summaryrefslogtreecommitdiffstats
path: root/src/etc
Commit message (Collapse)AuthorAgeFilesLines
...
* | Merge pull request #3410 from ↵Renato Botelho2017-01-261-25/+97
|\ \ | | | | | | | | | marjohn56/RTSOLD-lock-creation,-dhcp6c-launch-&-kill-changes-#3
| * | Update interfaces.incmarjohn562017-01-241-2/+2
| | |
| * | Changed logging calls and style correction.marjohn562017-01-201-4/+4
| | |
| * | RTSOLD lock creation, dhcp6c launch & kill changes #3marjohn562017-01-201-25/+97
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Added lock file creation and check to RTSOLD script creation. This is to prevent mutliple launches of dhcp6c, this appears to happen when multiple RA's are received in rapid succession at the start of a session. Once created dhcp6c cannot be launched again until the lock file is deleted, this is done within the kill_dhcp6_client process locking the two together. The kill vlaue used to kill the dhcp6c client is now variable. The value -9 causes the process to exit without sending a release if required, and if the timing is just rignt can cause the pid file to be left behind; -15 allows for a graceful exit and if the release flag is not set then it sends and waits for the release confirnation, the value now switches between those depending on the configuration option 'No Release'. If no release is true then -9 is used as the type. Any left behind pid is removed automatically. This change will make it possible to stop the use of the -n flag, thus allowing the dcp6c to send a release manually, if so required. The launch of dhcp6c when in dhcp6withoutRA is moved to its own function, as uch as anything this makes the code tidy around the bottom of nterface_dhcpv6_configure(). A completely new method of implimenting dhcp6wihtoutRA is used. In default mode RTSOLD launches dhcp6c. In dhcp6wihtoutRA mode dhcp6 aunches RTSOLD. New scripts are created and old ones modified to handle this mode, the dhcp6 conf file changes depending on the mode calling a different script for each mode. In simple terms its dcp6->rtsold- lan_configure. Whenever dhcp6 gets a response that launches its script then it will run rtsold, the RA in turn will cause the wan6 configure script to run. This method also means the script only ever runs once and no modified dhcp6c is required. The scripts are dynamic and change depending on the mode. Creation takes into account that the domain-name-server variables created by dhcp6 and passed to the script it calls are passed on. In default mode this is simple as it calls the dhcp6c_*_script which calls the rc.newwanipv6 script directly, in dhcp6withoutRA its RTSOLD that calls the dhcp6c_*_script, so in order to make this change work the variables are echoed to the tmp folder and retreived by the dhcp6withoutRA version of dhcp6c_*_script when that calls rc.newwanip.
* | | Require Name field in ShaperPhil Davis2017-01-241-4/+4
| | |
* | | Introduce is_intrange() to validate a range of integers delimited by ':' or '-'Renato Botelho2017-01-241-0/+29
| | |
* | | Merge pull request #3414 from phil-davis/ipv6-compressRenato Botelho2017-01-235-13/+32
|\ \ \
| * | | Force compress for where_is_ipaddr_configured check_localipPhil Davis2017-01-221-1/+1
| | | |
| * | | Force compress for where_is_ipaddr_configuredPhil Davis2017-01-222-2/+6
| | | |
| * | | Always force compress when calling Net_IPv6Phil Davis2017-01-225-10/+25
| | |/ | |/|
* | | Remove unused variable $cfglckkeyconsumersRenato Botelho2017-01-231-5/+3
| | |
* | | Fixed #6967Steve Beaver2017-01-231-1/+4
|/ /
* | Add a parameter to install_cron_job to stop it from performing its own ↵jim-p2017-01-202-8/+17
| | | | | | | | | | | | write_config. Adjust base system calls to match. Ticket #7146 Packages may still need the old behavior but need tested individually. Once all function calls are confirmed to work without the write, the write_config parameter and call can be removed from this function for good.
* | Fix #7086: Copy files over from /var before umount it and move to MFSRenato Botelho2017-01-201-11/+11
|/
* Make sure all ZFS volumes are mounted during boot and only mount /var and ↵Renato Botelho2017-01-191-5/+19
| | | | /tmp when MFS is disabled. Fixes #7086
* Merge pull request #3402 from phil-davis/patch-6Renato Botelho2017-01-191-0/+6
|\
| * Fix #7141 Add a priv for UPNPPhil Davis2017-01-191-0/+6
| | | | | | | | so users can grant access to Services->UPNP Note: Status->UPNP already has a priv and it works.
* | Merge pull request #3400 from phil-davis/patch-4Renato Botelho2017-01-191-1/+1
|\ \
| * | Fix #7139 Accessing help about this pagePhil Davis2017-01-191-1/+1
| |/ | | | | from a user that does not have admin or all page privilege.
* | Fix #7136 Start OpenVPN on ordinary VIPPhil Davis2017-01-191-2/+2
|/
* Wait while interface is in 'tentative' state before try to bind dpinger to ↵Renato Botelho2017-01-171-0/+6
| | | | its address
* Fix #6603: Wait while interface is in 'tentative' state before try to bind ↵Renato Botelho2017-01-172-0/+29
| | | | OpenVPN to its address
* Remove extra parenthesis and blank lineRenato Botelho2017-01-171-3/+2
|
* Simplify logicRenato Botelho2017-01-171-8/+4
|
* Make sure /var/tmp permissions are correct. Fixes #7120Renato Botelho2017-01-161-0/+2
|
* Remove redundant commentjim-p2017-01-151-1/+1
|
* Restart unbound after clearing logs (Bug #6915)doktornotor2017-01-141-0/+5
| | | Handle clearing the individual log as well.
* Merge pull request #3376 from phil-davis/multi_dns_serversRenato Botelho2017-01-131-7/+7
|\
| * Redmine #5549 Allow variable number of DNS ServersPhil Davis2017-01-121-7/+7
| |
* | Also check IPv6 when determining if we should use nobind or lport.jim-p2017-01-131-1/+1
| |
* | Fix #7118 icmp-type anyPhil Davis2017-01-131-1/+1
| | | | | | When 'any' is selected as the ICMP type, do not write 'icmp-type any' in the rule, just leave it out.
* | Hide/deactivate the reroot option when ZFS is active. Ticket #6045jim-p2017-01-121-3/+7
| |
* | Fix #6153Renato Botelho2017-01-121-0/+4
|/ | | | | | Initialize cached IP and Time on loop for RFC2136 items, without this the items used on last loop iteration will be used again and second item on the same interface will not be updated
* Fix #7105: Old rules may not have ipprotocol defined, consider it icmp6-type ↵Renato Botelho2017-01-121-1/+1
| | | | only when ipprotocol is inet6
* Ticket #6340:Renato Botelho2017-01-121-5/+11
| | | | | | | | | - Stop misusing fsck -F parameter, it's supposed to be used when you plan to run background fsck after filesystems are mounted, what is not the case on pfSense - Increase attempts to mount all filesystems as read-write to 10 - If we cannot mount filesystems as read-write, start a recovery shell and after it finishes, reboot system
* Simplify logicRenato Botelho2017-01-111-5/+3
|
* Fix #6712Renato Botelho2017-01-111-1/+1
| | | | Use system_hosts_entries to generate unbound host_entries.conf
* Ticket #6712: Create system_hosts_entries()Renato Botelho2017-01-111-24/+21
| | | | This function will return an array all items to be added to /etc/hosts.
* Ticket #6712: Create system_hosts_dhcpd_entries()Renato Botelho2017-01-111-78/+104
| | | | | This function will return an array with dhcpd and dhcpdv6 items to be added to /etc/hosts.
* Ticket #6712: Create system_hosts_override_entries()Renato Botelho2017-01-111-23/+51
| | | | | This function will return an array with dnsmasq or unbound items to be added to /etc/hosts
* Ticket #6712: Deprecate read_hosts()Renato Botelho2017-01-111-30/+1
| | | | Read local items from system_hosts_local_entries()
* Ticket #6712: Create system_hosts_local_entries()Renato Botelho2017-01-111-36/+62
| | | | | | This function will return an array with 127.0.0.1, ::1 and LAN (or first interface with no gateway when LAN is not there) items to be added to /etc/hosts
* Kill dhcpleases after we are sure we can write /etc/hostsRenato Botelho2017-01-111-7/+8
|
* Fix styleRenato Botelho2017-01-111-58/+111
|
* Make sure IP address is v4 before create /etc/hosts entryRenato Botelho2017-01-111-2/+2
|
* Do not write a 'restrict' line to the NTP config if it will be empty. Fixes ↵jim-p2017-01-111-10/+12
| | | | #7110
* Only include files that ends with .incRenato Botelho2017-01-111-2/+3
|
* Merge pull request #3341 from phil-davis/sysprvwarn2Renato Botelho2017-01-112-0/+13
|\
| * Merge branch 'master' into sysprvwarn2Phil Davis2017-01-1127-462/+875
| |\
| * | Add security notes for privilege assignment pagesPhil Davis2017-01-022-0/+13
| | | | | | | | | | | | Suggested solution for Redmine 2247
OpenPOWER on IntegriCloud