Commit Graph

7769 Commits

Author SHA1 Message Date
Scott Ullrich
ea951e6f27 Correct is_array() check. Make sure all 3 branches are the same. Suggested-by: Bill M 2007-04-21 23:41:32 +00:00
Scott Ullrich
a9ec14c2c4 Correct is_array() check. Suggested-by: Bill M 2007-04-21 23:39:12 +00:00
Scott Ullrich
130ccec2cc Use skipto type ipfw rules so that the pass type rules will not bail out of the ipfw ruleset and keep processing at the next rule. 2007-04-21 23:22:19 +00:00
Scott Ullrich
c24f40082c Fix another major bug in time based rules. When a * * * rule is in affect on the wan interface we where killing outgoing traffic from the firewall itself. 2007-04-21 23:05:13 +00:00
Scott Ullrich
6f727b3bcf Fix a major time based rule bug. We need to match packets *INCOMING* to the interface similar to how pf works. 2007-04-21 22:53:54 +00:00
Scott Ullrich
a1a9ce875c Debug out when a lock recursion issue is present. This might expose some missing unlocks and lead to performance speedups. 2007-04-21 22:49:09 +00:00
Scott Ullrich
54aa1a51a2 Set tcsh autologout to 0 2007-04-21 21:28:18 +00:00
Scott Ullrich
01c0ece67b Use the correct array path to deterimine if a false entry exists. 2007-04-21 21:15:49 +00:00
Scott Ullrich
4e5057071f Only check for server or client respectively instead of checking for both. Otherwise if a operator is only running server or client openvpn entries we do not show the configuration. 2007-04-21 20:44:45 +00:00
Scott Ullrich
568d818cc3 Correct the copy() logic 2007-04-21 20:09:23 +00:00
Scott Ullrich
e3461aa1d0 * Use copy instead of system() * Lock the configuration before doing this operation * Unlink config.cache if it exists * Send the image to RO after this operation 2007-04-21 20:08:13 +00:00
Scott Ullrich
d75c7f7e74 xmlparse now returns -1 when a file is corrupt. Detect this situation during parse_config() and trigger a backup. Note to the user this occurance. 2007-04-21 20:02:57 +00:00
Scott Ullrich
d09d9e45be xmlparse now returns -1 when a file is corrupt. Detect this situatioon and notify the user that we are unlinking the file. 2007-04-21 19:58:24 +00:00
Scott Ullrich
1d5a6e182e When we iterate through the backup cache we call out to parse the configuration file. This can be fatal if the xml contents is corrupted and the process will die out. Instead of dieing, return -1 and let the process continue since we have further logic to detect these issues and restore a previous configuration, etc. 2007-04-21 19:53:08 +00:00
Scott Ullrich
98e9940a72 Do correct locking when cleaning the backup cache 2007-04-21 19:42:58 +00:00
Scott Ullrich
e2846808a7 We really need to lock the configuration when outputting the config.cache 2007-04-21 19:38:55 +00:00
Scott Ullrich
9936b4fe7b We should anti spoof on the wan interface as well. 2007-04-21 19:07:10 +00:00
Scott Ullrich
a4cf412bc2 Snapshot 1.2-BETA-1. We need to get a new version out for testing before 1.2-BETA-1. 2007-04-21 17:49:48 +00:00
Scott Ullrich
172e3474e2 Block traffic from source port 0 or destination port 0. Some crafty folks try to evade packet filters by using this type of trickery. See http://www.securityfocus.com/archive/75/402099/30/0/threaded for more information. 2007-04-20 20:39:17 +00:00
Scott Ullrich
38e5cd1e01 Note that we use the username admin when syncing in the error messages 2007-04-19 21:08:13 +00:00
Scott Ullrich
a67fed0d9a Correctly define the state timeout value. 2007-04-19 16:39:16 +00:00
Scott Ullrich
3e8942166a Silence ftp proxy debugging statements for 1.2. 2007-04-18 22:32:48 +00:00
Scott Ullrich
5dc2f2ba3d Silence setting up route log error 2007-04-18 22:29:12 +00:00
Scott Ullrich
ac98c6f49f Woops, we need to show this error. Reminded-by: Seth 2007-04-18 22:25:07 +00:00
Scott Ullrich
8a4b82cd14 Do not output TDR debug information to system logs 2007-04-18 22:22:59 +00:00
Scott Ullrich
a4e0f7515e Load balancing seems to be fairly stable. Stop outputting so much debug information to the system logs. 2007-04-18 22:22:07 +00:00
Scott Ullrich
a72c07bcd4 Do not echo out extra text when reloading the filter rules and correctly detect pftpx already started. 2007-04-18 21:31:01 +00:00
Scott Ullrich
56dfb51e6c Remove trailing space 2007-04-18 20:04:54 +00:00
Scott Ullrich
d57e19dce5 Do not carriage return in the middle of a shell command 2007-04-18 19:49:59 +00:00
Scott Ullrich
4e3cb6c616 MFC 17445
Don't round-robin on failover lb pools
2007-04-18 19:29:05 +00:00
Scott Ullrich
d6240d7fd9 Turn off hard drive write caching correctly 2007-04-17 21:26:06 +00:00
Scott Ullrich
2f17ee8602 hw.ata.wc is a read-only /boot/loader.conf value. Remove. 2007-04-17 18:11:05 +00:00
Scott Ullrich
d48ccbcd65 Correctly note the filter configure item when removing the schedule feature from cron 2007-04-16 23:09:24 +00:00
Scott Ullrich
2c57ec50fd Add xml sync schedules option 2007-04-15 19:37:50 +00:00
Scott Ullrich
8476b3b371 Remove stray ; 2007-04-15 17:59:36 +00:00
Scott Ullrich
89f10d655f Uncomment pass rule logic. Fixes a problem report from the forum. Reminded-by: Holger 2007-04-14 22:37:05 +00:00
Scott Ullrich
e9f661b98c Add some text breaks. 2007-04-14 22:28:28 +00:00
Scott Ullrich
099ab77e90 Remove <br/> from schedule strong note. 2007-04-14 22:25:16 +00:00
Scott Ullrich
7206776214 Wrap text in <pre></pre> 2007-04-14 22:23:20 +00:00
Scott Ullrich
7f7ad5015c Add a note about firewall rule schedule logic that will pop up in a new window describing how pass rules work when they are outside of the schedule window, etc. 2007-04-14 22:08:49 +00:00
Scott Ullrich
752d210b74 Disable ATA write caching which should help with loosing configuration on invalid power off events. 2007-04-13 20:50:54 +00:00
Scott Ullrich
5472fbdb68 Hide "ipfw2 (+ipv6) initialized, divert loadable, rule-based forwarding enabled, default to accept, logging disabled" while enabling time based rules
Noticed-by: Ryan Wagoner
2007-04-11 17:02:45 +00:00
Scott Ullrich
4df064d425 Check for array type before foreach()
Reminded-by: Ryan Wagoner/Seth Mos
2007-04-11 16:59:49 +00:00
Scott Ullrich
228ac08763 Remove time based rule debugging statements.
Reminded-by: Ryan Wagoner
2007-04-11 16:57:27 +00:00
Scott Ullrich
96a3393381 Do not sort dns server list.
Reported-by: Goffredo Andreone
2007-04-11 16:54:04 +00:00
Scott Ullrich
7dddd075be If we cannot deterimine interrupts a second for an interface, do not recycle last known values. 2007-04-10 18:04:54 +00:00
Scott Ullrich
2fb4c391ec Do not show blank openvpn configuration items. 2007-04-10 17:19:48 +00:00
Scott Ullrich
5f7bb7970b Do not show blank openvpn configuration items. 2007-04-10 17:19:42 +00:00
Scott Ullrich
afd0cbb47f Set RELENG_1 version to 1.3. 1.2 will be released form RELENG_1_2. 2007-04-09 17:03:16 +00:00
Scott Ullrich
84dd057a55 Time for 1.2-BETA-1 2007-04-09 00:48:02 +00:00