Scott Ullrich
b51eff52be
Disable extended TCP debugging.
2008-08-11 18:00:28 +00:00
Ermal Luçi
6235e68339
Sync to new config version number.
2008-08-05 16:11:26 +00:00
Ermal Luçi
787295ea45
Epose if_bridge(4) sysctl members.
2008-08-05 16:03:39 +00:00
Matthew Grooms
6b07c15ad8
Rewrite the pfsense privilege system with the following goals in mind ...
...
1) Redefine page privileges to not use static urls
2) Accurate generation of privilege definitions from source
3) Merging the user and group privileges into a single set
4) Allow any privilege to be added to users or groups w/ inheritance
5) Cleaning up the related WebUI pages
2008-08-01 06:30:34 +00:00
Scott Ullrich
a8b1097cb0
* Switch XML tag from </pages> to <pages/>
...
* Sync the all group which appears to be missing
2008-07-30 23:31:18 +00:00
Scott Ullrich
a82db41db2
latest config.xml version is 4.9
2008-07-28 22:40:23 +00:00
Scott Ullrich
ee7ff1f007
Add TCP Inflight
2008-07-19 02:16:29 +00:00
Scott Ullrich
9deef53dde
Remove unused tag.
2008-03-10 01:27:08 +00:00
Scott Ullrich
e0ac25769d
Unbreak package manager
2008-03-10 00:52:13 +00:00
Scott Ullrich
8da7252b0f
Add missing bits from HEAD.
2008-02-20 01:11:21 +00:00
Scott Ullrich
2821f8e690
Switch over to the newly provisioned 0.pfsense.pool.ntp.org which
...
ntp.org has graciously setup for pfSense.
2008-02-18 18:07:44 +00:00
Scott Ullrich
d2f336469b
Really disable CTRL+ALT+DELETE.
2008-02-02 19:37:48 +00:00
Scott Ullrich
ae1ffb162f
Disable CTRL+ALT+DELETE reboot sequence on keyboard.
...
Admnins commonly have to press this sequence to login to winderz boxen and
if you have a shared KVM you might accidently reboot your firewall.
2008-02-02 19:36:31 +00:00
Ermal Luçi
49ff6e4083
Revert previous patch to retain compatibility in the GUI.
2008-02-01 22:56:56 +00:00
Ermal Luçi
2a2f3167f9
Add defualt pass rule on lan interface and remove it from config.
...
It is a default policy so lets keep it with defaults and let the user override it when pleases.
Remove it from here since it is part of the default policy and allow that on a new installation,
after shaper wizard run packets don't go to the default queue.
2008-02-01 21:59:47 +00:00
Scott Ullrich
2672d65db3
Move update bogons script to 3am.
...
Discussed on pfSense-support@
2007-11-28 19:51:27 +00:00
Scott Ullrich
d35fa17e1d
* Download bogons entries from pfsense.com
...
* Do not update on every minute on the 1st of the month
* Sleep for a random period before updating to avoid killing the server
2007-11-27 20:22:05 +00:00
Scott Ullrich
94f01c71bf
Increase net.inet.ip.intr_queue_maxlen to 1000 which is the IP input queue.
2007-08-22 18:01:11 +00:00
Scott Ullrich
0ca9fb6095
Reset slbd every 140 minutes as opposed to 300 minutes.
2007-08-02 02:14:23 +00:00
Scott Ullrich
df23ccfe82
Set the ephemeral port range starting port to 1024 instead of 49152.
On a busy firewall it is possible to run out of ephemeral ports and then the system will block new connections until a port is available.
2007-07-05 16:13:38 +00:00
Scott Ullrich
53747d8e8c
s/bin/sbin/
2007-06-27 19:43:15 +00:00
Scott Ullrich
b1d7bc0178
Reset SLBD every 5 hours to avoid 100% cpu utilization
Ticket #1316
2007-06-27 19:37:11 +00:00
Scott Ullrich
f3f5b5d6d1
We need to expire entries every hour, not every half hour. (snort)
2007-06-02 21:32:42 +00:00
Scott Ullrich
9299ceaf2c
Add overlooked sysctl's.
2007-05-26 22:34:48 +00:00
Scott Ullrich
6df9d7e359
Add system tunables area which allows the user to fine control sysctl's.
2007-05-26 22:00:36 +00:00
Scott Ullrich
7995441eac
Oops, we need /etc/ping_hosts.sh to run every 5 minutes.
2007-05-15 20:29:31 +00:00
Seth Mos
ad1719997b
Add NTP server field to dhcp config.
...
From: Alexander Schaber
2007-05-08 14:47:07 +00:00
Scott Ullrich
cff4feea02
We actually have 2.9 has the default now.
2007-03-14 22:06:07 +00:00
Scott Ullrich
fd416a1088
* Bump config version to 2.8
...
* Automatically install a IPSEC pass rule for unsuspecting users
2007-02-09 16:54:59 +00:00
Scott Ullrich
1071e028a5
Backport cron handling from HEAD.
...
Patches-submitted-by: DSH@
2007-01-29 04:09:12 +00:00
Scott Ullrich
7c59d0c154
Change default theme to nervecenter.
...
No objections from any of the 13 other people in IRC. Make it so.
2007-01-18 23:45:00 +00:00
Scott Ullrich
e15a47935d
Disable NAT reflection by default.
2006-03-09 20:44:27 +00:00
Scott Ullrich
478743e1fa
Set theme back to metallic and avoid the lynching
2006-01-01 03:53:30 +00:00
Scott Ullrich
7185e415cc
Change default theme back to pfsense.
...
Some people claim the fancy metallic theme is slower.
See http://forums.whirlpool.net.au/forum-replies-archive.cfm/436523.html
2005-12-28 00:55:46 +00:00
Scott Ullrich
e265e49fa8
Change back to sis0 and sis1 for embedded. CDROM platform and other will pull in conf.defaults which is set for VMWARE if need be.
2005-11-17 21:52:47 +00:00
Scott Ullrich
644d1f1cf1
Change the default interface setup in PC version to vmware.
2005-11-16 01:27:37 +00:00
Scott Ullrich
8630962880
Do not enable SSHD by default.
...
Ticket #682
2005-11-13 19:39:58 +00:00
Scott Ullrich
543dcec8be
Disable FTP proxy helper on WAN by default
2005-11-07 00:04:28 +00:00
Scott Ullrich
6823bfb68c
1.10 -> 2.0
2005-08-21 00:17:40 +00:00
Scott Ullrich
6394e6498c
Bump config version to 1.9
2005-08-06 21:56:29 +00:00
Scott Ullrich
36aaefff61
Allow SSH service to be disabled / enabled.
2005-07-31 01:15:32 +00:00
Scott Ullrich
0e279b95f4
Turn off raw filter for new installs
2005-07-29 22:36:02 +00:00
Scott Ullrich
e42cac89e8
3 out of 4 kids agree, metallic is a better theme!
2005-07-18 02:24:56 +00:00
Scott Ullrich
c0ce312f60
Enable ipsec passthrough by default
2005-06-27 16:22:13 +00:00
Scott Ullrich
34caec133e
Turn on prefer older sa's by default
2005-05-26 15:14:15 +00:00
Scott Ullrich
8299072126
Default to "raw" logging until the loging parsing items are updated.
2005-02-20 20:32:42 +00:00
Scott Ullrich
adfaae0e74
Switch default optimization method to normal. For some reason "default" does not work even though "Building firewalls with OpenBSD and PF" claims it does.
2005-01-24 22:37:27 +00:00
Scott Ullrich
416ed28d60
Allow for the user to customize the pf optimization options in the system -> advanced menu. the default is normal.
2005-01-23 00:52:14 +00:00
Scott Ullrich
12bcdc89e9
Commit what I have so far. Magic shaper now works 100% .. or atleast appears to!
2005-01-22 02:57:05 +00:00
Scott Ullrich
44ce4df14a
switch xml format over to pfsense header and footer. time to break away from m0n0walls configuration since ours is a little different now.
2005-01-21 23:31:30 +00:00
