Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Merge pull request #1238 from DasTestament/master | Renato Botelho | 2014-06-25 | 1 | -2/+38 |
|\ | |||||
| * | Update openvpn.inc | Dmitriy K. | 2014-06-24 | 1 | -4/+3 |
| | | |||||
| * | Update openvpn.inc | Dmitriy K. | 2014-06-20 | 1 | -1/+6 |
| | | | | | | Added verbosity check in case when verbosity_level is absent in config.xml | ||||
| * | Update openvpn.inc | Dmitriy K. | 2014-06-20 | 1 | -2/+0 |
| | | | | | | Removed unnecessary "else {"; | ||||
| * | patchpack1 | Dmitriy K. | 2014-06-17 | 1 | -2/+36 |
| | | | | | | | | | | -Fix #3401 (Added tun option "Disable IPv6" -Added new options: route-nopull, route-noexec, verb; | ||||
* | | Add the AESGCM and XCBC on the list of algos availble | Ermal | 2014-06-24 | 1 | -3/+14 |
| | | |||||
* | | Actually use ph1ent ikeid here otherwise will duplicate ids here. | Ermal | 2014-06-24 | 1 | -1/+1 |
| | | |||||
* | | Fix dscp values and provide a config upgrade to fix values stored in ↵ | Renato Botelho | 2014-06-24 | 3 | -2/+19 |
| | | | | | | | | config.xml. This is a proper fix for #3688 | ||||
* | | Add local/www to the list of directories that needs to be symlink'd to ↵ | Renato Botelho | 2014-06-23 | 1 | -0/+1 |
| | | | | | | | | reduce PBI differences between 2.1 and 2.2 | ||||
* | | Merge pull request #1239 from phil-davis/patch-9 | jim-p | 2014-06-20 | 1 | -1/+1 |
|\ \ | |||||
| * | | Only include a scheduled rule if it is strictly before the end time | Phil Davis | 2014-06-19 | 1 | -1/+1 |
| | | | | | | | | | The exact moment of the end time is the end of the schedule. We do not want to include a rule when filter_configure_sync wakes up at 00:15:00 etc and is on a not-slow system that processes this code during the interval 00:15:00 to 00:15:01. This should help intermittent issues with schedules not finishing at the appropriate 15-minute boundary. Might help or fix #3558 | ||||
* | | | Remove extra data after space and fix pf rule syntax. It should fix #3688 | Renato Botelho | 2014-06-20 | 1 | -1/+1 |
| | | | |||||
* | | | Replace some backticks by exec ans simplify commands | Renato Botelho | 2014-06-19 | 2 | -2/+2 |
| | | | |||||
* | | | Remove more backtick abuse | Renato Botelho | 2014-06-19 | 1 | -5/+9 |
| | | | |||||
* | | | Add -n for 2 remaining sysctl calls, also replace backtick by exec | Renato Botelho | 2014-06-19 | 2 | -3/+3 |
| | | | |||||
* | | | Add full path for dmesg and replace backtick by exec | Renato Botelho | 2014-06-19 | 1 | -1/+1 |
|/ / | |||||
* | | Change the option for webconfig login autocomplete from opt-in to opt-out, ↵ | Renato Botelho | 2014-06-18 | 3 | -3/+12 |
| | | | | | | | | also bump config version and write a function to keep the current status on upgrades | ||||
* | | Always set httponly attribute on cookies | Renato Botelho | 2014-06-18 | 1 | -10/+8 |
| | | |||||
* | | Add comment I forgot on last commit | Renato Botelho | 2014-06-17 | 1 | -0/+1 |
| | | |||||
* | | Re-generate session ID on a successful login to avoid session fixation | Renato Botelho | 2014-06-17 | 1 | -0/+1 |
|/ | |||||
* | Create some symlinks inside pbi dir to reduce differences between 2.1 and ↵ | Renato Botelho | 2014-06-16 | 1 | -1/+22 |
| | | | | 2.2 and avoid the need to change a lot of PBI scripts | ||||
* | Merge pull request #1034 from vsquared56/master | Renato Botelho | 2014-06-13 | 1 | -4/+10 |
|\ | |||||
| * | Return full issuer for DN with multiple attribute values | vsquared56 | 2014-03-24 | 1 | -4/+10 |
| | | | | | | e.g. CN=Some Root CA,OU=Certificates Department,OU=(c) Copyright SomeCorp,O=SomeCorp,C=US | ||||
* | | Replace Header() calls by lowercase | Renato Botelho | 2014-06-13 | 2 | -3/+3 |
| | | |||||
* | | Merge pull request #1222 from phil-davis/patch-8 | Renato Botelho | 2014-06-13 | 1 | -4/+18 |
|\ \ | |||||
| * | | Handle firewall log filter regex input better bug #3689 | Phil Davis | 2014-06-03 | 1 | -4/+18 |
| | | | | | | | | | | | | | | | If the user inputs an invalid regex in any of the filter fields, then a page full of "warning" messages appear in the GUI, about whatever is invalid. If for some reason the user wants to match a forward slash somewhere, then they have to realize to escape it, doing "\/" instead of just "/". Be nice to this special case, because the user does not necessarily know that "/" is being used as the delimiter in the preg_match call. Turn "/" into "\/" (when the "\" is not already put in by the user). For other regex issues, suppress the warning output, using "@". When the user inputs some invalid garbage in a filter field, an empty filtered firewall log table will be displayed, rather than screens full of PHP warning output. | ||||
* | | | Bring the code of captiveportal up to speed with its module counterpart ↵ | Ermal | 2014-06-12 | 1 | -9/+9 |
| | | | | | | | | | | | | requirments | ||||
* | | | Fix i386 default URL for snapshots | Renato Botelho | 2014-06-12 | 1 | -1/+1 |
| | | | |||||
* | | | Fix #3665, show IPSec tunnel description on status page | Renato Botelho | 2014-06-12 | 1 | -0/+24 |
| | | | |||||
* | | | Fix #3702, make sure tunnel inside IP is set when interface changes | Renato Botelho | 2014-06-11 | 1 | -1/+1 |
| | | | |||||
* | | | Fix #3700 and other syntax issues: | Renato Botelho | 2014-06-10 | 1 | -1/+2 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | - Remove -G parameter from pfctl since it doesn't exist anymore - Initialize $old_router - Fix sh syntax on variable assign, it couldn't have space before = - Simplify logic - Avoid flush states twice, if it was done on IP change, don't do it again if router also has changed | ||||
* | | | Add some protection to parameters that come through _GET | Renato Botelho | 2014-06-06 | 1 | -9/+9 |
| | | | |||||
* | | | Allow the user to select "None" for OpenVPN client certificate, so long as ↵ | jim-p | 2014-06-04 | 1 | -7/+14 |
| | | | | | | | | | | | | they supply and auth user/pass. Ticket #3633 | ||||
* | | | Silent pbi_info | Renato Botelho | 2014-06-03 | 1 | -1/+1 |
| | | | |||||
* | | | Reduce possible noise | Renato Botelho | 2014-06-03 | 1 | -1/+1 |
|/ / | |||||
* | | allow ipaliases to be configured on lo0 | Matt Smith | 2014-06-02 | 1 | -2/+2 |
| | | |||||
* | | Fix variable name | jim-p | 2014-05-31 | 1 | -1/+2 |
| | | |||||
* | | remove openbgpd bits from system_gateways_edit and system.inc. The package | Chris Buechler | 2014-05-30 | 1 | -2/+2 |
| | | | | | | | | | | | | match is case-sensitive and hasn't matched the openbgpd package's name in at least 5 years, so it doesn't do anything. It's far from functional in any useful manner even fixing that issue. | ||||
* | | Bring in proper gmirror support for the GUI and notifications. | jim-p | 2014-05-30 | 1 | -0/+313 |
| | | | | | | | | | | | | Made a general gmirror library to perform various gmirror tasks and get information, using some of the former widget logic to start. Updated widget to use this new code. Added a Diag > GEOM Mirrors page that displays information about existing mirrors and perform various management tasks. Current actions include rebuilding a drive, forgetting disconnected mirror drives, insert/remove, deactivate/activate, clearing medatada. It's now possible to use the GUI to rebuild a failed mirror by performing a forget, then insert action to replace a missing/dead drive. Also included is a notification setup. Mirror status is polled every 60 seconds, and if any aspect of the mirror changes, notifications are issues that alert in the GUI and by SMTP, etc. | ||||
* | | client-config-dir is also useful when using OpenVPN's internal DHCP while ↵ | jim-p | 2014-05-30 | 1 | -0/+1 |
| | | | | | | | | bridging. | ||||
* | | Include the v4 prefix on the v6 netmask to make routing more sane and alos ↵ | Ermal | 2014-05-29 | 1 | -0/+4 |
| | | | | | | | | tracking interface configurations work! | ||||
* | | Update rrd.inc | nagyrobi | 2014-05-28 | 1 | -2/+2 |
| | | | | | | fixed NTPd graphs resetting when service restarts or reconfigured (thanks charliem https://forum.pfsense.org/index.php?topic=76620.msg422811#msg422811) | ||||
* | | Make logging of pass rules opt-in rather than opt-out | Ermal | 2014-05-27 | 1 | -1/+1 |
| | | |||||
* | | Split the setting of logging pass and block into 2 separate settings. Maybe ↵ | Ermal | 2014-05-27 | 1 | -92/+93 |
| | | | | | | | | this can be extended to control even the user rules? | ||||
* | | Add ICMP to filter parser, it should fix #3663 | Renato Botelho | 2014-05-27 | 1 | -0/+48 |
| | | |||||
* | | Add (self) keyword for specifying "any IP address on this firewall" as a ↵ | jim-p | 2014-05-23 | 1 | -0/+6 |
| | | | | | | | | rule choice. | ||||
* | | Merge pull request #1149 from phil-davis/patch-7 | Renato Botelho | 2014-05-22 | 1 | -1/+2 |
|\ \ | |||||
| * | | Use function_exists test | Phil Davis | 2014-05-09 | 1 | -1/+2 |
| | | | |||||
| * | | Use require_once in more places | Phil Davis | 2014-05-09 | 1 | -1/+1 |
| | | | |||||
* | | | Merge pull request #1205 from ExolonDX/branch_master_59 | Renato Botelho | 2014-05-22 | 1 | -2/+2 |
|\ \ \ |