mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity
25,117 Commits 27 Branches 53 Tags 494 MiB
bc28e0e4b2
Commit Graph

25117 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Chris Buechler
bc28e0e4b2 Trying to submit a symlink as part of crash reports will cause a failed 
submission. Remove symlinks first. Also properly set user agent while
here, consistent with others. Fix some style and whitespace too. Ticket
 2015-04-22 15:14:32 -05:00
Ermal LUÇI
26b94b874f Merge manually pull request #1626 to this branch 2015-04-21 19:43:20 +02:00
Ermal LUÇI
e1bcb659be s/;/:/ 2015-04-21 19:40:11 +02:00
Ermal LUÇI
7b9d7eac04 Revert "Revert "Move to specifically specifying the ID type apart when an ip address to have strongswan do proper behaviour. Also for DynDNS names use the dns type id so strongswan does the resolving by its own."" 
This reverts commit 4e8eacfd7c.

Conflicts:
	etc/inc/ipsec.inc
 2015-04-21 19:39:11 +02:00
Jeremy Porter
3be781e759 Add new bios product id string 2015-04-20 18:26:34 -03:00
Ermal LUÇI
a75d1a5f01 Allow to configure new modes for phase1 according to RFC 5903 by manually merging pull request #1501 partially. While here preserve style. 2015-04-20 20:54:28 +02:00
Ermal LUÇI
868a62be4c Fix #4640 IPsec Auto-exclude LAN address toggles every time save is pressed. 
Actually the GUI is displaying the opposite setting to what is in the config. When the user pressed save that opposite setting was saved, but then again it displays the opposite of the opposite...
 2015-04-20 20:40:06 +02:00
Ermal LUÇI
905e115668 Fixes #4625, manual merge of pull request #1617 for RELENG_2_2 branch on fixing voucher disconnection. 2015-04-20 20:37:52 +02:00
Ermal LUÇI
1d839e6da6 Implement make bofre break feature avaliable on strongswan 5.3.0 useful for IKEv2. Fixes #4626 2015-04-18 10:35:51 +02:00
Ermal LUÇI
e6130125dc Merge pull request #1619 from ibauersachs/newipsecdns-eap-radius_2-2 2015-04-17 16:35:09 +02:00
Ingo Bauersachs
0b884dd234 Make auth_get_authserver_list available to vpn.inc 
This is a follow-up to PR #1613 and avoids a crash in this script at random times.
 2015-04-17 10:16:09 +02:00
Ermal LUÇI
41ee551453 Fixes #4625 correct disconnection of users especially when called from xmlrpc code. 2015-04-16 20:17:18 +02:00
Ermal LUÇI
99d263f587 Merge pull request #1613 from ibauersachs/ipsec-mobile-eap-radius_2-2 2015-04-16 19:42:12 +02:00
Chris Buechler
ff3c14a510 Always do a filter reload in vpn_ipsec_configure to ensure the ruleset is 
updated where necessary in every IPsec change scenario.
 2015-04-16 12:34:46 -05:00
Renato Botelho
cc1f655f8e Remove boot_serial='yes' from loader.conf when serial is disabled, error introduced by me on commit 986e77a2ea 2015-04-16 12:15:05 -03:00
Phil Davis
98615a3156 Fix unbound warning when dnsallowoverride off and forwarding on 
Reported in forum: https://forum.pfsense.org/index.php?topic=92437.0

The $ns array was being used further down, but if dnsallowoverride was off, the array never got created.
 2015-04-16 07:32:18 -03:00
Renato Botelho
696b20ddaa Bump version to 2.2.3-DEVELOPMENT 2015-04-15 13:22:38 -03:00
Renato Botelho
a0990a91b1 Define var_path global key since it is being used in interfaces.inc, but it was not being declared anywhere 2015-04-15 10:07:14 -03:00
Ingo Bauersachs
d09155b684 Add support for EAP-RADIUS to IKEv2 Mobile Clients (Rel. 2.2) 2015-04-15 14:28:54 +02:00
Chris Buechler
4847615c9d Re-enable verification for selfhost since their chain issue is resolved. Ticket #4545 2015-04-14 22:50:32 -05:00
Chris Buechler
5d5fff6789 set forcesync to 1 by default for now, testing potential impact for Ticket #4523. 2015-04-14 21:55:50 -05:00
Chris Buechler
828f37aaaf Revert "Make forcesync default to the same behavior as freebsd rather than as intended for cf cards. People with issues on CF can enable the tunable" 
This reverts commit 32e53d709f.
 2015-04-14 21:52:05 -05:00
Ermal LUÇI
32e53d709f Make forcesync default to the same behavior as freebsd rather than as intended for cf cards. People with issues on CF can enable the tunable 2015-04-14 23:21:07 +02:00
Renato Botelho
1189757e91 Remove redundant/unused call to kldstat 2015-04-14 15:56:50 -03:00
Renato Botelho
8228109b6f Fix operator 2015-04-14 15:56:48 -03:00
Renato Botelho
3a644b618e Fix typo in variable name 2015-04-14 15:56:46 -03:00
Phil Davis
4b46e9b1bb Fix OpenVPN server listening on associated IPv6 address 
As reported in forum https://forum.pfsense.org/index.php?topic=92174.0
If the ordinary interface is selected for an OpenVPN server and an IPV6 protocol is selected (e.g. UDP6) then al is good, the "local" line in the server1.conf is written with the primary IPv6 address of the interface.
If the interface has other associated VIPs (e.g. a CARP VIP) and the related IPv6 entry is selected as the OpenVPN server interface, then the "local" line was being omitted from server1.conf
Regardless of the IP address family, vpn_openvpn_server.php always writes the associated IP address into the settings key 'ipaddr' - which looks like a good and reasonable thing - we only want 1 IP address of some flavor to be remembered here.
This changes fixes openvpn.inc so it understands that $settings['ipaddr'] can be IPv4 or IPv6 as does the appropriate stuff with it.
 2015-04-14 10:17:40 -03:00
Phil Davis
1d4217237b When deleting a VIP check it is not used by OpenVPN 
I noticed this when cleaning up VIPs and OpenVPN server when testing for this forum post https://forum.pfsense.org/index.php?topic=92174.0
The system let me delete my test VIP before I deleted the OpenVPN server using, probably not a good thing.
This is a better version of #1604  - the similar loops for server and client are combined, and the error message shows the description (or IP address:port) of the offending OpenVPN instance so the user has a clue about which OpenVPN instance uses the VIP.
 2015-04-14 10:11:28 -03:00
Chris Buechler
31a810badf Don't remove all of /usr/local/libdata as obsolete files. User-installed 
package contents may live there, factory default configs live there.
 2015-04-13 19:51:24 -05:00
Phil Davis
222e6390e3 Domain override with multiple authoritative DNS servers 
Tell users that this is possible in DNS Resolver and how to achieve it. The code in unbound.inc already supports it and works.
I had asked for this in Redmine feature request #4350 and when I went to look at coding to implement it I found code that already did it.
So IMHO it is worth telling users.
 2015-04-13 11:07:44 -03:00
Robert Nelson
750695f54a Only initialize package's log if it doesn't exist 2015-04-13 11:01:49 -03:00
Robert Nelson
eb4a5192ae Remove obsolete logging code which is duplicated in system_syslogd_start() 2015-04-13 11:01:40 -03:00
Chris Buechler
9c6de8b8a0 bump to 2.2.2-RELEASE 2015-04-12 16:52:48 -05:00
Renato Botelho
c782b5867b Setup ADI boards to boot only using serial to avoid duplicated output when VGA redirection is enabled 2015-04-10 16:27:10 -03:00
Chris Buechler
eae4f953f6 Skip reflection rdrs where the interface doesn't have an IP. Ticket #4564 2015-04-09 00:34:59 -05:00
Chris Buechler
b0c8f6dead Allow single interface bridges. Useful with span port option, and when shuffling configuration around. 2015-04-08 23:42:31 -05:00
Chris Buechler
e636f37393 Allow disabling the APIPA block via hidden config option. Very rarely necessary or desirable, but Amazon VPC VPNs use that as their tunnel subnet with BGP setups. 2015-04-08 21:42:36 -05:00
Chris Buechler
05b7eef94f Only restore rrd.tgz where platform is appropriate, or RAM disk being 
used, otherwise you're restoring a probably old backup file. Ticket #4531
 2015-04-08 18:45:37 -05:00
Renato Botelho
fe29fe04d3 Add Super Micro C2758 to the list of known platforms 2015-04-06 15:21:25 -03:00
dneuhaeuser
946877fa28 small correction of relative paths to icons 2015-04-06 09:44:24 -03:00
Phil Davis
ed005b2000 Few minor text typos 
Note that advertise is spelt with an "s" in other places in the GUI, so
making it consistent in services_ntpd - but maybe Americans do spell it
"advertize" these days?
 2015-04-06 09:41:59 -03:00
PiBa-NL
5d7a0701d1 diag_sockets show sockets listening on localhost 
this helps pick a free port for services using sockets bound to localhost, and helps determine if the service has at least started and bound the port without needing to go through all 'connected' sockets as well
 2015-04-06 09:38:52 -03:00
Chris Buechler
38253ce6e5 Include additional subnets for RAs in radvd.conf. Ticket #4468 2015-04-04 20:36:13 -05:00
Chris Buechler
c5292060a4 Fix up Ticket #4504 implementation. Match config style with other areas. Use a config setting to disable, rather than enable, this functionality since it's enabled by default so the tag isn't necessary in the default config. Remove now unnecessary config upgrade code. 2015-04-04 19:52:10 -05:00
Chris Buechler
600b4c3bb8 fix type. Ticket #4504 2015-04-04 19:35:59 -05:00
Chris Buechler
bc395b180b Remove array_intersect_key here too, definitely not needed. add to obsoletedfiles 2015-04-04 00:23:09 -05:00
Chris Buechler
a8c07dc8e0 uploadbar dir no longer needed 2015-04-04 00:12:33 -05:00
Chris Buechler
7dff06c41d There is no longer any need to restrict protocols for IPv4+IPv6 rules, the appropriate ruleset is generated and problem scenarios that would otherwise break here are prevented by other input validation. 2015-04-04 00:06:02 -05:00
Chris Buechler
6986b70344 remove dead code, clean up excess white space a bit. 2015-04-03 23:57:48 -05:00
Ermal LUÇI
b9115c26dd Prevent empty addresses for being put in the ruleset. Ticket #4564 2015-04-03 20:32:49 +02:00