals true
This routine seems to go looking to see if the passed-in interface is PPP-style. At the end, if it is not PPP-style then it calls pfsense_ngctl_detach.
This foreach loop in its current state will always exit after the first iteration that is not mode "server". But it looks like it should look through all the 'pppoe' entries until it finds the interface or gets to the end.
In theory the code will sometimes miss setting $found = true when it should have. And thus pfsense_ngctl_detach would get called later for a PPP-style interface.
I noticed this while reviewing for code style guide - it is an example where the indenting shows the intention but there are no curlies to implement it.
2015-02-26 09:28:25 -03:00
Chris Buechler
8cf108b224 remove unused legacy code 2015-02-26 01:35:15 -06:00
Chris Buechler
71a690bba0 Log ifconfig commands used to setup wireless interfaces 2015-02-26 01:32:42 -06:00
Ermal LUÇI
59eb0ce73a Put the bits to use the new reset utility 2015-02-25 21:27:11 +01:00
Ermal LUÇI
4c9b272d11 Ticket #4418 Actually make each entry a clear token to strongswan parser for dns_split 2015-02-25 16:22:17 +01:00
Ermal LUÇI
ca5f5db156 Ticket #4418 make sure the dns_split is separated with spaces rather than space or comma to comply with strongswan requirements. 2015-02-25 16:19:41 +01:00