Commit Graph

25150 Commits

Author SHA1 Message Date
Chris Buechler
80dfff9a2b Leave adaptive.start and end at their defaults (60% and 120% of the state limit, respectively) if not user-overridden. 2015-03-11 01:30:14 -05:00
Chris Buechler
0f57551162 Update cipher-list in web interface to prefer PFS. Ticket #4230 2015-03-11 00:25:56 -05:00
Chris Buechler
23cb405565 Check for not up, rather than down, as there are a variety of potential
statuses that are not up. Ticket #4502
2015-03-10 20:21:09 -05:00
Chris Buechler
34ba4e5d32 Need global $ipsec_idhandling here. 2015-03-10 19:20:16 -05:00
Chris Buechler
309162b96d Use a consistent variable name here. related to Ticket #4446
Conflicts:
	usr/local/www/xmlrpc.php
2015-03-10 19:01:35 -05:00
Chris Buechler
24acc8f466 Don't enable interfaces_use by default. Add checkbox to enable on Advanced
tab, in case there are scenarios where it's desirable. Ticket #4341
2015-03-10 17:20:42 -05:00
Ermal LUÇI
30ea15dc63 Fixes #4427 Correct traffic shaper wizard to properly save and use Voip provided settings 2015-03-10 21:47:06 +01:00
Ermal LUÇI
0a0978d78f Fixes #4427 Correct traffic shaper wizard to properly save and use Voip provided settings 2015-03-10 21:45:03 +01:00
Ermal LUÇI
6127c541cc Revert "Fixes #4446 Correct ipalias removal on top of carp during configuration sync."
master works differently and get_real_interface() resolves vips as well.

This reverts commit 8896fe1ceb.
2015-03-09 19:01:40 +01:00
Ermal LUÇI
8896fe1ceb Fixes #4446 Correct ipalias removal on top of carp during configuration sync. 2015-03-09 18:52:23 +01:00
Phil Davis
7926283050 Code style etc inc vwx3
rebased version with conflicts resolved due to a bunch of recent changes
in vpn.inc
2015-03-09 14:06:24 -03:00
jim-p
261f727120 Allow reassignment from PPP types to DHCP. From testing, it appears to work OK, this input validation appears to be outdated.
If there is some edge case that this catches, perhaps it needs to be a more specific test.
2015-03-09 10:36:12 -04:00
jim-p
5bd0ba3e5d Add missing 'break' statement that broke switching from a PPP type to 'none'. 2015-03-09 10:22:48 -04:00
Renato Botelho
2385106ec9 Merge pull request #1544 from phil-davis/patch-4 2015-03-09 07:00:58 -03:00
Renato Botelho
ad42e4d8c9 Merge pull request #1542 from phil-davis/patch-2 2015-03-09 06:59:51 -03:00
Renato Botelho
7ac524dd18 Merge pull request #1541 from phil-davis/Code-Style-etc-inc-z 2015-03-09 06:59:14 -03:00
Renato Botelho
aeaf63f103 Merge pull request #1545 from k-paulius/fix-syntax 2015-03-09 06:53:46 -03:00
k-paulius
ef1dfb8873 Add missing opening bracket 2015-03-08 18:17:26 -05:00
k-paulius
10192c3041 Remove extra closing brackets 2015-03-08 18:15:03 -05:00
k-paulius
29257358e7 $ldescr variable is not assigned a value and all 'Outgoing Network Interfaces' show Localhost as a name on UI 2015-03-08 18:07:32 -05:00
k-paulius
ec07dcfe94 Missing $ 2015-03-08 18:04:48 -05:00
Chris Buechler
51b24a30a8 Update help to current config structure, touch up text while here. Fixes #4492 2015-03-08 00:43:23 -06:00
Chris Buechler
08af94cb89 Check for console="comconsole* rather than just *comconsole* in loader.conf, so it doesn't match just having comconsole_speed in loader.conf. Ticket #4464 2015-03-07 14:16:14 -06:00
jim-p
0a4fbd990e Expand CARP demotion error, add button to reset demotion status. 2015-03-06 15:00:47 -05:00
Renato Botelho
588d3cf606 Check if it's an array before call foreach(). Ticket 2015-03-06 11:45:36 -03:00
Renato Botelho
b93bc1fd49 Stop trying to fix dns_split during strongswan config generation, we have an upgrade code in place for that, it should fix #4418 2015-03-06 11:29:25 -03:00
Renato Botelho
877740eed5 dns_split was a comma separated list and moved to use space as separator, provide upgrade code to make sure old configs are converted. Since there was a config upgrade version 11.7 only on master, I pushed it to 11.8 and used dns_split one as 11.7 to be able to backport it to RELENG_2_2. Ticket #4418 2015-03-06 11:28:40 -03:00
Renato Botelho
277810659a Remove multiple spaces from dns_split as a seatbelt, also fix the message since field is expected to be space separated and not comma. Ticket #4418 2015-03-06 11:26:18 -03:00
Phil Davis
4ad7848c25 DNS Forwarder Host Override Edit make the pencil symbols appear
In most places in the GUI a little pencil symbol appears before text input fields. For example it already appears for the Host, Domain and Description fields in this very form when you "Enter additional names for this host."
But in the main 4 fields of this form, the pencil does not display.
This fixes it to be the same as elsewhere.
I guess this is the "standard" supposed to be used. If so, then I will find the other places where class="formfld unknown" has the "unknown" missing.
2015-03-06 16:43:04 +05:45
Chris Buechler
8cb4f5b12a touch up text 2015-03-06 03:36:03 -06:00
Chris Buechler
a115e2e14a Use get_failover_interface here to find appropriate interface. Ticket #4482 2015-03-06 00:55:42 -06:00
Chris Buechler
c406924f3e same change as previous commit, for IPv6. Ticket #4482 2015-03-06 00:45:37 -06:00
Chris Buechler
29de629ebd Use the parent interface, not the _vip for interfaces_use. Part of Ticket #4482 2015-03-06 00:39:31 -06:00
Chris Buechler
df96662660 Destroy stf interface when 6rd or 6to4 tunnel is disabled. Fixes #4471 2015-03-05 23:49:14 -06:00
Chris Buechler
6021c6f951 Merge pull request #1543 from phil-davis/patch-3 2015-03-05 22:53:54 -06:00
Phil Davis
a97a77a2a5 Be nicer when checking if alias is numeric
Because an ordinary port can be numeric here.
Forum https://forum.pfsense.org/index.php?topic=89906.0
2015-03-06 10:12:08 +05:45
Chris Buechler
f54229df8c fix up text 2015-03-05 22:12:32 -06:00
Chris Buechler
879d59d88a Don't save config if input validation fails. Add input validation preventing "Harden DNSSEC Data" from being enabled if DNSSEC support isn't enabled. 2015-03-05 21:43:48 -06:00
Chris Buechler
5c7c369f5f Remove the harden-glue option entirely and hard code it to yes. Ticket #4402 2015-03-05 19:35:12 -06:00
jim-p
6d1db7eca8 Encode and check values for filtering variables in diag_logs_filter.php 2015-03-05 10:09:43 -05:00
jim-p
3278738951 Do not render the services_unbound_acls page with an invalid ID. 2015-03-05 10:01:22 -05:00
jim-p
e52c3c88cb Stricter validation and encoding for traffic shaper queues. 2015-03-05 09:56:56 -05:00
jim-p
c678ca656b Jettison unused dragtable code from firewall_rules.php, it was broken and inactive and only causing trouble. 2015-03-05 09:41:02 -05:00
jim-p
44a06d7de5 Improve validation and encoding of the zone for Captive Portal Status 2015-03-05 09:32:35 -05:00
jim-p
eae1fb1df2 Be more strict about the file to restore or delete when working with full backups. 2015-03-05 09:01:05 -05:00
Chris Buechler
8106d4467a allow enabling Unbound when dnsmasq is enabled, if they're using diff
ports. Ticket #4332
2015-03-04 16:16:54 -06:00
Chris Buechler
9bfb45ab28 Skip any numeric-only aliases in the ruleset to prevent errors from those
who configured them on previous versions where that was allowed. Ticket
2015-03-04 15:46:30 -06:00
jim-p
24ad8e26a6 Add missing comma. Fixes #4485 2015-03-04 07:23:00 -05:00
Chris Buechler
e03b6bbcf5 Enable UnicastOnly in radvd for ovpn* interfaces. Ticket #4455 2015-03-03 23:40:03 -06:00
jim-p
1dbe220c9b Tweak the carp demotion factors slightly to avoid CARP transitions that are most likely unnecessary. 2015-03-03 14:19:25 -05:00