Scott Ullrich
|
ea951e6f27
|
Correct is_array() check.
Make sure all 3 branches are the same.
Suggested-by: Bill M
|
2007-04-21 23:41:32 +00:00 |
|
Scott Ullrich
|
a9ec14c2c4
|
Correct is_array() check.
Suggested-by: Bill M
|
2007-04-21 23:39:12 +00:00 |
|
Scott Ullrich
|
130ccec2cc
|
Use skipto type ipfw rules so that the pass type rules will not bail out of the ipfw ruleset and keep processing at the next rule.
|
2007-04-21 23:22:19 +00:00 |
|
Scott Ullrich
|
c24f40082c
|
Fix another major bug in time based rules. When a * * * rule is in affect on the wan interface we where killing outgoing traffic from the firewall itself.
|
2007-04-21 23:05:13 +00:00 |
|
Scott Ullrich
|
6f727b3bcf
|
Fix a major time based rule bug. We need to match packets *INCOMING* to the interface similar to how pf works.
|
2007-04-21 22:53:54 +00:00 |
|
Scott Ullrich
|
a1a9ce875c
|
Debug out when a lock recursion issue is present. This might expose some missing unlocks and lead to performance speedups.
|
2007-04-21 22:49:09 +00:00 |
|
Scott Ullrich
|
54aa1a51a2
|
Set tcsh autologout to 0
|
2007-04-21 21:28:18 +00:00 |
|
Scott Ullrich
|
01c0ece67b
|
Use the correct array path to deterimine if a false entry exists.
|
2007-04-21 21:15:49 +00:00 |
|
Scott Ullrich
|
4e5057071f
|
Only check for server or client respectively instead of checking for both. Otherwise if a operator is only running server or client openvpn entries we do not show the configuration.
|
2007-04-21 20:44:45 +00:00 |
|
Scott Ullrich
|
568d818cc3
|
Correct the copy() logic
|
2007-04-21 20:09:23 +00:00 |
|
Scott Ullrich
|
e3461aa1d0
|
* Use copy instead of system()
* Lock the configuration before doing this operation
* Unlink config.cache if it exists
* Send the image to RO after this operation
|
2007-04-21 20:08:13 +00:00 |
|
Scott Ullrich
|
d75c7f7e74
|
xmlparse now returns -1 when a file is corrupt. Detect this situation during parse_config() and trigger a backup. Note to the user this occurance.
|
2007-04-21 20:02:57 +00:00 |
|
Scott Ullrich
|
d09d9e45be
|
xmlparse now returns -1 when a file is corrupt. Detect this situatioon and notify the user that we are unlinking the file.
|
2007-04-21 19:58:24 +00:00 |
|
Scott Ullrich
|
1d5a6e182e
|
When we iterate through the backup cache we call out to parse the configuration file.
This can be fatal if the xml contents is corrupted and the process will die out. Instead of dieing, return -1 and let the process continue since we have further logic to detect these issues and restore a previous configuration, etc.
|
2007-04-21 19:53:08 +00:00 |
|
Scott Ullrich
|
98e9940a72
|
Do correct locking when cleaning the backup cache
|
2007-04-21 19:42:58 +00:00 |
|
Scott Ullrich
|
e2846808a7
|
We really need to lock the configuration when outputting the config.cache
|
2007-04-21 19:38:55 +00:00 |
|
Scott Ullrich
|
9936b4fe7b
|
We should anti spoof on the wan interface as well.
|
2007-04-21 19:07:10 +00:00 |
|
Scott Ullrich
|
a4cf412bc2
|
Snapshot 1.2-BETA-1. We need to get a new version out for testing before 1.2-BETA-1.
|
2007-04-21 17:49:48 +00:00 |
|
Scott Ullrich
|
172e3474e2
|
Block traffic from source port 0 or destination port 0. Some crafty folks try to evade packet filters by using this type of trickery.
See http://www.securityfocus.com/archive/75/402099/30/0/threaded for more information.
|
2007-04-20 20:39:17 +00:00 |
|
Scott Ullrich
|
38e5cd1e01
|
Note that we use the username admin when syncing in the error messages
|
2007-04-19 21:08:13 +00:00 |
|
Scott Ullrich
|
a67fed0d9a
|
Correctly define the state timeout value.
|
2007-04-19 16:39:16 +00:00 |
|
Scott Ullrich
|
3e8942166a
|
Silence ftp proxy debugging statements for 1.2.
|
2007-04-18 22:32:48 +00:00 |
|
Scott Ullrich
|
5dc2f2ba3d
|
Silence setting up route log error
|
2007-04-18 22:29:12 +00:00 |
|
Scott Ullrich
|
ac98c6f49f
|
Woops, we need to show this error.
Reminded-by: Seth
|
2007-04-18 22:25:07 +00:00 |
|
Scott Ullrich
|
8a4b82cd14
|
Do not output TDR debug information to system logs
|
2007-04-18 22:22:59 +00:00 |
|
Scott Ullrich
|
a4e0f7515e
|
Load balancing seems to be fairly stable. Stop outputting so much debug information to the system logs.
|
2007-04-18 22:22:07 +00:00 |
|
Scott Ullrich
|
a72c07bcd4
|
Do not echo out extra text when reloading the filter rules and correctly detect pftpx already started.
|
2007-04-18 21:31:01 +00:00 |
|
Scott Ullrich
|
56dfb51e6c
|
Remove trailing space
|
2007-04-18 20:04:54 +00:00 |
|
Scott Ullrich
|
d57e19dce5
|
Do not carriage return in the middle of a shell command
|
2007-04-18 19:49:59 +00:00 |
|
Scott Ullrich
|
4e3cb6c616
|
MFC 17445
Don't round-robin on failover lb pools
|
2007-04-18 19:29:05 +00:00 |
|
Scott Ullrich
|
d6240d7fd9
|
Turn off hard drive write caching correctly
|
2007-04-17 21:26:06 +00:00 |
|
Scott Ullrich
|
2f17ee8602
|
hw.ata.wc is a read-only /boot/loader.conf value. Remove.
|
2007-04-17 18:11:05 +00:00 |
|
Scott Ullrich
|
d48ccbcd65
|
Correctly note the filter configure item when removing the schedule feature from cron
|
2007-04-16 23:09:24 +00:00 |
|
Scott Ullrich
|
2c57ec50fd
|
Add xml sync schedules option
|
2007-04-15 19:37:50 +00:00 |
|
Scott Ullrich
|
8476b3b371
|
Remove stray ;
|
2007-04-15 17:59:36 +00:00 |
|
Scott Ullrich
|
89f10d655f
|
Uncomment pass rule logic. Fixes a problem report from the forum.
Reminded-by: Holger
|
2007-04-14 22:37:05 +00:00 |
|
Scott Ullrich
|
e9f661b98c
|
Add some text breaks.
|
2007-04-14 22:28:28 +00:00 |
|
Scott Ullrich
|
099ab77e90
|
Remove <br/> from schedule strong note.
|
2007-04-14 22:25:16 +00:00 |
|
Scott Ullrich
|
7206776214
|
Wrap text in <pre></pre>
|
2007-04-14 22:23:20 +00:00 |
|
Scott Ullrich
|
7f7ad5015c
|
Add a note about firewall rule schedule logic that will pop up in a new window describing how pass rules work when they are outside of the schedule window, etc.
|
2007-04-14 22:08:49 +00:00 |
|
Scott Ullrich
|
752d210b74
|
Disable ATA write caching which should help with loosing configuration on invalid power off events.
|
2007-04-13 20:50:54 +00:00 |
|
Scott Ullrich
|
5472fbdb68
|
Hide "ipfw2 (+ipv6) initialized, divert loadable, rule-based forwarding enabled, default to accept, logging disabled" while enabling time based rules
Noticed-by: Ryan Wagoner
|
2007-04-11 17:02:45 +00:00 |
|
Scott Ullrich
|
4df064d425
|
Check for array type before foreach()
Reminded-by: Ryan Wagoner/Seth Mos
|
2007-04-11 16:59:49 +00:00 |
|
Scott Ullrich
|
228ac08763
|
Remove time based rule debugging statements.
Reminded-by: Ryan Wagoner
|
2007-04-11 16:57:27 +00:00 |
|
Scott Ullrich
|
96a3393381
|
Do not sort dns server list.
Reported-by: Goffredo Andreone
|
2007-04-11 16:54:04 +00:00 |
|
Scott Ullrich
|
7dddd075be
|
If we cannot deterimine interrupts a second for an interface, do not recycle last known values.
|
2007-04-10 18:04:54 +00:00 |
|
Scott Ullrich
|
2fb4c391ec
|
Do not show blank openvpn configuration items.
|
2007-04-10 17:19:48 +00:00 |
|
Scott Ullrich
|
5f7bb7970b
|
Do not show blank openvpn configuration items.
|
2007-04-10 17:19:42 +00:00 |
|
Scott Ullrich
|
afd0cbb47f
|
Set RELENG_1 version to 1.3. 1.2 will be released form RELENG_1_2.
|
2007-04-09 17:03:16 +00:00 |
|
Scott Ullrich
|
84dd057a55
|
Time for 1.2-BETA-1
|
2007-04-09 00:48:02 +00:00 |
|