Ermal LUÇI
|
b8d092806f
|
Put the booting signal in globals.inc since it makes all the other scripts detect we are booting. Otherwise separate php instances will not detect that. rc.bootup clears this flag so all should work correctly
|
2014-11-24 15:23:57 +01:00 |
|
Ermal LUÇI
|
6668e18faa
|
Ignore empty interfaces and ovpn ones on linkup since they should not trigger this script actions
|
2014-11-24 15:02:30 +01:00 |
|
Ermal LUÇI
|
dced0dd03f
|
Be friendly to large interface systems
|
2014-11-24 12:22:03 +01:00 |
|
Ermal LUÇI
|
43517fcc1b
|
Fixes #1047, overhaul handling of flags for hardware offloading and make it work correctly for system_advanced page settings. Lagg is still a special case that needs a reboot.
|
2014-11-24 12:19:15 +01:00 |
|
Chris Buechler
|
38e9197673
|
Merge branch 'master' of https://github.com/wagonza/pfsense into wagonza
|
2014-11-22 15:33:06 -06:00 |
|
Chris Buechler
|
02a2bffaec
|
add a usleep here to prevent killing twice. Ticket #3894
|
2014-11-22 12:57:47 -06:00 |
|
Chris Buechler
|
93ead355d4
|
In some circumstances, OpenVPN doesn't exit on SIGTERM. SIGKILL it when that happens. Ticket #3894
|
2014-11-22 12:42:53 -06:00 |
|
Chris Buechler
|
e295e7ca44
|
MSS clamping on VPNs is necessary in both directions where it's needed. Rather than requiring setting on both ends, especially since the remote side can be some third party device where MSS clamping may not be available or not work, set in both directions here.
|
2014-11-22 11:17:29 -06:00 |
|
Chris Buechler
|
7786c9d617
|
clean up tabs in strongswan.conf
|
2014-11-21 21:52:38 -06:00 |
|
Chris Buechler
|
0a69eb7a68
|
touch up text
|
2014-11-21 21:11:52 -06:00 |
|
Warren Baker
|
0a5a8df9eb
|
d DHCPLeases starting before Unbound/DNSMasq and returning a pid not found message. Add missing reload feature
|
2014-11-21 21:24:20 +02:00 |
|
jim-p
|
7525f05d69
|
Fix misspelling
|
2014-11-21 08:37:59 -05:00 |
|
Renato Botelho
|
d274a75b0d
|
Fix syntax
|
2014-11-21 10:22:55 -02:00 |
|
Ermal LUÇI
|
e3cffd6cef
|
Properly remove IPv6 carp vips as reported from https://forum.pfsense.org/index.php?topic=84392.0
|
2014-11-21 11:20:46 +01:00 |
|
Ermal LUÇI
|
a8a642c5c8
|
Fixes #3198, check that subnet masks are equal when choosing binat type for IPSec to avoid errors on ruleset.
|
2014-11-20 16:25:35 +01:00 |
|
Ermal LUÇI
|
bc73d959f9
|
Make this a bit more clean to read
|
2014-11-20 15:45:50 +01:00 |
|
Ermal LUÇI
|
2535f6dcc2
|
Fixes #1047, Actually the code is trying to set flags on the parent. so allow it even for vlans since they will follow the parent. At least so seems on FreeBSD 10.
|
2014-11-20 15:33:25 +01:00 |
|
Ermal LUÇI
|
02156b4bf5
|
Be a bit more smart here to not check openvpn side if it is already found. Ticket #1681
|
2014-11-20 15:18:54 +01:00 |
|
Ermal LUÇI
|
1fb550014f
|
Ticket #1681, Renato seems to have done the right thing here, just be a bit more smart on the information that is already there.
|
2014-11-20 15:13:25 +01:00 |
|
Ermal LUÇI
|
977c1ad8d2
|
Log in system log the result of install_package to be able to troubleshoot later on.
|
2014-11-20 14:44:57 +01:00 |
|
Ermal LUÇI
|
dd34d7d239
|
Force installation even here.
|
2014-11-20 13:03:59 +01:00 |
|
Ermal LUÇI
|
b85d9c61fd
|
Sprinkle some static definitions to avoid warnings from PHP
|
2014-11-20 12:44:28 +01:00 |
|
Ermal LUÇI
|
b3bbed5812
|
Split the various calls here to avoid php warnings with new versions.
|
2014-11-20 12:44:15 +01:00 |
|
Ermal LUÇI
|
3e643dba70
|
Make this code do proper checks in all cases
|
2014-11-20 12:04:08 +01:00 |
|
Ermal LUÇI
|
bc9155c33b
|
Ticket #4007, properly pass the table number here to retrieve the status.
|
2014-11-20 11:50:41 +01:00 |
|
Chris Buechler
|
687ff78c96
|
Only skip tap-type OpenVPN servers, not all. Fixes #3713
|
2014-11-19 19:10:29 -06:00 |
|
Chris Buechler
|
355c2f8bdb
|
also check port of dnsmasq/unbound and skip 127.0.0.1 in resolv.conf if
not port 53. Ticket #4022
|
2014-11-19 16:20:31 -06:00 |
|
Chris Buechler
|
97383d2bda
|
don't blow away previous contents of this variable. fixes #4022
|
2014-11-19 16:06:26 -06:00 |
|
Ermal
|
14f7afb1a2
|
Do the tests check properly related to Ticket #2786
|
2014-11-19 21:27:12 +01:00 |
|
Ermal
|
f233ddebb9
|
Actually use all hex values on the gateway of 6rd to please route command
|
2014-11-19 20:02:32 +01:00 |
|
Ermal
|
7b83f72384
|
Correct gateway for Ticket #2882 to the proper value as reported by: cmb
|
2014-11-19 19:36:39 +01:00 |
|
Phil Davis
|
bdf5efc5f7
|
Matching bracket in vpn.inc
Reported forum https://forum.pfsense.org/index.php?topic=84322.0
|
2014-11-19 22:18:03 +05:45 |
|
Renato Botelho
|
b3c6783f82
|
Make sure system_hosts_generate() is called by services_unbound_configure(). It should fix #4027
|
2014-11-19 07:48:35 -02:00 |
|
Ermal
|
d882658e82
|
Fixes #3894, --resolv-retry is infinite by default. To avoid the issues of locking the persistnet tun device by this just retry two times by default. People can enable resolv-retry infinite themselves for previous behaviour
|
2014-11-19 09:32:31 +01:00 |
|
Ermal
|
ddabd9d679
|
Ticket #3987. Strongswan support autodetection of IKE version exchange. Support this by allowing an auto version in the GUI.
|
2014-11-19 08:54:31 +01:00 |
|
Ermal
|
b095e37061
|
Ticket #3809 use the setting with number rather than string since the parser of attr plugin understands only numbers. Reported on: https://forum.pfsense.org/index.php?topic=84304.0
|
2014-11-19 08:46:34 +01:00 |
|
Chris Buechler
|
ab8d50acca
|
Shorten up the MAC pass-through descr. It was redundant, and for those with huge numbers of auto-added MAC passthrough entries, it adds up to a significant amount of config space (adding to delays when launching CP). helps Ticket #3932
|
2014-11-18 23:33:18 -06:00 |
|
Chris Buechler
|
7bc953d14d
|
update error log in accordance with change in input validation. thanks Phil Davis for pointer
|
2014-11-18 19:05:35 -06:00 |
|
Ermal
|
156bb8f193
|
Actually trim if the user put any : on the prefix of the ISP to be able to properly set the gateway
|
2014-11-18 23:24:10 +01:00 |
|
Ermal
|
5d697e087a
|
Properly generate the default gw for 6rd set it to prefix:BR and also the prefixlen of the interface set it to the ISP prefix and on LAN set it to the delegated one.
|
2014-11-18 23:13:16 +01:00 |
|
Renato Botelho
|
3ba077846e
|
Revert "Revert "Use unbound from ports, it should fix #4020""
This reverts commit cd7b929ac0.
|
2014-11-18 18:40:53 -02:00 |
|
Renato Botelho
|
3f5e1542ab
|
Revert "Revert "Obsolete unbound from FreeBSD base files, ticket #4020""
This reverts commit d56dc72a43.
|
2014-11-18 18:40:51 -02:00 |
|
Ermal
|
c1e78890c8
|
Blah fix typo
|
2014-11-18 18:50:35 +01:00 |
|
Ermal
|
56c3007caf
|
Actually issue stfv4net even for /0|/32 subnet since its required
|
2014-11-18 18:39:01 +01:00 |
|
Renato Botelho
|
d56dc72a43
|
Revert "Obsolete unbound from FreeBSD base files, ticket #4020"
This reverts commit 8fde4ae8be.
|
2014-11-18 09:21:28 -02:00 |
|
Renato Botelho
|
cd7b929ac0
|
Revert "Use unbound from ports, it should fix #4020"
This reverts commit f13df0e3f1.
|
2014-11-18 09:21:26 -02:00 |
|
Renato Botelho
|
f13df0e3f1
|
Use unbound from ports, it should fix #4020
|
2014-11-18 08:50:13 -02:00 |
|
Renato Botelho
|
8fde4ae8be
|
Obsolete unbound from FreeBSD base files, ticket #4020
|
2014-11-18 08:48:10 -02:00 |
|
Renato Botelho
|
8a5265b212
|
Merge pull request #1332 from phil-davis/patch-3
|
2014-11-18 07:46:56 -02:00 |
|
Chris Buechler
|
8ce04d22fc
|
Static gateways weren't being added to the routing table after configuring at the console, fix that.
|
2014-11-17 23:27:42 -06:00 |
|