Ermal
7cdfe39e4e
Strengthen check
2014-11-10 23:45:29 +01:00
Ermal
f4443dce54
Compare the right things here.
2014-11-10 23:32:27 +01:00
Ermal
d87fcac96b
Do not require the default sysctl items to be set on the config.xml but rather extract the definitions from the sysctl tree. Also to reduce config.xml size
2014-11-10 21:47:14 +01:00
Ermal
24d728bb4f
Retire flowtable_configure as a useless code since its not in kernel
2014-11-10 20:36:10 +01:00
Ermal
c46f9695ec
Actually make default sysctls reside on globals.inc and use those by default this allows to trim down the config.xml sysctl and also fixes #3666 by setting set source interface on reply of icmp
2014-11-10 20:32:05 +01:00
Ermal
d3c36b1d8d
Put the new sysctl on the config as needed.
2014-11-10 20:29:22 +01:00
Ermal
894a0159a0
Tighten checks here to avoid overriding the default gw with garbage
2014-11-10 17:03:43 +01:00
Ermal
d3c269d393
Make some more useful checks here
2014-11-10 16:15:08 +01:00
Ermal
6704590b35
Be sure the same gateway is not processed for v4 and v6
2014-11-10 16:09:58 +01:00
Ermal
c87d89ae9f
Lets put a logging to see what is bing passed to the rtsold script on calling. Helps with Ticket #3361
2014-11-10 15:38:37 +01:00
Ermal
6f55af1c25
Ticket 3967, revert upgrade code. Existing 2.2 installs might be impacted
2014-11-10 15:20:18 +01:00
Ermal
b0d054ca3b
Fixes #3967 , configure ip alias on top of carp by joining them to the same vhid as its parent
2014-11-10 15:18:55 +01:00
Ermal
5063f1df93
Ticket #3967 . Allow to have carp as parent of ipaliases - continued
2014-11-10 15:00:30 +01:00
Ermal
9c97df267f
Ticket #3967 . Allow to have carp as parent of ipaliases
2014-11-10 14:34:35 +01:00
Ermal
80be089f05
Fixes #3995 . Do not set rightsourceip on site-to-site VPNs but only on mobile users ones otherwise nothing works.
2014-11-07 19:28:56 +01:00
Ermal
20a9590486
Make ipsec_starter log go to ipsec.log rather than system one
2014-11-07 14:37:09 +01:00
Ermal
e82a1d11d6
Reload also the configuration not only the secrets before trying to apply existing configuration. Ticket #3981
2014-11-07 14:14:50 +01:00
Chris Buechler
a838048088
fix text
2014-11-06 22:11:28 -06:00
Chris Buechler
6859f88157
show interface name, not identifier
2014-11-06 22:09:47 -06:00
Chris Buechler
d3d237548f
fix text, PPPoE Server, not VPN
2014-11-06 22:03:50 -06:00
Chris Buechler
7bd413ebc6
add a route debug option to log info about route commands executed (where those aren't already logged) to help with troubleshooting various routing scenarios.
2014-11-06 20:19:24 -06:00
Chris Buechler
708af6349c
remove unnecessary is_array check, thanks Renato
2014-11-06 17:16:27 -06:00
Chris Buechler
6c3be36500
Don't allow P2 local+remote network combinations that overlap with
...
interface+remote-gateway of the P1. Fixes #3812
2014-11-06 16:36:35 -06:00
Chris Buechler
dbb95f387b
set install_routes=no for charon to avoid the issues noted in ticket
2014-11-06 12:49:06 -06:00
Renato Botelho
27c2e32e28
Pass zone id to pfSense_ipfw_getTablestats(), should fix #3990
2014-11-06 16:38:00 -02:00
Renato Botelho
118218cb69
Make sure target has scope when it's a link-local. Fixes #3969
2014-11-06 11:54:11 -02:00
Renato Botelho
049c74ecbf
Check if array is set
2014-11-06 11:40:25 -02:00
jim-p
10435fa9f7
Merge pull request #1330 from phil-davis/patch-1
2014-11-06 08:07:32 -05:00
Renato Botelho
3f6525c1ab
Make sure srcip has scope when it's link-local. Should fix #3969
2014-11-06 08:30:50 -02:00
Renato Botelho
e7752fc4ee
Remove extra ; and space
2014-11-06 07:57:21 -02:00
Renato Botelho
e7a0051400
Process obsolete files in shell script instead of php
2014-11-06 07:57:21 -02:00
Renato Botelho
48f77cef06
Simplify post_upgrade_command logic and obsolete /usr/local/sbin/cvs_sync.sh instead of removing it on post_upgrade_command
2014-11-06 07:57:21 -02:00
Phil Davis
a68c678580
Fix to SMART disk matching
...
preg_match returns 0 when the string does not match the regex.
0 does not "===" FALSE
So this check is not always working.
preg_match returns 1 when the string matches the regex.
IMO it is better to check for !== 1 - then anything that is not success (0 or false or...) will be unset.
2014-11-06 15:14:38 +05:45
Chris Buechler
a012464eb4
fix captive portal status page display
2014-11-05 22:58:19 -06:00
Chris Buechler
bb18cfcb3b
fix up text
2014-11-05 22:45:06 -06:00
Chris Buechler
e8fa9843b5
Pass friendlyifname to handle_argument_group, not realifname. Fixes #3984 . clean up some text while here.
2014-11-05 20:45:13 -06:00
Chris Buechler
e55e4b748c
isset($_GET) seems to always evaluate to true, use something more specific. Fixes use of rc.linkup when run from CLI. Others likely fix similar circumstances, though maybe not ones that are used anywhere.
2014-11-05 19:47:22 -06:00
Chris Buechler
c75e8aed2f
Disable delete_old_states in dhclient-script. rc.newwanip handles this correctly in 2.2, and this killed states in multiple circumstances where that isn't necessary nor desirable.
2014-11-05 19:33:46 -06:00
Chris Buechler
9aec47b7d5
don't duplicate $message in CP log entries
2014-11-05 17:18:51 -06:00
Renato Botelho
d9b05eb490
When an alias contain hosts, add IPs and networks to filterdns too, otherwise you end up with a pre-defined and non-persistent table. Fixes #3939
2014-11-05 15:31:31 -02:00
Renato Botelho
87d4456cf4
Merge pull request #1323 from derelict-pf/master
2014-11-05 07:07:55 -02:00
Renato Botelho
f81011eadd
Merge pull request #1320 from phil-davis/patch-2
2014-11-05 07:05:59 -02:00
Chris Buechler
e39c963a09
fix up text
2014-11-04 23:31:36 -06:00
Chris Buechler
75756ab9c8
use a bit stronger of defaults in OpenVPN wizard
2014-11-04 23:19:45 -06:00
Chris Buechler
1c1fe6662f
Fix WINS description. It's not 1999, and it wasn't a good description for back then either. If you're running WINS at this point on your AD DCs...get rid of the Win 9x boxes, or realize you don't actually need or want WINS on anything Windows 2000 and newer.
2014-11-04 23:08:13 -06:00
Chris Buechler
7a22ab9bb1
fix up text
2014-11-04 23:05:20 -06:00
Chris Buechler
cbc6a13fa3
Fix updating of hosts file on host override updates by bringing back the same behavior from previous releases.
2014-11-04 22:01:36 -06:00
Chris Buechler
b7419cfc0b
skip disabled phase 1 entries in status output
2014-11-04 21:22:27 -06:00
Chris Buechler
261f2efe47
fix NAT-T status. The 'nat' in the status array just tells how the connection is configured, not what it's actually using. Port seems to be the best way to determine what it's using. Fix up some other text while here
2014-11-04 19:57:46 -06:00
Chris Buechler
531686c1ea
use tabs rather than spaces, as most of this already did.
2014-11-04 19:09:53 -06:00
