Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | adding privileges and separating DNS Resolver overrides from general settings | Joe | 2016-06-22 | 1 | -0/+8 |
| | | | | (cherry picked from commit fc76a1e390c8ce9579df31457c74d1d0e572b78d) | ||||
* | Force 4096 RSA keys | Jose Luis Duran | 2016-06-22 | 1 | -1/+1 |
| | | | | | | | | Add option `-b 4096` to force the keys to 4096-bit. This parameter is ignored for Ed25519 keys. (cherry picked from commit 971257cbdf687c79943237b6c2f5e37c596318af) | ||||
* | Harden sshd_config | Jose Luis Duran | 2016-06-22 | 1 | -16/+19 |
| | | | | | | | The changes are better explained in the following article: https://stribika.github.io/2015/01/04/secure-secure-shell.html (cherry picked from commit dca77360ffe868327d82c20834eceb1079d5823b) | ||||
* | Only call interfaces_vips_configure once if it's needed, rather than doing ↵ | Chris Buechler | 2016-06-21 | 1 | -1/+5 |
| | | | | the same thing over and over for every VIP on an interface. Ticket #6515 | ||||
* | Fix style | Chris Buechler | 2016-06-21 | 1 | -3/+5 |
| | |||||
* | require_once auth.inc in vpn.inc since it uses functions from there, though ↵ | Chris Buechler | 2016-06-21 | 1 | -0/+1 |
| | | | | normal use of the system won't require that, those who run certain things manually/custom may require it | ||||
* | Only omit aggressive line from ipsec.conf where IKEv2. Ticket #6513 | Chris Buechler | 2016-06-21 | 1 | -1/+1 |
| | |||||
* | Incorporated ssl changes | Stephen Beaver | 2016-06-21 | 1 | -0/+9 |
| | |||||
* | Set kern.corefile, fixes #6510 | jim-p | 2016-06-21 | 1 | -1/+2 |
| | |||||
* | Teach rc script to copy custom_logos over default one | Renato Botelho | 2016-06-20 | 1 | -0/+6 |
| | |||||
* | Use escapeshellarg on shell calls in auth.inc. Ticket #6475 | jim-p | 2016-06-09 | 1 | -10/+18 |
| | |||||
* | Add resetwebgui to developer shell | Phil Davis | 2016-06-08 | 1 | -0/+26 |
| | | | | | | | | | | This might be helpful to people if they have set the theme to something that they are having trouble displaying, reading... or enabled some widget that is not good or... It allows them to get back to a known-working dashboard state, from where they can try again with customizations. Having something like this was suggested by stilez in amongst discussion of features for https://github.com/pfsense/pfsense/pull/2989 | ||||
* | Implement pkg_valid_name() | Renato Botelho | 2016-06-08 | 1 | -0/+8 |
| | |||||
* | This needs a newline | jim-p | 2016-06-06 | 1 | -1/+1 |
| | |||||
* | Set keepalive_timeout 0 where captive portal in use, and update otherwise to ↵ | Chris Buechler | 2016-06-03 | 1 | -1/+3 |
| | | | | nginx's current default of 75. Ticket #6421 | ||||
* | Add a check to see if the file exists before running filesize on it, to ↵ | Chris Buechler | 2016-05-31 | 1 | -0/+5 |
| | | | | avoid PHP error. | ||||
* | Improve readability | Renato Botelho | 2016-05-31 | 1 | -2/+10 |
| | |||||
* | Do not call gettext() for the string used to match the place in file to ↵ | Renato Botelho | 2016-05-31 | 1 | -1/+1 |
| | | | | start rewriting it | ||||
* | Use 0 here if specified. Ticket #6413 | Chris Buechler | 2016-05-27 | 1 | -1/+1 |
| | |||||
* | Fix this missed one. | NOYB | 2016-05-25 | 1 | -1/+1 |
| | | | | (cherry picked from commit f42ef69ab518237260a2e129cbdf391549c003ad) | ||||
* | Firewall / Aliases / Edit - New URL Table Alias Type | NOYB | 2016-05-25 | 2 | -12/+12 |
| | | | | | | Make the code cleaner and easier to follow by using the same alias type designations as config. (cherry picked from commit ebe833f6a9463b0e4add1d97c360af4a682d1add) | ||||
* | Firewall / Aliases / Edit - New URL Table Alias Type | NOYB | 2016-05-25 | 2 | -3/+4 |
| | | | | | | Need to pass alias type to process_alias_urltable() function when creating a new url table alias because it is not yet set/available from config. So the alias_get_type() function can't be successfully used yet. (cherry picked from commit 3b07f4feaf35e70700082240ef03966f74f5df97) | ||||
* | Lower default LDAP timeout to 5 seconds. Idea from Sandeep1991 in PR 2971. ↵ | Chris Buechler | 2016-05-24 | 1 | -4/+4 |
| | | | | Ticket #6367 | ||||
* | Set request_terminate_timeout to the same as max_execution_time in case ↵ | Chris Buechler | 2016-05-24 | 1 | -0/+1 |
| | | | | something executed externally doesn't respond, to avoid hanging up all of php-fpm eventually. Ticket #6318 among other similar potential issues. | ||||
* | Relax Suhosin to allow a 512M memory limit | NewEraCracker | 2016-05-24 | 1 | -1/+1 |
| | |||||
* | Set PHP's memory limit to 512M on 64 bit. Ticket #6364 | Chris Buechler | 2016-05-24 | 1 | -2/+2 |
| | |||||
* | URL Table (Ports) File Comments | NOYB | 2016-05-24 | 1 | -1/+2 |
| | | | | | | Fix for Bug #6395 that keeps full line comments of the downloaded file but strips them for the pf rules load. (cherry picked from commit e7e1e514607e7b017e5407326cfd7ddb439963d0) | ||||
* | Remove calls which rely in uninitizalized vars | NewEraCracker | 2016-05-20 | 1 | -3/+1 |
| | | | | | | | | After analyzing implementations in RELENG_2_1 and RELENG_2_2, this code seems to be a left over after code rewrite Also remove a trailing space from comment (cherry picked from commit 0120cad84ea4dddd0c1501ecb41f2a082ea1e7d9) | ||||
* | Add freeDNS v6 support | TechSmurf | 2016-05-20 | 1 | -1/+8 |
| | | | | | FreeDNS IPv6 support confirmed working using same method as v4 with v6 source address. Simple second service with _useIPv6 (cherry picked from commit ac16181a2cfefec293e0562a7bfe8e2f7140e191) | ||||
* | Add menu item for freeDNS v6 | TechSmurf | 2016-05-20 | 1 | -2/+2 |
| | | | | (cherry picked from commit d102e2d5d3f238fa4f35a1d935366a2e6153804e) | ||||
* | Removed global variables used on the version 2.2 | SilvioGiunge | 2016-05-20 | 1 | -17/+0 |
| | | | | (cherry picked from commit d4af7f9e4a332278a80ba2a9c56df2064dc579d9) | ||||
* | Bump version to 2.3.2-DEVELOPMENT | Renato Botelho | 2016-05-16 | 1 | -1/+1 |
| | |||||
* | Customize limiter info message | Phil Davis | 2016-05-16 | 1 | -3/+8 |
| | | | | | | The $dn_default_shaper_msg is what is displayed on the Limiters tab. It needs to talk about "limiter" rather than "queue". This code builds up each message using the same base template sentences, inserting "queue" or "limiter" in the appropriate place. (cherry picked from commit aadc135856a0dc2cb131aeda3fd7bc44c11ab123) | ||||
* | Fix script name in error log | Chris Buechler | 2016-05-15 | 1 | -1/+1 |
| | |||||
* | Fix misspellings. | Chris Buechler | 2016-05-15 | 1 | -3/+3 |
| | |||||
* | Disable ipcomp regardless of config setting to avoid problem. Ticket #6167 | Chris Buechler | 2016-05-13 | 1 | -1/+2 |
| | |||||
* | Silence mwexec output. Now that the groupdel actually works, it spams the ↵ | Chris Buechler | 2016-05-13 | 1 | -1/+1 |
| | | | | log when group isn't found. Ticket #6352 | ||||
* | Unbound and dnsmasq can both be enabled so restart both if need be | k-paulius | 2016-05-13 | 1 | -4/+6 |
| | |||||
* | Fix scope for IPv6 link local gateway IPs. Ticket #6353 | Chris Buechler | 2016-05-13 | 1 | -1/+1 |
| | |||||
* | Handle link local IPv6 gateways and default gateway switching correctly. ↵ | Chris Buechler | 2016-05-13 | 1 | -0/+11 |
| | | | | Ticket #6258 | ||||
* | Don't start unbound in track6 config if system is booting. Add dnsmasq here ↵ | Chris Buechler | 2016-05-12 | 1 | -1/+5 |
| | | | | as well. Based on PR 2943. Ticket #6186 | ||||
* | Use -g with groupdel when passing a GID. Ticket #6352 | Chris Buechler | 2016-05-12 | 1 | -1/+1 |
| | |||||
* | Use proper IPsec enable test. Fixes #6351 | jim-p | 2016-05-12 | 1 | -1/+1 |
| | |||||
* | Fix #6278 | Renato Botelho | 2016-05-12 | 1 | -3/+3 |
| | | | | | | | | | $cpzone is always in lowercase, it's used as the array key used in config.xml. Use it in two cases where the $cp['zone'] was being wrongly used: - To find out zoneid - To replace PORTAL_ACTION url | ||||
* | Store notices safely to prevent potential XSS when notices are displayed ↵ | Chris Buechler | 2016-05-12 | 1 | -5/+5 |
| | | | | locally or by remote systems where they're shipped. Ticket #6154 | ||||
* | Fix package_reinstall_all post-upgrade when packages have been removed in ↵ | Chris Buechler | 2016-05-12 | 1 | -5/+5 |
| | | | | pre_upgrade. Ticket #6137 | ||||
* | Tweak upgrade - Remove unused code and document changes better | NewEraCracker | 2016-05-11 | 2 | -10/+8 |
| | | | | This will ensure a smooth upgrade for those running config 15.4 to any next version. | ||||
* | Prefer index.php over index.html where both exist. | Chris Buechler | 2016-05-11 | 1 | -1/+1 |
| | |||||
* | Only execute remote search operation on first call of get_pkg_info(), this ↵ | Renato Botelho | 2016-05-11 | 1 | -0/+18 |
| | | | | should fix #6177 | ||||
* | Revert "Add config upgrade code to update package names. Ticket #6118" | Chris Buechler | 2016-05-11 | 2 | -14/+1 |
| | | | | This reverts commit 291fad43870bdb39ef0ab32125b022e268a29cf7. |