summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Merge pull request #1309 from phil-davis/patch-5Renato Botelho2014-10-151-2/+2
|\
| * Fix #3935 Properly allow WAN without LANPhil Davis2014-10-151-2/+2
| | | | | | Was broken by https://github.com/pfsense/pfsense/commit/bd0b5d2dc7a279d3473a65a11d67efb5e39392be
* | Tame the poodle. Disable SSLv3.jim-p2014-10-151-0/+1
|/
* rename interfaces_carp_setup to interfaces_sync_setup and call it during ↵Ermal2014-10-158-9/+10
| | | | bootup since it does not only relate to carp interfaces.
* Fixes #3727 Do not unset ondemand for ppp type interfaces since it is ↵Ermal2014-10-151-1/+2
| | | | controlled here only for pppoe/l2tp
* Ticket #3789. Put a start at using the proxyurl/proxyport from system ↵Ermal2014-10-151-0/+8
| | | | configured settings for bogons. It still does not consider the user/pass configured
* Fixes #3213. Allow up to 2900 limiters. This was set to 30 since limiters ↵Ermal2014-10-151-2/+4
| | | | are to be controlled by mask and not created manually!
* Make proper check hereErmal2014-10-141-1/+1
|
* Teach the certificate generation code how to make a self-signed certificate, ↵jim-p2014-10-142-38/+70
| | | | | | and change the GUI cert generation code to use it. Also, move the GUI cert generation code to its own function so we can add a GUI option to regenerate it later. Also use some more sane defaults for the contents of the default self-signed certificate's fields so it will be more unique and less likely to trigger problems in browser certificate storage handling.
* update comment to reflect breakage caused here and reference associated ↵Chris Buechler2014-10-141-1/+1
| | | | redmine ticket, not high priority, can be fixed later
* block IPv4 link-local. Per RFC 3927, hosts "MUST NOT send the packet toChris Buechler2014-10-141-0/+5
| | | | | | | | | any router for forwarding", and "any network device receiving such a packet MUST NOT forward it". FreeBSD won't route it (route-to can override in some circumstances), so it can't be in use as a real network anywhere with the possible exception of local-only networks. Unlikely any such situation exists anywhere. Fixes ticket #2073
* Fix PSK for non-ascii also here, ticket #3917Renato Botelho2014-10-141-0/+6
|
* Fix initial console menu layout, it fixes #3884Renato Botelho2014-10-141-12/+9
|
* Improve IPsec status page for mobile. It fixes #3917Renato Botelho2014-10-141-1/+20
|
* Add missing gettext callRenato Botelho2014-10-141-1/+1
|
* Add missing gettext callsRenato Botelho2014-10-141-30/+36
|
* Fix indent and spacesRenato Botelho2014-10-141-196/+222
|
* Does not accept non-ascii characters on IPsec PSK. It fiixes #3931Renato Botelho2014-10-142-0/+6
|
* Close this form early since there is another form belowRenato Botelho2014-10-141-1/+1
|
* update input_error description after changes for ticket #3491Chris Buechler2014-10-137-8/+5
|
* Properly set MTU for lagg interface, it fixes #3922Renato Botelho2014-10-131-24/+53
|
* Make sentence more accurate as pointed out by phil-davisRenato Botelho2014-10-131-1/+1
|
* GIF interfaces MTU must be something between 1280 and 8192, make the correct ↵Renato Botelho2014-10-131-2/+12
| | | | check. It fixes #3927
* fix textChris Buechler2014-10-101-1/+1
|
* fix up text on sys_adv_miscChris Buechler2014-10-101-15/+14
|
* fix text and descriptions in GRE edit pageChris Buechler2014-10-101-7/+7
|
* s/removing/omitting/g for gateway monitor log entires. "Removing" is not ↵Chris Buechler2014-10-107-15/+15
| | | | necessarily correct, there are many circumstances where this runs where it wasn't there to begin with, and is potentially misleading.
* Fix pf syntax s/divert/divert-to/. It should fix #3921Renato Botelho2014-10-101-1/+1
|
* Fix an error introduced in bd0b5d2dc7 that makes system believe interfaces ↵Renato Botelho2014-10-081-1/+0
| | | | always mismatch
* Remove the minimum NIC warning, this dates back to when minimum 2 NICs were ↵Chris Buechler2014-10-073-18/+4
| | | | supported and it made sense to throw this message at people. It's obvious a network appliance requires at least one NIC.
* Update the URL for snapshots updateErmal2014-10-071-1/+1
|
* Be more strict when checking if olsrd is enabled, otherwise when package is ↵Renato Botelho2014-10-071-3/+7
| | | | deinstalled and configuration is kept dhcpd will consider it's always as enabled
* Add an option to restart php-fpm from consoleErmal2014-10-062-2/+16
|
* Fixes #3909 Properly report and detect carp_statusErmal2014-10-061-8/+9
|
* Remove function that is not implemented properly. Nothing seems to use it.Ermal2014-10-061-7/+0
|
* Merge pull request #1303 from PiBa-NL/carp_without_matching_subnetErmal2014-10-062-14/+8
|\
| * CARP, allow carp ip to be outside interface and alias subnets (FreeBSD10 ↵PiBa-NL2014-10-022-14/+8
| | | | | | | | feature)
* | Merge pull request #1304 from sselph/powerd_normal_modeErmal2014-10-063-1/+19
|\ \
| * | Add powerd normal mode flag (-n)Steven Selph2014-10-053-1/+19
| | |
* | | Merge pull request #1305 from phil-davis/patch-2Ermal2014-10-061-10/+7
|\ \ \ | |/ / |/| |
| * | Fix not rules for OPTn network casePhil Davis2014-10-061-10/+7
|/ / | | | | | | | | | | Reported in forum https://forum.pfsense.org/index.php?topic=82319.0 The "if (is_subnet($src)) ... filter_address_add_vips_subnets" code needs to go outside all of the if that checks for opt interfaces (not just in the else part). That makes filter_address_add_vips_subnets get called in all cases, including when optn network is specified. (line 2264, 2265) Then filter_address_add_vips_subnets needs to process the "not" code early, before checking if there are any VIPs (which was causing the routine to exit early in simple cases) - lines 2093-2100 chunk. This should also fix cases of using "LANnet", "WANnet" and "not" in rules on an interface that has just a plain address (no VIPs). Lines 2144 and 2158 are no functional change. The formatting of the multi-line statement was odd, so I put it back all on 1 line.
* | Make proper check if IP address is configured on another interfaces and ↵Renato Botelho2014-10-032-4/+21
| | | | | | | | ignore current one. It fixes #3807
* | get back to our standard RFC-defined capitalization of IPsecChris Buechler2014-10-028-21/+21
| |
* | Merge pull request #1300 from jean-m-cyr/masterRenato Botelho2014-10-021-5/+7
|\ \
| * | Fix up NTP status page formattingJean Cyr2014-09-281-5/+7
| |/ | | | | | | Number of columns is not the same for all table rows
* | Merge pull request #1298 from PiBa-NL/vips_sortRenato Botelho2014-10-022-22/+24
|\ \
| * | firewall_virtual_ip make the table sortable remove double tfoot, but use 2 ↵PiBa-NL2014-10-021-16/+18
| | | | | | | | | | | | tr inside.
| * | firewall_virtual_ip make the table sortablePiBa-NL2014-09-282-13/+13
| |/
* | Remove stray 'i'.jim-p2014-10-011-1/+1
|/ | | | Reported-by: https://forum.pfsense.org/index.php?topic=82393.0
* Merge pull request #1295 from phil-davis/patch-21Renato Botelho2014-09-2713-19/+19
|\
OpenPOWER on IntegriCloud