Scott Ullrich
74fd3fa47c
Add carriage return
2007-08-28 18:28:16 +00:00
Scott Ullrich
df6ec31bfc
Make $fp global
2007-08-28 18:19:16 +00:00
Scott Ullrich
4ccb49746b
Do not close STDIN until script is done processing.
2007-08-28 18:18:16 +00:00
Scott Ullrich
1fe14a9b12
Prompt for kernel type if it is not defined.
...
Ticket #1435
2007-08-28 18:16:04 +00:00
Scott Ullrich
c70e6b3ac3
Fix CP not sending Acct-Session-Time to Radius during accounting update
Ticket #1434
2007-08-27 20:36:10 +00:00
Scott Ullrich
4888535bab
Disable firmware upgrade for embedded and cdrom and suggest using the console option to upgrade.
...
Ticket #1433
2007-08-27 16:31:00 +00:00
Scott Ullrich
5c973509cf
Correct if checks.
2007-08-24 17:16:01 +00:00
Scott Ullrich
5d8a613437
Do not allow sticky connection bit to be set if pppoe is enabled.
...
Ticket #1319
2007-08-24 17:11:07 +00:00
Scott Ullrich
d9e9d48587
Remove the warning per ticket #1397
2007-08-24 17:07:10 +00:00
Scott Ullrich
d29e2ec8b6
Add defCmdT("netstat -s -ppfsync","netstat -s -ppfsync"); which will be useful in debugging pfsync errors.
2007-08-22 21:44:18 +00:00
Scott Ullrich
2b907b9df3
Increase net.inet.ip.intr_queue_maxlen to 1000 which is the IP input queue.
2007-08-22 18:01:04 +00:00
Scott Ullrich
d6f67691f2
Only reload webGUI con CERT or KEY changes.
2007-08-21 19:38:35 +00:00
Scott Ullrich
259fa1acc3
Use maximum mbuf field
2007-08-20 01:02:01 +00:00
Scott Ullrich
7dbee0fd9b
Show MBUF usage.
2007-08-20 00:13:25 +00:00
Scott Ullrich
8356e2927b
Start racoon_watch.sh script on bootup if racoon is enabled.
2007-08-17 18:57:59 +00:00
Scott Ullrich
09a25aa637
Move to RC2
2007-08-10 21:18:41 +00:00
Scott Ullrich
1946c7dc5f
Ensure CARP cache is cleared on status page reload.
2007-08-08 16:54:00 +00:00
Scott Ullrich
0343ba6330
Ensure CARP cache is cleared on status page reload.
2007-08-08 16:50:11 +00:00
Scott Ullrich
aba7b1c3ed
Sync w/ HEAD
2007-08-08 16:30:37 +00:00
Scott Ullrich
fb0259fe60
Sync NATT support from m0n0wall
2007-08-04 20:27:45 +00:00
Scott Ullrich
db88204a28
* The drop is locked in /etc/rc.firmware
* Modify ttys after the correct file is moved into place
2007-08-02 18:46:56 +00:00
Scott Ullrich
bea014d0a5
* Drop the lock before exiting
* Fall back to RO on needed platforms before exiting
2007-08-02 18:44:48 +00:00
Scott Ullrich
8e9ea2815c
Only zap /kernels directory if it exists
2007-08-02 18:36:12 +00:00
Scott Ullrich
8757d79f29
* Ensure source kernel exists before blindly copying
* Move embedded ttys back into place after upgrade
2007-08-02 18:31:38 +00:00
Scott Ullrich
c0e4f564fb
Reinstall correct kernel after upgrade.
2007-08-02 07:32:05 +00:00
Scott Ullrich
bd93ec96d9
Reset slbd every 140 minutes as opposed to 300 minutes.
2007-08-02 02:13:43 +00:00
Scott Ullrich
a074233d7d
* Remove trailing space
* Remove duplicate command accidently commited
2007-07-31 22:54:03 +00:00
Scott Ullrich
c126316b9f
Increase timeouts when using a 1000 hz.
From the FreeBSD commit message:
Change TCPTV_MIN to be independent of HZ. While it was documented to
...
be in ticks "for algorithm stability" when originally committed, it turns
out that it has a significant impact in timing out connections. When we
changed HZ from 100 to 1000, this had a big effect on reducing the time
before dropping connections.
To demonstrate, boot with kern.hz=100. ssh to a box on local ethernet
and establish a reliable round-trip-time (ie: type a few commands).
Then unplug the ethernet and press a key. Time how long it takes to
drop the connection.
The old behavior (with hz=100) caused the connection to typically drop
between 90 and 110 seconds of getting no response.
Now boot with kern.hz=1000 (default). The same test causes the ssh session
to drop after just 9-10 seconds. This is a big deal on a wifi connection.
With kern.hz=1000, change sysctl net.inet.tcp.rexmit_min from 3 to 30.
Note how it behaves the same as when HZ was 100. Also, note that when
booting with hz=100, net.inet.tcp.rexmit_min *used* to be 30.
This commit changes TCPTV_MIN to be scaled with hz. rexmit_min should
always be about 30. If you set hz to Really Slow(TM), there is a safety
feature to prevent a value of 0 being used.
This may be revised in the future, but for the time being, it restores the
old, pre-hz=1000 behavior, which is significantly less annoying.
As a workaround, to avoid rebooting or rebuilding a kernel, you can run
"sysctl net.inet.tcp.rexmit_min=30" and add "net.inet.tcp.rexmit_min=30"
to /etc/sysctl.conf. This is safe to run from 6.0 onwards.
Approved by: re (rwatson)
Reviewed by: andre, silby
2007-07-31 22:51:22 +00:00
Scott Ullrich
5b58a32623
Correct error string to read "pptp" instead of "WAN".
2007-07-28 23:27:29 +00:00
Scott Ullrich
aa20478fdb
Do not allow aliases to be named "pptp".
2007-07-28 23:25:36 +00:00
Ryan Wagoner
b93b4c3ba9
remove duplicate upnp disabled message
2007-07-26 21:03:43 +00:00
Scott Ullrich
c6396fcaf4
Backport username display feature in captive portal. Really not sure why it wasn't included in RELENG_* versions.
2007-07-26 18:05:07 +00:00
Seth Mos
e42185e27b
Quality graph alignment
2007-07-24 21:28:21 +00:00
Scott Dale
96770dac1b
show ipsec tab properly when mobile clients is enabled and no tunnel exists
2007-07-24 02:33:02 +00:00
Scott Ullrich
9bd3d159cb
Show the IPSEC firewall rule interface when mobile ipsec is enabled
2007-07-23 18:10:14 +00:00
Ryan Wagoner
1cb3a834d3
-move upnp_action to services.inc
...
-make sure to clear rules when stopping miniupnpd
-fix status_upnp and status_services pages so they use upnp_action and not the rcfile
2007-07-23 16:57:18 +00:00
Scott Ullrich
db157e3b5a
Back to testing snapshot status
2007-07-21 21:51:04 +00:00
Scott Ullrich
83666df9f0
s/Passwordlogin/Password login/
2007-07-21 21:22:18 +00:00
Scott Ullrich
1966553e8c
Shutdown miniupnpd correctly.
Ticket #1383
2007-07-18 21:52:21 +00:00
Scott Ullrich
633449eb04
Version bump
2007-07-17 23:46:09 +00:00
Scott Ullrich
b7782a84ea
Version bump. RC1 time.
2007-07-17 19:21:25 +00:00
Scott Ullrich
0820841777
Remove bogus warning.
2007-07-16 20:26:43 +00:00
Seth Mos
15c1fe85bf
Correct average times, otherwise the grap stops after 8 months.
2007-07-15 21:17:34 +00:00
Scott Ullrich
c71e7398c8
Start DHCPD before DNSMASQ to avoid this error on embedded:
Jul 12 01:34:39 dnsmasq[588]: failed to access /var/dhcpd/var/db/dhcpd.leases: No such file or directory
2007-07-12 01:40:53 +00:00
Scott Ullrich
48f60858d7
Tag 1.2-B3
2007-07-10 16:56:49 +00:00
Seth Mos
ab325235f4
Oops, correct path to binaries
2007-07-08 21:04:59 +00:00
Scott Ullrich
842a1aa371
CAPS kills. Literally. Do not set the description to upper case LAN when we are looking for lower case.
2007-07-07 03:42:51 +00:00
Scott Ullrich
463cefdb2c
Kill off old pftpx processes correctly
2007-07-07 03:20:13 +00:00
Seth Mos
ea29f28ee4
Use pattern matching for proper database selection
2007-07-06 21:43:43 +00:00
Seth Mos
116880408f
MFC IPSEC fixes from seth, this should properly reload and handle large
...
configs > 300 tunnels.
2007-07-06 21:07:48 +00:00
