mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity
25,426 Commits 27 Branches 53 Tags 494 MiB
ce274e4545
Commit Graph

25426 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Luiz Otavio O Souza
ce274e4545 Check if our version of roll data is valid and if necessary, initialize 
the database.

This fix the case where the database is not initialized because the used
field in backup file is empty.

Fix the issue #5113.
 2015-09-15 11:55:35 -05:00
Chris Buechler
32cf6a0c1c Only add 6rd rules if there is an IPv4 IP defined for the gateway, 
otherwise ruleset ends up invalid. Ticket #4935
 2015-09-14 19:01:08 -05:00
jim-p
9fb19cab96 Misc encoding/display issues in the Load Balancer code 2015-09-08 15:15:58 -04:00
jim-p
5a33a6fb8a Encode server name in OpenVPN widget 2015-09-08 15:11:40 -04:00
Renato Botelho
c8ee1f1404 Merge pull request #1834 from phil-davis/patch-1 2015-09-08 11:08:21 -03:00
Renato Botelho
a01cf3dc34 Merge pull request #1840 from phil-davis/patch-6 2015-09-08 11:06:34 -03:00
Renato Botelho
68398e4b5e Merge pull request #1844 from doktornotor/patch-5 2015-09-08 11:02:52 -03:00
Renato Botelho
ef2175870c Merge pull request #1845 from doktornotor/patch-6 2015-09-08 10:12:48 -03:00
Renato Botelho
cef4103e0d Merge pull request #1835 from phil-davis/patch-2 2015-09-08 09:48:43 -03:00
jim-p
64c50ecd23 Encode auth server name before display. 2015-09-04 10:10:32 -04:00
jim-p
38f147d667 Encode alias description details before attempting to display them. 2015-09-01 12:17:37 -04:00
jim-p
1782b45d4b Encode the rule description before displaying back to the user in an error when attempting to delete an in-use alias. 2015-09-01 12:17:02 -04:00
jim-p
1107259e9c Strip HTML tags from a notice to avoid a potential XSS 2015-09-01 12:16:32 -04:00
doktornotor
98ff075e1b make sure that cron is running before reconfiguring it (RELENG_2_2) 
Same as #1828.
 2015-08-30 09:36:44 +02:00
doktornotor
97684085de remove routed service, is being handled by the package (RELENG_2_2) 
Same as #1829 for RELENG_2_2. This does not do any good there now.
 2015-08-30 09:31:53 +02:00
Phil Davis
68d6d0b8c0 Handle multiple notices in the same second RELENG_2_2 
Backport of https://github.com/pfsense/pfsense/pull/1823
 2015-08-29 08:08:00 +05:45
Phil Davis
e217faa4f6 Redmine #4925 Fix version comparison for RELENG_2_2 
Backport of https://github.com/pfsense/pfsense/pull/1826
 2015-08-28 19:59:45 +05:45
Phil Davis
d21de65ab4 Protect unset() with isset() for RELENG_2_2 
Backport of https://github.com/pfsense/pfsense/pull/1821 to RELENG_2_2
 2015-08-28 19:50:39 +05:45
jim-p
2061542951 Encode OpenVPN descriptions before display on OpenVPN status 2015-08-27 11:03:10 -04:00
jim-p
d4ff79ed0e Encode the OpenVPN server description before display on OpenVPN status 2015-08-27 10:38:44 -04:00
jim-p
5bf478ac2e Ensure the current RRD graph category is encoded before display 2015-08-27 09:29:40 -04:00
jim-p
05da124c0c Fix handling of the description in the shaper code. 2015-08-24 08:34:09 -04:00
jim-p
609d2870e5 Fix titles in status.php, filename can't have a slash. 2015-08-20 10:02:15 -04:00
jim-p
1b70f82ed8 A few misc updates to status.php: 
* Include "ipsec statusall" output
* Include the last 100 lines of the IPsec log
* Increase system log to 500 lines
* Fix captive portal rule display to include the zone name not ID number
 2015-08-20 09:50:37 -04:00
jim-p
c617ffe7a4 Fix source address selection on Test Port to handle VIPs properly. 2015-08-18 14:12:54 -04:00
jim-p
1ce2e5d253 Fix a potential XSS in voucher testing. 2015-08-18 09:35:56 -04:00
jim-p
d0236c7e88 Properly declare an error when a too-short voucher is submitted. 2015-08-18 09:35:38 -04:00
jim-p
6b20f38ce0 The "enableallowallwan" script should also allow bogons, or it makes running test firewalls with RFC5735/6890 test network style WANs a pain. 2015-08-13 15:38:15 -04:00
jim-p
f6f7f1c244 Add support for LDAP RFC2307 style group membership. Implements #4923 
To activate, check the box for RFC2307 in the LDAP server settings and fill in the group object class (typically posixGroup).
 2015-08-13 14:57:45 -04:00
jim-p
9a0c4cd22f Provide an LDAP server timeout field. Default to 25 seconds. Part of ticket #3383 
Previous default was ~1m20sec.
 2015-08-13 12:54:31 -04:00
jim-p
089938860d Don't lowercase the whole group name 2015-08-12 15:30:43 -04:00
jim-p
709c2f99f1 Fix GUI auth from RADIUS to grab group names from the Class attribute. Implements #935 
The RADIUS server must populate the Class attribute with a string, semicolon-separated, of user groups. Similar to LDAP, local groups must exist with matching names, and privileges are determined by the local matching groups.
 2015-08-12 12:10:46 -04:00
Chris Buechler
24850bca18 only read file if it exists, and only foreach if an array. 2015-08-03 23:13:42 -05:00
Phil Davis
2ab1046837 Allow to create empty bogons on nanoBSD 
If for some reason the bogons file/s do not exist then this code creates
empty ones before making any use of them in the rule set.
On nanoBSD this can fail if the file system is mount RO.
Protect against this possibility by use conf_mount_rw and conf_mount_ro
 2015-08-03 10:18:54 -03:00
jim-p
d3d8d98cbc This is handled above now. 2015-07-30 11:50:47 -04:00
jim-p
0351eef8b0 More safety belts on CP DB open 2015-07-30 11:34:24 -04:00
jim-p
bda867db4d Take more care when attempting to open the CP database. Don't assume it's valid before attempting to use it. 2015-07-30 10:42:46 -04:00
jim-p
2ae65d99d2 Reinitialize the captive portal database for a zone if it is corrupt/unreadable. Fixes #4904 2015-07-30 10:15:08 -04:00
Chris Buechler
97613114b5 remove the destination server's interface(s) from dhcrelay. Ticket #4908 2015-07-30 01:27:41 -05:00
Chris Buechler
fc3e3bdbe0 remove more old, unused platform stuff 2015-07-30 00:49:21 -05:00
Chris Buechler
fcf8ac0ab7 Fix killing of individual states for IPv6. Ticket #4906 2015-07-30 00:37:48 -05:00
Chris Buechler
ffb3d9d53a fix whitespace 2015-07-30 00:28:43 -05:00
Chris Buechler
38e7c09304 Use the appropriate source and dest IPs for all state types. Ticket #4907 2015-07-30 00:16:15 -05:00
Chris Buechler
d3712bdf77 remove old unused nopccard_platforms 2015-07-29 23:10:55 -05:00
Chris Buechler
edd4c038a2 sync rc.firmware_auto with master 2015-07-29 23:02:29 -05:00
jim-p
33697d1857 Check both greater and less than for the configuration version in XMLRPC sync. Fixes #4902 2015-07-29 15:50:17 -04:00
jim-p
7fbe16f798 Use an alternate method to find VIP targets that should be allowed for Captive Portal. Fixes #4903 2015-07-29 14:39:07 -04:00
jim-p
66f278b4c9 Add "sockstat" output to status.php 2015-07-29 11:40:25 -04:00
Renato Botelho
5898371a37 Move cleargpt.sh and cleargmirror.sh scripts to main repo 2015-07-29 11:48:41 -03:00
Phil Davis
6b7ae4af25 Strip any \r when parsing URL table ports file 
If the URL table ports file at the URL specified has lines separated by "\r\n" rather than just "\n", then the code here ends up with ports that look like "80\r" "443\r" ... and group_ports() does not match any of those and the final file ends up empty. That seems a shame just because the file was made in some editor that put "\r\n" line breaks. I messed about for a while trying to make my URL table ports alias work until I realized this.
This change first strips out any "\r" from the string, thus making it work with files that have either pure "\n" line breaks or "\r\n" line breaks.
 2015-07-27 14:54:02 -03:00