Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | | | Fixes for IPSec ASN1.DN, ticket #4792 | Renato Botelho | 2015-07-17 | 1 | -7/+17 | |
| | | | | | | | | | | | | | | | | | | - Do not add leftid to confir when value is empty - When asn1dn param is in binary form, explicit type - Always add double quotes for asn1dn | |||||
* | | | only add outgoing-interface if it's an IP. Ticket #4852 | Chris Buechler | 2015-07-17 | 1 | -2/+2 | |
|/ / | ||||||
* | | Fix #4794: | Renato Botelho | 2015-07-17 | 2 | -2/+23 | |
| | | | | | | | | | | - Add a upgrade code to fix asn1dn string format to match strongSwan needs - Bump config version to 11.8 | |||||
* | | Add leftid and rightid value between double quotes on ipsec config when type ↵ | Renato Botelho | 2015-07-16 | 2 | -3/+8 | |
| | | | | | | | | is asn1dn. Ticket #4792 | |||||
* | | Revert "Avoid error loading rules for numeric host name in alias" | Renato Botelho | 2015-07-15 | 1 | -1/+1 | |
| | | | | | | | | This reverts commit 81a73bcba3b3a79bb3a7add2e14a46e6af748f50. | |||||
* | | Merge pull request #1741 from phil-davis/patch-2 | Renato Botelho | 2015-07-15 | 1 | -6/+6 | |
|\ \ | ||||||
| * | | Fix issue_ip_type var name spelling | Phil Davis | 2015-07-12 | 1 | -6/+6 | |
| | | | | | | | | | Actually there was no real problem, but having a mis-spelling like this means that English speakers will waste time (like I did) double-checking to see if the mis-spelling would cause a real problem. | |||||
* | | | Merge pull request #1744 from phil-davis/patch-5 | Renato Botelho | 2015-07-15 | 1 | -1/+1 | |
|\ \ \ | ||||||
| * | | | Avoid error loading rules for numeric host name in alias | Phil Davis | 2015-07-12 | 1 | -1/+1 | |
| |/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | Create a host-type alias. Put just a number in "IP or FQDN" - e.g. I made alias name "Zqw" and a single host "23". The webGUI reports: There were error(s) loading the rules: /tmp/rules.debug:44: syntax error - The line in question reads [44]: table { 23 } and /tmp/rules.debug has: table <Zqw> { 23 } Zqw = "<Zqw>" which pf does not cope with. It is possible to have a host name that is a number, and end up with a domain name like 23.mycompany.com - unfortunately some Wally allowed such things in standards many years ago, so it can be rather difficult to tell the difference between a number and a host name. This change improves the check when looking through alias entries and deciding if they are meant to be a name or a "bottom-level" value (address, subnet, port, port range). Anything that ends up looking like a host name gets given to filterdns to sort out. "Names" like "23" now get given to filterdns instead of being put directly into the table in pf. This makes things happier. Even if filterdns cannot resolve "23", at least it tries and nothing barfs. | |||||
* | | | Fix GratisDNS support | mortencombat | 2015-07-14 | 1 | -2/+2 | |
|/ / | | | | | The current implementation is not working for me, maybe the interface was changed by GratisDNS? I tested the update URL manually with the IP added ("&i=<ip>") which fixed the issue for me. Code adjusted to include IP. | |||||
* | | fix fsync, thanks Phil Davis for noticing | Chris Buechler | 2015-07-10 | 1 | -1/+1 | |
| | | ||||||
* | | fix fsync | Chris Buechler | 2015-07-10 | 1 | -1/+1 | |
| | | ||||||
* | | fsync after fclose here, clean up some white space while here. | Chris Buechler | 2015-07-10 | 1 | -2/+9 | |
| | | | | | | | | | | Conflicts: etc/inc/config.lib.inc | |||||
* | | fsync conf_path here too | Chris Buechler | 2015-07-10 | 1 | -0/+1 | |
| | | ||||||
* | | fix typo | Chris Buechler | 2015-07-10 | 1 | -1/+1 | |
| | | ||||||
* | | Make sure config.xml is safe on disk when restoring a backup, ticket #4803 | Renato Botelho | 2015-07-06 | 1 | -0/+1 | |
| | | ||||||
* | | Make sure temporary config file is safe on disk before rename, ticket #4803 | Renato Botelho | 2015-07-06 | 1 | -1/+1 | |
| | | ||||||
* | | Remove reference to vfs.forcesync | Renato Botelho | 2015-07-06 | 1 | -1/+0 | |
| | | ||||||
* | | Use right function pfSense_fsync to make sure config file is safe on disk, ↵ | Renato Botelho | 2015-07-06 | 1 | -4/+2 | |
|/ | | | | ticket #4803 | |||||
* | remove debug.pfftpproxy, it no longer exists. | Chris Buechler | 2015-07-04 | 1 | -1/+0 | |
| | ||||||
* | Fix keyid identifers, and go back to using %any in ipsec.secrets as in ↵ | Chris Buechler | 2015-07-03 | 1 | -2/+4 | |
| | | | | previous versions, fixing a variety of other ID issues. Latter will break some mobile IPsec circumstances, fix for that to come after more testing. Ticket #4811 | |||||
* | Improve handling of port ranges in relayd, fixes #4810 | jim-p | 2015-07-01 | 1 | -1/+5 | |
| | ||||||
* | Fix install_package() return for failure | Renato Botelho | 2015-07-01 | 1 | -1/+1 | |
| | ||||||
* | Stop using undefined variable and create a single package debug file | Renato Botelho | 2015-07-01 | 1 | -1/+1 | |
| | ||||||
* | Improve debug messages | Renato Botelho | 2015-07-01 | 1 | -2/+5 | |
| | ||||||
* | Fix call to undefined function read_pkg_config | Renato Botelho | 2015-07-01 | 1 | -1/+1 | |
| | ||||||
* | Only try to remove pkg if it's installed, otherwise just cleanup xml part | Renato Botelho | 2015-07-01 | 1 | -1/+6 | |
| | ||||||
* | Implement get_pkg_info() | Renato Botelho | 2015-07-01 | 1 | -12/+40 | |
| | ||||||
* | Make pkg_delete() more verbose | Renato Botelho | 2015-07-01 | 1 | -2/+3 | |
| | ||||||
* | Remove packages from cache after install, also add debug messages | Renato Botelho | 2015-07-01 | 1 | -2/+6 | |
| | ||||||
* | Mute call to 'pkg info -e' used to check if pkg is installed | Renato Botelho | 2015-07-01 | 1 | -1/+1 | |
| | ||||||
* | Re-implement pkg_call() using proc_open() and stream_select() and also ↵ | Renato Botelho | 2015-07-01 | 1 | -4/+124 | |
| | | | | implement pkg_exec() | |||||
* | pfsense-utils.inc is being required, there is no chance of update_status() ↵ | Renato Botelho | 2015-07-01 | 1 | -11/+2 | |
| | | | | and update_output_window() don't exist | |||||
* | Use interface-automatic for Unbound when the interfaces list is empty (same ↵ | jim-p | 2015-06-26 | 1 | -0/+2 | |
| | | | | as All) otherwise it breaks with a default CARP config. | |||||
* | Add D1540-XG. | Matt Smith | 2015-06-23 | 1 | -0/+3 | |
| | ||||||
* | Introduce Netgate RCC-DFF to the list of known platforms | Renato Botelho | 2015-06-23 | 2 | -2/+8 | |
| | ||||||
* | rereadall is not enough here, restore reload call to make sure everything ↵ | Renato Botelho | 2015-06-23 | 1 | -0/+1 | |
| | | | | works. Ticket #4785 | |||||
* | Replace ipsec rereadsecrets + reload by single rereadall, that will re-read ↵ | Renato Botelho | 2015-06-23 | 1 | -2/+1 | |
| | | | | also cert changes. Ticket #4785 | |||||
* | Instead of sending USR1, just call ipsec reload. And before it, call ipsec ↵ | Renato Botelho | 2015-06-23 | 1 | -1/+2 | |
| | | | | rereadsecrets to make sure new secretes are updated. It should fix #4785 | |||||
* | Partially revert 019ee2bc8c, this workaround is not necessary. Real fix will ↵ | Renato Botelho | 2015-06-23 | 1 | -8/+0 | |
| | | | | be committed after this | |||||
* | Add a workaround for ticket #4785: | Renato Botelho | 2015-06-23 | 1 | -4/+17 | |
| | | | | | | There was a regression on strongswan between 5.3.0 and 5.3.2 as reported at [1]. To workaround this issue, add an extra line on ipsec.secrets with right fqdn. | |||||
* | Merge pull request #1728 from devnullity/patch-1 | Chris Buechler | 2015-06-23 | 1 | -1/+1 | |
|\ | ||||||
| * | Fix var name typo in shaper.inc | Ben Cook | 2015-06-21 | 1 | -1/+1 | |
| | | | | | | Fix typo so get_bandwidthtype_scale can do more than default to "1". | |||||
* | | Use $myid in ipsec.secrets. Ticket #4785 | Chris Buechler | 2015-06-22 | 1 | -2/+2 | |
|/ | | | | | Conflicts: etc/inc/vpn.inc | |||||
* | Specify $myid rather than %any here, otherwise user manager and mobile PSKs ↵ | Chris Buechler | 2015-06-21 | 1 | -3/+4 | |
| | | | | | | | won't match. Ticket #4781 Conflicts: etc/inc/vpn.inc | |||||
* | Ticket #4746 Correctly set global variables to be used by hostnames cod epaths | Ermal LUÇI | 2015-06-19 | 1 | -2/+2 | |
| | ||||||
* | Add a GUI field to increase the pf frag entries limit. Fixes ticket #4775 | jim-p | 2015-06-18 | 1 | -0/+5 | |
| | ||||||
* | Blacklist invalid "from" sources since they can be picked up accidentally ↵ | jim-p | 2015-06-17 | 1 | -1/+3 | |
| | | | | and cause rule errors. Fixes #4772 | |||||
* | Code spacing | Phil Davis | 2015-06-15 | 27 | -232/+236 | |
| | | | | | | | and other random stuff I noticed. I think this finishes messing with code style. The codebase should match the developer style guide closely enough that 99.9% of changes will not feel the need to also massage the formatting. | |||||
* | Merge pull request #1710 from stilez/patch-4 | Renato Botelho | 2015-06-11 | 1 | -10/+2 | |
|\ |