Commit Graph

12607 Commits

Author SHA1 Message Date
jim-p
36dbc14aaa Allow reassignment from PPP types to DHCP. From testing, it appears to work OK, this input validation appears to be outdated.
If there is some edge case that this catches, perhaps it needs to be a more specific test.
2015-03-09 10:35:26 -04:00
jim-p
bf4ea211dd Add missing 'break' statement that broke switching from a PPP type to 'none'. 2015-03-09 10:22:53 -04:00
Phil Davis
aab23249c4 DNS Forwarder Host Override Edit make the pencil symbols appear
In most places in the GUI a little pencil symbol appears before text input fields. For example it already appears for the Host, Domain and Description fields in this very form when you "Enter additional names for this host."
But in the main 4 fields of this form, the pencil does not display.
This fixes it to be the same as elsewhere.
I guess this is the "standard" supposed to be used. If so, then I will find the other places where class="formfld unknown" has the "unknown" missing.
2015-03-09 07:01:10 -03:00
Phil Davis
39dff8e2f9 Fix password box in diag_authentication
In 2.2 when I go to Diagnostics->Authentication the password field shows the little lock icon, but the text input area starts over the top of the icon and as I type in the field the password "dots" go over the lock icon.
This does not happen in 2.1.5 - the password entry cursor sits after the lock icon. This problem is also not evident on most other password entry fields in 2.2
I stared at it for a while, then saw that in other places the password field is not literally called "password", so I thought what the heck, I will change the field name - it fixed the display issue!!! What???
Anyway, this fixes the display issue on my system. If someone knows really why having the field name/id="password" is a problem then they could fix the underlying reason - but this works around whatever is the issue.
If you think this is an OK fix then I will also find the couple of other places swhere this happens and make the same "fix".
2015-03-09 07:00:01 -03:00
k-paulius
478188c221 Add missing opening bracket 2015-03-09 06:55:20 -03:00
Chris Buechler
f973985c84 Update help to current config structure, touch up text while here. Fixes #4492 2015-03-08 00:44:06 -06:00
Chris Buechler
ede74d31d6 Check for console="comconsole* rather than just *comconsole* in loader.conf, so it doesn't match just having comconsole_speed in loader.conf. Ticket #4464 2015-03-07 14:18:23 -06:00
jim-p
7ba5aeebef Expand CARP demotion error, add button to reset demotion status. 2015-03-06 15:00:59 -05:00
Renato Botelho
99572c5380 Remove multiple spaces from dns_split as a seatbelt, also fix the message since field is expected to be space separated and not comma. Ticket #4418 2015-03-06 11:29:35 -03:00
Chris Buechler
9b23ce9088 touch up text 2015-03-06 03:35:47 -06:00
Chris Buechler
95f1227e3b fix up text 2015-03-05 22:12:48 -06:00
Chris Buechler
1bfb95f38d Don't save config if input validation fails. Add input validation preventing "Harden DNSSEC Data" from being enabled if DNSSEC support isn't enabled. 2015-03-05 21:40:23 -06:00
Chris Buechler
73cdd9f0ca Remove the harden-glue option entirely and hard code it to yes. Ticket #4402 2015-03-05 19:35:59 -06:00
jim-p
5ec3f37fcf Encode and check values for filtering variables in diag_logs_filter.php 2015-03-05 10:08:52 -05:00
jim-p
033663df45 Do not render the services_unbound_acls page with an invalid ID. 2015-03-05 10:00:56 -05:00
jim-p
108be9a529 Stricter validation and encoding for traffic shaper queues. 2015-03-05 09:55:00 -05:00
jim-p
c49db63149 Jettison unused dragtable code from firewall_rules.php, it was broken and inactive and only causing trouble. 2015-03-05 09:40:32 -05:00
jim-p
d9295c2ef6 Improve validation and encoding of the zone for Captive Portal Status 2015-03-05 09:32:05 -05:00
jim-p
707ed023f4 Be more strict about the file to restore or delete when working with full backups. 2015-03-05 09:00:18 -05:00
Chris Buechler
0fe628a62f allow enabling Unbound when dnsmasq is enabled, if they're using diff
ports. Ticket #4332
2015-03-04 16:16:18 -06:00
Phil Davis
6e4c199b63 Make the DHCP network booting options line up
by putting the text and selection boxes into a 2-column table so that it can be rendered with the boxes lined up vertically.
2015-03-03 08:09:24 -03:00
Phil Davis
6cf3278fa7 system_groupmanager edit cancel button looks small
It looks smaller and different to the Save button. This makes it the same.
2015-03-03 08:08:38 -03:00
Phil Davis
f636bc1296 system_usermanager edit cancel button looks small
It looks smaller and different to the Save button. This makes it the same.
2015-03-03 08:08:01 -03:00
Phil Davis
1626b5ad08 Make the Power Mode selection boxes line up
by putting the text and selection boxes into a 2-column table so that it can be rendered with the boxes lined up vertically.
2015-03-03 08:07:12 -03:00
Phil Davis
db949a1904 Standardise power mode selection boxes
I noticed that this looked a little odd, the boxes for AC and Battery Power Mode are 1 after the other on the same line, then the 3rd box for unknown power mode is on a new line.
Maybe make them all on their own line, like this?
2015-03-03 08:07:08 -03:00
Phil Davis
bd5a82681d Add missing BR tags and fix display with pfsense_ng_fs theme
Fixes #4481
Similar issue to commit 5cfd948144
Note: services_dhcpv6_edit.php - these fields are not present so nothing to edit/fix.
2015-03-03 08:05:52 -03:00
Chris Buechler
911cc213ab Remove "Prefer old SA" option, and ignore it in all existing configurations. Breaks things in many cases with strongSwan. For the very rare circumstances where this is actually desirable, it's just a sysctl that can be set in tunables. 2015-03-03 00:18:50 -06:00
Renato Botelho
59f64414ab Fix track6 prefix id range in error message, reported on Pull Request #1517 2015-02-26 10:34:13 -03:00
k-paulius
e607009a49 Check if variables are set before trying to pass them to function substr_count to avoid generating PHP alerts. 2015-02-26 09:31:47 -03:00
Ermal LUÇI
ca5f5db156 Ticket #4418 make sure the dns_split is separated with spaces rather than space or comma to comply with strongswan requirements. 2015-02-25 16:19:41 +01:00
Renato Botelho
aa314146ca When RADIUS auth is selected, radius protocol and server ip/host are mandatory. Fixes #4384 2015-02-24 16:08:29 -03:00
Renato Botelho
3adf6f272f isset is a better check here 2015-02-24 15:40:55 -03:00
k-paulius
2e50e5b1fc Fixing issues with NTP RRD graph state changes
- only call enable_rrd_graphing() after $config['ntpd']['statsgraph']
   is set
 - fix if condition; empty and isset are each other's opposites
2015-02-24 15:40:51 -03:00
PiBa-NL
b5ecfe0f35 carp, don't show status icon from previous carp ip in case the ip is not present on the interface (test with ifconfig em0 1.2.3.4 delete) 2015-02-24 08:40:35 -03:00
Ermal LUÇI
361027c7f5 Ticket #4445 do not write config and remove its cache when applying settings its just behaviour from dinosaur era and should have been cleanded long time ago. 2015-02-23 21:20:41 +01:00
Phil Davis
4f5967b9a8 diag_arp allow underscore in resolved host names
is_hostname() and is_domain() allow underscore in the names. So it is possible to have underscore in host names, for example in DHCP server static mapped entries I have some things like:
10.42.3.4 client-pc-01_LAN
10.42.3.5 client-pc-01_WIFI
These reverse-resolve fine - 10.42.3.4 becomes client-pc-01_LAN
But the preg_match here misses such names that have an underscore in them.
I noticed this when looking into forum post: https://forum.pfsense.org/index.php?topic=88956.0
2015-02-23 16:18:05 -03:00
Daniel Becker
76feb40735 make computation of start of DHCPv6 range consistent with actual check
When computing the start IP for the 'available range' field,
services_dhcpv6.php attempts to increment a colon-formatted v6 address.
Since this always fails, so the value that's printed is not actually
incremented, so remove the bogus addition.

Note that this is actually matches the behavior of the range checks that
services_dhcpv6.php performs: The actual check uses the range
[gen_subnetv6()..gen_subnetv6_max()], which does include the first
(= all-zeroes host part) v6 address in the prefix.
2015-02-23 14:38:30 -03:00
Phil Davis
ff7990df20 Fix display style typo
I could not see any difference in rendering of the page after fixing this, but it looks it it should be fixed.
2015-02-23 14:18:15 -03:00
Phil Davis
41de7158bd Fix display style typo
I could not see any difference in rendering of the page after fixing this, but it looks it it should be fixed.
2015-02-23 14:18:08 -03:00
Phil Davis
ba7d3bd3f9 OpenVPN server improve handling of authmode
Currently if the user is clicking around while they are setting up an OpenVPN server, they can do stuff like this:
a) Select Server Mode - Remote Access (SSL/TLS + User Auth)
b) Select something in Backend for authentication
c) Change their mind and select Server Mode - Peer to Peer (SSL/TLS)
d) Enter the other settings and Save
Now the OpenVPN server config has an 'authmode' key in it.
Probably does no harm, I suspect it will simply not be used when building the server.conf for Peer to Peer, but it looks a bit odd when analysing/diagnosing a config for problems.
Other fields that are mode-specific have tests to only save the values at the end if the appropriate mode is the one finally selected.

While I am here, I also constantly forget to click on "Local Database" authmode when setting up a new server. It gives the validation error message, then I click on "Local Database" again and save. Seems unnecessary - when defining a new OpenVPN server why not default this to have the first entry in the list be the one selected? So I did that. What do you think? 1 place less for many users to need to click.
2015-02-23 14:18:03 -03:00
Phil Davis
683eb99247 vpn_openvpn_server.php white space 2015-02-23 14:17:58 -03:00
Phil Davis
d2ffc02fed Mention interface name on DHCP edit GUI
IMHO it can be confusing on the DHCP edit page for static mapped entries to know which interface the entry is being edited/added for. Specially if the user comes from the Status DHCP Leases page, the lease they are editing/adding could be for 1 of many LAN-style interfaces.
This also made it easier for me to see which interface entry I was editing when I was testing https://github.com/pfsense/pfsense/pull/1504
2015-02-23 09:30:45 -03:00
Phil Davis
aeb5bf8e93 Status_dhcp_leases fix edit button for static entries with no IP address
The edit button for static entries always has an index id=0 and thus pressing the edit button goes to (mostly) edit the wrong entry.
It was easier and made the code cleaner to get rid of the looping through the staticmap array every time trying to matach IP, MAC address... That data ('if' and 'staticmap_array_index') is easily gathered further up, the first time the staticmap array for each DHCP interface is traversed. I think this should also be more efficient when there are many static mapping entries.
Forum: https://forum.pfsense.org/index.php?topic=89072.msg493241#msg493241
2015-02-23 09:29:53 -03:00
k-paulius
8261c0b6ac Fix broken links to dhcp6c.conf man page.
manpath FreeBSD+Ports no longer exits and needs to be replaced with FreeBSD+10.1-RELEASE+and+Ports
2015-02-23 09:23:37 -03:00
Phil Davis
c0fde4e403 Success typo
might as well fix it while I notice it
2015-02-23 09:18:55 -03:00
Chris Buechler
7b404fdec0 Add GUI control for MOBIKE. Hide it when IKEv1 selected. Enable toggling of NAT-T field display so it's on for IKEv1, off for IKEv2. Do same for reauth while here. Ticket #3979 2015-02-18 00:39:26 -06:00
BBcan177
3ddc5d1af0 Update fbegin.inc - Missing '/' in path
Found this issue in conjunction with user Digdug3
2015-02-13 16:24:24 -02:00
Chris Buechler
e2d0aee863 force minimum 100000 byte log file size. Some have been confused thinking this is KB, in some cases causing problems. This should help, and there shouldn't be a need for logs smaller than that. 2015-02-13 00:19:15 -06:00
jim-p
1ac99c4e5d Set srctrack separate from this test or the value won't save unless the sticky box status also changed. 2015-02-12 11:24:02 -05:00
Chris Buechler
d4a18f1345 Merge branch 'RELENG_2_2' of git.pfmechanics.com:pfsense/pfsense into RELENG_2_2 2015-02-11 22:29:39 -06:00