Ermal Luçi
74b5a9ed86
Unbreak the corn job installation for schedules.
2008-12-16 23:00:53 +00:00
Seth Mos
781a93ffff
Use mwexec so we can see if it fails.
2008-12-16 15:13:09 +00:00
Seth Mos
77be57453e
Format has changed for quality, traffic and packets. Remove these files. They will be recreated
2008-12-16 09:30:28 +00:00
Seth Mos
ea1f7b4267
Move rrd graph data gathering over to pfctl instead of netstat, this uses 64 bit counters
2008-12-16 09:14:18 +00:00
Seth Mos
b5a8483ccd
Move command line after comment
2008-12-16 08:06:50 +00:00
Seth Mos
971eaab5d7
Invoke pfctl for stats once and work with the output
2008-12-15 22:21:37 +00:00
Scott Ullrich
01385b0c29
* Use 64 bit counters from PF for interfafe stats
...
* Add block packets / traffic count, too
2008-12-15 20:23:56 +00:00
Scott Ullrich
fe94b80bc7
Write out all commands that should be run after filter load instead
...
of requiring the command to be run 5+ times for certain scenarios.
Fix sponsored by BSD Perimeter
2008-12-15 17:43:19 +00:00
Scott Ullrich
787c3e718d
Back out "Rules have not changed. Not reloading" changes.
2008-12-15 17:41:08 +00:00
Ermal Luçi
8177775035
Behave correclty on some corner cases.
2008-12-14 20:56:58 +00:00
Ermal Luçi
9ea2576b3a
* Remove an uneccesary global variable($schedule_enabled)
...
* Do not create schedule rules in the case that schedules have been created but not referenced in any rule
2008-12-14 20:28:30 +00:00
Ermal Luçi
6fa67e540e
Actually get the whole command output.
2008-12-14 09:59:04 +00:00
Bill Marquette
ddcb7b8c20
Allow states to work outbound properly too.
...
Many thanks to Arthur Green for allowing me to use him as my remote
fingers to get this working right.
2008-12-13 06:28:47 +00:00
Scott Ullrich
c01929476c
Turn on bridge filtering.
...
Noticed-by: BillM
2008-12-13 05:54:39 +00:00
Ermal Luçi
b790e7674d
* Add another missing ". * Use full path to binary.
2008-12-09 07:09:07 +00:00
Scott Ullrich
7b45144168
Add missing "
...
Ticket #1850
2008-12-09 06:16:27 +00:00
Scott Ullrich
498f15a3ea
* Reset filter reload status to Done if rules are the same
...
* Add a note that the rules are not the same and that the filter will
not be reloaded to the system logs
2008-12-08 20:56:44 +00:00
Ermal Luçi
faab50d4a2
Fix the {interface}up checks.
2008-12-08 13:51:38 +00:00
Ermal Luçi
b55307bfb8
Fix generation of pppoe reset cron entry. Not sure if this should stay here or go into inteface_pppoe_configure!?
2008-12-08 13:44:50 +00:00
Chris Buechler
ed4937bc18
fix CARP panics with VLANs
2008-12-08 02:35:29 +00:00
Scott Ullrich
f8a4527ceb
Check to make sure file exists before operating on it.
2008-12-08 01:22:42 +00:00
Chris Buechler
fc6dc26384
Don't use broadcast on CARP IPs.
2008-12-08 00:12:19 +00:00
Chris Buechler
f11deb5bf4
Don't add CARP IPs on an interface that doesn't exist to prevent panic.
2008-12-07 23:51:33 +00:00
Chris Buechler
61c6b6c1ff
log mwexec if developerspew is on
2008-12-07 23:34:25 +00:00
Scott Ullrich
8f158ea1e4
Compare rules.debug to previously loaded rules. If no rule changes
...
have occured, do not try to reload the rules and sync changes to backup
members which can result in the rules being reloaded constantly when
load balancing is in use, etc.
2008-12-07 20:13:00 +00:00
Ermal Luçi
5209079f7c
Shaper has no more enable disable functionality.
2008-12-07 14:34:38 +00:00
Ermal Luçi
105a0f744b
Fix services_dyndns_reset to be useful.
2008-12-07 13:57:42 +00:00
Ermal Luçi
97973ed8f6
Add another parameter to interface bring down which can be used to destroy the interface if it is a virtual/cloned one.
2008-12-07 13:30:10 +00:00
Seth Mos
c886eb8548
Temporary Fix for vlan creation issue.
2008-12-05 11:38:48 +00:00
Seth Mos
f4c4bd2f55
Fix rules with a gateway (not gateway groups)
2008-12-05 10:37:19 +00:00
Seth Mos
ad63b6dcc8
Remove debugging
2008-12-05 10:14:52 +00:00
Seth Mos
18684c5dbb
Split out IPSEC filter rules into seperate functions.
...
Only add filter rules for the interface the tunnel is bonded to.
2008-12-05 09:52:19 +00:00
Seth Mos
31597ebf2c
Fix gateway lookup to use $GatewaysList array
2008-12-04 17:44:08 +00:00
Seth Mos
96bcab8b3b
Oops, remove debugging
2008-12-04 17:36:16 +00:00
Seth Mos
ae91dc3878
Generate Array With Gateway and Gateway Groups. Then reference them directly from the filter rule code.
2008-12-04 17:24:37 +00:00
Seth Mos
0595b085a0
Fix interface lookup with gateway groups.
...
* next would be replacing the entire logic by directly referencing them from
the new return_gateway_groups_array(). This will make the code much
more readable.
2008-12-02 23:16:22 +00:00
Seth Mos
fd8eeda5d8
Commit function that returns all gateway group items in a array after processing.
...
The items from this array can then be directly reference from the filter code.
2008-12-02 23:05:02 +00:00
Seth Mos
addc322c24
* Remove duplicate
...
* tag array items by gateway name so we can directly refer them
2008-12-02 21:54:19 +00:00
Ermal Luçi
6f833b81ef
Better handle floating rules.
2008-11-30 23:54:00 +00:00
Ermal Luçi
31d36e64fd
Update shcedule code to new world order!
2008-11-30 23:23:50 +00:00
Scott Ullrich
40e4600987
Move php.ini setup to its own file
2008-11-30 22:16:32 +00:00
Seth Mos
33bf93fb91
Correct field value to check
2008-11-30 22:03:27 +00:00
Ermal Luçi
9845331715
Micro optimization.
2008-11-30 21:22:25 +00:00
Ermal Luçi
7d12e3094c
Use correct var.
2008-11-30 20:43:53 +00:00
Ermal Luçi
99c2a28b1d
Add some checks on interface_bring_down and remove unlinking of nameserver.conf it needs some more thinking on how to propperly do that.
2008-11-30 20:15:08 +00:00
Seth Mos
82a1ee994d
Remove debugging
2008-11-30 18:13:52 +00:00
Ermal Luçi
dd86dccfbe
Correct error message.
2008-11-30 10:48:48 +00:00
Ermal Luçi
07101b63d1
It is legitimate to be called with an empty vlanif. The webgui uses this to create new vlans.
2008-11-30 10:47:26 +00:00
Ermal Luçi
3ae4960c78
Correct some checks and use propper whitespace.
2008-11-30 10:43:19 +00:00
Ermal Luçi
7901dff51b
Untested but correct way to work with interfaces.
2008-11-30 09:43:58 +00:00
