Activity
From 10/09/2010 to 11/07/2010
11/06/2010
- 10:20 PM Revision d32d3970: Add routed/ items to obsoleted files. Force removal of file so that directories can be included in the future
- 09:02 PM Revision 277d55d7: Ignore /var/etc directory to avoid these kinds of errors: tar: /var/etc/openvpn/client1.sock: tar format cannot archive socket
- 07:34 PM Revision 818c54ee: Do not use sub array
- 07:31 PM Revision 43a0ac8a: Make sure ipsec is incuded in valid interfaces
- 07:24 PM Revision e5fee340: Move Note to bottom of page
- 07:22 PM Revision 366e2be8: Show interface description
- 06:40 PM Revision 2c4a13d9: Interface names should appear as uppercase
- 06:38 PM Revision 9c3cac0c: Interface names should appear as uppercase
- 06:34 PM Revision 5aaae0e3: Do not escape strings twice
- 06:26 PM Revision 0f08affe: Misc fixes. Use htmlspecialchars() in more places. Use escaped shell argument.
- 06:11 PM Revision 66d57db5: Interface names should appear as uppercase
- 06:10 PM Revision 4cea35b3: Interface names should appear as uppercase
-
06:08 PM Revision c1f95f5c: Various CRL fixes.
- 06:03 PM Revision e8ad860f: Interface names should appear as uppercase
- 06:01 PM Revision 94556105: Define variable a bit earlier in case its shared
- 06:00 PM Revision d815d5fa: Use get_configured_interface_list() so Ermal does not yell at me :)
- 04:40 PM Revision 98bcf1f8: Fix misc input validation errors. Move routed/* to same dir as pkg items
- 04:31 PM Revision 6a937188: Ensure passed interface is valid
- 04:24 PM Revision 8625c24f: Use htmlspecialchars() for santitized output
- 04:15 PM Revision 50b2f6ab: Ensure that we are working with a proper passed interface..
11/05/2010
- 06:33 PM Revision c62d973d: Spelling fix.
-
02:12 PM Revision 03976254: If the anti-lockout rule is active, show it in the rules list for the LAN interface (or WAN if the interface count is 1, same rules as in filter.inc for putting the rule in the ruleset)
11/04/2010
-
06:30 PM Revision 428e66b6: Warn a user when entering the OpenVPN client/server screens that they need a CA/Cert if none exist.
-
05:18 PM Revision 9882cbef: Use addslashes() here to prevent unescaped quotes from causing PHP errors. Fixes advanced/custom options in OpenVPN wizard.
-
03:14 PM Revision f09ce147: Merge remote branch 'upstream/master'
- Conflicts:
etc/inc/services.inc -
02:39 PM Revision 3339c56f: Use a different variable name here to avoid colliding with another of the same name.
-
09:06 AM Revision 0996a81e: Enlarge the address fields so that ipv6 addresses fit properly
11/03/2010
-
09:26 PM Revision 9ad0ab80: Use != here to avoid a potential issue with empty() testing intermediate arrays.
-
09:18 PM Revision 42724fdd: Add a button to the filter reload screen to force a config sync (only shows up if a config sync peer is defined).
-
09:00 PM Revision de651e21: Change the dhcpd startup for isc dhcpd server 4.1
-
08:11 PM Revision 36600615: Fix saving of off/disabled PPPoE server instances. Fixes #987
-
08:08 PM Revision 79eea0c1: Activate code to allow ipsec to work normally.
- 02:53 PM Revision 4816e5ca: Merge remote branch 'mainline/master' into inc
- Conflicts:
etc/inc/auth.inc
etc/inc/config.lib.inc
etc/inc/priv.defs.inc
etc/inc/syst... -
02:26 PM Revision b039f099: Don't show empty user IPsec keys.
-
01:25 PM Revision 9cb94dd4: Ticket #980. Bring CP widget up to date. Also bind lighty for CP to 127.0.0.1 it should not be accessible otherwise.
-
11:50 AM Revision 645ad665: This enabled finding of a carp vip on the ifconfig stack
-
10:43 AM Revision 096cd5f5: Do not attempt to start relayd without entries
-
10:32 AM Revision 6da3df4e: Enable both ipv4 and ipv6 forwarding before returning
-
09:42 AM Revision 5bb1e653: Default to ipv6 routing on
-
09:30 AM Revision 3502b5b1: Make it possible to create a inet6 carp address. This works surprisingly
- What doesn't work is removing the previous IPv6 address from a interface. This should be hooked into the edit page
-
07:49 AM Revision 105d618d: Merge remote branch 'upstream/master'
11/02/2010
-
10:01 PM Revision 4ebde165: Make sure that the filter rules for static routes are correctly generated for ipv4 and ipv6
-
09:16 PM Revision 72993196: Protect from strange situations on bootup by testing for is_array(). Do not add anymore the 127.0.0.2 route its not needed anymore. Also during bootup bring up all interfaces so the assignment process can deal with them(Possibly should be done in another code flow!).
-
09:00 PM Revision 14f565b4: Allow the entry of ipv6 networks, needs verification to prevent ipv4 gateways for ipv6 networks and vice versa
-
08:48 PM Revision 6bc1e79a: Don't use pconfig in a widget, it can cause issues with other widget settings.
-
08:43 PM Revision 7617e245: Verify that we validate against a ipv6 subnet properly. This should help for static route gateways
-
08:07 PM Revision 60e76c58: CSS changes, fixes misaligned cursor in some password fields. Fixes item 1 in ticket #830
-
07:14 PM Revision a6607b5f: More VPN log fixes, for consistency. Ticket #912
-
06:29 PM Revision f856e762: Fix typo (standart -> standard)
-
06:11 PM Revision b2b61308: Switch from buttons to tabs, add a mode to view raw mpd logs for each vpn type, and some general cleanup. Fixes #912
-
05:22 PM Revision fbeaba66: Remove these now-obsolete linkup/linkdown scripts.
-
04:52 PM Revision 874e5f2c: Fix VPN log page to use the updated log format (again). Ticket #912.
-
03:57 PM Revision 2f9d2dc2: Use a unified vpn-linkup script that detects the type based on interface name.
-
03:43 PM Revision e9a95ac8: Switch to a unified vpn-linkup and vpn-linkdown.
-
02:07 PM Revision 2c7feef7: Fix l2tp interface naming. Fixes #985
-
01:21 PM Revision 27b82e7c: Remove debug flag from rtadvd
-
09:13 AM Revision d57293a4: Fix services.inc dhcp6 configuration, add route advertising deamon config
11/01/2010
-
09:02 PM Revision 14905d9f: Show login/logout events for pptp, pppoe server, and l2tp. Could use some work to simplify. Ticket #912.
-
08:22 PM Revision 917b0a56: Use individual linkdown scripts.
-
08:15 PM Revision 6d1091dc: Add individual linkdown scripts so the service type can be set in the log.
-
08:05 PM Revision d282c96c: Add service type to vpn log
-
06:46 PM Revision a2071365: Sync service status widget code with service status page. Fixes #984
-
06:13 PM Revision 08724afa: Test for arrays first, should fix #968
-
05:20 PM Revision 5fb9e6d3: Various sync fixes to ensure sections are pushed even if empty, otherwise the last entries of these sections cannot be deleted and have that deletion sync to the secondary.
-
12:11 PM Revision 11b8ca39: Merge remote branch 'upstream/master'
- Conflicts:
etc/inc/filter.inc -
07:31 AM Revision a8a98fb4: Do not throw warnings on empty dhcpd arrays
10/31/2010
10/29/2010
-
02:08 PM Revision 0e604b3a: Make isvalidpid() know about pidfile the same as the other *pid functions do.(consistency)
-
09:55 AM Revision b7ccf315: Make the change here, too.
-
08:22 AM Revision 9d46f40b: Also mention that this allows access to the dashboard.
10/28/2010
-
06:34 PM Revision e3bbd29a: Replace \r from custom options otherwise it breaks config.
-
02:29 PM Revision 7c255188: Fix logging parameters.
-
02:29 PM Revision c815b877: Fix pfctl -b parameters to prevent the killing of unintended states.
-
01:56 PM Revision 9e303f2f: Fix formatting
-
01:56 PM Revision 5e58efd0: Fix this logic.
-
01:37 PM Revision 75337c33: Fix typo in services_dhcp_configure() for dhcp6 naming
-
12:50 PM Revision ce76a45c: Add icmp6 rules so that stateless autoconfiguration can be used, this also requires that link local addresses work.
-
12:29 PM Revision 2a1bd027: Add the rtadvd deamon to advertise the routing. We still need to make a proper config file if we want it to advertise the Carp IP instead of the interface IP
- Also added safety guard for empty dhcp configs
-
10:56 AM Revision 65b1e7d5: Make sure that if either v4 or v6 dhcp servers are enabled that is_dhcp_enabled() will trigger
-
08:49 AM Revision 99caa67c: Add the dhcpv6 server service page.
-
08:46 AM Revision 693833cb: Update services.inc for configuring isc dhcp server 4.1 with ipv6 subnet support. Much configuration needs validation.
- There is no router option support, this needs to be handled by the router advertisement deamon. Perhaps this should b...
10/27/2010
-
09:13 PM Revision da51f26c: Ooops use meant logic.
-
08:56 PM Revision f48b6205: Ticket #975. Properly initialize variables to avoid caching issues. Also check an array exists before trying to foreach to avoid errors.
-
08:56 PM Revision a8200dbf: Ticket #975. Rearrange code a little.
-
08:55 PM Revision 6bef0554: Do some is_array() testing before renaming fields, otherwise empty variables can be accidentally created.
-
08:30 PM Revision bacd881e: Fixes #976. Bring in the piecies for classless routing from FreeBSD 8.1 script.
-
06:32 PM Revision 1da69624: Add the dhcpv6 server menu item and allow for configuration
-
05:11 PM Revision 64ce9d72: Do not require LDAP search base DN. Requiring this can prevent some valid LDAP configurations from properly authenticating. (See GDD-550841).
-
07:47 AM Revision 31ace4ea: Add the ipv6 address and subnet onto the existing ifinfo array until the pfsense module supports it
-
12:29 AM Revision b019222a: Ticket #959: keep local ipalias and proxyarp vip's during a XMLRPC restore
10/26/2010
-
01:50 PM Revision 8b6ae027: Check against static configurations which can be staticv4 staticv6 or staticv4v6
-
01:44 PM Revision 9b1ff028: Allow for creation of a ipv6 tunnel for he.net by creating a gif interface. This is the recommended procedure as advised by he.net
- This allows for using ipv6 local and remote addresses, you will need to add a ipv6 default gateway on the routing tab
-
01:19 PM Revision e6c563bb: Make the $pgtitle output a link back to the current page for a convenient way of reloading.
-
09:44 AM Revision 22b5abac: Switch over the IPv6 functions from IPv6.inc, these are from the PHP PEAR library
10/25/2010
-
08:55 PM Revision dbb0e086: Remove unnecessary (and unclosed) form tag.
-
08:31 PM Revision c26c208f: Do not allow spaces in load balancer name fields, they are invalid in relayd.
-
07:29 PM Revision 5bb6e1f5: If there are no aliases, push an empty aliases array. Fixes #961
-
07:09 PM Revision 5ea2c125: Add a note to the DNS Rebinding protection error letting the user know to try by IP address.
-
06:06 PM Revision 146f0fad: Do not show on the queue/limiters list the disabled entries(optimized and cleaner version).
-
05:42 PM Revision 520ad1a4: Do not show on the queue/limiters list the disabled entries.
-
01:54 PM Revision b2c63fa3: up the subnet bits from 32 to 128 so that the access can be locked down to the host for ipv6.
- This will require a javascript routine that prevents a subnet mask higher then 32 bits for a ipv4 address.
Alternati... -
12:35 PM Revision db8e9e53: Ticket #943. Call the update procedure directly to not do an unecessary loop.
-
12:28 PM Revision 52e5285f: Make this more strict checking.
-
11:48 AM Revision 290797ea: Fix the filter.inc rule generation for icmp to prevent a double inet6 in the rule
- Add inet6 for user defined rules to ipv6 addresses.
-
11:19 AM Revision 24b2aa62: Resolves #971. Fix wizard.php to show interface descriptive names. Pointy-hat: gnhb
-
10:59 AM Revision 1306c7dd: Change the firewall rule generation to look for the ipprotocol tag which defines inet or inet6. This makes sure that we use ipv6 addresses and change to the correct ipv6-icmp tag.
-
01:06 AM Revision 6dbd2e74: Add l7 rules synchro. Ticket #951
10/24/2010
10/23/2010
-
07:27 PM Revision 2bbb79cb: tack on the ipv6 information via the old fashioned way until the pfsense module is up to speed
-
07:26 PM Revision bbcc0f9c: splay the IPv6 information on status interfaces.
-
10:54 AM Revision 6538e660: fix filter rule error
-
10:49 AM Revision 640b3a9a: remove some debugging from filter inc, show correct ipv6 gateway from function
-
10:32 AM Revision 66e0ff49: Run both traceroute and traceroute6 for ipv6 functionaility
-
10:28 AM Revision 8bea9639: So gethostbyname() does not work for ipv6, instead run both ping and ping6. That works too.
-
10:19 AM Revision 86551a06: Do a gethostbyname() on the host address to get a IP address, then perform ping or ping6 for correct type.
10/22/2010
-
09:47 PM Revision 98d75ad4: Be smart and correct; first check for opt*ip and after check for opt* otherwise it will never match the first case!
-
08:06 PM Revision e4d79ab0: Balance <p> with </p>
-
07:56 PM Revision 67300ce5: Put </ul> tags inside the same <td> since they cannot span multiple of them.
-
07:52 PM Revision 4540ab2c: Clear some forgotten </img> </font> tags.
-
04:05 PM Revision 1feb93cf: Mark this entry as an array before treating it as such otherwise php complains.
- 03:49 PM Revision 90e64fad: Check to see if it is not an array first - as per jim-p on IRC.
-
02:01 PM Revision 5a5413bb: Add the default ipv4 route and the default ipv6 route, check both routing tables before adding or changing.
- set the ipv6 IP address via a mwexec() until the pfsense module is adapted. FIXME.
Add filter rules for ipv6 to let t... -
11:32 AM Revision 47593ac6: Allow for configuring a IPv6 address on the interfaces page.
- Add code to verify a ipv6 address
Let is_ipaddr() return true on a v4 and v6 address.
Change system gateways edit to ... -
03:49 AM Revision be81b340: Display the ICMP type (abbreviated) in the firewall rule list and show the full text when the cursor is over it for ticket #762
-
02:54 AM Revision fc3e88f1: Fix crl upgrade code.
10/21/2010
-
09:11 PM Revision 5e693f58: Break after the first error.
-
09:08 PM Revision 630d7025: Prevent the DHCP range from being changed to include static mapping entries. Fixes #964.
-
08:58 PM Revision ab8d138d: Reject DHCP static mappings that are inside of the DHCP range. Fixes #966
-
08:07 PM Revision 62b262e4: Remove WIP note. This should resolve #555.
-
08:00 PM Revision 6a0b3ea4: Indicate in various places if a certificate is revoked.
-
07:49 PM Revision 150bbe09: Indicate if a certificate has been revoked, both in the cert list and the user manager list.
-
07:11 PM Revision fc54f29b: Add ability to select reason codes for revocation. Reformat CRL edit screen a bit. Ticket #555
-
06:33 PM Revision 8e022a76: Refresh OpenVPN CRL files when a CRL has a cert added/removed. Ticket #555
-
05:34 PM Revision ad08687b: Add support for deleting a cert from a CRL (unrevoke). As of this point basic CRL functionality does work: Revoke a cert and it cannot connect. Remove it from the CRL and it can. (Have to edit/save OpenVPN server instance to update/refresh CRL though). Ticket #555
-
01:00 AM Revision 9f200d71: Change OpenVPN wizard to set input_errors when there is a fatal condition that will require preventing a config save.
-
12:59 AM Revision 7f167923: Add these error/info box classes to the wizard.css file.
-
12:59 AM Revision 27319e17: Add a patch to wizard.php to support input_errors from sullrich (with some modifications).
-
12:12 AM Revision 8f87a4a2: Reject special characters in CA/Cert field names during OpenVPN wizard. Fixes #900
10/20/2010
-
11:13 PM Revision 47319bfb: Add upgrade code for importing CRLs. Ticket #555
-
07:41 PM Revision 28ff7ace: Add more CRL functionality. Needs to wait on a new build for further testing.
-
07:41 PM Revision 5293bfec: Fix some forgotten name->descr changes.
- 06:43 PM Revision d8912c6b: move dhcpd.conf authoritative; so it's only there once, not once per interface.
-
03:13 PM Revision ac87dbbf: Traffic shaper wizards remove redirection before final step. This seems a forgotten item.
-
12:48 PM Revision 7d30a315: Sync CRLs, too.
10/19/2010
-
08:08 PM Revision 50cafcf3: Correctly call die() in the places needed. Also remove unused global.
-
07:34 PM Revision d7381e71: Generalize the "low res" user agent detection so it isn't Apple-specific. Include Android in the detection, and also provide a mechanism so that the "low res" theme can be set in globals.inc.
-
06:19 PM Revision f2a86ca9: Rename 'name' to 'descr' for CA, Certificates, and CRLs, to gain CDATA protection and standardize field names. Ticket #320.
-
05:03 PM Revision 6751b3e7: Generalize this function and use it in more places to reduce duplicated code.
-
04:51 PM Revision 9ff73b79: Convert fullname field on users to descr, so it gains CDATA protection.
-
04:39 PM Revision e988813d: desc to descr in Load Balancer config, so they gain CDATA protection and standardize field names. Ticket #320.
-
04:07 PM Revision c4f55084: Update field name reference in code, it was changed to descr but this code was missed. (Is this code even needed? Doesn't seem to do anything.)
-
04:00 PM Revision 15864861: Change the description field on sysctl tunables to be 'descr' and not 'desc' so they will gain CDATA protection. Ticket #320
10/18/2010
-
07:58 PM Revision 8a98ce81: ipalias type should be handled in backup_vip_config_section. Remove useless code which copies vip section before call to backup_vip_config_section. Ticket #882
- 05:17 PM Revision f5fe66cd: Merge remote branch 'mainline/master' into inc
-
03:16 PM Revision 5d763c0e: Fix the dedicated and multi_all wizards. They had typos in variable names and some remaining unused code which caused problems!
-
12:39 PM Revision 2e408f59: Disable the bandwidth speed selection field also to avoid errors/problems when the catch all is not activated.
-
11:52 AM Revision 232846a2: Ticket #868. Add Connection: close to the header to be proxy friendly. See http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html for reference.
-
11:14 AM Revision f21c7979: Use proper matching because the command might contain nice in it.
-
02:44 AM Revision 00686fee: Character '#' is invalid in string fields of SNMP service screen. Ticket #956
10/17/2010
-
02:35 PM Revision 71880c96: Do not include 'remoteid' javascript functions for mobile ipsec. Ticket #797
10/16/2010
-
04:19 PM Revision 65996399: Resolves #957. Correct the code to reflect what its supposed to do.
-
03:28 PM Revision 814bb2dc: Bump config.
-
03:27 PM Revision 65167fcc: Do not run anymore the cron job for monitoring check_reload_status since it has a monitoring process that does this through kqueue.
10/15/2010
-
02:29 PM Revision f5ea58da: Ticket #927. Increase timeout to gice mpd the time needed to exit gracefully.
-
01:59 PM Revision b641a575: Ticket #934. Perform test only for ldap backend. Also tell the user through a message when they click it for other backends.
-
01:42 PM Revision f1aad4d1: Resolves #879. Commit patch referenced in ticket to properly parse rate output.
- 12:14 PM Revision 26f131b8: Fix typo
- 12:11 PM Revision b96f6496: Merge remote branch 'mainline/master' into inc
- Conflicts:
etc/inc/pkg-utils.inc
10/14/2010
-
07:32 PM Revision 2c794549: Ticket #950. Correctly handle failures while installing packages which might leave stale information behind. Also do not try to startup services twice. Rename uninstall_package_from_name to uninstall_package because the operation on packages is only done through package names.
-
06:58 PM Revision ab0eced7: We want to upgrade all of interfaces/gateways.
- 01:07 PM Revision a1945b0a: Merge remote branch 'mainline/master' into inc
-
04:54 AM Revision 4b0c83c3: Hide ports when protocol does not use ports. Ticket #953
-
02:28 AM Revision f9106085: Hide translation section when "Do not NAT" is checked. Fixes #952
-
02:12 AM Revision c3f36fb5: Don't clear the source port when changing source address type to any. Also update source when editing a rule with source type any.
10/13/2010
-
09:57 PM Revision da6155e0: Make sure this is an array before entering the foreach loop. Reported at http://forum.pfsense.org/index.php/topic,29118.0.html
-
12:54 PM Revision 94823361: Add GUI checkbox to enable strict username/common name matching for SSL/TLS+User Auth mode. Fixes #887
- 11:39 AM Revision 8eec6fc0: Merge remote branch 'mainline/master' into inc
- 07:02 AM Revision 5a171fb7: Wording fix.
10/12/2010
-
10:12 PM Revision 24997966: Ticket #942. Try to prevent empty entries and use implode to avoid problems.
-
10:01 PM Revision df2a0f18: Resolves #944. Actually bring down the vlan interface if it existed previously. This is a regression from the ppp dance/requests/whatever.
-
09:44 PM Revision 3c692174: Resolves #947. Blacklist lagg interfaces from the list of possible lagg members.
-
09:21 PM Revision 8901958c: Add backend code to verify username against cn on login if set by user. Needs GUI code to set the option yet. Ticket #887
-
12:59 PM Revision bd6f4dcc: Correct this note, on at least one card (mxge) it defaults to an MTU of 9000, so we can't always say the default will be 1500.
10/11/2010
- 10:33 PM Revision ce94b839: revert miniupnpd -d change
- 10:26 PM Revision d2bdde27: Be more verbose with miniupnpd logs. otherwise practically nothing is logged.
-
09:10 PM Revision 9228de6c: Fix graph staggering, the old method was causing the graphs to diverge in update intervals over time.
-
08:29 PM Revision 719dcffb: Whitespace fixes
-
07:16 PM Revision f3704cb2: Bail out here if a variable isn't an array like it should be.
-
05:36 PM Revision 0a7c9c8e: Fixup comments a little.
-
05:34 PM Revision 99642234: Correct and cleanup this input validation logic for IPsec Phase 1 PSK/Cert config. In some cases the test was not being evaluated as expected.
- 03:53 PM Revision 10f0a57a: Merge remote branch 'mainline/master' into inc
- Conflicts:
etc/inc/authgui.inc -
07:58 AM Revision d60f510a: Unset the end time if we are graphing for the "current" period. That makes the graphs refresh correctly.
- 07:25 AM Revision fea89a63: Hard-coded pfSense to product_name for Growl alert notifications.
-
06:09 AM Revision 6840d0e7: Unfortunately, using variables in this way in strings passed to gettext doesn't work well with translations. Replacing with sprintf for now.
-
05:58 AM Revision f99c6a23: Update this text to match the current default.
-
05:52 AM Revision 28436d13: Fix text.
10/10/2010
- 04:09 PM Revision 1ffa44bb: Kill apinger with a large axe until the TERM issues can be resolved
- 02:25 PM Revision ebb57fe2: Replace hard coded pfSense with product_name
- 02:12 PM Revision ecdae807: Replace hard coded pfSense with product_name.
- 01:12 PM Revision 4dddf8c3: Cosmetic change from product_website to product_name
- 12:47 PM Revision c3f4734d: Wording fix.
-
08:48 AM Revision 6adc8e32: Fix the "all dynamic gateways are shown as default" problem reported here: http://forum.pfsense.org/index.php/topic,28960.0.html
- A non-empty string will evaluate true with == operator.
Also available in: Atom