summaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Collapse)AuthorAgeFilesLines
* hw.ata.wc is a read-only /boot/loader.conf value. Remove.Scott Ullrich2007-04-171-1/+0
|
* Correctly note the filter configure item when removing the schedule feature ↵Scott Ullrich2007-04-161-1/+2
| | | | from cron
* Add xml sync schedules optionScott Ullrich2007-04-151-0/+3
|
* Remove stray ;Scott Ullrich2007-04-151-1/+1
|
* Uncomment pass rule logic. Fixes a problem report from the forum. ↵Scott Ullrich2007-04-141-2/+2
| | | | Reminded-by: Holger
* Disable ATA write caching which should help with loosing configuration on ↵Scott Ullrich2007-04-131-0/+1
| | | | invalid power off events.
* Backport usermanager code from HEAD so I can get it in the snaps andBill Marquette2007-04-136-120/+1071
| | | | | start testing it properly There's still some CSS/HTML fixes needed but the code seems to work
* Hide "ipfw2 (+ipv6) initialized, divert loadable, rule-based forwarding ↵Scott Ullrich2007-04-111-1/+4
| | | | | | enabled, default to accept, logging disabled" while enabling time based rules Noticed-by: Ryan Wagoner
* Check for array type before foreach()Scott Ullrich2007-04-111-4/+5
| | | | Reminded-by: Ryan Wagoner/Seth Mos
* Remove time based rule debugging statements.Scott Ullrich2007-04-111-20/+0
| | | | Reminded-by: Ryan Wagoner
* Do not sort dns server list.Scott Ullrich2007-04-111-1/+0
| | | | Reported-by: Goffredo Andreone
* Set RELENG_1 version to 1.3. 1.2 will be released form RELENG_1_2.Scott Ullrich2007-04-091-1/+1
|
* Time for 1.2-BETA-1Root_RELENG_1_2Scott Ullrich2007-04-091-1/+1
|
* If the interface is "lan" and bridging is enabled then skip creation of the ↵Scott Ullrich2007-04-091-0/+3
| | | | DHCP Server subnet. Ticket #1281
* Remove configuration lock that would be acquired when you login to ssh after ↵Scott Ullrich2007-04-081-0/+2
| | | | a firmware update. Ticket #1258
* Correct sysctl name.. it is movements not movement.Scott Ullrich2007-04-081-2/+2
|
* startup routed on boot if it's enabledBill Marquette2007-04-081-0/+4
|
* Correct rrd_gateway pathSeth Mos2007-04-081-1/+1
|
* Skip rule creation when interface_ip or remote_gateway is unknownScott Ullrich2007-04-071-0/+4
|
* When a 0 byte configuration file is found, remove it (unlink) and continue ↵Scott Ullrich2007-04-071-12/+17
| | | | processing.
* Use -o when loading the pf ruleset. From the pfctl man page: -o ↵Scott Ullrich2007-04-071-1/+1
| | | | | | Enable the ruleset optimizer. The ruleset optimizer attempts to improve rulesets by removing rule duplication and making better use of rule ordering. Specifically, it does four things: 1. remove duplicate rules 2. remove rules that are a subset of another rule 3. combine multiple rules into a table when advantageous 4. re-order the rules to improve evaluation performance A second -o may be specified to use the currently loaded ruleset as a feedback profile to tailor the optimization of the quick rules to the actual network behavior. It is important to note that the ruleset optimizer will modify the ruleset to improve performance. A side effect of the ruleset modification is that per-rule accounting statistics will have different meanings than before. Use -o when loading the pf ruleset. From the pfctl man page: -o Enable the ruleset optimizer. The ruleset optimizer attempts to improve rulesets by removing rule duplication and making better use of rule ordering. Specifically, it does four things: 1. remove duplicate rules 2. remove rules that are a subset of another rule 3. combine multiple rules into a table when advantageous 4. re-order the rules to improve evaluation performance A second -o may be specified to use the currently loaded ruleset as a feedback profile to tailor the optimization of the quick rules to the actual network behavior. It is important to note that the ruleset optimizer will modify the ruleset to improve performance. A side effect of the ruleset modification is that per-rule accounting statistics will have different meanings than before.
* Cleanup IPSEC rules a bit. More work will be performed in this area over ↵Scott Ullrich2007-04-061-15/+3
| | | | the weekend.
* Comment out what appears to be non-needed code.Scott Ullrich2007-04-041-2/+2
|
* Allow multiple stacked rules (allow) to work correctly in the time based new ↵Scott Ullrich2007-04-041-0/+3
| | | | world order. How deep this rabbit hole is yet to be deterimined.
* Do not zap cron entries with a large hammer. Instead gently use a knife.Scott Ullrich2007-04-031-3/+5
|
* Also configure loopback. Otherwise filter rules can not be loadedSeth Mos2007-04-031-1/+4
|
* Deal with block type rules correctly during time based rule operationsScott Ullrich2007-04-031-2/+9
|
* Do not unset cron entries.. This needs a bit more work.Scott Ullrich2007-04-031-2/+2
|
* Correctly report falseScott Ullrich2007-04-031-1/+1
|
* rework the check code to be more readable since it is falsingScott Ullrich2007-04-031-4/+9
|
* Add more debugging infoScott Ullrich2007-04-031-0/+3
|
* Add debugging info for hourstatusScott Ullrich2007-04-031-1/+5
|
* Install deny rule correctlyScott Ullrich2007-04-021-2/+1
|
* Deny rules are already the defeault. Do not switch to allow.Scott Ullrich2007-04-021-2/+0
|
* * Add more debugging helpers to system logs * Unbreak logic since the recent ↵Scott Ullrich2007-04-022-3/+6
| | | | traffic shaper 'fix'
* Remove openvpn-csc when needed.Scott Ullrich2007-04-021-6/+6
| | | | Submitted-By: Fernando Lemos
* Remove trailing spaceScott Ullrich2007-04-021-1/+1
|
* Set /sbin/sysctl -n net.link.ether.inet.log_arp_movement=0 when shared ↵Scott Ullrich2007-04-021-0/+2
| | | | physical net is checked
* Use mwexec() to avoid printing out the sysctl operationScott Ullrich2007-04-021-1/+1
|
* * Do no \n * Be consistent on outputScott Ullrich2007-04-011-3/+3
|
* Add logging helper statementsScott Ullrich2007-04-011-6/+16
|
* Correctly handle hour and minutes on the dot.Scott Ullrich2007-04-011-1/+1
|
* Handle port ranges correctlyScott Ullrich2007-03-301-10/+6
|
* Do not foreach through an item that does not existScott Ullrich2007-03-301-5/+7
|
* corrected schedule_inuse functionScott Dale2007-03-291-3/+2
|
* Added is_schedule_inuse()Scott Dale2007-03-291-0/+24
|
* Check that cron items exist before foreach()Scott Ullrich2007-03-291-0/+2
|
* Remove debugging statement. Remove missed code from HEAD.Scott Ullrich2007-03-291-1/+2
|
* Remove bogus IPSEC interface checksScott Ullrich2007-03-291-2/+1
|
* Correctly check if an alias is in useScott Ullrich2007-03-291-2/+2
|
OpenPOWER on IntegriCloud