pfsense - Raptor Engineering's fork of the main repository for pfSense

	Commit message (Collapse)	Author	Age	Files	Lines
*	Ticket #2455: do not check encryption algo for AH protocol	Pierre POMES	2012-05-26	1	-12/+17
\|
*	restore default dropdown values of 24/64 bits	Darren Embry	2012-04-05	1	-0/+38
\| \| \| \| \|	now that feature #2320 behavor is a bit different regarding change of existing set value when switching between ipv4 and ipv6
*	add feature #2320 to vpn_ipsec_phase2.php.	Darren Embry	2012-04-05	1	-32/+7
\| \| \| \| \| \| \|	note: had to disable existing behavior that modified the value of the behavior. existing behavior that disables/enables the dropdowns is still active.
*	Reject an interface without a subnet as a network source in the IPsec Phase ↵	jim-p	2012-02-14	1	-0/+10
\| \| \| \|	2 GUI. Fixes ticket #2201
*	Merge remote branch 'upstream/master'	jim-p	2011-06-03	1	-49/+38
\|\ \| \| \| \| \| \| \| \|	Conflicts: etc/inc/openvpn.inc
\| *	Bug #1560.IPsec GUI needs to reject duplicate subnets in phase 2s for a ↵	Evgeny Yurchenko	2011-06-02	1	-7/+21
\| \| \| \| \| \| \| \|	given phase 1 (fixing p2 edit)
\| *	Bug #1560.IPsec GUI needs to reject duplicate subnets in phase 2s for a ↵	Evgeny Yurchenko	2011-06-01	1	-49/+24
\| \| \| \| \| \| \| \|	given phase 1 (improvement of previous patch)
* \|	Merge remote branch 'upstream/master'	jim-p	2011-06-01	1	-2/+68
\|\ \ \| \|/ \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Conflicts: conf.default/config.xml etc/inc/filter.inc etc/inc/globals.inc etc/inc/pfsense-utils.inc etc/inc/upgrade_config.inc usr/local/www/interfaces.php
\| *	Bug #1560. IPsec GUI needs to reject duplicate subnets in phase 2s for a ↵	Evgeny Yurchenko	2011-05-31	1	-2/+41
\| \| \| \| \| \| \| \|	given phase 1(site-to-site).
\| *	Bug #1560. IPsec GUI needs to reject duplicate subnets in phase 2s for a ↵	Evgeny Yurchenko	2011-05-31	1	-1/+28
\| \| \| \| \| \| \| \|	given phase 1(mobile clients).
* \|	enlarge various address fields for IPv6 addresses	Seth Mos	2011-03-17	1	-3/+3
\| \|
* \|	Add the ability to differentiate between v4 and v6 tunnels. Bill says he can ↵	Seth Mos	2011-03-11	1	-9/+21
\|/ \| \| \|	test
*	Make sure to resolve the gateway name before passing it off to the IPsec ↵	smos	2011-02-24	1	-1/+2
\| \| \| \|	reload function
*	Add other interfaces to local network selection and show proper names. Fixes ↵	Erik Fonnesbeck	2010-11-22	1	-1/+6
\| \| \| \|	#965
*	Fix XSS issues	Scott Ullrich	2010-11-12	1	-10/+10
\|
*	Do not include 'remoteid' javascript functions for mobile ipsec. Ticket #797	pierrepomes	2010-10-17	1	-9/+7
\|
*	Corrections gettext() calls on vpn_ipsec_phase2.php	Rafael Lucas	2010-07-30	1	-1/+1
\|
*	Implement gettext() calls on vpn_ipsec_phase2.php	Carlos Eduardo Ramos	2010-07-27	1	-52/+52
\|
*	Remove Logs tab from OpenVPN, as it is no longer needed.	jim-p	2010-06-01	1	-1/+0
\|
*	Add status/log icons to IPsec pages.	jim-p	2010-06-01	1	-0/+3
\|
*	Add PSK tab to all IPsec pages, it was missing from some.	jim-p	2010-05-13	1	-1/+2
\|
*	Ticket #430. Give a none option to allow for roadwarriors configs.	Ermal Lu�i	2010-03-16	1	-0/+5
\|
*	When editing a P2: reset netmask to 24 only when it is not specified, in ↵	pierrepomes	2010-02-23	1	-2/+2
\| \| \| \|	case of a new P2. Ticket #352
*	Ticket #352. Allow 0 mask in remote network bits.	Ermal Lu�i	2010-02-12	1	-7/+8
\|
*	fix text	Chris Buechler	2010-02-11	1	-2/+2
\|
*	Rework includes/require. This saves about 4 megabytes.	Scott Ullrich	2009-11-21	1	-0/+2
\| \| \| \|	Simplify get_memory(). Tested on mips/i386
*	add links to IPsec logs under IPsec status and other pages	Chris Buechler	2009-11-07	1	-0/+1
\|
*	Include functions.inc which will then include ipsec.inc	Scott Ullrich	2009-08-23	1	-1/+1
\|
*	Fix interface list usage	Ermal Lu�i	2009-07-07	1	-3/+0
\| \| \| \|	WARN: Please ask before introducing old code on what have changed!
*	* Reorganize the 'apply' button infrustructure in the GUI.	Ermal Lu�i	2009-06-30	1	-1/+1
\| \| \| \| \| \|	- Present three new functions is/mark/clear_subsystem_dirty('name_of_subsystem'). This makes easier to create such things without needing to introduce new globals. - Convert all pages to the new infrustructure - This improves a lot the control on this notification
*	Modify IPsec code to allow for transport mode. All existing configurations are	mgrooms	2009-03-15	1	-26/+59
\| \| \| \| \|	marked as tunnel for backwards compatibility. There are problems with the spd read code which Will likely choke on transport entries. We can fix this later.
*	Move the IPsec pinghost option from phase1 to phase2. Correct some	mgrooms	2009-03-15	1	-2/+26
\| \| \| \|	bugs that were preventing the local address from being selected.
*	Reload phase2 tunnel items when adding, remoing or editing a phase 2 entry.	Seth Mos	2009-03-12	1	-0/+9
\|
*	Migrate IPsec certificate management to centralized system.	mgrooms	2009-03-12	1	-1/+0
\|
*	Cleanup ipsec interfaces a bit and make sure they are displayed in tabs for ↵	mgrooms	2009-03-12	1	-214/+256
\| \| \| \|	consistency.
*	Rewrite the pfsense privilege system with the following goals in mind ...	Matthew Grooms	2008-08-01	1	-0/+8
\| \| \| \| \| \| \| \|	1) Redefine page privileges to not use static urls 2) Accurate generation of privilege definitions from source 3) Merging the user and group privileges into a single set 4) Allow any privilege to be added to users or groups w/ inheritance 5) Cleaning up the related WebUI pages
*	Fix a few bugs in the IPsec pages HTML output that were causing problems	Matthew Grooms	2008-07-14	1	-1/+1
\| \| \| \|	with IE.
*	Introduce a new and improved version of IPsec mobile client support. The	Matthew Grooms	2008-07-13	1	-24/+83
\| \| \| \| \| \| \|	mobile client tab is now used to configure user authentication (Xauth) and client configuration (mode-cfg) options. User authentication is currently limited to system password file entries. This will be extended to support external RADIUS and LDAP account DBs in a follow up comiit.
*	Overhaul IPsec related code. Shared functions have been consolidated into	Matthew Grooms	2008-07-11	1	-0/+489
	a new file named /etc/ipsec.inc. Tunnel definitions have been split into phase1 and phase2. This allows any number of phase2 definitions to be created for a single phase1 definition. Several facets of configuration have also been improved. The key size for variable length algorithms can now be selected and the phase1 ID options have been extended to allow for more flexible configuration. Several NAT-T related issues have also been resolved. Please note, IPsec remote access functionality has been temporarily disabled. An improved implementation will be included in a follow up commit.