| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
| |
Pingle
|
|
|
|
|
| |
are command line arguments. Go back to 2.1x and prior behavior of TERM and
restart. Fixes source IP use with syslog among other config changes.
|
|
|
|
| |
upgrade code. This fixes #4122
|
| |
|
|
|
|
| |
value coming from GUI.
|
| |
|
| |
|
|
|
|
| |
and DNS Forwarder are not enabled simultaneously. It fixes #4067
|
|
|
|
| |
should fix #4104
|
|
|
|
| |
sourced from the correct IP. Ideally this should always work this way, but setting this causes Unbound to bind to *:53, which shouldn't happen where specific interfaces are chosen. Ticket #4111
|
|
|
|
|
|
|
| |
At the moment the user can answer "yes" to most of the questions, but then later code only checks if the answer is "y". Thus you can type in "yes" in some places, have it accepted, but actually the negative action is taken. That is weird and will mess up people who try typing a whole string starting with "y".
With this change it makes the user type one of "y", "yes", "n", "no". When they type 1 of those, it is turned into either "y" or "n". Then the existing implementation logic all works as expected.
Hopefully this is the "final" version that fixes the behavior of the (y/n) questions.
I also included the bit at 296-297 which adds the CIDR bit-count range to the prompt, so the user can see exactly what input is valid/expected there.
Redmine issue #4100
|
|
|
|
| |
Currently this allows the user to input any number for the CIDR. I happened to try 44 for an IPv4 CIDR when playing.
This fixes that little bug - I think it is good to commit that first/separately so it can be identified apart from the other (y/n) checking/handling I am working on. Better to have separate commits for distinct bugs.
|
|
|
|
|
|
|
|
|
|
|
| |
- Remove redundant declaration of $icmptypes and move it to a common
place (filter.inc)
- Add missing ICMP types for v4
- Add ICMPv6 types
- Adjust javascripts to show correct options depending of IP Protocol
- Hide ICMP type selection when protocol is IPv4+v6
It fixes #3389
|
|
|
|
|
|
| |
- When interface is 'lo0', strpos returns 0, that is erroneously
considered false (boolean) on the test. Be more strict on strpos return
to avoid skiping lo0 ip aliases during sync.
|
|
|
|
|
| |
Alternate version of https://github.com/pfsense/pfsense/pull/1376
This version retains the is_array() checks and then only does the count() if the is_array() is true.
Take whichever version you like.
|
|
|
|
|
|
| |
NanoBSD it will print to console and auto-reboot.
This way, a router running NanoBSD won't sit at a db> prompt indefinitely if it crashes.
|
| |
|
|
|
|
| |
need to call it twice. It should fix #4089
|
|
|
|
| |
and user with wrong password is authenticated
|
|
|
|
|
|
| |
Recent commit https://github.com/pfsense/pfsense/commit/9ea554ee5cb25ea3bf5bb6bf7997c6c7379ce349 added testing of the return status of console_configure_dhcpd() - this let a user effectively abort from doing anything if they have answered "y" to prompt_for_enable_dhcp_server() and are being asked for the start and end of the range, and then decide they do not want to proceed.
However, even when they gave good answers, status 0 was being returned. This prevented changes ever being implemented.
Redmine: https://redmine.pfsense.org/issues/4080
The fix is to return 1 at the routine end, when all is good and the code should proceed.
|
| |
|
| |
|
|
|
|
|
|
|
| |
Make sure pf is configured before other services are restarted when WAN
IP changes. The way it was before, 'pass out' rules with route-to still
have old IP set as 'from' and some Dynamic DNS ended up not being
updated.
|
| |
|
| |
|
| |
|
|
|
|
| |
previously couldn't be, remove disabling of verification.
|
|\ |
|
| |
| |
| |
| | |
Unbound does not presently support link-local interfaces.
|
| | |
|
| |
| |
| |
| |
| | |
properly. I fixed the scenario in Unbound where it was sending IPs to
these functions rather than an interface, so this has no functional diff.
|
|/ |
|
|
|
|
|
|
| |
Revert "Can't skip this if booting, ends up breaking config. Ticket #4071"
This reverts commit effb3a3cfe4e57b781f35ba8a145eb627014d8ce.
|
| |
|
|
|
|
| |
forum it fixes issue I can't seem to replicate.
|
|\ |
|
| |
| |
| |
| |
| |
| | |
Selecting link local interface for unbound causes invalid access-control
statement in unbound config since link local address doesn't have
subnet.
|
|/ |
|
|
|
|
| |
CIDR mask, which then ended up broken.
|
|
|
|
|
|
| |
didn't help the ticket where it was intended to help, which was later
fixed differently. This change in defaults is problematic in a lot of
scenarios, go back to the way things were before. Ticket #3894
|
|\ |
|
| |
| |
| |
| |
| | |
Add missing gettext.
p.s: Is it really needed to log? Lots of rules causes lots of spam on ifaces without gw. Such kind of this logging should be controllable by user via option at least.
|
| |
| |
| |
| | |
unbound.conf
|
| |
| |
| |
| |
| |
| | |
Properly set up interface binding for v6 link local IPs. Ticket #4021
except had to comment out the fix for now because of #4062 to avoid config breakage.
|
| |
| |
| |
| | |
displayed in the new format.
|
| |
| |
| |
| |
| | |
if something is wrong there (like someone's system can't validate the
cert)
|
| | |
|
| | |
|
| | |
|
| | |
|