summaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Collapse)AuthorAgeFilesLines
* Remove check that prevented bugs from happening. Now all code paths are safe ↵Ermal2010-04-301-13/+0
| | | | from this.
* Remove unused function.Ermal2010-04-301-19/+0
|
* Ticket #506. Correctly save dynamic gateways extra parameters.Ermal2010-04-302-8/+10
|
* Add upgrade code for values of "Interface address" and "any" for the ↵Erik Fonnesbeck2010-04-301-0/+7
| | | | external address of port forwards. Ticket #561
* Unbreak this. Seems it needs to be filter for the rules to work.Ermal2010-04-301-1/+1
|
* Make sure package rules are last. As the way they are coded they will null ↵Ermal2010-04-301-2/+2
| | | | out entire rulesets. More work is needed to make them 2.0 comliant but for now this is enough.
* Actually minimum weight is 1.Ermal2010-04-301-1/+1
|
* Allow for each gateway a weight to be choosen if the gateway has to be used ↵Ermal2010-04-302-16/+17
| | | | in Gateway groups. This will create that many entries in the route-to statement as the weight says.
* Use nobind for OVPN client when no local port and/or no local interface is ↵pierrepomes2010-04-291-3/+5
| | | | requested. Ticket #282
* Always generate macros so ruleset does not fail even when the gateway has no ↵Ermal2010-04-291-2/+5
| | | | members.
* Generate gateways as macros and then just substitute them during the rules. ↵Ermal2010-04-291-61/+66
| | | | This allows optimizations and features as repeating the same gateway more than one to be done.
* Reload gateway groups when changing them.Ermal2010-04-291-1/+0
|
* Improve NAT Port ForwardingRenato Botelho2010-04-294-431/+466
| | | | | | | | | | | | | | New features available are: * Now you can disable a rule * You can define "no rdr" rules * Source type, address and port, with an option "not" for exceptions * Destination type, address and port, with an option "not" for exceptions Implemented by: Carlos Eduardo Ramos <carlos.ramos@bluepex.com> Renato Botelho <renato.botelho@bluepex.com> Vinicius Coque <vinicius.coque@bluepex.com> Reviewed by: cmb and efonne Sponsored by: BluePex Security Solutions
* Default to and display the last used repository URL in gitsync.Erik Fonnesbeck2010-04-291-0/+8
|
* Add gitsync support for merging from other repositories.Erik Fonnesbeck2010-04-291-0/+26
|
* Allow gitsync to properly switch branches or repositories. Resolves #523Erik Fonnesbeck2010-04-291-17/+7
|
* Resolves #554. Correct path to tftp-proxy.Ermal2010-04-291-1/+1
|
* The console menu does not show if the terminal type is not cons25 - not sure ↵Erik Fonnesbeck2010-04-281-2/+2
| | | | why. Changed to cons25 to allow the menu to work on the serial console when enabling it through the web GUI. Ticket #316
* Fix OpenVPN upgrade code for lzo compression. Resolves #280, mentioned also ↵jim-p2010-04-281-2/+2
| | | | in Ticket #482.
* Fix apparent typo in IPsec upgrade code which broke the user_fqdn identity type.jim-p2010-04-281-2/+2
|
* Ticket #507. Do not remove all static routes to readd them back. The change ↵Ermal2010-04-282-97/+44
| | | | will never delete a rule but define the action to be taken on it, either add or change a present route. Be consinstent on gateways allowed to be selected as destinations for static routes, including dynamic gateways.
* Fix typo in commentpierrepomes2010-04-271-1/+1
|
* Ticket #471. Bring up the removed/unassigned interface correctly if it is ↵Ermal2010-04-271-7/+2
| | | | parent to other interfaces, as vlans.
* Ticket #449. Actually save something to read back.Ermal2010-04-271-0/+1
|
* Ticket #449. Bring back the check if there is really an ip change on ↵Ermal2010-04-271-2/+9
| | | | interface event. This avoids reloading openvpn and other sevices when actually there is no change.
* Ticket #540. Do not require VJ compression with todays link speeds it ↵Ermal2010-04-271-1/+1
| | | | pessimizes more than helps.
* Move these functions to a more central location. Part of ticket #496jim-p2010-04-271-0/+163
|
* Ticket #389. Correctly make the ldap object picker work and handle various ↵Ermal2010-04-271-8/+8
| | | | errors.
* Ticket #378. Correctly handle a timeout of 0 to mean never timeout.Ermal2010-04-271-1/+5
|
* Ticket #474. Properly check for disabled openvpn configs.Ermal2010-04-271-3/+3
|
* Silence and correct command that tries to kill a previous running ↵Ermal2010-04-271-2/+1
| | | | ipfw-classifyd command.
* Missed curly.Ermal2010-04-271-1/+1
|
* Do not error out when trying to delete an unexisting package. Just display ↵Ermal2010-04-271-5/+7
| | | | an error message.
* temporary work around for ticket #536Chris Buechler2010-04-251-2/+2
|
* Fix permsjim-p2010-04-232-0/+0
|
* Improve NanoBSD slice updating/changing a bit, add some error checking. ↵jim-p2010-04-232-18/+67
| | | | Resolves #534.
* Relocate some NanoBSD functions to a central place. Change NanoBSD ↵jim-p2010-04-231-0/+114
| | | | diagnostics and system info widget to use the new code. Ticket #533 and some prerequisite parts of Ticket #534.
* Well there was a reason for this being returned out. Ticket #539.Ermal2010-04-231-1/+1
|
* Unbreak limiter rule creation.Ermal2010-04-221-1/+1
|
* Ticket #528. Do not route-to for local connected subnets.Ermal2010-04-221-2/+2
|
* Add a new alias type, urltable, which downloads a file of IP/CIDR addresses ↵jim-p2010-04-214-1/+109
| | | | and loads them into a pf persist table instead of importing the addresses directly into a traditional alias. This allows for using huge tables of addresses that would otherwise break the GUI and/or fail to load into pf. Part of ticket #512
* Fix creation of pipe/queue aka limiters.Ermal2010-04-201-2/+2
|
* Allow users to send in the same POST authentication info and post fields. ↵Ermal2010-04-201-1/+4
| | | | This will be allowed by authentication code if the special post var 'postafterlogin' isset.
* Make pasthrough GUI code catch-up with the latest changes.Ermal2010-04-201-1/+1
|
* Use tables of ipfw for passthrough mac entries. This makes it scale way ↵Ermal2010-04-201-68/+13
| | | | better than previously. Fix multiple entries on adding mac through entries automatically after login for the same user. The changes allow even pass through mac to be controlled from the Status->Captiveportal. Use serialize/unserialize on some files that keep temporary information to speed up calculations. Really allow mac passthrough to follow radius rules or time out rules when present.
* Do not include filter.inc twiceScott Ullrich2010-04-191-1/+0
|
* Add a new option which allows the admin user to configure CP so that it ↵Ermal2010-04-201-114/+175
| | | | automatically enters an MAC passthru entry. The MAC is taken from login details and has to be removed manually. Also do improvements on rules handling and pipes. Add some optmizations. Teach the GUI/backend on ip/mac passthrough to configure a bw limit for this entries.
* Fix growl issues.Scott Ullrich2010-04-171-3/+10
| | | | | | | Ticket #518 Ticket #519 Submibtted-by: Blake Skinner
* Use FQDN for HELLO SMTP command. Ticket #443pierrepomes2010-04-171-0/+1
|
* use 6969 for tftp-proxyChris Buechler2010-04-171-3/+3
|
OpenPOWER on IntegriCloud