mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity
17,298 Commits 27 Branches 53 Tags 494 MiB
bd17f93d4a
Commit Graph

17298 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Ermal
bd17f93d4a Do not an ip of all 1s as a gateways since it cannot be pinged. 2011-04-22 19:23:37 +00:00
Ermal
bce14123ad Actually call interfaces_carp_setup after the carp interfaces are created so carp traffic can only flow after we have all vips up and running. This prevents premption more early than necessary. Ticket #1432. 2011-04-22 18:28:01 +00:00
jim-p
d8da6350bc Provide a method for rebrands to force a theme. Otherwise upgrading nanobsd from pfSense to a rebrand image without the theme in the config.xml will have a broken GUI since the theme isn't there. 2011-04-22 11:23:43 -04:00
Chris Buechler
de7222fbf0 correctly unmount drives where a config doesn't exist 2011-04-21 20:31:14 -04:00
Ermal
2d4003aab1 If the bandwidth value is coming from radius scale it up to the requested Kbit/s unit. 2011-04-21 21:39:03 +00:00
jim-p
908cbaf91a Set user when removing privileges, otherwise things like the user's shell would not be reset until pressing save, which is inconsistent with that step not being needed when adding privileges. 2011-04-21 15:33:13 -04:00
jim-p
1f0c76cfd7 Fix PPPoE upgrade, the <pppoe> tag is considered an array these days and the upgrade code wasn't treating it properly, accessing it directly instead of using the first entry ([0]). Fixes #1439 - PPPoE credentials upgrade properly now. 2011-04-21 13:10:32 -04:00
jim-p
46698c3f3c Reject encrypted CA private keys. Resolves #1446 2011-04-21 10:33:38 -04:00
jim-p
0cc5ab4226 Confirmed working fix for ticket #1417 - with this change I have two-way connectivity on Site-to-Site (SSL/TLS) with iroutes. 2011-04-21 09:59:09 -04:00
jim-p
bd24573bb0 Backing out changes from ticket #1417, it was not a valid openvpn config that the user was trying to make. 2011-04-19 19:59:29 -04:00
Scott Ullrich
673ee7b1e8 Harden SSL settings a bit. Verified OK with @cmb and @billm 2011-04-19 17:06:00 -04:00
jim-p
6c9cf4662e Slightly different fix for #1417 that doesn't mess up other parameters needed by p2p_tls 2011-04-18 18:27:47 -04:00
Ermal
359f6307d6 Block instead of allowing proto carp/pfsync during bootup since this may cause issues. Ticket #1432 2011-04-18 18:56:31 +00:00
Ermal
42c0700392 Add an option under advanced->misc to specify a proxy for retreiving pfsense package info or downloading packages. 2011-04-18 18:25:56 +00:00
jim-p
e8503ff4b6 Only start log update ajax timer if the updateDelay is defined. http://forum.pfsense.org/index.php/topic,35771.0.html 2011-04-18 13:08:06 -04:00
jim-p
5381b34131 Don't include RFC1918 in bogons. 2011-04-17 01:27:23 -04:00
Chris Buechler
988d498c9d sync bogons 2011-04-16 18:19:20 -04:00
jim-p
7b2fdeb3c5 Properly set/unset voucher enable/disable bit. 2011-04-15 12:11:52 -04:00
jim-p
b9bbae047a Move the link to add a gateway up next to the drop-down box so it is more obvious. 2011-04-15 08:53:23 -04:00
jim-p
ca90133bf6 Save a little space on the interface list for console assignment. 2011-04-14 16:50:23 -04:00
jim-p
d2903c0cab Test if a variable is set before trying to unset it. If a user has no rules in their config, then $config['filter'] would not be undefined, so unsettings $config['filter']['bypassstaticroutes'] would result in an error. http://forum.pfsense.org/index.php/topic,35702.0.html 2011-04-14 13:26:04 -04:00
smos
c8cc0c1c5a Add missing fields for l2tp to define dns and wins servers 2011-04-13 09:52:58 +02:00
Scott Ullrich
a93020d544 Do not send growl notices twice 2011-04-12 18:18:57 -04:00
Scott Ullrich
2632934e5a Remove blank trailing c/r. 2011-04-12 18:08:07 -04:00
Scott Ullrich
10c3d4c007 Notify via smtp as well as growl 2011-04-12 18:08:07 -04:00
jim-p
cd11a1426d Drop the ntpdate sync in favor of using ntpd -s, which should have the same net effect without needing the shell script that has been prone to hanging. 2011-04-12 13:52:34 -04:00
jim-p
d67b6b175c Also exclude grep from running processes when grepping for a running packet capture. Also, fix other test to match the recent changes made. 2011-04-12 10:04:54 -04:00
jim-p
127eb8e023 Add a toggle under System > Advanced on the misc tab to enable/disable debug mode for racoon. 2011-04-11 16:58:13 -04:00
jim-p
4eb4b18a0f Revert changes to dhclient-script. Appears to have broken DNS servers from DHCP. Ticket #1428 2011-04-09 12:00:53 -04:00
jim-p
e9e06fb205 Fix copy/paste error 2011-04-08 16:08:11 -04:00
jim-p
ac6651c945 Make sure a theme directory actually exists before blindly using it. 2011-04-08 14:15:50 -04:00
jim-p
edf99ce40c Rework ntpdate_sync_once.sh, so it makes sure ntp/ntpdate/itself are not running before trying to sync time, and then launch ntpd at the end for time sync (last commit was premature) 2011-04-08 11:46:30 -04:00
jim-p
54c185948c Don't unconditionally start ntpd after doing ntpdate, it might be disabled. 2011-04-08 11:20:41 -04:00
jim-p
2db351a746 Send ntpdate output to syslog 2011-04-08 11:20:25 -04:00
jim-p
fbfd675a53 Add an IPsec xauth permission. Try to use the nologin shell first (just unlock the account). Ticket #1202 2011-04-08 08:59:50 -04:00
jim-p
02d9951153 Putting client-config-dir in the config is valid also for p2p_tls servers. Fixes #1417. 2011-04-08 08:28:31 -04:00
Scott Ullrich
b510be5cc1 use same egrep statement for both checks 2011-04-07 16:17:23 -04:00
Scott Ullrich
1fd807da8a Use full path to egrep 2011-04-07 16:16:26 -04:00
Scott Ullrich
d0cc727eb7 Use full path to egrep 2011-04-07 16:15:55 -04:00
Scott Ullrich
955f2d788e Use some Seth egrep foo to protect from compromised DHCP servers. CVE-2011-0997 2011-04-07 16:11:45 -04:00
Scott Ullrich
e05458b052 Remove extra variable set 2011-04-07 12:35:00 -04:00
Scott Ullrich
7ec2a858af Remove copy paste 2011-04-07 12:34:23 -04:00
Scott Ullrich
0c951d9bee Unbreak check if capture is running 2011-04-07 12:33:41 -04:00
Scott Ullrich
5d7881615d When using ' variables are not expanded. Use double quotes so that the variable is exanded 2011-04-07 12:00:32 -04:00
jim-p
c76fc19f32 Don't test for a user cert here either, see previous commit. 2011-04-07 11:49:40 -04:00
jim-p
72d8453d3b Don't test if a cert is in use here, you could in theory use a cert for a user and a server. 2011-04-07 11:47:24 -04:00
jim-p
8fee59d6fe Fix link; use same message for missing certs. 2011-04-06 19:53:46 -04:00
Scott Ullrich
0930bd0184 Make the default openvpn cert authority message a bit relaxed and let user know about the wizard option as well 2011-04-06 19:41:52 -04:00
Ermal
87bb66af3e Correct text to include PPTP as well. 2011-04-06 18:23:24 +00:00
Ermal
9a36dc9d24 Resolves #1391. Bring back VPN auto rule disable advanced setting. 2011-04-06 18:22:27 +00:00