Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Clarify the description for Dynamic gateways that it is automatically added | Seth Mos | 2009-12-18 | 1 | -1/+1 |
| | |||||
* | Make sure that when upgrading the load balancer pools to the gateway format ↵ | Seth Mos | 2009-12-18 | 1 | -1/+1 |
| | | | | | | we set the description as well. Typo in the variable name | ||||
* | Make sure that when upgrading a balance pool that we always user tier 1, it ↵ | Seth Mos | 2009-12-18 | 1 | -1/+6 |
| | | | | previously used tier 0 which equals "Do not use". | ||||
* | make re-brand friendly | Chris Buechler | 2009-12-17 | 1 | -3/+3 |
| | |||||
* | Move conf_mount_ro() to the stop section. Fix formatting while here | Scott Ullrich | 2009-12-17 | 1 | -62/+49 |
| | |||||
* | fix call to undefined function | Chris Buechler | 2009-12-17 | 1 | -1/+1 |
| | |||||
* | add ability to hide help menu | Chris Buechler | 2009-12-17 | 2 | -10/+15 |
| | |||||
* | use product_name | Chris Buechler | 2009-12-17 | 1 | -3/+3 |
| | |||||
* | add ability to hide theme selection | Chris Buechler | 2009-12-17 | 2 | -0/+3 |
| | |||||
* | Fix call to fwrite. | Ermal Luçi | 2009-12-17 | 1 | -1/+1 |
| | |||||
* | Start using the new utility for monitoring dns hostnames used in aliases. | Ermal Luçi | 2009-12-17 | 2 | -22/+26 |
| | |||||
* | Correctly reconfigure vips when the underlying/parent interface gets ↵ | Ermal Luçi | 2009-12-17 | 1 | -2/+25 |
| | | | | reconfigured. | ||||
* | Fix deletion of ipaliases. Use get_real_interface instead of the long name ↵ | Ermal Luçi | 2009-12-17 | 2 | -4/+5 |
| | | | | of function. | ||||
* | Revert b15ae348, add mute flag set to true | Seth Mos | 2009-12-16 | 1 | -0/+2 |
| | |||||
* | use /var/etc/hosts instead of /etc/hosts which should be a symlink | sullrich | 2009-12-16 | 1 | -3/+3 |
| | |||||
* | Do not pass option -l to dnsmasq any longer. Only launch the registration ↵ | sullrich | 2009-12-16 | 1 | -6/+9 |
| | | | | helper daemon if the option is enabled | ||||
* | Resolve Warning: Invalid argument supplied for foreach() in ↵ | sullrich | 2009-12-15 | 1 | -1/+1 |
| | | | | /usr/local/sbin/pfSsh.php(334) : eval()'d code on line 257 | ||||
* | Include needed libraries | sullrich | 2009-12-15 | 1 | -0/+4 |
| | |||||
* | Resolves #220. Fixed because of missed changes as in Ticket #170. | Ermal Luçi | 2009-12-15 | 1 | -2/+2 |
| | |||||
* | Reverting this because: | Ermal Luçi | 2009-12-15 | 1 | -12/+2 |
| | | | | | | | | | | | 1- It is broken. It breaks the recursivity of the function itself. 2- It harms the boot time of pfSense too much. 3- It impacts the filter reload too much. 4- My own opinion it is not the right way to do it, although the easiest. Revert "Make sure that hostnames inside a alias that does not resolve will not result in a unloadable ruleset." This reverts commit 201fbd66cd60a86aa2002486fd729054e5bcd094. | ||||
* | This function appears to not be needed on 2.0 (It is needed on 1.2.3 where I ↵ | jim-p | 2009-12-14 | 1 | -17/+1 |
| | | | | originally coded this part). Use convert_real_interface_to_friendly_interface_name() instead, since it seems to have special case handling for PPPoE and such now. Tested and working on a static IP setup, still needs tested by a PPPoE user on 2.0. (Logs should show "WAN" in the interface column, not "pppoe0".) | ||||
* | Add include for config.inc. Without it, the log parser was failing when ↵ | jim-p | 2009-12-14 | 1 | -0/+2 |
| | | | | called from the CLI (e.g. filterparser.php) | ||||
* | Make sure that hostnames inside a alias that does not resolve will not ↵ | Seth Mos | 2009-12-14 | 1 | -2/+12 |
| | | | | result in a unloadable ruleset. | ||||
* | Ticket #217. Comment out code that is half finished. | Ermal Luçi | 2009-12-14 | 1 | -0/+2 |
| | |||||
* | Revert previous change, this was already handled and I verified it works ↵ | Seth Mos | 2009-12-14 | 1 | -9/+2 |
| | | | | | | after fixing guess_interface_from_ip() | ||||
* | Correct Typo in function name, this broke guess_interface_from_ip() | Seth Mos | 2009-12-14 | 1 | -1/+1 |
| | |||||
* | Make sure that if we are passed a IP address but do not have the interface ↵ | Seth Mos | 2009-12-14 | 1 | -3/+11 |
| | | | | | | | yet, which can happen when rules are upgraded from 1.2, then find the interface and carry on. This fixes upgrades where rules might direct traffic out a specific WAN. | ||||
* | Forward port the guess_interface_from_ip() from 1.2-RELEASE TO 2.0 | Seth Mos | 2009-12-14 | 1 | -5/+19 |
| | | | | | This one works far better then the old one that was still in 2.0. Problem being, if it was not in the ARP cache it was not in the route table. | ||||
* | Make sure to surpress stderr | Seth Mos | 2009-12-14 | 1 | -1/+1 |
| | |||||
* | Fix the VLAN upgrade code so that it correctly renames the vlan entries and ↵ | Seth Mos | 2009-12-14 | 1 | -3/+13 |
| | | | | | | updates the interfaces config section to the new name. Tested with 2 VLANS. | ||||
* | Make sure we do not place the temporary files in / but in /tmp | Seth Mos | 2009-12-14 | 1 | -0/+2 |
| | |||||
* | $g[pptp_subnet] is gone on 2.0. Ticket #139 | Ermal Luçi | 2009-12-14 | 1 | -2/+2 |
| | |||||
* | Home directory of uid 0 should be /root. Ticket #218 | pierrepomes | 2009-12-13 | 1 | -0/+1 |
| | |||||
* | remove authorized_keys check, many users won't have SSH access anyway, this ↵ | Chris Buechler | 2009-12-13 | 1 | -3/+0 |
| | | | | check is much too restrictive | ||||
* | clarify input_error | Chris Buechler | 2009-12-13 | 1 | -1/+1 |
| | |||||
* | link to correct associated firewall rule | Chris Buechler | 2009-12-13 | 1 | -1/+1 |
| | |||||
* | fix text | Chris Buechler | 2009-12-13 | 1 | -1/+1 |
| | |||||
* | More special meaning words. | Ermal Luçi | 2009-12-13 | 1 | -1/+1 |
| | |||||
* | Ooops remove bogus text. | Ermal Luçi | 2009-12-13 | 1 | -1/+1 |
| | |||||
* | Add missing PF 'max' tracking option , and clarify message for 'max-src-nodes' | pierrepomes | 2009-12-13 | 3 | -3/+11 |
| | |||||
* | Remove some sort of extra space/break in ipsec screen. Ticket #211 | pierrepomes | 2009-12-13 | 1 | -1/+0 |
| | |||||
* | fix text | Chris Buechler | 2009-12-13 | 1 | -1/+1 |
| | |||||
* | clean up text | Chris Buechler | 2009-12-13 | 1 | -2/+2 |
| | |||||
* | fixup text | Chris Buechler | 2009-12-13 | 1 | -3/+3 |
| | |||||
* | clarify input_errors | Chris Buechler | 2009-12-12 | 1 | -3/+3 |
| | |||||
* | fix input validation of gateways. Ticket #173 | Chris Buechler | 2009-12-12 | 1 | -2/+4 |
| | |||||
* | clarify input validation message | Chris Buechler | 2009-12-12 | 1 | -1/+1 |
| | |||||
* | Add patch from lietu (Janne Enberg). Ticket #136 | pierrepomes | 2009-12-12 | 5 | -46/+150 |
| | | | | | | | | | | | | | | | | | | | | | 1) Multiple NAT rules can be assigned the same filter rule -> Fixed, added assigned-nat-rule-id to filter rules to keep track of the assignment 2) when removing the link (i.e. switching to "pass" or "none", the linked rule isn't deleted (should it be? probably yes) -> Fixed, when a NAT rule's association is removed, the filter rule is deleted. Added a "create new associated filter rule" option to the dropdown if there is none selected. 3) The destination IP and port of linked rules can be edited in firewall_rules_edit.php and shouldn't be. Source should be editable but not destination, since that should strictly be tied to the NAT rule. -> Fixed, you cannot edit the destination for the filter rules that are linked to NAT rules, this has been disabled both by JavaScript and PHP. 4) If you edit the source in a linked firewall rule, it gets overwritten when you edit the NAT rule. The NAT rule should never touch the firewall rule source after the rule exists. -> Fixed, previously the old rule was deleted and a new one created, now it only updates the old rule and doesn't touch the source. Also added crosslinking from the NAT rule to the filter rule and back, so you can jump to edit the filter rule from the NAT rule and vice-versa. | ||||
* | Only get ip address from internet if it is a private address on the ↵ | Ermal Luçi | 2009-12-12 | 1 | -7/+6 |
| | | | | interface. This should optimize the speed of dyndns a lot. | ||||
* | really fix input validation | Chris Buechler | 2009-12-11 | 1 | -1/+1 |
| |