mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity
22,672 Commits 27 Branches 53 Tags 494 MiB
d460371416
Commit Graph

22672 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Francois Blanchette
d460371416 Replaced gethostbyname() with gethostbynamel() to get a list of all IPs associated with the dns name and add them to the allowed list 2014-02-07 15:11:58 -05:00
jim-p
59c6e2181f Add specific permission for easyrule. 2014-02-07 11:56:38 -05:00
jim-p
9143aaf4e6 Remove this sort. It's unnecessary and causes problems when editing and saving privileges, it can reorder users and cause edits to the wrong account. 2014-02-07 11:47:18 -05:00
Chris Buechler
eb83317a1b s/http/https/ for doc.pfsense.org 2014-02-07 08:55:50 -06:00
Renato Botelho
e5b5e29c3b Add support for signed PBI, help ticket #3365: 
- Add an option to allow user to accept unsigned packages
- The only missing part is public key, that needs to be added to
/var/db/pbi/keys/pfSense.ssl
 2014-02-07 10:41:41 -02:00
Ermal Luçi
db58ccd0f3 Merge pull request #902 from phil-davis/master 
Standardise LAN net display
 2014-02-07 12:06:41 +01:00
Phil Davis
447ad2f5e4 Standardise LAN net display 2014-02-07 02:03:27 -08:00
Phil Davis
33b1bc177b Standardise LAN net display 2014-02-07 01:58:35 -08:00
Phil Davis
04d270fefd Standardise LAN net display 
On the main firewall rules multi-rule display it shows "LAN net" "WAN net" etc. But on the edit screen it shows "LAN subnet" "WAN subnet" etc. Make the edit screen have the same text as the main screen - this has ben a source of enough little questions/queries on the forum.
 2014-02-07 01:54:21 -08:00
jim-p
d292bd8d60 Fix test, allows restoring last backup in the list. Fixes #3438 2014-02-06 14:02:03 -05:00
Renato Botelho
7b5a22ab0e Remove PBI scripts since it'll be installed dynamically by tools 2014-02-06 10:37:26 -02:00
Ermal
496acde137 First swing at converting from racoon to StrongSWAN. 
It allows to use existing configurations on xml to generate StrongSWAN configurations.
So its only IKEv1

* Missing support for dynamic ips(hostnames)
  - resolver plugin of StrongSWAN needs to be configured in strongswan.conf
* Authentication plugin with pfSense authentication framework
  - New plugin almost completed

* More testing hence this being pushed now to have more broader look

TODO
* Integrate IKEv2
* Move dynamic IP allocation to an SQLite backend
* Provide more options in authenticating as a client(initiator)
* Restrict interfaces where StrongSWAN listens for incoming connections to only those configured

FUTUTE
* Move all configuration to SQLite backend
* Integrate more authentication scenarios of IKEv2
 2014-02-06 12:49:24 +01:00
Renato Botelho
b3e1ccb5b8 escapeshellarg() is not required here 2014-02-05 12:29:53 -02:00
Warren Baker
5293c5c71a Teach php-fpm about our required environment path 2014-02-05 15:58:07 +02:00
Renato Botelho
275f4b5ad4 Revert "Set PATH before call pbi related binaries" 
This was pushed by mistake

This reverts commit 4c9bda43f5.
 2014-02-05 11:50:46 -02:00
Renato Botelho
3820702948 Silent recently added symlink() calls 2014-02-04 18:32:20 -02:00
Renato Botelho
7b27b18bef Fix some wrong escapeshellarg() calls 2014-02-04 18:14:41 -02:00
Renato Botelho
7b7ad7f62f Simplify logic calling grep less times, as done on mail_reports.inc on 2c6efc9 2014-02-04 17:06:43 -02:00
Renato Botelho
552f5a6a5f Use unlink_if_exists or @unlink to avoid PHP errors when file doesn't exist 2014-02-04 17:01:20 -02:00
Ermal Luçi
2517148eea Merge pull request #900 from Klaws--/patch-1 
Added previously missing DSCP VA (requires kernel patch patch submitted ...
 2014-02-04 10:08:25 -08:00
Renato Botelho
d31ca3363d Add escapeshellarg() calls on exec parameters. While I'm here, replace some exec() calls by php functions like symlink, copy, unlink, mkdir 2014-02-04 12:34:42 -02:00
Renato Botelho
39ed87e54d Fix an obvious typo on var name 2014-02-04 12:34:42 -02:00
Renato Botelho
873c1701a8 Add escapeshellarg() calls on exec parameters. While I'm here, replace some exec() calls by php functions like symlink, copy, unlink, mkdir 2014-02-04 12:34:41 -02:00
Renato Botelho
4f188f54ab Use php function to get hostname instead of exec() 2014-02-04 12:34:41 -02:00
Renato Botelho
1d9b51c6b0 Add path for sysctl, also use -n param instead of awk 2014-02-04 12:34:41 -02:00
Renato Botelho
306f855610 Simplify logic 2014-02-04 12:34:41 -02:00
Renato Botelho
f177717459 Use php function to get hostname instead of exec() 2014-02-04 12:34:41 -02:00
Renato Botelho
8340d95653 Add {} between variables inside quotes 2014-02-04 12:34:41 -02:00
Renato Botelho
e6867c81d1 Use php function to get hostname instead of exec() 2014-02-04 12:34:41 -02:00
Renato Botelho
3f4bd83b5a Add {} between variables inside quotes 2014-02-04 12:34:41 -02:00
Renato Botelho
4c9bda43f5 Set PATH before call pbi related binaries 2014-02-04 12:34:41 -02:00
Klaws--
28c49959ac Added previously missing DSCP VA (requires kernel patch patch submitted by me) 2014-02-04 14:30:53 +01:00
jim-p
ca79de534b Using "limited" for ntp in this way denies client access. Issue #3384 2014-02-03 09:34:06 -05:00
Warren Baker
be9f77941d Add link to Unbound under the menu item name of 'DNS Resolver' 2014-01-31 18:23:36 +02:00
Renato Botelho
f747c08ca5 Sync pbi_create with pcbsd, add required functions.sh 2014-01-30 15:46:13 -02:00
Renato Botelho
03734bf71e Remove arch from fall back url since it's a single dir now 2014-01-30 15:46:13 -02:00
Warren Baker
e2ffc9d35e Dig is no longer available, drill is now the tool 2014-01-30 12:06:48 +02:00
Warren Baker
327a4fc65f Make sure unbound starts 2014-01-30 12:03:20 +02:00
Warren Baker
8e552911a4 Some grammer fixes spotted by Phil Davis 2014-01-30 09:10:59 +02:00
Warren Baker
8fccab671f Make sure ACLs are saved correctly 2014-01-29 21:51:33 +02:00
Warren Baker
519597bcb1 Reference right service reconfig function 2014-01-29 21:08:37 +02:00
Warren Baker
1319d0f3f3 Add new xml array 2014-01-29 21:08:21 +02:00
Warren Baker
9961044ab5 More html formatting 2014-01-29 20:49:40 +02:00
Warren Baker
06b17388f8 Formatting 2014-01-29 20:42:01 +02:00
Warren Baker
13ecf949df Table summary fix 2014-01-29 20:41:53 +02:00
Warren Baker
7d8c57cdb1 Rename ACL file 2014-01-29 20:23:25 +02:00
Warren Baker
56a87b19c0 Add additional functionality for stats and preconfigure variables 2014-01-29 17:07:13 +02:00
Warren Baker
3b95d9ece3 Add EDNS support for to resolv.conf 2014-01-29 17:06:42 +02:00
Warren Baker
7ed0e844a6 Add GUI components for Unbound 2014-01-29 17:06:14 +02:00
Warren Baker
923e49b1ce Start and configure Unbound on boot 2014-01-29 13:29:46 +02:00