Ermal
a01f8bfc0a
Correctly check the secondary/primary parameter setting on dhcp failover configuration
2013-09-10 09:10:19 +00:00
Ermal
20809a21fd
Correct typo that prevents dhcp rules from properly being generated.
2013-09-10 08:20:10 +00:00
Phil Davis
771c14a35c
Do not include disabled OpenVPN in vpn_networks and negate_networks
2013-09-09 19:30:37 -07:00
jim-p
0281db8cc1
Fix errant display of "0 table deleted" during filter reload on console.
2013-09-09 15:18:57 -04:00
Renato Botelho
4831f5df94
Remove unecessary capitalized WARNING from disabled APC message
2013-09-09 16:09:53 -03:00
jim-p
cf07d57433
Do not sync DHPCv6, it must operate independetly. Ticket #3184
2013-09-06 13:56:56 -04:00
jim-p
d3b3240bd0
Remove failover peer IP settings from DHCPv6, DHCPv6 doesn't support failover the way that DHPv4 did. Fixes #3184
2013-09-06 13:56:55 -04:00
Renato Botelho
af0a477a1f
Disable kill_states by default on upgrade, it fixes #3183
2013-09-06 13:58:49 -03:00
jim-p
8346b5c462
Allow for easier override on $g values if needed.
2013-09-05 14:27:42 -04:00
Ermal
9d7ca11fce
Correct check to match the right vip based on configured ip. Reported-by: http://forum.pfsense.org/index.php/topic,66234.0.html
2013-09-05 12:39:20 +00:00
Ermal
36fa13a632
Ticket #3181 do the state flushing only on down gateway detection rather than any time.
2013-09-05 12:29:21 +00:00
Ermal
0b18ef0581
When the v4 wan is dynamic and v6 is type dhcp and v6 information is retrieved through v4 link than trigger dhcp6c reconfiguration.
2013-09-04 15:03:18 +00:00
Ermal
b9eae2ba66
Actually the / here is not needed.
2013-09-04 10:43:26 +00:00
Ermal
8171a2c2de
Introduce two new functions to be used on locking.
...
- try_lock: used for trying to get an EXCLUSIVE lock for a specified timeout by default of 5
- unlock_force: which just releases any locks held on a specified lock
Use this new functions on rc.openvpn to avoid spurious stale locks around.
2013-09-04 08:48:23 +00:00
Ermal
f33dcc5c79
Add safety belts to code in rc.openvpn to avoid php errors to leave stale locks around
2013-09-04 08:31:43 +00:00
Ermal
dc8b4c4ec6
Make the operation of saving old rule nearby the writing operation to be logical to spot
2013-09-04 08:18:51 +00:00
Ermal
b214bf3a05
Sprinkle some unsets to reduce footprint and correct some whitespaces
2013-09-04 08:12:36 +00:00
Phil Davis
3b6596b740
filter_generate_port error log function name
...
Absolutely minor adjustment to make the error log message refer to the new function name.
2013-09-03 18:03:59 -07:00
Ermal
81d81b942b
Fixes #3173 if any port information exists on the rule than put it on the NEGATE rule generated.
2013-09-03 18:39:56 +00:00
Renato Botelho
03131eb95c
Remove SPD when disable phase2, it fixes #2719
2013-09-03 15:13:10 -03:00
Renato Botelho
fcca1783e9
Merge pull request #786 from individual-it/master
...
Increased needed memory for APC to 512M + code cleanup
2013-09-03 10:29:52 -07:00
Chris Buechler
faf4b1fce9
Merge pull request #796 from phil-davis/master
...
Traffic Shaper GUI text typos
2013-09-03 10:05:54 -07:00
Chris Buechler
fcb5121d6f
Merge pull request #793 from shahidsheikh/master
...
Fix #3174 Handling of gateway groups in openvpn_restart()
2013-09-03 10:03:40 -07:00
Ermal
32a9eb1873
Bring back static routes to fix issues reported on Ticext #3179
2013-09-03 16:52:43 +00:00
Ermal
497841f5d5
Correct typo on variable name
2013-09-03 15:42:06 +00:00
Renato Botelho
f2cc3344a1
Fix #3004 :
...
. Create a function to replace strings on deep associative arrays
. Use the recent created function array_replace_values_recursive to fix
VIP interface names instead of touch config.xml directly
2013-09-03 12:37:41 -03:00
Renato Botelho
42ec9337ea
Make sure RRD data is restored from backup before upgrading data and a new backup is done after. It should fix #2159
2013-09-03 08:55:59 -03:00
Phil Davis
794195d153
Traffic Shaper GUI text typos
...
and note the Queue Limit is a number of packets (not packets per second)
2013-09-03 04:45:03 -07:00
Ermal
bee7cd82f8
Resolves #3177 . Do a filter reconfigure if the dynds ipsec hosts are present and being reloaded.
2013-09-03 10:27:11 +00:00
Chris Buechler
324e112d06
touch up text, s/nat/NAT/
2013-09-03 01:27:11 -05:00
Shahid Sheikh
330ecea1bf
Fix #3174 Handling of gateway groups in openvpn_restart()
...
If the underlying vip of a gateway group that an openvpn client is bound
to is in backup mode then the client should not start.
2013-09-02 21:23:21 -04:00
Jean Cyr
6aab2ea3ad
shaper burst may be blank, but if not then must be numeric
2013-09-02 14:01:22 -04:00
Renato Botelho
22234bbb2f
Fix #3172 , return_gateway_groups_array() was returning the last vip since it was using wrong variable name on iteration
2013-09-02 08:00:07 -03:00
Jean Cyr
b3e0fedf55
Dummynet does not require burst size specification
...
Dummynet traffic shaper does not require burst size specification and
assumes 0 if not specified. Allow user to leave burst field blank/
2013-09-02 02:55:09 -04:00
Phil Davis
df0cb10bbe
Provide get_uptime_sec in a common include file
...
so it is available to anything that cares.
2013-08-29 00:09:40 -07:00
Individual IT Services
73fa01787f
Increased needed memory for APC to 512M + code cleanup
...
- Increased the needed memory for APC to 512M as we often run into memory problems on our 256M box
- fixed the RAM calculation to divide by 1024 and not 1000
- code cleanup (renaming variables and creating new to avoid magic numbers)
2013-08-28 23:32:42 -07:00
Phil Davis
5517f60472
Use physmem and realmem from get_memory() in the appropriate places
2013-08-28 13:13:37 -07:00
Phil Davis
6b0739ac37
Use new names for get_memory parameters
2013-08-28 13:11:11 -07:00
Phil Davis
386758bba9
Use hw.physmem when calculating pfsense_default_state_size
...
hw.physmem is the actual amount of memory that FreeBSD/pfSense can get its hands on, so use this for the calculation.
2013-08-28 13:09:08 -07:00
Phil Davis
493360f50a
Use updated get_memory var names
...
The value of minimum_ram_warning is designed to be compared to hw.physmem - so do that. Usse the appropriate physmem or realmem value in each place.
2013-08-28 13:05:10 -07:00
Phil Davis
517fb89ed6
Improve var names in get_memory
...
realmem is the amount of actual (real) memory installed - the size of the RAM card - e.g. 256MB
physmem is the amount of memory available to FreeBSD after BIOS, video... has stolen some of realmem.
The variable names currently used are not very helpful for code readability. This standardises them. No functional change here.
2013-08-28 13:01:13 -07:00
jim-p
f6339216b7
s/require/require_once/g for filter.inc to avoid redeclaration errors in some rare cases.
2013-08-28 13:54:30 -04:00
jim-p
aed005392c
Support the names used by the status page as well as those used internally by service entries.
2013-08-28 09:00:30 -04:00
Renato Botelho
083a9e6d0b
Delete old route for remote gateway when its IP changes. It fixes #3155
2013-08-22 16:14:24 -03:00
jim-p
4475997eb6
Fixup check for existing easyrule block rule to account for the ipproto and when the ipproto is blank.
2013-08-21 15:20:37 -04:00
Renato Botelho
bd6ff3288a
Add scope to target when it is a link-local, it helps ticket #3150
2013-08-20 14:37:42 -03:00
jim-p
e56cb3de7d
Attempt to recognize pfsync entries from pf logs.
2013-08-19 13:54:22 -04:00
Chris Buechler
44e72b7c25
Fix selection of IPv6 target IP for IPv6 Outbound NAT rules.
...
This makes it possible (without source hacking) to do many:1 NAT of IPv6.
Some will rejoice. Some will curse.
This should really only be done in limited, specific circumstances. Don't develop the IPv4 NAT mentality with IPv6.
2013-08-17 05:11:48 -05:00
Renato Botelho
5ef99bd9fd
Obsolete more ntp binaries from base
2013-08-16 17:06:06 -03:00
Renato Botelho
6d501aefc2
Use ntpdate from ports also and obsolete base one
2013-08-16 16:55:17 -03:00