Cristian Feldman
90f90934c0
Fix of bug #2374 "When entering values in firewall rules leading and
...
trailing spaces are not deleted"
2012-05-18 22:57:38 -03:00
Darren Embry
4dfd930ee9
cleanup: code for building arrays for autocompleted fields
2012-05-10 15:17:18 -04:00
Erik Fonnesbeck
40fa6ddeac
Allow optionally using the type of NAT reflection implementation used for 1:1 mappings with port forwards as well, in addition to allowing the old type, which is still useful in its own way.
2012-04-20 02:38:58 -06:00
Chris Buechler
8bb88a62dd
Local port must be specified, fix input validation
2011-12-25 16:16:26 -05:00
Vinicius Coque
6134cc8fe0
now we use the Chosen javascript plugin for jQuery
2011-11-15 15:12:17 -02:00
Scott Ullrich
4bb99603d3
Add chosen js library (mit lic). Modify interface multiple select box to use.
2011-07-23 18:51:32 -04:00
Scott Ullrich
40b8379682
Adding hook for interfaces edit
2011-07-18 12:26:40 -04:00
Scott Ullrich
920d1d0151
Adding hook for interfaces edit
2011-07-18 12:26:17 -04:00
Scott Ullrich
2ea00c3e74
Add missing plugin code. Move the pre_write section up a bit.
2011-05-30 12:28:21 -04:00
Evgeny Yurchenko
b45babaeb5
Bug #1403 . Filter Rules description do not get saved when "(quote) present as character
2011-05-27 21:55:22 +00:00
Scott Ullrich
d65962a773
Adding a new hook system for firewall nat edit and firewall rules edit page.
...
Basically if the directory exists it will suck in the files to extend these pags.
/usr/local/pkg/firewall_nat/input_validation
/usr/local/pkg/firewall_nat/pre_write_config
/usr/local/pkg/firewall_nat/htmlphpearly
/usr/local/pkg/firewall_nat/htmlphplate
/usr/local/pkg/firewall_rules/input_validation
/usr/local/pkg/firewall_rules/pre_write_config
/usr/local/pkg/firewall_rules/htmlphpearly
/usr/local/pkg/firewall_rules/htmlphplate
2011-05-25 19:43:51 -04:00
jim-p
c6dfd28923
In IPsec, s/mobileclients/client/, this was changed long ago in the config but not everywhere followed.
2011-03-28 12:17:41 -04:00
Erik Fonnesbeck
43f2eca799
Use autocomplete='off' like all other fields that accept aliases, to prevent web browser auto-complete from covering up the alias list popup.
2011-02-13 07:44:52 -07:00
jim-p
93c2c1e620
Generalize pppoe server enabled check and use it elsewhere in the GUI that needed fixed. Still needs changes in filter.inc - Ticket #1243
2011-02-10 10:58:16 -05:00
jim-p
e2c1d6c5cf
Add a per-entry option for Proxy ARP VIPs of the Network type to disable their expansion on Port Forwards and Outbound NAT screens. Will allow users with large proxy arp subnets used only with 1:1 to still load those pages in a reasonable time. Resolves #1119
2010-12-20 15:01:51 -05:00
Scott Ullrich
dd5bf424c1
Fix XSS issues
2010-11-12 11:36:20 -05:00
Scott Ullrich
225a2f0b46
Bring in XSS id fixes from m0n0wall
2010-11-12 11:03:51 -05:00
Erik Fonnesbeck
6fa7374575
Fix input validation with "no rdr" for ticket #570
2010-09-29 00:38:45 -06:00
Erik Fonnesbeck
44374c0aff
Hide redirect and filter rule association fields when "no rdr" is checked. Ticket #570
2010-09-29 00:05:04 -06:00
Renato Botelho
59345b3cef
Fix associated rule source address changes on NAT Port Forward
...
When we change the source address on a NAT Port Forward rule that had
an associated rule, we need to change the associated rule source address
as well
2010-08-26 17:10:00 -03:00
Renato Botelho
e73b001e25
Merge remote branch 'mainline/master'
...
Conflicts:
usr/local/www/diag_smart.php
usr/local/www/firewall_rules_edit.php
usr/local/www/interfaces.php
usr/local/www/load_balancer_pool_edit.php
usr/local/www/pkg_mgr_settings.php
2010-08-12 12:55:32 -03:00
Carlos Eduardo Ramos
39a3ce9115
gettext() fixes on firewall_nat_edit.php
2010-08-12 08:59:12 -03:00
Erik Fonnesbeck
8bb30d23a4
Fix the ID for the link to the associated filter rule when a filter rule has not been saved since the associated rule was created.
2010-08-12 04:23:52 -06:00
Erik Fonnesbeck
8ad3503e5e
Fix link to the associated filter rule for port forwards on an interface other than the first with a filter rule.
2010-08-07 03:54:12 -06:00
Carlos Eduardo Ramos
ad2fe9e60a
Checked gettext() implementation on firewall_nat_edit.php
2010-07-13 13:31:28 -03:00
Carlos Eduardo Ramos
3a92149ba2
Corrections gettext implementation on firewall_nat_edit.php
2010-07-08 14:11:26 -03:00
Renato Botelho
6a73963a31
Merge remote branch 'mainline/master' into 2_firewall
2010-07-07 08:28:32 -03:00
Erik Fonnesbeck
15409667f7
Add per-rule NAT reflection override.
2010-07-05 19:31:14 -06:00
Erik Fonnesbeck
f60181150d
Add the missing VPN types to the interface list on port forwards and add the same VPNs to the list available on other types of NAT rules.
2010-07-05 18:09:47 -06:00
Vinicius Coque
37261752cb
Revert "Implemment gettext()"
...
This reverts commit 1baff2e5d3
2010-07-02 16:25:17 -03:00
Renato Botelho
ba1a0433c4
Review firewall_nat_edit.php
2010-06-30 20:59:17 -03:00
Jeann
1baff2e5d3
Implemment gettext()
2010-06-28 23:19:56 -03:00
Carlos Eduardo Ramos
6cac9bda87
Implement gettext() calls
2010-06-24 20:51:30 -03:00
jim-p
08a5d2eb84
Properly generate a list of proxy arp VIPs for address drop-down list.
2010-05-24 13:26:02 -04:00
Erik Fonnesbeck
9603306327
Various fixes to usage of ip2long, long2ip, and negated subnet masks, mostly affecting 64-bit. Ticket #459
2010-05-20 10:55:02 -06:00
Erik Fonnesbeck
bcbcc2f815
Use client-side values in the function call rather than PHP-generated values for further calls to this client-side function.
2010-05-14 15:42:43 -06:00
Ermal
f83fa94292
Test correctly for previous existing entries of linked rules otherwise some bad deletions might happen. Reported-by: http://forum.pfsense.org/index.php/topic,25091.0.html
2010-05-13 18:56:07 +00:00
Erik Fonnesbeck
3e3582a9a6
It wasn't clear enough why source port should usually be any. Make it more clear.
2010-05-11 18:21:44 -06:00
Chris Buechler
77eddca8ae
fix display of PARP VIP ranges. Resolves #386
2010-05-01 02:59:50 -04:00
Erik Fonnesbeck
5ab8e25084
Show the source options on port forwards if they are not at the defaults.
2010-04-30 13:10:47 -06:00
Renato Botelho
a457e739f9
Initialize variable properly, it fixes #557
2010-04-30 15:07:49 -03:00
Renato Botelho
59ecde4930
Improve NAT Port Forwarding
...
New features available are:
* Now you can disable a rule
* You can define "no rdr" rules
* Source type, address and port, with an option "not" for exceptions
* Destination type, address and port, with an option "not" for exceptions
Implemented by: Carlos Eduardo Ramos <carlos.ramos@bluepex.com>
Renato Botelho <renato.botelho@bluepex.com>
Vinicius Coque <vinicius.coque@bluepex.com>
Reviewed by: cmb and efonne
Sponsored by: BluePex Security Solutions
2010-04-29 08:27:50 -03:00
jim-p
c7de8be425
Add a new alias type, urltable, which downloads a file of IP/CIDR addresses and loads them into a pf persist table instead of importing the addresses directly into a traditional alias. This allows for using huge tables of addresses that would otherwise break the GUI and/or fail to load into pf. Part of ticket #512
2010-04-21 17:03:45 -04:00
Ermal Luçi
c920489629
Ticket #386 . Add all possible proxy arp to the external ip when it is defined as network.
2010-03-09 21:18:25 +00:00
Ermal Luçi
cdf9847b33
Ticket #136 . Fixed showing the link and calculating correct id to the rule edit page.
2010-01-27 00:17:01 +00:00
Ermal Luçi
9b16b83439
Ticket #136 .
...
Fix associated nat rules.
Now both the filter rules and the nat ones contain a associated-rule-id tag which helps link the items together.
The API to use for this is in itemid.inc.
All the issues should be solved now.
2010-01-26 23:59:43 +00:00
Chris Buechler
55ec57b947
link to correct associated firewall rule
2009-12-13 16:34:26 -05:00
pierrepomes
473d0ff02f
Add patch from lietu (Janne Enberg). Ticket #136
...
1) Multiple NAT rules can be assigned the same filter rule
-> Fixed, added assigned-nat-rule-id to filter rules to keep track of the assignment
2) when removing the link (i.e. switching to "pass" or "none", the linked rule isn't deleted (should it be? probably yes)
-> Fixed, when a NAT rule's association is removed, the filter rule is deleted. Added a "create new associated filter rule" option to the
dropdown if there is none selected.
3) The destination IP and port of linked rules can be edited in firewall_rules_edit.php and shouldn't be. Source should be editable but not
destination, since that should strictly be tied to the NAT rule.
-> Fixed, you cannot edit the destination for the filter rules that are linked to NAT rules, this has been disabled both by JavaScript and
PHP.
4) If you edit the source in a linked firewall rule, it gets overwritten when you edit the NAT rule. The NAT rule should never touch the
firewall rule source after the rule exists.
-> Fixed, previously the old rule was deleted and a new one created, now it only updates the old rule and doesn't touch the source.
Also added crosslinking from the NAT rule to the filter rule and back, so you can jump to edit the filter rule from the NAT rule and
vice-versa.
2009-12-12 15:57:19 -05:00
Ermal Luçi
1e578a7f10
Resolves #146 Add propper validation on alias usage. Allow port type aliases only on port side and other aliases in ip specifications and similar. Introduce a new function is_portoralias to ressemble the is_ipaddroralias to check for the cases.
2009-12-03 13:54:43 +00:00
sullrich
21f88b49b7
Restore the external port range to. Resolves #192
2009-12-02 19:17:18 -05:00
