Commit Graph

13596 Commits

Author SHA1 Message Date
jim-p
c7de8be425 Add a new alias type, urltable, which downloads a file of IP/CIDR addresses and loads them into a pf persist table instead of importing the addresses directly into a traditional alias. This allows for using huge tables of addresses that would otherwise break the GUI and/or fail to load into pf. Part of ticket #512 2010-04-21 17:03:45 -04:00
jim-p
74e861e30b Validate imported URL data. Resolves #530. 2010-04-21 09:44:28 -04:00
Ermal
f40980ad69 Fix creation of pipe/queue aka limiters. 2010-04-20 21:53:49 +00:00
Ermal
0852838c41 Warn the user when we cannot get the MAC address on pass through auto add case. Also when a user does a logout through clicking the logout form exit after showing sending info on logout successful. 2010-04-20 21:31:34 +00:00
Ermal
9426cb034a Allow a passthrough mac to be deleted by a POST. Take the neccessary actions to disconnect and remove the mac from CP. 2010-04-20 21:16:28 +00:00
Ermal
921406213f Allow users to send in the same POST authentication info and post fields. This will be allowed by authentication code if the special post var 'postafterlogin' isset. 2010-04-20 21:14:25 +00:00
Ermal
68d0b70a5a Make pasthrough GUI code catch-up with the latest changes. 2010-04-20 18:44:33 +00:00
Ermal
1dbe445acc Use tables of ipfw for passthrough mac entries. This makes it scale way better than previously. Fix multiple entries on adding mac through entries automatically after login for the same user. The changes allow even pass through mac to be controlled from the Status->Captiveportal. Use serialize/unserialize on some files that keep temporary information to speed up calculations. Really allow mac passthrough to follow radius rules or time out rules when present. 2010-04-20 18:32:59 +00:00
Scott Ullrich
0d38896918 Do not include filter.inc twice 2010-04-19 21:54:25 -04:00
Ermal
6ce61a8fd6 Add a new option which allows the admin user to configure CP so that it automatically enters an MAC passthru entry. The MAC is taken from login details and has to be removed manually. Also do improvements on rules handling and pipes. Add some optmizations. Teach the GUI/backend on ip/mac passthrough to configure a bw limit for this entries. 2010-04-20 00:40:02 +00:00
Scott Ullrich
c443bb14cb Show p2 items correctly (add missing td's) 2010-04-19 18:52:10 -04:00
jim-p
c88c2df9ee Perform IP/Host and Port number validation for Authentication servers in the OpenVPN Wizard. 2010-04-19 16:46:01 -04:00
jim-p
6e6a5ce36f Restrict country code entry in the OpenVPN wizard to two letters. 2010-04-19 16:27:00 -04:00
jim-p
494b4e6026 Fix default port choices for LDAP/RADIUS server in OpenVPN wizard. 2010-04-19 14:21:47 -04:00
jim-p
c0f650c421 Fix OpenVPN port default choice in Wizard. Also fix protocol specification. (Should be Uppercase) 2010-04-19 13:57:16 -04:00
jim-p
8cd0a3fa3a Revert "Fix finding next OpenVPN port. Protocol should be lowercase." - This was wrong in the wizard, apparently, and not the main page.
This reverts commit a48613a65d.
2010-04-19 13:54:43 -04:00
jim-p
a48613a65d Fix finding next OpenVPN port. Protocol should be lowercase. 2010-04-19 13:43:14 -04:00
Chris Buechler
9460ee11b2 fix text 2010-04-19 02:40:56 -04:00
Chris Buechler
7b7e5b3063 remove commented out bit that causes annoying pop ups in IE. Ticket #299 2010-04-18 18:24:06 -04:00
Chris Buechler
43cea754cf show port and proto 2010-04-18 16:53:19 -04:00
Scott Ullrich
addbcae775 Fix growl issues.
Ticket #518
Ticket #519

Submibtted-by: Blake Skinner
2010-04-17 21:56:49 -04:00
pierrepomes
1467b79f55 Use FQDN for HELLO SMTP command. Ticket #443 2010-04-17 20:27:58 -04:00
Chris Buechler
842fb73b8b use 6969 for tftp-proxy 2010-04-17 15:49:13 -04:00
Ermal
09bbbebbcf Ticket #511. Actually return the rules from all the packages not just the first one. 2010-04-16 19:38:46 +00:00
Ermal
cfdce2add9 Ticket #508. Make TFTP proxy configurable by System Advanced->Firewall/NAT for several interfaces. 2010-04-16 19:08:32 +00:00
Ermal
f691243dac Do not use the presence of lan as an indicator of having only one interface. Actually deduce that from the count of interfaces. It is perfectly legal on 2.0 to not have a lan interface and only opt/wan ones. 2010-04-16 18:41:25 +00:00
Ermal
38b357bdb5 Do not use the presence of lan as an indicator of having only one interface. Actually deduce that from the count of interfaces. It is perfectly legal on 2.0 to not have a lan interface and only opt/wan ones. 2010-04-16 18:38:36 +00:00
jim-p
2cfbe062cb Update system information widget to use new version checking mechanism. 2010-04-16 12:24:27 -04:00
jim-p
a76c1c453a Beef up the version comparison code. This should let us compare several combinations of local and remote versions and properly determine if the current version is older or the same as the remote version. 2010-04-16 12:14:05 -04:00
jim-p
93b8266e2a Fail over update check to report the supplied version from the remote server if it is not a build time/datestamp. 2010-04-15 17:08:20 -04:00
jim-p
939e4a91d0 Fix whitespace 2010-04-15 16:54:07 -04:00
jim-p
27e21d1cf2 Fix CA cert dupe detection when no certs yet exist. 2010-04-15 16:04:47 -04:00
jim-p
9cb9c7d427 Add titles to wizard steps, change some wording to be more consistent. 2010-04-15 16:03:18 -04:00
Ermal
3d5b00015c radius.inc already has this includes so do not include them explicitly. This unbreaks the loading of bcmath module since PEAR.inc is not yet included! 2010-04-14 21:19:16 +00:00
Ermal
9a38338ca5 Ticket #386. Add even the network address to the list of addresses on proxy arp vips to the naat out edit. 2010-04-14 14:37:36 +00:00
Ermal
45a9975025 Ticket #483. Load the bcmath extension dynamically through PEAR for Radius accounting. 2010-04-14 13:28:45 +00:00
Ermal
6364b88b0b Ticket #486. Convert even the gateways that specify the interface itself. 2010-04-14 13:18:15 +00:00
Ermal
5ac2f58375 Ticket #499. Create custom options propperly for each interface. This solution binds the option name to the interface name so it is even easier to distinguish. 2010-04-14 12:40:10 +00:00
Ermal
c74804cd45 Add code to allow applications on pfSense itself that bind to a socket or want to source route traffic to work. This fixes DynDns on multi-wan as the simplest of it. 2010-04-13 23:19:59 +00:00
Ermal
52e9528649 Add a timeout for curl_exec. Combine all dyndns.org methods to one catching up with its API changes. 2010-04-13 22:19:00 +00:00
Ermal
c3c3e03bf1 Fix regex on matching ip when behind nat. 2010-04-13 21:08:26 +00:00
Ermal
d2946062aa Move checking if dyndns is enabled to the proper place. 2010-04-13 20:38:13 +00:00
Ermal
85b2f42498 Improve startup time by delaying dyndns synching. 2010-04-13 20:31:03 +00:00
Ermal
24ed5c3ba4 Remove associated rule-id from default config they confuse rule edit page. 2010-04-13 18:30:06 +00:00
Renato Botelho
2df3a71fe6 On Virtual IPs, the ip is stored on subnet xml tag, use it to compare with external-address. 2010-04-13 11:01:50 -03:00
Renato Botelho
0e7dded1ad source address is been checked 2 times and destination address no one, fix this 2010-04-13 10:27:15 -03:00
Ermal
676b4a3988 Remove bandwidth tags from default config they are not used. 2010-04-12 22:24:44 +00:00
Ermal
077d5702a2 Actually disable flowtables support by default. 2010-04-12 22:23:57 +00:00
jim-p
a84eb83859 Perform more strict validation on CA and Cert names before proceeding in the wizard. 2010-04-12 17:32:34 -04:00
jim-p
6f8b8ed05b Prevent duplication of CA names and Cert names in the OpenVPN wizard. Ticket #500. 2010-04-12 16:40:30 -04:00