mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity
9,793 Commits 27 Branches 53 Tags 494 MiB
87385bf463
Commit Graph

5406 Commits

Author SHA1 Message Date
Scott Ullrich
87385bf463 Create resolv.conf earlier in the boot process 2008-09-02 16:20:56 +00:00
Scott Ullrich
d1475c67b1 Use apc on cli, too 2008-09-02 02:29:57 +00:00
Scott Ullrich
5af041edf5 s/16/17 
Noticed-by: cmb
 2008-09-02 00:55:48 +00:00
Scott Ullrich
de9a0292cf Add icmplim when upgrading configuration from 1.2.1 2008-09-01 19:43:17 +00:00
Matthew Grooms
82b61e6b71 Don't create the standard OpenVPN paths in openvpn_resync_all(). These are 
now created during the bootup process.
 2008-09-01 01:11:53 +00:00
Scott Ullrich
b3251a0c8d * Do not return on CDROM platform 
* Use @ to send error to /dev/null
 2008-08-31 21:46:56 +00:00
Scott Ullrich
9f85112d1d Create /var/etc/openvpn-csc as well 
Suggested-by: mgrooms
 2008-08-31 20:55:22 +00:00
Scott Ullrich
67df0c621a Ensure /var/etc/openvpn exists 2008-08-31 20:06:00 +00:00
Ermal Luçi
67ac4e8d3b Integrate part of the patch from ticket #1807. 
The other part is already done on pppoe_up script in /usr/local/sbin.
 2008-08-31 17:06:17 +00:00
Ermal Luçi
278aa4f4a2 Check if items are an array before treating them as such. 2008-08-31 16:14:24 +00:00
Ermal Luçi
ca5722042f Fix detection if an interface is part of bridge. 2008-08-31 15:13:32 +00:00
Ermal Luçi
14e58758bb Fix detection if an interface is part of bridge up to date. 2008-08-31 14:27:08 +00:00
Ermal Luçi
63182e6083 Bring bridge related support functions up to date with the other bridge code. 
NOTE: that the function link_int_to_bridge_interface needs a friendly interface as a parameter now i.e. "wan/lan/optX".
 2008-08-31 13:47:21 +00:00
Scott Ullrich
6a418ab72b Ensure $g is populated by reading in globals.inc 2008-08-31 02:29:59 +00:00
Scott Ullrich
b8e4d27622 Revert. 2008-08-31 02:12:04 +00:00
Matthew Grooms
b66174030d Correct a typo that could cause problems for openvpn if a client specific 
override existed. A space was omitted in the listtags array which was
causing the openvpn-csc tag to be merged with the following field.
 2008-08-30 23:33:47 +00:00
Matthew Grooms
33a398a5c9 When upgrading a configuration, validate openvpn configuration entries as 
arrays before treating them as such.
 2008-08-30 22:45:45 +00:00
Scott Ullrich
6c7aa8d8f2 Spelling correction 2008-08-30 05:12:34 +00:00
Scott Ullrich
2a5a9c6af4 * Output if SSH is enabled 
* Kill SSH server but leave open ssh sessions
 2008-08-30 04:24:23 +00:00
Scott Ullrich
55251f1adc Output file we are copying. Somehow it appears that niftyjsCode.js 
is failing to copy.
 2008-08-30 02:29:07 +00:00
Scott Ullrich
79d28f42a0 Ignore return text on sysctl commands 2008-08-30 02:11:23 +00:00
Scott Ullrich
5fec455a7c * Add nohaltonerror() (default is to halt on error) 
* Add sethaltonerror()
* Cleanup error on text handling
 2008-08-30 02:07:45 +00:00
Scott Ullrich
5be2fc35ed Add $Id: $ 2008-08-30 01:43:28 +00:00
Scott Ullrich
e5d43d9304 Convert CARP interface related code to use CmdCHAIN for easier debugging. 2008-08-30 01:23:37 +00:00
Scott Ullrich
26831efbcf Revert commits 2008-08-29 23:33:46 +00:00
Scott Ullrich
65b5a8b044 Turn back on console 2008-08-29 23:26:58 +00:00
Scott Ullrich
1c4fad45ed Revert commit, it appears the console is no longer spawning 2008-08-29 23:19:06 +00:00
Matthew Grooms
34bc132420 Store the OpenVPN system DH parameters contents in the config.xml file so 
it is not generated each time on embedded systems. Problem reported by
Scott.
 2008-08-29 22:55:26 +00:00
Scott Ullrich
e3c398b76b Imports ttys changes from m0n0wall 2008-08-29 21:31:46 +00:00
Scott Ullrich
8edb3385b3 Add rum wireless interface that is supported now in 7.x 
http://forum.pfsense.org/index.php/topic,10581.0.html
 2008-08-29 20:12:36 +00:00
Matthew Grooms
539fcd7ed6 Correct some of the logic in the get_vpns_list() that was committed in the 
last revision.
 2008-08-28 23:58:09 +00:00
Scott Ullrich
ed2fba4db6 Do not rdr tftp to tftp-proxy for local vpns for both tcp and udp. This 
fixes the long standing bug of my voip phones being broken.
 2008-08-28 22:43:16 +00:00
Scott Ullrich
0bd7dfeb3f Unbreak FTP when using IPSEC VPN's. 2008-08-28 22:33:56 +00:00
Bill Marquette
0919224fbd Bring in relay options for inbound load balancer 
More work pending, this seems to generate proper configs
needs much more testing though
 2008-08-28 21:21:50 +00:00
Matthew Grooms
8ff5ffccf2 Add support for export and import of encrypted configuration files. A set 
of command line utilities for encypting and decrypting the files format
is available from the tools/config-crypto directory.
 2008-08-28 02:53:06 +00:00
Matthew Grooms
6308488583 Replace the old openvpn status page with a new implementation. We now add 
a tcp management port option to each OpenVPN server. Instead of rooting
through the OpenVPN logs once a minute for status updates, we now submit a
request to the management port to obtain informaiton. We probably need to
add a pf rule to prevent management ports from being accessed by unwanted
processes.
 2008-08-27 19:52:22 +00:00
Matthew Grooms
dc40893993 Correct some problems with the filter code where we were calling foreach 
on data that wasn't necessarily a valid array.

Modify the OpenVPN code to stop passing the array index around and then
immediately obtaining a reference to the array entry. We already have a
reference to the data, just pass it instead. Also add some check to make
certain tap configuration steps more conditional. Make sure we remove
configuration and pid files when they are no longer required. Fix a few
other OpenVPN related bugs.
 2008-08-27 04:19:30 +00:00
Matthew Grooms
f432e364b2 Set some important default values for the new OpenVPN interface screens. 
Add functions and interface code to handle local port conflict detection
and resolution.
 2008-08-26 23:49:04 +00:00
Matthew Grooms
c3d42a86c9 Update the privilege definitions using the makepriv utility. 2008-08-26 23:06:51 +00:00
Matthew Grooms
e28120e537 Dump the per-configuration dh parameters data. It make no sense to keep 
this information in the configuration as its not specific to the server.
It only contains the parameters ( a safe large prime number ) that is
used during a DH key exchange. Instead, we now use a system wide dh file
that is generated when the /var/etc/openvpn directory is setup. This
shaves 10 to 30 seconds off of the server config creation process. Also
correct a bug in the hack I added to work around carp related issues
that prevented filter re-configuration from working properly.
 2008-08-26 22:20:01 +00:00
Matthew Grooms
d799787e49 Rework most of the OpenVPN support. The interfaces have been updated to 
not use the pkg system and the configuration has been migrated to an
openvpn prefix. The centralized user and certificate manager is now used
to support the openvpn configurations. Most of the files removed in this
commit were not being referenced.

This commit also splits out the certificate management components into a
new system menu item.
 2008-08-26 04:48:04 +00:00
Scott Ullrich
84b5f39b77 Add fourth parameter NOBACKUP 2008-08-23 22:47:18 +00:00
Scott Ullrich
44bfd1fabd Import format_bytes() from m0n0wall 2008-08-23 19:11:59 +00:00
Scott Ullrich
acdbfa0489 Update altq capable interfaces for 7.0 2008-08-23 01:32:53 +00:00
Scott Ullrich
ce9b6cbc9b Update spamd entries 2008-08-23 01:27:38 +00:00
Scott Ullrich
77a43cf0fb Move is_wan_up() after the routing is configured. 2008-08-19 23:28:38 +00:00
Scott Ullrich
68cd47b3a6 Move ntpdate function down a bit after routing is configured. 2008-08-19 23:27:12 +00:00
Scott Ullrich
86a12a6f5d Eliminate very annoying message on bootup "No process found". 2008-08-19 23:11:28 +00:00
Matthew Grooms
c945d83823 Fix some bugs in the pf filter generation code. If a user rule specified 
a destination of lan, pptp or pppoe, generate_user_filter_rule() would
overwrite the source address instead of setting the destination address.
The OpenVPN interface alias configuration was completely broken which
prevented any user defined rules from working correctly. While here, also
perform some whitespace and simple code cleanup.
 2008-08-19 18:15:17 +00:00
Scott Ullrich
4f1842be28 Commit changes submit by Rajkumar S: 
Checks for file named /nanobuild and invokes /etc/rc.initdiskless if found, otherwise it follows the normal embedded bootup.
 2008-08-18 16:30:11 +00:00