Commit Graph

12774 Commits

Author SHA1 Message Date
Ermal LUÇI
b8d092806f Put the booting signal in globals.inc since it makes all the other scripts detect we are booting. Otherwise separate php instances will not detect that. rc.bootup clears this flag so all should work correctly 2014-11-24 15:23:57 +01:00
Ermal LUÇI
6668e18faa Ignore empty interfaces and ovpn ones on linkup since they should not trigger this script actions 2014-11-24 15:02:30 +01:00
Ermal LUÇI
dced0dd03f Be friendly to large interface systems 2014-11-24 12:22:03 +01:00
Ermal LUÇI
43517fcc1b Fixes #1047, overhaul handling of flags for hardware offloading and make it work correctly for system_advanced page settings. Lagg is still a special case that needs a reboot. 2014-11-24 12:19:15 +01:00
Chris Buechler
38e9197673 Merge branch 'master' of https://github.com/wagonza/pfsense into wagonza 2014-11-22 15:33:06 -06:00
Chris Buechler
02a2bffaec add a usleep here to prevent killing twice. Ticket #3894 2014-11-22 12:57:47 -06:00
Chris Buechler
93ead355d4 In some circumstances, OpenVPN doesn't exit on SIGTERM. SIGKILL it when that happens. Ticket #3894 2014-11-22 12:42:53 -06:00
Chris Buechler
e295e7ca44 MSS clamping on VPNs is necessary in both directions where it's needed. Rather than requiring setting on both ends, especially since the remote side can be some third party device where MSS clamping may not be available or not work, set in both directions here. 2014-11-22 11:17:29 -06:00
Chris Buechler
7786c9d617 clean up tabs in strongswan.conf 2014-11-21 21:52:38 -06:00
Chris Buechler
0a69eb7a68 touch up text 2014-11-21 21:11:52 -06:00
Warren Baker
0a5a8df9eb d DHCPLeases starting before Unbound/DNSMasq and returning a pid not found message. Add missing reload feature 2014-11-21 21:24:20 +02:00
jim-p
7525f05d69 Fix misspelling 2014-11-21 08:37:59 -05:00
Renato Botelho
d274a75b0d Fix syntax 2014-11-21 10:22:55 -02:00
Ermal LUÇI
e3cffd6cef Properly remove IPv6 carp vips as reported from https://forum.pfsense.org/index.php?topic=84392.0 2014-11-21 11:20:46 +01:00
Ermal LUÇI
a8a642c5c8 Fixes #3198, check that subnet masks are equal when choosing binat type for IPSec to avoid errors on ruleset. 2014-11-20 16:25:35 +01:00
Ermal LUÇI
bc73d959f9 Make this a bit more clean to read 2014-11-20 15:45:50 +01:00
Ermal LUÇI
2535f6dcc2 Fixes #1047, Actually the code is trying to set flags on the parent. so allow it even for vlans since they will follow the parent. At least so seems on FreeBSD 10. 2014-11-20 15:33:25 +01:00
Ermal LUÇI
02156b4bf5 Be a bit more smart here to not check openvpn side if it is already found. Ticket #1681 2014-11-20 15:18:54 +01:00
Ermal LUÇI
1fb550014f Ticket #1681, Renato seems to have done the right thing here, just be a bit more smart on the information that is already there. 2014-11-20 15:13:25 +01:00
Ermal LUÇI
977c1ad8d2 Log in system log the result of install_package to be able to troubleshoot later on. 2014-11-20 14:44:57 +01:00
Ermal LUÇI
dd34d7d239 Force installation even here. 2014-11-20 13:03:59 +01:00
Ermal LUÇI
b85d9c61fd Sprinkle some static definitions to avoid warnings from PHP 2014-11-20 12:44:28 +01:00
Ermal LUÇI
b3bbed5812 Split the various calls here to avoid php warnings with new versions. 2014-11-20 12:44:15 +01:00
Ermal LUÇI
3e643dba70 Make this code do proper checks in all cases 2014-11-20 12:04:08 +01:00
Ermal LUÇI
bc9155c33b Ticket #4007, properly pass the table number here to retrieve the status. 2014-11-20 11:50:41 +01:00
Chris Buechler
687ff78c96 Only skip tap-type OpenVPN servers, not all. Fixes #3713 2014-11-19 19:10:29 -06:00
Chris Buechler
355c2f8bdb also check port of dnsmasq/unbound and skip 127.0.0.1 in resolv.conf if
not port 53. Ticket #4022
2014-11-19 16:20:31 -06:00
Chris Buechler
97383d2bda don't blow away previous contents of this variable. fixes #4022 2014-11-19 16:06:26 -06:00
Ermal
14f7afb1a2 Do the tests check properly related to Ticket #2786 2014-11-19 21:27:12 +01:00
Ermal
f233ddebb9 Actually use all hex values on the gateway of 6rd to please route command 2014-11-19 20:02:32 +01:00
Ermal
7b83f72384 Correct gateway for Ticket #2882 to the proper value as reported by: cmb 2014-11-19 19:36:39 +01:00
Phil Davis
bdf5efc5f7 Matching bracket in vpn.inc
Reported forum https://forum.pfsense.org/index.php?topic=84322.0
2014-11-19 22:18:03 +05:45
Renato Botelho
b3c6783f82 Make sure system_hosts_generate() is called by services_unbound_configure(). It should fix #4027 2014-11-19 07:48:35 -02:00
Ermal
d882658e82 Fixes #3894, --resolv-retry is infinite by default. To avoid the issues of locking the persistnet tun device by this just retry two times by default. People can enable resolv-retry infinite themselves for previous behaviour 2014-11-19 09:32:31 +01:00
Ermal
ddabd9d679 Ticket #3987. Strongswan support autodetection of IKE version exchange. Support this by allowing an auto version in the GUI. 2014-11-19 08:54:31 +01:00
Ermal
b095e37061 Ticket #3809 use the setting with number rather than string since the parser of attr plugin understands only numbers. Reported on: https://forum.pfsense.org/index.php?topic=84304.0 2014-11-19 08:46:34 +01:00
Chris Buechler
ab8d50acca Shorten up the MAC pass-through descr. It was redundant, and for those with huge numbers of auto-added MAC passthrough entries, it adds up to a significant amount of config space (adding to delays when launching CP). helps Ticket #3932 2014-11-18 23:33:18 -06:00
Chris Buechler
7bc953d14d update error log in accordance with change in input validation. thanks Phil Davis for pointer 2014-11-18 19:05:35 -06:00
Ermal
156bb8f193 Actually trim if the user put any : on the prefix of the ISP to be able to properly set the gateway 2014-11-18 23:24:10 +01:00
Ermal
5d697e087a Properly generate the default gw for 6rd set it to prefix:BR and also the prefixlen of the interface set it to the ISP prefix and on LAN set it to the delegated one. 2014-11-18 23:13:16 +01:00
Renato Botelho
3ba077846e Revert "Revert "Use unbound from ports, it should fix #4020""
This reverts commit cd7b929ac0.
2014-11-18 18:40:53 -02:00
Renato Botelho
3f5e1542ab Revert "Revert "Obsolete unbound from FreeBSD base files, ticket #4020""
This reverts commit d56dc72a43.
2014-11-18 18:40:51 -02:00
Ermal
c1e78890c8 Blah fix typo 2014-11-18 18:50:35 +01:00
Ermal
56c3007caf Actually issue stfv4net even for /0|/32 subnet since its required 2014-11-18 18:39:01 +01:00
Renato Botelho
d56dc72a43 Revert "Obsolete unbound from FreeBSD base files, ticket #4020"
This reverts commit 8fde4ae8be.
2014-11-18 09:21:28 -02:00
Renato Botelho
cd7b929ac0 Revert "Use unbound from ports, it should fix #4020"
This reverts commit f13df0e3f1.
2014-11-18 09:21:26 -02:00
Renato Botelho
f13df0e3f1 Use unbound from ports, it should fix #4020 2014-11-18 08:50:13 -02:00
Renato Botelho
8fde4ae8be Obsolete unbound from FreeBSD base files, ticket #4020 2014-11-18 08:48:10 -02:00
Renato Botelho
8a5265b212 Merge pull request #1332 from phil-davis/patch-3 2014-11-18 07:46:56 -02:00
Chris Buechler
8ce04d22fc Static gateways weren't being added to the routing table after configuring at the console, fix that. 2014-11-17 23:27:42 -06:00