mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity
20,668 Commits 27 Branches 53 Tags 494 MiB
a11bc49704
Commit Graph

11078 Commits

Author SHA1 Message Date
Ermal
a11bc49704 Unlink pid file before starting a new process 2013-02-05 16:04:29 +00:00
Renato Botelho
733829a9db When IP is not set, the field doesn't have the value 'none', use empty() to check instead 2013-02-05 12:30:10 -02:00
N0YB
96ea7162fc Services: DNS Forwarder 
Add DNS query forwarding section with options for sequential and require domain.
 2013-02-04 22:42:50 -08:00
Ermal
b5b5bcc041 Make more strict checks during is_ip* functions. Helps http://forum.pfsense.org/index.php/topic,58399.0.html and http://forum.pfsense.org/index.php/topic,58273.0.html 2013-02-04 13:36:25 +00:00
Renato Botelho
a75a49f6e5 Fix get_interface_subnetv6() for VIPs 2013-02-04 11:17:42 -02:00
rbgarga
0677741a58 Merge pull request #371 from bcyrill/patch-18 
Fix filterdns termination
 2013-02-04 01:26:44 -08:00
rbgarga
032c724531 Merge pull request #372 from miken32/reverseacct 
Allow RADIUS accounting to be reversed
 2013-02-04 01:25:40 -08:00
Phil Davis
2cd249edf0 Make not LAN address etc rules work 
I cannot understand how this worked anywhere in the recent past. The code fragment:
if(isset($rule[$target]['not']))
	$src = " !{$src}";$src = " !{$src}";
Appeared in multiple if/else clauses but was missing in 2 places, which I have added.
Actually, it is now duplicated in every part of the filter_generate_address if/else structure, and so it could be applied once at the end of the routine.
I have taken the minimal risk approach here, since I am not in a position to test every if/else case properly. But I can easily create a version that removes the code duplication, and someone else can test it well before committing (this is a fundamental bit of rule code that everyone uses, so I don't want to accidenatally break it worse for some poor sod.)
 2013-02-04 10:00:59 +05:45
jim-p
990fa101b6 Add a means to force a fsck (on rare occasions the fs is not marked dirty, but still needs fsck run to fix errors) 2013-02-02 21:36:39 -05:00
jim-p
2085c6de5d Add a manual way for someone to set TRIM if they really want it. touch /root/TRIM_set and reboot to set, touch /root/TRIM_unset to clear. 
Have to reboot after setting the tunefs flag or when mount is run, it clears any changes. No way to do it on the fly.
 2013-02-02 21:30:31 -05:00
bcyrill
7b5eab845c Kill filterdns when not being used 2013-02-02 21:22:41 +01:00
Michael Newton
f48abba23b check for optional reversing of statistics 2013-02-01 15:22:10 -08:00
Renato Botelho
3d54aa10ca Avoid killing apinger's rrdtool processes on kill_traffic_collector(). It helps a problem reported on comment of ticket #1399 2013-02-01 16:59:46 -02:00
Renato Botelho
48126e256f Avoid duplicate hw.usb_no_pf entry on loader.conf 2013-02-01 14:02:14 -02:00
Renato Botelho
25c088de57 Hide usbus# from interfaces list. Fixes #2306 2013-02-01 13:57:59 -02:00
Renato Botelho
53bc1f3868 Removed unused block of code 2013-02-01 11:22:07 -02:00
Ermal
8f563bb423 Use the better -Fs modifies to pf to kill the states by interface. Also kill both sides on an interface when -k needs to be used 2013-01-31 22:04:07 +00:00
Ermal
b686e5d0ce Load if_stf module if has not been done 2013-01-31 20:26:07 +00:00
Renato Botelho
d187805383 Add missing parameter to interface_track6_configure() call 2013-01-31 14:31:48 -02:00
Renato Botelho
3d92cd885b Fix a typo 2013-01-31 13:12:52 -02:00
Ermal
ef1c048b0f Do delayed handling of track6 interfaces a bit earlier. More thoughts need to be done on the track6 configuration 2013-01-31 14:06:39 +00:00
Ermal
ceba035a48 Correct name as reported by phil-davis@github 2013-01-31 14:06:39 +00:00
Ermal
c4fc2eae5b Destroy the stf interface to avoid issues with ipv6 interface assignment. Also delete any previous address on track6 interfaces before assigning a new one. 2013-01-31 12:01:53 +00:00
Ermal
12aea7f16d Do not do any operation if its not necessary 2013-01-31 11:16:16 +00:00
Ermal
7a04cd20c4 Create link_interface_to_track6 to make code more readble and easily trackble. Also improve the generation of rules to avoid creating problems during filter reload and some optimizations with it 2013-01-31 11:07:59 +00:00
Renato Botelho
a1613b62bb is_ipaddr_configured() now returns VIPS 2013-01-30 17:08:28 -02:00
Renato Botelho
2bbc542949 Fix indent 2013-01-30 17:08:28 -02:00
Renato Botelho
5fa78adc75 Fix whitespaces and indent 2013-01-30 17:08:28 -02:00
Ermal Luçi
c11d666b90 Merge pull request #362 from bcyrill/patch-4 
Adapt regex pattern for new stp interface naming
 2013-01-30 11:06:23 -08:00
Ermal
9cd6b95023 Do more strict checks. Also silence some more log_error under debug. Also do some sanity checks on rc.newwanipv6 before doing any operation 2013-01-30 18:43:47 +00:00
bcyrill
1e8a05a2c1 Update etc/inc/interfaces.inc 
With the new support for multiple stf interfaces their names have changed. Adapt the regex pattern.
 2013-01-30 18:30:11 +01:00
Ermal
e2a282a0b9 Put more checks here 2013-01-30 17:07:41 +00:00
Ermal
7e86b57ecf Oops correct interface name 2013-01-30 17:07:41 +00:00
Ermal
5ee79d322a Correct fetching ipv4 gateway by passing correct parameter 2013-01-30 13:47:21 +00:00
Ermal
b9688d6445 Silence error. Maybe the command should be removed completely! 2013-01-30 11:59:28 +00:00
Ermal
311959fe8b Ticket #2412. Also allow ipv6 traffic to flow on the stf interface 2013-01-30 10:43:34 +00:00
Ermal
8dd9f19a79 Ticket #2412 6to4 can come from any source. Also tighten rule that reply comes only to the dedicated interface for this rather than any other interface 2013-01-30 10:37:49 +00:00
Ermal
a6bc492fec Fixes #2674. Use the interface mtu rather than hardcoded 1280. Needs to be seen if issues with fragmentation can come from this on 6rd/6to4 tunnels 2013-01-30 10:31:35 +00:00
Ermal
9eb49a5152 pfctl -b is gone just use std tools of pfctl 2013-01-30 10:26:14 +00:00
Erik Fonnesbeck
31b958d5b0 Make this regular expression a little more specific so it does not kill the wrong wpa_supplicant if there are double-digit interface numbers. 2013-01-30 02:05:42 -07:00
Phil Davis
97f3ce0fa1 Corrected cmd line for hostapd 2013-01-30 14:05:56 +05:45
Ermal
6d33b044a9 Revert "Use pid even for hostapd rather then trying to guess with regex" 
This reverts commit b73a96b68d.
 2013-01-30 07:48:16 +00:00
Ermal
3fe15891fc Use correct key. Be more strict while checking by suing v4 version for ipv4. Fixes: http://forum.pfsense.org/index.php/topic,58122.msg312024.html#msg312024 2013-01-29 20:47:54 +00:00
Ermal Luçi
fe5f2a3b66 Merge pull request #358 from miken32/hp_bandwidth 
support HP RADIUS attributes for bandwidth limits and redirection URLs
 2013-01-29 12:39:29 -08:00
Michael Newton
fa2cd558c2 support HP RADIUS attributes for bandwidth, url, data quotas 2013-01-29 12:11:55 -08:00
Ermal
7d1f2eace0 Use pfSense function where possible and rename stf0 to interface_stf to allow multiple instances of iot 2013-01-29 19:38:43 +00:00
Ermal
db6e6b1a58 I am not sure why this is needed but for sure its not needed during bootup 2013-01-29 19:38:43 +00:00
Renato Botelho
49b76122af Permit openvpn to use same port on different interfaces. It should fix #814 2013-01-29 15:30:35 -02:00
Renato Botelho
d12ae2414c Fix wrong unset calls 2013-01-29 11:19:38 -02:00
Ermal
a823022d61 Do not do so much work during boot since all interfaces will be called for configuration no need to go and find those. Also delay tracking interfaces during config to give a chance their parents to come up 2013-01-29 08:10:33 +00:00