Chris Buechler
d526dccfab
Update bogons included in releases before an update
2009-01-16 18:07:33 +00:00
Seth Mos
2c64a07a65
Make sure we match the right SPI to src and dst address, otherwise the purge of the old
...
spi fails.
2009-01-16 08:28:27 +00:00
Seth Mos
bf92bc791d
- Add proper support for using hostnames for the remote IPsec gateway.
...
- Make IPsec reloading granular, this resolves the long standing issue
that a IPsec reload will cause all tunnels to drop.
- Change IPsec edit screen description for remote gateway that a IP
address or hostname is allowed here. We already accepted hostnames
before.
- Add /etc/rc.newipsecdns, when a hostname changes IP we invoke this
script to remove the old tunnel and setup the new one.
2009-01-15 09:00:30 +00:00
Seth Mos
e07ff7c0a5
Fix logic to prevent rule errors when dyndns hostnames do not resolve.
...
Previous Logic did not work
2009-01-15 08:37:35 +00:00
Seth Mos
c806f1bbc8
Replace another route -n get command. These can sometimes hang and cause a filter reload to get stuck.
...
Always use netstat -rn instead, these behave differently and can not hang according to ermal@
2009-01-13 22:08:41 +00:00
Scott Ullrich
fc373d0ecb
Correct status -> service entries for ntpd
...
Based on a patch submitted-by: David Rees <drees76+AT+gmail.com>
2009-01-08 17:21:00 +00:00
Scott Ullrich
f20f6a347c
Version bump to 1.2.2
2009-01-07 06:08:41 +00:00
Scott Ullrich
b2226647a8
Fix pptp dial on demand and idle timeout wizard fields which have
...
NEVER worked correctly to begin with. Oops.
2009-01-06 22:14:08 +00:00
Scott Ullrich
6f45526026
Oops, use pptp fields
2009-01-06 04:18:13 +00:00
Scott Ullrich
669941468f
Savew timeout and dial on demand
2009-01-06 03:38:34 +00:00
Scott Ullrich
952e41c219
Unbreak wizard
2009-01-05 22:46:28 +00:00
Scott Ullrich
37c994237e
Include IPSEC reload patch from Seth Mos which was tested on his work
...
IPSEC cluster.
2009-01-05 20:58:31 +00:00
Chris Buechler
f311ff6168
remove unused function
2009-01-04 21:27:32 +00:00
Chris Buechler
638adc34cc
setup bridge(s) after destroying
2009-01-04 21:26:04 +00:00
Chris Buechler
1dd452d633
setup bridge(s) after destroying
2009-01-04 21:13:06 +00:00
Chris Buechler
233232e13e
Rewrite bridge creation code to handle all scenarios correctly. Fixes numerous bridge bugs where more than two interfaces are bridged, and works correctly for all scenarios.
2009-01-04 21:12:42 +00:00
Chris Buechler
d6598c9819
un-break SVG graphs on non-Firefox browsers
2008-12-28 20:43:43 +00:00
Scott Ullrich
102dd75abe
Set version to 1.2.1
2008-12-24 01:26:40 +00:00
Chris Buechler
8b1b0f2387
fix reboot link
...
ticket #1858
2008-12-23 02:19:21 +00:00
Scott Ullrich
df367a38e3
Use file_get_contents()
2008-12-20 22:46:26 +00:00
Scott Ullrich
9a706a57ba
* Use file_get_contents()
...
* Use str_replace()
* Use correct variables
2008-12-20 22:09:14 +00:00
Scott Ullrich
d92375afa5
Use mwexec_bg()
2008-12-20 20:25:26 +00:00
Scott Ullrich
57e6730a28
Bump to 1.2.1-RC4. A couple of late FTP fixes have snuck in that
...
warrants yet another RC.
2008-12-15 20:57:39 +00:00
Scott Ullrich
cad40f607c
Write out all commands that should be run after filter load instead
...
of requiring the command to be run 5+ times for certain scenarios.
Fix sponsored by BSD Perimeter
2008-12-15 17:43:12 +00:00
Scott Ullrich
ef97a399ee
Back out "Rules have not changed. Not reloading" changes.
2008-12-15 17:41:01 +00:00
Scott Ullrich
866ea67edc
Remove extra "
2008-12-15 03:35:33 +00:00
Scott Ullrich
89c83ade88
Add missing product_ items. product_website is used on the system
...
firmware settings page.
2008-12-15 03:34:09 +00:00
Scott Ullrich
a281f09f71
Correct openntpd binary name
2008-12-15 02:57:56 +00:00
Scott Ullrich
ff4af76e16
Start building 1.2.1-RC3
2008-12-13 00:08:47 +00:00
Scott Ullrich
01da85f5ff
Do not allow \ in fieldnames.
2008-12-12 18:20:42 +00:00
Scott Ullrich
5a2993ac6b
Remove debugging alert()
2008-12-11 17:17:04 +00:00
Scott Ullrich
7ecf4fddc0
Fix setup wizard wan type selection box now that bigpond has been axed.
2008-12-11 17:10:05 +00:00
Scott Ullrich
90a277634a
Replace route get default with netstat -rn|awk '/default/ {print $2}' which
...
cannot block according to ermal because it uses libkvm
2008-12-10 20:59:50 +00:00
Scott Ullrich
72fd166e6f
Do not show starting pflog0
2008-12-10 19:49:00 +00:00
Scott Ullrich
56b79a8d17
* Reset filter reload status to Done if rules are the same
...
* Add a note that the rules are not the same and that the filter will
not be reloaded to the system logs
2008-12-08 20:56:50 +00:00
Chris Buechler
2f6f9dc381
fix CARP panics with VLANs
2008-12-08 02:31:36 +00:00
Scott Ullrich
839de3f1dc
Check to make sure file exists before operating on it.
2008-12-08 01:22:49 +00:00
Chris Buechler
caecf12dde
default to DHCP as intended (previous removal of bigpond shifted this)
2008-12-08 01:13:48 +00:00
Chris Buechler
732b65ef8b
Don't use broadcast on CARP IPs.
2008-12-08 00:10:47 +00:00
Chris Buechler
a7ab102053
Don't add CARP IPs on an interface that doesn't exist to prevent panic.
2008-12-07 23:41:20 +00:00
Chris Buechler
e58e7965a2
log mwexec if developerspew is on
2008-12-07 23:33:16 +00:00
Scott Ullrich
1372ae55f9
Compare rules.debug to previously loaded rules. If no rule changes
...
have occured, do not try to reload the rules and sync changes to backup
members which can result in the rules being reloaded constantly when
load balancing is in use, etc.
2008-12-07 20:13:07 +00:00
Scott Ullrich
793df875fc
Add openntpd
2008-12-05 21:33:58 +00:00
Chris Buechler
e59771e7f9
remove "enable filtering bridge" checkbox, it has been ignored for months. don't entirely remove at this time as there is information all over the place that references it.
2008-11-30 04:38:58 +00:00
Chris Buechler
1cb313037f
show reject rules as reject rules.
2008-11-30 03:49:58 +00:00
Chris Buechler
7c7fc6a269
return works fine with any firewall rule. it doesn't return anything for protos other than TCP, UDP, or TCP/UDP, but is valid in all rules. never exclude it.
2008-11-30 03:49:33 +00:00
Chris Buechler
e5a4a0a5ef
fix "no state" rules
2008-11-30 01:13:00 +00:00
Chris Buechler
1586d7780c
correct description on block bogon rule
2008-11-30 00:54:48 +00:00
Chris Buechler
e1001deea2
change default to enable block bogons
2008-11-30 00:02:27 +00:00
Scott Ullrich
4ee96f9080
Remove 2.0ism
2008-11-27 00:24:09 +00:00
