mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity
25,920 Commits 27 Branches 53 Tags 494 MiB
bb3ee8a1bb
Commit Graph

13621 Commits

Author SHA1 Message Date
Renato Botelho
e520b4e33d Use /cf/conf to populate default config on cdrom since it is always present, /conf is a synlink 2015-07-31 15:13:15 -03:00
Renato Botelho
70497688eb Do not try to use a variable that is not set yet 2015-07-31 15:04:42 -03:00
Renato Botelho
d3f1140ff3 Call lua_installer passing rescue as parameter since lua_installer_rescue is gone 2015-07-31 12:02:07 -03:00
Renato Botelho
21dfcd6101 Remove extra parenthesis 2015-07-31 10:11:15 -03:00
Renato Botelho
96bf5038de Add UUID to pkg user agent 2015-07-31 10:10:30 -03:00
Renato Botelho
fdc5447bd5 Define HTTP_USER_AGENT for pkg calls 2015-07-31 10:04:48 -03:00
Renato Botelho
5779ade670 Introduce a new item to $g global, 'product_version' and stop reading /etc/version all around 2015-07-31 10:03:34 -03:00
Renato Botelho
d4b361c0f4 Remove option C from cdrom boot menu and disable LiveCD option 2015-07-30 18:54:04 -03:00
Renato Botelho
5f6af1cdf4 Remove options ~ and ! from valid keys on cdrom boot menu 2015-07-30 18:52:13 -03:00
Renato Botelho
996f5a5b64 Remove an undocumented and hidden option called 'RecoveryConsoleShell' 2015-07-30 18:48:57 -03:00
Chris Buechler
f791f28d67 remove the destination server's interface(s) from dhcrelay. Ticket #4908 2015-07-30 14:23:04 -05:00
Renato Botelho
0816458788 Remove more rc files from Obsolete list 2015-07-30 13:39:08 -03:00
Renato Botelho
0a362fce9a Remove more files from obsolete, they are still part of recent versions 2015-07-30 13:26:40 -03:00
Renato Botelho
6a45637d46 Remove more files from obsolete, they are still part of recent versions 2015-07-30 13:23:34 -03:00
Renato Botelho
30ce1abb37 Remove more files from obsolete, they are still part of recent versions 2015-07-30 13:23:34 -03:00
jim-p
4a18f4261a This is handled above now. 2015-07-30 11:51:00 -04:00
jim-p
6b8ad2daaf More safety belts on CP DB open 2015-07-30 11:34:42 -04:00
Renato Botelho
ff5464544d Remove more bsdinstaller files from pfSense.obsoletedfiles 2015-07-30 12:21:19 -03:00
Renato Botelho
bb947e8f72 Do not obsolete items from /var/db/pkg 2015-07-30 12:21:19 -03:00
Renato Botelho
ad53a5d76e Do not obsolete after_installation_routines.sh, it's part of bsdinstaller pkg 2015-07-30 12:21:19 -03:00
Renato Botelho
5f535596cd Remove unused ftmp references 2015-07-30 12:21:18 -03:00
Renato Botelho
687631c683 Remove bdiff support 2015-07-30 12:21:18 -03:00
Renato Botelho
488b975c8b Change welcome to /dev/null on login.conf and stop removing /etc/motd 2015-07-30 12:21:18 -03:00
jim-p
7c38032f06 Take more care when attempting to open the CP database. Don't assume it's valid before attempting to use it. 2015-07-30 10:42:21 -04:00
jim-p
79e46ebda9 Reinitialize the captive portal database for a zone if it is corrupt/unreadable. Fixes #4904 2015-07-30 10:15:10 -04:00
Chris Buechler
f688185c9f remove more old, unused platform stuff 2015-07-30 00:49:07 -05:00
Chris Buechler
58ec9af1ef remove old unused nopccard_platforms 
Conflicts:
	etc/inc/globals.inc
 2015-07-29 23:08:07 -05:00
Chris Buechler
ac565fab92 remove wrap and net4501 platforms, they haven't existed for years. 2015-07-29 23:01:59 -05:00
jim-p
4379f31869 Check both greater and less than for the configuration version in XMLRPC sync. Fixes #4902 2015-07-29 15:50:52 -04:00
jim-p
6538d22fcb Use an alternate method to find VIP targets that should be allowed for Captive Portal. Fixes #4903 2015-07-29 14:40:52 -04:00
Renato Botelho
f8948f8637 Merge pull request #1797 from phil-davis/patch-10 2015-07-27 14:53:22 -03:00
Renato Botelho
626ed2abdd Fix typo in variable name, spotted by Phil Davis 2015-07-27 14:51:17 -03:00
Phil Davis
2b869fa154 Strip any \r when parsing URL table ports file 
If the URL table ports file at the URL specified has lines separated by "\r\n" rather than just "\n", then the code here ends up with ports that look like "80\r" "443\r" ... and group_ports() does not match any of those and the final file ends up empty. That seems a shame just because the file was made in some editor that put "\r\n" line breaks. I messed about for a while trying to make my URL table ports alias work until I realized this.
This change first strips out any "\r" from the string, thus making it work with files that have either pure "\n" line breaks or "\r\n" line breaks.
 2015-07-27 23:36:03 +05:45
Phil Davis
8e24ffdd7a Consider url_port alias type when checking port-type aliases V2 
This time I have typed url_ports correctly.
 2015-07-27 14:47:25 -03:00
Chris Buechler
2da055f086 add a check to avoid foreach on non-array 2015-07-27 01:57:58 -05:00
Chris Buechler
a34e980753 Bring back the ability to specify file and URL as command line arguments. Clean it up a bit. 2015-07-26 03:20:44 -05:00
Chris Buechler
8691632cf7 Upgrade config to 11.9. Changes IPsec peer ID for EAP types to "any", to retain previous behavior. 
Conflicts:
	etc/inc/upgrade_config.inc
 2015-07-25 19:51:19 -05:00
Chris Buechler
905205a2a7 Change the log for CRLs with no data (exists but no certs revoked) to a warning since it's not technically an error. 2015-07-25 19:45:15 -05:00
Chris Buechler
b099481141 Add 'any' option for peer ID, for mobile IPsec scenarios where you can't or don't want to check peer ID. 
Conflicts:
	usr/local/www/vpn_ipsec_phase1.php
 2015-07-25 17:00:57 -05:00
Chris Buechler
f674922ee9 Lower LoginGraceTime to 30s, should be plenty long for users, and mitigates the password login attempt bypass bug in OpenSSH. Ticket #4875 2015-07-23 23:09:35 -05:00
Chris Buechler
021a97b58a Only omit rightid for PSK mobile types. Flip the logic here as the 2_1 ! 
logic gets ugly.
 2015-07-23 18:17:32 -05:00
Chris Buechler
bdd9efb37f change iketype auto to ikev2 on upgrade. Ticket #4873 2015-07-23 15:03:29 -05:00
Chris Buechler
4d7568404c Remove "auto", it's just a synonym for IKEv2. Ticket #4873 
Conflicts:
	usr/local/www/vpn_ipsec_phase1.php
 2015-07-23 14:47:56 -05:00
Chris Buechler
0dea741f39 include vpn.inc so IPsec CRL reload works. require_once filter.inc in 
vpn.inc for callers there that haven't already included it.
 2015-07-23 14:31:05 -05:00
Renato Botelho
0dd333945e Obsolete device.hints_wrap, it's not being used 2015-07-23 15:21:27 -03:00
Renato Botelho
2c9d970a71 Move mfs related rc.d scripts from tools to main repo 2015-07-23 09:58:34 -03:00
Renato Botelho
b42ee10079 Obsolete /etc/rc.d/uzip and stop using it 2015-07-23 09:54:14 -03:00
Chris Buechler
699e20745b make the IPsec bypass LAN from LAN subnet to LAN subnet rather than from 
LAN subnet to LAN IP. Same end result except it'll work for VIPs on same
interface now.
 2015-07-22 15:08:58 -05:00
Chris Buechler
df4de32d34 Add IPsec advanced option for strict CRL checking 2015-07-22 15:03:56 -05:00
Chris Buechler
14ec7c4bf8 write out built-in CRLs for strongswan 2015-07-22 13:06:17 -05:00