Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Fix ix test for 2.2.x, fixes #5923 | jim-p | 2016-03-03 | 1 | -1/+1 |
| | |||||
* | ICMPv6 Firewall Log Display - Fixes 5933 - RELENG_2_2 | NOYB | 2016-02-27 | 1 | -1/+1 |
| | | | | ICMPv6 logging was not being displayed in firewall log. | ||||
* | Backport ipsec_dump_mobile() from 2.3 to make it work witn new strongswan ↵ | Renato Botelho | 2016-02-17 | 1 | -18/+38 |
| | | | | port (without stroke_list.c patch) | ||||
* | Fix typo in RCC update | WilliamHiles | 2016-02-17 | 1 | -2/+2 |
| | |||||
* | add RCC, fix XG-1540 name, ensure serial port is set on RCC | Jeremy Porter | 2016-02-15 | 2 | -1/+7 |
| | |||||
* | Fix #5890 find disk slices as candidates for loading "config.xml" at boot | Nick Holloway | 2016-02-14 | 1 | -6/+2 |
| | | | | | | | In commit 873c1701, the call to "/bin/ls /dev/{$disk}s*" was surrounded with "escapeshellarg" so the wildcard is not expanded. Use "glob" to find the slices for a disk instead. | ||||
* | Prefer dnsmasq's host overrides when it's enabled. Ticket #5883 | Chris Buechler | 2016-02-11 | 1 | -3/+6 |
| | |||||
* | Encode parameters in Limiters and L7 before display. Fixes #5877 | jim-p | 2016-02-10 | 1 | -21/+21 |
| | |||||
* | Make RRD lists global, validate graph name using whitelist of known values ↵ | jim-p | 2016-02-10 | 1 | -0/+18 |
| | | | | rather than blacklist of characters, beef up validation and escaping of related values while here. Fixes #5874 for 2.2.x | ||||
* | Merge pull request #2575 from davidjwood/RELENG_2_2-ppp-ipv6-new | Chris Buechler | 2016-01-30 | 2 | -3/+40 |
|\ | |||||
| * | Insert missing close brace | David Wood | 2016-01-06 | 1 | -0/+1 |
| | | |||||
| * | Attempt to ensure interface_dhcpv6_configure() is called at the most ↵ | David Wood | 2016-01-06 | 1 | -2/+3 |
| | | | | | | | | | | | | | | | | appropriate time * ppp-ipv6 for PPP type with dhcp6usev4iface (or PPP without dhcp6usev4iface, as dhcp6usev4iface appears to be a no-op on this type of connection) * rc.newwanip for non-PPP type with dhcp6usev4iface (no change in this commit) * interface_configure() in all other cases | ||||
| * | Stop enabling router advertisements by default | David Wood | 2016-01-06 | 1 | -1/+0 |
| | | |||||
| * | Make ppp-ipv6 the only way interface_dhcpv6_configure() is called on PPP ↵ | David Wood | 2016-01-06 | 2 | -3/+6 |
| | | | | | | | | connections using PPP as the IPv6 parent interface | ||||
| * | Set temporary bogon (RFC 5737) IPv4 addresses when initialising PPP ↵ | David Wood | 2016-01-06 | 1 | -13/+23 |
| | | | | | | | | | | | | interfaces during boot to work round mpd5 IPv6CP issue causing random IPv6 interface identifiers Details at https://forum.pfsense.org/index.php?topic=101967.msg570519#msg570519 . | ||||
| * | Set temporary bogon (RFC 5737) IPv4 address to work round mpd5 IPv6CP issue ↵ | David Wood | 2016-01-06 | 1 | -0/+20 |
| | | | | | | | | | | | | causing random IPv6 interface identifier during boot Details at https://forum.pfsense.org/index.php?topic=101967.msg570519#msg570519 . | ||||
| * | Make ppp-ipv6 the only way interface_dhcpv6_configure() is called on PPP ↵ | David Wood | 2016-01-06 | 1 | -1/+4 |
| | | | | | | | | interfaces | ||||
* | | Initialize $stop_time inside foreach to make sure it resets to proper value ↵ | Renato Botelho | 2016-01-20 | 1 | -1/+1 |
| | | | | | | | | each iteration since it's changed inside loop. Reported on https://github.com/pfsense/pfsense/pull/2487 | ||||
* | | Bump version to 2.2.7-DEVELOPMENT | Renato Botelho | 2016-01-19 | 1 | -1/+1 |
| | | |||||
* | | Update URL for dyns to match their current docs. Reported by GP^ on IRC | Chris Buechler | 2016-01-11 | 1 | -1/+1 |
|/ | |||||
* | Encode parameters in shaper queues before display.RELENG_2_2_6 | jim-p | 2015-12-21 | 1 | -6/+6 |
| | |||||
* | Encode hostname before printing; remove some related dead code. | jim-p | 2015-12-21 | 1 | -1/+1 |
| | |||||
* | bump to 2.2.6-RELEASE | Chris Buechler | 2015-12-18 | 1 | -1/+1 |
| | |||||
* | Flush zone's tables if its db must be reset to avoid leaving behind any ↵ | Chris Buechler | 2015-12-17 | 1 | -1/+14 |
| | | | | table entries. Ticket #5622 | ||||
* | Add busytimeout of 60 seconds for CP database access. This matches the ↵ | Chris Buechler | 2015-12-17 | 1 | -0/+4 |
| | | | | default value PHP uses with sqlite 2.x versions (pfSense 2.1.x and earlier) and prevents the issues noted in Ticket #5622 | ||||
* | add these three strongswan libs to the obsoletedfiles list. They haven't ↵ | Chris Buechler | 2015-12-16 | 1 | -0/+3 |
| | | | | been included in any releases, but were briefly included in snapshots in mid April 2015. | ||||
* | Fix handling of 0-byte files uploaded to the CP file manager. | jim-p | 2015-12-15 | 1 | -2/+7 |
| | |||||
* | Merge pull request #2213 from PiBa-NL/pferrormessage-22 | Renato Botelho | 2015-12-14 | 1 | -13/+15 |
|\ | |||||
| * | fix showing when a error happens parsing pf rules | PiBa-NL | 2015-12-12 | 1 | -13/+15 |
| | | | | | | | | | | | | For example a queue interface speed mismatch could go unnoticed. backport from 2.3 of #2165 | ||||
* | | Fix typo, gateway entry in config has a field called monitor, not monitorip | Renato Botelho | 2015-12-11 | 1 | -4/+4 |
|/ | |||||
* | Merge pull request #2162 from phil-davis/patch-1 | Renato Botelho | 2015-12-07 | 1 | -11/+3 |
|\ | |||||
| * | Fix duplicate syslog messages - Redmine #5606 for RELENG_2_2 | Phil Davis | 2015-12-06 | 1 | -11/+3 |
| | | | | | | | | | | | | | | | | The generated syslog.conf needs to have the system.log selections combined into a single line in 2 places. The OP on redmine 5606 just showed 1 place in the diff there. On my system, this gets rid of the duplicated message on login: php-fpm[11074]: /index.php: Successful login for user 'my.name' from: 10.11.12.13 Note: for some reason old line 848 includes local4.none - but local4.none does not appear in old line 864. What is that about? Is that another different bug? I did not mess with that, but I noticed that the OPs diff listing did also add in local4.none where it seems to be missing. | ||||
* | | Redmine #4279 Package reinstall displayed when shutting down before upgrade | Phil Davis | 2015-12-07 | 2 | -1/+7 |
|/ | | | | | | | | | | | | Use a different flag file to indicate that a package reinstall is required after a reboot is done first. This avoids the possibility that the user navigates in the webGUI during the time while the shutdown is in progress and is accidentally presented with the reinstall all packages GUI button. Early in rc.bootup switch the flag file to use its ordinary name, so that all subsequent code in boot scripts and webGUI will work as it already does to handle the package reinstall and notifying the user that a package reinstall is about to be done or in progress... | ||||
* | Include ipsec.inc here otherwise the global is undefined when called when ↵ | jim-p | 2015-12-04 | 1 | -0/+1 |
| | | | | restoring a config in the GUI. | ||||
* | Sanitize the session_id/logout_id in captive portal. | Chris Buechler | 2015-12-02 | 1 | -0/+1 |
| | |||||
* | Backport #5512 RADIUS secret | Phil Davis | 2015-11-23 | 1 | -1/+1 |
| | | | Another little easy thing to backport just in case. | ||||
* | Merge pull request #2014 from phil-davis/patch-1 | Renato Botelho | 2015-11-19 | 1 | -2/+2 |
|\ | |||||
| * | Fix firewall log dynamic rule lookup | Phil Davis | 2015-11-02 | 1 | -2/+2 |
| | | | | | | for rows that are dynamically added as time goes by. | ||||
* | | Merge pull request #2069 from jean-m-cyr/RELENG_2_2 | Renato Botelho | 2015-11-19 | 1 | -0/+4 |
|\ \ | |||||
| * | | Add missing stratum parameter | Jean Cyr | 2015-11-15 | 1 | -0/+4 |
| | | | | | | | | | | | | | | | Add missing stratum parameter in ntpd.conf when specified on Serial GPS page. | ||||
* | | | Ticket #5451 for RELENG_2_2 | Phil Davis | 2015-11-15 | 1 | -1/+1 |
|/ / | | | | | | | | | Actually this can be fixed by adding just a space after "from any". The code here builds up $tmprule and each time it adds a new clause it puts a space at the end, ready for if there is another clause to come. The "from any" here was the only offender in this scheme. It seems good to me to still backport little easy fixes to RELENG_2_2. That way production users can get them easily if they like (with system patches or...). | ||||
* | | Change version to 2.2.6-DEVELOPMENT | Renato Botelho | 2015-11-06 | 1 | -1/+1 |
| | | |||||
* | | A new fix for #4130:RELENG_2_2_5 | Renato Botelho | 2015-11-03 | 1 | -2/+10 |
| | | | | | | | | | | | | | | | | | | | | | | | | The fix added for this bug, that check xml file size is < 200 to decide if file must or not be read created a new issue, single entry is not showed. Instead of doing this, check parse_xml_config() return and return empty array when it's -1 While here, prevent errors saying parse_xml_config() doesn't exist and make sure xmlparse.inc is required | ||||
* | | Only call pfSense_ipsec_list_sa() when IPsec is enabled | Renato Botelho | 2015-11-03 | 1 | -0/+13 |
| | | |||||
* | | bump to 2.2.5-RELEASE | Chris Buechler | 2015-11-02 | 1 | -1/+1 |
| | | |||||
* | | fix whitespace | Chris Buechler | 2015-11-02 | 1 | -5/+5 |
|/ | |||||
* | Deprecate strongswan smp components | Renato Botelho | 2015-10-30 | 1 | -0/+4 |
| | |||||
* | Remove ipsec_smp_dump_status(), last dependency of strongswan XMP module | Renato Botelho | 2015-10-30 | 1 | -47/+0 |
| | |||||
* | Set leftsendcert=always for IKEv2 configurations with certificates to better ↵ | jim-p | 2015-10-28 | 1 | -0/+5 |
| | | | | accommodate OS X and iOS manual configurations. Fixes #5353 | ||||
* | fix logging config upgrade. Ticket #5340 | Chris Buechler | 2015-10-26 | 1 | -2/+2 |
| |