summaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Collapse)AuthorAgeFilesLines
* Fix ix test for 2.2.x, fixes #5923jim-p2016-03-031-1/+1
|
* ICMPv6 Firewall Log Display - Fixes 5933 - RELENG_2_2NOYB2016-02-271-1/+1
| | | | ICMPv6 logging was not being displayed in firewall log.
* Backport ipsec_dump_mobile() from 2.3 to make it work witn new strongswan ↵Renato Botelho2016-02-171-18/+38
| | | | port (without stroke_list.c patch)
* Fix typo in RCC updateWilliamHiles2016-02-171-2/+2
|
* add RCC, fix XG-1540 name, ensure serial port is set on RCCJeremy Porter2016-02-152-1/+7
|
* Fix #5890 find disk slices as candidates for loading "config.xml" at bootNick Holloway2016-02-141-6/+2
| | | | | | | In commit 873c1701, the call to "/bin/ls /dev/{$disk}s*" was surrounded with "escapeshellarg" so the wildcard is not expanded. Use "glob" to find the slices for a disk instead.
* Prefer dnsmasq's host overrides when it's enabled. Ticket #5883Chris Buechler2016-02-111-3/+6
|
* Encode parameters in Limiters and L7 before display. Fixes #5877jim-p2016-02-101-21/+21
|
* Make RRD lists global, validate graph name using whitelist of known values ↵jim-p2016-02-101-0/+18
| | | | rather than blacklist of characters, beef up validation and escaping of related values while here. Fixes #5874 for 2.2.x
* Merge pull request #2575 from davidjwood/RELENG_2_2-ppp-ipv6-newChris Buechler2016-01-302-3/+40
|\
| * Insert missing close braceDavid Wood2016-01-061-0/+1
| |
| * Attempt to ensure interface_dhcpv6_configure() is called at the most ↵David Wood2016-01-061-2/+3
| | | | | | | | | | | | | | | | appropriate time * ppp-ipv6 for PPP type with dhcp6usev4iface (or PPP without dhcp6usev4iface, as dhcp6usev4iface appears to be a no-op on this type of connection) * rc.newwanip for non-PPP type with dhcp6usev4iface (no change in this commit) * interface_configure() in all other cases
| * Stop enabling router advertisements by defaultDavid Wood2016-01-061-1/+0
| |
| * Make ppp-ipv6 the only way interface_dhcpv6_configure() is called on PPP ↵David Wood2016-01-062-3/+6
| | | | | | | | connections using PPP as the IPv6 parent interface
| * Set temporary bogon (RFC 5737) IPv4 addresses when initialising PPP ↵David Wood2016-01-061-13/+23
| | | | | | | | | | | | interfaces during boot to work round mpd5 IPv6CP issue causing random IPv6 interface identifiers Details at https://forum.pfsense.org/index.php?topic=101967.msg570519#msg570519 .
| * Set temporary bogon (RFC 5737) IPv4 address to work round mpd5 IPv6CP issue ↵David Wood2016-01-061-0/+20
| | | | | | | | | | | | causing random IPv6 interface identifier during boot Details at https://forum.pfsense.org/index.php?topic=101967.msg570519#msg570519 .
| * Make ppp-ipv6 the only way interface_dhcpv6_configure() is called on PPP ↵David Wood2016-01-061-1/+4
| | | | | | | | interfaces
* | Initialize $stop_time inside foreach to make sure it resets to proper value ↵Renato Botelho2016-01-201-1/+1
| | | | | | | | each iteration since it's changed inside loop. Reported on https://github.com/pfsense/pfsense/pull/2487
* | Bump version to 2.2.7-DEVELOPMENTRenato Botelho2016-01-191-1/+1
| |
* | Update URL for dyns to match their current docs. Reported by GP^ on IRCChris Buechler2016-01-111-1/+1
|/
* Encode parameters in shaper queues before display.RELENG_2_2_6jim-p2015-12-211-6/+6
|
* Encode hostname before printing; remove some related dead code.jim-p2015-12-211-1/+1
|
* bump to 2.2.6-RELEASEChris Buechler2015-12-181-1/+1
|
* Flush zone's tables if its db must be reset to avoid leaving behind any ↵Chris Buechler2015-12-171-1/+14
| | | | table entries. Ticket #5622
* Add busytimeout of 60 seconds for CP database access. This matches the ↵Chris Buechler2015-12-171-0/+4
| | | | default value PHP uses with sqlite 2.x versions (pfSense 2.1.x and earlier) and prevents the issues noted in Ticket #5622
* add these three strongswan libs to the obsoletedfiles list. They haven't ↵Chris Buechler2015-12-161-0/+3
| | | | been included in any releases, but were briefly included in snapshots in mid April 2015.
* Fix handling of 0-byte files uploaded to the CP file manager.jim-p2015-12-151-2/+7
|
* Merge pull request #2213 from PiBa-NL/pferrormessage-22Renato Botelho2015-12-141-13/+15
|\
| * fix showing when a error happens parsing pf rulesPiBa-NL2015-12-121-13/+15
| | | | | | | | | | | | For example a queue interface speed mismatch could go unnoticed. backport from 2.3 of #2165
* | Fix typo, gateway entry in config has a field called monitor, not monitoripRenato Botelho2015-12-111-4/+4
|/
* Merge pull request #2162 from phil-davis/patch-1Renato Botelho2015-12-071-11/+3
|\
| * Fix duplicate syslog messages - Redmine #5606 for RELENG_2_2Phil Davis2015-12-061-11/+3
| | | | | | | | | | | | | | | | The generated syslog.conf needs to have the system.log selections combined into a single line in 2 places. The OP on redmine 5606 just showed 1 place in the diff there. On my system, this gets rid of the duplicated message on login: php-fpm[11074]: /index.php: Successful login for user 'my.name' from: 10.11.12.13 Note: for some reason old line 848 includes local4.none - but local4.none does not appear in old line 864. What is that about? Is that another different bug? I did not mess with that, but I noticed that the OPs diff listing did also add in local4.none where it seems to be missing.
* | Redmine #4279 Package reinstall displayed when shutting down before upgradePhil Davis2015-12-072-1/+7
|/ | | | | | | | | | | | Use a different flag file to indicate that a package reinstall is required after a reboot is done first. This avoids the possibility that the user navigates in the webGUI during the time while the shutdown is in progress and is accidentally presented with the reinstall all packages GUI button. Early in rc.bootup switch the flag file to use its ordinary name, so that all subsequent code in boot scripts and webGUI will work as it already does to handle the package reinstall and notifying the user that a package reinstall is about to be done or in progress...
* Include ipsec.inc here otherwise the global is undefined when called when ↵jim-p2015-12-041-0/+1
| | | | restoring a config in the GUI.
* Sanitize the session_id/logout_id in captive portal.Chris Buechler2015-12-021-0/+1
|
* Backport #5512 RADIUS secretPhil Davis2015-11-231-1/+1
| | | Another little easy thing to backport just in case.
* Merge pull request #2014 from phil-davis/patch-1Renato Botelho2015-11-191-2/+2
|\
| * Fix firewall log dynamic rule lookupPhil Davis2015-11-021-2/+2
| | | | | | for rows that are dynamically added as time goes by.
* | Merge pull request #2069 from jean-m-cyr/RELENG_2_2Renato Botelho2015-11-191-0/+4
|\ \
| * | Add missing stratum parameterJean Cyr2015-11-151-0/+4
| | | | | | | | | | | | | | | Add missing stratum parameter in ntpd.conf when specified on Serial GPS page.
* | | Ticket #5451 for RELENG_2_2Phil Davis2015-11-151-1/+1
|/ / | | | | | | | | Actually this can be fixed by adding just a space after "from any". The code here builds up $tmprule and each time it adds a new clause it puts a space at the end, ready for if there is another clause to come. The "from any" here was the only offender in this scheme. It seems good to me to still backport little easy fixes to RELENG_2_2. That way production users can get them easily if they like (with system patches or...).
* | Change version to 2.2.6-DEVELOPMENTRenato Botelho2015-11-061-1/+1
| |
* | A new fix for #4130:RELENG_2_2_5Renato Botelho2015-11-031-2/+10
| | | | | | | | | | | | | | | | | | | | | | | | The fix added for this bug, that check xml file size is < 200 to decide if file must or not be read created a new issue, single entry is not showed. Instead of doing this, check parse_xml_config() return and return empty array when it's -1 While here, prevent errors saying parse_xml_config() doesn't exist and make sure xmlparse.inc is required
* | Only call pfSense_ipsec_list_sa() when IPsec is enabledRenato Botelho2015-11-031-0/+13
| |
* | bump to 2.2.5-RELEASEChris Buechler2015-11-021-1/+1
| |
* | fix whitespaceChris Buechler2015-11-021-5/+5
|/
* Deprecate strongswan smp componentsRenato Botelho2015-10-301-0/+4
|
* Remove ipsec_smp_dump_status(), last dependency of strongswan XMP moduleRenato Botelho2015-10-301-47/+0
|
* Set leftsendcert=always for IKEv2 configurations with certificates to better ↵jim-p2015-10-281-0/+5
| | | | accommodate OS X and iOS manual configurations. Fixes #5353
* fix logging config upgrade. Ticket #5340Chris Buechler2015-10-261-2/+2
|
OpenPOWER on IntegriCloud