Project

General

Profile

Activity

From 03/31/2011 to 04/29/2011

04/29/2011

07:43 PM Revision c639315e: Set password on the OS instead of just the gui. Fixes #1485
Jim Pingle
06:23 PM Revision f7ea0505: Remove static routes that are added for dns servers when allow override is allowed when a ppp interface goes down. Code borrowed from dhclient-script.
Ermal LUÇI
06:19 PM Revision a73a9886: Ticket #1408. Honor the allow override settings even for ppp devices.
Ermal LUÇI
06:15 PM Revision e5f3359c: Send route delete message to blackhole.
Ermal LUÇI
06:13 PM Revision cfe92577: Ticket #1408. Do not add static routes for automatically learned dns servers from dhcp if Allow override is not selected.
Ermal LUÇI

04/28/2011

09:21 PM Revision 9cf46050: Correct saving of qinq specified members and also correctly destroy parent vlan when deleteing the interfaces. Also take care of attaching to netgraph now that we detach by default.
Ermal LUÇI
08:44 PM Revision a7ee5777: Remove rndtest sysctl since the kernel module is not anymore part of our kernels. Leftover noticed by: Jim
Ermal LUÇI
08:31 PM Revision 2d14181b: Remove rndtest sysctl since the kernel module is not anymore part of our kernels.
Ermal LUÇI
07:53 PM Revision 27dfd848: Bring comment up-to-date
Ermal LUÇI
07:33 PM Revision 65531b4b: Make sure that openvpn tunnels are not impacted by hitting 'Save' on the Interface->Configuration page when assigned.
Ermal LUÇI
07:29 PM Revision d1ae9705: Use the needed variable here so hitting 'Save' from Interface->Configuration section does not leave the assigned gif interfaces without tunnel addresses.
Ermal LUÇI
07:16 PM Revision 40b0c024: Correct code description during assignment
Ermal LUÇI
07:09 PM Revision d7f1891b: Some configurations might have gre/gif on top of carp. Make sure to handle this configurations and to bring the tunnel correctly up.
Ermal LUÇI
02:25 PM Revision 03f824a5: Remove the quotes, these break the advertisement
Seth Mos
01:27 PM Revision 61fbafc2: Hopefully fix the router advertisement
Seth Mos
09:33 AM Revision fcdc8943: Merge remote branch 'upstream/master'
Conflicts:
etc/inc/pfsense-utils.inc Seth Mos
09:09 AM Revision 753bd64d: Change the rtadvd daemon options to a more readable format that should hopefully work better.
Seth Mos
01:10 AM Revision 1dfb7795: fix typo
Chris Buechler
12:25 AM Revision b0c2087e: Comment out debug print
Jim Pingle

04/27/2011

04:03 PM Revision f35abee2: Whitespace cleanup, code cleanup, add choice to filter on ipv4/ipv6 and also accept a subnet to filter on via the host field.
Jim Pingle

04/26/2011

09:08 PM Revision c41997ce: Allow users to select SSL/TLS+User Auth with external authentication sources.
Jim Pingle
06:37 PM Revision 7100a85c: No need to include head.inc twice
Jim Pingle
02:18 PM Revision 0b9d02f3: Don't just blindly echo to the ntpd.log, it's a clog file and that will break it.
Jim Pingle
07:05 AM Revision 787de45a: Push the ipv6 routes for the local network with push route-ipv6
Seth Mos

04/25/2011

08:12 PM Revision 97ffc513: Add the ipv6 configuration options for routing ipv6 over the tunnel. Currently only a /64 is supported for the routed network, so use a /64 and then route the /56
Seth Mos
07:50 PM Revision 9f5d14ce: Show OpenVPN instances on Status > Traffic Graphs, with descriptions.
Jim Pingle
05:17 PM Revision b1ba04cf: Add ipv6 tunnel remote subnets
Seth Mos

04/22/2011

07:48 PM Revision e3dc055a: Actually correct check meaning.
Ermal LUÇI
07:23 PM Revision bd17f93d: Do not an ip of all 1s as a gateways since it cannot be pinged.
Ermal LUÇI
06:28 PM Revision bce14123: Actually call interfaces_carp_setup after the carp interfaces are created so carp traffic can only flow after we have all vips up and running. This prevents premption more early than necessary. Ticket #1432.
Ermal LUÇI
03:23 PM Revision d8da6350: Provide a method for rebrands to force a theme. Otherwise upgrading nanobsd from pfSense to a rebrand image without the theme in the config.xml will have a broken GUI since the theme isn't there.
Jim Pingle
12:31 AM Revision de7222fb: correctly unmount drives where a config doesn't exist
Chris Buechler

04/21/2011

09:39 PM Revision 2d4003aa: If the bandwidth value is coming from radius scale it up to the requested Kbit/s unit.
Ermal LUÇI
08:05 PM Revision 2594f401: missed a bit of my last commit
Yehuda Katz
07:33 PM Revision 908cbaf9: Set user when removing privileges, otherwise things like the user's shell would not be reset until pressing save, which is inconsistent with that step not being needed when adding privileges.
Jim Pingle
06:34 PM Revision a29aeb47: Merge branch 'master' of http://gitweb.pfsense.org/pfsense/mainline.git
Yehuda Katz
06:33 PM Revision ea7763c0: ignore dreamweaver temp files
Yehuda Katz
06:29 PM Revision a828210b: checking moduli of ssl csr request and response
Yehuda Katz
05:10 PM Revision 1f0c76cf: Fix PPPoE upgrade, the <pppoe> tag is considered an array these days and the upgrade code wasn't treating it properly, accessing it directly instead of using the first entry ([0]). Fixes #1439 - PPPoE credentials upgrade properly now.
Jim Pingle
02:33 PM Revision 46698c3f: Reject encrypted CA private keys. Resolves #1446
Jim Pingle
01:59 PM Revision 0cc5ab42: Confirmed working fix for ticket #1417 - with this change I have two-way connectivity on Site-to-Site (SSL/TLS) with iroutes.
Jim Pingle

04/19/2011

11:59 PM Revision bd24573b: Backing out changes from ticket #1417, it was not a valid openvpn config that the user was trying to make.
Jim Pingle
09:06 PM Revision 673ee7b1: Harden SSL settings a bit. Verified OK with @cmb and @billm
Scott Ullrich

04/18/2011

10:27 PM Revision 6c9cf466: Slightly different fix for #1417 that doesn't mess up other parameters needed by p2p_tls
Jim Pingle
07:18 PM Revision e2e934e0: override option for certificate subject mismatch
Yehuda Katz
06:56 PM Revision 359f6307: Block instead of allowing proto carp/pfsync during bootup since this may cause issues. Ticket #1432
Ermal LUÇI
06:25 PM Revision 42c07003: Add an option under advanced->misc to specify a proxy for retreiving pfsense package info or downloading packages.
Ermal LUÇI
05:08 PM Revision e8503ff4: Only start log update ajax timer if the updateDelay is defined. http://forum.pfsense.org/index.php/topic,35771.0.html
Jim Pingle
09:08 AM Revision 81b44848: Surround the IPv6 address with brackets
Seth Mos

04/17/2011

05:27 AM Revision 5381b341: Don't include RFC1918 in bogons.
Jim Pingle

04/16/2011

10:19 PM Revision 988d498c: sync bogons
Chris Buechler

04/15/2011

08:57 PM Revision 13399e17: Properly add dns and wins fields, load them on page load.
Seth Mos
08:54 PM Revision d7bccf3c: Generate a address from the bridge mac and configure a v6 address
Seth Mos
04:38 PM Revision a51493d1: Merge remote-tracking branch 'mainline/master' into inc
Conflicts:
etc/inc/gwlb.inc Vinicius Coque
04:11 PM Revision 7b2fdeb3: Properly set/unset voucher enable/disable bit.
Jim Pingle
01:06 PM Revision 3df79aa0: Merge remote branch 'upstream/master'
Conflicts:
usr/local/www/interfaces.php Seth Mos
12:53 PM Revision b9bbae04: Move the link to add a gateway up next to the drop-down box so it is more obvious.
Jim Pingle
12:37 PM Revision 6d3fd938: Change the wording and the link placement for adding a new gateway
Seth Mos
08:42 AM Revision b1c305e7: Merge remote branch 'upstream/master'
Seth Mos
08:41 AM Revision cfd40454: Make it possible to add a IPv6 gateway using the ajax add button
Seth Mos

04/14/2011

08:50 PM Revision ca90133b: Save a little space on the interface list for console assignment.
Jim Pingle
05:26 PM Revision d2903c0c: Test if a variable is set before trying to unset it. If a user has no rules in their config, then $config['filter'] would not be undefined, so unsettings $config['filter']['bypassstaticroutes'] would result in an error. http://forum.pfsense.org/index.php/topic,35702.0.html
Jim Pingle

04/13/2011

07:52 AM Revision c8cc0c1c: Add missing fields for l2tp to define dns and wins servers
Seth Mos

04/12/2011

10:18 PM Revision a93020d5: Do not send growl notices twice
Scott Ullrich
10:08 PM Revision 2632934e: Remove blank trailing c/r.
Scott Ullrich
10:08 PM Revision 10c3d4c0: Notify via smtp as well as growl
Scott Ullrich
05:52 PM Revision cd11a142: Drop the ntpdate sync in favor of using ntpd -s, which should have the same net effect without needing the shell script that has been prone to hanging.
Jim Pingle
04:29 PM Revision 2816c5a1: Fix Parse error
Seth Mos
02:04 PM Revision d67b6b17: Also exclude grep from running processes when grepping for a running packet capture. Also, fix other test to match the recent changes made.
Jim Pingle
08:43 AM Revision 2521266a: Only pick up the ipv6 addresses from the DNS servers section
Seth Mos
08:40 AM Revision af8f910e: Merge remote branch 'upstream/master'
Seth Mos
08:39 AM Revision 86966fba: Merge remote branch 'upstream/master'
Conflicts:
etc/inc/filter.inc
usr/local/www/themes/the_wall/rrdcolors.inc.php Seth Mos

04/11/2011

08:58 PM Revision 127eb8e0: Add a toggle under System > Advanced on the misc tab to enable/disable debug mode for racoon.
Jim Pingle

04/09/2011

04:00 PM Revision 4eb4b18a: Revert changes to dhclient-script. Appears to have broken DNS servers from DHCP. Ticket #1428
Jim Pingle

04/08/2011

08:08 PM Revision e9e06fb2: Fix copy/paste error
Jim Pingle
06:15 PM Revision ac6651c9: Make sure a theme directory actually exists before blindly using it.
Jim Pingle
03:46 PM Revision edf99ce4: Rework ntpdate_sync_once.sh, so it makes sure ntp/ntpdate/itself are not running before trying to sync time, and then launch ntpd at the end for time sync (last commit was premature)
Jim Pingle
03:20 PM Revision 54c18594: Don't unconditionally start ntpd after doing ntpdate, it might be disabled.
Jim Pingle
03:20 PM Revision 2db351a7: Send ntpdate output to syslog
Jim Pingle
12:59 PM Revision fbfd675a: Add an IPsec xauth permission. Try to use the nologin shell first (just unlock the account). Ticket #1202
Jim Pingle
12:28 PM Revision 02d99511: Putting client-config-dir in the config is valid also for p2p_tls servers. Fixes #1417.
Jim Pingle

04/07/2011

08:17 PM Revision b510be5c: use same egrep statement for both checks
Scott Ullrich
08:16 PM Revision 1fd807da: Use full path to egrep
Scott Ullrich
08:15 PM Revision d0cc727e: Use full path to egrep
Scott Ullrich
08:11 PM Revision 955f2d78: Use some Seth egrep foo to protect from compromised DHCP servers. CVE-2011-0997
Scott Ullrich
04:35 PM Revision e05458b0: Remove extra variable set
Scott Ullrich
04:34 PM Revision 7ec2a858: Remove copy paste
Scott Ullrich
04:33 PM Revision 0c951d9b: Unbreak check if capture is running
Scott Ullrich
04:00 PM Revision 5d788161: When using ' variables are not expanded. Use double quotes so that the variable is exanded
Scott Ullrich
03:49 PM Revision c76fc19f: Don't test for a user cert here either, see previous commit.
Jim Pingle
03:47 PM Revision 72d8453d: Don't test if a cert is in use here, you could in theory use a cert for a user and a server.
Jim Pingle

04/06/2011

11:53 PM Revision 8fee59d6: Fix link; use same message for missing certs.
Jim Pingle
11:41 PM Revision 0930bd01: Make the default openvpn cert authority message a bit relaxed and let user know about the wizard option as well
Scott Ullrich
06:23 PM Revision 87bb66af: Correct text to include PPTP as well.
Ermal LUÇI
06:22 PM Revision 9a36dc9d: Resolves #1391. Bring back VPN auto rule disable advanced setting.
Ermal LUÇI
05:36 PM Revision ab75b4ee: CRL is read in as an array now, so even in the imported config it will appear to be an array even though it can only have one value. Fixes #1358
Jim Pingle
05:14 PM Revision 6177fd92: Fixup text.
Jim Pingle
04:55 PM Revision 557300a7: Actually re-parse the config if a valid config was not written. (Should help stop installs from blowing up on failed config upgrades). Save the bad config for inspection, and print a message to the console about what was done.
Jim Pingle
02:59 PM Revision 4c613f84: Correct error message for gateways to report down when the gateway is down and not high latency.
Ermal LUÇI
02:58 PM Revision 19d91466: Another sweep at keeping the default route always present when the default setup route is marked as down. This now adds checks for configuration where a defaultgw is not specified by the user but deduced automatically.
Ermal LUÇI
10:49 AM Revision d10da0f9: Resolves #1418. Correct test to actully do what's intended.
Ermal LUÇI
10:42 AM Revision 5766add8: If the supplied gateway is all ones(255.255.255.255) do not report it as a gateway since its useless.
Ermal LUÇI

04/05/2011

07:55 PM Revision 262595f0: Unbreak inetd.conf generation to avoid entries containing Array entries. This gixes nat reflection and a spamming of the system with nc processes with wrong parameters.
Ermal LUÇI
03:16 PM Revision 5b64e336: Fix variable name
Jim Pingle

04/04/2011

05:41 PM Revision 0ef48aed: Make sure all themes have the right colors defined.
Jim Pingle
03:05 PM Revision 1309fadd: <script/> tags are put in the function build_javascript no need to put them here. Prevents errors reported at:http://forum.pfsense.org/index.php/topic,34139.0.html
Ermal LUÇI
01:42 PM Revision f599d893: Merge remote-tracking branch 'mainline/master' into inc
Conflicts:
etc/inc/shaper.inc Vinicius Coque
11:09 AM Revision 1d60ed9b: Try to always keep pfSense with a default gateway to avoid errors for service running from pfSense itself. Previously PBR should be configured for such services. While PBR is a better fix this at least keeps users from complaining in simple setups. Reported by many.
Ermal LUÇI
10:32 AM Revision f206afb5: On interface ip change reload even igmpproxy. Reported-by: http://forum.pfsense.org/index.php/topic,34372.0.html
Ermal LUÇI
10:24 AM Revision 056df2d9: Add -a to include all updaterrd.sh scripts running and also remove top killing since its not used anymore in stat gathering.
Ermal LUÇI

04/01/2011

09:51 PM Revision d7f4030a: Fix indent.
Ermal LUÇI
06:11 PM Revision 4936ff53: Switch back to dev_mode so existing configs aren't broken by the other changes.
Jim Pingle
03:06 PM Revision 681b43b0: standardize the device_mode variable
Luiz Gustavo S. Costa

03/31/2011

05:52 PM Revision bc788561: Correct the conditional testing.
Ermal LUÇI
05:45 PM Revision 57c448d0: Do not show the default queue selection for a queue that has child queues
Ermal LUÇI
05:39 PM Revision d1bd01ff: Prevent non-numeric chars from being inputed on bandwidth field.
Ermal LUÇI
05:08 PM Revision b4822548: Try again to fix the calculation for out bits 95th percentile. (Works for me)
Jim Pingle
04:50 PM Revision 7de4284c: Add gettext calls on main menu
Vinicius Coque
04:48 PM Revision 8bade64c: Revert "Add gettext calls on main menu"
This reverts commit 67f0f0a772722d418f0f660bf2b16ff5b4c94fd5.
system_firmware.php shouldn't be commited Vinicius Coque
04:47 PM Revision 67f0f0a7: Add gettext calls on main menu
Vinicius Coque
04:34 PM Revision 91589880: Merge remote-tracking branch 'mainline/master' into inc
Vinicius Coque
10:06 AM Revision 78544d4a: clarify text
Chris Buechler
12:48 AM Revision 84575284: Apparently rrdtool VDEF functions can't take a multiplier, only CDEF. Fixes traffic graphs.
Jim Pingle
12:36 AM Revision 857a4a79: Use a different loop counter variable to avoid a name collision
Jim Pingle
 

Also available in: Atom