Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Remove blank line if only an ipv6 address is in use | CharlieMarshall | 2014-08-28 | 1 | -3/+7 |
| | |||||
* | improve/tidy up interfaces widget | CharlieMarshall | 2014-08-28 | 1 | -16/+10 |
| | |||||
* | Move the fetching of a package's config file and additional files to ↵ | jim-p | 2014-08-19 | 2 | -63/+118 |
| | | | | separate functions, and then have the "xml" package button perform these so that it is not only a redundant copy of the "pkg" reinstall button. This can help ensure a package files are in a known-good state before other actions are performed, in case the deinstall would fail or behave erratically due to other files being missing. | ||||
* | fix gold alignment and redirect | Jared Dillard | 2014-08-19 | 4 | -4/+4 |
| | |||||
* | Revert "make gold link more visable" | Jared Dillard | 2014-08-19 | 15 | -29/+21 |
| | | | | This reverts commit a03943d203441a87ea9c01f383d451dfc921bdd2. | ||||
* | make gold link more visable | Jared Dillard | 2014-08-18 | 15 | -21/+29 |
| | |||||
* | Do this check now that hash algos can be empty | Ermal | 2014-08-18 | 1 | -4/+6 |
| | |||||
* | Correct the ipsec status pages to show proper information as needed. | Ermal | 2014-08-18 | 3 | -35/+41 |
| | |||||
* | Correct processing and assignment on ikeid variable so it does the right thing | Ermal | 2014-08-18 | 1 | -5/+5 |
| | |||||
* | Use proper path to setkey now that ipsec-tools are not used anymore | Ermal | 2014-08-18 | 3 | -8/+8 |
| | |||||
* | Correct the functions for returning tunnel status to use strongswan status ↵ | Ermal | 2014-08-18 | 2 | -29/+17 |
| | | | | reports | ||||
* | Allow HASH algorithms to be empty for phase2 in case the encryption one is ↵ | Ermal | 2014-08-18 | 2 | -12/+43 |
| | | | | AES-GCM | ||||
* | Add filter.so to list of extensions loaded for 2.2 | Matt Smith | 2014-08-18 | 1 | -0/+2 |
| | |||||
* | Do not allow duplicate subnet entries on left|rightsubnet specification ↵ | Ermal | 2014-08-18 | 1 | -6/+14 |
| | | | | since it will blackhole all traffic to that subnet when connection is setup as route | ||||
* | Do not accept proposal out of that configured even for IKEv2 even though ↵ | Ermal | 2014-08-18 | 1 | -2/+1 |
| | | | | there is no possibility in the GUI to set more than one proposal for Phase1 so far. | ||||
* | Restore behaviour as with racoon to trigger tunnel startup from traffic that ↵ | Ermal | 2014-08-18 | 1 | -1/+2 |
| | | | | needs to go into the tunnel. Even related to Ticket #3806. | ||||
* | Do not show errors from trying to delete a socket or similar | Ermal | 2014-08-15 | 1 | -1/+1 |
| | |||||
* | Ensure this is always an array to avoid a PHP error from foreach. | jim-p | 2014-08-15 | 1 | -1/+5 |
| | |||||
* | rightsourceip must be used with PSK+Xauth. | Chris Buechler | 2014-08-14 | 1 | -2/+3 |
| | |||||
* | This is required for PSK+Xauth. I'll commit that clarification in a bit. | Chris Buechler | 2014-08-13 | 1 | -1/+6 |
| | | | | | | Revert "Revert "Fix assignment of tunnel IPs to mobile clients."" This reverts commit 23ba08fc940b711f3b44551199890dc8e28a63b6. | ||||
* | Revert "Fix assignment of tunnel IPs to mobile clients." | Ermal | 2014-08-13 | 1 | -6/+1 |
| | | | | | | This normally is not needed since the attr plugin deals with all this. This reverts commit 00311d6a841c0f6fc162ea11da06569f10220f5e. | ||||
* | Actually disable this plugin for now. It was not really needed for solving ↵ | Ermal | 2014-08-12 | 1 | -3/+0 |
| | | | | the issues with IKEv1 | ||||
* | Do not reset source and destination port range values when it's an ↵ | Renato Botelho | 2014-08-11 | 1 | -5/+9 |
| | | | | associated rule created by nat port forward. It fixes #3778 | ||||
* | Move dhcp6c log to dhcpd.log, it fixes #3799 | Renato Botelho | 2014-08-11 | 1 | -2/+2 |
| | |||||
* | Remove double defined 'localhost' on the list of networks to create outbound ↵ | Renato Botelho | 2014-08-11 | 1 | -1/+1 |
| | | | | NAT rules. It should fix #3800 | ||||
* | Do not create automatic outbound NAT rule for disabled openvpn servers and ↵ | Renato Botelho | 2014-08-11 | 1 | -2/+2 |
| | | | | clients | ||||
* | Fix assignment of tunnel IPs to mobile clients. | Chris Buechler | 2014-08-11 | 1 | -1/+6 |
| | |||||
* | Fix #3798 - 'IPsec phase 2 pinghost is not used if the source IP should be a ↵ | Matt Smith | 2014-08-08 | 1 | -5/+17 |
| | | | | virtual IP address' | ||||
* | Avoid a "Cannot use string offset as an array" error if the packages section ↵ | jim-p | 2014-08-08 | 1 | -4/+7 |
| | | | | of the config is missing. | ||||
* | Require click-through POST confirmation when restoring or deleting a ↵ | jim-p | 2014-08-08 | 1 | -17/+46 |
| | | | | configuation from the backup history page. | ||||
* | Do not execute DNS resolution on GET, only pre-fill Host box so the user can ↵ | jim-p | 2014-08-08 | 1 | -37/+37 |
| | | | | press the button to execute. Turn alias creation links into submit buttons for POST. While here, remove some backticks and simplify a little. | ||||
* | Correct this so the dpdaction is created properly as restart | Ermal | 2014-08-08 | 1 | -1/+1 |
| | |||||
* | Shorten the wait at "reload" in startup wizard to 5 seconds from 60. That's ↵ | Chris Buechler | 2014-08-08 | 1 | -1/+1 |
| | | | | more than adequate for current systems, no need to make people sit there for 1 minute. Many likely click out via the logo and miss the last screen entirely. | ||||
* | Do a reload on the cofniguration which is better than update. Also let the ↵ | Ermal | 2014-08-07 | 1 | -2/+1 |
| | | | | keyingtries to 3 rather than forever to avoid problems on recovery. | ||||
* | Change the logic of the vpn config generation to make connectivity more ↵ | Ermal | 2014-08-07 | 2 | -162/+167 |
| | | | | stable especially ipsec. Also for IKEv1 just generate the policies and only on traffic start them. | ||||
* | Move the rekey to yes always to avoid issues. | Ermal | 2014-08-07 | 1 | -1/+1 |
| | |||||
* | Per the dhcpd.conf man page and other documentation from ISC, mclt must not ↵ | Chris Buechler | 2014-08-06 | 1 | -3/+2 |
| | | | | be defined on the secondary. | ||||
* | Encode interface/VIP descriptions before displaying them on the NTP daemon ↵ | jim-p | 2014-08-06 | 1 | -1/+1 |
| | | | | settings. | ||||
* | Encode interface/VIP descriptions before displaying them on the GRE and GIF ↵ | jim-p | 2014-08-06 | 2 | -2/+5 |
| | | | | | | pages also; While here, the GRE page was missing IP aliases from its list of bind IPs, add it in. | ||||
* | Encode the detail field of an alias entry before displaying its contents ↵ | jim-p | 2014-08-06 | 1 | -1/+1 |
| | | | | back to the user. | ||||
* | Escape the individual dnsmasq advanced/custom options | jim-p | 2014-08-06 | 2 | -2/+2 |
| | |||||
* | Allow to add ipalias vip to lo0, it should fix #3773 | Renato Botelho | 2014-08-05 | 1 | -8/+3 |
| | |||||
* | Use GPS type presets only to pre-set values then user can change it. After ↵ | Renato Botelho | 2014-08-05 | 1 | -3/+5 |
| | | | | user changes, save type always as Custom to avoid overwriting values when user attempt to edit. It fixes #3782 | ||||
* | More non-functional changes to make code more readable | Renato Botelho | 2014-08-05 | 1 | -22/+29 |
| | |||||
* | Fix indent and spaces | Renato Botelho | 2014-08-05 | 1 | -17/+13 |
| | |||||
* | This if is unecessary since input_errors is unset in the line above | Renato Botelho | 2014-08-05 | 1 | -87/+85 |
| | |||||
* | Fix indent and whitespaces | Renato Botelho | 2014-08-05 | 2 | -321/+346 |
| | |||||
* | Make sure there are not empty options on dst select to avoid creating empty ↵ | Renato Botelho | 2014-08-05 | 2 | -0/+12 |
| | | | | user or group. This issue was introduced by b4e9a4da | ||||
* | Fix select name | Renato Botelho | 2014-08-05 | 1 | -1/+1 |
| | |||||
* | Fix input validation logic on diag_testport.php, escape more shell arguments ↵ | jim-p | 2014-08-04 | 1 | -3/+3 |
| | | | | for good measure |