summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Time for 1.2-BETA-1Root_RELENG_1_2Scott Ullrich2007-04-091-1/+1
|
* If the interface is "lan" and bridging is enabled then skip creation of the ↵Scott Ullrich2007-04-091-0/+3
| | | | DHCP Server subnet. Ticket #1281
* Remove configuration lock that would be acquired when you login to ssh after ↵Scott Ullrich2007-04-081-0/+2
| | | | a firmware update. Ticket #1258
* Correct sysctl name.. it is movements not movement.Scott Ullrich2007-04-081-2/+2
|
* startup routed on boot if it's enabledBill Marquette2007-04-081-0/+4
|
* Correct rrd_gateway pathSeth Mos2007-04-081-1/+1
|
* Skip rule creation when interface_ip or remote_gateway is unknownScott Ullrich2007-04-071-0/+4
|
* When a 0 byte configuration file is found, remove it (unlink) and continue ↵Scott Ullrich2007-04-071-12/+17
| | | | processing.
* Remove IP Compression box. A lot of further refactoring is going to be ↵Scott Ullrich2007-04-071-6/+0
| | | | required to make this work and we do not have enough time to do so before 1.2 beta.
* Ticket 1280: updatedScott Dale2007-04-071-1/+1
|
* Use -o when loading the pf ruleset. From the pfctl man page: -o ↵Scott Ullrich2007-04-071-1/+1
| | | | | | Enable the ruleset optimizer. The ruleset optimizer attempts to improve rulesets by removing rule duplication and making better use of rule ordering. Specifically, it does four things: 1. remove duplicate rules 2. remove rules that are a subset of another rule 3. combine multiple rules into a table when advantageous 4. re-order the rules to improve evaluation performance A second -o may be specified to use the currently loaded ruleset as a feedback profile to tailor the optimization of the quick rules to the actual network behavior. It is important to note that the ruleset optimizer will modify the ruleset to improve performance. A side effect of the ruleset modification is that per-rule accounting statistics will have different meanings than before. Use -o when loading the pf ruleset. From the pfctl man page: -o Enable the ruleset optimizer. The ruleset optimizer attempts to improve rulesets by removing rule duplication and making better use of rule ordering. Specifically, it does four things: 1. remove duplicate rules 2. remove rules that are a subset of another rule 3. combine multiple rules into a table when advantageous 4. re-order the rules to improve evaluation performance A second -o may be specified to use the currently loaded ruleset as a feedback profile to tailor the optimization of the quick rules to the actual network behavior. It is important to note that the ruleset optimizer will modify the ruleset to improve performance. A side effect of the ruleset modification is that per-rule accounting statistics will have different meanings than before.
* Cleanup IPSEC rules a bit. More work will be performed in this area over ↵Scott Ullrich2007-04-061-15/+3
| | | | the weekend.
* Both -HEAD and -RELENG_1 have had a hidden feature to allow IPSEC ↵Scott Ullrich2007-04-061-1/+9
| | | | compression. Add a checkbox to the screen to allow this hidden value to be toggled.
* Add UDP bit torrent traffic rule to wizardScott Ullrich2007-04-051-1/+3
|
* Fix bad paths resulting from move of routed packageBill Marquette2007-04-051-4/+4
| | | | Reported-by: Samer Chaer <samerchaer at gmail.com>
* Comment out what appears to be non-needed code.Scott Ullrich2007-04-041-2/+2
|
* Allow multiple stacked rules (allow) to work correctly in the time based new ↵Scott Ullrich2007-04-041-0/+3
| | | | world order. How deep this rabbit hole is yet to be deterimined.
* highlight schedule column on single clicksScott Dale2007-04-041-1/+1
|
* Do not zap cron entries with a large hammer. Instead gently use a knife.Scott Ullrich2007-04-031-3/+5
|
* Also configure loopback. Otherwise filter rules can not be loadedSeth Mos2007-04-031-1/+4
|
* Add back 59 minute optionScott Ullrich2007-04-031-0/+1
|
* Deal with block type rules correctly during time based rule operationsScott Ullrich2007-04-031-2/+9
|
* Do not unset cron entries.. This needs a bit more work.Scott Ullrich2007-04-031-2/+2
|
* Correctly report falseScott Ullrich2007-04-031-1/+1
|
* rework the check code to be more readable since it is falsingScott Ullrich2007-04-031-4/+9
|
* Add more debugging infoScott Ullrich2007-04-031-0/+3
|
* Add debugging info for hourstatusScott Ullrich2007-04-031-1/+5
|
* Install deny rule correctlyScott Ullrich2007-04-021-2/+1
|
* Deny rules are already the defeault. Do not switch to allow.Scott Ullrich2007-04-021-2/+0
|
* * Remove 59 * Change 0 to 00 for consistencyScott Ullrich2007-04-021-2/+1
|
* * Add more debugging helpers to system logs * Unbreak logic since the recent ↵Scott Ullrich2007-04-022-3/+6
| | | | traffic shaper 'fix'
* Remove class elements from TD so that elements do not look strange.Scott Ullrich2007-04-021-1/+1
| | | | Suggested-by: Scott Dale
* Remove openvpn-csc when needed.Scott Ullrich2007-04-021-6/+6
| | | | Submitted-By: Fernando Lemos
* Remove trailing spaceScott Ullrich2007-04-021-1/+1
|
* Set /sbin/sysctl -n net.link.ether.inet.log_arp_movement=0 when shared ↵Scott Ullrich2007-04-021-0/+2
| | | | physical net is checked
* Use mwexec() to avoid printing out the sysctl operationScott Ullrich2007-04-021-1/+1
|
* * Do no \n * Be consistent on outputScott Ullrich2007-04-011-3/+3
|
* Add logging helper statementsScott Ullrich2007-04-011-6/+16
|
* Correctly handle hour and minutes on the dot.Scott Ullrich2007-04-011-1/+1
|
* Do not output blank gatewaysScott Ullrich2007-03-311-1/+6
|
* Handle port ranges correctlyScott Ullrich2007-03-301-10/+6
|
* Do not foreach through an item that does not existScott Ullrich2007-03-301-5/+7
|
* more logic checks.Scott Dale2007-03-302-34/+122
|
* more logic checksScott Dale2007-03-291-53/+83
|
* corrected schedule_inuse functionScott Dale2007-03-291-3/+2
|
* Added is_schedule_inuse()Scott Dale2007-03-291-0/+24
|
* Check that cron items exist before foreach()Scott Ullrich2007-03-291-0/+2
|
* Remove debugging statement. Remove missed code from HEAD.Scott Ullrich2007-03-291-1/+2
|
* Remove bogus IPSEC interface checksScott Ullrich2007-03-291-2/+1
|
* Correctly check if an alias is in useScott Ullrich2007-03-291-2/+2
|
OpenPOWER on IntegriCloud