Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Show p2 items correctly (add missing td's) | Scott Ullrich | 2010-04-19 | 1 | -0/+5 | |
| | ||||||
* | Remove some sort of extra space/break in ipsec screen. Ticket #211 | pierrepomes | 2009-12-13 | 1 | -1/+0 | |
| | ||||||
* | Remove ph2 add button. It is shown when needed | sullrich | 2009-12-07 | 1 | -3/+0 | |
| | ||||||
* | Pass ph1ent | sullrich | 2009-12-07 | 1 | -2/+3 | |
| | ||||||
* | Make g a global and pass ph1ent | sullrich | 2009-12-07 | 1 | -1/+2 | |
| | ||||||
* | Replace dollarsigndollarsign with dollarsign | sullrich | 2009-12-07 | 1 | -1/+1 | |
| | ||||||
* | fix typos | Chris Buechler | 2009-12-07 | 1 | -1/+1 | |
| | ||||||
* | Require filter.inc and shaper.inc | Scott Ullrich | 2009-11-21 | 1 | -1/+3 | |
| | ||||||
* | Rework includes/require. This saves about 4 megabytes. | Scott Ullrich | 2009-11-21 | 1 | -0/+2 | |
| | | | | Simplify get_memory(). Tested on mips/i386 | |||||
* | add links to IPsec logs under IPsec status and other pages | Chris Buechler | 2009-11-07 | 1 | -0/+1 | |
| | ||||||
* | Kill racoon when disabling IPSEC. Restart it if re-enabled. | Scott Ullrich | 2009-11-07 | 1 | -1/+8 | |
| | ||||||
* | * Convert carp/vips code to behave the same as other interfaces. | Ermal Luçi | 2009-10-01 | 1 | -5/+3 | |
| | | | | | | | | * Make optimizations around it. * Make sure when we reload teh underlying interface we reload carp too. * Some fixes around the code. Reviewed-by: scott@ and billm@ | |||||
* | Nuke sorting it apparently changed the ID association | Scott Ullrich | 2009-09-23 | 1 | -3/+0 | |
| | ||||||
* | WIP: IPSec changes | Eirik Oeverby | 2009-09-22 | 1 | -1/+1 | |
| | ||||||
* | WIP: fixing IPSec screens/config | Eirik Oeverby | 2009-09-22 | 1 | -1/+1 | |
| | ||||||
* | Sort items | Scott Ullrich | 2009-09-11 | 1 | -1/+3 | |
| | ||||||
* | Include functions.inc which will then include ipsec.inc | Scott Ullrich | 2009-08-23 | 1 | -1/+1 | |
| | ||||||
* | Unbreak ipsec! | Scott Ullrich | 2009-08-23 | 1 | -1/+1 | |
| | ||||||
* | Fix incorrect double click edit link for phase2 records. | Seth Mos | 2009-07-15 | 1 | -1/+1 | |
| | | | | The link referred the phase2 edit page with the phase1 id which was incorrect | |||||
* | * Reorganize the 'apply' button infrustructure in the GUI. | Ermal Luçi | 2009-06-30 | 1 | -3/+3 | |
| | | | | | | - Present three new functions is/mark/clear_subsystem_dirty('name_of_subsystem'). This makes easier to create such things without needing to introduce new globals. - Convert all pages to the new infrustructure - This improves a lot the control on this notification | |||||
* | Remove some unneccessary calls to filter_configure() they just give recursivity! | Ermal Luçi | 2009-06-18 | 1 | -1/+1 | |
| | ||||||
* | * Create two new functions lock($subsystem)/unlock() to have more reliable ↵ | Ermal Luçi | 2009-05-08 | 1 | -2/+0 | |
| | | | | | | | | | | | locking using semaphores. This function can sleep till the resource is free and can help find not well behaving code. * Remove most of the config_lock/config_unlock logics on the whole scripts/pages it is an abuse of this. If any sybsytem wants to lock can do so with its own lock. * Lock the config when doing a filter reload to avoid parallell recursion on this function, since it is not reentrant. This compenstates for the removal of lock aquiring from the scripts/pages. * config_lock/config_unlock are now compate shims that do nothing. They are preserved since packages 'abuse' them too. | |||||
* | * Do not apply the settings directly from hitting the SAVE button show the ↵ | Ermal Luçi | 2009-04-22 | 1 | -14/+4 | |
| | | | | apply settings option for consistency with other pages. | |||||
* | Modify IPsec code to allow for transport mode. All existing configurations are | mgrooms | 2009-03-15 | 1 | -0/+10 | |
| | | | | | marked as tunnel for backwards compatibility. There are problems with the spd read code which Will likely choke on transport entries. We can fix this later. | |||||
* | Move the IPsec pinghost option from phase1 to phase2. Correct some | mgrooms | 2009-03-15 | 1 | -1/+1 | |
| | | | | bugs that were preventing the local address from being selected. | |||||
* | Migrate IPsec certificate management to centralized system. | mgrooms | 2009-03-12 | 1 | -1/+0 | |
| | ||||||
* | Make sure the field names and description match up | Seth Mos | 2009-03-12 | 1 | -10/+10 | |
| | ||||||
* | Add initial support for granular IPsec SPD changes. | Seth Mos | 2009-01-16 | 1 | -0/+6 | |
| | ||||||
* | Make table headers reflect reality | Bill Marquette | 2008-12-07 | 1 | -6/+6 | |
| | ||||||
* | Show header even when no records exists so the lonely + sign doe snot look | Scott Ullrich | 2008-10-26 | 1 | -18/+30 | |
| | | | | | strange. This makes this page more consistent with all other pages when no configuration records exist. | |||||
* | Use listbg | Scott Ullrich | 2008-10-12 | 1 | -4/+2 | |
| | ||||||
* | Fix a few minor problems with the IPsec configuration interface. Make sure | Matthew Grooms | 2008-09-16 | 1 | -11/+3 | |
| | | | | | | we don't copy the ikeid when duplicating a phase1 entry. Simplify the code that deletes all associated phase2 entries when a phase1 is deleted. I was and still am learning the finer points of php. | |||||
* | Correct all double click action urls in the main IPsec config screens. | Matthew Grooms | 2008-09-03 | 1 | -12/+12 | |
| | | | | Reported by Seth. | |||||
* | Leave $j alone | Scott Ullrich | 2008-08-29 | 1 | -3/+1 | |
| | ||||||
* | Show correct count of phase2 entries. | Scott Ullrich | 2008-08-29 | 1 | -1/+8 | |
| | ||||||
* | Show how many phase 2 entries are hidden. | Scott Ullrich | 2008-08-29 | 1 | -1/+6 | |
| | | | | Suggested-by: mgrooms | |||||
* | Use additional tables to improve the formatting of several IPsec checkbox | Matthew Grooms | 2008-08-24 | 1 | -2/+10 | |
| | | | | configuration options. | |||||
* | Minor nitpick, change - to + | Scott Ullrich | 2008-08-23 | 1 | -1/+1 | |
| | ||||||
* | Allow wrapping of phase entries. | Scott Ullrich | 2008-08-23 | 1 | -2/+2 | |
| | ||||||
* | Rename button to -, we already show "- Show Phase 2" behind it. | Scott Ullrich | 2008-08-23 | 1 | -1/+1 | |
| | ||||||
* | Style boxen better. | Scott Ullrich | 2008-08-23 | 1 | -1/+1 | |
| | ||||||
* | Add a Phase2 button and hide the phase 2 settings by default. Clicking the | Scott Ullrich | 2008-08-23 | 1 | -3/+16 | |
| | | | | | button will unhide the phase2 block similar to our "Advacned" buttons on various screens. | |||||
* | Begin reformatting IPSEC screen. Give a bit more padding, shift | Scott Ullrich | 2008-08-23 | 1 | -14/+15 | |
| | | | | over a little and turn bacgkround to grey instead of red. | |||||
* | Disallow the copy option for mobile phase1 entries. There can be only one. | Matthew Grooms | 2008-08-23 | 1 | -0/+2 | |
| | ||||||
* | Rewrite the pfsense privilege system with the following goals in mind ... | Matthew Grooms | 2008-08-01 | 1 | -0/+8 | |
| | | | | | | | | 1) Redefine page privileges to not use static urls 2) Accurate generation of privilege definitions from source 3) Merging the user and group privileges into a single set 4) Allow any privilege to be added to users or groups w/ inheritance 5) Cleaning up the related WebUI pages | |||||
* | Introduce a new and improved version of IPsec mobile client support. The | Matthew Grooms | 2008-07-13 | 1 | -6/+13 | |
| | | | | | | | mobile client tab is now used to configure user authentication (Xauth) and client configuration (mode-cfg) options. User authentication is currently limited to system password file entries. This will be extended to support external RADIUS and LDAP account DBs in a follow up comiit. | |||||
* | Overhaul IPsec related code. Shared functions have been consolidated into | Matthew Grooms | 2008-07-11 | 1 | -133/+302 | |
| | | | | | | | | | | | | | | a new file named /etc/ipsec.inc. Tunnel definitions have been split into phase1 and phase2. This allows any number of phase2 definitions to be created for a single phase1 definition. Several facets of configuration have also been improved. The key size for variable length algorithms can now be selected and the phase1 ID options have been extended to allow for more flexible configuration. Several NAT-T related issues have also been resolved. Please note, IPsec remote access functionality has been temporarily disabled. An improved implementation will be included in a follow up commit. | |||||
* | Continue interface improvements | Ermal Luçi | 2008-06-21 | 1 | -3/+1 | |
| | ||||||
* | Remove static route on deletion | Seth Mos | 2008-06-05 | 1 | -0/+4 | |
| | ||||||
* | touch up text | Chris Buechler | 2008-01-08 | 1 | -1/+1 | |
| | | | | Ticket #1569 |