Renato Botelho
de8f007563
Call interface_ipalias_cleanup() after $interface is initialized, and get current IP after it
2013-07-16 16:31:34 -03:00
jim-p
3ed917c724
Add an RRD graph for MBUFs under system. Tweaks welcome.
2013-07-16 14:14:39 -04:00
jim-p
241eed1ab7
Don't generate reflection rules if reflection is disabled for that rule.
2013-07-16 09:53:31 -04:00
Ermal
4cc3bb6ce9
Do not break ppp type interfaces on v6
2013-07-16 12:52:24 +00:00
Ermal
15a73ba86d
For ppp interfaces the real interface is not present anymore in the xml config section of the interface. Due to this do some more work on extracting the real interface when ipv4 is pppoe/ppp/... and ipv6 configuration files will use the wrong interface to request information from provider. Reported-by: http://forum.pfsense.org/index.php/topic,64483.0.html
2013-07-16 07:47:28 +00:00
Ermal
2657f21f9e
Enable filtering on ipfw sysctl not dependent on ipfw module otherwise issue reported here http://forum.pfsense.org/index.php/topic,64412.0.html happens
2013-07-15 20:05:32 +00:00
Ermal
23c652cd21
Ignore errors/warnings from these calls
2013-07-15 14:02:17 +00:00
dhatz
ab17ed4e70
support mitigating BEAST attack
...
According to http://redmine.lighttpd.net/projects/lighttpd/wiki/Release-1_4_30
"...by setting
ssl.cipher-list = "ECDHE-RSA-AES256-SHA384:AES256-SHA256:RC4-SHA:RC4:HIGH:!MD5:!aNULL:!EDH:!AESGCM"
you can mitigate BEAST attacks."
2013-07-14 16:15:49 -04:00
Jim P
da60727cea
Merge pull request #712 from phil-davis/master
...
Correctly decide if dhcrelay (v4) is enabled
2013-07-14 11:23:22 -07:00
Phil Davis
4701c8de28
Correctly decide if dhcrelay is enabled
2013-07-14 09:15:05 -07:00
Jim P
6a4e4405e1
Merge pull request #711 from phil-davis/master
...
Teach services code about start stop restart of dhcrelay6
2013-07-13 11:50:29 -07:00
Phil Davis
9590e0de97
Teach service start stop restart about dhcrelay6
2013-07-13 09:18:36 -07:00
Phil Davis
54a9d71ddf
Consistent dhcrelay6 pid file location
2013-07-13 09:16:49 -07:00
Ermal Luçi
68bbaf061e
Merge pull request #710 from phil-davis/master
...
Start DHCrelay6 on boot
2013-07-13 08:01:59 -07:00
Renato Botelho
45eb8aeb58
Fix #3091 , fix bad var assignment
2013-07-13 11:41:58 -03:00
Phil Davis
06433d7524
Start DHCrelay6 on boot
2013-07-13 06:15:34 -07:00
Phil Davis
874f099a35
services_dhcrelay6_configure developerspew debug text fix
2013-07-13 05:49:03 -07:00
jim-p
e09b941d28
Move variable declaration to the top, declare it global before defining. Fixes #3090
2013-07-11 15:17:55 -04:00
jim-p
a5a2fc68d7
Remove irrelevant comment.
2013-07-11 15:17:54 -04:00
Ermal Luçi
5b0f719197
Fix copy/pasto introduced in previous commit.
2013-07-11 15:59:52 +02:00
jim-p
ac2035130d
Don't automatically add hidden rules to pass all IPv6 traffic to/from delegated prefixes. Default IPv6 from LAN -> any rule covers outbound properly as-is, and WAN rules shouldn't pass in that permissively. Also the prefix length calculation was off and the LAN rule(s) would be too permissive anyhow.
2013-07-10 15:49:02 -04:00
Ermal
7fb233997d
Implement proper releasing of pipes allocated based on CPzone. Keep track of which zone a pipe is and release those pipes during disabling/deleting of zone. Ticket #3062 , Pull request #698
2013-07-10 15:26:26 +00:00
Ermal
0f50d70d30
Use empty to cover all needed cases as suggested on #3062 . Suggested from pull request #698
2013-07-10 15:20:31 +00:00
Ermal Luçi
4624f50fce
Merge pull request #703 from razzfazz/dyndns_custom_v6
...
Add support for HE.net AAAA record updates. Fixes #1825 .
2013-07-10 08:01:59 -07:00
jim-p
1cf24f0aed
Add independent logging choices to disable logging of bogon network rules and private network rules. Add upgrade code to obey the existing behavior for users (if default block logging was disabled, so is bogon/private rule blocking). Also add a checkbox to disable the lighttpd log for people who don't want their system log spammed by lighty.
2013-07-09 12:02:19 -04:00
Renato Botelho
dd042c5159
Implement URL Table aliases for ports instead of IP addresses
2013-07-08 12:38:37 -03:00
Daniel Becker
da40615d09
Add support for custom IPv6 DDNS.
2013-07-07 15:40:16 -07:00
Daniel Becker
b4319c50f7
Change separator as per JimP's request.
2013-07-07 15:28:35 -07:00
Daniel Becker
66185fc79a
Merge branch 'master' into dyndns_custom_v6
2013-07-07 14:45:22 -07:00
Daniel Becker
d7e6f57368
Clean up HE.net AAAA backend support.
2013-07-07 14:44:05 -07:00
Daniel Becker
b4025ccd10
Add backend support for HE.net AAAA record updates.
...
Defines a new DynDNS provider 'he-net-v6' for updating AAAA entries on
dns.he.net.
2013-07-07 12:39:13 -07:00
Daniel Becker
14e9b0526f
Fix typo in filter.inc. Fixes #3028 .
...
Due to the typo, FilterIfList never got a 'track6-interface' entry,
which in turn prevented the DHCP6-related pass rules from being
generated for the LAN interface.
2013-07-07 11:22:18 -07:00
Evan Susarret
2740f12c50
Typo in configuration option
...
Should be 'leases', not 'mappings'.
2013-07-06 23:39:06 -04:00
Evan Susarret
64b299d87d
DHCP also update Dynamic DNS for static leases
...
Previously, Dynamic DNS is only updated for clients that get addresses from the DHCP address pool. Static mappings are ignored.
Adding this line updates Dynamic DNS for both static-mapped and dynamic DHCP clients.
2013-07-06 23:02:42 -04:00
Ermal
0007f5b375
Actually do this upon entering to get proper ip
2013-07-05 17:56:05 +00:00
Ermal
4454f1f348
Fixes #2495 . On trigering of rc.newwanip remove all ipaliases from the interface since they will be readded later on. This will also make sure to have the correct address order
2013-07-05 17:55:01 +00:00
jim-p
e61a6db284
When a CARP VIP transitions to master, we need to bump servers also, otherwise a transition from disabled or init may not properly (re)attach to the IP address.
2013-07-05 11:46:54 -04:00
jim-p
86573a2486
Correct DHCPv6 rules test to also include a check for DHCPv6 relay. Fixes #3074
2013-07-05 11:27:14 -04:00
Renato Botelho
76590ffe4d
Use download_file() and check ssl certificates
2013-07-05 08:47:21 -03:00
Renato Botelho
abc7b6a28a
Remove useless code
2013-07-05 08:47:21 -03:00
Renato Botelho
ffd7802adf
Create a function to download a file using curl
2013-07-05 08:47:21 -03:00
Ermal
f4a8e38c6e
Resolves #2910 . Make apinger write its status file just after starting so that thing work as expected
2013-07-05 10:53:13 +00:00
Renato Botelho
079d1952fd
Add a new alias type, URLs containing Ports
2013-07-04 10:42:48 -03:00
Renato Botelho
d9f33a7f60
Add group_ports()
2013-07-04 10:40:15 -03:00
Ermal
0dd5ed7b1d
Remove duplicated line that makes dhcp6c not run correctly
2013-07-04 07:01:29 +00:00
Matt Smith
058bc2a8ed
Omit IP warning if HTTP_REFERER check is disabled.
2013-07-03 10:32:44 -05:00
Ermal
2bc45785ca
Do not reconfigure dhcp v6 on v4 ip address event. Only handle 6rd and 6to4 while the former is questionable if needed
2013-07-03 13:41:17 +00:00
Ermal
9ce0dd1225
Copy/pasto does well up to some point
2013-07-03 13:38:18 +00:00
Ermal
c9065c1ef6
On every ip change renew the hosts file
2013-07-03 13:37:48 +00:00
Ermal
84f7e98c51
Enforce the checking of booting up for linkup events
2013-07-03 12:26:02 +00:00
