Commit Graph

12514 Commits

Author SHA1 Message Date
Ermal LUÇI
2ea976b71c Properly handle large passthrough entries even here. 2015-01-12 12:31:03 +01:00
Ermal LUÇI
6a752ca21a Put the value of password under double quotes(") to avoid issues with special characters in passwords. Ticket #4177 2015-01-12 11:49:12 +01:00
Ermal LUÇI
21165e6455 Prevent echo to insert a newline(\n) at the secret string. Fixes #4177 2015-01-12 11:40:46 +01:00
Ermal LUÇI
7001542e3e Fix typos and set needed variable 2015-01-12 09:33:20 +01:00
Ermal LUÇI
c9f04cd055 properly apply the passthrough entries when apply is hitr. 2015-01-12 09:30:56 +01:00
Ermal LUÇI
64ed3e60f5 Fix inherent issues with isset and empty values set as true by our parser. This made the piep configuration to be wrong at least for passthrough entries. Ticket #3932 2015-01-12 09:27:09 +01:00
Chris Buechler
ab54ec9f8d Bring back showing of default value like previous versions. 2015-01-11 19:33:46 -06:00
Ermal LUÇI
7025c4fa7a Remove debug code 2015-01-11 16:38:25 +01:00
Ermal LUÇI
30656f6640 Fixes #4177 convert password to base64 to be submitted to avoid issues with special chars in shell and HTTP GET parameter passing. Probably should add POST support to fcgicli. 2015-01-11 16:38:25 +01:00
Phil Davis
fc03ca0112 Fix POST typo in interfaces_assign.php
Obviously a typo. But this section is inside:
if (isset($_POST['add_x']) && isset($_POST['if_add'])) {
and I cannot find where 'add_x' is ever sent here, so I do not see how this whole code section is ever executed (and that will be why this typo bug has no symptoms). What is the history here? Can the whole block of code be removed?
The code normally executed is the section for 'Submit' lower down.
2015-01-11 11:03:51 -02:00
Ermal LUÇI
83b0a21ac4 Properly rename the var Ticket #4164 2015-01-10 21:50:31 +01:00
Chris Buechler
ed5c6e894e Default to only AES and SHA1 for new P2s. 2015-01-09 22:08:51 -06:00
Chris Buechler
6f7960c3a0 Default IPsec to AES 2015-01-09 22:00:53 -06:00
Chris Buechler
c182616905 Default IPsec to main mode, unless mobile client. 2015-01-09 21:59:21 -06:00
Ermal LUÇI
422a2007d5 Do not count twice the phase2 entries 2015-01-09 23:12:30 +01:00
Ermal LUÇI
832ec9fee9 Just some reshufling and cleanup 2015-01-09 22:47:38 +01:00
Chris Buechler
0515117ed7 This broke a variety of things. Revert "Deprecated and non-static method messages"
This reverts commit 91b9a02fb1.
2015-01-09 00:40:18 -06:00
Ermal LUÇI
d97dd42437 Make this code less memory hungry and fix route command generation 2015-01-08 23:58:02 +01:00
Phil Davis
bad9dec5e6 Deprecated and non-static method messages
Fix various files that can emit messages like:
PHP Strict Standards:  Non-static method SimplePie_Misc::array_unique()
should not be called statically, assuming $this from incompatible
context in /etc/inc/simplepie/simplepie.inc on line 5508
php-fpm[16262]: /rc.newipsecdns: PHP ERROR: Type: 8192, File:
/etc/inc/shaper.inc, Line: 4365, Message: Assigning the return value of
new by reference is deprecated

Some of these style messages have been reported on the forum, e.g.
https://forum.pfsense.org/index.php?topic=86448.0

I had RSS widget on, and simplepie sent the system beserk telling about
all this stuff.
2015-01-08 14:26:02 -06:00
Renato Botelho
7c1c70d5ea Improve URL and URL ports alias update data:
- Move redundant code to a function parse_aliases_file(). Before the max
number of items was not being respected when URL content is updated,
only when alias was saved. Same was happening with ip/subnet/port
validation and user could end up with a bad pf.conf
- Remove unused variables

These changes were based on Pull Request #1264. It should fix #4189

Submitted by:▸  PiBa-NL
2015-01-08 16:17:03 -02:00
Chris Buechler
8948f12590 Also include /127 for IPv6, it works fine. Ticket #3657 2015-01-07 23:47:34 -06:00
Chris Buechler
13358d35ae Allow for configuring /31 masks on interfaces.php. The rest of the code was updated accordingly some time ago, and an employee with Cox Communications has confirmed this allows things to work on their circuits deployed with /31s. Ticket #4190 2015-01-07 23:42:10 -06:00
Chris Buechler
05b47f2d31 fix up text 2015-01-07 23:04:34 -06:00
Ermal LUÇI
845f9f7819 Provide an advanced setting to be able to disable Unity Plugin(Cisco extensions) 2015-01-07 22:06:51 +01:00
Ermal LUÇI
3c36413133 split is deprecated move to explode 2015-01-07 20:22:16 +01:00
Ermal LUÇI
f3ab0e7468 split is deprecated move to explode 2015-01-07 20:20:35 +01:00
Ermal LUÇI
91456048a7 split is deprecated move to explode 2015-01-07 20:15:57 +01:00
Chris Buechler
2a8a09a9fe fix text 2015-01-07 12:48:47 -06:00
Chris Buechler
d2884b9ae0 fix spelling of compression 2015-01-07 12:47:42 -06:00
Ermal LUÇI
45efe1b672 Fixes #4182 by properly managing IPcomp on ipsec tunnels.
Also retires IPsec force reloading advanced sysctl since its useless nowdays with strongswan and remove its call on rc.newipsecdns.
2015-01-07 16:33:46 +01:00
Phil Davis
0bd024d0b1 OpenVPN backend authentication fix key and translation
The array returned by auth_get_authserver_list() has key as the fixed name of each available authentication mode - e.g. "Local Database".
The array value ["name"] has the name string translated into the selected GUI language.
Use the key do determine which items are selected, and as the value that ends up being stored in the config.
Use ["name"] for display.
Forum report: https://forum.pfsense.org/index.php?topic=86326.0
Redmine Bug #4180
2015-01-06 12:22:45 -02:00
Renato Botelho
0a23cddced Fix #4090:
- Unbound advanced options may contain double quotes and it breaks the
syntax when a backup is restored because newlines are trimmed. Save it
in base64 format is a safe way to prevent it
- Bump config version to 11.5
- Provide upgrade code to encode current config or the one that came
from unbound package on 2.1.5
2015-01-05 15:41:38 -02:00
Renato Botelho
7f5c266994 Make it possible to backup/restore 'DNS Resolver' section individually 2015-01-05 12:58:28 -02:00
Renato Botelho
5a158a2969 Fix track6 prefix id range check, reported by jimp 2015-01-02 13:07:15 -02:00
Phil Davis
8c46314c6b Allow blank source port in diag_testport
Reported by forum https://forum.pfsense.org/index.php?topic=86146.0
Also, if there are input validation errors, save the user-entered data and re-display it, making it easier for the user to just correct the data in error and press Test again. It was blanking out all the entered data.
2015-01-02 09:25:06 -02:00
Phil Davis
6317d31dfc Fix lineup of copyright lines
and module names and other bits of formatting and typos in header
comment sections.
2015-01-01 10:13:14 -02:00
Phil Davis
d4b2cd35b9 Remove duplicate copyright
Noticed these had the copyright twice
2015-01-01 10:13:14 -02:00
Renato Botelho
d961e7e33e Welcome 2015 2014-12-31 16:22:27 -02:00
Phil Davis
1142d9a06b IPsec Widget allow for old settings that have no iketype
as mentioned in https://forum.pfsense.org/index.php?topic=84527.msg471919#msg471919
This change makes it work like similar if tests in /usr/local/wwwvpn_ipsec.php, and code in /etc/inc/vpn.inc that effectively defaults to ikev1 when iketype is not specified.
This should make the code here be executed and make $ikeid get the correct value to be used in later code.
2014-12-30 20:43:24 -06:00
Phil Davis
6e26b9c554 Allow for old settings that have no iketype
This bit of code looks like it could do with the same test as https://github.com/pfsense/pfsense/pull/1412
This is executed when the "Connect" button is pressed from Status->IPsec
Somebody with these problematic old IPsec entries could test this - with current code I suspect that disconnect followed by connect - it will not connect. With this change it will (might?) connect again.
2014-12-30 20:40:46 -06:00
Phil Davis
13c6375b6e Captive portal spelling 2014-12-30 09:47:45 -02:00
Colin Fleming
91145658f0 Backout pull request #1391
https://forum.pfsense.org/index.php?topic=85944.0

Backout pull request #13191
2014-12-29 11:40:55 -02:00
Phil Davis
8f6875de03 Fix unbound shortcut links
Fixes redmine #4151
1) Make the naming in shortcuts.inc more clear - forwarder=dnsmasq
resolver=unbound
2) Make the value of $shortcuts_section correct in each dnsmasq and
unbound php code
3) Make diag_logs_resolver.php smarter, so if dnsmasq is enabled, then
show shortcuts for dnsmasq, otherwise show shortcuts for unbound.
4) Fix some references to forwarder in unbound code - should be
resolver.
2014-12-28 13:45:15 -05:00
Chris Buechler
e63734ff1d clarify message here after customer feedback, it wasn't meant to imply "only a reboot will re-enable" but that's how some people have read it. 2014-12-26 16:50:26 -06:00
Renato Botelho
ef6f553dd9 Move this check before full sync to disable dnsmasq/unbound in the first time it's sync'd 2014-12-26 12:21:51 -02:00
Renato Botelho
4469379c20 Add dnsmasq and unbound config sections to full sync, it fixes #4076 that is caused because boolean config fields are not disabled on secondary 2014-12-26 12:21:49 -02:00
Phil Davis
ddfe3e058f Display tunnel description on IPsec widget
There was not even code to attempt to display the description.
Also, when I first created a phase1 and there were no phase2 yet, the widget spat out the warning for the line:
foreach ($config['ipsec']['phase2'] as $ph2ent){ ...
So I enclosed that in a block:
if (isset($config['ipsec']['phase2'])) { ... }
Tabbing that block in makes the diff look big when there really is little change - a diff ignoring spacing will look much nicer!
2014-12-26 08:21:07 -02:00
Ermal LUÇI
5a0028ad94 Correct even other areas of CP using pfSense_ipfw_getTablestats function. 2014-12-24 19:14:39 +01:00
Ermal LUÇI
5afffea472 Fix displaying description for IKEv1 connected tunnels 2014-12-24 18:47:30 +01:00
Ermal LUÇI
a47e038c60 Oops remove variable with same name unused! 2014-12-24 18:40:42 +01:00