summaryrefslogtreecommitdiffstats
path: root/src/etc
Commit message (Collapse)AuthorAgeFilesLines
* Move copyright from ESF to NetgateRenato Botelho2016-09-06137-138/+138
|
* Remove unused file browser.phpRenato Botelho2016-09-061-0/+1
|
* Remove some obsolete code from globals.incjim-p2016-09-061-16/+1
|
* Fix handling of backup config count. Fixes #6771jim-p2016-09-061-1/+1
|
* Merge pull request #3071 from phil-davis/Check_IP_ServicesRenato Botelho2016-09-025-3/+49
|\
| * Backport Check IP ServicesPhil Davis2016-07-205-3/+49
| | | | | | | | Original pull request to master was #3037
* | Force changes in routing to be detected by the systemNewEraCracker2016-09-021-1/+2
| | | | | | | | | | | | When dhcp6c without RA is enabled, dhcp6c isn't killed and respawned, this causes the system not being able to pick up the routing changes. In this case, running the configuration script which fires rc.newwanipv6 solves the problem. (cherry picked from commit f2c9194cdde6458d6d22e83546eb18f1d14fa4ea)
* | DHCP6 Before RA. Additions and ammendmentsmarjohn562016-09-021-26/+15
| | | | | | | | | | | | | | | | | | | | Replaced posix_kill() in kill_dhcp6client_process() with mwexec("kill -9 $pid"), this is because the posix_kill call was not reliably killing the dhcp6c process, kill -9 works every time. Changes to the rtsold script creation. The script lines starting dhcp6c should not have be written to the script when dhcpwithoutra is true. Style corrections, I spend more time doing these than changing code! (cherry picked from commit c4ddb03acbbb4ff2a88162a9afc9e589a6f4d053)
* | Improve dhcpd and dhcpleases reloadNewEraCracker2016-09-022-9/+16
| | | | | | | | | | | | | | | | 1) Avoid running services_dhcpd_configure() more times than needed. 2) Always restart dhcpleases after it's killed during interface recycle. 3) It's not necessary to restart dhcpdv4 when doing changes in ipv6 config. (cherry picked from commit 509e9357df4755a4fe5d1d9b20eda65bafb855e7)
* | Uniformize memory limits and remove old code (revised)NewEraCracker2016-09-021-1/+1
| | | | | | | | | | | | | | 1) Allow setting a memory_limit up to 768M (Suhosin) 2) Remove old workarounds. Memory limits on config.inc will be new defaults (cherry picked from commit 7edcc54b2e9d1de51d5e6d0aedade89bc2cf0699)
* | Ensure only one instance of services_dhcpd_configure runs concurrentlyNewEraCracker2016-09-021-0/+4
| | | | | | | | | | | | This way kill and respawn will behave as they should for the dhcpd processes (cherry picked from commit c69ea0051c5549a9db0d092e85b92f78ffb4c978)
* | Prevent accessing undefined offset in IPv6.incNewEraCracker2016-08-301-8/+5
| | | | | | | | | | | | | | | | | | On perfectly good IPs (eg. 1:2::3:4) this code could cause the following notice: Notice: Undefined offset: 2 in IPv6.inc on line 560 On bad IPs like 1::2::3 it would not result in any notice. This commit fixes the above problem, while making sure that only valid sequences pass validation.
* | system_dhcpleases_configure() - Improve pidfile handlingNewEraCracker2016-08-291-2/+3
| | | | | | | | | | | | | | | | | | 1) Set the pidfile variable in the correct place. pidfile variable is required in both 'if' and 'else' blocks. 2) Ensure pidfile is valid before sending term signal (cherry picked from commit 4509abc380552554cbdf3f42c6783b47112f245a)
* | Apply the fix for ticket #6589 also into dhcpdv6 configNewEraCracker2016-08-291-0/+1
| | | | | | | | (cherry picked from commit 20350989db5d66ffb827beaed5ef5738cd62fc9d)
* | Indent dhcpd.conf option customPhil Davis2016-08-291-2/+2
| | | | | | | | (cherry picked from commit c507161d557817c1f6f0adbef9ffdbad82115ee8)
* | Fix #6720 DHCP options by poolPhil Davis2016-08-291-1/+32
| | | | | | | | | | | | It is a little bit tricky having to generate the unique "option custom-if-n-m code ..." lines at first where n = pool index and m = item index in the items of the pool. Then make sure to reference that later, getting the same pool index into the array of pools. The $all_pools array as the "overall" or "base" pool first (at index 0), followed by the user-specified pools at index 1, 2, 3,... - which are actually at indexes 0, 1, 2,... in the ordinary array of pools in the config. So the -1 at line 910 has to happen. But it works for me. (cherry picked from commit 285987208f31f38abe35b984b08645d43c11b001)
* | Fix double domain-name-servers for poolPhil Davis2016-08-291-3/+0
| | | | | | | | | | | | | | Add a pool and specify something in 1 or more of the DNS servers boxes for the pool. The "option domain-name-servers 1.2.3.4" line appears twice in dhcpd.conf The first bit of code to do it is at lines 787-799. I have deleted this 2nd time that it is done at lines 854-856. (cherry picked from commit beb9321fcf502b4d7ad27af745c3be9da7f09c6b)
* | Fix #6724 VLAN interface displayed wrongPhil Davis2016-08-291-8/+10
| | | | | | | | | | | | | | in interface assignment script dialog. The str_replace() calls were not smart enough to just get rid of bare "igb1" when "igb1_vlan123" and such like was also in the list. (cherry picked from commit fd020a2d94077cc9c8ee6bac5b3da11e116c84a2)
* | Add a selection for OpenVPN to have no compression preference + ↵jim-p2016-08-221-1/+6
| | | | | | | | comp-noadapt, which is necessary in some client edge cases. Fixes #6739
* | Use "-C /dev/null" when starting dnsmasq to avoid it picking up an incorrect ↵jim-p2016-08-191-2/+2
| | | | | | | | default config which would override our command line parameters. Fixes #6730
* | Add an option to push "block-outside-dns" to clients of an RA OpenVPN. Fixes ↵jim-p2016-08-171-0/+3
| | | | | | | | #6719
* | Fix DDNS domain for static map DHCP entriesPhil Davis2016-08-161-2/+2
| | | | | | | | | | | | If you specify DDNS Domain in a DHCP static map entry, it does not make its way through to dhcpd.conf This is because the var name $pdnscfg is wrong from an old copy-paste that first made this code. (cherry picked from commit a5a55231770e548898b6b1c18146cc0c6631c5c6)
* | Code style and commentsPhil Davis2016-08-164-6/+6
| | | | | | | | | | | | No functional change - just making style consistent (cherry picked from commit 9d3e8723171c727cf43338bd8e95ab2bb7e6a66c)
* | Protect package_reinstall_all()NewEraCracker2016-08-121-0/+3
| | | | | | | | | | | | If one restores a config.xml without packages, there will be a warning about invalid argument supplied for foreach(). This commit fixes the problem. (cherry picked from commit 5eda5816d8a7bd05730c70e44493815079925b48)
* | Merge pull request #3095 from NewEraCracker/redmine-6686Renato Botelho2016-08-121-0/+1
|\ \
| * | Ensure extensions.ini is readable by non root usersNewEraCracker2016-08-111-0/+1
| | | | | | | | | | | | https://redmine.pfsense.org/issues/6686
* | | Pass along send_smtp_message() return, otherwise message will not be shown ↵Renato Botelho2016-08-111-2/+1
|/ / | | | | | | when testing SMTP settings
* | Text typoPhil Davis2016-08-081-1/+1
| | | | | | | | | | Noted by Daryl Morse in comment on Redmine bug 6637. (cherry picked from commit bf6ae0ad277710ffa64ee0967c5d4f717c2bc54b)
* | Ignore linkup eventos for interfaces that are member of bridges and have no ↵Renato Botelho2016-08-051-2/+21
| | | | | | | | IP address configured
* | Verify if interface is active gw for gw group before update dynamic DNSRenato Botelho2016-08-051-2/+26
| |
* | Fix a redundant HTTP "User-Agent" string.Philip Soeberg2016-08-041-1/+1
| | | | | | | | | | | | | | | | | | CURLOPT_USERAGENT expect the value to the user-agent string, not the entire key-value pair. Before this fix, HTTP header "User-Agent: User-Agent: phpDynDNS/0.7" was sent for DDNS updates. NGINX configuration at GratisDNS will not accept a user-agent formatted in the above way. This commit fixes GratisDNS Dynamic DNS service. (cherry picked from commit ce9a957241c0453402d0765be0fe25e1cca48c2a)
* | Merge pull request #3066 from phil-davis/notifychannelupdownRenato Botelho2016-08-041-3/+15
|\ \
| * | Backport notify by email and in syslog when a channel goes up or downPhil Davis2016-07-201-3/+15
| |/ | | | | | | Original pull request to master was #2847
* | Merge pull request #3065 from phil-davis/radius-openvpnRenato Botelho2016-08-043-10/+52
|\ \
| * | Backport Radius auth server to detect openVPNPhil Davis2016-07-203-10/+52
| |/ | | | | | | Original pull request to master was #3057
* | services_dhcp: Ignore BOOTP queriesJose Luis Duran2016-08-041-0/+5
| | | | | | | | | | | | | | | | | | | | | | BOOTP leases do not have a maximum lease time by default, this could potentially lead to a DHCP address pool exhaustion. This commit adds an option to ignore BOOTP queries. Redmine #4351 (cherry picked from commit 6d53301b1f612ff3e0490abbb46b53c50193b80b)
* | Update firewall rules separators when NAT associated rule is deleted.NOYB2016-08-031-0/+10
| | | | | | | | | | Bug: https://redmine.pfsense.org/issues/6676 (cherry picked from commit 7475d7b337c0a08dc4d6636f33b0998067f26008)
* | Save widget settings per userPhil Davis2016-08-031-3/+10
| | | | | | | | | | | | | | | | | | For users that have "custom settings" enabled, save the "tool" settings of their widgets on a per-user basis. User that do not have "custom settings" enabled will continue to use and save widget settings to/from the system-wide settings. (cherry picked from commit 2b7d0520818248920ec88514fde2c9b86c2a70af)
* | Fix typo, LT2P->L2TPjim-p2016-08-021-2/+2
| |
* | Merge pull request #3074 from phil-davis/gwredirRenato Botelho2016-08-011-4/+0
|\ \
| * | Backport openvpn_add_dhcpopts already sets redirect-gatewayPhil Davis2016-07-211-4/+0
| |/ | | | | | | | | | | | | | | Ticket 6633 Original commit to master was https://github.com/pfsense/pfsense/commit/f8038899f250c656b1ef03fe351fb9cfdadeaf0c Adding this PR for completeness so that this is visible as something that can be back-ported to RELENG_2_3
* | dpinger: fixed check for pidfile length #6505Daniel Hoffend2016-08-011-1/+1
| | | | | | | | (cherry picked from commit 4aaf38742563c427b42a813387d84246ff20a2f2)
* | Merge pull request #3073 from phil-davis/certsRenato Botelho2016-08-011-1/+1
|\ \
| * | Backport Add missing recommended key lengths/digest to Cert systemPhil Davis2016-07-211-1/+1
| |/ | | | | | | Original pull request to master was #2944
* | Merge pull request #3069 from phil-davis/LAGG-MTURenato Botelho2016-08-011-0/+38
|\ \
| * | Backport Fix issue with QinQ on LAGG interfaces where MTU doesn't apply to ↵Phil Davis2016-07-201-0/+38
| |/ | | | | | | | | | | parent Original pull request to master was #2905
* | Merge pull request #3068 from phil-davis/subnet_sizeRenato Botelho2016-08-011-6/+3
|\ \
| * | Backport simplify subnet_size()Phil Davis2016-07-201-6/+3
| |/ | | | | | | Original pull request to master was #3007
* | Merge pull request #3067 from phil-davis/useallcertsRenato Botelho2016-08-011-2/+10
|\ \
| * | Backport Use all certificates in the chain when creating the ca-file for ↵Phil Davis2016-07-201-2/+10
| |/ | | | | | | | | | | server-side OpenVPN configuration Original pull request to master was #2966
OpenPOWER on IntegriCloud