Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Fix the {interface}up checks. | Ermal Luçi | 2008-12-08 | 1 | -3/+3 |
| | |||||
* | Fix generation of pppoe reset cron entry. Not sure if this should stay here ↵ | Ermal Luçi | 2008-12-08 | 1 | -2/+2 |
| | | | | or go into inteface_pppoe_configure!? | ||||
* | fix CARP panics with VLANs | Chris Buechler | 2008-12-08 | 1 | -1/+12 |
| | |||||
* | Check to make sure file exists before operating on it. | Scott Ullrich | 2008-12-08 | 1 | -3/+9 |
| | |||||
* | Don't use broadcast on CARP IPs. | Chris Buechler | 2008-12-08 | 1 | -1/+1 |
| | |||||
* | Don't add CARP IPs on an interface that doesn't exist to prevent panic. | Chris Buechler | 2008-12-07 | 1 | -1/+10 |
| | |||||
* | log mwexec if developerspew is on | Chris Buechler | 2008-12-07 | 1 | -0/+2 |
| | |||||
* | Compare rules.debug to previously loaded rules. If no rule changes | Scott Ullrich | 2008-12-07 | 1 | -1/+14 |
| | | | | | | have occured, do not try to reload the rules and sync changes to backup members which can result in the rules being reloaded constantly when load balancing is in use, etc. | ||||
* | Shaper has no more enable disable functionality. | Ermal Luçi | 2008-12-07 | 1 | -16/+11 |
| | |||||
* | Fix services_dyndns_reset to be useful. | Ermal Luçi | 2008-12-07 | 1 | -4/+16 |
| | |||||
* | Add another parameter to interface bring down which can be used to destroy ↵ | Ermal Luçi | 2008-12-07 | 1 | -4/+6 |
| | | | | the interface if it is a virtual/cloned one. | ||||
* | Temporary Fix for vlan creation issue. | Seth Mos | 2008-12-05 | 1 | -1/+1 |
| | |||||
* | Fix rules with a gateway (not gateway groups) | Seth Mos | 2008-12-05 | 1 | -10/+18 |
| | |||||
* | Remove debugging | Seth Mos | 2008-12-05 | 1 | -1/+0 |
| | |||||
* | Split out IPSEC filter rules into seperate functions. | Seth Mos | 2008-12-05 | 1 | -90/+113 |
| | | | | Only add filter rules for the interface the tunnel is bonded to. | ||||
* | Fix gateway lookup to use $GatewaysList array | Seth Mos | 2008-12-04 | 1 | -14/+5 |
| | |||||
* | Oops, remove debugging | Seth Mos | 2008-12-04 | 1 | -4/+0 |
| | |||||
* | Generate Array With Gateway and Gateway Groups. Then reference them directly ↵ | Seth Mos | 2008-12-04 | 1 | -107/+36 |
| | | | | from the filter rule code. | ||||
* | Fix interface lookup with gateway groups. | Seth Mos | 2008-12-02 | 1 | -1/+1 |
| | | | | | | * next would be replacing the entire logic by directly referencing them from the new return_gateway_groups_array(). This will make the code much more readable. | ||||
* | Commit function that returns all gateway group items in a array after ↵ | Seth Mos | 2008-12-02 | 1 | -2/+93 |
| | | | | | | processing. The items from this array can then be directly reference from the filter code. | ||||
* | * Remove duplicate | Seth Mos | 2008-12-02 | 1 | -4/+3 |
| | | | | * tag array items by gateway name so we can directly refer them | ||||
* | Better handle floating rules. | Ermal Luçi | 2008-11-30 | 1 | -2/+2 |
| | |||||
* | Update shcedule code to new world order! | Ermal Luçi | 2008-11-30 | 1 | -333/+291 |
| | |||||
* | Correct field value to check | Seth Mos | 2008-11-30 | 1 | -1/+1 |
| | |||||
* | Micro optimization. | Ermal Luçi | 2008-11-30 | 1 | -3/+5 |
| | |||||
* | Use correct var. | Ermal Luçi | 2008-11-30 | 1 | -1/+1 |
| | |||||
* | Add some checks on interface_bring_down and remove unlinking of ↵ | Ermal Luçi | 2008-11-30 | 1 | -1/+4 |
| | | | | nameserver.conf it needs some more thinking on how to propperly do that. | ||||
* | Remove debugging | Seth Mos | 2008-11-30 | 1 | -4/+3 |
| | |||||
* | Correct error message. | Ermal Luçi | 2008-11-30 | 1 | -1/+1 |
| | |||||
* | It is legitimate to be called with an empty vlanif. The webgui uses this to ↵ | Ermal Luçi | 2008-11-30 | 1 | -10/+6 |
| | | | | create new vlans. | ||||
* | Correct some checks and use propper whitespace. | Ermal Luçi | 2008-11-30 | 1 | -10/+10 |
| | |||||
* | Untested but correct way to work with interfaces. | Ermal Luçi | 2008-11-30 | 1 | -18/+16 |
| | |||||
* | Cosmetic change to use the available function instead of replicating the ↵ | Ermal Luçi | 2008-11-30 | 1 | -11/+4 |
| | | | | process here. | ||||
* | Fix not needed escapes when using <<<EOF like start/end terminators. ↵ | Ermal Luçi | 2008-11-29 | 1 | -1/+1 |
| | | | | Pointy-hat: myself. | ||||
* | Untested change, exec.php is broken. | Seth Mos | 2008-11-29 | 1 | -1/+1 |
| | | | | Might work and prevent bogus gateway entries showing up. | ||||
* | Add more debugging to trace the pppoe problems. | Seth Mos | 2008-11-29 | 1 | -2/+6 |
| | |||||
* | I think mpd 4.x doesn't like "set pptp self 127.0.0.1" - removing this | Bill Marquette | 2008-11-29 | 1 | -1/+0 |
| | | | | | allows my iphone to connect to my pfsense box just like it does on 1.2.1 | ||||
* | Don't try to configure a blank WINS server, while it doesn't kill mpd, it | Bill Marquette | 2008-11-29 | 1 | -2/+2 |
| | | | | sure whines about it. | ||||
* | Add debug statement for pppoe and pptp issue with dynamic gateways. | Seth Mos | 2008-11-29 | 1 | -1/+2 |
| | | | | Perhaps it returns without a trim() | ||||
* | Tell ftp-proxy to tag packets passing on its rules with the same tag rdr ↵ | Ermal Luçi | 2008-11-28 | 1 | -2/+2 |
| | | | | rules does so at least some shaping policy can be applied on outbound packets through the Floating tab. | ||||
* | 'til the pptp patch gets in again activate the rdr needed for gre. | Ermal Luçi | 2008-11-28 | 1 | -1/+1 |
| | |||||
* | Add the quick option for the ftp-proxy rules until a better way of doing ↵ | Ermal Luçi | 2008-11-28 | 1 | -2/+2 |
| | | | | this comes up. | ||||
* | Limit scrub operation only to in direction as filter rules. For out FreeBSD ↵ | Ermal Luçi | 2008-11-28 | 1 | -1/+1 |
| | | | | and pf can handle themselves.(part 2 :) | ||||
* | Limit scrub operation only to in direction as filter rules. For out FreeBSD ↵ | Ermal Luçi | 2008-11-28 | 1 | -1/+1 |
| | | | | and pf can handle themselves. | ||||
* | * Convert NAT reflection and ftp proxy to use tags on filter rules. This ↵ | Ermal Luçi | 2008-11-28 | 1 | -151/+67 |
| | | | | | | | | | removes all that duplicated and not so clear code on the filter rules. * Remove the 'user proxy' from RFC 959 workaround rules to alleviate some problems in locking when this type of rules are used * Remove a global $used_pftpx_ports not needed anymore NOTE: Two new tags PFFTPPROXY and PFREFLECT are introduced for the purpose. Probably would make sense write something for documenting this tags. | ||||
* | Remove unused function. | Ermal Luçi | 2008-11-26 | 1 | -16/+0 |
| | |||||
* | Handle the case where WAN might be disabled or renamed. | Ermal Luçi | 2008-11-26 | 1 | -3/+3 |
| | |||||
* | Handle the case where WAN might be disabled or renamed. | Ermal Luçi | 2008-11-26 | 1 | -3/+3 |
| | |||||
* | There is a 'type' knob now. | Ermal Luçi | 2008-11-23 | 1 | -2/+2 |
| | |||||
* | Remove hardcoded checks and substitute with more generic method. | Ermal Luçi | 2008-11-23 | 1 | -1/+5 |
| |