mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity
19,384 Commits 27 Branches 53 Tags 494 MiB
88165371ef
Commit Graph

127 Commits

Author SHA1 Message Date
Scott Ullrich
a1e3c4eb53 Add enable/disable option for flow table support... Remove configuration option. 2009-07-12 00:58:57 -04:00
hoba
b220cc4819 Make pfSense_ng the new default theme 2009-06-26 02:57:36 +02:00
Scott Ullrich
688d49fff4 Nuke snort2c 
Requested-by: rob iscool
 2009-06-11 16:36:48 -04:00
Scott Ullrich
4ebd717767 Add L2 L3 Cache lookup by default. 
- Import infrastructure for caching flows as a means of accelerating L3 and L2 lookups
   as well as providing stateful load balancing when used with RADIX_MPATH.
 - Currently compiled in to i386 and amd64 but disabled by default, it can be enabled at
   runtime with 'sysctl net.inet.flowtable.enable=1'.

 - Embedded users can remove it entirely from the kernel by adding 'nooption FLOWTABLE' to
   their kernel config files.

 - A minimal hookup will be added to ip_output in a subsequent commit. I would like to see
   more review before bringing in changes that require more churn.
 2009-06-09 22:38:49 -04:00
Chris Buechler
4b38cdb7a5 default to vr0/vr1 rather than sis, since the defaults should be for ALIX, not WRAP. 2009-05-13 21:59:20 -04:00
Ermal Luçi
1512337f7b Remove reset_slbd.sh from cron. 2009-05-08 19:48:32 +00:00
Ermal Luçi
3fd1b89550 Catch up with the latest additions. 2009-05-07 18:21:23 +00:00
Ermal Luçi
049a688e5d Remove ftp-proxy/pftpx/ftpsesame references we handle all of this in kernel now.(yay!) 2009-03-16 17:50:44 +00:00
mgrooms
4b96b3675a Modify IPsec code to allow for transport mode. All existing configurations are 
marked as tunnel for backwards compatibility. There are problems with the spd
read code which Will likely choke on transport entries. We can fix this later.
 2009-03-15 06:18:35 +00:00
mgrooms
0092b3bd47 Modify captive portal to use centralized user management. The user manager has 
been modified to include an account expiration option to support this service.
 2009-03-15 00:39:19 +00:00
mgrooms
0b7fd3e91d Correct the configuration file IPsec certificate upgrade process. 2009-03-12 21:51:50 +00:00
Scott Ullrich
d9acea752b Use nice -n20 for common launched items 2009-03-11 21:40:43 -04:00
Seth Mos
451d439e78 Update config.xml to 5.5 to prevent RRD database updates from triggering. 
add rrd tag to default enabled
 2008-12-23 10:26:43 +00:00
Chris Buechler
beb9061ff6 change default to enable block bogons 2008-11-30 00:01:50 +00:00
Scott Ullrich
e858896b2a Add TCP TSO = 0 sysctl 2008-11-04 04:33:11 +00:00
Scott Ullrich
138acd289b Change default icmplim to 750. 2008-10-25 21:02:03 +00:00
Scott Ullrich
1a0cb96d71 Revise default allow all to any rule text. Remove > and attempt to cleanup 
text to make it more friendly to a new user.
 2008-09-10 23:29:29 +00:00
Matthew Grooms
bfea87fff2 Remove the page locking privileges after discussion with Scott on IRC. The 
feature was confusing and offered little utility that I could see. If we
really need to provide serialized access to sections of the webui, IMO it
should be a global lock option and enabled or disabled manually and not a
privilege that is on all the time.
 2008-09-03 17:52:15 +00:00
Matthew Grooms
e9e7d50186 Modify all the default configuration files to ensure the versions match. 
While in globals.inc, remove the easyrsa path and do some whitespace
cleanup.
 2008-09-02 16:46:13 +00:00
Scott Ullrich
3828b68ad6 Set net.inet.icmp.icmplim to 500. Apparently the low setting of 200 
wrecked Seths firewall on upgrade due to overwhelming amounts of icmp
packets.
 2008-09-01 19:38:34 +00:00
Scott Ullrich
43ac3acfda Move WAN interface to appear first now that the interface code 
programatically enumerates the interfaces.   Not sure if we need
upgrade code to move the interface order.
 2008-08-30 02:35:32 +00:00
Scott Ullrich
b51eff52be Disable extended TCP debugging. 2008-08-11 18:00:28 +00:00
Ermal Luçi
787295ea45 Epose if_bridge(4) sysctl members. 2008-08-05 16:03:39 +00:00
Matthew Grooms
6b07c15ad8 Rewrite the pfsense privilege system with the following goals in mind ... 
1) Redefine page privileges to not use static urls
2) Accurate generation of privilege definitions from source
3) Merging the user and group privileges into a single set
4) Allow any privilege to be added to users or groups w/ inheritance
5) Cleaning up the related WebUI pages
 2008-08-01 06:30:34 +00:00
Scott Ullrich
a8b1097cb0 * Switch XML tag from </pages> to <pages/> 
* Sync the all group which appears to be missing
 2008-07-30 23:31:18 +00:00
Scott Ullrich
a82db41db2 latest config.xml version is 4.9 2008-07-28 22:40:23 +00:00
Matthew Grooms
45ee90edb3 Rewrite portions of the user manager to ensure data is properly synced to 
the system password and group databases. This is to provide better support
for centralized user management when local account administration is
preferred.

I also took this opportunity to do some housekeeping. A lot of funtions
that were only being used in one place or not at all were removed. The
user page privelege checks were also simplified in preperation for future
work in this area.
 2008-07-25 02:28:31 +00:00
Scott Ullrich
ee7ff1f007 Add TCP Inflight 2008-07-19 02:16:29 +00:00
Chris Buechler
0da56ac75d re-enable the sending of ICMP redirects by default 2008-06-14 17:31:54 +00:00
Scott Ullrich
9deef53dde Remove unused tag. 2008-03-10 01:27:08 +00:00
Scott Ullrich
e0ac25769d Unbreak package manager 2008-03-10 00:52:13 +00:00
Scott Ullrich
8da7252b0f Add missing bits from HEAD. 2008-02-20 01:11:21 +00:00
Scott Ullrich
2821f8e690 Switch over to the newly provisioned 0.pfsense.pool.ntp.org which 
ntp.org has graciously setup for pfSense.
 2008-02-18 18:07:44 +00:00
Scott Ullrich
d2f336469b Really disable CTRL+ALT+DELETE. 2008-02-02 19:37:48 +00:00
Scott Ullrich
ae1ffb162f Disable CTRL+ALT+DELETE reboot sequence on keyboard. 
Admnins commonly have to press this sequence to login to winderz boxen and
if you have a shared KVM you might accidently reboot your firewall.
 2008-02-02 19:36:31 +00:00
Scott Ullrich
2672d65db3 Move update bogons script to 3am. 
Discussed on pfSense-support@
 2007-11-28 19:51:27 +00:00
Scott Ullrich
d35fa17e1d * Download bogons entries from pfsense.com 
* Do not update on every minute on the 1st of the month
* Sleep for a random period before updating to avoid killing the server
 2007-11-27 20:22:05 +00:00
Scott Ullrich
94f01c71bf Increase net.inet.ip.intr_queue_maxlen to 1000 which is the IP input queue. 2007-08-22 18:01:11 +00:00
Scott Ullrich
0ca9fb6095 Reset slbd every 140 minutes as opposed to 300 minutes. 2007-08-02 02:14:23 +00:00
Scott Ullrich
df23ccfe82 Set the ephemeral port range starting port to 1024 instead of 49152. On a busy firewall it is possible to run out of ephemeral ports and then the system will block new connections until a port is available. 2007-07-05 16:13:38 +00:00
Scott Ullrich
53747d8e8c s/bin/sbin/ 2007-06-27 19:43:15 +00:00
Scott Ullrich
b1d7bc0178 Reset SLBD every 5 hours to avoid 100% cpu utilization Ticket #1316 2007-06-27 19:37:11 +00:00
Scott Ullrich
f3f5b5d6d1 We need to expire entries every hour, not every half hour. (snort) 2007-06-02 21:32:42 +00:00
Scott Ullrich
9299ceaf2c Add overlooked sysctl's. 2007-05-26 22:34:48 +00:00
Scott Ullrich
6df9d7e359 Add system tunables area which allows the user to fine control sysctl's. 2007-05-26 22:00:36 +00:00
Scott Ullrich
7995441eac Oops, we need /etc/ping_hosts.sh to run every 5 minutes. 2007-05-15 20:29:31 +00:00
Seth Mos
ad1719997b Add NTP server field to dhcp config. 
From: Alexander Schaber
 2007-05-08 14:47:07 +00:00
Scott Ullrich
cff4feea02 We actually have 2.9 has the default now. 2007-03-14 22:06:07 +00:00
Scott Ullrich
fd416a1088 * Bump config version to 2.8 
* Automatically install a IPSEC pass rule for unsuspecting users
 2007-02-09 16:54:59 +00:00
Scott Ullrich
1071e028a5 Backport cron handling from HEAD. 
Patches-submitted-by: DSH@
 2007-01-29 04:09:12 +00:00
Scott Ullrich
7c59d0c154 Change default theme to nervecenter. 
No objections from any of the 13 other people in IRC.  Make it so.
 2007-01-18 23:45:00 +00:00
Scott Ullrich
e15a47935d Disable NAT reflection by default. 2006-03-09 20:44:27 +00:00
Scott Ullrich
f2ce60ade3 Change back to sis0 and sis1 factory defaults 2006-02-26 21:45:36 +00:00
Scott Ullrich
478743e1fa Set theme back to metallic and avoid the lynching 2006-01-01 03:53:30 +00:00
Scott Ullrich
7185e415cc Change default theme back to pfsense. 
Some people claim the fancy metallic theme is slower.

See http://forums.whirlpool.net.au/forum-replies-archive.cfm/436523.html
 2005-12-28 00:55:46 +00:00
Scott Ullrich
58543d68a7 Change default interfaces to vmware (lnc0 lnc1) for PC version 2005-11-16 01:53:07 +00:00
Scott Ullrich
8630962880 Do not enable SSHD by default. 
Ticket #682
 2005-11-13 19:39:58 +00:00
Scott Ullrich
543dcec8be Disable FTP proxy helper on WAN by default 2005-11-07 00:04:28 +00:00
Bill Marquette
a48aec0a67 Remove ability to change schedulertype - we're only supporting HFSC for 
now - priq may come back in future, the return of CBQ is unlikely
 2005-09-28 03:04:57 +00:00
Scott Ullrich
6823bfb68c 1.10 -> 2.0 2005-08-21 00:17:40 +00:00
Scott Ullrich
6394e6498c Bump config version to 1.9 2005-08-06 21:56:29 +00:00
Scott Ullrich
36aaefff61 Allow SSH service to be disabled / enabled. 2005-07-31 01:15:32 +00:00
Scott Ullrich
0e279b95f4 Turn off raw filter for new installs 2005-07-29 22:36:02 +00:00
Scott Ullrich
e42cac89e8 3 out of 4 kids agree, metallic is a better theme! 2005-07-18 02:24:56 +00:00
Scott Ullrich
c0ce312f60 Enable ipsec passthrough by default 2005-06-27 16:22:13 +00:00
Scott Ullrich
34caec133e Turn on prefer older sa's by default 2005-05-26 15:14:15 +00:00
Scott Ullrich
8299072126 Default to "raw" logging until the loging parsing items are updated. 2005-02-20 20:32:42 +00:00
Scott Ullrich
adfaae0e74 Switch default optimization method to normal. For some reason "default" does not work even though "Building firewalls with OpenBSD and PF" claims it does. 2005-01-24 22:37:27 +00:00
Scott Ullrich
416ed28d60 Allow for the user to customize the pf optimization options in the system -> advanced menu. the default is normal. 2005-01-23 00:52:14 +00:00
Scott Ullrich
12bcdc89e9 Commit what I have so far. Magic shaper now works 100% .. or atleast appears to! 2005-01-22 02:57:05 +00:00
Scott Ullrich
44ce4df14a switch xml format over to pfsense header and footer. time to break away from m0n0walls configuration since ours is a little different now. 2005-01-21 23:31:30 +00:00
Scott Ullrich
1220d12a6a Move schedulertype configuration setting to system since we have switched to one scheduler per system. 2005-01-21 22:13:29 +00:00
Scott Ullrich
1cd160578c Change default password to pfsense 2005-01-12 02:11:41 +00:00
Scott Ullrich
f213b40e00 revert back to m0n0wall header and footer for xml config files. this will keep us partly compatible with m0n0wall -> pfSense upgraders 2004-12-16 18:57:30 +00:00
Scott Ullrich
ee11cc6eae Say welcome to the pfSense package manager! 2004-12-12 01:44:44 +00:00
Scott Ullrich
f56d2af147 change hostname to pfSense 2004-11-07 03:23:00 +00:00
Scott Ullrich
5b23774500 Initial revision 2004-11-07 03:06:49 +00:00