summaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Collapse)AuthorAgeFilesLines
* * Start inetd regardless if nat entries exist due to tftp proxy needing it.Scott Ullrich2008-07-141-15/+16
|
* * Add tftp proxyScott Ullrich2008-07-142-0/+2
| | | | * Add inetd file (will need to update reflection code as well)
* * Add more debuggingScott Ullrich2008-07-141-13/+29
| | | | | * Add more logging information * Add ignore return text field
* Include cmd_chainScott Ullrich2008-07-141-1/+2
|
* Adding CmdCHAIN class which is similar to the BSDInstaller Lua CmdCHAIN()Scott Ullrich2008-07-141-0/+102
| | | | | | | | | object. Example usage: $cmdchain = new CmdCHAIN(); $cmdchain->add("grab freebsd version", "uname -a"); $cmdchain->setdebug(); $cmdchain->execute();
* fix IE loginChris Buechler2008-07-131-1/+1
| | | | Ticket #1707
* Introduce a new and improved version of IPsec mobile client support. TheMatthew Grooms2008-07-133-80/+265
| | | | | | | mobile client tab is now used to configure user authentication (Xauth) and client configuration (mode-cfg) options. User authentication is currently limited to system password file entries. This will be extended to support external RADIUS and LDAP account DBs in a follow up comiit.
* Remote last_term_seen variable. It's not in use and was debugging only.Scott Ullrich2008-07-131-34/+27
| | | | While here, cleanup the identing mess.
* Allow new terminals to update last_term_seen even if they are not root.Scott Ullrich2008-07-131-0/+1
|
* Correct a few more issues with the IPsec automatic configuration upgradeMatthew Grooms2008-07-131-62/+94
| | | | | | | | process. We now consolidate multuple enabled phase1 entries for the same remote gateway. This is to prevent multiple remote sections from being created in the racoon.conf file withe the same peer IP address. Also, make sure we don't add multiple AES definitions to a phase2 config. Add a single definition with an auto key length.
* Correct a problem with the IPsec upgrade code. This was related to theMatthew Grooms2008-07-131-2/+2
| | | | | key lengths being set to auto in phase1 which is not currently supported. Instead, set the key lengths to the default value.
* Do not build unparsable rulesets to avoid rule errors.Ermal Luçi2008-07-121-3/+7
|
* Overhaul IPsec related code. Shared functions have been consolidated intoMatthew Grooms2008-07-117-519/+1119
| | | | | | | | | | | | | | a new file named /etc/ipsec.inc. Tunnel definitions have been split into phase1 and phase2. This allows any number of phase2 definitions to be created for a single phase1 definition. Several facets of configuration have also been improved. The key size for variable length algorithms can now be selected and the phase1 ID options have been extended to allow for more flexible configuration. Several NAT-T related issues have also been resolved. Please note, IPsec remote access functionality has been temporarily disabled. An improved implementation will be included in a follow up commit.
* Use the full path to the vlan parameters seems that the foreach block ↵Ermal Luçi2008-07-101-1/+1
| | | | | | | creates a copy of the original. This should fix vlan upgrade issues reported.
* Update NOIP URLScott Ullrich2008-07-101-1/+1
| | | | Ticket #1766
* Reactivate the rdr so the pptp server works normally now that pptp ↵Ermal Luçi2008-07-091-1/+1
| | | | workaround is disabled.
* Commit missed pftpx -> ftp-proxy entriesScott Ullrich2008-07-091-2/+2
|
* Cleanup unused/forgotten assignment.Ermal Luçi2008-07-091-1/+1
|
* Correct typo and better handle recreation of vlan with specific name.Ermal Luçi2008-07-091-3/+4
|
* Fixup for now utterly complex/braindead interface finding for user rules ↵Ermal Luçi2008-07-091-2/+3
| | | | | | till the merge of the RELENG_1_MULTI_ANYTHING happens.
* Merge VLAN fixes from RELENG_1_MULTI_ANYTHING branch.Ermal Luçi2008-07-091-10/+11
|
* add comment with an XXX to remind me to fixBill Marquette2008-07-081-1/+1
|
* Move gateway status and monitoring over to gwlb.inc.Seth Mos2008-07-082-262/+180
| | | | Still needs a return_gateway_status_by_name();
* Add relayd logging fileSeth Mos2008-07-081-1/+1
|
* Remove slbd anchor from pf rulesSeth Mos2008-07-081-2/+1
|
* Remove configure_slbd() from rc.newwanip.Seth Mos2008-07-081-4/+0
| | | | Does relayd need this hook no rc.newwanip?
* Remove configure_slbd() from rc scriptsSeth Mos2008-07-082-5/+3
|
* Raise the timeout value to 1 second on checks, setting a global timeout doesBill Marquette2008-07-081-2/+2
| | | | | no good. See http://readlist.com/lists/openbsd.org/misc/15/78304.html many thanks to Alex Volkov who pointed me to this thread
* Correctly set interface to dhcp in wan case.Ermal Luçi2008-07-081-1/+1
|
* Remove escape slashes so our quality stats gathering works again.Seth Mos2008-07-081-3/+5
|
* clean up text a bit, still some issues remaining (like "http://DHCP", my ↵Chris Buechler2008-07-071-7/+17
| | | | logic is apparently flawed)
* Remove unneeded code.Ermal Luçi2008-07-071-2/+0
|
* Fix interface ip assignment. Originally commited by ErmalScott Ullrich2008-07-071-1/+10
|
* allow relayd to actually restartBill Marquette2008-07-071-3/+3
| | | | | sitedown isn't required, but may still be set to nothing, don't write out a bogus config line in this situation
* Add pre_upgrade_command hook supportScott Ullrich2008-07-071-0/+7
|
* It appears that malloc options have changed for RELENG_7.Scott Ullrich2008-07-071-3/+6
| | | | Eliminate old aj options.
* Eliminate interfaces_carp_bring_up_final()Scott Ullrich2008-07-071-2/+1
|
* * Cleanup carp codeScott Ullrich2008-07-073-33/+52
| | | | * Eliminate interfaces_carp_bringup_final()
* We do not need the simplexml php exentsionScott Ullrich2008-07-061-2/+2
|
* Simplify (and really) sleep correctly to avoid hammering files.pfsense.orgScott Ullrich2008-07-061-2/+2
|
* Only push 1 char version, such as 7 instead of 7.0Scott Ullrich2008-07-061-1/+1
|
* Add freebsd version as parm.Scott Ullrich2008-07-061-1/+6
|
* Chmod/Chgrp only if item exists and is a directory.Scott Ullrich2008-07-061-3/+5
|
* Make sure our /tmp is always read write for everyone on boot.Seth Mos2008-07-051-0/+3
| | | | Now set to 1777.
* Switch back touch file in tmp. This is permitted as user nobody underSeth Mos2008-07-051-2/+2
| | | | which apinger runs. FIXME: Make sure that /tmp is always 777.
* Use filter configure insteadSeth Mos2008-07-051-2/+2
|
* Do not generate empty queue fields when the rule queue fields are empty but set.Seth Mos2008-07-051-2/+2
|
* Correct setkey path to correct usr local sbin location.Seth Mos2008-07-041-10/+10
|
* Make sure the owner and group is set correctly so apinger can write it'sSeth Mos2008-07-041-0/+2
| | | | configuration.
* Always run openntpd as a clientBill Marquette2008-07-041-12/+13
| | | | Setup listeners if the service is requested
OpenPOWER on IntegriCloud