Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Make sure one_pass i selected when CP is active | Ermal | 2012-07-04 | 1 | -0/+2 |
| | |||||
* | OpenVPN _servers_ can start on carp vips, just not _clients_. | jim-p | 2012-06-29 | 1 | -2/+2 |
| | |||||
* | Add missing global | Warren Baker | 2012-06-22 | 1 | -1/+1 |
| | |||||
* | Put configured limits on rules.limits file and load them before loading the ↵ | Ermal | 2012-06-11 | 1 | -34/+26 |
| | | | | ruleset. To avoid any issues with large rulests and options being loaded not first | ||||
* | Actually do not try to reload everything during bootup since it will be done ↵ | Ermal | 2012-06-07 | 1 | -1/+1 |
| | | | | by bootup code | ||||
* | Do not blindly startup check_reload_status check first | Ermal | 2012-06-07 | 1 | -1/+1 |
| | |||||
* | Make lock files availble to all users for usage from php process | Ermal | 2012-06-06 | 1 | -1/+3 |
| | |||||
* | Wrong branch | Ermal | 2012-06-05 | 5 | -234/+4 |
| | | | | | | Revert "Import OpenVPN cisco style radius attributes applying policy to logged in users. Feature #2100" This reverts commit 477cc2bc24b4b0a36b2bc765c1bb4d79a2eacaed. | ||||
* | Import OpenVPN cisco style radius attributes applying policy to logged in ↵ | Ermal | 2012-06-05 | 5 | -4/+234 |
| | | | | users. Feature #2100 | ||||
* | Do not allow empty passwords since this might cause problems for some ↵ | Ermal | 2012-05-30 | 1 | -1/+1 |
| | | | | authentication servers like ldap. Fixes #2326 | ||||
* | Fix input validation and import test. | jim-p | 2012-05-30 | 1 | -1/+1 |
| | |||||
* | Switch to ntpd from ports, add Services > NTP to select interfaces for ↵ | jim-p | 2012-05-30 | 1 | -2/+20 |
| | | | | | | | | | binding. Respect old ntp settings in the process. Conflicts: etc/inc/system.inc usr/local/www/fbegin.inc | ||||
* | Don't display a "mobile" user without a username. | jim-p | 2012-05-30 | 1 | -1/+2 |
| | |||||
* | Up the default for tables to 3000 | jim-p | 2012-05-29 | 1 | -4/+3 |
| | |||||
* | Add a knob to tune the maximum number of tables that can be defined, the pf ↵ | jim-p | 2012-05-29 | 2 | -5/+14 |
| | | | | default of 1000 is too low for systems with >500 aliases. | ||||
* | List logged-in IPsec xauth users and provide a mechanism to disconnect them. ↵ | jim-p | 2012-05-25 | 1 | -0/+37 |
| | | | | | | | | Implements #1986 Conflicts: usr/local/www/diag_ipsec.php | ||||
* | Switch to a common function to determine anti-lockout ports, and fix a bug ↵ | jim-p | 2012-05-25 | 1 | -13/+24 |
| | | | | that was getting the ports wrong with custom https+redirect on. | ||||
* | Don't resolve on ipsec_get_phase1_dst() results, because ↵ | jim-p | 2012-05-24 | 1 | -1/+1 |
| | | | | | | | | ipsec_get_phase1_dst() already does that before returning output. Conflicts: etc/inc/ipsec.inc | ||||
* | Test for empty here, rather than !, so a blank value (as from mobile ↵ | jim-p | 2012-05-24 | 1 | -1/+1 |
| | | | | clients) doesn't fall to the other tests. | ||||
* | Disable logging for now since it will spam every 60secs * #users | Ermal | 2012-05-23 | 1 | -1/+1 |
| | |||||
* | Fixes #2364. On busy pppoe servers it might take some time before mpd exits. ↵ | Ermal | 2012-05-23 | 1 | -0/+4 |
| | | | | Check for this before trying to restart | ||||
* | Fixes #2209. Obey the mtu value set on the interfaces.php page. Though this ↵ | Ermal | 2012-05-23 | 1 | -1/+4 |
| | | | | value will be overwritten if there is a configuration under PPP settings tab. Maybe a good idea is to set MRU at the same value if not set? | ||||
* | If specified use the default settings for bw limitation rather than 0 | Ermal | 2012-05-23 | 1 | -2/+2 |
| | |||||
* | Make file names match to make this work | Ermal | 2012-05-23 | 1 | -1/+1 |
| | |||||
* | Oops add forgotten global for config | Ermal | 2012-05-22 | 1 | -0/+1 |
| | |||||
* | If extra bw attributes are supplied during reauthentication apply and log them | Ermal | 2012-05-22 | 1 | -3/+49 |
| | |||||
* | Unlock if error occurs | Ermal | 2012-05-22 | 1 | -1/+4 |
| | |||||
* | Fixup ntpd logging | jim-p | 2012-05-16 | 1 | -1/+1 |
| | |||||
* | On its own, ntpd does not sync fast enough at bootup, so bring back the ↵ | jim-p | 2012-05-16 | 1 | -2/+6 |
| | | | | | | | | ntpdate sync but improve it so it can't get stuck forever. Conflicts: etc/rc.newwanipv6 | ||||
* | Hackish workaround for ntpd failing to move away from init when called from ↵ | jim-p | 2012-05-15 | 1 | -2/+2 |
| | | | | within PHP 5.2, PHP 5.3 has a better workaround. | ||||
* | Revert "Clear process signals before exec() or ntpd misbehaves if called ↵ | jim-p | 2012-05-15 | 1 | -3/+0 |
| | | | | | | from PHP on i386." -- this only works on PHP 5.3 This reverts commit ac4bc5853f75a8f8467f5c53704f33e2066c3da6. | ||||
* | Clear process signals before exec() or ntpd misbehaves if called from PHP on ↵ | jim-p | 2012-05-15 | 1 | -0/+3 |
| | | | | i386. | ||||
* | Use FreeBSD's ntpd instead in the backend | jim-p | 2012-05-15 | 1 | -30/+9 |
| | |||||
* | Fix ntp name here too | jim-p | 2012-05-15 | 1 | -5/+5 |
| | | | | | | Conflicts: etc/inc/priv.defs.inc | ||||
* | Revert "Bump config version to take care of new vips" - forgot to revert ↵ | jim-p | 2012-05-10 | 1 | -1/+1 |
| | | | | | | this when I reverted the main vip commit. This reverts commit ccf346ddb80997a4426484c25e5c3bd8a223990f. | ||||
* | Handle HTTPOnly and Secure flags on cookies | Warren Baker | 2012-05-09 | 1 | -0/+12 |
| | |||||
* | Revert "Make vips vhid be unique per parent interface!" - per cmb, this ↵ | jim-p | 2012-05-08 | 4 | -61/+49 |
| | | | | | | | | | | | | should not have been on RELENG_2_0 see ticket #2415 This reverts commit 4d0c032c528b10221a2ef894b5eca34f6fda39a7. Conflicts: etc/inc/openvpn.inc etc/inc/upgrade_config.inc etc/rc.filter_synchronize | ||||
* | Pull in fix for Ticket #1917 to RELENG_2_0 as well. | jim-p | 2012-05-08 | 1 | -3/+3 |
| | |||||
* | Move the stop_packages code to a function, and call the function from the ↵ | jim-p | 2012-05-08 | 2 | -1/+46 |
| | | | | shell script, and call the function directly for a reboot. Fixes #2402 and ticket #1564 | ||||
* | Use a better default update url | jim-p | 2012-05-07 | 1 | -2/+3 |
| | |||||
* | Whoops, typo. Fixed now. | jim-p | 2012-05-07 | 1 | -1/+1 |
| | |||||
* | Don't pass a shell escaped version of $realifl to ↵ | jim-p | 2012-05-07 | 1 | -1/+1 |
| | | | | pfSense_bridge_add_member(). Fixes bridging | ||||
* | Stop service needs to wait process to be stopped before trying to restart it. | Marcello Coutinho | 2012-05-07 | 1 | -3/+3 |
| | |||||
* | Better error handling for crypt_data and also better password argument handling | jim-p | 2012-04-30 | 1 | -5/+10 |
| | |||||
* | fix text. Ticket #2399 | Chris Buechler | 2012-04-26 | 1 | -1/+1 |
| | |||||
* | routes should not be skipped when IPsec is on WAN, as WAN may not be the ↵ | Chris Buechler | 2012-04-23 | 1 | -3/+2 |
| | | | | default gateway. | ||||
* | go back to scrub rather than "scrub in", the latter breaks MSS clamping for ↵ | Chris Buechler | 2012-04-23 | 1 | -3/+3 |
| | | | | egress traffic the way we use it. | ||||
* | Enable verbosity to actually put something in the logs | Ermal | 2012-04-13 | 1 | -1/+1 |
| | |||||
* | fix typo. Ticket #2371 | Chris Buechler | 2012-04-12 | 1 | -1/+1 |
| | |||||
* | Revert "RADIUS accounting updates are needed for PPPoE and L2TP too" | Chris Buechler | 2012-04-11 | 1 | -2/+0 |
| | | | | This reverts commit b6393be173ffd67eef1acaadf9624ce06b386d82. |