summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Check for vertical bars in alias detail descriptionsPhil Davis2014-01-071-11/+45
| | | | The descriptions of each entry in an alias are stored in config.xml as a list delimited by "||". So you cannot have "||" in the actual description (or the description effectively splits into the next entry). Also you cannot start or end the description with "|" or it will be very confusing having the config with "|||" in it. This code validates all that sort of invalid input.
* Add 'limited' to ntpd restrict list to workaround CVE-2013-5211. It fixes #3384Renato Botelho2014-01-071-2/+2
|
* Merge pull request #879 from phil-davis/masterRenato Botelho2014-01-071-2/+8
|\ | | | | Update reserved_keywords checks to match firewall_aliases_edit
| * Update reserved_keywords checks to match firewall_aliases_editPhil Davis2014-01-061-2/+8
| | | | | | | | | | firewall_aliases_import should have the same checks for reserved names as firewall_aliases_edit This code should really be in a function in a common include file, but which one is the appropriate one? For now I made the checks the same.
* | This might also say "icmpv6" here and lead to a bad rule.jim-p2014-01-061-1/+1
| |
* | Add an option to force a gateway to be down, it fixes #2847Renato Botelho2014-01-064-2/+22
|/
* Merge pull request #871 from phildd/masterErmal Luçi2014-01-061-7/+23
|\ | | | | Dynamic DNS: List GWGs in Interface to send update from
| * DyndDNS edit: unset vars when no longer usedphildd2014-01-021-0/+4
| |
| * List GWGs in Interface to send update fromphildd2013-12-301-7/+19
| |
* | Merge pull request #878 from phil-davis/masterErmal Luçi2014-01-051-1/+1
|\ \ | | | | | | Bulk Import: fix copy-paste var name error
| * | Bulk Import: fix copy-paste var name errorPhil Davis2014-01-051-1/+1
| | |
* | | Merge pull request #877 from phil-davis/masterErmal Luçi2014-01-051-15/+50
|\ \ \ | |/ / | | | Allow individual line descriptions on alias bulk import
| * | Allow individual line descriptions on alias bulk importPhil Davis2014-01-051-15/+50
|/ / | | | | | | | | This enhancement allows the user to make a text file of IP addresses, IP subnets and/or IP ranges, like they have always been able to do, but with this they can put a description after each IP number and that description text will be saved in the alias. All existing functionality without specifying a description is unchanged, so it is backward-compatible. This is handy when having aliases that are on all my pfSense boxes, I can make 1 text file, bulk import it on every system and now include descriptions of each chunk of IP address space. Note: The artificial limit of 200 character descriptions is to catch the case where a user pastes a long list or IP addresses, but they are all on 1 line. An error message is given, rather than importing the 1st IP and considered the remaining ones as the description.
* | Merge pull request #875 from dotike/spellcheckErmal Luçi2014-01-033-3/+3
|\ \ | | | | | | minor spelling correction for pfSense master branch
| * | minor spelling correction for pfSense master branchIsaac (.ike) Levy2014-01-033-3/+3
|/ / | | | | | | Signed-off-by: Isaac (.ike) Levy <ike@blackskyresearch.net>
* | Oops correct php syntaxErmal2014-01-031-1/+1
| |
* | Do not allocate the same pipe to everyone rather give each person its own!Ermal2014-01-031-9/+9
| |
* | Use empty here for testing even if the setting is unsetErmal2014-01-031-1/+1
| |
* | Move to zerocopy_enbale for bpf to optimize bpf logging which uses bpf ↵Ermal2014-01-031-1/+2
| | | | | | | | interface. This should increase the general performance since pflog is always enabled.
* | Merge pull request #873 from tuyan/patch/copyright_yearsChris Buechler2014-01-031-1/+1
|\ \ | | | | | | Update product_copyright_years end to be calculated on the fly.
| * | Update copyright_years to be calculated on the fly.Tuyan Ozipek2014-01-021-1/+1
|/ /
* | fix syntaxRenato Botelho2014-01-021-1/+1
| |
* | Fix filter regexRenato Botelho2014-01-021-1/+1
| |
* | Merge pull request #870 from blagynchy/patch-1Renato Botelho2014-01-021-1/+1
|\ \ | | | | | | Happy New Year 2014!
| * | Happy New Year 2014!blagynchy2014-01-021-1/+1
|/ / | | | | | | | | | | | | | | | | Optimal: Just updating the copyright years; I wish to all of you all of health, happiness and good luck of earth to be in your hands for the new year! Other will come up later :) And make pfsense better then before, more flexible for management/viewing from web (3rd party) using samba,ftp,whois,hw temp..etc. Best regards.
* | Upgrade all firewall rules to include a tracker field. Add a tracker field ↵Ermal2013-12-312-1/+27
| | | | | | | | even for nat for later usage while here.
* | Generate a tracker id for the filter rules for now. Maybe for nat rules as well?Ermal2013-12-312-2/+9
| |
* | Remove scrub as wellErmal2013-12-301-1/+1
|/
* Remove even negating nat rulesErmal2013-12-301-1/+1
|
* Correct matching for single rule. Somehow the egrep did not work there!Ermal2013-12-301-1/+1
|
* Speed up a bit rule number identification by avoiding going into kernel but ↵Ermal2013-12-301-14/+39
| | | | using the rules parsing of pf which gives the same effect.
* Merge pull request #866 from andrespetralli/masterRenato Botelho2013-12-304-43/+165
|\ | | | | Enabling advanced RFC 2136 configuration for DHCPd service
| * Enabling advanced RFC 2136 configuration for DHCPd serviceAndres Petralli2013-12-234-43/+165
| | | | | | | | | | This change adds the ability to configure RFC 2136 domain name updates using a hmac-md5 keyname/key.
* | Merge pull request #868 from phildd/masterErmal Luçi2013-12-301-2/+2
|\ \ | | | | | | Validate IP address ranges correctly on Alias Bulk Import
| * | Validate IP address ranges correctly on Alias Bulk Importphildd2013-12-291-2/+2
| | | | | | | | | | | | | | | | | | The code was there to attempt to validate and implement IP address range lines in Alias Bulk Import e.g. 10.20.0.0-10.21.22.0 should produce a bunch of smaller ranges with appropriate CIDRs. This fixes the code so IP address ranges actually make it through into the resulting Alias.
* | | Merge pull request #867 from phil-davis/masterErmal Luçi2013-12-301-2/+2
|\ \ \ | |/ / |/| | Fix display of CIDR/Update Freq in Alias Edit
| * | Fix display of CIDR/Update Freq in Alias EditPhil Davis2013-12-291-2/+2
|/ / | | | | Fixes #3376. I have no idea what the "^" characters were meant to do, but removing them makes the CIDR/Update Freq value be displayed correctly when editing. Will there be some other side-effect from removing the "^"?
* | Modernize a bit the sshd sart fileErmal2013-12-271-28/+19
| |
* | Use the check properly!Ermal2013-12-271-6/+2
| |
* | Correct the check to what was intendedErmal2013-12-271-1/+1
| |
* | Make sense of interface mtu handling code. No need to do unneeded ↵Ermal2013-12-272-108/+50
| | | | | | | | operations. This fixes slow boot times and proper handling of mtu for vlans though some work or better model is needed for other interface types. Manual merge of 53555bf2f796cd53cf649410fe1827a9a45fc4a7
* | Add sshd service to list (if enabled)jim-p2013-12-271-0/+13
| |
* | Delete static route when monitor IP is removed, also save monitor IP even ↵Renato Botelho2013-12-271-9/+9
| | | | | | | | when it's disabled
* | Fix a bug introduced in commit 06b8d43c that breaks return_gateways_array() ↵Renato Botelho2013-12-271-1/+1
| | | | | | | | called with $disabled == false
* | No reason to set the same value to ipprotocolRenato Botelho2013-12-271-2/+0
| |
* | fix typoChris Buechler2013-12-261-2/+2
| |
* | Fix wording/spacingjim-p2013-12-261-2/+6
| |
* | Add support for local (push route) and remote (iroute) network definitions ↵jim-p2013-12-262-7/+93
| | | | | | | | in an OpenVPN client-specific override entry.
* | Make this box a little narrow so it doesn't force the descriptions to wrap.jim-p2013-12-261-1/+1
| |
* | Add a "status" subcommand to the svc php shell script.jim-p2013-12-261-2/+17
| |
OpenPOWER on IntegriCloud