jim-p
342f509028
Use interface-automatic for Unbound when the interfaces list is empty (same as All) otherwise it breaks with a default CARP config.
2015-06-26 09:45:19 -04:00
Renato Botelho
0828f970a8
Bump version to 2.2.4-DEVELOPMENT
2015-06-25 08:10:21 -03:00
Renato Botelho
9cbb7fe4f3
It's time for 2.2.3-RELEASE
2015-06-23 18:29:56 -03:00
Matt Smith
821c6ff761
Add D1540-XG.
2015-06-23 14:28:11 -05:00
Renato Botelho
91bbf1209a
Introduce Netgate RCC-DFF to the list of known platforms
2015-06-23 15:35:09 -03:00
Renato Botelho
2f898d6a1c
rereadall is not enough here, restore reload call to make sure everything works. Ticket #4785
2015-06-23 14:31:32 -03:00
Renato Botelho
8961801d83
Replace ipsec rereadsecrets + reload by single rereadall, that will re-read also cert changes. Ticket #4785
2015-06-23 14:15:49 -03:00
Renato Botelho
a241d6b53a
Instead of sending USR1, just call ipsec reload. And before it, call ipsec rereadsecrets to make sure new secretes are updated. It should fix #4785
2015-06-23 14:12:39 -03:00
Renato Botelho
bc7748f76c
Partially revert 019ee2bc8c, this workaround is not necessary. Real fix will be committed after this
2015-06-23 14:12:36 -03:00
Renato Botelho
29c9e14002
Add a workaround for ticket #4785 :
...
There was a regression on strongswan between 5.3.0 and 5.3.2 as reported
at [1]. To workaround this issue, add an extra line on ipsec.secrets
with right fqdn.
2015-06-23 09:59:46 -03:00
Chris Buechler
c598160a4a
Fix var name typo in shaper.inc
2015-06-23 01:48:03 -05:00
Chris Buechler
5e1ff56413
Don't delete /var/tmp/, that was originally done to clear session data at boot, but no longer applicable as session data is no longer in /var/tmp/. Credit to 'aa' on opnsense forum.
2015-06-22 21:27:28 -05:00
Chris Buechler
fe96d7252c
Use $myid in ipsec.secrets. Ticket #4785
2015-06-22 19:42:16 -05:00
Chris Buechler
b731689365
This is incomplete. Leaving for 2.3. Revert "Ticket #4683 merge in brainpool for DH parameters"
...
This reverts commit 7dc35024af
2015-06-22 13:34:16 -05:00
Chris Buechler
887093c309
Specify $myid rather than %any here, otherwise user manager and mobile PSKs won't match. Ticket #4781
2015-06-21 16:00:23 -05:00
Renato Botelho
10a1c51d87
Obsolete pt_BR.ISO-88591 in favor of UTF-8
2015-06-19 15:33:32 -03:00
Renato Botelho
a3918e5999
Move pt_BR translation from ISO to UTF-8
2015-06-19 15:31:50 -03:00
Ermal LUÇI
fabb4b0321
Ticket #4746 Correctly set global variables to be used by hostnames cod epaths
2015-06-19 17:33:19 +02:00
Ermal LUÇI
7dc35024af
Ticket #4683 merge in brainpool for DH parameters
2015-06-19 12:47:18 +02:00
jim-p
9e8ce1e25b
Add a GUI field to increase the pf frag entries limit. Fixes ticket #4775
2015-06-18 09:30:10 -04:00
Chris Buechler
f6a4fe06f9
chmod +x hostid
2015-06-18 00:26:14 -05:00
jim-p
2e0397e05b
Blacklist invalid "from" sources since they can be picked up accidentally and cause rule errors. Fixes #4772
2015-06-17 15:32:11 -04:00
jim-p
f128ee2224
Remove load_balancer_relay_* -- They are not used, not linked, not functional, not maintained, and have potential security issues.
2015-06-16 13:41:12 -04:00
Ermal LUÇI
4d474c094f
Remove the GUI for the pc-sysinstaller as well and add it to obsoletee files
2015-06-15 16:50:16 +02:00
Ermal LUÇI
4b03b90609
Add hostid script in the source to solve the issue with platforms that do not have proper uuid or duplicate uuid which breaks carp/pfsync and other things in HA setup.
2015-06-12 18:11:58 +02:00
Ermal LUÇI
2e7ea1074a
Make the host uuid opt-out
2015-06-11 03:46:48 +02:00
Chris Buechler
894d01b6f4
Revert "Ticket #4442 Do not process URL aliases during bootup but trigger it just after finished booting. This completely solves the bootup delays without lowering the timeout as before. Probably need to increase a bit the timeouts now to be friendly to other connections"
...
This reverts commit 0d44aca646
2015-06-10 20:14:28 -04:00
Ermal LUÇI
9c189bee28
Send the machine uuid with the headers requesting the version file
2015-06-10 20:11:39 +02:00
Ermal LUÇI
fb36bccf12
Send the host uuid with the request for package
2015-06-10 20:02:42 +02:00
Ermal LUÇI
8b8a463054
Fixes #4537 On 32bit platform do not enable direct dispatch on IPsec since it crashes the system
2015-06-10 19:44:54 +02:00
Ermal LUÇI
2895e60696
No need to do the same exercise twice.
2015-06-09 02:37:02 +02:00
Ermal LUÇI
8da92d29ab
Do not disable APc here
2015-06-09 02:31:45 +02:00
Ermal LUÇI
3ab88f32be
Restore the file system in R/W mode during most of rc script seems required on nano. Should unbreak nanobsd
2015-06-09 02:30:50 +02:00
Ermal LUÇI
ad1e7a8cd9
Add a space to the script to avoid that appended parameters seem the same as existing one
2015-06-09 01:36:06 +02:00
jim-p
3386101487
Use skel as the source of new user files rather than copying from root.
...
Reported-By: https://twitter.com/fitchitis/status/607850849172373504
2015-06-08 08:24:59 -04:00
Ermal LUÇI
0d44aca646
Ticket #4442 Do not process URL aliases during bootup but trigger it just after finished booting. This completely solves the bootup delays without lowering the timeout as before. Probably need to increase a bit the timeouts now to be friendly to other connections
2015-06-07 23:35:20 +02:00
Ermal LUÇI
8c9216d5f2
Fixes #4651 use proper var name on global to have the correct id put on the rule
2015-06-07 20:53:50 +02:00
jim-p
a0be396eb1
Fix CARP plugin call for packages, interface was coming through as NULL during CARP events.
2015-06-05 11:55:41 -04:00
jim-p
b4aac247ac
Add INIT event for CARP as an alternate for 'backup', otherwise scripts would not take down services during a MASTER->INIT transition.
2015-06-05 11:55:09 -04:00
Phil Davis
dc6695c3f4
Setup Wizard can result in invalid LAN DHCP pool calculation
...
1) consider where the LAN IP is in the subnet range and then put the
DHCP pool in the biggest remaining segment, either above or below.
2) Check the size of the available segment. If it is reasonably big then
leave some space at either end of the segment, like the old code was
doing. Otherwise give all the space to the pool.
3) Do not allow subnet mask 32 - I can't think of a use case for LAN to
have a /32 subnet mask, it kind of breaks the whole concept of LAN.
4) Provide more detailed separate messages if the user tries to use the
network address or broadcast address as the LAN IP.
2015-06-04 17:08:11 -03:00
Chris Buechler
eefd77734b
A number of things block waiting for file download timeouts, sometimes multiple times across multiple files (many URL Table aliases, for instance). The long timeout causes very long boot times (10-20+ minutes) on many configs with pfblocker if booted disconnected from the Internet. This is strictly the timeout for the HTTP/HTTPS connection attempt. Once connected, it can run past that. 5 seconds should be more than enough for any properly-functioning network. Part of Ticket #4442 .
2015-06-03 00:57:24 -05:00
Chris Buechler
7112bcc8ea
device_type isn't used here
2015-06-02 23:36:56 -05:00
Chris Buechler
dbd919ecd5
Don't call growl if the configured address isn't an IP or resolvable
...
hostname. Avoids 1 minute timeout delay in fsockopen in growl.class. Cuts
that down to about a 20 second timeout. Ticket #4739
2015-06-02 19:30:38 -05:00
Chris Buechler
f135a01087
trigger a reboot after restoration of full backup. Ticket #4107
2015-06-02 11:56:21 -05:00
Renato Botelho
8c288bce6d
Deprecate /usr/local/bin/3gstat
2015-06-02 10:12:34 -03:00
Chris Buechler
729f899f4b
Use CARP IPs that are configured. Ticket #4370
2015-06-02 01:06:04 -05:00
Chris Buechler
f877f77fdd
set the serial port appropriately for RCC-VE platforms. sync from factory
...
repo. Ticket #4720
2015-06-01 17:45:15 -05:00
Chris Buechler
e6807c5ae0
Return IP correctly in get_interface_ip for gateway groups specifying a
...
VIP. Ticket #4661
2015-06-01 17:36:34 -05:00
Renato Botelho
3e8ee192b4
Use 'host!' flag when setting CURLOPT_INTERFACE, as recommended by CURL docs
2015-06-01 13:53:03 -03:00
Renato Botelho
4486b75178
Pass interface to CURLOPT_INTERFACE instead of IP addres, also use 'if!' flag to avoid CURL trying to resolve the interface name
2015-06-01 13:52:35 -03:00
