jim-p
|
0b9d02f367
|
Don't just blindly echo to the ntpd.log, it's a clog file and that will break it.
|
2011-04-26 10:18:12 -04:00 |
|
Ermal
|
bce14123ad
|
Actually call interfaces_carp_setup after the carp interfaces are created so carp traffic can only flow after we have all vips up and running. This prevents premption more early than necessary. Ticket #1432.
|
2011-04-22 18:28:01 +00:00 |
|
Chris Buechler
|
de7222fbf0
|
correctly unmount drives where a config doesn't exist
|
2011-04-21 20:31:14 -04:00 |
|
Ermal
|
2d4003aab1
|
If the bandwidth value is coming from radius scale it up to the requested Kbit/s unit.
|
2011-04-21 21:39:03 +00:00 |
|
jim-p
|
1f0c76cfd7
|
Fix PPPoE upgrade, the <pppoe> tag is considered an array these days and the upgrade code wasn't treating it properly, accessing it directly instead of using the first entry ([0]). Fixes #1439 - PPPoE credentials upgrade properly now.
|
2011-04-21 13:10:32 -04:00 |
|
jim-p
|
0cc5ab4226
|
Confirmed working fix for ticket #1417 - with this change I have two-way connectivity on Site-to-Site (SSL/TLS) with iroutes.
|
2011-04-21 09:59:09 -04:00 |
|
jim-p
|
bd24573bb0
|
Backing out changes from ticket #1417, it was not a valid openvpn config that the user was trying to make.
|
2011-04-19 19:59:29 -04:00 |
|
Scott Ullrich
|
673ee7b1e8
|
Harden SSL settings a bit. Verified OK with @cmb and @billm
|
2011-04-19 17:06:00 -04:00 |
|
jim-p
|
6c9cf4662e
|
Slightly different fix for #1417 that doesn't mess up other parameters needed by p2p_tls
|
2011-04-18 18:27:47 -04:00 |
|
Ermal
|
359f6307d6
|
Block instead of allowing proto carp/pfsync during bootup since this may cause issues. Ticket #1432
|
2011-04-18 18:56:31 +00:00 |
|
Ermal
|
42c0700392
|
Add an option under advanced->misc to specify a proxy for retreiving pfsense package info or downloading packages.
|
2011-04-18 18:25:56 +00:00 |
|
jim-p
|
5381b34131
|
Don't include RFC1918 in bogons.
|
2011-04-17 01:27:23 -04:00 |
|
Chris Buechler
|
988d498c9d
|
sync bogons
|
2011-04-16 18:19:20 -04:00 |
|
jim-p
|
ca90133bf6
|
Save a little space on the interface list for console assignment.
|
2011-04-14 16:50:23 -04:00 |
|
smos
|
c8cc0c1c5a
|
Add missing fields for l2tp to define dns and wins servers
|
2011-04-13 09:52:58 +02:00 |
|
Scott Ullrich
|
a93020d544
|
Do not send growl notices twice
|
2011-04-12 18:18:57 -04:00 |
|
Scott Ullrich
|
2632934e5a
|
Remove blank trailing c/r.
|
2011-04-12 18:08:07 -04:00 |
|
Scott Ullrich
|
10c3d4c007
|
Notify via smtp as well as growl
|
2011-04-12 18:08:07 -04:00 |
|
jim-p
|
cd11a1426d
|
Drop the ntpdate sync in favor of using ntpd -s, which should have the same net effect without needing the shell script that has been prone to hanging.
|
2011-04-12 13:52:34 -04:00 |
|
jim-p
|
127eb8e023
|
Add a toggle under System > Advanced on the misc tab to enable/disable debug mode for racoon.
|
2011-04-11 16:58:13 -04:00 |
|
jim-p
|
fbfd675a53
|
Add an IPsec xauth permission. Try to use the nologin shell first (just unlock the account). Ticket #1202
|
2011-04-08 08:59:50 -04:00 |
|
jim-p
|
02d9951153
|
Putting client-config-dir in the config is valid also for p2p_tls servers. Fixes #1417.
|
2011-04-08 08:28:31 -04:00 |
|
Ermal
|
9a36dc9d24
|
Resolves #1391. Bring back VPN auto rule disable advanced setting.
|
2011-04-06 18:22:27 +00:00 |
|
jim-p
|
ab75b4ee54
|
CRL is read in as an array now, so even in the imported config it will appear to be an array even though it can only have one value. Fixes #1358
|
2011-04-06 13:36:24 -04:00 |
|
jim-p
|
6177fd924c
|
Fixup text.
|
2011-04-06 13:14:50 -04:00 |
|
jim-p
|
557300a7eb
|
Actually re-parse the config if a valid config was not written. (Should help stop installs from blowing up on failed config upgrades). Save the bad config for inspection, and print a message to the console about what was done.
|
2011-04-06 12:55:32 -04:00 |
|
Ermal
|
4c613f8482
|
Correct error message for gateways to report down when the gateway is down and not high latency.
|
2011-04-06 14:59:30 +00:00 |
|
Ermal
|
19d9146637
|
Another sweep at keeping the default route always present when the default setup route is marked as down. This now adds checks for configuration where a defaultgw is not specified by the user but deduced automatically.
|
2011-04-06 14:58:27 +00:00 |
|
Ermal
|
262595f0d5
|
Unbreak inetd.conf generation to avoid entries containing Array entries. This gixes nat reflection and a spamming of the system with nc processes with wrong parameters.
|
2011-04-05 19:55:11 +00:00 |
|
jim-p
|
5b64e3369a
|
Fix variable name
|
2011-04-05 11:16:08 -04:00 |
|
Ermal
|
1d60ed9bb4
|
Try to always keep pfSense with a default gateway to avoid errors for service running from pfSense itself. Previously PBR should be configured for such services. While PBR is a better fix this at least keeps users from complaining in simple setups. Reported by many.
|
2011-04-04 11:09:06 +00:00 |
|
Ermal
|
f206afb57e
|
On interface ip change reload even igmpproxy. Reported-by: http://forum.pfsense.org/index.php/topic,34372.0.html
|
2011-04-04 10:32:55 +00:00 |
|
Ermal
|
056df2d9f0
|
Add -a to include all updaterrd.sh scripts running and also remove top killing since its not used anymore in stat gathering.
|
2011-04-04 10:24:57 +00:00 |
|
Ermal
|
d7f4030ad8
|
Fix indent.
|
2011-04-01 21:51:11 +00:00 |
|
jim-p
|
4936ff53df
|
Switch back to dev_mode so existing configs aren't broken by the other changes.
|
2011-04-01 14:11:33 -04:00 |
|
Ermal
|
bc78856172
|
Correct the conditional testing.
|
2011-03-31 17:52:01 +00:00 |
|
Ermal
|
57c448d034
|
Do not show the default queue selection for a queue that has child queues
|
2011-03-31 17:45:37 +00:00 |
|
Ermal
|
d1bd01fffb
|
Prevent non-numeric chars from being inputed on bandwidth field.
|
2011-03-31 17:39:01 +00:00 |
|
jim-p
|
857a4a7986
|
Use a different loop counter variable to avoid a name collision
|
2011-03-30 20:36:53 -04:00 |
|
Ermal
|
56a8bbf3af
|
Test for value present before using.
|
2011-03-30 22:21:13 +00:00 |
|
Ermal
|
d5b45febd6
|
Test for value present before using.
|
2011-03-30 22:13:55 +00:00 |
|
Ermal
|
ccf46756fd
|
Unset xmlrpcauth and not the first member of the array.
|
2011-03-30 21:49:51 +00:00 |
|
Ermal
|
cb0e3f8e7c
|
Check for function existence before calling it.
|
2011-03-30 20:58:02 +00:00 |
|
Ermal
|
47e5f74198
|
By default assume admin user and do not blindly copy the first user from the config.xml
|
2011-03-30 20:52:36 +00:00 |
|
jim-p
|
bfa992bc4e
|
Allow editing of CAs, so that imported CAs can have their private keys added later (mainly affected users upgrading from 1.2.3 and wanting to use the cert manager). Also, allow editing the CA's serial, since this shouldn't really be 0 for imported CAs, but the serial of the last cert that was made from this CA.
|
2011-03-30 16:37:45 -04:00 |
|
Ermal
|
b7d5a7bab8
|
Do not rely on first user being admin as this breaks in certain cases the XMLRPC authentication. TODO: pass username as argument too. This now can use the local system authentication settings as well.
|
2011-03-30 20:34:13 +00:00 |
|
Chris Buechler
|
176a282e33
|
clarify log
|
2011-03-30 15:56:27 -04:00 |
|
jim-p
|
a5187d4375
|
Check for "aes 256" as IPsec encryption type, not just rijndael.
|
2011-03-29 12:00:02 -04:00 |
|
jim-p
|
49bb5c074b
|
Add some upgrade code for IPsec mobile clients. Passes php -l but needs more testing.
|
2011-03-29 09:54:52 -04:00 |
|
Ermal
|
b0eaa10cda
|
Trim spaces out to avoid problems from explode.
|
2011-03-29 09:11:30 +00:00 |
|