mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity
25,655 Commits 27 Branches 53 Tags 494 MiB
eda5cb845f
Commit Graph

162 Commits

Author SHA1 Message Date
Chris Buechler
5d6dde8af7 Use 1-6 rather than 0-5 for IPsec logging levels, to stay away from complications of 0 due to PHP stupidity. Upgrade config to add 1 to any configured log levels. Default to 1 as log level where none is configured by the user. Ticket #5340 2015-10-26 00:23:37 -05:00
Chris Buechler
5e11c6a176 Upgrade config to 11.9. Changes IPsec peer ID for EAP types to "any", to retain previous behavior. 2015-07-25 19:41:31 -05:00
Renato Botelho
e4b7410b9b Fix #4794: 
- Add a upgrade code to fix asn1dn string format to match strongSwan needs
- Bump config version to 11.8
 2015-07-17 09:51:15 -03:00
Renato Botelho
edf370e7e0 dns_split was a comma separated list and moved to use space as separator, provide upgrade code to make sure old configs are converted. Since there was a config upgrade version 11.7 only on master, I pushed it to 11.8 and used dns_split one as 11.7 to be able to backport it to RELENG_2_2. Ticket #4418 2015-03-06 11:30:54 -03:00
Chris Buechler
73cdd9f0ca Remove the harden-glue option entirely and hard code it to yes. Ticket #4402 2015-03-05 19:35:59 -06:00
Chris Buechler
ccdaaec6e4 Update Unbound defaults 2015-02-09 22:33:50 -06:00
Ermal LUÇI
b40137258e To avoid issues with clashing SAIDs go back to specifying the reqid in strongswan config. 
To be able to manage this first upgrade the config to assign each phase2 an reqid
Second use that during config generation

Ticket #4208
 2015-01-13 19:57:28 +01:00
Renato Botelho
0a23cddced Fix #4090: 
- Unbound advanced options may contain double quotes and it breaks the
syntax when a backup is restored because newlines are trimmed. Save it
in base64 format is a safe way to prevent it
- Bump config version to 11.5
- Provide upgrade code to encode current config or the one that came
from unbound package on 2.1.5
 2015-01-05 15:41:38 -02:00
Renato Botelho
16a0f33446 Add config upgrade code to make sure iketype is set, bump config version to 11.4. It fixes #4163 2014-12-31 12:54:34 -02:00
Renato Botelho
792dbafd7b Add config upgrade code to validate changes made on c2fe67eb and d269747b. It fixes #4134 2014-12-22 15:07:02 -02:00
Renato Botelho
56c8376a9e Add a cron item to expire items from webConfiguratorlockout, also add config upgrade code. This fixes #4122 2014-12-17 16:17:03 -02:00
Chris Buechler
e2accfacc5 Update default config.xml for 2.2. Disable dnsmasq, enable Unbound. Remove 
outdated comments that used to sort of document the config file, but had
been neglected for quite some time and aren't all that useful anyway.
Change default NICs from vr to em, given vr is on the way out and em is
the most common NIC in use today. partially re: Ticket #3396
 2014-11-14 01:43:46 -06:00
Ermal
d87fcac96b Do not require the default sysctl items to be set on the config.xml but rather extract the definitions from the sysctl tree. Also to reduce config.xml size 2014-11-10 21:47:14 +01:00
Ermal
d3c36b1d8d Put the new sysctl on the config as needed. 2014-11-10 20:29:22 +01:00
Steven Selph
3d77cc359f Add powerd normal mode flag (-n) 2014-10-05 18:35:08 -04:00
Ermal
9265d99115 Insert tracker ids for the default LAN rules 2014-04-14 20:46:05 +00:00
Charlie Root
7023c602bd Added support for UEFI booting to Network Booting configuration. 
modified:   conf.default/config.xml
	modified:   etc/inc/services.inc
	modified:   usr/local/www/services_dhcp.php
 2014-03-02 21:47:39 -08:00
Ermal
73c3eed8e0 Remove deprecated sysctls. vfs.forcesync needs to be seen if the patch needs to be put in place again! 2013-12-14 21:39:05 +00:00
Renato Botelho
eef01b14df Add hybrid and disabled outbound NAT, fixes #2416: 
- Add 2 new outbound NAT modes, hybrid and disabled, manual and advanced
  keep working the same way
- Hybrid mode applies manual rules first, automatic after
- Disabled do no create any outbound NAT rules
- Remove ipsecpassthru config field and rename advancedoutbound to
  outbound
- Save mode on $config['nat']['outbound']['mode'] to simplify the logic
- Modify config.default to reflect changes
- Add code to upgrade config, and change latest_version to 10.3
- Use html to align modes and remove some hacks to align using  
 2013-11-13 07:45:09 -02:00
jim-p
f324698c3d We do not use nor include newsyslog, so remove the cron job. 2013-10-09 08:51:26 -04:00
Renato Botelho
67e5e3c6db Set action = pass for configured mac addresses on CP passtrumac 2013-09-14 11:17:43 -03:00
Renato Botelho
af0a477a1f Disable kill_states by default on upgrade, it fixes #3183 2013-09-06 13:58:49 -03:00
Chris Buechler
243680e54d Disable state killing on gateway failure by default for new configs. 
Clarify the text describing the option while here.
 2013-09-03 11:00:34 -05:00
Renato Botelho
fa3b33a57e Fixes #2979 
. Change max value for traffic and packets graphs to 20GigE
. Bump config version to 9.6
. Write a config upgrade function to tune current rrd files to the new
  max value
 2013-05-29 10:47:43 -03:00
Ermal
f388b5c573 After some discussions it is better to make this a tunable and allow its value change from administrator. 2013-05-08 07:19:19 +00:00
Renato Botelho
02203e6d4a Fix IPv6 Prefix ID default value 
. Always initialize it to 0 when it's undefined
. Remove unecessary initializations and checks
. Bump config version to 9.5
. Write an upgrade config function to initialize old configs properly
 2013-05-06 13:01:18 -03:00
N0YB
6015f75bba Upgrade code & config default version 2013-02-09 15:04:50 -08:00
N0YB
91d1736fb2 Update config default with powerd battery mode 2013-02-09 12:41:11 -08:00
Renato Botelho
cba9d7d9a5 Adjust RRD captive portal graphs for CP zones 
- Create RRD configs per zone
- Add tabs to see graphs per zone
- Migrate existing rrd files to default cpZone
- While I'm here, call unset() for $rrdcreate and $rrdupdatesh

Resolves #2655
 2013-02-06 15:54:47 -02:00
Renato Botelho
586098db2b Make sure default config complies with latest version 2013-01-21 13:47:58 -02:00
Renato Botelho
3dc76aa5d3 Update the default config.xml to 9.2 so it does not trigger config.xml upgrade during install of a new system 2013-01-21 12:15:29 -02:00
Renato Botelho
20a3b43686 Add IPv6 privacy settings tunables. Keep the default FreeBSD value for them, that is disabled. This implements feature request #2587 2013-01-21 12:14:37 -02:00
Ermal
051869b76b Do not prefer anymore oldsa and recommend it as a better choice 2013-01-10 13:27:50 +00:00
bcyrill
6b4480dc84 Add bogons update frequency selection 2013-01-06 23:59:54 +01:00
Ermal
c06240dbd2 Add the new tunable in the GUI for custommization and its default value 2012-12-11 22:31:18 +00:00
Cristian Feldman
53c210dd64 Added mode selection options for PowerD. 2012-04-10 22:12:30 -03:00
smos
78affc3cb2 Set the IPaddrv6 field for the lan to track6 so it autoconfigures from the WAN. 
I forgot to remove the link local address it had in it on the original commit.
 2012-04-03 06:11:48 +02:00
smos
0ca7f8fee1 Fix botched config.xml merge error. Remove duplicate ipaddrv6 tag. 2012-04-03 06:04:49 +02:00
jim-p
6873d48732 Remove this track6 line as it causes an xml error 2012-04-02 17:16:46 -04:00
smos
6d778ed027 Changeout the told dhcp-pd config for the new track6 style autoconfiguration of the lan interface. 2012-04-02 17:14:52 +02:00
smos
103a9d37f8 Update the default config.xml to 8.3 so it does not trigger config.xml upgrade during install of a new system 2012-03-22 15:19:46 +01:00
Joecowboy
48fd9e4889 removed the timeformate change and putting it in the dhcpd and dhcpdv6 which will be generated by interface code. New XML tags will be <dhcpleaseinlocaltime/> and <dhcpv6leaseinlocaltime/> 2012-02-25 16:35:09 -06:00
Joecowboy
293cd289ee Added Time format change XML tag for both DHCP and DHCPv6 if you want to use local time instead of UTC for leases. 2012-02-25 15:10:16 -06:00
jim-p
3c19d44aa8 Fix default SMTP monitor parameters so they will properly check to see if an SMTP banner is received. 2011-11-01 15:14:29 -04:00
marcelloc
1ce020c0d2 load balance monitor type send/expect must have a '' when using more then one argument. 2011-09-02 02:43:44 -03:00
smos
3dda090bda Add DHCP6 to the default configuration 2011-08-18 12:50:11 +02:00
jim-p
153fa4475f Fix conf.default version 2011-05-19 08:56:41 -04:00
Seth Mos
000d9e71ae Add the ipv6 allow tag to the default config. 
Add a default allow rule for the LAN with IPv6
Add a dhcp-pd sla-id of 0 for the WAN.
Add a dhcp-pd length of 0 for the WAN
 2011-05-06 13:08:04 +00:00
Seth Mos
dcb846e3cd Merge remote branch 'upstream/master' 
Conflicts:
	usr/local/www/status_rrd_graph_img.php
 2011-05-03 10:09:06 +02:00
Ermal
a7ee577720 Remove rndtest sysctl since the kernel module is not anymore part of our kernels. Leftover noticed by: Jim 2011-04-28 20:44:31 +00:00