mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity
7,814 Commits 27 Branches 53 Tags 494 MiB
8d900185ba
Commit Graph

7814 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Scott Ullrich
8d900185ba MFC 
3rd pass nat rules generation. Also process lan subnets with OPT gateway properly.
 2007-04-26 14:43:19 +00:00
Scott Ullrich
4e4770c173 MFC Alter outbound nat descriptions to match operation 2007-04-25 21:30:43 +00:00
Scott Ullrich
c8ccb72fb4 MFC Merge 2nd pass NAT rule generation. Take ipsec and voip into account. 2007-04-25 20:27:24 +00:00
Scott Ullrich
3f8b80656b Remove hack that checks for blank protocol. We need to fix the upstream bug that is causing the blank entries. This bug is also appearing in the load balancing area now. 2007-04-25 20:04:56 +00:00
Scott Ullrich
515ad7e793 Correctly map static routes. 
Work done by Seth Mos

TODO: Port to -HEAD.
 2007-04-25 18:52:22 +00:00
Scott Ullrich
2f6fb32393 Add is_private_ip function which will return true if an ip address falls within a private subnet range. 2007-04-25 18:10:46 +00:00
Scott Ullrich
09662e45ca Increase the size of the openvpn custom options box. 2007-04-25 16:20:00 +00:00
Scott Ullrich
3c748d0426 Unbreak status graph. Someone is going to need to submit *WORKING* patches that work with FireFox, IE and Opera for this to get changed again! Ticket #1290 2007-04-24 21:25:11 +00:00
Scott Ullrich
0bfd6d776d File a notice when we restore a previous configuration file. 2007-04-24 19:54:35 +00:00
Scott Ullrich
c4dfa47bb4 Detect 0 byte config.xml cases and attempt to restore a previous backup. With this change my wrap that has been panicing for 30 hours straight boots right back off and we will continue the panic torture test. 2007-04-24 18:15:36 +00:00
Scott Ullrich
aac9905d60 Detect 0 byte config.xml cases and attempt to restore a previous backup. 2007-04-24 17:52:35 +00:00
Scott Ullrich
52bddb2e51 s/resolved/resolve/ 2007-04-24 01:00:36 +00:00
Scott Ullrich
914a762d23 * Use is_interface_mismatch() function * Do not allow configuration to continue until the interfaces are setup correctly * When restoring a configuration via the webConfigurator detect that a interface mismatch has occured and redirect the user to the assign interface screen. Once the assign interface Save button has been pressed go ahead and reboot. This might just prevent someone from throwing a fit since they do not have console access. 2007-04-24 00:47:11 +00:00
Scott Ullrich
8b1f580608 The earlier fix from today that fixed get_interfaces_with_gateways() created new problem where all interfaces would show up in assign_interfaces screen and other places. Instead of showing them all by default teach get_interfaces_with_gateways() how to extract the complete list. 2007-04-24 00:27:06 +00:00
Scott Ullrich
abb1798d67 MFC 17588 Bug fix: Menu now shows on top of traffic graph instead of underneath 2007-04-23 23:47:34 +00:00
Scott Ullrich
f6a311bdf4 Turn back off TDR debugging statements. 2007-04-23 23:00:49 +00:00
Scott Ullrich
e6123bd488 Dont check-state on the rules. 2007-04-23 21:51:22 +00:00
Scott Ullrich
60a8d6d4ff Use check-state on all TDR rules 2007-04-23 21:49:37 +00:00
Scott Ullrich
19f6ca3e6d check-state at the beginning of the tdr set 2007-04-23 21:47:43 +00:00
Scott Ullrich
d3924217ed Detect when schedules are present and install non schedule rule correctly 2007-04-23 21:30:56 +00:00
Scott Ullrich
21c4933508 Add more well known ports to the protocols drop down. Patch-submitted-by: Martin Fuchs 2007-04-23 20:58:44 +00:00
Scott Ullrich
0b77c21155 Ensure that old time based rules get deleted during reload 2007-04-23 20:48:30 +00:00
Scott Ullrich
5430501d88 Version bump 2007-04-23 18:58:27 +00:00
Scott Ullrich
d639db56a7 use <object> instead of <embed> 
Ironically this was already fixed in HEAD!

Ticket #1290
 2007-04-23 18:42:19 +00:00
Scott Ullrich
37327d2324 * Fix get_interface_list() 
* Backout Seth's changes.  The bug was up the stack in get_interface_list()
 2007-04-23 18:19:55 +00:00
Scott Ullrich
2b04c3b5fe MFC 17596 
Correctly use all interfaces.
 2007-04-23 18:03:58 +00:00
Scott Ullrich
465a9d1095 Add trailing slashes to upload directory 2007-04-23 17:18:21 +00:00
Scott Ullrich
b7639e4a1d Apply OpenVPN patch from Martin Fuchs which adds outgoing tunnel bandwidthg control. 2007-04-23 17:11:54 +00:00
Scott Ullrich
8df7037771 Move sync schedules underneath firewall rules section for cosmetic bling bling. Suggested-mulitple-times-by: Holger 2007-04-23 00:36:34 +00:00
Scott Ullrich
1edfe47ee0 Only foreach through valid arrays. 2007-04-23 00:14:18 +00:00
Scott Ullrich
c0a64f181f MFC Show schedule indicator. 2007-04-23 00:12:01 +00:00
Scott Ullrich
d12cfab163 0 -> 00 for start time for consistency 2007-04-22 23:32:42 +00:00
Scott Ullrich
54e36b9a00 Do not reload ipfw if it is already loaded. 2007-04-22 22:49:58 +00:00
Scott Ullrich
30566f8f86 If $config['system']['dummynetshaper'] is set then load ipfw and dummynet early on 2007-04-22 22:35:06 +00:00
Scott Ullrich
7b0e865bc3 Make the ordering of the IPFW time based rules exactly the same as PF so there are no strange "gotchas" or "caveats" that the user would have to abide by. 2007-04-22 22:11:22 +00:00
Scott Ullrich
22c9fc0996 Correctly incriment skipto rule number. 2007-04-22 21:31:37 +00:00
Scott Ullrich
98aa3eb6f2 Fix tdr_get_next_ipfw_rule to not return 2 every time. 2007-04-22 21:27:59 +00:00
Scott Ullrich
703714fe41 Add anti-lockout rule to ipfw so that you cannot lock yourself out of the GUI. This is tunable via system -> advanced 2007-04-22 21:17:18 +00:00
Scott Ullrich
6a63742f63 Bootstrap php.ini on non-cdrom platforms to *GUARANTEE* that we can invoke php correctly. 2007-04-22 19:14:43 +00:00
Scott Ullrich
e9624a0a2c Do proper locking when writing out php.ini. Sync the disk contents to force the write to disk after closing the file. Hopefully this will help solve the php.ini from disappearing on bootup when a panic occurs. 2007-04-22 19:03:11 +00:00
Scott Ullrich
460851c696 Add a blurb that the IP change in the system logs and that we are restarting the packages. This is debug for the time being. 2007-04-22 18:30:10 +00:00
Scott Ullrich
4a9dfa4453 When dhclient renews the ip address and the ip has not changed then old_ip_address will not be set. Ignore this and do not reload all packages when the ip has not changed. 2007-04-22 18:25:44 +00:00
Scott Ullrich
cffd2ea49b Call sync with the lock held before allowing a new party to come along and start writing to config.xml. 2007-04-22 03:59:10 +00:00
Scott Ullrich
db15769e52 Handle dhclient case on optX interfaces and map nat correctly. 2007-04-22 00:55:15 +00:00
Scott Ullrich
5f17fb7ec5 Correctly setup nat interface mappings when AON is disabled and a gateway is present. Ticket #1289 2007-04-22 00:52:01 +00:00
Scott Ullrich
ea951e6f27 Correct is_array() check. Make sure all 3 branches are the same. Suggested-by: Bill M 2007-04-21 23:41:32 +00:00
Scott Ullrich
a9ec14c2c4 Correct is_array() check. Suggested-by: Bill M 2007-04-21 23:39:12 +00:00
Scott Ullrich
130ccec2cc Use skipto type ipfw rules so that the pass type rules will not bail out of the ipfw ruleset and keep processing at the next rule. 2007-04-21 23:22:19 +00:00
Scott Ullrich
c24f40082c Fix another major bug in time based rules. When a * * * rule is in affect on the wan interface we where killing outgoing traffic from the firewall itself. 2007-04-21 23:05:13 +00:00
Scott Ullrich
6f727b3bcf Fix a major time based rule bug. We need to match packets *INCOMING* to the interface similar to how pf works. 2007-04-21 22:53:54 +00:00