Renato Botelho
69aba8590e
Add missing privileges to the list, it fixes #3279
2013-10-22 11:31:16 -02:00
Renato Botelho
93f51e4b33
Fix typo and whitespace
2013-10-22 11:30:24 -02:00
Renato Botelho
e782e8f43f
Fix #3259 . Save 'packet loss rate' and 'bucket size' for limiter queues
2013-10-21 10:59:23 -02:00
Renato Botelho
488e8c81ad
Prevent a possible division by zero. it fixes #3212
2013-10-18 17:32:13 -03:00
Renato Botelho
bae42aaf13
Make sure vlan interface exist when it's being configured, it fixes #3270
2013-10-18 10:40:15 -03:00
Warren Baker
dd33fd4e8b
Split SSL/TLS into separate checkboxes so that plaintext connections can be made secured by using STARTTLS. Support for SMTPS connections should probably be done away with in future. Fixes #3180
2013-10-17 10:43:40 +02:00
Renato Botelho
78b0e51e9a
Fix #3268 - avoid pf table names conflict:
...
. Create a list of reserved table names for the hardcoded ones
. Use this list to validate aliases and load balance pool names
. Check if alias names don't conflict with LB pool names and vice-versa
2013-10-16 09:18:29 -03:00
Renato Botelho
4a913451bb
Add Captive Portal Zones privileges definition. Fix #3216
2013-10-14 15:54:13 -03:00
Renato Botelho
babc58d308
Allow special chars to be used on IPSec mobile login banner. Fixes #3247
2013-10-11 10:59:42 -03:00
Renato Botelho
a518b337a9
Set default value to radius_protocol during upgrade, it should fix #3226
2013-10-11 09:20:14 -03:00
Renato Botelho
7e7a65b073
Fix 'Packet loss rate' and 'Bucket Size' range checking
2013-10-11 08:25:12 -03:00
jim-p
9f212aeae0
Needs parens
2013-10-10 12:57:44 -04:00
jim-p
151f5cb72d
Remove newsyslog cron job on upgrade, if present.
2013-10-10 12:50:36 -04:00
jim-p
12f7e3d4ec
Add upgrade code to change the DHCP next-server value to nextserver since it was renamed sometime in 2.1 but upgrade code didn't follow.
2013-10-10 12:49:47 -04:00
jim-p
6f4a2864ad
Perform a much more accurate comparison between two certificates to determine if they are identical when checking their revocation status. Fixes #3237
2013-10-09 10:03:59 -04:00
jim-p
506ff948be
Remove this check, the value can be 0 here if the target is the first item in the array.
2013-10-09 08:48:26 -04:00
Chris Buechler
9e3cc25ba9
use (self) instead of any for web lockout
2013-10-04 06:41:27 -05:00
Chris Buechler
7825f71eae
use (self) rather than any as the destination for the lockout rules
2013-10-04 01:47:29 -05:00
Richard Connon
ff8affb4d0
Fix codel not being applied on non-priq queue types
2013-09-28 10:26:47 -03:00
Richard Connon
931f3890ac
Fixed typo in CoDel wiki link
2013-09-28 10:26:47 -03:00
jim-p
f3a4601c85
If rc.newwanip is run on an interface that should not have an IP address, do not take any action.
2013-09-27 13:14:18 -04:00
jim-p
5205b0eb7b
Make sure no extra spaces end up in the parsed IP, it can lead to issues in other places (Easy Rule, etc)
2013-09-25 11:49:37 -04:00
jim-p
1207b1d6da
OpenSSL does not like country codes longer than two letters, so remove these entries that are not actually country codes.
2013-09-24 12:35:26 -04:00
jim-p
7786cd6e37
Add patch from Ermal to fix ifconfig error on gif in certain cases.
2013-09-23 15:27:10 -04:00
jim-p
428ea19f8a
Fix CP stats generation for concurrent users. Fixes #3225
2013-09-23 10:01:26 -04:00
Xon
baeb0599cf
Alix 2D6 crashes upgrade process withou out of diskspace
...
Updating the the RRD graphs causes two copies of each RRD's XML file to be stored in /tmp.
On Nanobsd, the default /tmp size is 40mb. It doesn't require very many RRD XML dumps before this is exhausted.
2013-09-19 09:45:53 -04:00
jim-p
78db4f1a62
Switch to rw mode before file operations on RFC2136 cache. Fixes #3201
2013-09-17 15:12:23 -04:00
Chris Buechler
bf2afff0aa
s/BSDP/ESF/
2013-09-11 17:12:16 -05:00
jim-p
b832d61759
This broke correct detection of primary/secondary -- the person in that thread may have had some other config issue, but this broke working/valid configurations. Revert "Correct check to match the right vip based on configured ip. Reported-by: http://forum.pfsense.org/index.php/topic,66234.0.html "
...
This reverts commit 25f9f33228 .
2013-09-10 11:08:02 -04:00
jim-p
a3d6166bb2
Fix didn't help -- backing this out and the change that made it necessary. Revert "Correctly check the secondary/primary parameter setting on dhcp failover configuration"
...
This reverts commit 2467086682 .
2013-09-10 11:07:38 -04:00
jim-p
408ebb78ab
Fix update URL so the -RELEASE version looks at the stable updates URL by default rather than the snapshots server.
2013-09-10 09:06:00 -04:00
Phil Davis
c312ee8fe5
Update an existing cron entry for pppoe periodic resets
...
The array variable name was incorrect in the test, so the existing cron entry was not being matched. Fixes #3192
2013-09-10 09:15:20 -03:00
Ermal
767afbb10d
Require IPv6.inc header so that if ipv6 functions are called no surprises arise
2013-09-10 09:35:31 +00:00
Ermal
58fbb3f033
Leave a trace that rtsold did fire the dhcp6c client so troubleshooting is easier
2013-09-10 09:26:49 +00:00
Phil Davis
e4cf52ed14
Do not include disabled OpenVPN in vpn_networks and negate_networks
2013-09-10 09:22:03 +00:00
Ermal
2467086682
Correctly check the secondary/primary parameter setting on dhcp failover configuration
2013-09-10 09:10:06 +00:00
Ermal
168a194870
Correct typo that prevents dhcp rules from properly being generated.
2013-09-10 08:18:53 +00:00
Chris Buechler
d2f0b1421c
the time has come - bump to 2.1-RELEASE
2013-09-09 16:44:38 -05:00
jim-p
b841bc2319
Fix errant display of "0 table deleted" during filter reload on console.
2013-09-09 15:18:46 -04:00
Renato Botelho
772e49cebd
Remove unecessary capitalized WARNING from disabled APC message
2013-09-09 16:10:22 -03:00
jim-p
1d47cb37b3
Do not sync DHPCv6, it must operate independetly. Ticket #3184
2013-09-06 13:56:40 -04:00
jim-p
8571cdd51a
Remove failover peer IP settings from DHCPv6, DHCPv6 doesn't support failover the way that DHPv4 did. Fixes #3184
2013-09-06 13:56:39 -04:00
Renato Botelho
279c2f425e
Disable kill_states by default on upgrade, it fixes #3183
2013-09-06 13:59:05 -03:00
jim-p
9e6043ccc9
Allow for easier override on $g values if needed.
2013-09-05 14:27:53 -04:00
Ermal
25f9f33228
Correct check to match the right vip based on configured ip. Reported-by: http://forum.pfsense.org/index.php/topic,66234.0.html
2013-09-05 12:39:31 +00:00
Ermal
19d723d2af
Ticket #3181 do the state flushing only on down gateway detection rather than any time.
2013-09-05 12:28:55 +00:00
Ermal
5aa44e9846
Revert "Revert back the behaviour to cleanup all states for 2.1 Fixes #3181 and related to Ticket #1629 . This commit is only for 2.1 since on master development will continue for better alternatives"
...
A bit too excessive need to get right.
This reverts commit c59dd719e0 .
2013-09-05 12:24:27 +00:00
jim-p
c22f480954
Ba-bump-bump.
2013-09-04 16:27:52 -04:00
Ermal
d6df2c4c71
When the v4 wan is dynamic and v6 is type dhcp and v6 information is retrieved through v4 link than trigger dhcp6c reconfiguration.
2013-09-04 15:03:31 +00:00
Ermal
0ec64bd2a6
Actually the / here is not needed.
2013-09-04 10:43:14 +00:00