Commit Graph

24772 Commits

Author SHA1 Message Date
Chris Buechler
bdb8fbffb0 Remove old write caching tunable as well. Ticket #4203 2015-01-12 12:43:13 -06:00
Chris Buechler
f66bcbaf4c Remove the settings to disable DMA, which have changed in FreeBSD 10.
Ticket #4203
2015-01-12 12:37:37 -06:00
Ermal LUÇI
35e3d35016 Do not leak firewall rules as well when (re)creating rules 2015-01-12 19:25:32 +01:00
Renato Botelho
eab9d9c142 Fix spell typo spotted by phil-davis 2015-01-12 12:36:11 -02:00
Ermal LUÇI
3243110433 Fix typos introduced by chaning to explicit id specification when necessary. Fixes #4202 2015-01-12 15:14:59 +01:00
Phil Davis
0c5e61b155 Fix cut paste brain fade 2015-01-12 11:50:10 -02:00
Phil Davis
3fbfbe902e Restart PHP-FPM allow to setup ini file
I was just using console menu option 16 Restart PHP-FPM and it hung on a nanoBSD system.
I found /tmp/php_errors.txt with this in it:
"override rw-r--r--  root/wheel for /usr/local/etc/php.ini?"
Flying blind at the console I entered "y", then /tmp/php_errors.txt had this:
--------
rm: /usr/local/etc/php.ini: Read-only file system
override rw-r--r--  root/wheel for /usr/local/lib/php.ini?
--------
Pressed return at the console and it proceeded, presumably without re-writing php.ini

It works much better when the file system is mounted RW :)
2015-01-12 11:49:58 -02:00
Ermal LUÇI
2ea976b71c Properly handle large passthrough entries even here. 2015-01-12 12:31:03 +01:00
Ermal LUÇI
9b255a367d Use this generation now of committing pipes directly and only rules to put on ruleset to avoid memory pressure and the timelimit will than be enforced by the caller 2015-01-12 12:27:41 +01:00
Ermal LUÇI
124299a347 Revert "Ticket #3932 Use array_map to get more parallelism when there are many entries. This makes it not reach the execution timeout with large entries."
This reverts commit 7077addc5a.
2015-01-12 12:26:00 +01:00
Ermal LUÇI
0fc3c465cd Actually improve the previous resource leak commit since the function is there but it was not being used during init_rules process. 2015-01-12 12:20:57 +01:00
Ermal LUÇI
339e2fe5e6 * Try to autodetect if the execution limit needs to be raised on big number of passthrough entries.
Set the time limit to 0 and restore it back to default value when this is detected.

* Do not leak pipes when reloading ruleset for CP since this will consume available descriptors.
  This has been noted before but considered fixed, this is the real fix actually for dnpipes.
2015-01-12 12:18:49 +01:00
Ermal LUÇI
6a752ca21a Put the value of password under double quotes(") to avoid issues with special characters in passwords. Ticket #4177 2015-01-12 11:49:12 +01:00
Ermal LUÇI
545c4435ef Do not override the passwd string. First it prevents the md5 working if the crypt() check fails and also is useless to override it since the parameter is passed by value and not by reference. 2015-01-12 11:43:28 +01:00
Ermal LUÇI
21165e6455 Prevent echo to insert a newline(\n) at the secret string. Fixes #4177 2015-01-12 11:40:46 +01:00
Ermal LUÇI
aa685f7a6d Ticket #3932 Use array_map to get more parallelism when there are many entries. This makes it not reach the execution timeout with large entries. 2015-01-12 10:38:26 +01:00
Ermal LUÇI
7001542e3e Fix typos and set needed variable 2015-01-12 09:33:20 +01:00
Ermal LUÇI
c9f04cd055 properly apply the passthrough entries when apply is hitr. 2015-01-12 09:30:56 +01:00
Ermal LUÇI
64ed3e60f5 Fix inherent issues with isset and empty values set as true by our parser. This made the piep configuration to be wrong at least for passthrough entries. Ticket #3932 2015-01-12 09:27:09 +01:00
Chris Buechler
ab54ec9f8d Bring back showing of default value like previous versions. 2015-01-11 19:33:46 -06:00
Phil Davis
4fc1c68f14 Do not return disabled dynamic gateways
When a dynamic gateway is disabled (by the user through the webGUI), it was still being returned by return_gateways_array(). But when called like that, disabled gateways should not be returned. The first part of the routine was correctly skipping disabled gateways, but then the later part would effectively re-generate those dynamic gateways on-the-fly and not realise they should be skipped because they were disabled.
This code now remembers gateway details of all the gateways, including skipped ones, so the dynamic gateway code can easily realise all gateways that have been already processed, even those that were processed and skipped.
Forum: https://forum.pfsense.org/index.php?topic=86565.0
It fixes Gateway Status Widget - now if a dynamic gateway is disabled, it does not appear on the display.
This will also stop disabled dynamic gateways from being returned to other callers. So there may/will be impacts on other parts of the system when a user disables a dynamic gateway. e.g. filter.inc - a gateway that has been disabled by a user canot be used in rules any more.
2015-01-11 19:16:11 -06:00
Ermal LUÇI
7025c4fa7a Remove debug code 2015-01-11 16:38:25 +01:00
Ermal LUÇI
30656f6640 Fixes #4177 convert password to base64 to be submitted to avoid issues with special chars in shell and HTTP GET parameter passing. Probably should add POST support to fcgicli. 2015-01-11 16:38:25 +01:00
Phil Davis
fc03ca0112 Fix POST typo in interfaces_assign.php
Obviously a typo. But this section is inside:
if (isset($_POST['add_x']) && isset($_POST['if_add'])) {
and I cannot find where 'add_x' is ever sent here, so I do not see how this whole code section is ever executed (and that will be why this typo bug has no symptoms). What is the history here? Can the whole block of code be removed?
The code normally executed is the section for 'Submit' lower down.
2015-01-11 11:03:51 -02:00
Ermal LUÇI
31cf5a9315 Fixes #3281 do not undo any changes already done for gif/gre interface. 2015-01-10 22:35:15 +01:00
Ermal LUÇI
83b0a21ac4 Properly rename the var Ticket #4164 2015-01-10 21:50:31 +01:00
Chris Buechler
ed5c6e894e Default to only AES and SHA1 for new P2s. 2015-01-09 22:08:51 -06:00
Chris Buechler
6f7960c3a0 Default IPsec to AES 2015-01-09 22:00:53 -06:00
Chris Buechler
c182616905 Default IPsec to main mode, unless mobile client. 2015-01-09 21:59:21 -06:00
Ermal LUÇI
422a2007d5 Do not count twice the phase2 entries 2015-01-09 23:12:30 +01:00
Ermal LUÇI
832ec9fee9 Just some reshufling and cleanup 2015-01-09 22:47:38 +01:00
Ermal LUÇI
9218ecb6e7 Let the kernel handle REQID rather than handling it manually. The connection name is the one needed here. 2015-01-09 22:32:37 +01:00
jim-p
57963e4baf Add tracker and label to IPv4 Link-Local block rules. 2015-01-09 16:06:57 -05:00
Chris Buechler
557c21dae0 After the other set of changes had unexpected complications, let's back this out too. Revert "PEAR static method call warning"
This reverts commit 4751f76a67.
2015-01-09 01:14:14 -06:00
Chris Buechler
0515117ed7 This broke a variety of things. Revert "Deprecated and non-static method messages"
This reverts commit 91b9a02fb1.
2015-01-09 00:40:18 -06:00
Phil Davis
0391b39b90 PEAR static method call warning
Forum https://forum.pfsense.org/index.php?topic=86478.0
PEAR is used by
IPv6.inc
auth.inc
captiveportal.inc
radius.inc
xmlrpc_client.inc
radius_accounting.inc
radius_authentication.inc

I have just changed this 1 function to "public static"

Also used are:
PEAR::raiseError
PEAR::loadExtension (already has "static function")

Not sure if PEAR::raiseError will throw a similar "static method" call
warning, not game to touch it.
2015-01-09 00:20:39 -06:00
Chris Buechler
ecefba29ec disable this PHP error logging, errors that are really significant end up with a crash report, this is more noise than useful at this stage in 2.2. 2015-01-09 00:18:11 -06:00
Ermal LUÇI
d97dd42437 Make this code less memory hungry and fix route command generation 2015-01-08 23:58:02 +01:00
Ermal LUÇI
ac8f75f1e0 Catch packets on all iunterfaces and send them out the correct one. Fixes #4174 2015-01-08 22:49:19 +01:00
Phil Davis
bad9dec5e6 Deprecated and non-static method messages
Fix various files that can emit messages like:
PHP Strict Standards:  Non-static method SimplePie_Misc::array_unique()
should not be called statically, assuming $this from incompatible
context in /etc/inc/simplepie/simplepie.inc on line 5508
php-fpm[16262]: /rc.newipsecdns: PHP ERROR: Type: 8192, File:
/etc/inc/shaper.inc, Line: 4365, Message: Assigning the return value of
new by reference is deprecated

Some of these style messages have been reported on the forum, e.g.
https://forum.pfsense.org/index.php?topic=86448.0

I had RSS widget on, and simplepie sent the system beserk telling about
all this stuff.
2015-01-08 14:26:02 -06:00
Renato Botelho
7c1c70d5ea Improve URL and URL ports alias update data:
- Move redundant code to a function parse_aliases_file(). Before the max
number of items was not being respected when URL content is updated,
only when alias was saved. Same was happening with ip/subnet/port
validation and user could end up with a bad pf.conf
- Remove unused variables

These changes were based on Pull Request #1264. It should fix #4189

Submitted by:▸  PiBa-NL
2015-01-08 16:17:03 -02:00
jim-p
1776d19e58 Change OpenVPN CARP VIP test to be more accurate. The client should also not be run if the VIP is in the INIT state. 2015-01-08 10:41:38 -05:00
Renato Botelho
1ba5015467 Unobsolete libcurl.so.4 since it's installed by recent versions of curl package 2015-01-08 12:26:07 -02:00
Renato Botelho
a980b284f3 Fix check for cookies, the way it was implemented didn't work because it would need a refresh to check if cookie was set or not. Use javascript to do a simple test 2015-01-08 11:08:03 -02:00
Renato Botelho
9156a51d0c Add a value to cookie, otherwise it's not set. Before my last change parameters were out of order and expiration time was being set as value. It should fix #4069 2015-01-08 10:26:51 -02:00
Ermal LUÇI
adf8a74a72 This is not the place for this setting and werid its here! 2015-01-08 12:33:54 +01:00
Chris Buechler
f585d06e7f some lagg modes are missing vlanmtu, but work fine with VLANs. Work around it for now at least. Ticket #4186 2015-01-08 00:05:14 -06:00
Chris Buechler
8948f12590 Also include /127 for IPv6, it works fine. Ticket #3657 2015-01-07 23:47:34 -06:00
Chris Buechler
13358d35ae Allow for configuring /31 masks on interfaces.php. The rest of the code was updated accordingly some time ago, and an employee with Cox Communications has confirmed this allows things to work on their circuits deployed with /31s. Ticket #4190 2015-01-07 23:42:10 -06:00
stilez
74017e329f "Like with like" - move a few functions to better places in the code (they are placed strangely)
A few functions such as ipcmp(), subnet_expand(), and check_subnets_overlap()  are in illogical places - away from all the other ip comparison and subnet basic functions and in the middle of alias handling and interface enumeration.

No change to functional code, just moving to earlier in the file (next to other IP compare and subnet functions) for ease of future contributors.
2015-01-07 23:28:58 -06:00