Commit Graph

7388 Commits

Author SHA1 Message Date
plumbeo
acbd943da1 Captive portal: add a traffic quota option
Add a new option to disconnect users after they exceed a traffic quota (sum of downloaded data and uploaded data).
2018-04-05 15:19:27 +02:00
plumbeo
643315be4a Captive portal: always use the RADIUS-provided session timeout value if the option is enabled 2018-04-05 15:19:20 +02:00
Renato Botelho
3d70689736 Do not remove unbound testing config when it fails to make it easier to debug 2018-04-05 08:15:17 -03:00
jim-p
4acef976e2 Add a status page for unbound to show the infra cache. Ticket #8430 2018-04-04 16:13:50 -04:00
reb00tz
923f05c427 Enhanced sshdkeyonly Drop-Down List for Clarity...
Enhanced sshdkeyonly drop-down list for clarity, as per https://github.com/pfsense/pfsense/pull/3922#pullrequestreview-108426593.
2018-04-04 14:13:42 -04:00
reb00tz
c2d5d1ff8b Enhanced sshdkeyonly Drop-Down List for Clarity...
Enhanced sshdkeyonly drop-down list for clarity, as per https://github.com/pfsense/pfsense/pull/3922#pullrequestreview-108426593.
2018-04-04 14:13:42 -04:00
reb00tz
0bfd23a619 Allow SSHd Key and Password Combination
Changes to allow key and password combination (in contrast to key OR password) i.e. if selected in the Admin>Advanced UI (SSH section), sshd will generate /etc/ssh/sshd_config file that requires an authorized key AND username+password.

Note: requires corresponding edits (reb00tz-sshd_key_and_password-patch-2) for proper UI options to show up. Otherwise, manually set $config['system']['ssh']['sshdkeyonly'] to "both" then restart sshd to take effect.
2018-04-04 14:13:42 -04:00
reb00tz
d6fdfd78d4 Allow SSHd Key and Password Combination
Changes to allow key and password combination (in contrast to key OR password) i.e. if selected in the Admin>Advanced UI (SSH section), sshd will generate /etc/ssh/sshd_config file that requires an authorized key AND username+password.

Note: requires corresponding edits (reb00tz-sshd_key_and_password-patch-2) for proper UI options to show up. Otherwise, manually set $config['system']['ssh']['sshdkeyonly'] to "both" then restart sshd to take effect.
2018-04-04 14:13:42 -04:00
jim-p
f39ba24b36 Add a TLS option for DNS Resolver Domain Overrides. Implements #8431 2018-04-04 14:09:05 -04:00
jim-p
547e51b887 Add query name minimization options to DNS Resolver. Implements #8028 2018-04-04 13:36:04 -04:00
Steve Beaver
726a9fa594 Merge pull request #3931 from robjarsen/tweak/rm-whitespace 2018-04-04 13:25:59 -04:00
jim-p
cd73821986 Add GUI option for DNS over TLS. Implements #8388 2018-04-04 11:01:06 -04:00
robjarsen
493e428415 Remove Whitespace
* src\etc\inc\dyndns.class
* src\etc\inc\simplepie\simplepie.inc
* src\usr\local\www\services_dyndns_edit.php
2018-04-03 13:27:42 -04:00
jim-p
0dda568ac1 Update SimplePie to 1.5.1 2018-04-03 09:27:12 -04:00
Steve Beaver
83a0899662 Merge pull request #3926 from martgras/azureddns 2018-04-03 09:18:10 -04:00
robjarsen
523849d312 remove whitespace - pt. 2 2018-04-02 16:41:09 -04:00
jim-p
37e1aecf83 Fix function name typo 2018-04-02 15:42:40 -04:00
jim-p
00e54150ea Add function to detect OCSP Must Staple certs. Ticket #8418 and Ticket #8299 2018-04-02 15:18:52 -04:00
Renato Botelho
2d113b128f Fix #8417
- Changed default value for Maximum Table Entries to 400000 in order to
  make bogonsv6 to work
- Added code to upgrade config and set default value on systems where
  it's not defined
- Changed default config to match new default and version 18.0
- Added checks to enable 'block bogons' and to enable IPv6 requesting
  the minimum value
- Notify admin when Maximum Table Entries value is too small and in
  this case skip bogonsv6 table creation
2018-04-02 13:45:01 -03:00
Steve Beaver
85b10a479d Add copyright version param 2018-04-02 08:14:27 -04:00
Renato Botelho
b93ee0b78d Merge pull request #3923 from robjarsen/tweak/rm-whitespace 2018-04-02 08:16:37 -03:00
martgras
1ac3c88a4a Redmine # 7769: Add support for Azure DNS to DynamicDNS 2018-04-01 20:41:59 +02:00
Luiz Souza
b0ad46aa32 Fixes a regression in my previous commit.
IP aliases can be used with CARP vhids too.

Reported by:	PiBa
Ticket:		#8393
2018-03-31 01:09:49 -03:00
robjarsen
179377b01c Remove Whitespace
I'm aware this is a very large commit. Let me know if you'd rather have it broken down by file type (ie: PHP/shell scripts) so it would be easier to review.

-RJ
2018-03-30 19:01:24 -04:00
Steve Beaver
49c1dfc03c Merge pull request #3915 from cxcv/proxyarp 2018-03-30 14:47:13 -04:00
Steve Beaver
8d26774f5e Merge pull request #3916 from robjarsen/tweak/cf-spelling 2018-03-30 14:46:24 -04:00
Steve Beaver
cd4ee470ce Merge pull request #3919 from PiBa-NL/20180329-copyright-showonce 2018-03-30 14:45:07 -04:00
Luiz Souza
52d4dc9161 Fixes a bug where an IP alias on loopback interface is not initialized at boot.
A recent change changed the IP alias setup to only happen on enabled interfaces.  As the loopback interfaces do not have the enabled flag on config there are being skiped.

While here reduce some duplicate code and apply the same rules for VIPs and IP aliases.

Ticket:		#8393
Github PR:	#3920
2018-03-30 15:21:59 -03:00
PiBa-NL
11522a0861 copyright, show only when changed md5 changed 2018-03-29 18:55:01 +02:00
jim-p
5ac478f23b Ensure the OpenVPN wizard protocol is valid for use in firewall rules. Fixes #8391 2018-03-28 16:28:57 -04:00
robjarsen
a6cbe5e459 Remove the possessive 2018-03-26 15:28:54 -04:00
Steve Beaver
ef7e888526 Move copyright notice to /conf 2018-03-25 16:40:06 -04:00
Steve Beaver
1ea2a37edb Fix copyright typo 2018-03-24 14:33:08 -04:00
Steve Beaver
6fb38a04de Further copyright updates 2018-03-24 08:49:31 -04:00
Steve Beaver
c0debf5b49 Revisions to copyright text 2018-03-24 08:44:05 -04:00
Renato Botelho
0a031fc76c Rename RCC-DFF to SG-2220 2018-03-23 12:32:38 -03:00
Steve Beaver
8062e6a4eb Change reported version to installed version rather than product version for more detail 2018-03-22 10:56:47 -04:00
Steve Beaver
a1ec79f329 Simplify copyright notice display 2018-03-21 15:35:23 -04:00
Steve Beaver
e84812a1e4 Update obsoleted files 2018-03-21 10:25:42 -04:00
Steve Beaver
c8c15bf50e Make copyright notice downloadable from server
Trigger cpyright notice on completion of setup wizard
2018-03-21 10:11:25 -04:00
Luiz Souza
45b421561d Bump up the XML config version. 2018-03-20 19:24:13 -03:00
robjarsen
07a84ece21 missed a few 2018-03-18 20:09:56 -04:00
robjarsen
c5e1ce90a7 Change CloudFlare to Cloudflare
This commit also includes misc. whitespace removal on the affected files.
2018-03-18 16:14:36 -04:00
Benjamin Schweizer
a7e859b80d fixed code style 2018-03-17 20:22:32 +01:00
Steve Beaver
12b8f3c95f Don't read picture file if it does not exist 2018-03-16 15:22:22 -04:00
Benjamin Schweizer
7c0e431a87 avoid firwall rules for proxyarp addresses 2018-03-16 17:30:08 +01:00
Renato Botelho
b6c9251022 Bump version to 2.4.4-DEVELOPMENT 2018-03-16 10:44:31 -03:00
Steve Beaver
1f0bbb13ab Revise picture widget to store image on file system, not in XML config 2018-03-16 09:23:52 -04:00
Steve Beaver
9099582c60 Merge branch 'master' of gitlab.netgate.com:pfsense/pfsense 2018-03-16 09:20:10 -04:00
Steve Beaver
ee28e293c1 Revise picture widget to store inamge on file system, not in XML config 2018-03-16 09:08:06 -04:00