Commit Graph

338 Commits

Author SHA1 Message Date
Phil Davis
889cbaefc7 Display gateways with matching IP protocol in Gateways list
Some gateways do not have traditional addresses hard-coded into them - e.g. for OpenVPN dynamic gateways are created in software on-the-fly (they are not actually entries in the config). So traditional tests like is_ipaddrv4 are not useful to determine if the gateway is IPv4 or IPv6.
return_gateways_array() fills in an "ipprotocol" entry for each returned gateway ("inet" or "inet6"), as well as the "gateway" address field. This can be used to determine if the gateway is for IPv4 or IPv6.
2013-01-08 15:32:34 +05:45
Ermal
84464c9ab0 Fixes #1575. Allow Match option to be used with limiters as well. The support is there in kernel so allow rules to be configured on this. 2012-11-27 07:50:20 +00:00
Ermal
fbc75dd598 To allow limiters to work correctly on mutliwan for now enforce selecting a gateway on outgoing 2012-11-16 21:28:21 +00:00
jim-p
bb33a33724 Encode the interface parameter before using it in a redirect 2012-10-31 14:23:46 -04:00
Phil Davis
a133c803a5 Fix warning when no gateway groups
If there are no gateway groups defined, and you save a rule that has an ordinary gateway selected in "Advanced Features - Gateway", then a warning is emitted when trying to traverse an empty gateway groups array at line 214.
2012-10-24 14:49:16 +05:45
jim-p
3a343d7384 Refine saving/applying on more pages - don't show apply or take an action unless the user is allowed to do that. 2012-10-09 15:17:00 -04:00
jim-p
bec92ab9e2 Don't offer to apply changes if no changes actually happened. 2012-10-09 10:44:14 -04:00
Chris Buechler
18be4037b5 remove bunk input validation 2012-09-09 20:55:15 -05:00
jim-p
b32dd0a6b7 Activate new shortcuts/status in the rest of the areas that are currently setup. 2012-08-10 13:32:16 -04:00
Ermal
85a236e9dd Fixes #2428. Reference limiters in rules by name to avoid issues. Also put upgrade code for existing configs. The same fix is necessary for 2.0.x though not sure how this should be committed there. 2012-06-01 19:51:18 +00:00
smos
05a4cebd90 Add a inet46 filter type on the firewall rules page. I have locked down a few of the most common limitations.
Still arguing if we should lock this down even further to aliases only.
Redmine ticket #2466
2012-05-31 20:08:55 +02:00
smos
ee8c34f487 Properly test for the address family now that the array says what it's supposed to be. 2012-05-21 19:01:05 +02:00
Cristian Feldman
90f90934c0 Fix of bug #2374 "When entering values in firewall rules leading and
trailing spaces are not deleted"
2012-05-18 22:57:38 -03:00
Ermal
1346306cf7 Allow 802.1p tags to be controlled from firewall rules edit screen 2012-05-18 19:49:41 +00:00
Darren Embry
4dfd930ee9 cleanup: code for building arrays for autocompleted fields 2012-05-10 15:17:18 -04:00
Erik Fonnesbeck
43fd29dfa2 Fix preservation of the selection of interfaces on input errors for floating rules. 2012-04-27 21:59:22 -06:00
Darren Embry
f51d5d57a6 feature #2320: JS helper to toggle subnet mask for ipv4/v6 during input
http://redmine.pfsense.org/issues/2320
2012-03-28 18:50:02 -04:00
Darren Embry
979b179d8e prep work for feature #2320: tag for ipv4v6 fields 2012-03-28 18:31:47 -04:00
Vinicius Coque
6134cc8fe0 now we use the Chosen javascript plugin for jQuery 2011-11-15 15:12:17 -02:00
Seth Mos
9dfd60dbf5 Add a check to prevent this gateway code from triggering the address family check. This might not be all that is needed for Ticket #1949 2011-10-18 09:33:36 +02:00
Seth Mos
99bdb17e39 Unbreak the firewall rule Edit page, input error array was unset halfway the validation. Set that back up ontop.
Add gateway validation
2011-08-24 22:10:55 +02:00
Seth Mos
4108dee880 Catch another possiblity for invalid rule generation 2011-08-24 21:21:56 +02:00
Seth Mos
a1c10b7fbf Properly fix the address family check for gateway groups Ticket #1659 2011-08-24 15:26:20 +02:00
Seth Mos
8c591d01db Unbreak firewall rules edit, missing a ) 2011-08-24 15:12:05 +02:00
Seth Mos
270a257646 Add address family validation, also hide gateways or gateway groups from the gateway list.
Fix Ticket #1659
2011-08-24 13:02:34 +02:00
Scott Ullrich
4bb99603d3 Add chosen js library (mit lic). Modify interface multiple select box to use. 2011-07-23 18:51:32 -04:00
Scott Ullrich
48fc39a3c0 Adding pre_input_errors hook 2011-07-18 15:25:29 -04:00
Scott Ullrich
b4b7bda609 Revert "Move early call up a bit"
This reverts commit 35843e59c8.
2011-07-18 15:23:41 -04:00
Scott Ullrich
35843e59c8 Move early call up a bit 2011-07-18 15:12:03 -04:00
Scott Ullrich
0040bcfa59 Adding hook for interfaces allowing pfCenter and friends to add interfaces to the dropdown 2011-07-16 20:55:30 -04:00
jim-p
8b6313a4d3 Merge remote-tracking branch 'upstream/master'
Conflicts:
	etc/inc/easyrule.inc
	etc/inc/filter.inc
	etc/inc/interfaces.inc
	etc/inc/services.inc
	etc/inc/xmlrpc_client.inc
	usr/local/www/fbegin.inc
	usr/local/www/services_dhcp.php
2011-07-12 19:57:42 -04:00
Evgeny Yurchenko
5909b520a7 Bug #1639. Port alias missing input validation in firewall_rules_edit.php. 2011-07-07 20:46:21 -04:00
jim-p
8a385f4274 Merge remote branch 'upstream/master' 2011-06-27 14:06:33 -04:00
Warren Baker
e4b9d53bd3 Be consistent with upper and lowercase. 2011-06-27 16:57:43 +02:00
jim-p
ee0cf21f7c Merge remote branch 'upstream/master' 2011-06-01 16:56:04 -04:00
jim-p
a01ce4c764 Make the ICMP echo request type less ambiguous, and since it's likely the main one to get used, move it to the top. 2011-06-01 16:54:42 -04:00
jim-p
58005e5213 Merge remote branch 'upstream/master'
Conflicts:
	conf.default/config.xml
	etc/inc/filter.inc
	etc/inc/globals.inc
	etc/inc/pfsense-utils.inc
	etc/inc/upgrade_config.inc
	usr/local/www/interfaces.php
2011-06-01 09:00:09 -04:00
Scott Ullrich
10d74dff5a Remove bogus protection. We have better handling of this now. 2011-05-31 12:35:17 -04:00
Scott Ullrich
2ea00c3e74 Add missing plugin code. Move the pre_write section up a bit. 2011-05-30 12:28:21 -04:00
Scott Ullrich
d65962a773 Adding a new hook system for firewall nat edit and firewall rules edit page.
Basically if the directory exists it will suck in the files to extend these pags.

/usr/local/pkg/firewall_nat/input_validation
/usr/local/pkg/firewall_nat/pre_write_config
/usr/local/pkg/firewall_nat/htmlphpearly
/usr/local/pkg/firewall_nat/htmlphplate

/usr/local/pkg/firewall_rules/input_validation
/usr/local/pkg/firewall_rules/pre_write_config
/usr/local/pkg/firewall_rules/htmlphpearly
/usr/local/pkg/firewall_rules/htmlphplate
2011-05-25 19:43:51 -04:00
Seth Mos
86966fba75 Merge remote branch 'upstream/master'
Conflicts:
	etc/inc/filter.inc
	usr/local/www/themes/the_wall/rrdcolors.inc.php
2011-04-12 10:39:20 +02:00
jim-p
c6dfd28923 In IPsec, s/mobileclients/client/, this was changed long ago in the config but not everywhere followed. 2011-03-28 12:17:41 -04:00
Scott Ullrich
b4c826ad15 Resolve merge conflict 2011-03-06 16:18:29 -05:00
Ermal
199791f965 Show friendly names of interface for root queues of ALTQ. 2011-03-02 14:09:10 +00:00
Seth Mos
a299232e55 Merge remote branch 'upstream/master'
Conflicts:
	etc/inc/filter.inc
	etc/inc/vpn.inc
2011-02-23 09:03:59 +01:00
jim-p
95938fae08 Fix typo/spacing issue. Resolves #1300 2011-02-21 16:45:25 -05:00
Seth Mos
f698b26293 Merge remote branch 'upstream/master' 2011-02-16 09:11:05 +01:00
Erik Fonnesbeck
43f2eca799 Use autocomplete='off' like all other fields that accept aliases, to prevent web browser auto-complete from covering up the alias list popup. 2011-02-13 07:44:52 -07:00
Scott Ullrich
ac5eb23ba8 Catch up 2011-02-12 01:31:32 -05:00
Ermal
a391d0ab12 Allow match action on Floating rules and exposed it with name Queue. More validation is needed. 2011-02-11 17:26:38 +00:00