Project

General

Profile

Activity

From 10/08/2014 to 11/06/2014

11/06/2014

11:16 PM Revision 708af634: remove unnecessary is_array check, thanks Renato
Chris Buechler
10:36 PM Revision 6c3be365: Don't allow P2 local+remote network combinations that overlap with
interface+remote-gateway of the P1. Fixes #3812 Chris Buechler
06:49 PM Revision dbb95f38: set install_routes=no for charon to avoid the issues noted in ticket
Chris Buechler
06:38 PM Revision 27c2e32e: Pass zone id to pfSense_ipfw_getTablestats(), should fix #3990
Renato Botelho
01:54 PM Revision 118218cb: Make sure target has scope when it's a link-local. Fixes #3969
Renato Botelho
01:40 PM Revision 049c74ec: Check if array is set
Renato Botelho
01:07 PM Revision 10435fa9: Merge pull request #1330 from phil-davis/patch-1
Jim Pingle
10:30 AM Revision 3f6525c1: Make sure srcip has scope when it's link-local. Should fix #3969
Renato Botelho
09:57 AM Revision e7752fc4: Remove extra ; and space
Renato Botelho
09:57 AM Revision e7a00514: Process obsolete files in shell script instead of php
Renato Botelho
09:57 AM Revision 48f77cef: Simplify post_upgrade_command logic and obsolete /usr/local/sbin/cvs_sync.sh instead of removing it on post_upgrade_command
Renato Botelho
09:29 AM Revision a68c6785: Fix to SMART disk matching
preg_match returns 0 when the string does not match the regex.
0 does not "===" FALSE
So this check is not always wor...
Phil Davis
04:58 AM Revision a012464e: fix captive portal status page display
Chris Buechler
04:45 AM Revision bb18cfcb: fix up text
Chris Buechler
02:45 AM Revision e8fa9843: Pass friendlyifname to handle_argument_group, not realifname. Fixes #3984. clean up some text while here.
Chris Buechler
01:47 AM Revision e55e4b74: isset($_GET) seems to always evaluate to true, use something more specific. Fixes use of rc.linkup when run from CLI. Others likely fix similar circumstances, though maybe not ones that are used anywhere.
Chris Buechler
01:33 AM Revision c75e8aed: Disable delete_old_states in dhclient-script. rc.newwanip handles this correctly in 2.2, and this killed states in multiple circumstances where that isn't necessary nor desirable.
Chris Buechler

11/05/2014

11:18 PM Revision 9aec47b7: don't duplicate $message in CP log entries
Chris Buechler
05:31 PM Revision d9b05eb4: When an alias contain hosts, add IPs and networks to filterdns too, otherwise you end up with a pre-defined and non-persistent table. Fixes #3939
Renato Botelho
09:12 AM Revision fcfa23da: Merge pull request #1319 from phil-davis/patch-1
Renato Botelho
09:07 AM Revision 87d4456c: Merge pull request #1323 from derelict-pf/master
Renato Botelho
09:06 AM Revision 5940e655: Merge pull request #1326 from phil-davis/patch-5
Renato Botelho
09:06 AM Revision 798d8644: Fix obviously broken test in rc.initial.setlanip
IMO might as well back-port any obviously wrong code to 2.1 branch, just in case anybody on 2.1.n cares for it or the... Phil Davis
09:05 AM Revision f81011ea: Merge pull request #1320 from phil-davis/patch-2
Renato Botelho
05:31 AM Revision e39c963a: fix up text
Chris Buechler
05:19 AM Revision 75756ab9: use a bit stronger of defaults in OpenVPN wizard
Chris Buechler
05:08 AM Revision 1c1fe666: Fix WINS description. It's not 1999, and it wasn't a good description for back then either. If you're running WINS at this point on your AD DCs...get rid of the Win 9x boxes, or realize you don't actually need or want WINS on anything Windows 2000 and newer.
Chris Buechler
05:05 AM Revision 7a22ab9b: fix up text
Chris Buechler
04:01 AM Revision cbc6a13f: Fix updating of hosts file on host override updates by bringing back the same behavior from previous releases.
Chris Buechler
03:22 AM Revision b7419cfc: skip disabled phase 1 entries in status output
Chris Buechler
01:57 AM Revision 261f2efe: fix NAT-T status. The 'nat' in the status array just tells how the connection is configured, not what it's actually using. Port seems to be the best way to determine what it's using. Fix up some other text while here
Chris Buechler
01:09 AM Revision 531686c1: use tabs rather than spaces, as most of this already did.
Chris Buechler
01:02 AM Revision d3c414e3: strongswan only has two options for NAT-T, force or auto.
Chris Buechler
12:44 AM Revision a43ddd1a: setting nmbclusters to 0 just results in an error, remove unnecessary line
Chris Buechler
12:34 AM Revision 41367b9c: remove old DISABLE_PHP_LINT_CHECKING, which dates way back to the CVS days and hasn't been relevant in years.
Chris Buechler
12:24 AM Revision 276efd64: touch up text
Chris Buechler
12:18 AM Revision 32171e59: fix invalid ipsec.conf
Chris Buechler
12:02 AM Revision f643a1f1: clean up text
Chris Buechler

11/04/2014

08:49 PM Revision ea20169a: Use a better method of finding disks for SMART.
Old code was inaccurate and also listed entries that were symlinks to other disks Jim Pingle
08:21 PM Revision 0810a719: Restore 3 values back on NAT-T settings Just Enable now its Auto as per strongswan default. and off disabled mobike. Ticket #3979
Ermal LUÇI
08:08 PM Revision 1db2634e: Rename the options to actually make sense with strongswan
Ermal LUÇI
08:07 PM Revision 86ef7a0a: Remove Force options since it has not meaning for now.
Ermal LUÇI
07:31 PM Revision 756d867a: fix comment
Chris Buechler
05:44 PM Revision 5711c446: Catch some more sensitive info when sanitizing.
Jim Pingle
05:43 PM Revision 8a2229e3: Catch some more sensitive info when sanitizing.
Jim Pingle

11/03/2014

05:27 PM Revision f384d8a5: Merge pull request #1329 from phil-davis/patch-3
Renato Botelho
04:43 PM Revision a3fad592: Fixup dhcpd interface enabled check
Phil Davis
03:04 PM Revision ba667cc6: Fix console set interface IP address
Problem as per forum https://forum.pfsense.org/index.php?topic=83651.0
The problem comes whenever services_dhcpd_conf...
Phil Davis
12:56 PM Revision ec290464: Merge pull request #1328 from wagonza/master
Renato Botelho
12:54 PM Revision fe9d4894: Fix indent
Renato Botelho
12:52 PM Revision 2783e408: Revert "Indent better"
This reverts commit a431bfc9e698c753d9a54218af9076184deb6251. Renato Botelho
12:45 PM Revision d5566d43: Make sure defaults values are actually used. Fixes #3974
Warren Baker
10:48 AM Revision 7bb24e18: Merge pull request #1327 from wagonza/pfSense-master
Renato Botelho
10:08 AM Revision 46a989ce: Indent here as well
Warren Baker
10:08 AM Revision a431bfc9: Indent better
Warren Baker
10:04 AM Revision 1b436de1: Be consistent with the other pages
Warren Baker
10:03 AM Revision be11b6f1: Add braces
Warren Baker
08:27 AM Revision 4c3abd34: Fix obviously broken test in rc.initial.setlanip
IMO might as well back-port any obviously wrong code to 2.1 branch, just in case anybody on 2.1.n cares for it or the... Phil Davis
07:54 AM Revision 0a89d059: Merge pull request #1324 from phil-davis/patch-3
Renato Botelho
06:04 AM Revision 8727b3c8: Set interface address from consol tidy output
While trying to see why this is not working for me (forum https://forum.pfsense.org/index.php?topic=83651.0 ) I have ... Phil Davis

11/01/2014

11:20 PM Revision ce21dfca: Correct dispaly of checkboxes for ipsec
Ermal LUÇI
10:41 PM Revision 8cb7d3e3: Properly configure NAT Tranversal setting.
Ermal LUÇI
07:54 PM Revision 6af85718: Remove debugging code
Ermal LUÇI
05:56 PM Revision f3dd7e8c: Properly test if FCGI is calling or are being triggered from shell. Normally Fixes #3361
Ermal LUÇI
05:55 PM Revision 9fdc167f: Properly test if FCGI is calling or are being triggered from shell. Normally Fixes #3361
Ermal LUÇI
05:49 PM Revision d338018f: Fixes #3938. Do more error checking.
Ermal LUÇI
05:44 PM Revision 935fcedb: Fixes #3941. When optimizations of the loops were made this brought the problems of overriding default gateway by dynamic interfaces. Try to stick to the first found for now!
Ermal LUÇI
05:43 PM Revision d35dfaae: Fixes #3941. When optimizations of the loops were made this brought the problems of overriding default gateway by dynamic interfaces. Try to stick to the first found for now!
Ermal LUÇI
06:42 AM Revision 038f6e96: clarify logs generated by newwanip(v6) when restarting packages, it's not only IP changes that end up here (by design).
Chris Buechler

10/31/2014

10:05 PM Revision a94a16cd: s/a/an/ and speling.
derelict-pf
09:55 PM Revision 162a7b4e: s/then/than/
derelict-pf
02:26 PM Revision 4045cf1e: Fix two more instances of rrd.tgz renaming.
Jim Pingle
02:26 PM Revision 8560c756: Fix two more instances of rrd.tgz renaming.
Jim Pingle
02:24 AM Revision c656bc75: Fix getext to gettext typo
Phil Davis
02:23 AM Revision 41aa5cd4: Fix getext to gettext typo
Phil Davis
02:23 AM Revision 29af6265: Fix getext to gettext typo
Phil Davis
02:22 AM Revision 24516832: Fix getext to gettext typo
Phil Davis
02:21 AM Revision b3f0b2e1: Fix getext to gettext typo
Phil Davis
02:10 AM Revision 687712ee: More gettext typos
Phil Davis
02:10 AM Revision 95169728: More gettext typos
Phil Davis
02:09 AM Revision c69f62b8: More gettext typos
Phil Davis
02:07 AM Revision 91ee10c0: More gettext typos
Phil Davis
01:30 AM Revision e4982b90: fix typoed gettext
Chris Buechler

10/30/2014

09:37 PM Revision 1ae41bfe: Kill states associated with the old WAN IP when WAN IP has changed. Retain
hidden config option to wipe all states on IP change, as there seemed to
be circumstances where the 'pfctl -k $oldip'...
Chris Buechler
08:35 PM Revision 737b18f2: Allow accept_unencrypted_mainmode_messages to be enabled if needed
Ermal LUÇI
06:15 PM Revision 461eac09: only kill all states if the IP changed. ticket #1629
Chris Buechler

10/29/2014

08:39 PM Revision 5274102e: Hide burst for limiters, since it doesn't do anything. more details in
ticket #3933 Chris Buechler
01:02 PM Revision a4372874: Fix a typo on array index, related to ticket #3963
Renato Botelho
06:08 AM Revision 002d286c: fix up text
Chris Buechler

10/28/2014

09:33 PM Revision eea2ad5d: FreeBSD fails to set advskew back to 0 after you set it to any other
value. That's a separate issue that needs fixing upstream, but in the mean
time, we can work around it by removing al...
Chris Buechler
07:06 PM Revision 70eef835: Remove redundancy as pointed out by phil-davis
Renato Botelho
07:06 PM Revision 44c7d73c: Decode recently created cert and key. It fixes #3964. While here, fix logical condition to create a new cert if crt or key is not present
Renato Botelho
06:31 PM Revision 569e2fdf: Add option to kill all states on IP change, currently a hidden option for more testing. ticket #1629
Chris Buechler
05:00 PM Revision fd057a56: Merge pull request #1317 from phil-davis/patch-1
Renato Botelho
04:55 PM Revision 0a8dd27b: Remove redundancy as pointed out by phil-davis
Renato Botelho
04:26 PM Revision 7c199791: Merge pull request #1297 from phil-davis/patch-23
Renato Botelho
12:17 PM Revision 143c22f7: Decode recently created cert and key. It fixes #3964. While here, fix logical condition to create a new cert if crt or key is not present
Renato Botelho
11:49 AM Revision 0a8d7fe9: Back to use listr instead of vncellt since it has small fonts and mitigate changes of go outside the sidget. It should fix #3937
Renato Botelho
11:24 AM Revision 30cb409d: Simplify logic
Renato Botelho
11:10 AM Revision bf50b0a4: Remove unecessary variables
Renato Botelho
11:08 AM Revision 9c76c0f1: Whitespace and indent
Renato Botelho

10/27/2014

08:36 PM Revision 4721677d: fix ping_hosts.sh to not ping IPsec if CARP is in backup
Chris Buechler
08:32 PM Revision 7e1aa4b7: fix ping_hosts.sh to not ping IPsec if CARP is in backup
Chris Buechler

10/26/2014

03:11 AM Revision e8b5f724: domain and search should not both be defined in resolv.conf per FreeBSD man page and handbook (only the latter is actually used). Change this to just not use domain, and set the search to the system's domain where not using the function that generates the search list for dynamic WANs.
Chris Buechler

10/24/2014

05:18 PM Revision 23ed5b78: Enable unity plugin as per request from https://forum.pfsense.org/index.php?topic=79737.msg452808#msg452808
Ermal LUÇI
02:38 PM Revision 577b776e: Warn if attempting to import IPv6 range
There is currently no code to convert an IPv6 range to a set of corresponding IPv6 subnets, so warn the user if they ... Phil Davis
02:32 PM Revision bb67ac32: Support converting an IP range to an array of addresses
so that it can be used for expanding ranges in host alias input. Phil Davis
02:25 PM Revision feb1953e: Expand range or subnet for host alias
When entering a host alias, if the user put an IP range (like 192.168.0.10-192.168.0.20) or a subnet (like 192.168.1.... Phil Davis

10/23/2014

02:25 PM Revision e112f9ee: Merge pull request #1312 from phil-davis/patch-8
Renato Botelho
02:24 PM Revision 095707fe: Merge pull request #1313 from phil-davis/patch-9
Renato Botelho

10/21/2014

06:43 PM Revision a376c57d: Teach the certificate generation code how to make a self-signed certificate, and
change the GUI cert generation code to use it. Also, move the GUI cert
generation code to its own function so we can ...
Jim Pingle
06:25 PM Revision c25d1fd7: Encode values before displaying them back to the user in notification settings
Jim Pingle
06:25 PM Revision 5b473705: Encode values before displaying them back to the user in notification settings.
Jim Pingle
05:46 PM Revision 687d0a6d: remove the command number shown in the shell prompt, it's a pointless
waste of screen space Chris Buechler
09:32 AM Revision 99ba943a: Prevent Internal Server Error if range is backwards
Fixes redmine #3950 - ip_range_to_subnet_array can easily swap the input parameters if the caller has passed/entered ... Phil Davis
09:18 AM Revision 29b3bb05: Prevent Internal Server Error if range is backwards
Fixes redmine #3950 - ip_range_to_subnet_array can easily swap the input parameters if the caller has passed/entered ... Phil Davis
06:54 AM Revision 9b86d3fe: + is a valid character in some dynamic DNS providers' usernames. Fixes #3912
Chris Buechler
05:40 AM Revision 2fb66948: hostnames can end with a . (and actually always do, it's just usually implied), so allow that here. Fixes wrong input validation in parts of nsupdate GUI, among other things.
Chris Buechler

10/20/2014

05:00 PM Revision a23adfba: Merge pull request #1306 from phil-davis/patch-3
Renato Botelho
03:41 PM Revision 6d951458: Let user decide if he wants to proceed to the upgrade when sha256 fails to download. Fixes #3576
Renato Botelho
12:31 AM Revision 2c296872: h-node should be 8
Chris Buechler
12:30 AM Revision 13ec619c: h-node should be 8
Chris Buechler

10/19/2014

11:38 PM Revision bc12ae8a: Underscores are valid characters in domains. Fixes #3219
Chris Buechler

10/17/2014

11:33 PM Revision 621fed0e: Ticket #3932 For more than 100 entries create pipes in line with the rules file to speedup the process
Ermal LUÇI

10/16/2014

09:46 PM Revision 2ac79ade: Merge pull request #1310 from phil-davis/patch-6
Renato Botelho
09:44 PM Revision 308e3042: Merge pull request #1311 from phil-davis/patch-7
Renato Botelho
07:22 PM Revision 2f17d32e: Fix the log widget to lookup hosts by DNS using a link rather than AJAX. Quick fix for now. Ticket #3829
Jim Pingle
07:21 PM Revision 497563be: Fix the log widget to lookup hosts by DNS using a link rather than AJAX. Quick fix for now. Ticket #3829
Jim Pingle

10/15/2014

06:01 PM Revision b6dbbebc: Add command line script to generate and activate a new GUI certificate.
Jim Pingle
06:01 PM Revision 2cf2c62b: Fix descriptions and cn on generated GUI cert to be consistent.
Jim Pingle
02:23 PM Revision 2f5488df: Reintroduce the vfs.forcesync systl
Ermal LUÇI
01:49 PM Revision 29fb23d4: Merge pull request #1309 from phil-davis/patch-5
Renato Botelho
12:41 PM Revision 29be59ad: Tame the poodle. Disable SSLv3.
Jim Pingle
12:40 PM Revision 5ff7f58e: Tame the poodle. Disable SSLv3.
Jim Pingle
08:41 AM Revision 466aae83: Manage dhcpleaseinlocaltime consistently
dhcpleaseinlocaltime is actually a global setting, but the setting is stored per-DHCP-enabled-interface.
The display ...
Phil Davis
06:41 AM Revision 73a96698: Provide an edit button for static mapped entries
As suggested in forum https://forum.pfsense.org/index.php?topic=82883.msg0#new
Instead of a non-functioning red plus ...
Phil Davis
05:47 AM Revision fff9ee45: Whitespace in status_dhcp_leases.php
Phil Davis
04:19 AM Revision 5d49ceac: Fix #3935 Properly allow WAN without LAN
Was broken by https://github.com/pfsense/pfsense/commit/bd0b5d2dc7a279d3473a65a11d67efb5e39392be Phil Davis

10/14/2014

11:39 PM Revision 8ff85c39: rename interfaces_carp_setup to interfaces_sync_setup and call it during bootup since it does not only relate to carp interfaces.
Ermal LUÇI
10:59 PM Revision 4703c007: Fixes #3727 Do not unset ondemand for ppp type interfaces since it is controlled here only for pppoe/l2tp
Ermal LUÇI
10:55 PM Revision 664adf38: Ticket #3789. Put a start at using the proxyurl/proxyport from system configured settings for bogons. It still does not consider the user/pass configured
Ermal LUÇI
10:36 PM Revision e02ea742: Fixes #3213. Allow up to 2900 limiters. This was set to 30 since limiters are to be controlled by mask and not created manually!
Ermal LUÇI
09:21 PM Revision febe0112: Make proper check here
Ermal LUÇI
07:30 PM Revision 7c4c77ee: Teach the certificate generation code how to make a self-signed certificate, and change the GUI cert generation code to use it. Also, move the GUI cert generation code to its own function so we can add a GUI option to regenerate it later.
Also use some more sane defaults for the contents of the default self-signed certificate's fields so it will be more ... Jim Pingle
06:44 PM Revision 1f4ad8f4: update comment to reflect breakage caused here and reference associated redmine ticket, not high priority, can be fixed later
Chris Buechler
06:21 PM Revision eb71461c: block IPv4 link-local. Per RFC 3927, hosts "MUST NOT send the packet to
any router for forwarding", and "any network device receiving such a
packet MUST NOT forward it". FreeBSD won't route...
Chris Buechler
05:41 PM Revision 69b79ff0: Fix PSK for non-ascii also here, ticket #3917
Renato Botelho
05:23 PM Revision 5a42d9ef: Fix initial console menu layout, it fixes #3884
Renato Botelho
04:50 PM Revision b907136c: Improve IPsec status page for mobile. It fixes #3917
Renato Botelho
04:46 PM Revision ca1fdcce: Add missing gettext call
Renato Botelho
04:40 PM Revision d6c9dcf9: Add missing gettext calls
Renato Botelho
04:23 PM Revision 6795e0da: Fix indent and spaces
Renato Botelho
03:50 PM Revision 123d8700: Does not accept non-ascii characters on IPsec PSK. It fiixes #3931
Renato Botelho
03:48 PM Revision a4c1fff2: Close this form early since there is another form below
Renato Botelho
04:07 AM Revision dc4a8b9e: update input_error description after changes for ticket #3491
Chris Buechler

10/13/2014

05:36 PM Revision 71c26c22: Properly set MTU for lagg interface, it fixes #3922
Renato Botelho
04:09 PM Revision 5c2e6873: Make sentence more accurate as pointed out by phil-davis
Renato Botelho
03:42 PM Revision 1c764a3a: GIF interfaces MTU must be something between 1280 and 8192, make the correct check. It fixes #3927
Renato Botelho
11:54 AM Revision 07c24bf1: Merge pull request #1308 from phil-davis/patch-4
Renato Botelho

10/11/2014

03:17 AM Revision 3b5b437b: fix text
Chris Buechler
02:54 AM Revision 0c4cd13f: fix up text on sys_adv_misc
Chris Buechler
02:10 AM Revision 5046435d: fix text and descriptions in GRE edit page
Chris Buechler
12:09 AM Revision b22f436a: s/removing/omitting/g for gateway monitor log entires. "Removing" is not necessarily correct, there are many circumstances where this runs where it wasn't there to begin with, and is potentially misleading.
Chris Buechler

10/10/2014

02:17 PM Revision 1f237bb4: Fix pf syntax s/divert/divert-to/. It should fix #3921
Renato Botelho

10/09/2014

04:42 PM Revision cce09d94: Ticket #3860 Correctly display SMTP SSL TLS boxes
After using the "Test" button, $_POST['smtpssl'] and $_POST['smtptls'] was 'on' or null - this got blindly copied bac... Phil Davis

10/08/2014

11:54 AM Revision 9da083fc: Fix an error introduced in bd0b5d2dc7 that makes system believe interfaces always mismatch
Renato Botelho
04:33 AM Revision bd0b5d2d: Remove the minimum NIC warning, this dates back to when minimum 2 NICs were supported and it made sense to throw this message at people. It's obvious a network appliance requires at least one NIC.
Chris Buechler
 

Also available in: Atom