Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Check for vertical bars in alias detail descriptions | Phil Davis | 2014-01-07 | 1 | -11/+45 |
| | | | | The descriptions of each entry in an alias are stored in config.xml as a list delimited by "||". So you cannot have "||" in the actual description (or the description effectively splits into the next entry). Also you cannot start or end the description with "|" or it will be very confusing having the config with "|||" in it. This code validates all that sort of invalid input. | ||||
* | Add 'limited' to ntpd restrict list to workaround CVE-2013-5211. It fixes #3384 | Renato Botelho | 2014-01-07 | 1 | -2/+2 |
| | |||||
* | Merge pull request #879 from phil-davis/master | Renato Botelho | 2014-01-07 | 1 | -2/+8 |
|\ | | | | | Update reserved_keywords checks to match firewall_aliases_edit | ||||
| * | Update reserved_keywords checks to match firewall_aliases_edit | Phil Davis | 2014-01-06 | 1 | -2/+8 |
| | | | | | | | | | | firewall_aliases_import should have the same checks for reserved names as firewall_aliases_edit This code should really be in a function in a common include file, but which one is the appropriate one? For now I made the checks the same. | ||||
* | | This might also say "icmpv6" here and lead to a bad rule. | jim-p | 2014-01-06 | 1 | -1/+1 |
| | | |||||
* | | Add an option to force a gateway to be down, it fixes #2847 | Renato Botelho | 2014-01-06 | 4 | -2/+22 |
|/ | |||||
* | Merge pull request #871 from phildd/master | Ermal Luçi | 2014-01-06 | 1 | -7/+23 |
|\ | | | | | Dynamic DNS: List GWGs in Interface to send update from | ||||
| * | DyndDNS edit: unset vars when no longer used | phildd | 2014-01-02 | 1 | -0/+4 |
| | | |||||
| * | List GWGs in Interface to send update from | phildd | 2013-12-30 | 1 | -7/+19 |
| | | |||||
* | | Merge pull request #878 from phil-davis/master | Ermal Luçi | 2014-01-05 | 1 | -1/+1 |
|\ \ | | | | | | | Bulk Import: fix copy-paste var name error | ||||
| * | | Bulk Import: fix copy-paste var name error | Phil Davis | 2014-01-05 | 1 | -1/+1 |
| | | | |||||
* | | | Merge pull request #877 from phil-davis/master | Ermal Luçi | 2014-01-05 | 1 | -15/+50 |
|\ \ \ | |/ / | | | | Allow individual line descriptions on alias bulk import | ||||
| * | | Allow individual line descriptions on alias bulk import | Phil Davis | 2014-01-05 | 1 | -15/+50 |
|/ / | | | | | | | | | This enhancement allows the user to make a text file of IP addresses, IP subnets and/or IP ranges, like they have always been able to do, but with this they can put a description after each IP number and that description text will be saved in the alias. All existing functionality without specifying a description is unchanged, so it is backward-compatible. This is handy when having aliases that are on all my pfSense boxes, I can make 1 text file, bulk import it on every system and now include descriptions of each chunk of IP address space. Note: The artificial limit of 200 character descriptions is to catch the case where a user pastes a long list or IP addresses, but they are all on 1 line. An error message is given, rather than importing the 1st IP and considered the remaining ones as the description. | ||||
* | | Merge pull request #875 from dotike/spellcheck | Ermal Luçi | 2014-01-03 | 3 | -3/+3 |
|\ \ | | | | | | | minor spelling correction for pfSense master branch | ||||
| * | | minor spelling correction for pfSense master branch | Isaac (.ike) Levy | 2014-01-03 | 3 | -3/+3 |
|/ / | | | | | | | Signed-off-by: Isaac (.ike) Levy <ike@blackskyresearch.net> | ||||
* | | Oops correct php syntax | Ermal | 2014-01-03 | 1 | -1/+1 |
| | | |||||
* | | Do not allocate the same pipe to everyone rather give each person its own! | Ermal | 2014-01-03 | 1 | -9/+9 |
| | | |||||
* | | Use empty here for testing even if the setting is unset | Ermal | 2014-01-03 | 1 | -1/+1 |
| | | |||||
* | | Move to zerocopy_enbale for bpf to optimize bpf logging which uses bpf ↵ | Ermal | 2014-01-03 | 1 | -1/+2 |
| | | | | | | | | interface. This should increase the general performance since pflog is always enabled. | ||||
* | | Merge pull request #873 from tuyan/patch/copyright_years | Chris Buechler | 2014-01-03 | 1 | -1/+1 |
|\ \ | | | | | | | Update product_copyright_years end to be calculated on the fly. | ||||
| * | | Update copyright_years to be calculated on the fly. | Tuyan Ozipek | 2014-01-02 | 1 | -1/+1 |
|/ / | |||||
* | | fix syntax | Renato Botelho | 2014-01-02 | 1 | -1/+1 |
| | | |||||
* | | Fix filter regex | Renato Botelho | 2014-01-02 | 1 | -1/+1 |
| | | |||||
* | | Merge pull request #870 from blagynchy/patch-1 | Renato Botelho | 2014-01-02 | 1 | -1/+1 |
|\ \ | | | | | | | Happy New Year 2014! | ||||
| * | | Happy New Year 2014! | blagynchy | 2014-01-02 | 1 | -1/+1 |
|/ / | | | | | | | | | | | | | | | | | Optimal: Just updating the copyright years; I wish to all of you all of health, happiness and good luck of earth to be in your hands for the new year! Other will come up later :) And make pfsense better then before, more flexible for management/viewing from web (3rd party) using samba,ftp,whois,hw temp..etc. Best regards. | ||||
* | | Upgrade all firewall rules to include a tracker field. Add a tracker field ↵ | Ermal | 2013-12-31 | 2 | -1/+27 |
| | | | | | | | | even for nat for later usage while here. | ||||
* | | Generate a tracker id for the filter rules for now. Maybe for nat rules as well? | Ermal | 2013-12-31 | 2 | -2/+9 |
| | | |||||
* | | Remove scrub as well | Ermal | 2013-12-30 | 1 | -1/+1 |
|/ | |||||
* | Remove even negating nat rules | Ermal | 2013-12-30 | 1 | -1/+1 |
| | |||||
* | Correct matching for single rule. Somehow the egrep did not work there! | Ermal | 2013-12-30 | 1 | -1/+1 |
| | |||||
* | Speed up a bit rule number identification by avoiding going into kernel but ↵ | Ermal | 2013-12-30 | 1 | -14/+39 |
| | | | | using the rules parsing of pf which gives the same effect. | ||||
* | Merge pull request #866 from andrespetralli/master | Renato Botelho | 2013-12-30 | 4 | -43/+165 |
|\ | | | | | Enabling advanced RFC 2136 configuration for DHCPd service | ||||
| * | Enabling advanced RFC 2136 configuration for DHCPd service | Andres Petralli | 2013-12-23 | 4 | -43/+165 |
| | | | | | | | | | | This change adds the ability to configure RFC 2136 domain name updates using a hmac-md5 keyname/key. | ||||
* | | Merge pull request #868 from phildd/master | Ermal Luçi | 2013-12-30 | 1 | -2/+2 |
|\ \ | | | | | | | Validate IP address ranges correctly on Alias Bulk Import | ||||
| * | | Validate IP address ranges correctly on Alias Bulk Import | phildd | 2013-12-29 | 1 | -2/+2 |
| | | | | | | | | | | | | | | | | | | The code was there to attempt to validate and implement IP address range lines in Alias Bulk Import e.g. 10.20.0.0-10.21.22.0 should produce a bunch of smaller ranges with appropriate CIDRs. This fixes the code so IP address ranges actually make it through into the resulting Alias. | ||||
* | | | Merge pull request #867 from phil-davis/master | Ermal Luçi | 2013-12-30 | 1 | -2/+2 |
|\ \ \ | |/ / |/| | | Fix display of CIDR/Update Freq in Alias Edit | ||||
| * | | Fix display of CIDR/Update Freq in Alias Edit | Phil Davis | 2013-12-29 | 1 | -2/+2 |
|/ / | | | | | Fixes #3376. I have no idea what the "^" characters were meant to do, but removing them makes the CIDR/Update Freq value be displayed correctly when editing. Will there be some other side-effect from removing the "^"? | ||||
* | | Modernize a bit the sshd sart file | Ermal | 2013-12-27 | 1 | -28/+19 |
| | | |||||
* | | Use the check properly! | Ermal | 2013-12-27 | 1 | -6/+2 |
| | | |||||
* | | Correct the check to what was intended | Ermal | 2013-12-27 | 1 | -1/+1 |
| | | |||||
* | | Make sense of interface mtu handling code. No need to do unneeded ↵ | Ermal | 2013-12-27 | 2 | -108/+50 |
| | | | | | | | | operations. This fixes slow boot times and proper handling of mtu for vlans though some work or better model is needed for other interface types. Manual merge of 53555bf2f796cd53cf649410fe1827a9a45fc4a7 | ||||
* | | Add sshd service to list (if enabled) | jim-p | 2013-12-27 | 1 | -0/+13 |
| | | |||||
* | | Delete static route when monitor IP is removed, also save monitor IP even ↵ | Renato Botelho | 2013-12-27 | 1 | -9/+9 |
| | | | | | | | | when it's disabled | ||||
* | | Fix a bug introduced in commit 06b8d43c that breaks return_gateways_array() ↵ | Renato Botelho | 2013-12-27 | 1 | -1/+1 |
| | | | | | | | | called with $disabled == false | ||||
* | | No reason to set the same value to ipprotocol | Renato Botelho | 2013-12-27 | 1 | -2/+0 |
| | | |||||
* | | fix typo | Chris Buechler | 2013-12-26 | 1 | -2/+2 |
| | | |||||
* | | Fix wording/spacing | jim-p | 2013-12-26 | 1 | -2/+6 |
| | | |||||
* | | Add support for local (push route) and remote (iroute) network definitions ↵ | jim-p | 2013-12-26 | 2 | -7/+93 |
| | | | | | | | | in an OpenVPN client-specific override entry. | ||||
* | | Make this box a little narrow so it doesn't force the descriptions to wrap. | jim-p | 2013-12-26 | 1 | -1/+1 |
| | | |||||
* | | Add a "status" subcommand to the svc php shell script. | jim-p | 2013-12-26 | 1 | -2/+17 |
| | |