Scott Ullrich
528ec8dbab
* Download bogons entries from pfsense.com
...
* Do not update on every minute on the 1st of the month
* Sleep for a random period before updating to avoid killing the server
2007-11-27 20:28:36 +00:00
Chris Buechler
f0dbab251c
Move PPPoE Server to Services, VPN menu is misleading
2007-11-26 01:23:46 +00:00
Chris Buechler
814295d077
Move PPPoE Server to Services, VPN menu is misleading
2007-11-26 01:23:05 +00:00
Chris Buechler
cb824d052e
Proper fix for aliases edit, backing out entire change was overzealous.
...
Ticket #1513
Ticket #1476
2007-11-25 20:27:50 +00:00
Chris Buechler
c47e956f52
Really kill off slbd
...
Ticket #1533
2007-11-25 19:54:48 +00:00
Scott Ullrich
7b2f53f759
Remove extra C/R
2007-11-24 05:02:51 +00:00
Scott Ullrich
37b0098e7c
Really allow command arguments from pfSsh.php
2007-11-24 04:37:59 +00:00
Scott Ullrich
f8757b62fd
Allow command arguments from pfSsh.php
2007-11-24 04:35:07 +00:00
Scott Ullrich
dc2d40b2e1
Remove syslog.conf from checked out files marked for updating.
2007-11-24 01:44:23 +00:00
Scott Ullrich
7e2dd51d36
edit.php show an error on opening an empty file
...
Ticket #1519
2007-11-24 01:24:07 +00:00
Scott Ullrich
861283c168
Nuke cvs_sync.sh on upgrade
2007-11-24 01:07:09 +00:00
Scott Ullrich
bc4822363f
Add pfSense php shell playback scripts
2007-11-23 23:58:39 +00:00
Scott Ullrich
bb1a546c49
MFC pfSense shell from HEAD.
2007-11-23 23:57:23 +00:00
Scott Ullrich
4e8e15e61f
Turn register_argc_argv on
2007-11-23 05:59:21 +00:00
Chris Buechler
1422da6516
description text correction
2007-11-20 00:29:07 +00:00
Chris Buechler
fa495e94c3
fix typo and touch up text
2007-11-19 08:36:00 +00:00
Seth Mos
ad629036f2
Fix math on throughput graph
2007-11-17 23:36:44 +00:00
Seth Mos
7aa6c10fd5
Fix spelling
2007-11-17 23:12:25 +00:00
Scott Ullrich
98d79efbc9
Correctly define Developers option.
2007-11-10 02:30:00 +00:00
Scott Ullrich
9350a6429e
Remove any previous MD5 sums after upgrade.
2007-11-07 23:09:38 +00:00
Scott Ullrich
7f37e7dcba
Failover in 10 seconds as opposed to 60 seconds on DHCP Server failover mode.
2007-11-06 18:43:24 +00:00
Scott Ullrich
f971bb634b
IPSEC keep alive pinger using the wrong source IP address
...
Ticket #1482
2007-11-05 17:33:15 +00:00
Chris Buechler
80b1932d82
remove whitespace at end
2007-11-05 02:24:40 +00:00
Chris Buechler
73a8004960
fix setting of sysctls to remove error at bootup
2007-11-05 01:33:41 +00:00
Chris Buechler
e8e8d1edb9
comment out debugging code, was slightly breaking IPsec logs page and possibly others.
2007-11-05 00:42:02 +00:00
Chris Buechler
f6db0eeffb
Do not allow DHCP server to be enabled when DHCP relay is enabled, and vice versa
...
Ticket #1488
2007-11-04 22:06:01 +00:00
Scott Ullrich
348b53dd71
Do not allow dhcp-relay to be enabled if dhcp server is enabled on any interface.
Ticket #1488
2007-11-03 21:06:35 +00:00
Scott Ullrich
8a7997ca39
Revert graph.php back to 1.8.2.10.2.3
...
Tested-by: hoba
Ticket #1496
2007-11-03 20:42:29 +00:00
Seth Mos
b9c8193ea0
Back out counter wrap fix from ticket 1494 as it causes more issues then
...
we were trying to solve.
2007-11-01 21:55:10 +00:00
Scott Ullrich
37a7a75b7f
multiple vlans + spoofmac result in unexpected behaviour
...
Ticket #1514
Introduction
I have an acceptable workaround, so the problem is not urgent, but before i fiogured out the workaround, is was severely impacting performance (3 interfaces not operating). I am a network specialist and I am available to assist wherever possible. If the issue si considered seriousenough for a fix, I can assist in more detailed pinpointing using tcpdumps on test-platforms.
Symptoms
If a interface is using vlan tagging for virtual interfaces and also the untagged interface is using MAC address spoofing, communication fails on the tagged vlans.
Description
On interface rl1 is untagged the WAN connection. This requires a spoofed MAC address, eg using <spoofmac>00:03:6b:f7:3b:3f</spoofmac>. On interface rl1 is also a vlan/tagged interface, eg vlan0 using rl1 and vlan tag 5. The tagged interface vlan0 expects to use the original MAC address of the interface rl0. But the issue is that interface rl0 is only processing incoming packets with destination mac address spoof_mac_rl1.
Workarounds (no code change required)
acceptable configure the <spoofmac>00:03:6b:f7:3b:3f</spoofmac> on all vlan interfaces connected to interface rl1
funny start a tcpdump on the vlan interface. This will put the interface in promiscuous mode and it will process all packets. Now the packets destined for the original MAC address (and active on the vlan interface)
bypass Do not use tagged interfaces on a interface with spoofmac
Remarks
It is very confusing that when a vlan is created, the GUI a refernece shows to the physical/original MAC address, even when the MAC addres of the untagged interface is
2007-11-01 18:14:31 +00:00
Scott Ullrich
f3b44e0ad4
Backout RELENG_1_2 alias edit changes since it breaks until a proper fix can be sought.
...
Modify existing "Aliases" - php error
Ticket #1513
2007-11-01 17:59:12 +00:00
Scott Ullrich
a720443541
Adding keep alive host to IPsec causes warning in webGUI
...
Ticket #1509
2007-11-01 17:54:55 +00:00
Seth Mos
e945fa1581
Fix courtesey of Billm, hackathon 2007 conversation.
...
Forgotten commit.
2007-10-29 22:01:53 +00:00
Bill Marquette
a890a97198
MFC [19856] - ticket #1497
2007-10-26 02:13:41 +00:00
Bill Marquette
8ccc84e92e
Fix for Ticket #1494 was committed from my first stab at the fix and not the actual fixed code and ended up in ticket #1496
2007-10-26 02:06:27 +00:00
Seth Mos
63bef62cec
Remove private networks
2007-10-25 10:36:54 +00:00
Seth Mos
f1d483a773
Update bogons list, it is severly out of date
2007-10-25 09:38:22 +00:00
Scott Ullrich
c1a304acc1
MFC
...
Ticket 1709: fixed typo in OpenVPN cfg-page
2007-10-24 19:42:42 +00:00
Scott Ullrich
478d7fa2d7
MFC
Ticket 1709: fexed typo in OpenVPN cfg-page
2007-10-23 20:14:21 +00:00
Seth Mos
b7e9c8eb7d
Remove size headers since they seem to screw up IE
2007-10-21 16:19:14 +00:00
Bill Marquette
9c0e095388
lint
2007-10-19 22:00:53 +00:00
Scott Ullrich
685d9803d9
Remove the beastie boot loader prompt and return to prior freebsd behavior.
2007-10-19 21:20:02 +00:00
Bill Marquette
486f20d1da
issed one
2007-10-19 21:20:02 +00:00
Bill Marquette
916ec736fc
Fix Javascript errors. Thanks JSLint!!
2007-10-19 21:17:17 +00:00
Bill Marquette
e6056acc60
ratio load balancing should actually work
2007-10-19 21:11:37 +00:00
Bill Marquette
9dcb92dadf
Ticket #1482 - set the source to an interface that is inside the subnet definition
2007-10-19 20:52:44 +00:00
Scott Ullrich
316ea93621
Relax the ip address check and allow duplicate ip address entries.
2007-10-19 20:46:11 +00:00
Scott Ullrich
0c82024286
Relax the ip address check and allow duplicate ip address entries.
2007-10-19 20:39:16 +00:00
Bill Marquette
3b8d0494e4
Ticket #1476 - use convert multibyte instead of just specialchars
2007-10-19 19:48:24 +00:00
Bill Marquette
fcccc7b6d2
Ticket #1494 - when wrapping at 32bits, the difference is 32bits - last + current, not some massive negative number
2007-10-18 21:52:58 +00:00
