mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity
24,808 Commits 27 Branches 53 Tags 494 MiB
4e1fd3b6f0
Commit Graph

24808 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Ermal LUÇI
4e1fd3b6f0 Ticket #4254 Handle even hosts specified throguh dns name 2015-01-21 21:04:49 +01:00
Ermal LUÇI
c7edf1f8e8 Ticket #4524 Bring back static routes on ipsec to make sure charon does not send traffic through wrong iface. This handles properly ipv6 2015-01-21 21:00:25 +01:00
Ermal LUÇI
260c6a7eeb Be compliant with gatway groups specified on ipsec. Ticket #4254 2015-01-21 20:31:16 +01:00
Ermal LUÇI
083ec796a8 Ticket #4254 Actually fix this on 2.2 branch since vips are not handled by get_real_interface apparently! 2015-01-21 19:32:36 +01:00
Renato Botelho
a693440176 When radvd is configured on a CARP interface, enable it when it is MASTER and disable when go to BACKUP. It should fix #4252 2015-01-21 14:36:38 -02:00
Ermal LUÇI
89ac17e338 Ticket #4254 specify the list of interfaces to be used by charon. This is a workaround for now. Being investigated the fix. 2015-01-21 09:31:54 +01:00
Chris Buechler
94efc59dff Use the parent NIC rather than the VIP. Fixes part of Ticket #4252 2015-01-21 00:36:30 -06:00
jim-p
de16863d9e The reset button check should happen on all platforms, not only NanoBSD 2015-01-20 16:53:59 -05:00
Renato Botelho
ca276264ee Add missing require for filter.inc since vpn_ipsec_configure() calls filter_configure(). It should fix #4236 2015-01-19 09:25:51 -02:00
Renato Botelho
7f3601524d Add reset button support for APU and FW7541 2015-01-19 09:08:37 -02:00
Chris Buechler
ef9ef75fe1 add detection for 7541, APU 2015-01-16 23:18:28 -06:00
Jared Dillard
1195a12d3b move jquery ui css to theme folders 2015-01-16 18:02:43 -06:00
Renato Botelho
b1fef27fcf Set $arch accordingly to release 2015-01-16 17:42:30 -02:00
Chris Buechler
6aac31ef76 change update URLs for release 2015-01-16 13:40:48 -06:00
Chris Buechler
6434d5be0c Bump to 2.2-RELEASE 2015-01-16 13:36:09 -06:00
Renato Botelho
17c982555a Validate if both IP address and subnet are valid and the same version. Fixes #4223 2015-01-16 11:50:23 -02:00
Phil Davis
5b7c33fc7e Firewall Rules Apply be friendly to other languages 
Forum: https://forum.pfsense.org/index.php?topic=86808.0
Redmine: https://redmine.pfsense.org/issues/3886

print_info_box_np() when called with just the first $msg parameter has some rough tests to decide if the "Apply" button should be displayed. It checks if the translation of "apply", "save" or "create" appears in the $msg string (which is a translated string itself). If the $msg string did not translate, and thus remains in English, but gettext("apply") does translate then the e.g. Turkish word for "apply" is not going to appear in the English $msg string. So things go wrong.

print_info_box_np already has extra parameters to tell it explicitly $showapply - and for this stuff we know we want the apply button, regardless of how the various text string translations work out. Thus I have provided those parameters here.

I also changed the construction of the text to pass as $msg, breaking it up like in firewall_aliases.php - this means that the string "You must apply the changes in order for them to take effect." translates and you get at least that Turkish displayed.

IMHO it would be beneficial to change lots of these print_info_box_np calls to explicitly set $showapply=true - that will ensure that the apply button shows (and thus the user can perform the needed actions) regardless of how well/not well the translation of the text turns out.
 2015-01-15 19:05:32 -02:00
Ermal LUÇI
8d4e768a27 Time to let these go 2015-01-15 21:42:00 +01:00
Ermal LUÇI
05071b6541 Just do an update since it will handle itself properly. 2015-01-15 20:18:38 +01:00
Ermal LUÇI
4e8eacfd7c Revert "Move to specifically specifying the ID type apart when an ip address to have strongswan do proper behaviour. Also for DynDNS names use the dns type id so strongswan does the resolving by its own." 
This reverts commit 1ada4c8c51.
 2015-01-15 10:13:57 +01:00
Ermal LUÇI
23de1f0dec Revert "Fix typos introduced by chaning to explicit id specification when necessary. Fixes #4202" 
This reverts commit 3243110433.
 2015-01-15 10:13:46 +01:00
Ermal LUÇI
bc62f818e9 Add RSA keys even for eap-mschapv2 2015-01-15 09:29:50 +01:00
Ermal LUÇI
f579c0fb42 Add EAP-MSChapv2 implementation for Windows ipsec support as reported here https://forum.pfsense.org/index.php?topic=81657.15 2015-01-15 09:29:40 +01:00
Ermal LUÇI
88a46519d9 Oops add missing curly 2015-01-14 17:03:08 +01:00
Ermal LUÇI
eb26d3102d Also take care of ph1 mobile settings for eap-tls 2015-01-14 17:03:08 +01:00
Renato Botelho
6e0a0ab347 Obsolete libpng15 in favour of libpng16 2015-01-14 12:09:58 -02:00
Warren Baker
9eec3be339 Correctly handle number of cores and power of 2. Merged from the package already had this. Fixes #4212 2015-01-14 09:23:11 -02:00
Ermal LUÇI
3a56c14663 Actually remove rekey/reauth from config to avoid strange issues. Ticket #4208 2015-01-13 20:43:59 +01:00
Ermal LUÇI
656fd270f0 Add some saftey belts here to be safe 2015-01-13 20:21:31 +01:00
Ermal LUÇI
a2feea3744 Heh bump the config version 2015-01-13 20:19:25 +01:00
Ermal LUÇI
b40137258e To avoid issues with clashing SAIDs go back to specifying the reqid in strongswan config. 
To be able to manage this first upgrade the config to assign each phase2 an reqid
Second use that during config generation

Ticket #4208
 2015-01-13 19:57:28 +01:00
xbipin
6db7ee23db Improving aesthetics. 
Make title color more consistent with other pages.
Improving aesthetics.
 2015-01-13 13:01:07 -02:00
Chris Buechler
156938a87e Where the P1 is disabled, show the P2s as disabled since they will be, same as in previous versions. 2015-01-12 19:25:47 -06:00
Renato Botelho
d71f979475 Fix IPsec widget for multiple P2, it fixes #4164 2015-01-12 21:50:52 -02:00
Warren Baker
324a2387d0 Unbound is compiled with libevent so setting this to always be 4096. 2015-01-12 16:33:06 -06:00
Warren Baker
ad9148aefa Allow for overhead and up maximum limit from 8 to 32, also only set it if its set to 4 or above. Fixes https://forum.pfsense.org/index.php?topic=78356.msg472781#msg472781 2015-01-12 16:32:07 -06:00
Chris Buechler
bdb8fbffb0 Remove old write caching tunable as well. Ticket #4203 2015-01-12 12:43:13 -06:00
Chris Buechler
f66bcbaf4c Remove the settings to disable DMA, which have changed in FreeBSD 10. 
Ticket #4203
 2015-01-12 12:37:37 -06:00
Ermal LUÇI
35e3d35016 Do not leak firewall rules as well when (re)creating rules 2015-01-12 19:25:32 +01:00
Renato Botelho
eab9d9c142 Fix spell typo spotted by phil-davis 2015-01-12 12:36:11 -02:00
Ermal LUÇI
3243110433 Fix typos introduced by chaning to explicit id specification when necessary. Fixes #4202 2015-01-12 15:14:59 +01:00
Phil Davis
0c5e61b155 Fix cut paste brain fade 2015-01-12 11:50:10 -02:00
Phil Davis
3fbfbe902e Restart PHP-FPM allow to setup ini file 
I was just using console menu option 16 Restart PHP-FPM and it hung on a nanoBSD system.
I found /tmp/php_errors.txt with this in it:
"override rw-r--r--  root/wheel for /usr/local/etc/php.ini?"
Flying blind at the console I entered "y", then /tmp/php_errors.txt had this:
--------
rm: /usr/local/etc/php.ini: Read-only file system
override rw-r--r--  root/wheel for /usr/local/lib/php.ini?
--------
Pressed return at the console and it proceeded, presumably without re-writing php.ini

It works much better when the file system is mounted RW :)
 2015-01-12 11:49:58 -02:00
Ermal LUÇI
2ea976b71c Properly handle large passthrough entries even here. 2015-01-12 12:31:03 +01:00
Ermal LUÇI
9b255a367d Use this generation now of committing pipes directly and only rules to put on ruleset to avoid memory pressure and the timelimit will than be enforced by the caller 2015-01-12 12:27:41 +01:00
Ermal LUÇI
124299a347 Revert "Ticket #3932 Use array_map to get more parallelism when there are many entries. This makes it not reach the execution timeout with large entries." 
This reverts commit 7077addc5a.
 2015-01-12 12:26:00 +01:00
Ermal LUÇI
0fc3c465cd Actually improve the previous resource leak commit since the function is there but it was not being used during init_rules process. 2015-01-12 12:20:57 +01:00
Ermal LUÇI
339e2fe5e6 * Try to autodetect if the execution limit needs to be raised on big number of passthrough entries. 
Set the time limit to 0 and restore it back to default value when this is detected.

* Do not leak pipes when reloading ruleset for CP since this will consume available descriptors.
  This has been noted before but considered fixed, this is the real fix actually for dnpipes.
 2015-01-12 12:18:49 +01:00
Ermal LUÇI
6a752ca21a Put the value of password under double quotes(") to avoid issues with special characters in passwords. Ticket #4177 2015-01-12 11:49:12 +01:00
Ermal LUÇI
545c4435ef Do not override the passwd string. First it prevents the md5 working if the crypt() check fails and also is useless to override it since the parameter is passed by value and not by reference. 2015-01-12 11:43:28 +01:00