Commit Graph

11739 Commits

Author SHA1 Message Date
Ermal
a01f8bfc0a Correctly check the secondary/primary parameter setting on dhcp failover configuration 2013-09-10 09:10:19 +00:00
Ermal
20809a21fd Correct typo that prevents dhcp rules from properly being generated. 2013-09-10 08:20:10 +00:00
Phil Davis
771c14a35c Do not include disabled OpenVPN in vpn_networks and negate_networks 2013-09-09 19:30:37 -07:00
jim-p
0281db8cc1 Fix errant display of "0 table deleted" during filter reload on console. 2013-09-09 15:18:57 -04:00
Renato Botelho
4831f5df94 Remove unecessary capitalized WARNING from disabled APC message 2013-09-09 16:09:53 -03:00
jim-p
cf07d57433 Do not sync DHPCv6, it must operate independetly. Ticket #3184 2013-09-06 13:56:56 -04:00
jim-p
d3b3240bd0 Remove failover peer IP settings from DHCPv6, DHCPv6 doesn't support failover the way that DHPv4 did. Fixes #3184 2013-09-06 13:56:55 -04:00
Renato Botelho
af0a477a1f Disable kill_states by default on upgrade, it fixes #3183 2013-09-06 13:58:49 -03:00
jim-p
8346b5c462 Allow for easier override on $g values if needed. 2013-09-05 14:27:42 -04:00
Ermal
9d7ca11fce Correct check to match the right vip based on configured ip. Reported-by: http://forum.pfsense.org/index.php/topic,66234.0.html 2013-09-05 12:39:20 +00:00
Ermal
36fa13a632 Ticket #3181 do the state flushing only on down gateway detection rather than any time. 2013-09-05 12:29:21 +00:00
Ermal
0b18ef0581 When the v4 wan is dynamic and v6 is type dhcp and v6 information is retrieved through v4 link than trigger dhcp6c reconfiguration. 2013-09-04 15:03:18 +00:00
Ermal
b9eae2ba66 Actually the / here is not needed. 2013-09-04 10:43:26 +00:00
Ermal
8171a2c2de Introduce two new functions to be used on locking.
- try_lock: used for trying to get an EXCLUSIVE lock for a specified timeout by default of 5
- unlock_force: which just releases any locks held on a specified lock

Use this new functions on rc.openvpn to avoid spurious stale locks around.
2013-09-04 08:48:23 +00:00
Ermal
f33dcc5c79 Add safety belts to code in rc.openvpn to avoid php errors to leave stale locks around 2013-09-04 08:31:43 +00:00
Ermal
dc8b4c4ec6 Make the operation of saving old rule nearby the writing operation to be logical to spot 2013-09-04 08:18:51 +00:00
Ermal
b214bf3a05 Sprinkle some unsets to reduce footprint and correct some whitespaces 2013-09-04 08:12:36 +00:00
Phil Davis
3b6596b740 filter_generate_port error log function name
Absolutely minor adjustment to make the error log message refer to the new function name.
2013-09-03 18:03:59 -07:00
Ermal
81d81b942b Fixes #3173 if any port information exists on the rule than put it on the NEGATE rule generated. 2013-09-03 18:39:56 +00:00
Renato Botelho
03131eb95c Remove SPD when disable phase2, it fixes #2719 2013-09-03 15:13:10 -03:00
Renato Botelho
fcca1783e9 Merge pull request #786 from individual-it/master
Increased needed memory for APC to 512M + code cleanup
2013-09-03 10:29:52 -07:00
Chris Buechler
faf4b1fce9 Merge pull request #796 from phil-davis/master
Traffic Shaper GUI text typos
2013-09-03 10:05:54 -07:00
Chris Buechler
fcb5121d6f Merge pull request #793 from shahidsheikh/master
Fix #3174 Handling of gateway groups in openvpn_restart()
2013-09-03 10:03:40 -07:00
Ermal
32a9eb1873 Bring back static routes to fix issues reported on Ticext #3179 2013-09-03 16:52:43 +00:00
Ermal
497841f5d5 Correct typo on variable name 2013-09-03 15:42:06 +00:00
Renato Botelho
f2cc3344a1 Fix #3004:
. Create a function to replace strings on deep associative arrays
. Use the recent created function array_replace_values_recursive to fix
  VIP interface names instead of touch config.xml directly
2013-09-03 12:37:41 -03:00
Renato Botelho
42ec9337ea Make sure RRD data is restored from backup before upgrading data and a new backup is done after. It should fix #2159 2013-09-03 08:55:59 -03:00
Phil Davis
794195d153 Traffic Shaper GUI text typos
and note the Queue Limit is a number of packets (not packets per second)
2013-09-03 04:45:03 -07:00
Ermal
bee7cd82f8 Resolves #3177. Do a filter reconfigure if the dynds ipsec hosts are present and being reloaded. 2013-09-03 10:27:11 +00:00
Chris Buechler
324e112d06 touch up text, s/nat/NAT/ 2013-09-03 01:27:11 -05:00
Shahid Sheikh
330ecea1bf Fix #3174 Handling of gateway groups in openvpn_restart()
If the underlying vip of a gateway group that an openvpn client is bound
to is in backup mode then the client should not start.
2013-09-02 21:23:21 -04:00
Jean Cyr
6aab2ea3ad shaper burst may be blank, but if not then must be numeric 2013-09-02 14:01:22 -04:00
Renato Botelho
22234bbb2f Fix #3172, return_gateway_groups_array() was returning the last vip since it was using wrong variable name on iteration 2013-09-02 08:00:07 -03:00
Jean Cyr
b3e0fedf55 Dummynet does not require burst size specification
Dummynet traffic shaper does not require burst size specification and
assumes 0 if not specified. Allow user to leave burst field blank/
2013-09-02 02:55:09 -04:00
Phil Davis
df0cb10bbe Provide get_uptime_sec in a common include file
so it is available to anything that cares.
2013-08-29 00:09:40 -07:00
Individual IT Services
73fa01787f Increased needed memory for APC to 512M + code cleanup
- Increased the needed memory for APC to 512M as we often run into memory problems on our 256M box
- fixed the RAM calculation to divide by 1024 and not 1000
- code cleanup (renaming variables and creating new to avoid magic numbers)
2013-08-28 23:32:42 -07:00
Phil Davis
5517f60472 Use physmem and realmem from get_memory() in the appropriate places 2013-08-28 13:13:37 -07:00
Phil Davis
6b0739ac37 Use new names for get_memory parameters 2013-08-28 13:11:11 -07:00
Phil Davis
386758bba9 Use hw.physmem when calculating pfsense_default_state_size
hw.physmem is the actual amount of memory that FreeBSD/pfSense can get its hands on, so use this for the calculation.
2013-08-28 13:09:08 -07:00
Phil Davis
493360f50a Use updated get_memory var names
The value of minimum_ram_warning is designed to be compared to hw.physmem - so do that. Usse the appropriate physmem or realmem value in each place.
2013-08-28 13:05:10 -07:00
Phil Davis
517fb89ed6 Improve var names in get_memory
realmem is the amount of actual (real) memory installed - the size of the RAM card - e.g. 256MB
physmem is the amount of memory available to FreeBSD after BIOS, video... has stolen some of realmem.
The variable names currently used are not very helpful for code readability. This standardises them. No functional change here.
2013-08-28 13:01:13 -07:00
jim-p
f6339216b7 s/require/require_once/g for filter.inc to avoid redeclaration errors in some rare cases. 2013-08-28 13:54:30 -04:00
jim-p
aed005392c Support the names used by the status page as well as those used internally by service entries. 2013-08-28 09:00:30 -04:00
Renato Botelho
083a9e6d0b Delete old route for remote gateway when its IP changes. It fixes #3155 2013-08-22 16:14:24 -03:00
jim-p
4475997eb6 Fixup check for existing easyrule block rule to account for the ipproto and when the ipproto is blank. 2013-08-21 15:20:37 -04:00
Renato Botelho
bd6ff3288a Add scope to target when it is a link-local, it helps ticket #3150 2013-08-20 14:37:42 -03:00
jim-p
e56cb3de7d Attempt to recognize pfsync entries from pf logs. 2013-08-19 13:54:22 -04:00
Chris Buechler
44e72b7c25 Fix selection of IPv6 target IP for IPv6 Outbound NAT rules.
This makes it possible (without source hacking) to do many:1 NAT of IPv6.

Some will rejoice. Some will curse.

This should really only be done in limited, specific circumstances. Don't develop the IPv4 NAT mentality with IPv6.
2013-08-17 05:11:48 -05:00
Renato Botelho
5ef99bd9fd Obsolete more ntp binaries from base 2013-08-16 17:06:06 -03:00
Renato Botelho
6d501aefc2 Use ntpdate from ports also and obsolete base one 2013-08-16 16:55:17 -03:00