Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Do not process IPFW rules if captive portal is disabled. | Scott Ullrich | 2009-09-17 | 1 | -1/+3 |
| | |||||
* | Cap max requests at 500 | Scott Ullrich | 2009-09-17 | 1 | -6/+0 |
| | |||||
* | Adding PHP_FCGI_MAX_REQUESTS => 500. This problem seems to stem from a ↵ | Scott Ullrich | 2009-09-17 | 1 | -9/+10 |
| | | | | little-known issue with PHP: PHP stops accepting new FastCGI connections after handling 500 requests; unfortunately, there is a potential race condition during the PHP cleanup code in which PHP can be shutting down but still have the socket open, so lighty can send request number 501 to PHP and have it accepted, but then PHP appears to simply exit, causing a 500 return from lighty. | ||||
* | Adding PHP_FCGI_MAX_REQUESTS => 500. This problem seems to stem from a ↵ | Scott Ullrich | 2009-09-17 | 1 | -0/+8 |
| | | | | little-known issue with PHP: PHP stops accepting new FastCGI connections after handling 500 requests; unfortunately, there is a potential race condition during the PHP cleanup code in which PHP can be shutting down but still have the socket open, so lighty can send request number 501 to PHP and have it accepted, but then PHP appears to simply exit, causing a 500 return from lighty. | ||||
* | Using /tmp for packet captures is a bad idea, mmmkay? | Scott Ullrich | 2009-09-16 | 1 | -0/+5 |
| | |||||
* | We need to link carp interfaces to wan and lan. This used to be the ↵ | Scott Ullrich | 2009-09-15 | 1 | -3/+8 |
| | | | | behavior but somehow was reverted. | ||||
* | set auto_release | Chris Buechler | 2009-09-12 | 1 | -1/+1 |
| | |||||
* | Disable NATT | Scott Ullrich | 2009-09-02 | 1 | -2/+2 |
| | |||||
* | rename interface to OPTYmdHis Resolves #16 | Scott Ullrich | 2009-08-24 | 1 | -1/+2 |
| | |||||
* | Remove whitespace and \t | Scott Ullrich | 2009-08-24 | 1 | -1/+1 |
| | |||||
* | Use array_splice() to unset items that should not be sync'd (nosync) ↵ | Scott Ullrich | 2009-08-24 | 1 | -16/+30 |
| | | | | Resolves #38 | ||||
* | Make altq driver list up to date with 7.2 | Seth | 2009-08-21 | 1 | -6/+7 |
| | |||||
* | Add vge interface to AltQ capable list | Seth | 2009-08-21 | 1 | -1/+2 |
| | |||||
* | Sync run_plugins() with head | Scott Ullrich | 2009-08-21 | 1 | -21/+15 |
| | |||||
* | Unbreak parse_config plugins and fix autoconfigbackup | Scott Ullrich | 2009-08-21 | 1 | -8/+10 |
| | |||||
* | Disable sshlockout. It's locking out after one failed login now that it's ↵ | Chris Buechler | 2009-08-20 | 1 | -1/+0 |
| | | | | reading the logs correctly. It also isn't configurable, doesn't have a status page. Since 1.2.3 is close, let's ditch this from RELENG_1_2 and fix it properly for 2.0. | ||||
* | Merge branch 'RELENG_1_2' of http://gitweb.pfsense.org/pfsense/mainline into ↵ | Chris Buechler | 2009-08-17 | 2 | -5/+13 |
|\ | | | | | | | RELENG_1_2 | ||||
| * | When a UDP reflection line was added for inetd, it was added as stream | Scott Ullrich | 2009-08-16 | 1 | -3/+6 |
| | | |||||
| * | Cleanup NanoBSD firmware upgrade | Scott Ullrich | 2009-08-12 | 1 | -2/+7 |
| | | |||||
* | | Fix typo | Chris Buechler | 2009-08-17 | 1 | -1/+1 |
|/ | |||||
* | Make sure config.inc is sourced | Scott Ullrich | 2009-08-10 | 1 | -2/+3 |
| | |||||
* | Allow logging everything to syslog (allows syslog of snort, amongst other ↵ | Chris Buechler | 2009-08-09 | 1 | -0/+6 |
| | | | | things) | ||||
* | Allow tcpdump by default on enc. There is no measurable performance impact, ↵ | Chris Buechler | 2009-08-08 | 1 | -2/+2 |
| | | | | and it's annoying to flip the sysctls to allow when needed. | ||||
* | add "Disable reply-to" box. Work around for bug #14 | Chris Buechler | 2009-08-03 | 1 | -1/+1 |
| | |||||
* | Tell syslogd to not compress information to the following line is repeated N ↵ | Scott Ullrich | 2009-07-29 | 1 | -3/+3 |
| | | | | times. This unbreaks sshlockout_pf. | ||||
* | Don't log an error unless there really is one. | Chris Buechler | 2009-07-24 | 1 | -2/+4 |
| | |||||
* | Fix rdr on PPPoE and PPTP servers | Chris Buechler | 2009-07-23 | 1 | -4/+4 |
| | |||||
* | Revert the flowtable addition that should have never been accidently ↵ | Scott Ullrich | 2009-07-19 | 1 | -14/+13 |
| | | | | commited. Skip pfsync0 similar to how we do in master/HEAD | ||||
* | Load glxsb by default, unless disabled. Add option to disable to System -> ↵ | Chris Buechler | 2009-07-19 | 1 | -1/+20 |
| | | | | Advanced. | ||||
* | Fix variable name so that the prefer old SA knob actually does what one ↵ | Seth | 2009-07-16 | 1 | -1/+1 |
| | | | | expects it to do. | ||||
* | needs to be a global now | Scott Ullrich | 2009-07-15 | 1 | -0/+2 |
| | |||||
* | Do not allow muting of serial + full install | Scott Ullrich | 2009-07-15 | 1 | -0/+2 |
| | |||||
* | Do not allow muting of a serial console. The kernel gets very cranky and ↵ | Scott Ullrich | 2009-07-15 | 1 | -1/+9 |
| | | | | dishes cannot control tty errors | ||||
* | Switch over the dns list from arguments to dnswatch to a file which holds ↵ | Seth | 2009-07-14 | 1 | -4/+3 |
| | | | | them which dnswatch will use | ||||
* | Allow auto firmware upgrade to work on NanoBSD | Scott Ullrich | 2009-07-11 | 1 | -2/+3 |
| | |||||
* | Allow auto firmware upgrade to work on NanoBSD | Scott Ullrich | 2009-07-11 | 1 | -2/+11 |
| | |||||
* | For now set the number of flows to the same as allowable states. | Scott Ullrich | 2009-07-11 | 1 | -0/+3 |
| | |||||
* | Do not add hostname to watch in the refresh ipsec policy section, there may ↵ | Seth | 2009-07-11 | 2 | -4/+7 |
| | | | | | | | | | | | | be other tunnels using the same endpoint which need refreshing as well. This is also done in the part where the racoon configuration is written so it's safe to skip it here. Silence the logging in the dnscache code and the ipsec route add code into a debug check FIXME: there is a possible situation where hostname changes can be missed. In a lot of tunnels situation there might be updates of other hostnames that changed while we were reconfiguring. Not sure how to handle that. | ||||
* | Make the dnswatch list array unique before processing | Seth | 2009-07-11 | 1 | -0/+1 |
| | |||||
* | Increase the PHP running memory limit to 128MB from 32MB, on 1.5MB large | Seth | 2009-07-09 | 1 | -2/+2 |
| | | | | config XML files we run out of memory. | ||||
* | This routine was not meant to foreach() even though it is inside a ↵ | Scott Ullrich | 2009-07-09 | 1 | -0/+1 |
| | | | | foreach(). It's slightly confusing but the foreach obtains the correct namespace and then processes. Add the needed break; statemenet because on subequent foreach() loops, the carp password will be WRONG/BLANK. | ||||
* | MFC fix from Ermal | Chris Buechler | 2009-07-09 | 1 | -12/+12 |
| | | | | Fixes #26 | ||||
* | Do not call mute_kernel_msgs() it causes havoc. | Scott Ullrich | 2009-07-07 | 1 | -4/+0 |
| | |||||
* | Match 4.X polling behavior. See thread "Polling and kern.polling.idle_poll" | Scott Ullrich | 2009-07-03 | 1 | -0/+1 |
| | |||||
* | Remove trailing / | Scott Ullrich | 2009-07-01 | 1 | -2/+2 |
| | |||||
* | Add missing / | Scott Ullrich | 2009-07-01 | 1 | -1/+1 |
| | |||||
* | Correct the name its parse_config | Scott Ullrich | 2009-06-30 | 1 | -1/+1 |
| | |||||
* | Correct the name its parse_config | Scott Ullrich | 2009-06-30 | 1 | -2/+2 |
| | |||||
* | If the key is 0 then return, it is not a valid key. | Scott Ullrich | 2009-06-27 | 1 | -1/+1 |
| | |||||
* | Surpress sem_ errors | Scott Ullrich | 2009-06-27 | 1 | -0/+4 |
| |