summaryrefslogtreecommitdiffstats
path: root/src/etc
Commit message (Collapse)AuthorAgeFilesLines
* Encode shaper queue name before printing. Issue #9294jim-p2019-01-291-12/+12
| | | | | | | Validation is already present and prevents bad values from being entered. (cherry picked from commit 1072b9333c47df593420937361349b09a9b73639)
* Fix handling of special swap cases. Fixes #9281jim-p2019-01-221-3/+7
| | | | (cherry picked from commit 14d470377eab89d7c3f6f765a150ce737409af28)
* Ensure IPsec P1 entries have a 'protocol' value. Fixes #9207jim-p2018-12-182-1/+14
| | | | (cherry picked from commit d188b7251a83b4a8a39ba50dfaf9a1cba35cad17)
* Fix DigitalOcean DynDNS clientGrant Sheehan2018-12-111-2/+6
| | | | | | | | Fixes the check on the return value since it's been updated to use HTTP/2 syntax. Also adds logic to allow using `@` to denote updating the root domain A record as well. (cherry picked from commit 5878d529949aafef165acdce8e7daae234c9d2c4)
* Alternate swap device location tactics. Issue #9182jim-p2018-12-112-4/+19
| | | | (cherry picked from commit d36e5a49e6104c52bca2153eba45709d5af99599)
* Fix nginx resolver handling when a cert needs OCSP stapling. Fixes #9160jim-p2018-12-111-4/+10
| | | | (cherry picked from commit 4c6e3de40f56a1bd8d978a9dd4677d0ab025b8cb)
* Minor fixes related to #9121Steve Beaver2018-12-111-1/+1
| | | | (cherry picked from commit 6f9729c0a53be67ced6d52e6e33dba6b237083ab)
* Fixed regression where calling station id was removed from openvpnKacper2018-12-111-1/+2
| | | | (cherry picked from commit 95f3d049bfead1c6faf04c8a626a7ce868f8b6f8)
* Remove obsolete OLSRD code. Implements #9117jim-p2018-12-112-44/+5
| | | | (cherry picked from commit 592bec817f152a7536572a675079776138827cc8)
* Fix NPt validation to allow single addresses. Fixes #9163jim-p2018-12-041-1/+2
| | | | (cherry picked from commit e9446f537051c7b536d0b3fbb5ebd00c3766001a)
* Add Korean to the list of available languagesRenato Botelho2018-12-031-0/+1
|
* Do not call interfaces_vlan_configure() every time an interface is edited in ↵Luiz Souza2018-11-271-0/+60
| | | | | | | | | | GUI. This is just necessary when a parent interface is changed and we have to propagate the changes to all clones (MTU, FLAGS and others). Add a logic to detect when a parent interface is changed and only then call interfaces_vlan_configure(). Ticket #9115
* Make the WF2Q+ the default scheduler for the dummynet limiters.Luiz Souza2018-11-221-8/+10
| | | | | | | | | | | | The WF2Q+ was the default scheduler in previous versions, it is well tested and support dynamic queues. Add a note for the FIFO scheduler to make clear that it does not support dynamic queues (by design) and as such, it is working as intended. Add the scheduler information to Diagnostics -> Limiter Info. Ticket #8973 (cherry picked from commit 25d029d1e31cc3874db82db352cd560a401558df)
* Fix #9144: Init array before useRenato Botelho2018-11-211-0/+1
|
* Fix #9121: Initialize arrays to prevent PHP 7 errorsjim-p2018-11-2119-135/+89
|
* Fix #8465: Preserve default gw when switch to BACKUPRenato Botelho2018-11-201-12/+14
| | | | | | | | | | interfaces_carp_set_maintenancemode() calls interface_carp_configure() to each configured CARP and it ends up reconfiguring completely the interface when it's not necessary. Add a new parameter $maintenancemode_only to interface_carp_configure() and use it to only change advskew to 254 when going to forced maintenance mode and move it back to configured value when leaving
* Break long linesRenato Botelho2018-11-201-6/+17
|
* Fix few spelling issuesAugustin-FL2018-11-201-1/+1
| | | | | | Ticket #9134 (cherry picked from commit 85a8f9b0ce0d0fac6f361bc5dfd09c67607020f1)
* Send MAC address as username if radmac is used for connecting an userAugustin-FL2018-11-201-1/+3
| | | | | | Ticket #9131 (cherry picked from commit f790565a7514662b1fe97fc7c79b56838597965c)
* Init various arrays in easyrule before use with references. Fixes #9119jim-p2018-11-141-0/+5
| | | | (cherry picked from commit b55d94e80eeed57e39d33c643bf00be6565c1938)
* Always configure VTI routes when setting up the interface. Fixes #9116jim-p2018-11-131-3/+1
| | | | (cherry picked from commit ed104a182a95f0ce4e6df76a8c3f0698ff7ce092)
* Fix previous regex. Issue #9106jim-p2018-11-121-1/+1
| | | | (cherry picked from commit 16b78f3879bdf658274caf750c9360ec97bb8f77)
* Replace '.' in radius name for strongSwan. Fixes #9106jim-p2018-11-121-1/+1
| | | | (cherry picked from commit cc955fe63ad44b5aac66721e54965d9bc13e990c)
* Fix #9102: Suppress stream_select() undesired warningsRenato Botelho2018-11-091-1/+1
|
* Add 0.0.0.0/0 to VTI left/rightsubnets. Fixes #8859jim-p2018-11-071-4/+12
| | | | | | | | | No negative feedback from testing, time for a wider push. This helps with third party devices that require 0.0.0.0/0 to route traffic on a VTI P2. (cherry picked from commit 5c4aa94a90256b13b19209f11e4c75b2d0e85ece)
* Add checkbox to disable SMTP SSL cert verification. Implements #9001jim-p2018-11-071-0/+4
| | | | | | | | | The default action is to validate the certificate. If the user knows the server does not have a valid certificate (e.g. self-signed), this option will allow encryption to be used without validating the identity of the server. (cherry picked from commit 7da466e1c4b6873b9fb80e862faf8f799a6d4531)
* If the cert date is negative, use DateTime instead of date. Fixes #9100jim-p2018-11-061-0/+10
| | | | (cherry picked from commit 3fec247042a91642a22a8761d3c8a1f9df119817)
* Prevent CRL from using too large a lifetime on ARM. Fixes #9098jim-p2018-11-061-3/+18
| | | | (cherry picked from commit 9aa8f6a864905c0e3738c337a51f0772b0c5eb93)
* Prevent log size from being too large, which breaks clog. Fixes #9081jim-p2018-11-051-0/+1
| | | | (cherry picked from commit 8bd36425b4bc46e5bbcc940a4d20bfbb2a0011ba)
* Make MBT prefer video console. Fixes #9094jim-p2018-11-051-2/+1
| | | | | | Avoids foot-shooting by restoring a config with serial enabled. (cherry picked from commit 5e5df38fcd3116c4d0f3fc71622643e962f982a8)
* Use EFI console when needed. Fixes #8978jim-p2018-11-051-3/+4
| | | | (cherry picked from commit 2f73f2f9eca656c2de5b836f4d0292186147e788)
* Fix 9086: Remove gettext() from all 'Local Databases' stringsRenato Botelho2018-11-011-5/+5
|
* Skip empty IPsec P1 during upgrade to 17.5. Fixes #9083jim-p2018-10-311-0/+4
| | | | (cherry picked from commit 024e5de242661219bb8a62f183b1601cec44aa3c)
* Fix #8864: Let users modify sshguard parameters and whitelistRenato Botelho2018-10-311-2/+26
|
* Initialize package arrays before use. Fixes #9067jim-p2018-10-251-5/+14
| | | | (cherry picked from commit bfd3334b4bc9ae0d3c43f69e8305c83b0da3aa58)
* Add trailing slash to ECL check path for /config/. Fixes #9066jim-p2018-10-251-1/+3
| | | | (cherry picked from commit c688c59b47a3ce138ffe094794d01f1e6fcc00df)
* Fix processing of the 'all' group. Fixes #9051jim-p2018-10-232-8/+18
| | | | | | | | All the 'all' group to the list of groups at the end, rather than the start. This way it will be considered no matter how users login. This also fixes issues some users had with the original changes. (cherry picked from commit 4de15854384e28004b0dc571dc8a40fda7eae694)
* Validate and protect powerd option values. Fixes #9061jim-p2018-10-231-1/+4
| | | | (cherry picked from commit 3be699295e5cb7be24cc5361700be1a8b759e26c)
* Use the fw domain for DNS search when no other choices exist. Fixes #9056jim-p2018-10-221-2/+3
| | | | (cherry picked from commit 74a8a219d33c9b87ab4b6b4026d247f0f6bdcaa6)
* gateway monitoring, wait for apinger to terminate or remove its pid file ↵PiBa-NL2018-10-222-6/+12
| | | | | | when restarting it. (cherry picked from commit 66491555711182d9176f6292fd58397c65e4b2af)
* generate a flag even if trying to perform RADIUS MAC authentication on a ↵Augustin-FL2018-10-221-11/+11
| | | | | | non-RADIUS server. (cherry picked from commit 22e328743170b62b55d6e18b593c4005e8d6f892)
* Implement login fallback for RADIUS MAC authenticationAugustin-FL2018-10-221-3/+5
| | | | (cherry picked from commit 774ff51ba07f944a39fdc6859ec7d258b95315bf)
* Strictly define the EAP Identifier for custom local client entries. Fixes #9055jim-p2018-10-221-8/+4
| | | | (cherry picked from commit 2d7ed31e3227566d0474929a3aed84509247f91e)
* Consider the "all" group when determining privileges. Fixes #9051jim-p2018-10-192-2/+2
| | | | (cherry picked from commit fe1afbb7549907e0d1cdfbf85d5f36d075a6a916)
* Rewrite /etc/rc.kill_states to use pfSense module state functions. Fixes #8554jim-p2018-10-181-15/+17
| | | | | | Eliminates inaccurate shell exec/grep/preg_match syntax issues. (cherry picked from commit 5142c80abbaa7b2dd219c03edd60c4f675d2fb62)
* Added scheduled config backupSteve Beaver2018-10-171-1/+5
| | | | | | Fixed: #8947 (cherry picked from commit a1aa91dec887ba929be08c993170803396a669b2)
* Fix Limiter validation check, which allows old queues to display. Fixes #8956jim-p2018-10-161-2/+2
| | | | | | | The AQM defaults to droptail when empty, but empty was being rejected as invalid even though it was handled in the code. (cherry picked from commit cd3cde526a9215e914c2f420c7e9c74b059a2ad0)
* Solve a package reinstall/start race condition. Fixes #9045jim-p2018-10-162-1/+8
| | | | (cherry picked from commit 84963037949aaf5225ae664cfe9b4e3b037beee0)
* Show nvme controllers in SMART list. Fixes #9042jim-p2018-10-151-1/+15
| | | | (cherry picked from commit e738a4c9b2607ad3561a0fce89d903535ca71249)
* Revert "Show nvme devices in SMART disk list. Fixes #9042"jim-p2018-10-151-1/+1
| | | | | | This reverts commit bdb6021f79f222b2c7d732436800e96cb34ea973. (cherry picked from commit dba7debb2e6be1ef469d99fa5e9673fba3f7d6db)
OpenPOWER on IntegriCloud