mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity
13,959 Commits 27 Branches 53 Tags 494 MiB
aba2f06d3a
Commit Graph

13959 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Erik Fonnesbeck
aba2f06d3a Do not install reflection rules for port forwards when the destination is invalid. 2010-05-08 18:17:09 -06:00
Erik Fonnesbeck
ed69be7ad9 Add note that reflection timeout only applies for port forwards. 2010-05-08 16:54:08 -06:00
Erik Fonnesbeck
bff9401511 Revert changes to reflection for port forwards until finished and approved. 2010-05-08 16:40:05 -06:00
Erik Fonnesbeck
e31f58fc03 Merge http://gitweb.pfsense.org/pfsense/efonne-new_nat_reflection into master 2010-05-08 16:16:34 -06:00
jim-p
5f2e5c8e30 Remove remote network from wizard, it is not used for a Remote Access VPN. 2010-05-08 14:34:45 -04:00
jim-p
b008c1eb73 Hide "Local Network" field when creating/editing an OpenVPN shared key server, because you can't push routes with shared key. 2010-05-08 12:19:37 -04:00
jim-p
6180c3ae35 Fix the same problem with sharing an OpenVPN instance w/existing shared key on the client page this time. 2010-05-08 12:13:58 -04:00
jim-p
21c776dd85 Fix OpenVPN server validation logic. It was failing if you tried to save a shared key server instance with an existing shared key. 2010-05-08 12:12:04 -04:00
Scott Ullrich
520b1e07b0 Add 0x10 diffserv option. http://forum.pfsense.org/index.php/topic,24954.0.html 2010-05-07 19:00:19 -04:00
Ermal
8aff4a0ce6 The global reference declaration is needed. 2010-05-07 21:49:17 +00:00
Ermal
7726c308bd Preserve previous behaviour of having all alarms on for all gateways. Not sure this should be/is the right behaviour though. 2010-05-07 17:16:35 +00:00
Ermal
023920e7b0 Move the settings of down/latency/loss to per gateway. This allows more fine grained control on gateways. 2010-05-07 17:12:05 +00:00
Ermal
1b38ac3650 Use common function to return gateway array so consinstency is preserved around code. 2010-05-07 15:31:56 +00:00
Ermal
6cae2c4478 Do not put ip address on teh name since pfctl does not like an ip as part of macro name. 2010-05-07 15:13:00 +00:00
Ermal
2557738e29 Correct delay matching on outgoing load balancer code. 2010-05-07 14:43:55 +00:00
Ermal
3327ac1098 Use require_once() to overcome problems with includes. 2010-05-07 13:58:55 +00:00
Ermal
a842e98851 Ticket #408. Provide code to upgrade static routes. 2010-05-07 13:41:58 +00:00
Ermal
e08e4ebc69 Make list the same. Remove whitespace at the end so it does not get interpreted as special tag. 2010-05-07 13:27:43 +00:00
Ermal
906f11b572 Fix link_ip_to_carp_interface. This unbreak at least Carp on CP and other consumers of it. 2010-05-07 11:37:04 +00:00
Ermal
8d964cea2c Add scpecific scripts for when ovpn goes up and down so we get neccessary values for used in varius areas of pfSense. TODO is find out how to get DNS info form openvpn. 2010-05-07 11:02:45 +00:00
Ermal
da9d6701c3 Check if interface exists before issuing a command when disabling captiveportal. 2010-05-07 10:22:16 +00:00
Ermal
f1e7ae165b Prevent gateway groups of having the same name as a gateway because this is not valid. 2010-05-07 10:10:06 +00:00
Ermal
28955fee05 Use a global array to prevent errors on rulesets which have invalid gateways. If such are found do not use the gateway at all. Probably the rule should be skipped too?. 2010-05-07 10:05:59 +00:00
Ermal
fad4fae8da Move auto generated rule for static routes on same subnet. Use sloppy states to speed things up and use flags any in tcp case so sloppy state does not choke. 2010-05-07 09:57:19 +00:00
Ermal
75466131f5 Catch up with latest apinger changes to make easier to extract the status of gateways. 2010-05-06 22:50:34 +00:00
jim-p
10d171f249 Add a few comments. This should be ready for testing/feedback. Ticket #108 2010-05-06 17:15:28 -04:00
jim-p
cee7294027 Add missing ; 2010-05-06 16:57:56 -04:00
jim-p
bdf4ad85ec Set proposal check and passive as needed for this scenario also. Ticket #108 2010-05-06 16:56:12 -04:00
jim-p
d98f1fa9a8 Ensure initial_contact is 'on' in this case to behave as 1.2.3 did. Ticket #108 2010-05-06 16:53:09 -04:00
jim-p
fa1f482785 Set generate_policy to "on" to behave as 1.2.3 does in this case. Ticket #108 2010-05-06 16:51:13 -04:00
jim-p
36d047f5fa Only specify peer ID if we are not dealing with a mobile PSK-only tunnel. Ticket #108. 2010-05-06 16:40:14 -04:00
jim-p
9b2e9133f8 Do not specify subnet in sainfo if we are dealing with a mobile PSK-only tunnel. Ticket #108 2010-05-06 16:34:33 -04:00
jim-p
1f65618b24 Only enforce peer ID and psk on p1 screen if we are NOT dealing with a pure-psk mobile tunnel (which is the behavior in 1.2.3). Hide irrelevant options. Part of ticket #108. 2010-05-06 16:13:24 -04:00
jim-p
71d61aa527 Reorder Auth. Method and PSK field to a more logical sequence. Part of ticket #108. 2010-05-06 15:43:14 -04:00
jim-p
2ef1b60120 Write out IPsec PSKs for mobile clients. Part of ticket #108. 2010-05-06 15:33:07 -04:00
jim-p
7d8a886abc More tab fixes. 2010-05-06 15:25:05 -04:00
jim-p
b24479d6a0 A couple small fixes to the tabs/titles on these pages. 2010-05-06 15:24:00 -04:00
jim-p
958420c5fa Bring back IPsec PSK Tab/Edit. Part of ticket #108. Still needs backend code to use the resulting keys. 2010-05-06 15:06:53 -04:00
jim-p
bb927ed428 Previous commit also fixed traffic graph state changing, so re-enable that as well. 2010-05-06 12:52:45 -04:00
jim-p
acc5dd59f9 Fix widget settings in general. Initialize widget list before use. Fixes #285. 2010-05-06 12:52:44 -04:00
Ermal
a669395c5f Enable even xmlwriter module. 2010-05-06 16:35:30 +00:00
Ermal
ab83fce093 Ticket #320. Use xmlreader and xmlwriter to read/write xml since it encodes decodes itself special chars. 2010-05-06 16:34:20 +00:00
jim-p
e77ea573be Fix config backup download on IE8+HTTPS. Reported-By: Seth on the Dev list 2010-05-06 11:11:27 -04:00
jim-p
1b8b44dc66 Add client-to-client to OpenVPN server config if the option is checked. Resolves #572. 2010-05-06 10:17:08 -04:00
Erik Fonnesbeck
34a2fb1bdc Allow using the default session timeout. 2010-05-06 06:08:54 -06:00
Erik Fonnesbeck
fcf4e8cd21 Fix upgrade code for port forwards with "Interface address" set on external address. Ticket #561 2010-05-06 04:20:22 -06:00
Ermal
07f1ca1d82 Correct file_notice usage. 2010-05-06 10:43:56 +00:00
Seth Mos
416ae3d665 Fix the empty array check, a empty load balancer tag has a value of 1, not 0. 2010-05-06 11:13:26 +02:00
Seth Mos
92a2ceae11 Do not trip with configuration upgrades on a empty load balancer tag. 2010-05-06 11:06:21 +02:00
Erik Fonnesbeck
0167a9bff5 Fix the regular expression used in filter_generate_address for OPT subnet so that it only matches the case intended. Ticket #571 2010-05-06 02:47:06 -06:00