mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity
19,384 Commits 27 Branches 53 Tags 494 MiB
88165371ef
Commit Graph

10372 Commits

Author SHA1 Message Date
smos
2b095a3323 Correct the rrd update command 2012-05-21 15:41:56 +02:00
smos
852171dd30 Read in the correct interface file 2012-05-21 15:35:33 +02:00
smos
5e5896856a Add 3G statistics for Huawei modems, split the Cellular stats out to per interface instead of global. 2012-05-21 15:31:02 +02:00
Erik Fonnesbeck
612f519852 Modify the tar parameters to exclude .git 2012-05-20 17:52:38 -06:00
smos
96cd928ba2 Allow saving on system.php if the gateways are down. 2012-05-20 20:57:05 +02:00
smos
793d3c961d Attempt to Eject the CD device on 3G sticks for Huawei and ZTE devices. 2012-05-20 20:01:39 +02:00
smos
1de3cd8749 Act on wireless interfaces too for linkup. 
Redmine ticket #2440
 2012-05-20 20:01:39 +02:00
jim-p
03f7925a18 Fix variable test 2012-05-20 11:51:44 -04:00
smos
2a210730dc Initialize variable if it's not set 2012-05-20 14:50:07 +02:00
smos
3930a9c0ea Prevent duplicate gateways from showing up if the interface is down. Redmine ticket #2442 2012-05-20 13:13:03 +02:00
smos
d23ef852b3 Set the retry value to 60 seconds, this is not attempts, this is seconds before it needs a reply. So if the DHCP server was any sort of slow it would fail to aquire a lease. This was true for my wireless network at home. Plus, on various other lossy links, even cable modems this could be true. 
Redmine ticket #2440

retry time;
	     The retry statement determines the time that must pass after the
	     client has determined that there is no DHCP server present before
	     it tries again to contact a DHCP server.  By default, this is
	     five minutes.
 2012-05-20 12:38:44 +02:00
smos
b2ff5d17ba Add the PPP automatic interface type. This would show the _PPP gateways. 2012-05-20 12:09:28 +02:00
Ermal
1346306cf7 Allow 802.1p tags to be controlled from firewall rules edit screen 2012-05-18 19:49:41 +00:00
Darren Embry
c1361a9f8b feature #2413 Allow IPv6 interface configuration from the menu 2012-05-17 20:17:48 -04:00
Darren Embry
416e1530bd normalize indentation 2012-05-17 19:17:01 -04:00
Darren Embry
8dcca9b51b - also rename $section arg to $section_name in some functions to clarify 
- also robustify parsing for <tagname> and bulletproof the handling of
  certain errors
 2012-05-17 17:32:04 -04:00
Darren Embry
428c289fb4 allow null to be passed as 2nd arg to parse_config_xml* 
in which case entire config is returned
 2012-05-17 17:30:24 -04:00
Darren Embry
ff9fbc7b3c fix 'XML error: no Array object found!' errors 2012-05-17 17:14:04 -04:00
Darren Embry
5d51f00ec7 log_error if rrdtool restore calls fail 2012-05-17 15:22:29 -04:00
Darren Embry
7a865f0344 add -f to 'rrdtool restore' call 2012-05-17 15:13:46 -04:00
jim-p
b61e89600e Teach mwexec and mwexec_bg how to optionally clear signal masks, and use that when launching ntp or ntpdate. 2012-05-16 14:03:24 -04:00
jim-p
0b8e9d38d8 On its own, ntpd does not sync fast enough at bootup, so bring back the ntpdate sync but improve it so it can't get stuck forever. 2012-05-16 10:48:26 -04:00
jim-p
7dab8995dd Clear process signals before exec() or ntpd misbehaves if called from PHP on i386. 2012-05-15 16:37:07 -04:00
Erik Fonnesbeck
ae26412f3d Move git package name/URL to the configuration variables section. 2012-05-15 13:26:38 -06:00
jim-p
c886fed9ba As suggested by wagonza, using SAMEORIGIN for X-Frame-Options is sufficient here, and does allow the traffic graphs to work. Fixes #2419 2012-05-15 11:44:38 -04:00
jim-p
42135f0786 Use FreeBSD's ntpd instead in the backend 2012-05-14 15:44:37 -04:00
jim-p
ffc7d2c416 Fix ntp name here too 2012-05-14 14:17:11 -04:00
jim-p
e052047dd8 Whoops, don't flip these since I negated the test. 2012-05-14 12:27:42 -04:00
jim-p
d9c96fb1ed Flip this test around since it's safer to assume the dev mode is tun. Ticket #2432 2012-05-14 11:09:55 -04:00
Darren Embry
06d84cf398 allow port in virtual servers to be left blank 
in which case listening port would be inherited from the pool
 2012-05-11 12:49:38 -04:00
Darren Embry
183ea34ce0 allow aliases for the ipaddr field in virtual servers (PEV-394754) 2012-05-11 12:49:37 -04:00
Warren Baker
62fc138e70 make use of the correct file to send notifications 2012-05-11 17:12:06 +02:00
Darren Embry
4dfd930ee9 cleanup: code for building arrays for autocompleted fields 2012-05-10 15:17:18 -04:00
Irving Popovetsky
98f20e3577 max_procs adjustments for small memory systems, attempt 2 
Per Jim P's feedback,  move max_procs completely out of
system_webgui_start()  and move all of the memory/procs decision logic
to system_generate_lighty_config().

Adjust the captive portal max_procs to reflect the low memory
conditions like ALIX which tends to run out of memory quickly due to
piggy PHP processes.

In real life testing, each PHP process (with APC) can consume up to
64MB RAM.

128MB ALIX systems show an available RAM of 107 MB.
256MB ALIX systems show an available RAM of 228 MB.

The logic here is that <128MB systems should never be running more than
1 PHP process,  and <256MB systems should run 1 by default,  or 2 if
captive portal is running.

Also give the top-end captive portal 1 more PHP process (6 now)
although I think very busy captive portals will probably need more.
 2012-05-10 11:17:55 -07:00
Darren Embry
a0539faabe prep work: function get_alias_list() 
I wrote this function primarily to remove a lot of duplicate code
that's there because of a lot of those autocomplete fields.
 2012-05-10 13:48:31 -04:00
Darren Embry
a1f7723876 add autocomplete to load_balancer_pool_edit.php (PEV-394754) 
we also enable the json extension here.
 2012-05-10 12:39:15 -04:00
Scott Ullrich
babac37a3b Add click jacking support. Ticket #2419 2012-05-10 11:51:09 -04:00
Warren Baker
49ddf9a10f Handle HTTPOnly and Secure flags on cookies 2012-05-09 19:08:17 +02:00
jim-p
8493104624 Back out duplicated fix from 107e8acc - Ticket #1917 was already fixed before this was added. 2012-05-08 15:02:59 -04:00
Warren Baker
7ff663d3a8 Respect ['upload_path'] for upload_tmp_dir for PHP 2012-05-08 19:15:04 +02:00
jim-p
8358b34154 Whoops, typo. Fixed now. 2012-05-07 15:57:54 -04:00
jim-p
e5e8840356 Don't pass a shell escaped version of $realifl to pfSense_bridge_add_member(). Fixes bridging 2012-05-07 15:00:40 -04:00
Marcello Coutinho
6ae78f0808 Stop service needs to wait process to be stopped before trying to restart/start it. 2012-05-07 12:53:15 -03:00
jim-p
5db4d1eb56 Test if this is an array before using it as an array. 2012-05-06 12:02:07 -04:00
Lorenz Schori
5a2a83493c Add support for aliases in DNS Forwarder, fixes #2410 2012-05-05 13:07:04 +02:00
Darren Embry
a52706d5d8 missed a spot for #2407 2012-05-03 12:48:17 -04:00
Darren Embry
470d24a39d implement #2407: create config option for captive portal listening port 2012-05-03 12:34:12 -04:00
jim-p
331103ae15 Fix syntax error in bogons update 2012-05-03 10:53:33 -04:00
jim-p
e0c45357b2 Move routing (radvd, routed, ospf, bgp) to its own log since these daemons can be really spammy at times. 2012-05-01 16:00:10 -04:00
jim-p
60dd7649d0 Move the stop_packages code to a function, and call the function from the shell script, and call the function directly for a reboot. Fixes #2402 and ticket #1564 2012-04-30 15:32:47 -04:00
jim-p
15855fbc5b Better error handling for crypt_data and also better password argument handling 2012-04-30 10:08:56 -04:00
Erik Fonnesbeck
f9053c0c5f Restore protection for the "destination any" case for port forward NAT Reflection, which was forgotten when shuffling around code before committing. Also add a couple other missing checks. 2012-04-28 01:38:59 -06:00
Chris Buechler
d372a32dcb fix text. ticket #2399 2012-04-26 18:36:24 -04:00
smos
655e4d414b The descr field might not exist, use a uppercase friendly name 2012-04-25 20:27:35 +02:00
smos
f7cd5647eb Make sure to stop the dhcpleases6 process 2012-04-24 08:50:59 +02:00
Chris Buechler
58070e1cf7 routes should not be skipped when IPsec is on WAN, as WAN may not be the default gateway. 2012-04-23 22:14:02 -04:00
Phil Davis
6a7b35ea4f Delete any existing /var/db/rrd/*.rrd files before restoring from the XML 2012-04-23 14:54:38 +05:45
Phil Davis
905ea3368c Minor corrections to function names in error messages 2012-04-23 14:46:50 +05:45
Chris Buechler
7c382a8854 go back to scrub rather than "scrub in", the latter breaks MSS clamping for egress traffic the way we use it 2012-04-23 00:35:29 -04:00
Erik Fonnesbeck
d887d7f982 Revert change to get_interface_list()'s $vfaces list for now. Interfaces in this list that are supposed to be listed on Interfaces: Assign need special logic on that page, which has not been added yet. 2012-04-22 16:39:32 -06:00
smos
b4a89a6820 Generate the correct corresponding link local from the carp mac. 2012-04-20 17:23:45 +02:00
Erik Fonnesbeck
40fa6ddeac Allow optionally using the type of NAT reflection implementation used for 1:1 mappings with port forwards as well, in addition to allowing the old type, which is still useful in its own way. 2012-04-20 02:38:58 -06:00
Erik Fonnesbeck
0c963226b2 Add message stating which interfaces are missing. 
Suggestion from http://forum.pfsense.org/index.php/topic,48366.0.html
 2012-04-20 01:18:45 -06:00
Erik Fonnesbeck
fd863e5ceb Add some missing interface types in is_interface_mismatch() and get_interface_list()'s $vfaces. Fixes #2384 2012-04-20 01:11:06 -06:00
Erik Fonnesbeck
a6aedcd141 Clean up filter_generate_reflection_nat, remove obsolete checks, and add new checks that are now needed. Ticket #2240 2012-04-20 00:20:30 -06:00
Erik Fonnesbeck
112f56029d Use filter_get_direct_networks_list instead of dumping a copy of the routing table. Ticket #2240 2012-04-20 00:20:29 -06:00
Erik Fonnesbeck
868cd12c52 Modify filter_get_direct_networks_list to optionally return an array instead, which includes subnet, friendly interface, and gateway (if applicable), for ticket #2240 2012-04-20 00:20:29 -06:00
smos
4b340c903c Update the default URL here for our new FreeBSD release. 2012-04-19 19:44:41 +02:00
jim-p
25ed9cf8a4 Add cheap hack to make syslogd forwarding to IPv6 work at bootup. Fixes #2370 2012-04-18 16:57:02 -04:00
jim-p
daac437f8e Make sure VPN interface gateways are handled separately 2012-04-18 14:23:02 -04:00
smos
da12a8a42f Make sure to push elements we don't recognize on the stack too. 2012-04-18 18:04:02 +02:00
smos
c3ce2eced4 Add upgrade code that updates the dynamic gateway names to their new format new $if_$type. 
Redmine Ticket #2332. I've tested a simple upgrade with 3 dynamic Wans with varying names and that appears to have succeeded. Needs more testing.
 2012-04-18 17:33:37 +02:00
jim-p
bf4b25969e Update pf.os a bit 2012-04-18 11:30:32 -04:00
smos
6710234495 Add the correct fix to pick up the IPv6 gateway for slaac interfaces 2012-04-18 15:11:12 +02:00
Jim P
ef82d62b8f Merge pull request #93 from phil-davis/patch-1 
Store PBIs in /root/var/db/pbi so they persist across reboots.
 2012-04-18 05:31:17 -07:00
smos
c0b1bc8146 Make sure that SLAAC gateways show up in return_gateways_array(); 
redmine ticket #1834
 2012-04-18 11:41:52 +02:00
smos
feb88a1476 Add support for SLAAC on the WAN interface, this is required for Stateless autoconf addressing. 
Normally this should only apply to Appliances that do not need to route. We automatically hook in the dhcp6 client to request name servers from DHCP6 in a information only mode. It will not attempt to request a address. For that you should use the plain DHCP6 option with a prefix size of none.
This is for redmine ticket #1834
 2012-04-18 11:26:09 +02:00
smos
1a5f87d1c8 Handle multiple IPv6 DNS servers in rc.newwanipv6, remove chunk of broken code in the DHCPv6 server that added duplicate lines. Redmine ticket #2380 2012-04-18 10:43:02 +02:00
Phil Davis
152c18f002 Store PBIs in /root/var/db/pbi so they persist across reboots. 
Keep the existing code for old-style PKG packages in case users on 2.1 are doing anything with PKG packages by hand. In theory all proper package installs on pfSense 2.1 (FreeBSD 8.3) should use PBIs.
 2012-04-18 12:14:27 +05:45
jim-p
4f8adcb66a Include the ntp facility also, should fix ntp logging 2012-04-17 09:33:04 -04:00
smos
2e03f3e297 Strip the ::1 from the 6to4 gateway address 2012-04-16 19:00:17 +02:00
smos
b5191708f8 Re-order the system routing configure after the tunneled interfaces are configured. 2012-04-16 18:45:29 +02:00
smos
4b2bf4fc01 Prevent a invalid argument on a empty array 2012-04-16 10:12:09 +02:00
smos
c08a5659d8 Only add the IPv4 gateway in the DHCPv4 config if we have a IPv4 gateway defined on the system at all. 
This makes clients trying the IPv4 transport fail a lot faster, and thus more graceful.
 2012-04-16 10:03:02 +02:00
smos
01a58d89da Add static routes for gif tunnel endpoints 2012-04-14 20:19:13 +02:00
smos
c8ed8142d9 Add a static route for the IPv4 relay so that 6to4 or 6rd on a OPT interface works as expected. 2012-04-14 20:08:43 +02:00
bcyrill
239a297742 Use appropriate syslog priorities. 2012-04-14 21:19:12 +02:00
jim-p
64a8dbf264 Fix missing - on route parameter 2012-04-14 14:53:59 -04:00
jim-p
711a20ebcb Some IPv6 fixes for gateway groups 2012-04-14 14:53:59 -04:00
Jim P
9583759704 Merge pull request #90 from vizvayu/master 
Mode selection options for PowerD
 2012-04-13 13:27:16 -07:00
Ermal
d46c3acd20 Enable verbosity to actually put something in the logs 2012-04-13 19:13:33 +00:00
Darren Embry
86c707f38e quiet change: fix indentation of xml2array function 
i.e., tabs instead of 4 spaces
 2012-04-13 14:10:28 -04:00
Darren Embry
5923185536 Feature #1864 "Start" button for IPsec should be available for IP alias networks 
might need more testing.

http://redmine.pfsense.org/issues/1864
 2012-04-13 12:50:32 -04:00
Darren Embry
8bdb687946 Feature #2123 Backup RRD files using the xml dump and restore from RRD tools 
http://redmine.pfsense.org/issues/2123
 2012-04-12 19:11:18 -04:00
jim-p
0d0cb04730 Fix constant. LOG_ERROR should be LOG_ERR 2012-04-12 18:06:25 -04:00
jim-p
bd29bb7baa Add brackets to a syslog server if it's an IPv6 IP. (Though FreeBSD's syslogd still won't send to it ... http://www.freebsd.org/cgi/query-pr.cgi?pr=150530&cat=misc ) 2012-04-12 11:07:25 -04:00
whjvenyl
e371f8b95a Update etc/inc/util.inc 2012-04-12 11:21:24 +03:00
Chris Buechler
f989a6ef07 fix typo. Ticket #2371 2012-04-12 03:23:50 -04:00
smos
3f5f7ad370 Add modified version of user https://github.com/bcyrill patch that requires a IPv6 literal when used with a port. 2012-04-12 07:28:07 +02:00
smos
4b51cc2edb Revert "Also validate IPv6 literals." 
This reverts commit 21b586aa12.
 2012-04-12 07:28:07 +02:00