mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity
8,141 Commits 27 Branches 53 Tags 494 MiB
8ef95644a3
Commit Graph

4556 Commits

Author SHA1 Message Date
Bill Marquette
a24d988099 Fix field display on login screen 2007-08-06 02:49:13 +00:00
Scott Ullrich
725dd10ae2 Sync NATT support from m0n0wall 2007-08-04 20:26:37 +00:00
Seth Mos
4ed746322f Static port the mobile ipsec port 4500 2007-08-04 20:21:42 +00:00
Martin Fuchs
ee1b024ea9 - correct behaviour of dhcpd.conf creation 
- enable root-path
 2007-08-02 11:43:04 +00:00
Martin Fuchs
dc3d25d27d DHCP remove duplicate option domain-name ind dhcpd.conf 2007-08-02 08:47:44 +00:00
Martin Fuchs
1ebf937f12 DHCP: domainname / HEAD > RELENG_1 2007-08-02 08:31:04 +00:00
Martin Fuchs
6c23757bb8 Add TFTP and LDAP server options to dhcpd 2007-08-01 20:19:50 +00:00
Bill Marquette
9c55515a26 Users that have specific page access can now login 2007-08-01 18:44:41 +00:00
Scott Ullrich
6c038dc63c * Remove trailing space * Remove duplicate command accidently commited 2007-07-31 22:54:10 +00:00
Scott Ullrich
4313e61a52 Increase timeouts when using a 1000 hz. From the FreeBSD commit message: ÊChange TCPTV_MIN to be independent of HZ. ÊWhile it was documented to 
Êbe in ticks "for algorithm stability" when originally committed, it turns
Êout that it has a significant impact in timing out connections. ÊWhen we
Êchanged HZ from 100 to 1000, this had a big effect on reducing the time
Êbefore dropping connections.

ÊTo demonstrate, boot with kern.hz=100. Êssh to a box on local ethernet
Êand establish a reliable round-trip-time (ie: type a few commands).
ÊThen unplug the ethernet and press a key. ÊTime how long it takes to
Êdrop the connection.

ÊThe old behavior (with hz=100) caused the connection to typically drop
Êbetween 90 and 110 seconds of getting no response.

ÊNow boot with kern.hz=1000 (default). ÊThe same test causes the ssh session
Êto drop after just 9-10 seconds. ÊThis is a big deal on a wifi connection.

ÊWith kern.hz=1000, change sysctl net.inet.tcp.rexmit_min from 3 to 30.
ÊNote how it behaves the same as when HZ was 100. ÊAlso, note that when
Êbooting with hz=100, net.inet.tcp.rexmit_min *used* to be 30.

ÊThis commit changes TCPTV_MIN to be scaled with hz. Êrexmit_min should
Êalways be about 30. ÊIf you set hz to Really Slow(TM), there is a safety
Êfeature to prevent a value of 0 being used.

ÊThis may be revised in the future, but for the time being, it restores the
Êold, pre-hz=1000 behavior, which is significantly less annoying.

ÊAs a workaround, to avoid rebooting or rebuilding a kernel, you can run
Ê"sysctl net.inet.tcp.rexmit_min=30" and add "net.inet.tcp.rexmit_min=30"
Êto /etc/sysctl.conf. ÊThis is safe to run from 6.0 onwards.

ÊApproved by: Êre (rwatson)
ÊReviewed by: Êandre, silby
 2007-07-31 22:51:29 +00:00
Ryan Wagoner
431484c8ef -move upnp_action to services.inc 
-make sure to clear rules when stopping miniupnpd
-fix status_upnp and status_services pages so they use upnp_action and not the rcfile
 2007-07-23 17:26:33 +00:00
Scott Dale
b047196ead remove previous commit, moving function to index.php to support package installation 2007-07-23 03:19:29 +00:00
Scott Dale
c955b31520 add tab for widgets function 2007-07-23 03:06:08 +00:00
Seth Mos
694870530c Add rrd graph settings page. 
Bump config out of line with 1.2
Add rrd config upgrade code.
 2007-07-21 21:47:37 +00:00
Seth Mos
7828fd5be8 Keep longer archives, allow for a 4 year span 2007-07-16 19:56:56 +00:00
Seth Mos
70baaf2fe3 Axe unused archives, correct average times. 2007-07-15 21:16:19 +00:00
Scott Ullrich
a005424e17 Start DHCPD before DNSMASQ to avoid this error on embedded: Jul 12 01:34:39 dnsmasq[588]: failed to access /var/dhcpd/var/db/dhcpd.leases: No such file or directory 2007-07-12 01:41:06 +00:00
Seth Mos
77109a5f7a Commit missed checkin, supress debug message 2007-07-09 12:52:32 +00:00
Seth Mos
d852c5260a Unbreak IPSEC, correct pathnames 2007-07-08 21:06:23 +00:00
Scott Ullrich
7a5e1563bf CAPS kills. Literally. Do not set the description to upper case LAN when we are looking for lower case. 2007-07-07 03:42:42 +00:00
Scott Ullrich
efb9942fd2 Kill off old pftpx processes correctly 2007-07-07 03:20:05 +00:00
Scott Ullrich
8a58063d28 Improve the load balancing pool edit screen. Submitted-by: Chris Daniel 2007-07-06 18:46:44 +00:00
Scott Ullrich
0bdbb9ea3c Remove extra PasswordAuthentication line. Ticket #1374 2007-07-06 18:16:37 +00:00
Scott Ullrich
8e537b3c6e Use $lanif for lan anti-lockout rule 2007-07-05 22:04:29 +00:00
Scott Ullrich
f2d7bc114c Escape $lan correctly 2007-07-05 20:40:45 +00:00
Scott Ullrich
6f82a11f10 Do not use $iface as source or destination as it may be a member of a bridge without an ip address and pfctl will complain. 2007-07-05 20:38:57 +00:00
Scott Ullrich
7f37926c72 Since we are matching traffic on incoming interface, do not link wan or lan to bridgeX 2007-07-05 19:00:47 +00:00
Scott Ullrich
2b6e777def Only pass anti-lockout traffic on $lan 2007-07-05 18:51:51 +00:00
Seth Mos
b9d8cc51ef Fix loading and reloading config for IPSEC. 
MFC: Possible candidate, works for seth. Needs test.
 2007-07-04 12:11:30 +00:00
Seth Mos
be41c19386 Supress debug logging 2007-07-04 12:09:04 +00:00
Scott Ullrich
b770450e52 Cleanup IPSEC rules. We where blocking port = 500 UDP on CARP interfaces, for one. 2007-07-01 19:59:32 +00:00
Scott Ullrich
5e4b6e3515 Be more verbose on logging so that we can correctly deterimine protocol, etc. Ticket #1348 2007-07-01 19:24:12 +00:00
Scott Ullrich
d08299cc61 $config needs to be global 2007-06-30 22:25:39 +00:00
Scott Ullrich
6e35cf3ff9 unbreak policy routing rules network access to LAN IP Ticket #1320 2007-06-30 22:04:34 +00:00
Scott Ullrich
6f20377b6f Correctly move upnp to base since LiveCD cannot write files to /usr/local/etc or /usr/local/etc/rc.d/ Ticket #1342 2007-06-30 21:48:29 +00:00
Scott Ullrich
d739dbe9cc Kill trailing space 2007-06-30 21:20:21 +00:00
Scott Ullrich
c876662c7e Remove openvpn csc file when option is disabled. Ticket #1339 2007-06-30 21:19:41 +00:00
Scott Ullrich
66cc67c6ec Add ASN1DN identities support to IPSEC. Subbmitted-by: Nic Bernstein <nic_AT_onlight.com> 2007-06-30 20:57:30 +00:00
Scott Ullrich
d584a8978e Do not antispoof on wan when it is bridged. Ticket #1352 2007-06-30 20:38:03 +00:00
Scott Ullrich
8cf7463418 Move CARP and PFSYNC allow traffic before USER_RULES section. If a person has a restrictive ruleset then it is possible to disallow traffic. 2007-06-29 16:22:20 +00:00
Martin Fuchs
8fc63cd85d Add Type-Of-Service-passthru for server and client 2007-06-24 21:03:25 +00:00
Timo Boettcher
2cd5c34010 remove part of solution of problem solved elsewhere 2007-06-21 13:07:02 +00:00
Timo Boettcher
cd72ded386 Make OpenVPN usable in status_service.php 2007-06-21 13:01:01 +00:00
Scott Ullrich
10f4ac6c24 Default to nat-reflection inactivity of 2000 which is roughtly 33 minutes. 2007-06-19 20:23:22 +00:00
Scott Ullrich
b35521f73c Correct location of use_rrd_gateway. 2007-06-18 05:24:56 +00:00
Scott Ullrich
251ca0224a Make sure we are writable for /etc/crontab 2007-06-09 21:02:06 +00:00
Scott Ullrich
1fadb31de4 Unbreak captive portal images. 2007-06-09 20:54:54 +00:00
Scott Ullrich
5c6c1712b8 Cleanup logging line so that it is more readable. 2007-06-09 20:04:42 +00:00
Scott Ullrich
a2b58f83b2 find_interface_ip() requires a real interface 2007-06-09 20:02:25 +00:00
Martin Fuchs
6d03107144 correct code formatting 2007-06-07 18:11:23 +00:00