summaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Expand)AuthorAgeFilesLines
* Make sure admin can always write the configjim-p2012-10-091-1/+1
* Add initial support for a privilege that denies write access to the config.jim-p2012-10-092-0/+9
* Fix reference to gateway in pool configjim-p2012-10-051-1/+1
* This should fix ipsec status for natted tunnel(s).Ermal2012-10-051-3/+8
* Correct the config generationErmal2012-10-051-3/+2
* config.xml might have some elusive data so do not fail sainfo section for loc...Ermal2012-10-051-8/+6
* Correct check since it might be an ip as wellErmal2012-10-051-1/+5
* Correctly build the sainfo to avoid errorsErmal2012-10-051-5/+5
* Be more strict on validation during filter reloadErmal2012-10-051-2/+2
* Fixup easyrule block for IPv6jim-p2012-10-051-9/+10
* Use .= for strings rather than +=jim-p2012-10-051-4/+4
* Don't write a rule out of the natlocal_subnet is blank.jim-p2012-10-051-1/+1
* Safety beltjim-p2012-10-051-1/+2
* show true/false in logged message instead of 1/<nothing>Bill Marquette2012-10-051-2/+1
* Rather use the system constants as definedErmal2012-10-041-4/+4
* Use integer rather than hex to put these values. AMD64 builds do rather awkwa...Ermal2012-10-041-4/+4
* Add a NAT entry for configuring NAT on ipsec phase2. It will add nat rules on...Ermal2012-10-042-3/+50
* Add restrict lines to limit what local clients are allowed to do to the ntp s...jim-p2012-10-031-0/+2
* Merge pull request #233 from bcyrill/rfc3168_flagsJim P2012-10-012-5/+15
|\
| * Fix typobcyrill2012-10-011-1/+1
| * Add ECE and CWR TCP flags as defined in RFC 3168bcyrill2012-10-012-5/+15
* | Fixup processing of IPv6 IPs for EasyRule. Fixes #2649jim-p2012-10-011-0/+7
* | Allow for changing OpenVPN TUN to TAP device mode without reboot.PiBa-NL2012-10-011-1/+6
* | Merge branch 'master' of git://github.com/bsdperimeter/pfsensePiBa-NL2012-10-019-74/+112
|\ \ | |/
| * Revert "Allow for changing OpenVPN TUN to TAP device mode without reboot." --...jim-p2012-09-301-6/+1
| * Add forgotten part of the IPsec split dns fix from yesterdayjim-p2012-09-271-1/+8
| * Some more state killing refinements.jim-p2012-09-271-0/+6
| * Due to the DHCP pool tag needing to be an array, rename the old LB "pool" var...jim-p2012-09-263-9/+26
| * Separate default gateway switching code to its own function, fix it to only o...jim-p2012-09-261-50/+54
| * Ticket #2635: during ipsec reload, do not generate spd for disabled ph1Pierre POMES2012-09-251-8/+10
| * Update etc/inc/priv.defs.incbcyrill2012-09-241-0/+6
| * Don't die silently if the time is too far off. Fix from: dhatzjim-p2012-09-231-0/+1
* | Firewall log, allow filtering by interface.PiBa-NL2012-10-011-5/+8
* | CARP notifications show vip description, 'Virtual IP Addresses' page shows in...PiBa-NL2012-09-292-2/+4
* | while booting do not let carp wait for pfsync synchronization if pfsync is no...PiBa-NL2012-09-251-4/+9
|/
* Allow for changing OpenVPN TUN to TAP device mode without reboot.PiBa-NL2012-09-221-1/+6
* We should also resync openvpn clients since they can use gateway groups too.jim-p2012-09-191-1/+5
* don't log here, users can define their own logging rules if they want loggingChris Buechler2012-09-181-2/+2
* Merge pull request #223 from PiBa-NL/masterJim P2012-09-181-1/+1
|\
| * (line endings UNIX format..)PiBa-NL2012-09-161-1/+1
* | gitsync: Improve parameter handling to allow hyphenated options anywhere in t...Erik Fonnesbeck2012-09-171-32/+54
* | gitsync: Add --minimal parameter that installs only the updated files.Erik Fonnesbeck2012-09-172-3/+25
* | Fix special build_commit tag that was broken from previous change to how it r...Erik Fonnesbeck2012-09-171-1/+1
* | Add support for multiple DHCP pools within the interface's subnet, and allow ...jim-p2012-09-163-42/+122
* | Force resync of vpns and dns even if the IP doesn't change in rc.newwanip, si...jim-p2012-09-141-7/+14
* | Add note about mac matching and media type.jim-p2012-09-141-0/+1
* | Add some safety checks against empty entriesjim-p2012-09-141-0/+6
* | Allow/deny access to DHCP by partial MAC matching.jim-p2012-09-132-2/+21
* | Make the openvpn resync less intrusive, only trigger this if the OpenVPN inte...smos2012-09-131-2/+7
* | Make the gateway group member check a boolean, might convert to something els...smos2012-09-132-5/+8
OpenPOWER on IntegriCloud