Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | hostnames can end with a . (and actually always do, it's just usually ↵ | Chris Buechler | 2014-10-21 | 1 | -1/+1 |
| | | | | implied), so allow that here. Fixes wrong input validation in parts of nsupdate GUI, among other things. | ||||
* | Merge pull request #1306 from phil-davis/patch-3 | Renato Botelho | 2014-10-20 | 1 | -0/+4 |
|\ | |||||
| * | Support up to 4 DNS Servers in DHCP | Phil Davis | 2014-10-07 | 1 | -0/+4 |
| | | |||||
* | | Let user decide if he wants to proceed to the upgrade when sha256 fails to ↵ | Renato Botelho | 2014-10-20 | 1 | -1/+8 |
| | | | | | | | | download. Fixes #3576 | ||||
* | | Underscores are valid characters in domains. Fixes #3219 | Chris Buechler | 2014-10-19 | 1 | -1/+1 |
| | | |||||
* | | Ticket #3932 For more than 100 entries create pipes in line with the rules ↵ | Ermal | 2014-10-18 | 1 | -7/+21 |
| | | | | | | | | file to speedup the process | ||||
* | | Add command line script to generate and activate a new GUI certificate. | jim-p | 2014-10-15 | 1 | -0/+8 |
| | | |||||
* | | Fix descriptions and cn on generated GUI cert to be consistent. | jim-p | 2014-10-15 | 1 | -3/+3 |
| | | |||||
* | | Reintroduce the vfs.forcesync systl | Ermal | 2014-10-15 | 1 | -1/+2 |
| | | |||||
* | | Merge pull request #1309 from phil-davis/patch-5 | Renato Botelho | 2014-10-15 | 1 | -2/+2 |
|\ \ | |||||
| * | | Fix #3935 Properly allow WAN without LAN | Phil Davis | 2014-10-15 | 1 | -2/+2 |
| | | | | | | | | | Was broken by https://github.com/pfsense/pfsense/commit/bd0b5d2dc7a279d3473a65a11d67efb5e39392be | ||||
* | | | Tame the poodle. Disable SSLv3. | jim-p | 2014-10-15 | 1 | -0/+1 |
|/ / | |||||
* | | rename interfaces_carp_setup to interfaces_sync_setup and call it during ↵ | Ermal | 2014-10-15 | 4 | -5/+6 |
| | | | | | | | | bootup since it does not only relate to carp interfaces. | ||||
* | | Ticket #3789. Put a start at using the proxyurl/proxyport from system ↵ | Ermal | 2014-10-15 | 1 | -0/+8 |
| | | | | | | | | configured settings for bogons. It still does not consider the user/pass configured | ||||
* | | Fixes #3213. Allow up to 2900 limiters. This was set to 30 since limiters ↵ | Ermal | 2014-10-15 | 1 | -2/+4 |
| | | | | | | | | are to be controlled by mask and not created manually! | ||||
* | | Make proper check here | Ermal | 2014-10-14 | 1 | -1/+1 |
| | | |||||
* | | Teach the certificate generation code how to make a self-signed certificate, ↵ | jim-p | 2014-10-14 | 2 | -38/+70 |
| | | | | | | | | | | | | and change the GUI cert generation code to use it. Also, move the GUI cert generation code to its own function so we can add a GUI option to regenerate it later. Also use some more sane defaults for the contents of the default self-signed certificate's fields so it will be more unique and less likely to trigger problems in browser certificate storage handling. | ||||
* | | update comment to reflect breakage caused here and reference associated ↵ | Chris Buechler | 2014-10-14 | 1 | -1/+1 |
| | | | | | | | | redmine ticket, not high priority, can be fixed later | ||||
* | | block IPv4 link-local. Per RFC 3927, hosts "MUST NOT send the packet to | Chris Buechler | 2014-10-14 | 1 | -0/+5 |
| | | | | | | | | | | | | | | | | | | any router for forwarding", and "any network device receiving such a packet MUST NOT forward it". FreeBSD won't route it (route-to can override in some circumstances), so it can't be in use as a real network anywhere with the possible exception of local-only networks. Unlikely any such situation exists anywhere. Fixes ticket #2073 | ||||
* | | Fix initial console menu layout, it fixes #3884 | Renato Botelho | 2014-10-14 | 1 | -12/+9 |
| | | |||||
* | | Properly set MTU for lagg interface, it fixes #3922 | Renato Botelho | 2014-10-13 | 1 | -24/+53 |
| | | |||||
* | | s/removing/omitting/g for gateway monitor log entires. "Removing" is not ↵ | Chris Buechler | 2014-10-10 | 1 | -3/+3 |
| | | | | | | | | necessarily correct, there are many circumstances where this runs where it wasn't there to begin with, and is potentially misleading. | ||||
* | | Fix pf syntax s/divert/divert-to/. It should fix #3921 | Renato Botelho | 2014-10-10 | 1 | -1/+1 |
| | | |||||
* | | Fix an error introduced in bd0b5d2dc7 that makes system believe interfaces ↵ | Renato Botelho | 2014-10-08 | 1 | -1/+0 |
| | | | | | | | | always mismatch | ||||
* | | Remove the minimum NIC warning, this dates back to when minimum 2 NICs were ↵ | Chris Buechler | 2014-10-07 | 3 | -18/+4 |
| | | | | | | | | supported and it made sense to throw this message at people. It's obvious a network appliance requires at least one NIC. | ||||
* | | Update the URL for snapshots update | Ermal | 2014-10-07 | 1 | -1/+1 |
| | | |||||
* | | Be more strict when checking if olsrd is enabled, otherwise when package is ↵ | Renato Botelho | 2014-10-07 | 1 | -3/+7 |
|/ | | | | deinstalled and configuration is kept dhcpd will consider it's always as enabled | ||||
* | Add an option to restart php-fpm from console | Ermal | 2014-10-06 | 2 | -2/+16 |
| | |||||
* | Remove function that is not implemented properly. Nothing seems to use it. | Ermal | 2014-10-06 | 1 | -7/+0 |
| | |||||
* | Merge pull request #1303 from PiBa-NL/carp_without_matching_subnet | Ermal | 2014-10-06 | 1 | -9/+8 |
|\ | |||||
| * | CARP, allow carp ip to be outside interface and alias subnets (FreeBSD10 ↵ | PiBa-NL | 2014-10-02 | 1 | -9/+8 |
| | | | | | | | | feature) | ||||
* | | Merge pull request #1304 from sselph/powerd_normal_mode | Ermal | 2014-10-06 | 1 | -1/+5 |
|\ \ | |||||
| * | | Add powerd normal mode flag (-n) | Steven Selph | 2014-10-05 | 1 | -1/+5 |
| | | | |||||
* | | | Fix not rules for OPTn network case | Phil Davis | 2014-10-06 | 1 | -10/+7 |
|/ / | | | | | | | | | | | Reported in forum https://forum.pfsense.org/index.php?topic=82319.0 The "if (is_subnet($src)) ... filter_address_add_vips_subnets" code needs to go outside all of the if that checks for opt interfaces (not just in the else part). That makes filter_address_add_vips_subnets get called in all cases, including when optn network is specified. (line 2264, 2265) Then filter_address_add_vips_subnets needs to process the "not" code early, before checking if there are any VIPs (which was causing the routine to exit early in simple cases) - lines 2093-2100 chunk. This should also fix cases of using "LANnet", "WANnet" and "not" in rules on an interface that has just a plain address (no VIPs). Lines 2144 and 2158 are no functional change. The formatting of the multi-line statement was odd, so I put it back all on 1 line. | ||||
* | | Make proper check if IP address is configured on another interfaces and ↵ | Renato Botelho | 2014-10-03 | 1 | -3/+13 |
| | | | | | | | | ignore current one. It fixes #3807 | ||||
* | | get back to our standard RFC-defined capitalization of IPsec | Chris Buechler | 2014-10-02 | 3 | -6/+6 |
|/ | |||||
* | Merge pull request #1290 from jean-m-cyr/master | Renato Botelho | 2014-09-25 | 1 | -0/+12 |
|\ | |||||
| * | Support IPV6 in unbound.conf | Jean Cyr | 2014-09-24 | 1 | -0/+12 |
| | | | | | | | | IPv6 addresses are not included in unbound config and access list | ||||
* | | Remove also old unbound startup script | Renato Botelho | 2014-09-25 | 1 | -0/+1 |
| | | |||||
* | | Merge pull request #1289 from jean-m-cyr/master | Renato Botelho | 2014-09-24 | 1 | -1/+1 |
|\ \ | |/ | |||||
| * | outgoing ip incorrectly set in unbound.conf | Jean Cyr | 2014-09-24 | 1 | -1/+1 |
| | | | | | | | | | | DNS resolver outgoing IP interface IP address is incorrectly set to the last inbound interface IP address... fix it. | ||||
* | | Remove unbound files, menu and service during config upgrade, otherwise ↵ | Renato Botelho | 2014-09-24 | 1 | -0/+28 |
|/ | | | | things can go really bad with functions redeclared un base and package unbound.inc and config corrupted when upgrading from 2.1.x with unbound installed to 2.2. PBI and package section are both removed later during package upgrade | ||||
* | Provide a toggle for apinger debug messages to be logged to syslog. To help ↵ | Ermal | 2014-09-24 | 1 | -1/+7 |
| | | | | with roubleshooting issues | ||||
* | Make sure unbound user and group is also created during upgrade config | Renato Botelho | 2014-09-23 | 1 | -0/+4 |
| | |||||
* | Provide upgrade config code to migrate unbound settings from 2.1 package to ↵ | Renato Botelho | 2014-09-23 | 2 | -1/+93 |
| | | | | 2.2 base. Bump config version to 11.1. It fixes #3880 | ||||
* | Obsolete recently removed jquery files | Renato Botelho | 2014-09-22 | 1 | -0/+3 |
| | |||||
* | Correct evaluation for "Acct-Interim-Interval" from RADIUS | dariomas | 2014-09-19 | 1 | -1/+1 |
| | | | | | | Setting "Acct-Interim-Interval :=600" in FreeRadius2 evaluates to 'random' values with PfSense 2.1. Possibly a bug related to: https://forum.pfsense.org/index.php?topic=60079.0 https://forum.pfsense.org/index.php?topic=60262.0 | ||||
* | Update jquery to 1.11.1 | Renato Botelho | 2014-09-18 | 1 | -2/+4 |
| | | | | | | | * Update jquery to latest version * Use production version instead of development * Rename file to have version on it and avoid browser cache issues * Add jquery-migrate to keep backward compatible with old version | ||||
* | Fix typos | jim-p | 2014-09-17 | 1 | -2/+2 |
| | |||||
* | Add a basic command line password reset script. | jim-p | 2014-09-17 | 1 | -0/+79 |
| |