jim-p
|
57fa70112a
|
Ensure that we only add a state type on pass, and that we only add flags to a TCP reject rule if they were not added previously. Fixes #3050
|
2013-06-18 10:52:29 -04:00 |
|
jim-p
|
bca506d431
|
Change test after IPsec apply to check for any value >= 0. If a user has hostnames vpn_ipsec_configure() now returns the number of hostnames, so the previous test failed and the "apply changes" button would never go away.
|
2013-06-18 10:06:16 -04:00 |
|
Renato Botelho
|
ef01b77f6d
|
Fix #3049, set $config as global to it can be read
|
2013-06-18 07:48:40 -03:00 |
|
Renato Botelho
|
9507aa0ec0
|
Allow user to set interval between attempts to resolve hostnames configured on aliases
|
2013-06-17 12:26:23 -03:00 |
|
Ermal
|
b48e2e6bcc
|
Include the burst size in the limiter. Submitted-by: http://forum.pfsense.org/index.php/topic,62470.0.html
|
2013-06-17 13:25:55 +00:00 |
|
Ermal
|
70a9e13176
|
Remove referenced binary not used anymore
|
2013-06-17 09:25:19 +00:00 |
|
Ermal
|
8cea45e4f8
|
Remove unused code and spurious alert
|
2013-06-17 09:24:06 +00:00 |
|
Ermal
|
891dfb2496
|
Use file_put_contents for simplicity and readbility
|
2013-06-17 09:23:59 +00:00 |
|
Ermal
|
1005484304
|
* Use when needed the family for get_real_interface
* During dhcp setup use -n for cp to avoid coping uselessly
|
2013-06-17 09:00:57 +00:00 |
|
Ermal
|
f960f9dd20
|
Use family parameter for v6 to get correct interface
|
2013-06-17 08:27:13 +00:00 |
|
Ermal
|
10ce1ac1cd
|
Remove useless variable and also correct some style
|
2013-06-17 08:13:12 +00:00 |
|
Ermal
|
ca2b90ec7e
|
Do not do the same tricks here that are done on get_real_interface but just call the function directly
|
2013-06-17 08:06:23 +00:00 |
|
Ermal
|
d90ea5ffd5
|
Get interface from inet6 domain
|
2013-06-17 08:06:16 +00:00 |
|
Ermal
|
08efe4e6f3
|
Use trim rather than str_replace. Also no need to sleep anymore since dhcp will configure first the interface
|
2013-06-17 08:06:08 +00:00 |
|
Ermal
|
6756d9eed6
|
Remove unreferenced binaries. correct some formatting and also to make function clear to track correct the curly placement
|
2013-06-17 07:55:25 +00:00 |
|
Ermal
|
50a88d93fd
|
Provide full path to route binary
|
2013-06-17 07:55:17 +00:00 |
|
Ermal
|
85a389c9f1
|
Provide full path to route binary
|
2013-06-17 07:55:10 +00:00 |
|
Chris Buechler
|
af600fe246
|
Don't flip the IPv6 allow setting just because people are upgrading. Just upgrading versions shouldn't change this behavior. As much as most of us would like people to start deploying IPv6, the vast majority aren't going to be immediately post-upgrade, and changing this can change the firewall policy behavior by allowing v6 that previously wasn't allowed. Upgrades should never change the firewall behavior like that. At the time it was done, everyone using the 2.1 code base was using it for IPv6, so of course it tripped up quite a few people.
|
2013-06-17 00:39:36 -05:00 |
|
Chris Buechler
|
891ecd18f8
|
not true you have to log in again since HTTP basic auth was deprecated.
|
2013-06-17 00:24:26 -05:00 |
|
Chris Buechler
|
7b79e0cb85
|
add MSS clamping to setup wizard. Now that MTU and MSS are separate, the MTU description was wrong, and both need to be there.
|
2013-06-17 00:15:05 -05:00 |
|
Chris Buechler
|
bcd94190b1
|
TCP flags are valid on any type of rule, don't skip them on block or reject rules
|
2013-06-14 19:06:49 -05:00 |
|
Renato Botelho
|
2ca432514e
|
Fix max length for wpa passphrase, it fixes #3034
|
2013-06-14 16:34:21 -03:00 |
|
Renato Botelho
|
c9322c5ceb
|
Allow queues to be deleted, it fixes #3037
|
2013-06-14 15:44:48 -03:00 |
|
Renato Botelho
|
d60629b071
|
Update list of mobile service providers
|
2013-06-14 09:45:08 -03:00 |
|
jim-p
|
654ed9e0c4
|
Update the default firmware URL (it was still pointing to HEAD on RELENG_2_1)
|
2013-06-13 16:48:44 -04:00 |
|
jim-p
|
94860e9e5e
|
Fix exec perms on mail.php
|
2013-06-13 13:13:05 -04:00 |
|
jim-p
|
185f24c35e
|
Add a simple CLI mail script capable of sending an SMTP message using echo/piped input, e.g. ifconfig -a | mail.php -s"ifconfig output"
|
2013-06-13 13:03:37 -04:00 |
|
jim-p
|
95dfe4f55c
|
Split actual SMTP send into its own function.
|
2013-06-13 12:52:04 -04:00 |
|
jim-p
|
f09926869f
|
Add the ability to disable Growl or SMTP notifications but keep their settings intact. Remove automatic test messages on save. Add individual test buttons for Growl and SMTP that work even if the service(s) are disabled.
|
2013-06-13 12:19:35 -04:00 |
|
jim-p
|
8a0f8732a5
|
Don't restrict the content of descr when making CA/Certs, it's free-form.
|
2013-06-13 12:19:34 -04:00 |
|
Ermal
|
46b323f053
|
Actually do not allow the loop to continue. Related to Ticket #1928
|
2013-06-12 17:46:25 +00:00 |
|
Ermal
|
1da5d1d742
|
Actually try to get the real interface for v6 family to correctly get stf(virtual) interfaces
|
2013-06-12 07:05:48 +00:00 |
|
Ermal Luçi
|
43b9f062e3
|
Merge pull request #668 from mdima/RELENG_2_1
Status-Queues: Get the stats gauge for PPS or bandwidth Edit (RELENG_2_1)
|
2013-06-11 13:36:43 -07:00 |
|
Michele Di Maria
|
e59bd27375
|
Status-Queues: Get the stats gauge for PPS or bandwidth Edit
Let the user select the values to show in the stats gauge between PPS and bandwidth.
|
2013-06-11 22:18:45 +02:00 |
|
Ermal
|
8959f2fc21
|
Correct the command for setting the 6rd gw
|
2013-06-11 19:31:23 +00:00 |
|
Ermal
|
7fdd0c73e0
|
Wait 1 second before starting the other dhcp6c since pkill does not wait for the process to exit
|
2013-06-11 10:02:50 +00:00 |
|
Ermal
|
89784e551b
|
Do better checks and do not include an interface that will be skipped to the known ifaces
|
2013-06-10 20:43:42 +00:00 |
|
jim-p
|
39b84ccc7f
|
Allow localhost IP Alias VIPs to sync, too
|
2013-06-06 13:55:15 -04:00 |
|
jim-p
|
56bf3ef146
|
Allow selecting "Localhost" as an interface for IP Alias VIPs - this way you can make IP Alias VIPs to use for binding in a routed scenario with CARP without creating an IP conflict.
|
2013-06-06 13:55:10 -04:00 |
|
Ermal
|
00a7438c5b
|
Add the 6rd gateway information
|
2013-06-04 18:04:44 +00:00 |
|
Renato Botelho
|
50d3ed9c3c
|
Also consider 0.0.0.0/0 here since it fails on is_subnet() but is a valid/special config. Fixes #3016
|
2013-06-04 08:26:38 -03:00 |
|
jim-p
|
90df9a993e
|
vpn.inc calls functions from ipsec.inc but doesn't actually include it in all cases where it's needed.
|
2013-06-03 08:38:07 -04:00 |
|
jim-p
|
6b53736d3b
|
Correct mouseover description for adding a certificate. Fixes #3017
|
2013-06-03 08:24:36 -04:00 |
|
Phil Davis
|
d9f2de9ad4
|
DHCP Server enable/disable change needs filter_configure
When DHCP Server is enabled or disabled on an interface, the filter rules should change to include or not mention DHCP.
|
2013-06-01 22:47:53 -05:00 |
|
jim-p
|
f79a5df073
|
Don't use invalid or IPv6 DNS servers when crafting DHCP DDNS Zones. Fixes #3015
|
2013-05-31 21:22:54 -04:00 |
|
Renato Botelho
|
5789e9f837
|
Update pot file
|
2013-05-31 10:11:24 -03:00 |
|
jim-p
|
786399e5c7
|
Fix license link
|
2013-05-30 16:44:50 -04:00 |
|
Ermal Luçi
|
b17c09ba4b
|
Merge pull request #662 from jean-m-cyr/RELENG_2_1
Back port sharper.inc commit from master to RELENG_2_1
|
2013-05-30 11:07:48 -07:00 |
|
Jean Cyr
|
2fbefad667
|
Back port sharper.inc commit from master to RELENG_2_1
|
2013-05-30 12:25:00 -04:00 |
|
jim-p
|
b27ec31472
|
Update help.php with some new files, clean out some old/obsolete ones.
|
2013-05-29 16:45:24 -04:00 |
|