Scott Ullrich
44f1247ec6
Cleanup output text
2008-09-07 02:06:57 +00:00
Bill Marquette
12294e724d
we don't care if rm can't find old dhcpd database files
2008-09-07 01:18:59 +00:00
Bill Marquette
ac6ddeffe1
fix debug code that never worked and make it disabled by default
2008-09-07 01:17:54 +00:00
Bill Marquette
b980f9e485
Semicolons after if's apparently parse...but it's not terribly helpful
2008-09-07 01:15:31 +00:00
Scott Ullrich
8d9a67b2ec
Eliminate unneeded ,
2008-09-07 01:09:56 +00:00
Scott Ullrich
7993688e8b
Check to see if key exists before unsetting
2008-09-07 01:06:39 +00:00
Scott Ullrich
a4c597209a
Check to see if a interface has a dhcp key before trying to unset
...
if the interface has a dhcp server enabled.
2008-09-07 01:00:20 +00:00
Scott Ullrich
254454a2f6
Hide misc errors that occur on / when we have a read-only filesystem (livecd).
2008-09-06 23:33:07 +00:00
Scott Ullrich
347819236f
* Cleanup php fastcgi files better
...
* Remove *.tmp files
2008-09-06 23:12:48 +00:00
Scott Ullrich
4f54dd23b8
Add conf.default to the unionfs roster
2008-09-06 22:48:41 +00:00
Scott Ullrich
d948c0d40c
Allow bin sbin and boot writing
2008-09-06 22:36:01 +00:00
Scott Ullrich
4f05fc7357
Do not update platform on cvssync runs
2008-09-06 22:02:38 +00:00
Scott Ullrich
b9c529eba6
It is now technically possible to cvssync livecd for testing :)
2008-09-06 21:57:46 +00:00
Scott Ullrich
3e5dbb6efc
rc.cdrom already outputs its status
2008-09-06 21:39:13 +00:00
Matthew Grooms
3c11bd3c5b
Minor re-work of OpenVPN configuration. Use operational modes to determine
...
what configuration options are appropriate. The operational mode dictates
the authentication method. They are defines as follows ...
Peer to Peer ( SSL/TLS )
Peer to Peer ( Shared Key )
Remote Access ( SSL/TLS )
Remote Access ( User Auth )
Remote Access ( SSL/TLS + User Auth )
Some of these modes allow for user authentication using passwords. We now
use the etc/inc/openvpn.auth-user.php file to facilitate this by checking
the username and password supplied by OpenVPN against our centralized user
database.
The Server and Client user interfaces have also been updated to support
TLS packet authentication. This is an additional security option that is
optional.
2008-09-06 21:10:43 +00:00
Scott Ullrich
ab1a08b262
* Show operations in progress
...
* Increase /conf memory partition size to 6m
2008-09-06 20:47:46 +00:00
Scott Ullrich
bfc956c056
Move cvssync functions to /root/
2008-09-06 20:25:51 +00:00
Scott Ullrich
75cf30df1a
Use root unionfs, this saves a bit of memory.
2008-09-06 06:07:06 +00:00
Scott Ullrich
84e50dc84a
Cleanup text
2008-09-06 05:32:11 +00:00
Scott Ullrich
12bf92cacc
Move unionfs commands earlier
2008-09-06 04:41:23 +00:00
Scott Ullrich
9d847a1a37
Correct CDROM check
2008-09-06 04:34:44 +00:00
Scott Ullrich
a8d5dba40c
* Mount /root unionfs writable
...
* Move unionfs mounting to earlier in the sequence
2008-09-06 04:13:00 +00:00
Scott Ullrich
c75c3809e1
Mount /usr/ with write access using UNIONFS.
2008-09-06 04:00:12 +00:00
Seth Mos
9166304508
Make the ftp proxy work again.
2008-09-05 22:47:32 +00:00
Matthew Grooms
0770c295d1
Remove the code that auto-generates an outbound NAT rule for traffic that
...
originates from a private network to a distant OpenVPN network. We don't
want to unconditionally hide all traffic behind the vpn interface address.
If a admin wants to do this manually, nothing is stopping them.
2008-09-05 03:16:33 +00:00
Matthew Grooms
ea28182c90
Correct the path for OpenVPN client specific configuration files. When the
...
directory creation moved to the rc script, the path name was changed from
/var/etc/openvpn_csc to /var/etc/openvpn-csc. Update the code to match.
2008-09-04 22:48:45 +00:00
Matthew Grooms
095a95ae54
Revert to the previous method of referencing OpenVPN device names in the
...
filter.inc file. We now specify the openvpn device name which is actually
an os managed group. OpenVPN tap instances are added or removed from this
group when OpenVPN configurations are created or destroyed. Portions of
this patch were written by Ermal.
2008-09-04 19:47:19 +00:00
Matthew Grooms
91224d9af0
Modify the ssh toggle script so it at least runs. I suspect its broken in
...
a more subtle way however. Connected client don't appear to disconnect.
2008-09-04 19:29:35 +00:00
Matthew Grooms
8411b218e6
Bump the system dh-parameters file to 2048 per request on dev@.
2008-09-04 17:13:14 +00:00
Matthew Grooms
d97ab68861
Cleanup some of the authentication code. Fix the problem where you must
...
navigate away from the initial page twice to get somewhere. Remove some
of the cruft that was no longer used. Don't unconditionally redirect a
user to their homepage if another url was specified pre-login. This will
allow admins to create bookmarks to specific pfsense webui pages.
2008-09-03 20:33:06 +00:00
Matthew Grooms
bfea87fff2
Remove the page locking privileges after discussion with Scott on IRC. The
...
feature was confusing and offered little utility that I could see. If we
really need to provide serialized access to sections of the webui, IMO it
should be a global lock option and enabled or disabled manually and not a
privilege that is on all the time.
2008-09-03 17:52:15 +00:00
Matthew Grooms
322ac5a628
Correct a regression in the privilege system where pages were not being
...
matched correctly. Reported by Seth.
2008-09-03 17:25:47 +00:00
Seth Mos
58fe7e2bb3
Fix openvpn upgrade to look for right array.
...
Prevents Fatal parse error
2008-09-03 16:19:45 +00:00
Matthew Grooms
1cb0b40a2d
Correct problems with OpenVPN that prevented the lzo compression and pass
...
tos options from being set correctly in configuration files.
2008-09-03 04:13:02 +00:00
Ermal Luçi
a174a5ac9e
Use newer php5 features, to be safer on upgrade side.
2008-09-02 22:42:39 +00:00
Matthew Grooms
479ace0cef
Now that php is being compiled with OpenSSL, remove the php.ini line that
...
loads the extension. It is no longer required.
2008-09-02 21:28:42 +00:00
Matthew Grooms
ddee43a519
Now that we are delaying the creation of OpenVPN dh parameters, it appears
...
we need an explicit call to write_config() to ensure the data is saved.
2008-09-02 21:27:05 +00:00
Seth Mos
bb345bba5f
Make sure that convert_friendly_to_real also works for disabled interfaces.
2008-09-02 21:23:01 +00:00
Seth Mos
a9d8f977d8
Enclose interface in curly brackets to prevent filter errors.
...
This handles the multiple openvpn interfaces retuned from the interface list.
This should probably review after the openvpn work
2008-09-02 20:52:45 +00:00
Seth Mos
a30782f35c
Remove sleep
...
Make sure our tmp has the correct permission so we can trigger filter
reloads.
2008-09-02 20:19:54 +00:00
Seth Mos
d97e6033ae
Commit forgotten change so we use the proper script for filter reloads.
...
Maybe failover works now :)
2008-09-02 20:07:23 +00:00
Matthew Grooms
3cb54b54c0
Delay writing out the dh-parameters file if the paths have not yet been
...
initialized by the rc scripts. I hope this will make the initial boot
process more pleasant during install. If not, I will revert this commit.
2008-09-02 18:29:19 +00:00
Scott Ullrich
544156a7ad
Convert items to long if format
2008-09-02 18:06:33 +00:00
Scott Ullrich
dda5c8d90d
Start proxy at 8020
2008-09-02 18:03:40 +00:00
Scott Ullrich
359e3f6a0b
use long if statement, it appears the compact tests are failing. And
...
life is to short to worry "why".
2008-09-02 17:55:32 +00:00
Matthew Grooms
e9e7d50186
Modify all the default configuration files to ensure the versions match.
...
While in globals.inc, remove the easyrsa path and do some whitespace
cleanup.
2008-09-02 16:46:13 +00:00
Scott Ullrich
87385bf463
Create resolv.conf earlier in the boot process
2008-09-02 16:20:56 +00:00
Scott Ullrich
d1475c67b1
Use apc on cli, too
2008-09-02 02:29:57 +00:00
Scott Ullrich
5af041edf5
s/16/17
...
Noticed-by: cmb
2008-09-02 00:55:48 +00:00
Scott Ullrich
de9a0292cf
Add icmplim when upgrading configuration from 1.2.1
2008-09-01 19:43:17 +00:00
