Project

General

Profile

Activity

From 05/07/2009 to 06/05/2009

06/05/2009

11:40 PM Revision 405f7cf5: Prevent javascript errors when possible
Submitted-by: Renato Scott Ullrich
11:40 PM Revision 341d0347: Prevent some javascript errors.
Submitted-by: Renato Scott Ullrich
09:35 PM Revision 347c58b3: Supress foreach warning on empty array()
Seth Mos
05:59 PM Revision 79d45708: Remove unused php file
Renato Botelho
12:28 PM Revision 50e1f1c6: Fix typo: s/tempalte/template/
Renato Botelho
07:04 AM Revision 03b0e855: clarify log message
Chris Buechler
06:32 AM Revision 3142c883: Remove RRD options from the apinger configuration.
They do not make any sense to generate since they are not used anywhere in 1.2 Seth Mos
05:39 AM Revision 250e8c39: correct spelling
Chris Buechler
05:27 AM Revision ca010769: Fix local/remote specification.
touch up text Chris Buechler

06/04/2009

11:42 AM Revision 39fbee97: Fix lagg interfaces creation. Reported-by: http://forum.pfsense.org/index.php/topic,16734.0.html
Ermal Luçi
01:38 AM Bug #12 (Resolved): Editing DNS forwarder overrides does not trigger sync to secondary
Editing any overrides (and possibly other settings) in the DNS forwarder should trigger a sync to the secondary if th... Chris Buechler

06/03/2009

05:58 AM Revision 372d28b0: Eventhough you can set the racoon admin socket to a different path in the configuration it will be ignored by ipsec-tools 0.8+
Align all the sockets into the new path /var/db/racoon so that we can find it.
Remove the old killall -HUP racoon as ...
Seth Mos

06/02/2009

11:05 PM Feature #11 (Resolved): Allow multiple syslog servers
Currently only a single syslog server can be specified, it would be nice to allow multiple servers. Chris Buechler
10:37 PM Revision f0c3eea0: Use is_dir, not is_file for detecting directory existance.
Scott Ullrich
10:36 PM Revision 3283437d: Oops, make that /bin/mkdir
Scott Ullrich
06:21 PM Revision 0e0e232b: Avoid errors when a non-existent element is called by a function
Submitted-by: Manoel Carvalho Renato Botelho
06:41 AM Revision 1c163b91: Bump the version number to 1.2.3-RC2.
This to know when people complain about the load balancer we know if
it's the new or the old one.
Seth Mos
01:17 AM Revision 2312b0eb: How about some handy links to external IP info sources, with a suitable warning.
Jim Pingle
12:54 AM Revision 737ed7d1: It might help if git was actually tracking the file for this...
Jim Pingle
12:10 AM Revision 145eba30: Add a handy DNS resolution page.
Jim Pingle

06/01/2009

09:57 PM Revision e1d23411: Oops, plip was already there, at the bottom.
Scott Ullrich
09:55 PM Revision adf44688: Exclude plip from get_interface_list
Scott Ullrich
09:54 PM Revision a42d1da2: Add plip exclusion
Scott Ullrich

05/31/2009

10:02 PM Revision 907d8503: it's IPsec, not IPSEC
Chris Buechler
09:23 PM Revision a164029f: Make sure that the apinger messages end up in the load balancer tab
Seth Mos
09:14 PM Revision cb45014a: Select lan interface correctly when editing
Scott Ullrich
08:36 PM Revision 24afa018: Merge branch 'RELENG_1_2' of http://gitweb.pfsense.org/pfsense/mainline into RELENG_1_2
Chris Buechler
08:36 PM Revision 47c13f03: fix static route deletion
Chris Buechler
08:31 PM Revision 52cca3a4: fix route deletion
Chris Buechler
07:55 PM Revision b04eb23b: clarify log message
Chris Buechler
06:51 PM Revision a0793ae4: Add NAT-T ports.
Submitted-by: JimP@ Scott Ullrich
01:44 PM Revision a6d821bc: Update functions to add other anchors for before {nat,rdr} rules and {nat,rdr}early rules. Further more no need to call filter_configure since the anchors can be loaded separately from the main ruleset.
Ermal Luçi
06:32 AM Revision 6bfccde7: Set hostname then call hostid onestart
Scott Ullrich
06:31 AM Revision 30934c59: Set hostname then call hostid
Scott Ullrich

05/30/2009

10:17 PM Revision 4aecfb7a: Set hostid earlier in boot
Scott Ullrich
10:09 PM Revision 76f59429: Setup the host GUID which is required for ZFS
Scott Ullrich
10:08 PM Revision 34bb5b72: Forgotten emergency shell commit.
Scott Ullrich
09:55 PM Revision a2d7d8d5: Run /etc/rc.d/hostid start on startup. This is required by ZFS.
Scott Ullrich
08:51 PM Revision 08d591b5: Ensure /var/db/racoon exists
Scott Ullrich
08:51 PM Revision 202e5379: Ensure /var/db/racoon exists
Scott Ullrich
06:23 PM Revision d02a500d: Fix captive portal multinterface rule gfeneration.
Ermal Luçi
06:27 AM Revision 0e11e138: Unbreak english
Scott Ullrich
04:40 AM Revision ea8a58ea: Unbreak pkg-utils.inc. Extra space made it rather unhappy. Reported on IRC and in the forums.
Jim Pingle
12:02 AM Revision d5b116bb: Add ! support when invoked from the CDROM boot prompt now for recovery console, installer.
Scott Ullrich

05/29/2009

10:41 PM Revision dc3dedbb: Correct swapped values
Seth Mos
10:36 PM Revision 20afbdfe: Oh dear, looks like I had the values for loss and latency reversed.
That is not very useful. Seth Mos
10:36 PM Revision 0f2bd8e7: Make the apinger rrd files end up in /tmp so they are not seen by the
web ui. Seth Mos
09:49 PM Revision a9b2e638: Present a new package option filter_rules_needed which has a function name to be called if the package needs to create firewall rules. The function should have a switch statement one with 'nat' option wich is called for nat/rdr and one with 'rule' option which is needed for rules. This will help on removing from filter.inc all the packages hardcoded includes and rules and give some more dynamicity. The rules by this function will be included on rules.nat.packages and rules.packages on /tmp partition and called by anchors include file when filter reloads(still this has to come).
Ermal Luçi
09:49 PM Revision 2dcf4150: Move all address handling of rules to the filter_generate_address. Remove checking for addresses on the beggining of generate_user_filter_rule since we have better way of checking this now.
Ermal Luçi
06:31 PM Revision f91bc86f: Fix still the address extraction.
Ermal Luçi
04:38 AM Revision c432da9c: Full path to chmod
Scott Ullrich

05/28/2009

11:04 PM Revision 991eb938: Adding --all-servers flag for DNSMasq which can help when a DNS server is unreachable and in some cases speedup queries since it will ask each known dns server all at once and use the first response that it finds.
Scott Ullrich
10:39 PM Revision 0cc5b3f4: Ooops, clear-on-reload is preenting dnsmasq from starting.
Scott Ullrich
10:34 PM Revision aa5d3ff6: Adding --clear-on-reload:
--clear-on-reload
Whenever /etc/resolv.conf is re-read, clear the DNS cache. This
is use...
Scott Ullrich
10:27 PM Revision 739b97d9: Use --all-servers:
--all-servers
By default, when dnsmasq has more than one upstream server
available,...
Scott Ullrich
01:01 PM Revision 33bf1874: Fix the issue reported on http://forum.pfsense.org/index.php/topic,16559.0.html. Basically a missing convertion from 'source'/'destination' to target.
Ermal Luçi
07:50 AM Revision 6f255c8b: Change the warning threshold for the apinger delay warning from 100 to 200 ms.
Seth Mos
07:45 AM Revision e1c6b3d6: Backport apinger from 2.0 to 1.2
This removes the gateway support from the slbd load balancer. It will now create a apinger configuration instead.
Cha...
Seth Mos
07:22 AM Revision 1bc43e42: Hide errors.
Scott Ullrich
07:20 AM Revision 324d622f: Hide error.
Scott Ullrich
07:03 AM Revision 0aca91d0: Ensure 127.0.0.2 points out 127.0.0.1.
Scott Ullrich

05/27/2009

10:01 PM Revision 857ce5f3: Fix the function that checks if a link is to be included or excluded.
Multiple alarms can be returned which requires different parsing.
Scott will test this
Seth Mos
05:13 PM Revision 5cd26039: Start sshd after the interfaces and routing have been configured.
Ermal Luçi

05/26/2009

11:33 PM Revision efea21c4: Description field is not required
Chris Buechler
06:14 AM Revision 29dc1e6e: Added a missing argument in the lighty configuration for captive portal.
Nigel Graham
04:45 AM Revision 023f4180: Found another bug in ca_chain_array.
Nigel Graham
04:23 AM Revision 801247db: Fixed a problem in ca_chain that caused a segmentation fault.
Nigel Graham
03:22 AM Revision faa7e333: Merge branch 'master' of http://gitweb.pfsense.org/pfsense/mainline
Nigel Graham

05/25/2009

11:47 AM Revision 93ed7659: Handle the case when no user has logged in. Reported by: http://forum.pfsense.org/index.php/topic,16382.0.html
Ermal Luçi

05/24/2009

06:36 AM Revision 2cf6ddcb: Added support for certificate chains to manager so that lighty can deliver them via SSL.
Nigel Graham
04:27 AM Revision c224dd9d: MFC Recovery console on CDROM platform
Scott Ullrich

05/23/2009

08:30 PM Revision 41f4fada: Hide errors on sem_get() too
Scott Ullrich
08:26 PM Revision c77050d5: Surpress semaphore errors
Scott Ullrich

05/22/2009

06:40 PM Revision 4b4271d3: Do not include shmop twice
Scott Ullrich
05:08 PM Revision 35e4f68e: Merge backup_vip_function to the synchronize code where its only used.
Ermal Luçi
05:07 PM Revision d3b6dd4c: Revert "Include pfsense-utils for backup vip function."
This reverts commit 2ff71279575e0afbac28b9a79a43e81721a4fced. Ermal Luçi
05:06 PM Revision 2ff71279: Include pfsense-utils for backup vip function.
Ermal Luçi
05:02 PM Revision 4fa2be6d: Check for blank lines and ignore them.
Ermal Luçi
05:01 PM Revision f3ebffee: Do not spam the logs. Reported by http://forum.pfsense.org/index.php/topic,16382.0.html.
Ermal Luçi
04:51 PM Revision 6e8f7b53: Move Sync of config from filter.inc filter_reload to write_config and all the code in a new file rc.filter_synchronize. The later is called by check_reload_status with the tmp/filter_sync action triggered with carp_sync_client() function. This solves the excessive syncing of configs on not needed cases and speedups the filter_configure_sync!
Ermal Luçi
04:29 PM Revision caec9484: A better fix to empty lines.
Ermal Luçi
03:49 PM Revision 32822c6e: Propperly check for empty slots. Fix by forum user: itsmorefun!
Ermal Luçi
03:31 PM Revision 3cfb799d: Fix ipfw rule syntax.
Ermal Luçi
03:26 PM Revision fca39472: Fix the rule to actually match on multiple interfaces.
Ermal Luçi
09:55 AM Revision 97edea16: Fix bridge checking missed in previous convert to multi interface capble CP. This is arguably needed since with new bridge the interface might be in full routing mode and be bridged just for SNAP port. Anyway people can run CP on top of the bridge interface itself anyway.
Ermal Luçi
05:33 AM Revision 655e9c79: Correct extension name
Scott Ullrich
05:32 AM Revision 85df6906: Adding sysvsem.so
Scott Ullrich
01:44 AM Revision 032d2dc1: use real if name for get MTU function
Chris Buechler

05/21/2009

11:02 PM Revision b27f1caf: Make the CP interface check code more buller proof.
Ermal Luçi
10:11 PM Revision 5d146d0b: We only need sysvsem for CP locking
Scott Ullrich
09:44 PM Revision f8b11310: Make CP multi-interface capable.
Ermal Luçi
08:41 PM Revision 868a5b99: Adding Ciphers Ciphers aes128-ctr,aes256-ctr,arcfour256,arcfour,aes128-cbc,aes256-cbc for the tin foil hat wearing folks.
Scott Ullrich
08:39 PM Revision 66378510: Adding Ciphers Ciphers aes128-ctr,aes256-ctr,arcfour256,arcfour,aes128-cbc,aes256-cbc for the
tin foil hat wearing folks. Scott Ullrich
04:22 PM Revision 5aa16772: Add needed modules for CP locking
Scott Ullrich
04:16 PM Revision 04442020: Adding php libraries for CP locking
Scott Ullrich

05/20/2009

12:24 AM Revision 8751763c: merge Ermal's CP locking changes
Chris Buechler

05/19/2009

01:39 AM Revision 1e4e8458: Increase timeout to 9. Add chr(8) backspace mojo
Scott Ullrich

05/18/2009

11:19 PM Revision 01cdef6c: Missing "
Scott Ullrich
11:19 PM Revision 49a0eba8: Doh, it's sh, not php
Scott Ullrich
11:18 PM Revision 2bc1456b: Do not keep respawning to shell on exit. Alert box is rebooting in 5, sleep for 5 to allow CTRL-C
Scott Ullrich
11:06 PM Revision 519d2f03: Mount RW for key generation
Scott Ullrich
11:06 PM Revision 03ef91ef: Mount RW for key generation
Scott Ullrich
10:58 PM Revision 3ec9c84a: Use custom prompt for Recovery Shell
Scott Ullrich
10:56 PM Revision b1d04497: Nuke \n's
Scott Ullrich
08:02 PM Bug #10 (Resolved): Enable SSH console menu doesn't work on embedded
Chris Buechler
06:55 PM Bug #10 (Resolved): Enable SSH console menu doesn't work on embedded
Needs to mount rw Chris Buechler
05:17 AM Revision 6785fbfe: Merge branch 'RELENG_1_2' of git@rcs.pfsense.org:pfsense/mainline into RELENG_1_2
Chris Buechler
05:16 AM Revision eccd3813: Kill rrdtool before killing updaterrd, possibly prevent multiple updaterrd from running.
Chris Buechler
01:39 AM Revision a9e92f60: Spawn tcsh instead of sending getty into a DOS loop
Scott Ullrich

05/17/2009

06:05 PM Revision 006e1787: Actually it needs an ip!
Ermal Luçi
03:56 AM Revision 09af04fb: Rely on our own error handling
Scott Ullrich
03:12 AM Revision e4fcf99b: Add missing space
Scott Ullrich
03:11 AM Revision 01ef30e9: Carriage return if no option selected on recovery console
Scott Ullrich
01:59 AM Revision f98d3d65: Use passthru()
Ace-in-the-hole-from: JimP Scott Ullrich
01:42 AM Revision 68235416: Actually detect all key presses, cleanup code a bit.
Scott Ullrich

05/16/2009

07:48 PM Revision a685cb87: Do not launch with tcsh -c, it appears to work at first glance without it.
Scott Ullrich
07:45 PM Revision e5a06994: Do not CR and increase stty timeout instead of adding sleep(1)
Scott Ullrich
06:15 AM Revision 553fff8a: Use tcsh and env to set TERM
Scott Ullrich
06:06 AM Revision 41d07e42: Add a \n to get the users attention
Scott Ullrich
05:58 AM Revision a57983e0: Do not backspace for now and sleep (1) second in between while loop
Scott Ullrich
03:33 AM Revision c2eebe2b: Use cons25
Scott Ullrich
03:28 AM Revision 406346ac: Use ^H
Scott Ullrich
03:18 AM Revision 5b051819: Add missing ;
Scott Ullrich
02:50 AM Revision 778858c1: Add trailing \n
Scott Ullrich
01:30 AM Revision 8dcdd213: Do not \n
Scott Ullrich
01:18 AM Revision 15bb64e4: Exit out to shell immediately if recovery console shell option specified.
Scott Ullrich
01:15 AM Revision 4b68ec30: Down interfaces before rebooting. Hopefully giving enough time
for the master interface to send a pfsync() notification to its
peers. Open and Free both down the interface before ...
Scott Ullrich
01:12 AM Revision 2eeb1781: Full path to /bin/stty
Scott Ullrich
01:05 AM Revision 6c616b93: Make text prettier and increase timeout to 4 seconds
Scott Ullrich
12:58 AM Revision c1da5030: * Reboot after installation from recovery console
* Add ! drop to shell option and bypass bootup Scott Ullrich
12:52 AM Revision 540bd313: Cleanup my hick ky english
Scott Ullrich
12:50 AM Revision 9594cfa3: Add I for installer option
Scott Ullrich
12:48 AM Revision d5116ed5: Prompt for recover before parsing config
Scott Ullrich
12:46 AM Revision 745188c8: * Add Erik Kristensen to (C)
* Compact code Scott Ullrich
12:44 AM Revision 70045f5f: * Match our style
* Add (C)
* No functional changes
Scott Ullrich
12:17 AM Revision c6ae4c89: Prompt for recovery mode
Scott Ullrich

05/15/2009

11:50 PM Revision 44fb22a1: Woops, add missing text
Scott Ullrich
11:49 PM Revision 6cc9e241: If we are on cdrom platform show a rescue config timeout option.
Scott Ullrich
05:21 PM Revision 20dbae60: Use FreeBSD specific files
Scott Ullrich
05:20 PM Revision 1e96ae20: Revert "Use FreeBSD specific files"
This reverts commit 802760bda899a181f0f0298ea209865e3b360148. Scott Ullrich
05:18 PM Revision 802760bd: Use FreeBSD specific files
Scott Ullrich
01:27 AM Bug #9 (Resolved): route-to forwards broadcast and multicast frames in some scenarios
It seems in some scenarios route-to rules will forward broadcast frames repeatedly and turn it into a broadcast storm... Chris Buechler
12:49 AM Revision 82cab169: Move firmware update text format to globals.inc
Scott Ullrich
12:46 AM Revision 6d34785f: Move firmware update text format to globals.inc
Scott Ullrich

05/14/2009

08:42 PM Revision ce24005a: Fix typo and check.
Ermal Luçi
11:13 AM Revision a48acf9a: Use file() function which suits the need better.
Ermal Luçi
02:26 AM Revision b4989d63: Remove dubious/forgotten unlocking that is uneccesary.
Ermal Luçi
01:59 AM Revision 4b38cdb7: default to vr0/vr1 rather than sis, since the defaults should be for ALIX, not WRAP.
Chris Buechler
01:57 AM Revision d0f6edc8: default to vr0/vr1 rather than sis, since the defaults should be for ALIX, not WRAP.
Chris Buechler

05/13/2009

06:20 PM Revision dfd7a44c: Fix the issue that the filter reload status stops at 'Syncing CARP data to {$url}'.
Which prevents syncing of configuration to hold.
Actually the issue is just of checking if the config section exitst...
Ermal Luçi
06:09 PM Revision 2f70eac7: * Use file_get_contents its better and process the contents of the file after reading the file.
* Release the lock before authenticating against radius to allow another request to come in.
This allows more...
Ermal Luçi
06:01 PM Revision d853e5db: Speedup noticably CP status page. Previously during load it would not show anything and this commit fixes it.
Ermal Luçi
05:54 PM Revision acea2b12: Fix lock leaking on portal_allow function.
Ermal Luçi

05/12/2009

08:29 PM Revision 71569a7e: Fix PPTP+RADIUS. See ticket #1926.
Jim Pingle
08:08 PM Revision 673e587d: Fix CARP IP Creation. Subnet check was failing even for valid input. See ticket #1925
Jim Pingle
06:35 PM Revision 43ea937c: Fix fallout of tables from the refactoring of address generation. This is a better fix from the quick one jim-p pushed already.
Ermal Luçi
04:59 PM Revision 6660d316: Add the state killing for now on VPN's pppoe/pptp/l2tp when the link goes down. For the others some more thought is needed.
Ermal Luçi
03:57 PM Revision 1f381f93: Fix alias table generation. (There is probably a better way to do this... Ideas?)
Jim Pingle
12:54 PM Revision 90189332: Merge after_filter_configure_run commands with the system:afterfilterchangeshellcmd to be written on the same file. This is just a micro optimization.
Ermal Luçi
12:06 PM Revision 79226358: Use the php copy function instead of forking just for copying a file.
Ermal Luçi

05/11/2009

06:43 PM Revision c1ba39b2: Some more locking fixes.
Ermal Luçi
04:54 PM Revision 82f4ffb5: add missing \n's caught by jim-p
Chris Buechler
11:53 AM Revision 96ccfe37: Match the logic with other functions.
Ermal Luçi

05/10/2009

05:49 AM Feature #8 (Resolved): Clear states after failover
In a Multi wan Setup some VOIP phones needs a little help after a fail over.
Solution previously outlined in http://...
Perry Mason
05:19 AM pfSense Packages Todo #7 (Closed): [ Fit123 ] Captive Portal
Add changes outlined in http://forum.pfsense.org/index.php/topic,13844.0.html Perry Mason

05/09/2009

08:40 PM Revision 42cf9c5c: point to correct path for nsupdate
Chris Buechler
01:26 PM Bug #6 (Resolved): Status -> Wireless display bugs
SSIDs with spaces in the name are broken.
http://cvstrac.pfsense.org/tktview?tn=1531,33
Wireless networks with u...
Chris Buechler
04:22 AM Revision 70ffd57b: Fix logic.
Ermal Luçi
04:17 AM Revision 90455aeb: Correct logic.
Ermal Luçi
04:16 AM Revision f80a6148: The other half of CP locks conversion to new locking functions.
Ermal Luçi

05/08/2009

09:22 PM Revision cc4a5388: colons are valid in usernames, such as for no-ip subaccounts.
Chris Buechler
08:00 PM Revision 761858b1: More var name fixes.
Ermal Luçi
07:58 PM Revision feed9f8a: Make it work.
Ermal Luçi
07:48 PM Revision 1512337f: Remove reset_slbd.sh from cron.
Ermal Luçi
07:46 PM Revision 10f0a7f0: Reduce includes.
Ermal Luçi
07:38 PM Revision dedf51a2: Convert CP to use the new lock/unlock functions.
Ermal Luçi
07:20 PM Revision 9befcca7: Fix a lock leaking on CP.
Ermal Luçi
06:42 PM Revision 0027de0a: * Create two new functions lock($subsystem)/unlock() to have more reliable locking using semaphores.
This function can sleep till the resource is free and can help find not well behaving code.
* Remove most of the conf...
Ermal Luçi
05:40 PM Revision 89e6e210: Fix OpenVPN automatic shared key generation.
Jim Pingle
05:11 PM Revision 98c0c87a: Fix detection of TLS/Shared Key mode for OpenVPN
The wrong variable was being checked, so the result was always false. Jim Pingle
10:09 AM Revision bd448e7f: From yesterday moving of ipfw loading to only captive portal a regression was noticed on ipfw states sizeing.
Fix this regression by changing this states when they are changed on the system advanced settings page.
Reported by:...
Ermal Luçi
12:08 AM Todo #5 (Resolved): Don't sync on every filter reload
Right now an xmlrpc sync is kicked off on every reload. Not a problem, but unnecessary, should not do so in 2.0. Chris Buechler

05/07/2009

09:07 PM Revision 3e2bd5de: Propperly fix openvpn parameter parsing.
Ermal Luçi
08:37 PM Revision cee476e8: Correctly enforce limits on html input.
Ermal Luçi
08:28 PM Revision db2872a2: Fix server hostname resolve option to correctly be set.
Ermal Luçi
08:23 PM Revision 2f1e3ebe: Fix correction of openvpn parameters.
Ermal Luçi
08:02 PM Revision f3bcb3e3: Spit verbose messages on schedules only if in debug mode.
Ermal Luçi
07:02 PM Revision 2b5b6eb4: Remove from filter load the captive portal module loading and move it to the captive portal functions where is its only place. Keep only the pass rule for the CP webserver will see later on if it can be removed at all.
Ermal Luçi
06:36 PM Revision e4f020ee: Comment out supposed diff code that is not being used.
Ermal Luçi
06:21 PM Revision 3fd1b895: Catch up with the latest additions.
Ermal Luçi
05:37 PM Todo #4 (Resolved): Remove hard coded VLAN supported interfaces list
ifconfig -m shows capable interfaces, remove array in globals.inc and replace with detection, so we don't have to con... Chris Buechler
05:30 PM Revision 9b590c5e: add msk(4)m
Chris Buechler
05:24 PM Revision ee2db55f: Move validation of dyndns username to the only place it uses it, the GUI page. There it makes sense. While there add ':' character to allow NO-ip subaccounts.
Ermal Luçi
 

Also available in: Atom