summaryrefslogtreecommitdiffstats
path: root/usr
Commit message (Collapse)AuthorAgeFilesLines
* Properly handle large passthrough entries even here.Ermal LUÇI2015-01-121-8/+13
|
* Put the value of password under double quotes(") to avoid issues with ↵Ermal LUÇI2015-01-121-1/+1
| | | | special characters in passwords. Ticket #4177
* Prevent echo to insert a newline(\n) at the secret string. Fixes #4177Ermal LUÇI2015-01-121-1/+1
|
* Fix typos and set needed variableErmal LUÇI2015-01-121-3/+4
|
* properly apply the passthrough entries when apply is hitr.Ermal LUÇI2015-01-121-0/+3
|
* Fix inherent issues with isset and empty values set as true by our parser. ↵Ermal LUÇI2015-01-121-2/+8
| | | | This made the piep configuration to be wrong at least for passthrough entries. Ticket #3932
* Bring back showing of default value like previous versions.Chris Buechler2015-01-111-0/+4
|
* Remove debug codeErmal LUÇI2015-01-111-2/+0
|
* Fixes #4177 convert password to base64 to be submitted to avoid issues with ↵Ermal LUÇI2015-01-111-1/+3
| | | | special chars in shell and HTTP GET parameter passing. Probably should add POST support to fcgicli.
* Fix POST typo in interfaces_assign.phpPhil Davis2015-01-111-1/+1
| | | | | | | Obviously a typo. But this section is inside: if (isset($_POST['add_x']) && isset($_POST['if_add'])) { and I cannot find where 'add_x' is ever sent here, so I do not see how this whole code section is ever executed (and that will be why this typo bug has no symptoms). What is the history here? Can the whole block of code be removed? The code normally executed is the section for 'Submit' lower down.
* Properly rename the var Ticket #4164Ermal LUÇI2015-01-101-3/+3
|
* Default to only AES and SHA1 for new P2s.Chris Buechler2015-01-091-2/+2
|
* Default IPsec to AESChris Buechler2015-01-091-1/+1
|
* Default IPsec to main mode, unless mobile client.Chris Buechler2015-01-091-2/+4
|
* Do not count twice the phase2 entriesErmal LUÇI2015-01-091-6/+10
|
* Just some reshufling and cleanupErmal LUÇI2015-01-091-5/+4
|
* This broke a variety of things. Revert "Deprecated and non-static method ↵Chris Buechler2015-01-095-99/+99
| | | | | | messages" This reverts commit 91b9a02fb131746c67fdf9f34282f123a13f1b13.
* Make this code less memory hungry and fix route command generationErmal LUÇI2015-01-081-19/+17
|
* Deprecated and non-static method messagesPhil Davis2015-01-085-99/+99
| | | | | | | | | | | | | | | | Fix various files that can emit messages like: PHP Strict Standards: Non-static method SimplePie_Misc::array_unique() should not be called statically, assuming $this from incompatible context in /etc/inc/simplepie/simplepie.inc on line 5508 php-fpm[16262]: /rc.newipsecdns: PHP ERROR: Type: 8192, File: /etc/inc/shaper.inc, Line: 4365, Message: Assigning the return value of new by reference is deprecated Some of these style messages have been reported on the forum, e.g. https://forum.pfsense.org/index.php?topic=86448.0 I had RSS widget on, and simplepie sent the system beserk telling about all this stuff.
* Improve URL and URL ports alias update data:Renato Botelho2015-01-081-30/+2
| | | | | | | | | | | | - Move redundant code to a function parse_aliases_file(). Before the max number of items was not being respected when URL content is updated, only when alias was saved. Same was happening with ip/subnet/port validation and user could end up with a bad pf.conf - Remove unused variables These changes were based on Pull Request #1264. It should fix #4189 Submitted by:▸ PiBa-NL
* Also include /127 for IPv6, it works fine. Ticket #3657Chris Buechler2015-01-071-5/+3
|
* Allow for configuring /31 masks on interfaces.php. The rest of the code was ↵Chris Buechler2015-01-071-10/+6
| | | | updated accordingly some time ago, and an employee with Cox Communications has confirmed this allows things to work on their circuits deployed with /31s. Ticket #4190
* fix up textChris Buechler2015-01-076-8/+8
|
* Provide an advanced setting to be able to disable Unity Plugin(Cisco extensions)Ermal LUÇI2015-01-071-0/+15
|
* split is deprecated move to explodeErmal LUÇI2015-01-071-2/+2
|
* split is deprecated move to explodeErmal LUÇI2015-01-071-2/+2
|
* split is deprecated move to explodeErmal LUÇI2015-01-071-1/+1
|
* fix textChris Buechler2015-01-071-1/+1
|
* fix spelling of compressionChris Buechler2015-01-071-6/+6
|
* Fixes #4182 by properly managing IPcomp on ipsec tunnels.Ermal LUÇI2015-01-071-12/+9
| | | | Also retires IPsec force reloading advanced sysctl since its useless nowdays with strongswan and remove its call on rc.newipsecdns.
* OpenVPN backend authentication fix key and translationPhil Davis2015-01-061-3/+3
| | | | | | | | | The array returned by auth_get_authserver_list() has key as the fixed name of each available authentication mode - e.g. "Local Database". The array value ["name"] has the name string translated into the selected GUI language. Use the key do determine which items are selected, and as the value that ends up being stored in the config. Use ["name"] for display. Forum report: https://forum.pfsense.org/index.php?topic=86326.0 Redmine Bug #4180
* Fix #4090:Renato Botelho2015-01-051-2/+2
| | | | | | | | | - Unbound advanced options may contain double quotes and it breaks the syntax when a backup is restored because newlines are trimmed. Save it in base64 format is a safe way to prevent it - Bump config version to 11.5 - Provide upgrade code to encode current config or the one that came from unbound package on 2.1.5
* Make it possible to backup/restore 'DNS Resolver' section individuallyRenato Botelho2015-01-051-0/+1
|
* Fix track6 prefix id range check, reported by jimpRenato Botelho2015-01-021-1/+1
|
* Allow blank source port in diag_testportPhil Davis2015-01-021-15/+10
| | | | | Reported by forum https://forum.pfsense.org/index.php?topic=86146.0 Also, if there are input validation errors, save the user-entered data and re-display it, making it easier for the user to just correct the data in error and press Test again. It was blanking out all the entered data.
* Fix lineup of copyright linesPhil Davis2015-01-01262-1015/+1077
| | | | | and module names and other bits of formatting and typos in header comment sections.
* Remove duplicate copyrightPhil Davis2015-01-013-4/+1
| | | | Noticed these had the copyright twice
* Welcome 2015Renato Botelho2014-12-31291-297/+297
|
* IPsec Widget allow for old settings that have no iketypePhil Davis2014-12-301-1/+1
| | | | | | as mentioned in https://forum.pfsense.org/index.php?topic=84527.msg471919#msg471919 This change makes it work like similar if tests in /usr/local/wwwvpn_ipsec.php, and code in /etc/inc/vpn.inc that effectively defaults to ikev1 when iketype is not specified. This should make the code here be executed and make $ikeid get the correct value to be used in later code.
* Allow for old settings that have no iketypePhil Davis2014-12-301-1/+1
| | | | | | This bit of code looks like it could do with the same test as https://github.com/pfsense/pfsense/pull/1412 This is executed when the "Connect" button is pressed from Status->IPsec Somebody with these problematic old IPsec entries could test this - with current code I suspect that disconnect followed by connect - it will not connect. With this change it will (might?) connect again.
* Captive portal spellingPhil Davis2014-12-301-2/+2
|
* Backout pull request #1391Colin Fleming2014-12-296-95/+0
| | | | | | https://forum.pfsense.org/index.php?topic=85944.0 Backout pull request #13191
* Fix unbound shortcut linksPhil Davis2014-12-289-15/+21
| | | | | | | | | | | | Fixes redmine #4151 1) Make the naming in shortcuts.inc more clear - forwarder=dnsmasq resolver=unbound 2) Make the value of $shortcuts_section correct in each dnsmasq and unbound php code 3) Make diag_logs_resolver.php smarter, so if dnsmasq is enabled, then show shortcuts for dnsmasq, otherwise show shortcuts for unbound. 4) Fix some references to forwarder in unbound code - should be resolver.
* clarify message here after customer feedback, it wasn't meant to imply "only ↵Chris Buechler2014-12-262-2/+2
| | | | a reboot will re-enable" but that's how some people have read it.
* Move this check before full sync to disable dnsmasq/unbound in the first ↵Renato Botelho2014-12-261-12/+12
| | | | time it's sync'd
* Add dnsmasq and unbound config sections to full sync, it fixes #4076 that is ↵Renato Botelho2014-12-261-1/+1
| | | | caused because boolean config fields are not disabled on secondary
* Display tunnel description on IPsec widgetPhil Davis2014-12-261-45/+49
| | | | | | | | | There was not even code to attempt to display the description. Also, when I first created a phase1 and there were no phase2 yet, the widget spat out the warning for the line: foreach ($config['ipsec']['phase2'] as $ph2ent){ ... So I enclosed that in a block: if (isset($config['ipsec']['phase2'])) { ... } Tabbing that block in makes the diff look big when there really is little change - a diff ignoring spacing will look much nicer!
* Correct even other areas of CP using pfSense_ipfw_getTablestats function.Ermal LUÇI2014-12-243-3/+3
|
* Fix displaying description for IKEv1 connected tunnelsErmal LUÇI2014-12-241-3/+4
|
* Oops remove variable with same name unused!Ermal LUÇI2014-12-241-1/+1
|
OpenPOWER on IntegriCloud