mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity
19,384 Commits 27 Branches 53 Tags 494 MiB
88165371ef
Commit Graph

56 Commits

Author SHA1 Message Date
jim-p
84aea60617 Add a knob to tune the maximum number of tables that can be defined, the pf default of 1000 is too low for systems with >500 aliases. 
Conflicts:

	etc/inc/filter.inc
 2012-05-29 10:51:14 -04:00
Erik Fonnesbeck
3f76f90e65 Add note to NAT Reflection helper indicating where it works. 2012-04-28 02:30:04 -06:00
Erik Fonnesbeck
8c06bd69b0 Change description of 1:1 NAT Reflection setting to be more accurate. 2012-04-28 02:12:40 -06:00
Erik Fonnesbeck
40fa6ddeac Allow optionally using the type of NAT reflection implementation used for 1:1 mappings with port forwards as well, in addition to allowing the old type, which is still useful in its own way. 2012-04-20 02:38:58 -06:00
bcyrill
adc3353eb6 Merge array and keep unchanged values. 2012-04-08 21:07:07 +03:00
smos
9ae39b01fb Add a checkbox that disabled automatically generates negate rules for directly connected networks and VPNs 
Ticket #2057 in redmine
 2011-12-20 21:02:06 +01:00
jim-p
08847295ee Fix typo 2011-10-19 13:16:35 -04:00
jim-p
5a8a754578 Clarify notes so people don't think they need to disable pf to disable NAT. 2011-08-30 14:07:14 -04:00
Chris Buechler
1caa6adc42 remove dead link, no equivalent exists, will add info on that page's help 2011-08-20 01:37:17 -04:00
jim-p
d2903c0cab Test if a variable is set before trying to unset it. If a user has no rules in their config, then $config['filter'] would not be undefined, so unsettings $config['filter']['bypassstaticroutes'] would result in an error. http://forum.pfsense.org/index.php/topic,35702.0.html 2011-04-14 13:26:04 -04:00
Ermal
87bb66af3e Correct text to include PPTP as well. 2011-04-06 18:23:24 +00:00
Ermal
9a36dc9d24 Resolves #1391. Bring back VPN auto rule disable advanced setting. 2011-04-06 18:22:27 +00:00
Erik Fonnesbeck
8b19f4a727 This is not NAT, so put it under the Firewall Advanced heading instead. 2011-03-01 11:03:32 -07:00
lgcosta
f1beeba5d1 Add Global reply-to disable checkbox, resolves the issue #1137 2011-02-22 10:30:37 -03:00
lgcosta
196440c8b8 reversal of accidentally deleted files 
Revert "Add Global reply-to disable checkbox, resolves the issue #1137"

This reverts commit c646776871.
 2011-02-22 09:25:10 -03:00
Luiz Gustavo S. Costa
c646776871 Add Global reply-to disable checkbox, resolves the issue #1137 2011-02-21 23:43:46 -03:00
Erik Fonnesbeck
a2b6c52f72 Add option to control automatic creation of NAT rules which assist forwarding rules that send traffic out to the same subnet it originated from. 2010-11-22 11:38:59 -07:00
Renato Botelho
ea53e38ff1 gettext fixes 2010-08-12 09:44:02 -03:00
Erik Fonnesbeck
1beafceb73 On system_advanced_firewall.php, fix display of selected TFTP interfaces after saving. Fixes #794 2010-08-05 22:58:42 -06:00
Scott Ullrich
dc4f649eb8 Make Firewall Optimization Options text readable 2010-05-21 12:42:11 -04:00
jim-p
fb586a1633 Add a GUI field to let the user configure the maxium table entries size. Resolves #588 
NOTE: Actual tables, not states.
 2010-05-13 15:46:07 -04:00
Erik Fonnesbeck
ed69be7ad9 Add note that reflection timeout only applies for port forwards. 2010-05-08 16:54:08 -06:00
Erik Fonnesbeck
bff9401511 Revert changes to reflection for port forwards until finished and approved. 2010-05-08 16:40:05 -06:00
Erik Fonnesbeck
129bc05216 Merge remote branch 'mainline/master' into patches 
Resolved conflicts:
	usr/local/www/system_advanced_firewall.php
 2010-05-05 19:34:47 -06:00
Erik Fonnesbeck
e57d089716 Slightly change wording of NAT reflection description. 2010-05-04 22:31:59 -06:00
Erik Fonnesbeck
9fc22c6f56 Add configuration option in System: Advanced: Firewall/NAT for NAT reflection on 1:1 NAT. 2010-05-04 22:27:57 -06:00
Erik Fonnesbeck
0bf53f553d Remove note about reflection being skipped on large port ranges. 2010-05-04 17:24:55 -06:00
Erik Fonnesbeck
df66409b8c Removed unused NAT reflection timeout setting. 2010-05-04 17:20:27 -06:00
Carlos Eduardo Ramos
f0d1af931a Fix gettext issues 2010-04-29 14:53:19 -03:00
Erik Fonnesbeck
c3c2fd205b Merge branch 'master' into gettext 
Resolved conflicts:
	usr/local/www/system_advanced_firewall.php
	usr/local/www/system_routes.php
	usr/local/www/system_routes_edit.php
 2010-04-28 21:17:27 -06:00
Chris Buechler
01dcf2b396 properly show TFTP enabled interfaces 2010-04-28 22:36:05 -04:00
Renato Botelho
79eaddf458 Fix : for translations 2010-04-27 17:26:59 -03:00
Renato Botelho
cf9331b39a Add missing gettext() call 2010-04-27 09:19:26 -03:00
Renato Botelho
ec6b31f5e5 Merge branch 'master' into gettext 2010-04-26 16:26:47 -03:00
Renato Botelho
ca23c2f844 Implement gettext() 2010-04-26 13:21:08 -03:00
Renato Botelho
1324ebaff2 Mark this just informative textarea as readonly 2010-04-26 11:13:07 -03:00
Ermal
cfdce2add9 Ticket #508. Make TFTP proxy configurable by System Advanced->Firewall/NAT for several interfaces. 2010-04-16 19:08:32 +00:00
Ermal
f691243dac Do not use the presence of lan as an indicator of having only one interface. Actually deduce that from the count of interfaces. It is perfectly legal on 2.0 to not have a lan interface and only opt/wan ones. 2010-04-16 18:41:25 +00:00
Chris Buechler
07336d4843 fix text 2010-03-22 00:03:56 -04:00
Chris Buechler
dc95bd0817 fix text 2010-03-22 00:01:52 -04:00
Scott Ullrich
7a927e67a5 Require filter.inc and shaper.inc 2009-11-21 19:28:00 -05:00
Scott Ullrich
1d333258dc Add pfSense_BUILDER_BINARIES: and pfSense_MODULE:. Adjust Copyright to include 2009 on files that I have asserted (C) on 2009-09-14 21:49:40 -04:00
Scott Ullrich
487b16ecd8 Adding Notifications tab 2009-07-09 21:03:58 -04:00
Ermal Luçi
0027de0a54 * Create two new functions lock($subsystem)/unlock() to have more reliable locking using semaphores. 
This function can sleep till the resource is free and can help find not well behaving code.
* Remove most of the config_lock/config_unlock logics on the whole scripts/pages it is an abuse of this.
	If any sybsytem wants to lock can do so with its own lock.
* Lock the config when doing a filter reload to avoid parallell recursion on this function, since it is not reentrant.
	This compenstates for the removal of lock aquiring from the scripts/pages.
* config_lock/config_unlock are now compate shims that do nothing. They are preserved since packages 'abuse' them too.
 2009-05-08 18:42:37 +00:00
Ermal Luçi
bd448e7ff9 From yesterday moving of ipfw loading to only captive portal a regression was noticed on ipfw states sizeing. 
Fix this regression by changing this states when they are changed on the system advanced settings page.

Reported by: cmb@
 2009-05-08 10:09:50 +00:00
jim-p
92215498f3 Remove "Allow IPv6" option from Firewall/NAT tab, it's already on the Networking tab with other IPv6 options. 2009-04-15 13:11:25 -04:00
Chris Buechler
910efe277f Block all IPv6 traffic by default, since IPv6 isn't supported, there isn't any way to add such rules in the GUI, and nearly all users won't want IPv6 to traverse their firewall at this point. Add "Allow IPv6" checkbox to disable this behavior. 2009-04-05 22:20:53 -04:00
Ermal Luçi
049a688e5d Remove ftp-proxy/pftpx/ftpsesame references we handle all of this in kernel now.(yay!) 2009-03-16 17:50:44 +00:00
Bill Marquette
1ed992d136 Fix typo 2008-12-06 07:22:19 +00:00
Seth Mos
668c49908b Correct config path so filter rules are generated again for static 
routes.
 2008-11-21 21:59:39 +00:00