Commit Graph

12488 Commits

Author SHA1 Message Date
Ermal LUÇI
91456048a7 split is deprecated move to explode 2015-01-07 20:15:57 +01:00
Chris Buechler
2a8a09a9fe fix text 2015-01-07 12:48:47 -06:00
Chris Buechler
d2884b9ae0 fix spelling of compression 2015-01-07 12:47:42 -06:00
Ermal LUÇI
45efe1b672 Fixes #4182 by properly managing IPcomp on ipsec tunnels.
Also retires IPsec force reloading advanced sysctl since its useless nowdays with strongswan and remove its call on rc.newipsecdns.
2015-01-07 16:33:46 +01:00
Phil Davis
0bd024d0b1 OpenVPN backend authentication fix key and translation
The array returned by auth_get_authserver_list() has key as the fixed name of each available authentication mode - e.g. "Local Database".
The array value ["name"] has the name string translated into the selected GUI language.
Use the key do determine which items are selected, and as the value that ends up being stored in the config.
Use ["name"] for display.
Forum report: https://forum.pfsense.org/index.php?topic=86326.0
Redmine Bug #4180
2015-01-06 12:22:45 -02:00
Renato Botelho
0a23cddced Fix #4090:
- Unbound advanced options may contain double quotes and it breaks the
syntax when a backup is restored because newlines are trimmed. Save it
in base64 format is a safe way to prevent it
- Bump config version to 11.5
- Provide upgrade code to encode current config or the one that came
from unbound package on 2.1.5
2015-01-05 15:41:38 -02:00
Renato Botelho
7f5c266994 Make it possible to backup/restore 'DNS Resolver' section individually 2015-01-05 12:58:28 -02:00
Renato Botelho
5a158a2969 Fix track6 prefix id range check, reported by jimp 2015-01-02 13:07:15 -02:00
Phil Davis
8c46314c6b Allow blank source port in diag_testport
Reported by forum https://forum.pfsense.org/index.php?topic=86146.0
Also, if there are input validation errors, save the user-entered data and re-display it, making it easier for the user to just correct the data in error and press Test again. It was blanking out all the entered data.
2015-01-02 09:25:06 -02:00
Phil Davis
6317d31dfc Fix lineup of copyright lines
and module names and other bits of formatting and typos in header
comment sections.
2015-01-01 10:13:14 -02:00
Phil Davis
d4b2cd35b9 Remove duplicate copyright
Noticed these had the copyright twice
2015-01-01 10:13:14 -02:00
Renato Botelho
d961e7e33e Welcome 2015 2014-12-31 16:22:27 -02:00
Phil Davis
1142d9a06b IPsec Widget allow for old settings that have no iketype
as mentioned in https://forum.pfsense.org/index.php?topic=84527.msg471919#msg471919
This change makes it work like similar if tests in /usr/local/wwwvpn_ipsec.php, and code in /etc/inc/vpn.inc that effectively defaults to ikev1 when iketype is not specified.
This should make the code here be executed and make $ikeid get the correct value to be used in later code.
2014-12-30 20:43:24 -06:00
Phil Davis
6e26b9c554 Allow for old settings that have no iketype
This bit of code looks like it could do with the same test as https://github.com/pfsense/pfsense/pull/1412
This is executed when the "Connect" button is pressed from Status->IPsec
Somebody with these problematic old IPsec entries could test this - with current code I suspect that disconnect followed by connect - it will not connect. With this change it will (might?) connect again.
2014-12-30 20:40:46 -06:00
Phil Davis
13c6375b6e Captive portal spelling 2014-12-30 09:47:45 -02:00
Colin Fleming
91145658f0 Backout pull request #1391
https://forum.pfsense.org/index.php?topic=85944.0

Backout pull request #13191
2014-12-29 11:40:55 -02:00
Phil Davis
8f6875de03 Fix unbound shortcut links
Fixes redmine #4151
1) Make the naming in shortcuts.inc more clear - forwarder=dnsmasq
resolver=unbound
2) Make the value of $shortcuts_section correct in each dnsmasq and
unbound php code
3) Make diag_logs_resolver.php smarter, so if dnsmasq is enabled, then
show shortcuts for dnsmasq, otherwise show shortcuts for unbound.
4) Fix some references to forwarder in unbound code - should be
resolver.
2014-12-28 13:45:15 -05:00
Chris Buechler
e63734ff1d clarify message here after customer feedback, it wasn't meant to imply "only a reboot will re-enable" but that's how some people have read it. 2014-12-26 16:50:26 -06:00
Renato Botelho
ef6f553dd9 Move this check before full sync to disable dnsmasq/unbound in the first time it's sync'd 2014-12-26 12:21:51 -02:00
Renato Botelho
4469379c20 Add dnsmasq and unbound config sections to full sync, it fixes #4076 that is caused because boolean config fields are not disabled on secondary 2014-12-26 12:21:49 -02:00
Phil Davis
ddfe3e058f Display tunnel description on IPsec widget
There was not even code to attempt to display the description.
Also, when I first created a phase1 and there were no phase2 yet, the widget spat out the warning for the line:
foreach ($config['ipsec']['phase2'] as $ph2ent){ ...
So I enclosed that in a block:
if (isset($config['ipsec']['phase2'])) { ... }
Tabbing that block in makes the diff look big when there really is little change - a diff ignoring spacing will look much nicer!
2014-12-26 08:21:07 -02:00
Ermal LUÇI
5a0028ad94 Correct even other areas of CP using pfSense_ipfw_getTablestats function. 2014-12-24 19:14:39 +01:00
Ermal LUÇI
5afffea472 Fix displaying description for IKEv1 connected tunnels 2014-12-24 18:47:30 +01:00
Ermal LUÇI
a47e038c60 Oops remove variable with same name unused! 2014-12-24 18:40:42 +01:00
Ermal LUÇI
6a802ab48e Add checks for ghost phase2 and no need to check for number of phase2 here 2014-12-24 18:39:03 +01:00
Ermal LUÇI
87f2ea892a Correct skipping of disabled tunnels 2014-12-24 18:26:34 +01:00
Ermal LUÇI
168126ea1f Correct status counter of inactive tunnels 2014-12-24 18:22:27 +01:00
Renato Botelho
43067abc03 Merge pull request #1395 from wagonza/RELENG_2_2 2014-12-24 09:19:10 -02:00
Ermal LUÇI
dd07beef32 Oops do not override ipsec status array! 2014-12-23 17:21:27 +01:00
Phil Davis
283dd1d7ef Reboot not required for password protect console menu
On my systems I can toggle and save "Password protect the console menu" back and forth and the console switches back and forth from the menu to a login prompt in real time. IMHO a reboot is no longer needed. Remove this note might save some people unnecessary reboot time.
2014-12-23 10:49:28 -02:00
Phil Davis
0bc7947e87 Handle firewall log widget display formats
the same way for the initial display and for updated rows done by Java Script. Now we receive the source IP and port, destination IP and port, all in separate fields so they can be put together in whatever combination for display.
IPv6 displayed addresses are shown inside "[ ]" so that any following port has the standard syntax like "[a🅱️:c:d]:123" - this makes it obvious that the last numbers are a port number, and not part of the IPv6 address.
The "title" has IP+Port - that is displayed when hovering over the box in general.
The href to diag_dns.php has hover text "Reverse Resolve with DNS" and the "?host=" sends just the IP address (without IPv6 square brackets).
The text displayed in the link is the IP address (with square brackets if an IPv6 address).
For the destination column, if there is a destinaion port, it is displayed in ordinary text ":port" after the IP address.

The blank not-displayed row at the end of the table is removed - this fixes the problem with counting the rows of the table where rows would disappear at each update.
2014-12-23 09:09:42 -02:00
Phil Davis
7d18202165 Interfaces widget remove blank line if no IPv4 address
If the interface had an IPv6 address but no IPv4 address, there was a blank line where the IPv4 address would have been. There is no need for that, and one day IPv4 will be old legacy and systems will routinely have no IPv4 addresses at all - they will all be IPv6. Might as well make that look ordinary on the display now.
The br goes in the div so we can put it in and out from the AJAX also.
2014-12-23 09:09:24 -02:00
Phil Davis
d4b3c264d1 Interfaces widget create all div
All div for the various things need to be created here, so that later AJAX can switch the necessary things on/off and write a new IPv4 or IPv6 address into the div when an interface acquires an address.
2014-12-23 09:09:24 -02:00
Colin Fleming
490810ed53 Remove "link", "vlink" and "alink" from BODY tag
This is a positional change to remove "link", "vlink" and "alink" from
the BODY tag, the following themes do not have Anchor tags defined in
CSS, so they use the colours defined in the BODY tag, which is blue
(hex: #0000CC).

_corporate
code-red
metallic
nervecenter
pfsense
pfsense-dropdown

Update "all.css" in the above themes with Anchor tags defined, so that
the colour definition can be removed from the BODY tag.
2014-12-23 09:08:38 -02:00
Phil Davis
89914d8c78 Put line break only if IPv4 address exists
This makes a line for the IPv4 address if it is there. If the IPv4 address goes away, the whole line will disappear, leaving just the IPv6 address without an empty line above it.
2014-12-23 09:07:53 -02:00
Phil Davis
085d688987 Set Interfaces widget IPv6 address
Now that get_interfacestatus() is returning us the IPv6 address, and interfaces.widget.php has a div to put it in, actually update the IPv6 address on the widget.
2014-12-23 09:07:53 -02:00
Phil Davis
42647435de Lastsawtime has moved further along
srcport, dstport and version are now explicitly passed as fields here, so lastsawtime is 3 fields further out.
2014-12-23 09:07:19 -02:00
Phil Davis
5b37015070 Display better message when booting and awaiting package reinstall 2014-12-23 09:06:52 -02:00
Phil Davis
25d3c68fa2 Display better message when booting and awaiting package reinstall 2014-12-23 09:06:52 -02:00
Phil Davis
b79c23aeb6 Send IPv4 and IPv6 address in get_interfacestatus
And make them strong (bold), which is how they are displayed originally by interfaces.widget.php
This allows the AJAX that manipulates the div's in interfaces.widget.php to get the data, so it can make it update.
2014-12-23 09:04:54 -02:00
Phil Davis
dad58d7f28 Display better message when booting and awaiting package reinstall 2014-12-23 09:04:25 -02:00
Phil Davis
4e220eeac3 Standardise dynamic firewall log view
to be like Firewall Log widget:
1) Display IPv6 address and port in [a🅱️:c]:123 format
2) Fix same issue with rows gradually disappearing each update, or when in reverse order, update lines not being put in the right place.
3) Update the processing of function format_log_line(row) to reflect the changed list of data items returned by handle_ajax() in filter_log.inc
2014-12-23 09:03:49 -02:00
Renato Botelho
1df8a7b2b1 Add missing $ as spotted by Kill Bill, ticket #4132 2014-12-22 14:54:24 -02:00
Ermal LUÇI
0314cbf47e Correct display of tunnel status on ikev1 with multiple phase2 2014-12-22 17:36:49 +01:00
Ermal LUÇI
fe2e680bdb Correct ipsec status page to make connect button work 2014-12-22 17:20:44 +01:00
Ermal LUÇI
432dee2db2 Correct dashboard with new ipsec generation 2014-12-22 16:14:32 +01:00
Renato Botelho
22a7fef8b7 Fix string, we want to print variable name here and not its value. Fixes #4132 2014-12-22 10:12:57 -02:00
Chris Buechler
5a0983446c Use correct port for viewing portal page contents. Ticket #4125 2014-12-19 19:56:31 -06:00
jim-p
8cd0dba6ff Fix help for UPnP/NAT-PMP 2014-12-19 16:18:08 -05:00
Warren Baker
83aaa43123 Remove option that has now been merged into infra-host-ttl. 2014-12-19 20:43:02 +02:00