jim-p
|
c7de8be425
|
Add a new alias type, urltable, which downloads a file of IP/CIDR addresses and loads them into a pf persist table instead of importing the addresses directly into a traditional alias. This allows for using huge tables of addresses that would otherwise break the GUI and/or fail to load into pf. Part of ticket #512
|
2010-04-21 17:03:45 -04:00 |
|
jim-p
|
74e861e30b
|
Validate imported URL data. Resolves #530.
|
2010-04-21 09:44:28 -04:00 |
|
Ermal
|
f40980ad69
|
Fix creation of pipe/queue aka limiters.
|
2010-04-20 21:53:49 +00:00 |
|
Ermal
|
0852838c41
|
Warn the user when we cannot get the MAC address on pass through auto add case. Also when a user does a logout through clicking the logout form exit after showing sending info on logout successful.
|
2010-04-20 21:31:34 +00:00 |
|
Ermal
|
9426cb034a
|
Allow a passthrough mac to be deleted by a POST. Take the neccessary actions to disconnect and remove the mac from CP.
|
2010-04-20 21:16:28 +00:00 |
|
Ermal
|
921406213f
|
Allow users to send in the same POST authentication info and post fields. This will be allowed by authentication code if the special post var 'postafterlogin' isset.
|
2010-04-20 21:14:25 +00:00 |
|
Ermal
|
68d0b70a5a
|
Make pasthrough GUI code catch-up with the latest changes.
|
2010-04-20 18:44:33 +00:00 |
|
Ermal
|
1dbe445acc
|
Use tables of ipfw for passthrough mac entries. This makes it scale way better than previously. Fix multiple entries on adding mac through entries automatically after login for the same user. The changes allow even pass through mac to be controlled from the Status->Captiveportal. Use serialize/unserialize on some files that keep temporary information to speed up calculations. Really allow mac passthrough to follow radius rules or time out rules when present.
|
2010-04-20 18:32:59 +00:00 |
|
Scott Ullrich
|
0d38896918
|
Do not include filter.inc twice
|
2010-04-19 21:54:25 -04:00 |
|
Ermal
|
6ce61a8fd6
|
Add a new option which allows the admin user to configure CP so that it automatically enters an MAC passthru entry. The MAC is taken from login details and has to be removed manually. Also do improvements on rules handling and pipes. Add some optmizations. Teach the GUI/backend on ip/mac passthrough to configure a bw limit for this entries.
|
2010-04-20 00:40:02 +00:00 |
|
Scott Ullrich
|
c443bb14cb
|
Show p2 items correctly (add missing td's)
|
2010-04-19 18:52:10 -04:00 |
|
jim-p
|
c88c2df9ee
|
Perform IP/Host and Port number validation for Authentication servers in the OpenVPN Wizard.
|
2010-04-19 16:46:01 -04:00 |
|
jim-p
|
6e6a5ce36f
|
Restrict country code entry in the OpenVPN wizard to two letters.
|
2010-04-19 16:27:00 -04:00 |
|
jim-p
|
494b4e6026
|
Fix default port choices for LDAP/RADIUS server in OpenVPN wizard.
|
2010-04-19 14:21:47 -04:00 |
|
jim-p
|
c0f650c421
|
Fix OpenVPN port default choice in Wizard. Also fix protocol specification. (Should be Uppercase)
|
2010-04-19 13:57:16 -04:00 |
|
jim-p
|
8cd0a3fa3a
|
Revert "Fix finding next OpenVPN port. Protocol should be lowercase." - This was wrong in the wizard, apparently, and not the main page.
This reverts commit a48613a65d.
|
2010-04-19 13:54:43 -04:00 |
|
jim-p
|
a48613a65d
|
Fix finding next OpenVPN port. Protocol should be lowercase.
|
2010-04-19 13:43:14 -04:00 |
|
Chris Buechler
|
9460ee11b2
|
fix text
|
2010-04-19 02:40:56 -04:00 |
|
Chris Buechler
|
7b7e5b3063
|
remove commented out bit that causes annoying pop ups in IE. Ticket #299
|
2010-04-18 18:24:06 -04:00 |
|
Chris Buechler
|
43cea754cf
|
show port and proto
|
2010-04-18 16:53:19 -04:00 |
|
Scott Ullrich
|
addbcae775
|
Fix growl issues.
Ticket #518
Ticket #519
Submibtted-by: Blake Skinner
|
2010-04-17 21:56:49 -04:00 |
|
pierrepomes
|
1467b79f55
|
Use FQDN for HELLO SMTP command. Ticket #443
|
2010-04-17 20:27:58 -04:00 |
|
Chris Buechler
|
842fb73b8b
|
use 6969 for tftp-proxy
|
2010-04-17 15:49:13 -04:00 |
|
Ermal
|
09bbbebbcf
|
Ticket #511. Actually return the rules from all the packages not just the first one.
|
2010-04-16 19:38:46 +00:00 |
|
Ermal
|
cfdce2add9
|
Ticket #508. Make TFTP proxy configurable by System Advanced->Firewall/NAT for several interfaces.
|
2010-04-16 19:08:32 +00:00 |
|
Ermal
|
f691243dac
|
Do not use the presence of lan as an indicator of having only one interface. Actually deduce that from the count of interfaces. It is perfectly legal on 2.0 to not have a lan interface and only opt/wan ones.
|
2010-04-16 18:41:25 +00:00 |
|
Ermal
|
38b357bdb5
|
Do not use the presence of lan as an indicator of having only one interface. Actually deduce that from the count of interfaces. It is perfectly legal on 2.0 to not have a lan interface and only opt/wan ones.
|
2010-04-16 18:38:36 +00:00 |
|
jim-p
|
2cfbe062cb
|
Update system information widget to use new version checking mechanism.
|
2010-04-16 12:24:27 -04:00 |
|
jim-p
|
a76c1c453a
|
Beef up the version comparison code. This should let us compare several combinations of local and remote versions and properly determine if the current version is older or the same as the remote version.
|
2010-04-16 12:14:05 -04:00 |
|
jim-p
|
93b8266e2a
|
Fail over update check to report the supplied version from the remote server if it is not a build time/datestamp.
|
2010-04-15 17:08:20 -04:00 |
|
jim-p
|
939e4a91d0
|
Fix whitespace
|
2010-04-15 16:54:07 -04:00 |
|
jim-p
|
27e21d1cf2
|
Fix CA cert dupe detection when no certs yet exist.
|
2010-04-15 16:04:47 -04:00 |
|
jim-p
|
9cb9c7d427
|
Add titles to wizard steps, change some wording to be more consistent.
|
2010-04-15 16:03:18 -04:00 |
|
Ermal
|
3d5b00015c
|
radius.inc already has this includes so do not include them explicitly. This unbreaks the loading of bcmath module since PEAR.inc is not yet included!
|
2010-04-14 21:19:16 +00:00 |
|
Ermal
|
9a38338ca5
|
Ticket #386. Add even the network address to the list of addresses on proxy arp vips to the naat out edit.
|
2010-04-14 14:37:36 +00:00 |
|
Ermal
|
45a9975025
|
Ticket #483. Load the bcmath extension dynamically through PEAR for Radius accounting.
|
2010-04-14 13:28:45 +00:00 |
|
Ermal
|
6364b88b0b
|
Ticket #486. Convert even the gateways that specify the interface itself.
|
2010-04-14 13:18:15 +00:00 |
|
Ermal
|
5ac2f58375
|
Ticket #499. Create custom options propperly for each interface. This solution binds the option name to the interface name so it is even easier to distinguish.
|
2010-04-14 12:40:10 +00:00 |
|
Ermal
|
c74804cd45
|
Add code to allow applications on pfSense itself that bind to a socket or want to source route traffic to work. This fixes DynDns on multi-wan as the simplest of it.
|
2010-04-13 23:19:59 +00:00 |
|
Ermal
|
52e9528649
|
Add a timeout for curl_exec. Combine all dyndns.org methods to one catching up with its API changes.
|
2010-04-13 22:19:00 +00:00 |
|
Ermal
|
c3c3e03bf1
|
Fix regex on matching ip when behind nat.
|
2010-04-13 21:08:26 +00:00 |
|
Ermal
|
d2946062aa
|
Move checking if dyndns is enabled to the proper place.
|
2010-04-13 20:38:13 +00:00 |
|
Ermal
|
85b2f42498
|
Improve startup time by delaying dyndns synching.
|
2010-04-13 20:31:03 +00:00 |
|
Ermal
|
24ed5c3ba4
|
Remove associated rule-id from default config they confuse rule edit page.
|
2010-04-13 18:30:06 +00:00 |
|
Renato Botelho
|
2df3a71fe6
|
On Virtual IPs, the ip is stored on subnet xml tag, use it to compare with external-address.
|
2010-04-13 11:01:50 -03:00 |
|
Renato Botelho
|
0e7dded1ad
|
source address is been checked 2 times and destination address no one, fix this
|
2010-04-13 10:27:15 -03:00 |
|
Ermal
|
676b4a3988
|
Remove bandwidth tags from default config they are not used.
|
2010-04-12 22:24:44 +00:00 |
|
Ermal
|
077d5702a2
|
Actually disable flowtables support by default.
|
2010-04-12 22:23:57 +00:00 |
|
jim-p
|
a84eb83859
|
Perform more strict validation on CA and Cert names before proceeding in the wizard.
|
2010-04-12 17:32:34 -04:00 |
|
jim-p
|
6f8b8ed05b
|
Prevent duplication of CA names and Cert names in the OpenVPN wizard. Ticket #500.
|
2010-04-12 16:40:30 -04:00 |
|