Seth Mos
bc40d758be
Create a management subnet on a wan interface if the interface is DHCP.
...
Create automatic nat rules for the management subnet.
Make the automatic nat rules always use the interface address.
Allow entry of these subnets on the interfaces page.
2007-09-01 18:30:20 +00:00
Scott Ullrich
6ec9680988
Exit immediately after firmware update operation completes.
2007-08-28 18:31:45 +00:00
Scott Ullrich
c79e6edf6b
Add carriage return
2007-08-28 18:28:22 +00:00
Scott Ullrich
00392a1370
Make $fp global
2007-08-28 18:19:22 +00:00
Scott Ullrich
1939b5cee7
Do not close STDIN until script is done processing.
2007-08-28 18:18:22 +00:00
Scott Ullrich
92d8801f46
Prompt for kernel type if it is not defined.
...
Ticket #1435
2007-08-28 18:16:10 +00:00
Martin Fuchs
ca126e0341
unsplit DHCP-root-path-option
2007-08-27 11:36:21 +00:00
Seth Mos
6bc448417b
Negate local networks as well. It's required for proper operation after all
...
MFC: Perhaps, fixes existing ticket with regards to load balancer rules
2007-08-22 20:07:47 +00:00
Scott Ullrich
1ef8bc7534
Start racoon_watch.sh script on bootup if racoon is enabled.
2007-08-17 18:57:52 +00:00
Seth Mos
9c2605519c
If we have a AON rule use the target as the ftp proxy source address
2007-08-08 19:20:42 +00:00
Martin Fuchs
9be23653c4
DHCP: add Domain-Searchlist-Option
2007-08-07 13:28:09 +00:00
Bill Marquette
4d8bf8cae6
Fix description for lock-ipages
2007-08-06 03:21:58 +00:00
Bill Marquette
a24d988099
Fix field display on login screen
2007-08-06 02:49:13 +00:00
Scott Ullrich
725dd10ae2
Sync NATT support from m0n0wall
2007-08-04 20:26:37 +00:00
Seth Mos
4ed746322f
Static port the mobile ipsec port 4500
2007-08-04 20:21:42 +00:00
Martin Fuchs
ee1b024ea9
- correct behaviour of dhcpd.conf creation
...
- enable root-path
2007-08-02 11:43:04 +00:00
Martin Fuchs
dc3d25d27d
DHCP remove duplicate option domain-name ind dhcpd.conf
2007-08-02 08:47:44 +00:00
Martin Fuchs
1ebf937f12
DHCP: domainname / HEAD > RELENG_1
2007-08-02 08:31:04 +00:00
Martin Fuchs
6c23757bb8
Add TFTP and LDAP server options to dhcpd
2007-08-01 20:19:50 +00:00
Bill Marquette
9c55515a26
Users that have specific page access can now login
2007-08-01 18:44:41 +00:00
Scott Ullrich
6c038dc63c
* Remove trailing space
* Remove duplicate command accidently commited
2007-07-31 22:54:10 +00:00
Scott Ullrich
4313e61a52
Increase timeouts when using a 1000 hz.
From the FreeBSD commit message:
Change TCPTV_MIN to be independent of HZ. While it was documented to
...
be in ticks "for algorithm stability" when originally committed, it turns
out that it has a significant impact in timing out connections. When we
changed HZ from 100 to 1000, this had a big effect on reducing the time
before dropping connections.
To demonstrate, boot with kern.hz=100. ssh to a box on local ethernet
and establish a reliable round-trip-time (ie: type a few commands).
Then unplug the ethernet and press a key. Time how long it takes to
drop the connection.
The old behavior (with hz=100) caused the connection to typically drop
between 90 and 110 seconds of getting no response.
Now boot with kern.hz=1000 (default). The same test causes the ssh session
to drop after just 9-10 seconds. This is a big deal on a wifi connection.
With kern.hz=1000, change sysctl net.inet.tcp.rexmit_min from 3 to 30.
Note how it behaves the same as when HZ was 100. Also, note that when
booting with hz=100, net.inet.tcp.rexmit_min *used* to be 30.
This commit changes TCPTV_MIN to be scaled with hz. rexmit_min should
always be about 30. If you set hz to Really Slow(TM), there is a safety
feature to prevent a value of 0 being used.
This may be revised in the future, but for the time being, it restores the
old, pre-hz=1000 behavior, which is significantly less annoying.
As a workaround, to avoid rebooting or rebuilding a kernel, you can run
"sysctl net.inet.tcp.rexmit_min=30" and add "net.inet.tcp.rexmit_min=30"
to /etc/sysctl.conf. This is safe to run from 6.0 onwards.
Approved by: re (rwatson)
Reviewed by: andre, silby
2007-07-31 22:51:29 +00:00
Ryan Wagoner
431484c8ef
-move upnp_action to services.inc
...
-make sure to clear rules when stopping miniupnpd
-fix status_upnp and status_services pages so they use upnp_action and not the rcfile
2007-07-23 17:26:33 +00:00
Scott Dale
b047196ead
remove previous commit, moving function to index.php to support package installation
2007-07-23 03:19:29 +00:00
Scott Dale
c955b31520
add tab for widgets function
2007-07-23 03:06:08 +00:00
Seth Mos
694870530c
Add rrd graph settings page.
...
Bump config out of line with 1.2
Add rrd config upgrade code.
2007-07-21 21:47:37 +00:00
Seth Mos
7828fd5be8
Keep longer archives, allow for a 4 year span
2007-07-16 19:56:56 +00:00
Seth Mos
70baaf2fe3
Axe unused archives, correct average times.
2007-07-15 21:16:19 +00:00
Scott Ullrich
a005424e17
Start DHCPD before DNSMASQ to avoid this error on embedded:
Jul 12 01:34:39 dnsmasq[588]: failed to access /var/dhcpd/var/db/dhcpd.leases: No such file or directory
2007-07-12 01:41:06 +00:00
Seth Mos
77109a5f7a
Commit missed checkin, supress debug message
2007-07-09 12:52:32 +00:00
Seth Mos
d852c5260a
Unbreak IPSEC, correct pathnames
2007-07-08 21:06:23 +00:00
Scott Ullrich
7a5e1563bf
CAPS kills. Literally. Do not set the description to upper case LAN when we are looking for lower case.
2007-07-07 03:42:42 +00:00
Scott Ullrich
efb9942fd2
Kill off old pftpx processes correctly
2007-07-07 03:20:05 +00:00
Scott Ullrich
8a58063d28
Improve the load balancing pool edit screen.
Submitted-by: Chris Daniel
2007-07-06 18:46:44 +00:00
Scott Ullrich
0bdbb9ea3c
Remove extra PasswordAuthentication line.
Ticket #1374
2007-07-06 18:16:37 +00:00
Scott Ullrich
8e537b3c6e
Use $lanif for lan anti-lockout rule
2007-07-05 22:04:29 +00:00
Scott Ullrich
f2d7bc114c
Escape $lan correctly
2007-07-05 20:40:45 +00:00
Scott Ullrich
6f82a11f10
Do not use $iface as source or destination as it may be a member of a bridge without an ip address and pfctl will complain.
2007-07-05 20:38:57 +00:00
Scott Ullrich
7f37926c72
Since we are matching traffic on incoming interface, do not link wan or lan to bridgeX
2007-07-05 19:00:47 +00:00
Scott Ullrich
2b6e777def
Only pass anti-lockout traffic on $lan
2007-07-05 18:51:51 +00:00
Seth Mos
b9d8cc51ef
Fix loading and reloading config for IPSEC.
...
MFC: Possible candidate, works for seth. Needs test.
2007-07-04 12:11:30 +00:00
Seth Mos
be41c19386
Supress debug logging
2007-07-04 12:09:04 +00:00
Scott Ullrich
b770450e52
Cleanup IPSEC rules. We where blocking port = 500 UDP on CARP interfaces, for one.
2007-07-01 19:59:32 +00:00
Scott Ullrich
5e4b6e3515
Be more verbose on logging so that we can correctly deterimine protocol, etc.
Ticket #1348
2007-07-01 19:24:12 +00:00
Scott Ullrich
d08299cc61
$config needs to be global
2007-06-30 22:25:39 +00:00
Scott Ullrich
6e35cf3ff9
unbreak policy routing rules network access to LAN IP
Ticket #1320
2007-06-30 22:04:34 +00:00
Scott Ullrich
6f20377b6f
Correctly move upnp to base since LiveCD cannot write files to /usr/local/etc or /usr/local/etc/rc.d/
Ticket #1342
2007-06-30 21:48:29 +00:00
Scott Ullrich
d739dbe9cc
Kill trailing space
2007-06-30 21:20:21 +00:00
Scott Ullrich
c876662c7e
Remove openvpn csc file when option is disabled.
Ticket #1339
2007-06-30 21:19:41 +00:00
Scott Ullrich
66cc67c6ec
Add ASN1DN identities support to IPSEC.
Subbmitted-by: Nic Bernstein <nic_AT_onlight.com>
2007-06-30 20:57:30 +00:00
