summaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Collapse)AuthorAgeFilesLines
* Tune the binat a bit so it does not affect all traffic on enc but just for ↵Ermal2012-11-151-1/+1
| | | | the configured ph2
* Not sure why this has been hidden so deep but putting that in the right ↵Ermal2012-11-151-2/+0
| | | | place should help with error displayed related to HEADER already sent in PHP errors.log
* Add refcount_read to util.incPhil Davis2012-11-151-0/+13
| | | Add refcount_read so other code can easily find out how many things have the file system mounted.
* Fix typojim-p2012-11-141-1/+1
|
* For local users check the necessary priviledge is grantedErmal2012-11-141-1/+7
|
* Add ipsec/* anchor for radius dynamic rulesErmal2012-11-141-0/+2
|
* Make it more clear what is the username during syslogErmal2012-11-142-4/+4
|
* Allow other system authentication types to be used with ipsec. ↵Ermal2012-11-143-126/+392
| | | | LDAP/RADIUS/local acc
* Remove unused/unuseful tags anymoreErmal2012-11-141-3/+1
|
* Implement a pruning for auto added mac passthrough and vouchers. This allows ↵Ermal2012-11-141-1/+53
| | | | to prune the added entries logged-in through vouchers
* Add button to switch between read/write and read-only on Diag > NanoBSD; Add ↵jim-p2012-11-121-4/+7
| | | | setting to keep the media read/write at all times; Add indication of ro/rw status on Dashboard.
* Send just line return rather than newlineErmal2012-11-121-2/+2
|
* Fix interface variable to check againstjim-p2012-11-091-1/+1
|
* Correctly mark found configuration. Ermal Luçi2012-11-091-0/+2
| | | Fixes http://forum.pfsense.org/index.php/topic,54595.0.html
* More fixes to the schedules rulesErmal2012-11-081-1/+3
|
* Remove carp nat rule auto generated since those are only applied on ↵Ermal2012-11-081-38/+0
| | | | LAN(interfaces without a gateway) and its not probably a good thing to do.
* Do not generate carp NAT rules when in BACKUP/INIT modeErmal2012-11-081-1/+1
|
* Always create a pipe for any user on CP and if no limit present set it to ↵Ermal2012-11-071-105/+44
| | | | 0(unlimited). If any limit comes from the sources of reauthentication this limit will be applied without any other consequences
* break the loop for none schedule limitersErmal2012-11-071-2/+5
|
* revert change to if-bound states since this seems to have broken all kinds ↵Chris Buechler2012-11-051-1/+1
| | | | of things
* Check update snapshot contents against .sha256 instead of .md5PiBa-NL2012-11-051-15/+15
|
* Make a function to get the current theme and use it everywhere rather than ↵jim-p2012-11-022-2/+25
| | | | duplicating code or missing functions. (Fixes forced themes using the wrong theme for login screen)
* Don't resync openvpn if rc.newwanip is being run on an openvpn interface, to ↵jim-p2012-11-021-1/+2
| | | | avoid a loop.
* Resolves #2670. Mark vtnet interfaces as altq capable.Ermal2012-10-311-1/+1
|
* Add missing line ending to fix pf syntax error.Erik Fonnesbeck2012-10-311-1/+1
|
* Use if-bound states for better featuresErmal2012-10-311-1/+1
|
* Revert "Revert "Do not put the prefix len on the src ip""Ermal2012-10-311-1/+1
| | | | | | This reverts commit 16c95ab93bcfb8d59260aa7564a402a6cec3050d. This is how it should be for now. See #2665
* Revert "Do not put the prefix len on the src ip"Ermal2012-10-311-1/+1
| | | | | | It actually makes sense in IPv6 world This reverts commit 3b1385a3febf783f48881b7baf61844f8e91209d.
* Do not put the prefix len on the src ipErmal2012-10-311-1/+1
|
* Fixes #2394. If an entry of 0.0.0.0/0 is configured than use the first ↵Ermal2012-10-301-2/+4
| | | | interface ip matching. Also do a microptimization to not retrieve the interface list every ping host entry
* Fixes #2300. Take into consideration ip aliases on carpErmal2012-10-301-5/+8
|
* Fixes #2300. Add static route even for ip aliases selected to avoid issues.Ermal2012-10-301-1/+4
|
* use the proper array here for VIPs and use some suggestions from the ticket ↵jim-p2012-10-301-6/+15
| | | | to fix #2645
* Mark the pipe/queue with zero(unlimited) bandwidth to allow traffic on the ↵Ermal2012-10-291-1/+5
| | | | state to flow still or new traffic matching the rule to flow. Dummynet blocks traffic not matchign apipe/flow by default. Reported-by: http://forum.pfsense.org/index.php/topic,54595.msg294734.html#msg294734
* To avoid issues with missing removed schedules just do not create the pipe ↵Ermal2012-10-241-1/+2
| | | | at all
* Correct issues with limiters. 1. correct spelling of config option 2. avoid ↵Ermal2012-10-231-2/+2
| | | | duplicating javascript
* Use a proposal check value of obey for all mobile, not just pure-PSK. (The ↵jim-p2012-10-221-1/+1
| | | | docs recommend setting this, may as well make it the default)
* Switch to background launchingsmos2012-10-181-1/+1
|
* Check if there is any configuration present before going through it.Ermal2012-10-181-1/+1
|
* Check if there is any configuration present before going through it.Ermal2012-10-181-5/+7
|
* Add a few required things here to allow the script to workjim-p2012-10-161-0/+3
|
* Merge pull request #239 from phil-davis/masterErmal Luçi2012-10-151-2/+2
|\ | | | | Limiter addBwRowTo plus icon syntax
| * Limiter addBwRowTo plus icon syntaxPhil Davis2012-10-121-2/+2
| | | | | | | | Fix the syntax so that the GUI Limiter, Creat new limiter, Bandwidth "+" icon as the correct title text, and the Mask field gets displayed. Note that clicking the "+" icon still does not make an empty first row when creating a new limiter.
* | Ooops fix removed line by accidentErmal2012-10-151-0/+1
| |
* | Merge changes required for using the ISC dhclient in pfSense with prefix ↵smos2012-10-123-111/+72
|/ | | | | | | delegation. This should hopefully be a bit more reliable in the long run. The dhclient6-script could be merged with dhclient-script in the future. Still need to cleanup old adresses and prefixes, as well as LAN prefixes when a old prefix dissapears. This needs some thought and clue to strap together.
* Fix typoErik Fonnesbeck2012-10-111-1/+1
|
* Use only binat so both side can communicate properly. With nat only the side ↵Ermal2012-10-111-5/+1
| | | | behind nat works
* Handle case with no server or no client OpenVPNPhil Davis2012-10-111-6/+12
| | | | | If there are OpenVPN servers but not clients, this warning is emitted: Warning: Invalid argument supplied for foreach() in /etc/rc.openvpn on line 55 This fixes handles that case, and the case of OpenVPN clients but no servers.
* Tune check so nat rules for single host ips get addedErmal2012-10-101-1/+1
|
* Make limiters have a schedule specified which applie bandwidth limits during ↵Ermal2012-10-093-39/+197
| | | | that period
OpenPOWER on IntegriCloud