Chris Buechler
154298f196
rightsourceip must be used with PSK+Xauth.
2014-08-14 00:14:18 -05:00
Chris Buechler
7f1b720f4c
This is required for PSK+Xauth. I'll commit that clarification in a bit.
...
Revert "Revert "Fix assignment of tunnel IPs to mobile clients.""
This reverts commit 23ba08fc94
2014-08-13 23:59:48 -05:00
Ermal
23ba08fc94
Revert "Fix assignment of tunnel IPs to mobile clients."
...
This normally is not needed since the attr plugin deals with all this.
This reverts commit 00311d6a84
2014-08-13 11:52:28 +02:00
Ermal
1c70bdff11
Actually disable this plugin for now. It was not really needed for solving the issues with IKEv1
2014-08-12 23:11:03 +02:00
Renato Botelho
b462fc5eea
Move dhcp6c log to dhcpd.log, it fixes #3799
2014-08-11 11:47:14 -03:00
Renato Botelho
687d11a63a
Remove double defined 'localhost' on the list of networks to create outbound NAT rules. It should fix #3800
2014-08-11 09:44:25 -03:00
Renato Botelho
565908d277
Do not create automatic outbound NAT rule for disabled openvpn servers and clients
2014-08-11 09:40:55 -03:00
Chris Buechler
00311d6a84
Fix assignment of tunnel IPs to mobile clients.
2014-08-11 05:19:34 -05:00
Matt Smith
dc63467f3f
Fix #3798 - 'IPsec phase 2 pinghost is not used if the source IP should be a virtual IP address'
2014-08-08 17:09:37 -05:00
jim-p
762e8cf91f
Avoid a "Cannot use string offset as an array" error if the packages section of the config is missing.
2014-08-08 12:24:29 -04:00
Ermal
bf8aab8244
Correct this so the dpdaction is created properly as restart
2014-08-08 13:40:14 +00:00
Ermal
9f6a5b5067
Do a reload on the cofniguration which is better than update. Also let the keyingtries to 3 rather than forever to avoid problems on recovery.
2014-08-07 20:53:45 +00:00
Ermal
0b5fc1d1a6
Change the logic of the vpn config generation to make connectivity more stable especially ipsec. Also for IKEv1 just generate the policies and only on traffic start them.
2014-08-07 18:53:12 +00:00
Ermal
b31a2c765f
Move the rekey to yes always to avoid issues.
2014-08-07 17:52:58 +02:00
Chris Buechler
959dc96b8f
Per the dhcpd.conf man page and other documentation from ISC, mclt must not be defined on the secondary.
2014-08-06 21:38:40 -05:00
jim-p
071f605999
Escape the individual dnsmasq advanced/custom options
2014-08-06 15:27:49 -04:00
Ermal
f088b8cd6a
Do not try to rekey for IKEv1.
2014-08-01 20:52:46 +00:00
Ermal
9b91568608
Use a uniqid() to track phase2 entries to avoid confustion and various mistakes when modifying and editing them.
2014-08-01 20:39:06 +00:00
Matt Smith
fa0a141102
Fix for #3785 - 'strongswan config being generated with ike SA lifetime set to value of ipsec SA lifetime'
2014-07-30 10:57:15 -05:00
Ermal
63dd9f0851
Remove even the config.cache from /tmp to avoid issues while here
2014-07-30 00:28:40 +02:00
Matt Smith
9280a99870
Fix #3781 - 'strongswan dpdtimeout value not generated correctly'
2014-07-29 10:59:04 -05:00
Matt Smith
1f2acda12f
Fix for bug 3769
2014-07-23 11:19:18 -05:00
Renato Botelho
1b37ae46e7
Fix #983 - Add IP aliases subnets to interface subnet macro on GUI, since I'm here also fix not rules for PPTP clients macro.
2014-07-22 13:13:48 -03:00
Renato Botelho
ef74c9e4e4
Concat var before call escapeshellarg
2014-07-21 18:57:08 -03:00
Renato Botelho
604623a136
Make dhcpleases use unbound pid when it's configured
2014-07-21 18:56:07 -03:00
Renato Botelho
9d83d01ff2
Fix shell script syntax, it should fix #3361
2014-07-21 18:54:57 -03:00
Renato Botelho
dd030de935
Detect when protocol changes and invalidate session to get a new cookie with secure flag set according. It fixes #3714
2014-07-18 14:18:50 -03:00
Renato Botelho
639567b8f0
Merge pull request #1247 from DasTestament/master
2014-07-18 13:21:16 -03:00
Renato Botelho
dca795b7cf
Use cron.pid to get pid number and avoid kill minicron processes. It fixes #3757
2014-07-15 11:34:56 -03:00
Adam Gibson
dcafc71242
Don't use pfsense name in comment
2014-07-11 18:22:56 -03:00
Adam Gibson
76fce373ea
Use $product instead of pfSense when logging the version to syslog
2014-07-11 18:22:56 -03:00
Adam Gibson
4982e61e1c
Log pfsense version to syslog after bootup
2014-07-11 18:22:56 -03:00
Renato Botelho
5fbdacc1ec
Make sure scripts have necessary attributes and use its shebang line instead of force sh to call it. This will help to prevent or workaround issues similar to #3749 in the future
2014-07-11 08:23:04 -03:00
Renato Botelho
00aa34f154
In some cases, new /bin/sh binary doesn't work properly before reboot during a upgrade, and because of that /etc/rc.reboot is not executed and system doesn't reboot. Source /etc/rc.reboot instead of open a new sh session to avoid it happening again in future versions (ticket #3749 )
2014-07-11 08:23:04 -03:00
Chris Buechler
375fce94f5
use HTTPS for files.pfsense.org for update_bogons and priv_url in pkg-utils
2014-07-09 21:56:16 -05:00
Chris Buechler
a061ddb90a
no () around qlength here
2014-07-09 00:07:36 -05:00
Chris Buechler
c9a88bbd88
qlimit must be included here
2014-07-08 06:47:34 -05:00
Renato Botelho
971de1f98a
Convert almost all /sbin/sysctl calls to php functions
2014-07-07 20:06:37 -03:00
Renato Botelho
79cd8239ed
Fix sysctl name
2014-07-07 12:52:48 -03:00
Renato Botelho
82f758154f
Add set_single_sysctl(), a wrapper to set_sysctl() to make it simple to set value of a single sysctl
2014-07-07 11:05:28 -03:00
Renato Botelho
ff23363dc6
Add get_single_sysctl(), a wrapper to get_sysctl() to make it simple to get value of a single sysctl
2014-07-07 10:57:25 -03:00
Renato Botelho
42bb1bee59
Remove extra spaces and tabs
2014-07-07 08:42:34 -03:00
Renato Botelho
e7f65689c7
Remove extra quote and fix syntax
2014-07-06 16:25:36 -03:00
Chris Buechler
64746cf640
use HTTPS for dyndns providers that support it
2014-07-05 16:00:37 -05:00
Ermal
3fe260c2c0
Use a php function rather tan using exec. Suggested-by: garga
2014-07-04 19:53:02 +00:00
Ermal
95cdee8774
Remove all .xml file generated from upgrade since it makes /var full
2014-07-04 14:51:39 +00:00
Renato Botelho
2e906a1a9b
Add one more seatbelt to prevent tar to attempt to overwrite /dev items
2014-07-04 09:44:17 -03:00
Renato Botelho
d4b1e549c2
Back to cons25 for now since we found some issues with xterm on serial console
2014-07-02 17:24:25 -03:00
Renato Botelho
23c01a69fe
un-obsolete gettytab.bak
2014-07-02 17:24:25 -03:00
jim-p
6916360eb1
Also check and verify the package server's SSL certificate if using HTTPS. Issue 484
...
Our current XMLRPC client version doesn't have support on its own to validate this in a way we can use to test in a usable for printing an error message. For now, a cURL query to the XMLRPC URL is used in its place.
2014-07-02 15:20:51 -04:00
