summaryrefslogtreecommitdiffstats
path: root/etc/inc
Commit message (Collapse)AuthorAgeFilesLines
* Clear process signals before exec() or ntpd misbehaves if called from PHP on ↵jim-p2012-05-151-0/+3
| | | | i386.
* As suggested by wagonza, using SAMEORIGIN for X-Frame-Options is sufficient ↵jim-p2012-05-151-1/+1
| | | | here, and does allow the traffic graphs to work. Fixes #2419
* Use FreeBSD's ntpd instead in the backendjim-p2012-05-141-30/+9
|
* Fix ntp name here toojim-p2012-05-141-5/+5
|
* Whoops, don't flip these since I negated the test.jim-p2012-05-141-2/+2
|
* Flip this test around since it's safer to assume the dev mode is tun. Ticket ↵jim-p2012-05-141-3/+3
| | | | #2432
* allow port in virtual servers to be left blankDarren Embry2012-05-111-7/+11
| | | | in which case listening port would be inherited from the pool
* allow aliases for the ipaddr field in virtual servers (PEV-394754)Darren Embry2012-05-111-1/+13
|
* cleanup: code for building arrays for autocompleted fieldsDarren Embry2012-05-101-0/+13
|
* max_procs adjustments for small memory systems, attempt 2Irving Popovetsky2012-05-101-15/+19
| | | | | | | | | | | | | | | | | | | | | | | Per Jim P's feedback, move max_procs completely out of system_webgui_start() and move all of the memory/procs decision logic to system_generate_lighty_config(). Adjust the captive portal max_procs to reflect the low memory conditions like ALIX which tends to run out of memory quickly due to piggy PHP processes. In real life testing, each PHP process (with APC) can consume up to 64MB RAM. 128MB ALIX systems show an available RAM of 107 MB. 256MB ALIX systems show an available RAM of 228 MB. The logic here is that <128MB systems should never be running more than 1 PHP process, and <256MB systems should run 1 by default, or 2 if captive portal is running. Also give the top-end captive portal 1 more PHP process (6 now) although I think very busy captive portals will probably need more.
* prep work: function get_alias_list()Darren Embry2012-05-101-0/+33
| | | | | I wrote this function primarily to remove a lot of duplicate code that's there because of a lot of those autocomplete fields.
* Add click jacking support. Ticket #2419Scott Ullrich2012-05-101-1/+3
|
* Handle HTTPOnly and Secure flags on cookiesWarren Baker2012-05-091-0/+12
|
* Back out duplicated fix from 107e8acc - Ticket #1917 was already fixed ↵jim-p2012-05-081-9/+2
| | | | before this was added.
* Whoops, typo. Fixed now.jim-p2012-05-071-1/+1
|
* Don't pass a shell escaped version of $realifl to ↵jim-p2012-05-071-1/+1
| | | | pfSense_bridge_add_member(). Fixes bridging
* Stop service needs to wait process to be stopped before trying to ↵Marcello Coutinho2012-05-071-3/+3
| | | | restart/start it.
* Test if this is an array before using it as an array.jim-p2012-05-061-0/+2
|
* Add support for aliases in DNS Forwarder, fixes #2410Lorenz Schori2012-05-051-0/+6
|
* missed a spot for #2407Darren Embry2012-05-031-1/+4
|
* implement #2407: create config option for captive portal listening portDarren Embry2012-05-032-9/+23
|
* Move routing (radvd, routed, ospf, bgp) to its own log since these daemons ↵jim-p2012-05-011-2/+6
| | | | can be really spammy at times.
* Move the stop_packages code to a function, and call the function from the ↵jim-p2012-04-302-1/+46
| | | | shell script, and call the function directly for a reboot. Fixes #2402 and ticket #1564
* Better error handling for crypt_data and also better password argument handlingjim-p2012-04-301-5/+10
|
* Restore protection for the "destination any" case for port forward NAT ↵Erik Fonnesbeck2012-04-281-9/+14
| | | | Reflection, which was forgotten when shuffling around code before committing. Also add a couple other missing checks.
* fix text. ticket #2399Chris Buechler2012-04-261-1/+1
|
* The descr field might not exist, use a uppercase friendly namesmos2012-04-251-0/+2
|
* Make sure to stop the dhcpleases6 processsmos2012-04-241-0/+1
|
* routes should not be skipped when IPsec is on WAN, as WAN may not be the ↵Chris Buechler2012-04-231-3/+2
| | | | default gateway.
* Delete any existing /var/db/rrd/*.rrd files before restoring from the XMLPhil Davis2012-04-231-0/+3
|
* Minor corrections to function names in error messagesPhil Davis2012-04-231-23/+14
|
* go back to scrub rather than "scrub in", the latter breaks MSS clamping for ↵Chris Buechler2012-04-231-3/+3
| | | | egress traffic the way we use it
* Revert change to get_interface_list()'s $vfaces list for now. Interfaces in ↵Erik Fonnesbeck2012-04-221-3/+0
| | | | this list that are supposed to be listed on Interfaces: Assign need special logic on that page, which has not been added yet.
* Generate the correct corresponding link local from the carp mac.smos2012-04-201-1/+2
|
* Allow optionally using the type of NAT reflection implementation used for ↵Erik Fonnesbeck2012-04-201-18/+77
| | | | 1:1 mappings with port forwards as well, in addition to allowing the old type, which is still useful in its own way.
* Add message stating which interfaces are missing.Erik Fonnesbeck2012-04-201-0/+1
| | | | Suggestion from http://forum.pfsense.org/index.php/topic,48366.0.html
* Add some missing interface types in is_interface_mismatch() and ↵Erik Fonnesbeck2012-04-201-1/+4
| | | | get_interface_list()'s $vfaces. Fixes #2384
* Clean up filter_generate_reflection_nat, remove obsolete checks, and add new ↵Erik Fonnesbeck2012-04-201-35/+32
| | | | checks that are now needed. Ticket #2240
* Use filter_get_direct_networks_list instead of dumping a copy of the routing ↵Erik Fonnesbeck2012-04-201-17/+17
| | | | table. Ticket #2240
* Modify filter_get_direct_networks_list to optionally return an array ↵Erik Fonnesbeck2012-04-201-12/+34
| | | | instead, which includes subnet, friendly interface, and gateway (if applicable), for ticket #2240
* Update the default URL here for our new FreeBSD release.smos2012-04-191-2/+2
|
* Make sure VPN interface gateways are handled separatelyjim-p2012-04-181-0/+8
|
* Make sure to push elements we don't recognize on the stack too.smos2012-04-181-0/+2
|
* Add upgrade code that updates the dynamic gateway names to their new format ↵smos2012-04-182-1/+37
| | | | | | new $if_$type. Redmine Ticket #2332. I've tested a simple upgrade with 3 dynamic Wans with varying names and that appears to have succeeded. Needs more testing.
* Add the correct fix to pick up the IPv6 gateway for slaac interfacessmos2012-04-182-1/+2
|
* Make sure that SLAAC gateways show up in return_gateways_array();smos2012-04-181-1/+2
| | | | redmine ticket #1834
* Add support for SLAAC on the WAN interface, this is required for Stateless ↵smos2012-04-183-32/+46
| | | | | | | autoconf addressing. Normally this should only apply to Appliances that do not need to route. We automatically hook in the dhcp6 client to request name servers from DHCP6 in a information only mode. It will not attempt to request a address. For that you should use the plain DHCP6 option with a prefix size of none. This is for redmine ticket #1834
* Handle multiple IPv6 DNS servers in rc.newwanipv6, remove chunk of broken ↵smos2012-04-181-8/+1
| | | | code in the DHCPv6 server that added duplicate lines. Redmine ticket #2380
* Include the ntp facility also, should fix ntp loggingjim-p2012-04-171-1/+1
|
* Strip the ::1 from the 6to4 gateway addresssmos2012-04-161-1/+0
|
OpenPOWER on IntegriCloud