summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Remove blank line if only an ipv6 address is in useCharlieMarshall2014-08-281-3/+7
|
* improve/tidy up interfaces widgetCharlieMarshall2014-08-281-16/+10
|
* Move the fetching of a package's config file and additional files to ↵jim-p2014-08-192-63/+118
| | | | separate functions, and then have the "xml" package button perform these so that it is not only a redundant copy of the "pkg" reinstall button. This can help ensure a package files are in a known-good state before other actions are performed, in case the deinstall would fail or behave erratically due to other files being missing.
* fix gold alignment and redirectJared Dillard2014-08-194-4/+4
|
* Revert "make gold link more visable"Jared Dillard2014-08-1915-29/+21
| | | | This reverts commit a03943d203441a87ea9c01f383d451dfc921bdd2.
* make gold link more visableJared Dillard2014-08-1815-21/+29
|
* Do this check now that hash algos can be emptyErmal2014-08-181-4/+6
|
* Correct the ipsec status pages to show proper information as needed.Ermal2014-08-183-35/+41
|
* Correct processing and assignment on ikeid variable so it does the right thingErmal2014-08-181-5/+5
|
* Use proper path to setkey now that ipsec-tools are not used anymoreErmal2014-08-183-8/+8
|
* Correct the functions for returning tunnel status to use strongswan status ↵Ermal2014-08-182-29/+17
| | | | reports
* Allow HASH algorithms to be empty for phase2 in case the encryption one is ↵Ermal2014-08-182-12/+43
| | | | AES-GCM
* Add filter.so to list of extensions loaded for 2.2Matt Smith2014-08-181-0/+2
|
* Do not allow duplicate subnet entries on left|rightsubnet specification ↵Ermal2014-08-181-6/+14
| | | | since it will blackhole all traffic to that subnet when connection is setup as route
* Do not accept proposal out of that configured even for IKEv2 even though ↵Ermal2014-08-181-2/+1
| | | | there is no possibility in the GUI to set more than one proposal for Phase1 so far.
* Restore behaviour as with racoon to trigger tunnel startup from traffic that ↵Ermal2014-08-181-1/+2
| | | | needs to go into the tunnel. Even related to Ticket #3806.
* Do not show errors from trying to delete a socket or similarErmal2014-08-151-1/+1
|
* Ensure this is always an array to avoid a PHP error from foreach.jim-p2014-08-151-1/+5
|
* rightsourceip must be used with PSK+Xauth.Chris Buechler2014-08-141-2/+3
|
* This is required for PSK+Xauth. I'll commit that clarification in a bit.Chris Buechler2014-08-131-1/+6
| | | | | | Revert "Revert "Fix assignment of tunnel IPs to mobile clients."" This reverts commit 23ba08fc940b711f3b44551199890dc8e28a63b6.
* Revert "Fix assignment of tunnel IPs to mobile clients."Ermal2014-08-131-6/+1
| | | | | | This normally is not needed since the attr plugin deals with all this. This reverts commit 00311d6a841c0f6fc162ea11da06569f10220f5e.
* Actually disable this plugin for now. It was not really needed for solving ↵Ermal2014-08-121-3/+0
| | | | the issues with IKEv1
* Do not reset source and destination port range values when it's an ↵Renato Botelho2014-08-111-5/+9
| | | | associated rule created by nat port forward. It fixes #3778
* Move dhcp6c log to dhcpd.log, it fixes #3799Renato Botelho2014-08-111-2/+2
|
* Remove double defined 'localhost' on the list of networks to create outbound ↵Renato Botelho2014-08-111-1/+1
| | | | NAT rules. It should fix #3800
* Do not create automatic outbound NAT rule for disabled openvpn servers and ↵Renato Botelho2014-08-111-2/+2
| | | | clients
* Fix assignment of tunnel IPs to mobile clients.Chris Buechler2014-08-111-1/+6
|
* Fix #3798 - 'IPsec phase 2 pinghost is not used if the source IP should be a ↵Matt Smith2014-08-081-5/+17
| | | | virtual IP address'
* Avoid a "Cannot use string offset as an array" error if the packages section ↵jim-p2014-08-081-4/+7
| | | | of the config is missing.
* Require click-through POST confirmation when restoring or deleting a ↵jim-p2014-08-081-17/+46
| | | | configuation from the backup history page.
* Do not execute DNS resolution on GET, only pre-fill Host box so the user can ↵jim-p2014-08-081-37/+37
| | | | press the button to execute. Turn alias creation links into submit buttons for POST. While here, remove some backticks and simplify a little.
* Correct this so the dpdaction is created properly as restartErmal2014-08-081-1/+1
|
* Shorten the wait at "reload" in startup wizard to 5 seconds from 60. That's ↵Chris Buechler2014-08-081-1/+1
| | | | more than adequate for current systems, no need to make people sit there for 1 minute. Many likely click out via the logo and miss the last screen entirely.
* Do a reload on the cofniguration which is better than update. Also let the ↵Ermal2014-08-071-2/+1
| | | | keyingtries to 3 rather than forever to avoid problems on recovery.
* Change the logic of the vpn config generation to make connectivity more ↵Ermal2014-08-072-162/+167
| | | | stable especially ipsec. Also for IKEv1 just generate the policies and only on traffic start them.
* Move the rekey to yes always to avoid issues.Ermal2014-08-071-1/+1
|
* Per the dhcpd.conf man page and other documentation from ISC, mclt must not ↵Chris Buechler2014-08-061-3/+2
| | | | be defined on the secondary.
* Encode interface/VIP descriptions before displaying them on the NTP daemon ↵jim-p2014-08-061-1/+1
| | | | settings.
* Encode interface/VIP descriptions before displaying them on the GRE and GIF ↵jim-p2014-08-062-2/+5
| | | | | | pages also; While here, the GRE page was missing IP aliases from its list of bind IPs, add it in.
* Encode the detail field of an alias entry before displaying its contents ↵jim-p2014-08-061-1/+1
| | | | back to the user.
* Escape the individual dnsmasq advanced/custom optionsjim-p2014-08-062-2/+2
|
* Allow to add ipalias vip to lo0, it should fix #3773Renato Botelho2014-08-051-8/+3
|
* Use GPS type presets only to pre-set values then user can change it. After ↵Renato Botelho2014-08-051-3/+5
| | | | user changes, save type always as Custom to avoid overwriting values when user attempt to edit. It fixes #3782
* More non-functional changes to make code more readableRenato Botelho2014-08-051-22/+29
|
* Fix indent and spacesRenato Botelho2014-08-051-17/+13
|
* This if is unecessary since input_errors is unset in the line aboveRenato Botelho2014-08-051-87/+85
|
* Fix indent and whitespacesRenato Botelho2014-08-052-321/+346
|
* Make sure there are not empty options on dst select to avoid creating empty ↵Renato Botelho2014-08-052-0/+12
| | | | user or group. This issue was introduced by b4e9a4da
* Fix select nameRenato Botelho2014-08-051-1/+1
|
* Fix input validation logic on diag_testport.php, escape more shell arguments ↵jim-p2014-08-041-3/+3
| | | | for good measure
OpenPOWER on IntegriCloud