summaryrefslogtreecommitdiffstats
path: root/etc/inc
Commit message (Collapse)AuthorAgeFilesLines
...
* Allow tcpdump by default on enc. There is no measurable performance impact, ↵Chris Buechler2009-08-081-2/+2
| | | | and it's annoying to flip the sysctls to allow when needed.
* add "Disable reply-to" box. Work around for bug #14Chris Buechler2009-08-031-1/+1
|
* Tell syslogd to not compress information to the following line is repeated N ↵Scott Ullrich2009-07-291-3/+3
| | | | times. This unbreaks sshlockout_pf.
* Don't log an error unless there really is one.Chris Buechler2009-07-241-2/+4
|
* Fix rdr on PPPoE and PPTP serversChris Buechler2009-07-231-4/+4
|
* Revert the flowtable addition that should have never been accidently ↵Scott Ullrich2009-07-191-14/+13
| | | | commited. Skip pfsync0 similar to how we do in master/HEAD
* Load glxsb by default, unless disabled. Add option to disable to System -> ↵Chris Buechler2009-07-191-1/+20
| | | | Advanced.
* Fix variable name so that the prefer old SA knob actually does what one ↵Seth2009-07-161-1/+1
| | | | expects it to do.
* needs to be a global nowScott Ullrich2009-07-151-0/+2
|
* Do not allow muting of serial + full installScott Ullrich2009-07-151-0/+2
|
* Do not allow muting of a serial console. The kernel gets very cranky and ↵Scott Ullrich2009-07-151-1/+9
| | | | dishes cannot control tty errors
* Switch over the dns list from arguments to dnswatch to a file which holds ↵Seth2009-07-141-4/+3
| | | | them which dnswatch will use
* Allow auto firmware upgrade to work on NanoBSDScott Ullrich2009-07-111-2/+3
|
* Allow auto firmware upgrade to work on NanoBSDScott Ullrich2009-07-111-2/+11
|
* For now set the number of flows to the same as allowable states.Scott Ullrich2009-07-111-0/+3
|
* Do not add hostname to watch in the refresh ipsec policy section, there may ↵Seth2009-07-112-4/+7
| | | | | | | | | | | | be other tunnels using the same endpoint which need refreshing as well. This is also done in the part where the racoon configuration is written so it's safe to skip it here. Silence the logging in the dnscache code and the ipsec route add code into a debug check FIXME: there is a possible situation where hostname changes can be missed. In a lot of tunnels situation there might be updates of other hostnames that changed while we were reconfiguring. Not sure how to handle that.
* Make the dnswatch list array unique before processingSeth2009-07-111-0/+1
|
* Increase the PHP running memory limit to 128MB from 32MB, on 1.5MB largeSeth2009-07-091-2/+2
| | | | config XML files we run out of memory.
* This routine was not meant to foreach() even though it is inside a ↵Scott Ullrich2009-07-091-0/+1
| | | | foreach(). It's slightly confusing but the foreach obtains the correct namespace and then processes. Add the needed break; statemenet because on subequent foreach() loops, the carp password will be WRONG/BLANK.
* MFC fix from ErmalChris Buechler2009-07-091-12/+12
| | | | Fixes #26
* Do not call mute_kernel_msgs() it causes havoc.Scott Ullrich2009-07-071-4/+0
|
* Match 4.X polling behavior. See thread "Polling and kern.polling.idle_poll"Scott Ullrich2009-07-031-0/+1
|
* Remove trailing /Scott Ullrich2009-07-011-2/+2
|
* Add missing /Scott Ullrich2009-07-011-1/+1
|
* Correct the name its parse_configScott Ullrich2009-06-301-1/+1
|
* Correct the name its parse_configScott Ullrich2009-06-301-2/+2
|
* If the key is 0 then return, it is not a valid key.Scott Ullrich2009-06-271-1/+1
|
* Surpress sem_ errorsScott Ullrich2009-06-271-0/+4
|
* Teach config about nanobsdScott Ullrich2009-06-271-2/+2
|
* Check to see if dir exists before blindly mounting rwScott Ullrich2009-06-251-0/+4
|
* Add missing conf_mount_ro();Scott Ullrich2009-06-251-0/+1
|
* No need to call conf_mount_rw() when generating config.cache, it is on /tmpScott Ullrich2009-06-251-3/+0
|
* Patch from Aarno Aukia for cvstrac ticket #1932Chris Buechler2009-06-251-2/+5
|
* remove watchdogChris Buechler2009-06-221-20/+0
|
* Disable watchdogd until we can find a workaround. When IPSEC is thumping ↵Scott Ullrich2009-06-221-1/+4
| | | | (or any other network intensive opeartion) for long period of times can trigger the watchdog. Really watchdogd needs to check to see if network packets are flowing because if network packets are flowing the box is up from our standpoint.
* patch from jim-p to fix remote VPN logging now that we have apingerChris Buechler2009-06-181-4/+4
|
* Adding base_package feature to restore menu items for base packages after ↵Scott Ullrich2009-06-171-0/+1
| | | | | | configuration restore.
* Handle packages on embedded the same. Ssshhhh, don't tell anyone.Scott Ullrich2009-06-171-0/+4
|
* Fix ruleset for > 100 OpenVPN connectionsChris Buechler2009-06-151-11/+4
| | | | clean up the old unused bridge code while here.
* Exclude ppp from interface mismatch checkScott Ullrich2009-06-061-1/+4
|
* Remove RRD options from the apinger configuration.Seth Mos2009-06-051-5/+0
| | | | They do not make any sense to generate since they are not used anywhere in 1.2
* Eventhough you can set the racoon admin socket to a different path in the ↵Seth Mos2009-06-031-4/+4
| | | | | | | | configuration it will be ignored by ipsec-tools 0.8+ Align all the sockets into the new path /var/db/racoon so that we can find it. Remove the old killall -HUP racoon as this prevents the newer racoon from properly loading it's initial configuration. This might actually also have been a possible problem on the old ipsec-tools since that we switch over to reloading via the admin socket.
* Oops, make that /bin/mkdirScott Ullrich2009-06-021-1/+1
|
* Exclude plip from get_interface_listScott Ullrich2009-06-011-0/+1
|
* Merge branch 'RELENG_1_2' of http://gitweb.pfsense.org/pfsense/mainline into ↵Chris Buechler2009-05-312-1/+13
|\ | | | | | | RELENG_1_2
| * Add NAT-T ports.Scott Ullrich2009-05-311-0/+7
| | | | | | | | Submitted-by: JimP@
| * Set hostname then call hostidScott Ullrich2009-05-311-1/+6
| |
* | fix static route deletionChris Buechler2009-05-311-1/+1
|/
* Ensure /var/db/racoon existsScott Ullrich2009-05-301-0/+2
|
* Oh dear, looks like I had the values for loss and latency reversed.Seth Mos2009-05-301-4/+4
| | | | That is not very useful.
OpenPOWER on IntegriCloud