mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity
36,246 Commits 27 Branches 53 Tags 494 MiB
51bb83d8cd
Commit Graph

36246 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Renato Botelho do Couto
51bb83d8cd Silence S3 sync 2019-08-30 11:10:14 -03:00
Renato Botelho do Couto
7680128099 Rework the way we send files to AWS S3 2019-08-30 11:03:02 -03:00
Renato Botelho
09929d4b1f Add support to run a command after final rsync 2019-08-30 10:22:24 -03:00
jim-p
25faaacfa3 Do not list OpenVPN interfaces as usable by DHCP relay. Fixes #8443 
(cherry picked from commit c3667958a9)
 2019-08-29 16:24:04 -04:00
jim-p
cf38994c1f Recognize more Netgate hardware automatically. Fixes #8051 
(cherry picked from commit f301aa5947)
 2019-08-29 16:10:56 -04:00
jim-p
12b677a3ad Fix some model detection instances. Issue #8051 
(cherry picked from commit fc89ce5b594f20a3d4819f01500f561893580d41)
 2019-08-29 16:05:25 -04:00
jim-p
d9a455a5a7 Add 127.0.0.0/8 to Unbound private-address list. Fixes #9708 
(cherry picked from commit afeb18ff0e)
 2019-08-28 16:31:08 -04:00
jim-p
79a68d52fb Use batch mode for top so it displays process list w/o terminal. Fixes #9522 
While here, set a high number of processes to display and also remove
the use of 'cut' which limited column length. With current display
method it's unnecessary.

(cherry picked from commit 4b84c39dbe)
 2019-08-27 16:29:52 -04:00
jim-p
1f04ff1d94 Add 'encryption_password' to the $cdata_fields array. Fixes #7186 
(cherry picked from commit 9d4ace0bf5)
 2019-08-27 14:08:54 -04:00
jim-p
695c5d51c6 Add auth server name change input validation. Fixes #9692 
(cherry picked from commit 24c4275d78)
 2019-08-27 13:53:55 -04:00
jim-p
b404e665a4 Allow NAT-T to be set with IKEv2. Fixes #9695 
(cherry picked from commit 9c4f5b95ee)
 2019-08-27 13:48:57 -04:00
jim-p
9a6d5e1017 Add kernel memory usage to status.php. Implements #9705 
(cherry picked from commit df5862939e)
 2019-08-27 13:45:07 -04:00
jim-p
f12c6115c0 Redact ACB encryption PW. Fixes #9694 
(cherry picked from commit 603764cbb0)
 2019-08-27 13:28:14 -04:00
jim-p
504ed8614d Apply the same fix from issue #8469 to DHCPv6. Fixes #9448 
(cherry picked from commit 7ba6788b15)
 2019-08-27 13:26:14 -04:00
jim-p
585bbbd33e User & Group Manager: Improve Deny Config Write Handling. Fixes #9259 
* Denies all changes if a user has the Deny Config Write privilege.
Previously it only denied the config write but some OS operations were
performed.
* Sets an input error so the user is notified that their attempt failed.
* Hides the add and delete buttons so read only users don't see the
option to perform those actions (but are still denied if they submit the
form through other means)

(cherry picked from commit acd7e5601a)
 2019-08-27 13:21:40 -04:00
jim-p
0caa971ed9 Only prevent deleting IPsec VTI P2 when set to VTI. Fixes #9258 
(cherry picked from commit 37c6083084)
 2019-08-27 11:17:34 -04:00
jim-p
1abe3fc4e0 Correct wording of CA/Cert CN input validation. Fixes #9234 
(cherry picked from commit 0c51971baf)
 2019-08-27 10:49:43 -04:00
Renato Botelho
1e2990aa0a Add a control file to be used as trigger to sync files to S3 2019-08-27 09:23:02 -03:00
jim-p
0dd016d44d Add some exception handling to auth attempts. Fixes #9150 
(cherry picked from commit d832b6ce47)
 2019-08-26 16:44:21 -04:00
jim-p
5f66269dad Fix state kill ordering in rc.newwanip. Fixes #4674 
Move state kill to after new rules and routing have been setup.
Otherwise there is a race condition where new states could be created
before the new rules and routing are in place.

(cherry picked from commit 86e6e0bcff)
 2019-08-26 15:25:54 -04:00
Renato Botelho
d756d34d04 Add haproxy18 options 2019-08-19 16:05:09 -03:00
jim-p
ecfd1ddc0e Fixup format of XMLRPC auth error to match GUI auth error. 
(cherry picked from commit 6e0d47510e)
 2019-08-07 10:49:31 -04:00
jim-p
e0bd07fdae Picture widget corrections. Fixes #9610 
* Sanitize user input before using as path/filenames
* Use a more accurate method of determining image type on read
* More sanity checks before reading images.

(cherry picked from commit 2c544ac61c)
 2019-07-01 16:00:06 -04:00
jim-p
3c2cc70243 Encode error output in services_captiveportal_mac.php. Fixes #9609 
(cherry picked from commit d31362b69d)
 2019-07-01 14:37:57 -04:00
jim-p
9357ffe380 Encode hostname in services_acb.php before use. Fixes #9584 
(cherry picked from commit fe482ccc1e)
 2019-06-13 13:10:04 -04:00
jim-p
b9e689cf5b Initialize VLAN array in console setup. Fixes #9582 
(cherry picked from commit 45f9575396)
 2019-06-11 09:51:22 -04:00
Renato Botelho
82887eb03f Build net/ng_etf-kmod 2019-06-07 15:25:52 -03:00
Renato Botelho
8cc419b038 Speedup build running all in parallel 2019-06-04 16:59:28 -03:00
Renato Botelho
bf11d65028 Allow MAKE_JOBS for slow ports 2019-06-04 13:41:54 -03:00
jim-p
affe8a552e Set IPsec VTI MTU to configured value at boot. Implements #9111 
(cherry picked from commit 3334f9c4cd7111c624ba2395b91c065d7dd338b1)
 2019-06-03 14:21:31 -04:00
jim-p
ef0045d812 Teach dhcrelay about upstream and downstream interfaces. Fixes #9466 
No config changes or UI changes, it is handled automatically.

(cherry picked from commit f427d68dbc)
 2019-06-03 12:48:37 -04:00
jim-p
113173b982 Terminal size detection. Fixes #9569 
For sh/.profile, run "resizewin -z" at login which will set the terminal
type only when empty, which is kind to remote and local logins and has
the intended behavior.

Also for tcsh, if the user logs in from the serial console, use postcmd
to resize the window after each command in case the user resizes the
window.

(cherry picked from commit 1dc4afdc66)
 2019-05-30 10:12:55 -04:00
Renato Botelho
de0e62a145 Rename pfSense-pkg-bind9 to pfSense-pkg-bind 2019-05-29 09:53:49 -03:00
jim-p
89b123fb3d Ensure NTP values are treated as numbers before use. Fixes #9558 
(cherry picked from commit c92dbfc189)
 2019-05-28 14:00:43 -04:00
jim-p
f8560a14e9 Privilege matching -- allow JS anchors. Fixes #9550 
Attempts to detect a special case where a file does not actually
exist, and yet should be allowed since it is used by JavaScript.

So long as the anchor name doesn't contain any characters that might let
it evade other checks, allow it through.

(cherry picked from commit bdbd8534ee)
 2019-05-24 15:49:55 -04:00
jim-p
00680d36ef Add GUI components for MDS mitigation. Implements #9532 
While here, add option to disable PTI display in sysinfo widget.
Implements #9323

(cherry picked from commit 42c48efe1c)
 2019-05-22 16:20:44 -04:00
jim-p
ac0bb6bc8e Use correct variable in IP address validation check for DNS. Fixes #9543 
(cherry picked from commit 912562c4d7)
 2019-05-22 14:06:07 -04:00
jim-p
b9ed452dbb Remove wildcards incorrectly used in isAllowedPage(). Fixes #9541 
(cherry picked from commit cf529cbe33)
 2019-05-21 14:53:53 -04:00
Renato Botelho
e905762d96 Add sysutils/ccze to the repo 2019-05-21 14:49:15 -03:00
jim-p
303641f828 Fix a potential source of PHP errors when saving per-log settings. Fixes #9540 
While here, fix save descriptions.
 2019-05-20 11:35:35 -04:00
jim-p
2bf6d43226 Revert "LDAP TLS option update. Implements #9417" 
This reverts commit efdba6ca75.
 2019-05-15 16:18:56 -04:00
Renato Botelho
657ab3933a Welcome 2.4.4-RELEASE-p3 2019-05-13 12:36:07 -03:00
jim-p
92d5396f04 Implement new OpenVPN advanced options privilege. Fixes #9511 
(cherry picked from commit 4a1841a1fa)
 2019-05-13 11:02:24 -04:00
jim-p
0dd99de71d Remove Advanced box from OpenVPN Wizard. Issue #9511 
(cherry picked from commit b8ca6554d0)
 2019-05-13 11:02:18 -04:00
jim-p
7ccb452496 Fix ACB privileges. Fixes #9519 
(cherry picked from commit 18c1de4133)
 2019-05-11 18:55:48 -04:00
jim-p
6cb5a93762 Rewrite unbound remotecontrol.conf when it is empty. Fixes #9470 
(cherry picked from commit 4b70a2006e)
 2019-05-10 16:20:31 -04:00
jim-p
44fb8aca0d Add back DNS over TLS host verification code. Fixes #8602 
Requires Unbound 1.9.0_1 from pfsense/freebsd-ports, which fixes a bug
in Unbound 1.9.0 which did not fully implement OpenSSL 1.0.2 host
validation support. See https://www.nlnetlabs.nl/bugs-script/show_bug.cgi?id=4206#c5

(cherry picked from commit 7e8bfed216)
 2019-05-10 16:20:21 -04:00
jim-p
fdb7f0a547 status.php updates 
* Ensure firewall info is generated when run from the CLI
* For SG-1100, also include its public key

(cherry picked from commit 2309b26a2b)
 2019-05-10 16:19:45 -04:00
jim-p
c6d54302b9 Fix another typo 
(cherry picked from commit a0930ca608)
 2019-05-10 16:19:41 -04:00
jim-p
ff32782af7 Add parens around NAT reflection rule interface. Fixes #9446 
(cherry picked from commit 8800ee6f90)
 2019-05-10 16:19:37 -04:00