Scott Ullrich
cad40f607c
Write out all commands that should be run after filter load instead
...
of requiring the command to be run 5+ times for certain scenarios.
Fix sponsored by BSD Perimeter
2008-12-15 17:43:12 +00:00
Scott Ullrich
ef97a399ee
Back out "Rules have not changed. Not reloading" changes.
2008-12-15 17:41:01 +00:00
Scott Ullrich
89c83ade88
Add missing product_ items. product_website is used on the system
...
firmware settings page.
2008-12-15 03:34:09 +00:00
Scott Ullrich
ff4af76e16
Start building 1.2.1-RC3
2008-12-13 00:08:47 +00:00
Scott Ullrich
90a277634a
Replace route get default with netstat -rn|awk '/default/ {print $2}' which
...
cannot block according to ermal because it uses libkvm
2008-12-10 20:59:50 +00:00
Scott Ullrich
72fd166e6f
Do not show starting pflog0
2008-12-10 19:49:00 +00:00
Scott Ullrich
56b79a8d17
* Reset filter reload status to Done if rules are the same
...
* Add a note that the rules are not the same and that the filter will
not be reloaded to the system logs
2008-12-08 20:56:50 +00:00
Chris Buechler
2f6f9dc381
fix CARP panics with VLANs
2008-12-08 02:31:36 +00:00
Scott Ullrich
839de3f1dc
Check to make sure file exists before operating on it.
2008-12-08 01:22:49 +00:00
Chris Buechler
732b65ef8b
Don't use broadcast on CARP IPs.
2008-12-08 00:10:47 +00:00
Chris Buechler
a7ab102053
Don't add CARP IPs on an interface that doesn't exist to prevent panic.
2008-12-07 23:41:20 +00:00
Chris Buechler
e58e7965a2
log mwexec if developerspew is on
2008-12-07 23:33:16 +00:00
Scott Ullrich
1372ae55f9
Compare rules.debug to previously loaded rules. If no rule changes
...
have occured, do not try to reload the rules and sync changes to backup
members which can result in the rules being reloaded constantly when
load balancing is in use, etc.
2008-12-07 20:13:07 +00:00
Chris Buechler
7c7fc6a269
return works fine with any firewall rule. it doesn't return anything for protos other than TCP, UDP, or TCP/UDP, but is valid in all rules. never exclude it.
2008-11-30 03:49:33 +00:00
Chris Buechler
e5a4a0a5ef
fix "no state" rules
2008-11-30 01:13:00 +00:00
Scott Ullrich
4ee96f9080
Remove 2.0ism
2008-11-27 00:24:09 +00:00
Scott Ullrich
e10d158529
s/counf/conf/
2008-11-27 00:22:01 +00:00
Scott Ullrich
555e30f7d9
Only pause 5 seconds if we actually started openvpn
2008-11-27 00:20:27 +00:00
Scott Ullrich
ebc9d78413
Update firmware lock (upgrade) variable
2008-11-23 06:18:42 +00:00
Scott Ullrich
3c9b290cfe
Do not allow ro mount when an upgrade is in progress
2008-11-23 06:12:36 +00:00
Scott Ullrich
64f8d06877
Nuke stray n's
2008-11-20 23:08:00 +00:00
Scott Ullrich
42c1f0a2ee
* Add interface_supports_polling()
...
* Use interface_supports_polling()
2008-11-20 23:00:38 +00:00
Scott Ullrich
383ee4cd69
Fix NOBACKUP
2008-11-20 22:24:40 +00:00
Scott Ullrich
aec1a24355
Oops, this is PHP
2008-11-20 22:22:05 +00:00
Scott Ullrich
28e0e37ad8
Work on embedded, too
2008-11-20 22:19:41 +00:00
Scott Ullrich
6a9d8cadca
* Honor $config['system']['polling'
...
* Enable / disable polling even if we are not booting.
2008-11-20 22:01:06 +00:00
Scott Ullrich
11d67a3c04
Bump /var/run to 4m
2008-11-19 21:44:40 +00:00
Scott Ullrich
82d046c54b
Do not destroy enc0
2008-11-19 05:27:51 +00:00
Scott Ullrich
851e7d41a6
Only run ifconfig if a real ip and netmask exists instead of ifconfig $int /
2008-11-19 05:26:00 +00:00
Scott Ullrich
13277cbf52
Check gateway using is_ipaddr() and log when we insert the default gateway
2008-11-19 05:06:05 +00:00
Scott Ullrich
676c001755
Make nat reflection timeouts consistent
2008-11-19 00:21:19 +00:00
Chris Buechler
2f10375693
bridging bug fix from 20080805 was incomplete, only affected LAN and WAN. Also need to turn this off for OPT.
2008-11-18 04:19:40 +00:00
Scott Ullrich
9b0c4cd779
Reinsert default gateway if it is missing.
2008-11-18 00:12:08 +00:00
Scott Ullrich
bb8fa0cbbf
Update release key
2008-11-16 02:27:03 +00:00
Scott Ullrich
cfc0d07288
As of pf 4.1 keep state is used automatically. Do not keep state
...
between statically routed subnets.
2008-11-12 01:18:09 +00:00
Chris Buechler
7ec41990fe
Show correct password (it's caps sensitive)
2008-11-12 00:36:57 +00:00
Scott Ullrich
ebafda220a
Remove scary logging statements which are debugging only to decrease
...
support drama.
2008-11-10 21:43:39 +00:00
Scott Ullrich
1440daf085
Silence! I've heard enough.
2008-11-10 20:54:36 +00:00
Scott Ullrich
7f23c690a5
Patches from smos@
...
* Replace not functioning interface check for polling.
* Silence route commands.
2008-11-10 20:46:52 +00:00
Scott Ullrich
a2336a7d62
Add newline and done
2008-11-09 08:14:05 +00:00
Scott Ullrich
11e25195a5
change to keep state
2008-11-09 07:49:00 +00:00
Scott Ullrich
9b5fdb5b11
Sync the time on ip change and alert the logs
2008-11-09 05:43:27 +00:00
Scott Ullrich
0ae2557a3e
$config needs to be a global
2008-11-09 04:10:02 +00:00
Scott Ullrich
79dd937ff7
Add new line
2008-11-09 04:08:30 +00:00
Scott Ullrich
0a532a71e5
Syncing from 2.0
2008-11-09 04:06:27 +00:00
Scott Ullrich
f47b64ad9d
Use files.pfsense.org
2008-11-09 03:44:46 +00:00
Scott Ullrich
f44fe78062
Remove newlines at end of files
2008-11-09 03:18:11 +00:00
Scott Ullrich
7330637058
Remove sleep
2008-11-09 03:16:04 +00:00
Scott Ullrich
f619398586
Sync
2008-11-09 03:10:43 +00:00
Scott Ullrich
4f46cd861d
* Move time scripts much earlier. It will now kick off initially
...
from the ntp once script
2008-11-09 03:04:03 +00:00
