summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Bump PRODUCT_REVISION to 2.3.4-p1v2.3.4_1Renato Botelho2017-07-141-1/+1
|
* Use an alternate method to stop unbound and fix #7326jim-p2017-07-141-6/+19
| | | | | (cherry picked from commit 782453b4dbb77e5bc97a43f56b95a006c5434d65) (cherry picked from commit 67fea036201f5af338338f6113033574ec25777e)
* If a client address is in the webConfiguratorlockout table, do not allow ↵jim-p2017-07-141-0/+25
| | | | | | | | | them to access the GUI. Print an error and kill their states. Ticket #7693 Extra check to be sure that an existing open state cannot bypass lockout controls. (cherry picked from commit cc9b0f76da4936ac7510eee6cb5e0574d11b5973) (cherry picked from commit f0da1eda7c38c18202cc0563fd1c83c20a05e2b2)
* Fix typojim-p2017-07-131-2/+2
| | | | | (cherry picked from commit 2c3b9ac554cc3940962e7f9b1799857583c394ab) (cherry picked from commit 930914fd813130b0d1bd8af2ff09e6832a5e7862)
* Restructure how unbound zone data is written to fix processing of "redirect" ↵jim-p2017-07-133-36/+104
| | | | | | | | | zone entries. Fixes #7690 Also corrects some other misc issues for formatting of zone data. While here, add an option, not exposed in the GUI, for users to get the previous behavior of defining short names for hosts. (cherry picked from commit 021332fa29f0c08bff833ce1c7ddcb9ac9a769b1)
* Improve the way the auth server list is generated and account for a key ↵jim-p2017-07-101-4/+2
| | | | | | being removed from the array when deleting. Fixes #7682 (cherry picked from commit fa628b1a15a1c03343caa2735e09de291ae4e382)
* Removed MSS clamping exclusionsRobbert Rijkse2017-07-061-4/+1
| | | | (cherry picked from commit 53c26adecad735f7a015466dbbcba3f22655a902)
* Several complaints of unbound problems after commiting, so back this out. ↵jim-p2017-07-061-22/+6
| | | | | | Revert "Change the way unbound is stopped when the process is being restarted, to give the old process enough time to exit cleanly. Fixes #7326" This reverts commit 863804a917987ea10993433c84399b5711c3c352.
* Fix missing line from openssl.cnfjim-p2017-07-051-0/+1
| | | | (cherry picked from commit c369871083ee6a5be958129df5457c8e952aa9e2)
* Include User Agent information when update bogons listRenato Botelho2017-07-051-0/+8
|
* Remove extra spaces from User AgentRenato Botelho2017-07-053-4/+4
|
* Send uniqueid instead of UUID on user-agentRenato Botelho2017-07-054-17/+23
|
* Declare user_agent variable in the function it's usedRenato Botelho2017-07-051-10/+5
|
* Move uniqueid read to a function system_get_uniqueid()Renato Botelho2017-07-052-3/+21
|
* Change the way unbound is stopped when the process is being restarted, to ↵jim-p2017-06-291-6/+22
| | | | | | give the old process enough time to exit cleanly. Fixes #7326 (cherry picked from commit 38d110824c87ff60c6289c0432d55009586ceee4)
* unbound-control needs to know the config path or else it can't work ↵jim-p2017-06-291-2/+2
| | | | | | properly. Fixes #7667 (cherry picked from commit 8a0aa42c197361ebb82387e5bdc8378e5440837f)
* Set a value for this variable in each case, so a previous value isn't ↵jim-p2017-06-291-0/+1
| | | | | | | re-used in a loop. (cherry picked from commit faab657a256f9385d5e0ffb4084666e760b515a5) (cherry picked from commit 86ab9eb54b30b591703e752ceca047d202b76332)
* Update diag_gmirror.phpBBcan1772017-06-261-2/+2
| | | | | | Fix typo (cherry picked from commit 55588e0ce32865568522e0afd0b577fdfabd3b74)
* Merge pull request #3766 from phil-davis/gwbl-issue-7659-RELENG_2_3_4Renato Botelho2017-06-261-6/+8
|\
| * Issue #7659 foreach warning on adding gateway RELENG_2_3Phil Davis2017-06-251-6/+8
|/ | | | Signed-off-by: Phil Davis <phil@jankaritech.com>
* Fix interface groups linkjim-p2017-06-231-1/+1
| | | | (cherry picked from commit c0dd390b666d86b6b9ea61438c95b1370adda052)
* Use recently added hwaddr field to restore original MAC addressRenato Botelho2017-06-212-36/+3
|
* Revert "Use specific branch for gnid"Renato Botelho2017-06-211-1/+1
| | | | | | It's not necessary anymore after 97b5bfe35a This reverts commit 97b5bfe35a46651762f9037b113ed72de7fc1c27.
* Removed htmlspecialchars when loading leases from configYoann Lecuyer2017-06-211-2/+2
| | | | | | (cherry picked from commit 2322e9f3cb6dea9203d63a17c6a27de3a2c6b8bc) (cherry picked from commit b4ff414aef9f43dce0931974dd18e28a19cdadda)
* Add missing break for cloudflare casePhil Davis2017-06-211-0/+1
| | | | | | (cherry picked from commit d900381c9384676462c91c0b2e7e59ec42723237) (cherry picked from commit 2c4865e3fa05cf589891304933fa414a58381261)
* Integrate various cloudflare changesPhil Davis2017-06-211-3/+1
| | | | | | (cherry picked from commit 5ce6ce4b1ad850e70d5a2fe218317b1a1b545907) (cherry picked from commit 543ea703f2dd41e53a746772332eb83bfb8ead3e)
* Add more checks to eliminate empty config tags in package settings. Fixes #7624jim-p2017-06-211-3/+13
| | | | (cherry picked from commit de147d3d614c877df2022d85d37256a93047764c)
* pkg_edit, fix empty config tag checkPiBa-NL2017-06-211-1/+1
| | | | | (cherry picked from commit 6bf2a65086f7664c870a9565b70c39655c2a3dcf) (cherry picked from commit eb65e543b4d04b29ee494fe8d3710213e0fddf23)
* Change paid support help link to new support URLSteve Beaver2017-06-211-2/+2
| | | | (cherry picked from commit 16bf962333c3897170defb6bf95a2d69c7fdf506)
* virtualips, ability to sort the tablePiBa-NL2017-06-211-1/+1
| | | | | (cherry picked from commit 77c53e65fb7d4f40baec5c01a796a637c9cc5034) (cherry picked from commit 3af287f33a0ccf9de34e6dab8d1284c584ed0b37)
* Diag DNS disable Add Alias button when host field is changedPhil Davis2017-06-211-0/+17
| | | | | (cherry picked from commit 45eafdbd7b958bd4f9459d90a6a63ff8202eec3b) (cherry picked from commit 2e294992e4151a80a7d57aa4afabc12b9375539f)
* Diag DNS fix update alias button text after add aliasPhil Davis2017-06-211-0/+2
| | | | | | | | | | | 1) Lookup a name with Diag DNS 2) Press "Add Alias" The alias is added, but the button still says "Add Alias". Actually the alias exists by now. The button should say "Update Alias". Fix: once we have emitted the alias create/update success message, we can set $alias_exists true so that the rest of the code is based on the (possibly new) state.(cherry picked from commit 474b275684950ab8215b449987d4cbece005f9ed) (cherry picked from commit e78a436c5541a3ea837caa85f591932606249095)
* Diag DNS do not show Add Alias if no priv to add alaisPhil Davis2017-06-211-2/+2
| | | | | (cherry picked from commit 7fcccc8f09afd7f4a524ff598b43e15d678905eb) (cherry picked from commit f54a3ede59ee819500f272ea87b244b7ab949e41)
* Diag DNS do not create an empty alias if name does not resolvePhil Davis2017-06-211-10/+25
| | | | | (cherry picked from commit f445385114c43cb46b8188a7cea425648f7647f2) (cherry picked from commit 14e90f2e5d34ca34cf226ece4f8fcb4fb6c943fa)
* Remove stray debug-code (/tmp/script)Lorenz Schori2017-06-211-1/+0
| | | | | (cherry picked from commit a29361a2d94eed754255e75d63d511e7889d6c9f) (cherry picked from commit 12ca33f4dc915c37eeee4b6b86c7daa399fdad91)
* Fix net.inet.ip.random_id tunable description (Bug #6087)doktornotor2017-06-211-1/+1
| | | | | | (cherry picked from commit 77408e612de12311d9fd517b2de2de586f4c0ddb) (cherry picked from commit df0b717d364ac3743ae6161cde312157fefe781d)
* Fix APU2 with coreboot v4.x detectiondoktornotor2017-06-211-0/+1
| | | | | | | See https://forum.pfsense.org/index.php?topic=106444.msg716558#msg716558 (cherry picked from commit 9457d0f616506bf0e50e49d7d977ebc1aa945e4f) (cherry picked from commit 7ba3a0208039b80996374140a8e2a8bc4d16ff8d)
* Make consistent rule information sectionPhil Davis2017-06-214-66/+45
| | | | | (cherry picked from commit f0dc8b688c2b7d973bc18769579ee8cc6d3d2dad) (cherry picked from commit 4c4504b1e785396d92be853072a9c557c55b3c4a)
* Use is_numeric() to make sure $prefix is not 0jim-p2017-06-211-1/+1
|
* Update interfaces.incaaa2ppp2017-06-211-2/+6
| | | | | | | Not defined pid file on starting choparp. The pfSense may not kill the program to reconfiguration. (cherry picked from commit 7d316581f4bf05613a556867b1154e4b5b842b1a) (cherry picked from commit 22b18e3641aa9b0d23a33d66cee54a04f19401e9)
* Request PD even if no interfaces are set to track6 (Bug #4544)doktornotor2017-06-211-1/+1
| | | | | | | See https://redmine.pfsense.org/issues/4544#note-4 (cherry picked from commit b0837cebf9836c4cdd5873b3e463f1afb8403811) (cherry picked from commit 8740bd5ed417bbfc26fb57f35aa6bd74f737e4a5)
* Update dyndns.classxygrec2017-06-211-2/+2
| | | | | | (cherry picked from commit 61c813f96de90e07bb63075847dabc041a5560b8) (cherry picked from commit 0673b7b8eccfdd1d7aa8bd56de2ed6ba785a5370)
* Match whitespace after $vhid when checking CARP status to avoid partial ↵jim-p2017-06-201-1/+1
| | | | | | | | | matches. Fixes #7638 While here, fix variable references with braces and combine the two calls to grep into a single pattern. (cherry picked from commit fd4e14b8853e7a30ee23532d686270cb40d84d03) (cherry picked from commit 8cb09b295385faf4a3cd0af6e261cdf6f45b3d36)
* Activate FreeRADIUS 3 for 2.3.4jim-p2017-06-172-0/+2
|
* Add input validation for interface names on firewall_nat_edit.php and fix ↵jim-p2017-06-161-29/+33
| | | | encoding of the interface name in dst_change. Fixes #7651
* Fix handling of the 'type' parameter so it is validated and encoded on ↵jim-p2017-06-161-3/+8
| | | | diag_table.php. Fixes #7652
* Prevent the filename from being used to run XSS in the diag_edit.php file ↵jim-p2017-06-161-1/+1
| | | | browser. Fixes #7650
* Set options for BIND 9.11 and disable LMDB per ISC and US-CERT recommendationjim-p2017-06-151-0/+2
| | | | | | Ref: https://kb.isc.org/article/AA-01497 https://www.us-cert.gov/ncas/current-activity/2017/06/15/ISC-Releases-Security-Updates-BIND
* Set options for BIND 9.11 and disable LMDB per ISC and US-CERT recommendationjim-p2017-06-151-0/+3
| | | | | | | | Ref: https://kb.isc.org/article/AA-01497 https://www.us-cert.gov/ncas/current-activity/2017/06/15/ISC-Releases-Security-Updates-BIND (cherry picked from commit 4705e0f878ca65d1dd29fe408fc625a65983d996)
* Restore the captive portal feature to view the captive portal page directly ↵jim-p2017-06-141-3/+10
| | | | from the portal web server. Add this as an additional button so both methods are possible. Fixes #7646
OpenPOWER on IntegriCloud