jim-p
3e7d44fffc
Bumpitty bump bump
2013-07-29 08:45:51 -04:00
Renato Botelho
eab652e4bd
Fix #3113 , fix multiple english spell errors s/seperet/separat/
2013-07-28 10:31:40 -03:00
Ermal
4d81454695
Optimization has nothing to do with limits
2013-07-25 13:13:24 +00:00
Renato Botelho
4ff2b8056a
Fix #3106 , parse 'not' rules right on destination for port forward + reflection proxy rules
2013-07-25 09:29:50 -03:00
Phil Davis
ee15775759
Allow advanced options state-related parameters to be used for TCP, UDP and ICMP
...
Allows the state-related parameters to be specified for UDP and ICMP as well as TCP. Discussed in forum http://forum.pfsense.org/index.php/topic,64653.0.html
2013-07-24 07:26:52 -03:00
N0YB
df19816900
Update rrd.inc
...
Fix this error
php: rc.bootup: The command '/usr/bin/nice -n20 /usr/local/bin/rrdtool update /var/db/rrd/system-mbuf.rrd N:U:U:U:U:U' returned exit code '1', the output was 'ERROR: expected 4 data source readings (got 5) from N:U:U:U:U:U'
2013-07-23 16:54:20 -07:00
Ermal
329024c872
Implement an option to allow using the IPv4 connectivity interface for sending the dhcpv6 information. Usually useful for ppp[oe] type links and some ISP
2013-07-23 09:56:38 +00:00
Warren Baker
bed551156f
Add missing backup of gettytab
2013-07-22 09:25:34 +02:00
N0YB
f1c252cf96
3652 days worth is a too much. Scale it back to more reasonable 1.25 x maximum used data (2284 days).
2013-07-19 17:15:00 -07:00
jim-p
8e088ea50a
Handle IPv6 in ip_in_interface_alias_subnet()
2013-07-19 09:39:38 -04:00
Phil Davis
166fc3cdf0
Minimize inclusion of bogonsv6
...
If "Allow IPv6" is on, but actually there is no enabled interface with "Block bogon networks" enabled, then we also do not need to include the bogonsv6 table into pf.
This allows some more flexibility for users to leave "Allow IPv6" checked, but still not use up memory for bogonsv6.
2013-07-19 10:18:54 -03:00
jim-p
30adceda1f
Disable the BEAST protection by default because the GUI *will* break if you use this and have a Hifn card installed. Others may break similarly. Change it into a checkbox option, off by default, and automatically disable it if a conflicting card has been detected.
2013-07-18 09:35:47 -04:00
jim-p
436a9a88b8
Sync p0f database for OS detection w/current file from FreeBSD
2013-07-17 13:48:42 -04:00
jim-p
dc3fc54a08
Don't blow up the config if someone enters int'l chars in an LDAP attribute/DN field. Ticket #2227
2013-07-17 10:53:21 -04:00
jim-p
298020b2b6
Add LDAP server options to control UTF8-encoding of parameters. Fixes #2227 . While I'm here, add a checkbox to prevent the stripping of @ from the LDAP username if the user wants the full name transmitted.
2013-07-17 10:15:21 -04:00
Renato Botelho
eb8e0aa9d6
Call interface_ipalias_cleanup() after $interface is initialized, and get current IP after it
2013-07-16 16:34:47 -03:00
jim-p
ae9cb658ae
Add an RRD graph for MBUFs under system. Tweaks welcome.
2013-07-16 14:14:10 -04:00
jim-p
7a10e3ebe7
Don't generate reflection rules if reflection is disabled for that rule.
2013-07-16 09:52:27 -04:00
Ermal
4e69371b20
Do not break ppp type interfaces on v6
2013-07-16 12:52:37 +00:00
Ermal
5128e0feb0
For ppp interfaces the real interface is not present anymore in the xml config section of the interface. Due to this do some more work on extracting the real interface when ipv4 is pppoe/ppp/... and ipv6 configuration files will use the wrong interface to request information from provider. Reported-by: http://forum.pfsense.org/index.php/topic,64483.0.html
2013-07-16 07:47:40 +00:00
Ermal
cd577ebd10
Enable filtering on ipfw sysctl not dependent on ipfw module otherwise issue reported here http://forum.pfsense.org/index.php/topic,64412.0.html happens
2013-07-15 20:05:50 +00:00
Ermal
1ed5aaa83a
Ignore errors/warnings from these calls
2013-07-15 13:58:08 +00:00
Jim P
3487a5c26f
Merge pull request #683 from dhatz/RELENG_2_1
...
support mitigating BEAST attack, see http://forum.pfsense.org/index.php/topic,63001.0.html
2013-07-14 13:14:07 -07:00
Phil Davis
23ea4d2a6a
services_dhcrelay6_configure developerspew debug text fix
2013-07-14 14:49:01 -04:00
Phil Davis
64ad3cc8b5
Start DHCrelay6 on boot
2013-07-14 14:48:56 -04:00
Phil Davis
fa535f758b
Correctly decide if dhcrelay is enabled
2013-07-14 14:24:09 -04:00
Phil Davis
b5cd5163c7
Teach service start stop restart about dhcrelay6
2013-07-13 14:52:39 -04:00
Phil Davis
d86ec4e075
Consistent dhcrelay6 pid file location
2013-07-13 14:52:31 -04:00
Renato Botelho
63b8c4db3b
Fix #3091 , fix bad var assignment
2013-07-13 11:42:39 -03:00
jim-p
fd4fc12087
Move variable declaration to the top, declare it global before defining. Fixes #3090
2013-07-11 15:18:18 -04:00
jim-p
469e33330d
Remove irrelevant comment.
2013-07-11 15:18:17 -04:00
Ermal Luçi
d45fdd2a01
Fix copy/pasto introduced in previous commit.
2013-07-11 16:03:05 +02:00
Daniel Becker
b54b997d2d
Add support for custom IPv6 DDNS.
2013-07-10 19:05:42 -07:00
Daniel Becker
c3101e14c0
Change separator as per JimP's request.
2013-07-10 19:01:36 -07:00
Daniel Becker
e4ba18aa6e
Clean up HE.net AAAA backend support.
2013-07-10 19:00:36 -07:00
Daniel Becker
5a55d9d7d4
Add backend support for HE.net AAAA record updates.
...
Defines a new DynDNS provider 'he-net-v6' for updating AAAA entries on
dns.he.net.
2013-07-10 19:00:03 -07:00
jim-p
f34fcff4b4
Don't automatically add hidden rules to pass all IPv6 traffic to/from delegated prefixes. Default IPv6 from LAN -> any rule covers outbound properly as-is, and WAN rules shouldn't pass in that permissively. Also the prefix length calculation was off and the LAN rule(s) would be too permissive anyhow.
2013-07-10 15:49:19 -04:00
Ermal
bc59bcff38
Implement proper releasing of pipes allocated based on CPzone. Keep track of which zone a pipe is and release those pipes during disabling/deleting of zone. Ticket #3062 , Pull request #698
2013-07-10 15:28:00 +00:00
Ermal
de2fe652ca
Use empty to cover all needed cases as suggested on #3062 . Suggested from pull request #698
2013-07-10 15:27:45 +00:00
jim-p
a19fcb824c
Add independent logging choices to disable logging of bogon network rules and private network rules. Add upgrade code to obey the existing behavior for users (if default block logging was disabled, so is bogon/private rule blocking). Also add a checkbox to disable the lighttpd log for people who don't want their system log spammed by lighty.
2013-07-09 12:00:43 -04:00
Daniel Becker
fc654f2c36
Fix typo in filter.inc. Fixes #3028 .
...
Due to the typo, FilterIfList never got a 'track6-interface' entry,
which in turn prevented the DHCP6-related pass rules from being
generated for the LAN interface.
2013-07-07 17:52:59 -03:00
plinss
ae7372475b
Update services.inc
...
Turn on AdvManagedFlag and AdvOtherConfigFlag for both 'managed' and 'assist' ramodes.
2013-07-05 17:30:05 -03:00
Ermal
51b262421b
Actually do this upon entering to get proper ip
2013-07-05 17:56:19 +00:00
Ermal
b877d6351c
Fixes #2495 . On trigering of rc.newwanip remove all ipaliases from the interface since they will be readded later on. This will also make sure to have the correct address order
2013-07-05 17:48:46 +00:00
jim-p
9db8c46dff
When a CARP VIP transitions to master, we need to bump servers also, otherwise a transition from disabled or init may not properly (re)attach to the IP address.
2013-07-05 11:48:07 -04:00
jim-p
0ee96a458a
Correct DHCPv6 rules test to also include a check for DHCPv6 relay. Fixes #3074
2013-07-05 11:27:47 -04:00
Renato Botelho
6a9a0736f6
Remove useless code
2013-07-05 08:56:03 -03:00
Ermal
63356262a7
Resolves #2910 . Make apinger write its status file just after starting so that thing work as expected
2013-07-05 10:53:28 +00:00
Ermal
fae0e09833
Remove duplicated line that makes dhcp6c not run correctly
2013-07-04 07:01:41 +00:00
Ermal
032a3c0a21
Do not reconfigure dhcp v6 on v4 ip address event. Only handle 6rd and 6to4 while the former is questionable if needed
2013-07-04 06:58:38 +00:00
