Commit Graph

8698 Commits

Author SHA1 Message Date
Scott Ullrich
cad40f607c Write out all commands that should be run after filter load instead
of requiring the command to be run 5+ times for certain scenarios.

Fix sponsored by BSD Perimeter
2008-12-15 17:43:12 +00:00
Scott Ullrich
ef97a399ee Back out "Rules have not changed. Not reloading" changes. 2008-12-15 17:41:01 +00:00
Scott Ullrich
866ea67edc Remove extra " 2008-12-15 03:35:33 +00:00
Scott Ullrich
89c83ade88 Add missing product_ items. product_website is used on the system
firmware settings page.
2008-12-15 03:34:09 +00:00
Scott Ullrich
a281f09f71 Correct openntpd binary name 2008-12-15 02:57:56 +00:00
Scott Ullrich
ff4af76e16 Start building 1.2.1-RC3 2008-12-13 00:08:47 +00:00
Scott Ullrich
01da85f5ff Do not allow \ in fieldnames. 2008-12-12 18:20:42 +00:00
Scott Ullrich
5a2993ac6b Remove debugging alert() 2008-12-11 17:17:04 +00:00
Scott Ullrich
7ecf4fddc0 Fix setup wizard wan type selection box now that bigpond has been axed. 2008-12-11 17:10:05 +00:00
Scott Ullrich
90a277634a Replace route get default with netstat -rn|awk '/default/ {print $2}' which
cannot block according to ermal because it uses libkvm
2008-12-10 20:59:50 +00:00
Scott Ullrich
72fd166e6f Do not show starting pflog0 2008-12-10 19:49:00 +00:00
Scott Ullrich
56b79a8d17 * Reset filter reload status to Done if rules are the same
* Add a note that the rules are not the same and that the filter will
  not be reloaded to the system logs
2008-12-08 20:56:50 +00:00
Chris Buechler
2f6f9dc381 fix CARP panics with VLANs 2008-12-08 02:31:36 +00:00
Scott Ullrich
839de3f1dc Check to make sure file exists before operating on it. 2008-12-08 01:22:49 +00:00
Chris Buechler
caecf12dde default to DHCP as intended (previous removal of bigpond shifted this) 2008-12-08 01:13:48 +00:00
Chris Buechler
732b65ef8b Don't use broadcast on CARP IPs. 2008-12-08 00:10:47 +00:00
Chris Buechler
a7ab102053 Don't add CARP IPs on an interface that doesn't exist to prevent panic. 2008-12-07 23:41:20 +00:00
Chris Buechler
e58e7965a2 log mwexec if developerspew is on 2008-12-07 23:33:16 +00:00
Scott Ullrich
1372ae55f9 Compare rules.debug to previously loaded rules. If no rule changes
have occured, do not try to reload the rules and sync changes to backup
members which can result in the rules being reloaded constantly when
load balancing is in use, etc.
2008-12-07 20:13:07 +00:00
Scott Ullrich
793df875fc Add openntpd 2008-12-05 21:33:58 +00:00
Chris Buechler
e59771e7f9 remove "enable filtering bridge" checkbox, it has been ignored for months. don't entirely remove at this time as there is information all over the place that references it. 2008-11-30 04:38:58 +00:00
Chris Buechler
1cb313037f show reject rules as reject rules. 2008-11-30 03:49:58 +00:00
Chris Buechler
7c7fc6a269 return works fine with any firewall rule. it doesn't return anything for protos other than TCP, UDP, or TCP/UDP, but is valid in all rules. never exclude it. 2008-11-30 03:49:33 +00:00
Chris Buechler
e5a4a0a5ef fix "no state" rules 2008-11-30 01:13:00 +00:00
Chris Buechler
1586d7780c correct description on block bogon rule 2008-11-30 00:54:48 +00:00
Chris Buechler
e1001deea2 change default to enable block bogons 2008-11-30 00:02:27 +00:00
Scott Ullrich
4ee96f9080 Remove 2.0ism 2008-11-27 00:24:09 +00:00
Scott Ullrich
e10d158529 s/counf/conf/ 2008-11-27 00:22:01 +00:00
Scott Ullrich
555e30f7d9 Only pause 5 seconds if we actually started openvpn 2008-11-27 00:20:27 +00:00
Chris Buechler
f64bae3dfa s/carp/CARP/ 2008-11-26 01:47:54 +00:00
Scott Ullrich
69a2029834 * guiconfig.inc comes first
* use escapeshellarg()
2008-11-25 18:13:11 +00:00
Scott Ullrich
ebc9d78413 Update firmware lock (upgrade) variable 2008-11-23 06:18:42 +00:00
Scott Ullrich
3c9b290cfe Do not allow ro mount when an upgrade is in progress 2008-11-23 06:12:36 +00:00
Scott Ullrich
4cac6f775d Create a backup of the configuration prior to package installation. 2008-11-22 23:43:17 +00:00
Scott Ullrich
64f8d06877 Nuke stray n's 2008-11-20 23:08:00 +00:00
Scott Ullrich
42c1f0a2ee * Add interface_supports_polling()
* Use interface_supports_polling()
2008-11-20 23:00:38 +00:00
Scott Ullrich
383ee4cd69 Fix NOBACKUP 2008-11-20 22:24:40 +00:00
Scott Ullrich
aec1a24355 Oops, this is PHP 2008-11-20 22:22:05 +00:00
Scott Ullrich
28e0e37ad8 Work on embedded, too 2008-11-20 22:19:41 +00:00
Scott Ullrich
6a9d8cadca * Honor $config['system']['polling'
* Enable / disable polling even if we are not booting.
2008-11-20 22:01:06 +00:00
Scott Ullrich
11d67a3c04 Bump /var/run to 4m 2008-11-19 21:44:40 +00:00
Scott Ullrich
b43af193d8 Set vm.kmem_size_max
Noticed-by: simoncpu
2008-11-19 05:46:48 +00:00
Scott Ullrich
82d046c54b Do not destroy enc0 2008-11-19 05:27:51 +00:00
Scott Ullrich
851e7d41a6 Only run ifconfig if a real ip and netmask exists instead of ifconfig $int / 2008-11-19 05:26:00 +00:00
Scott Ullrich
13277cbf52 Check gateway using is_ipaddr() and log when we insert the default gateway 2008-11-19 05:06:05 +00:00
Scott Ullrich
676c001755 Make nat reflection timeouts consistent 2008-11-19 00:21:19 +00:00
Scott Ullrich
70e5027db0 Bump kernel memory to 435544320 from 335544320 2008-11-18 22:54:46 +00:00
Chris Buechler
2f10375693 bridging bug fix from 20080805 was incomplete, only affected LAN and WAN. Also need to turn this off for OPT. 2008-11-18 04:19:40 +00:00
Scott Ullrich
9b0c4cd779 Reinsert default gateway if it is missing. 2008-11-18 00:12:08 +00:00
Chris Buechler
0b4cc96205 show <pkginfolink> for installed packages 2008-11-17 23:49:39 +00:00