Activity
From 10/08/2014 to 11/06/2014
11/06/2014
- 11:16 PM Revision 708af634: remove unnecessary is_array check, thanks Renato
- 10:36 PM Revision 6c3be365: Don't allow P2 local+remote network combinations that overlap with
- interface+remote-gateway of the P1. Fixes #3812
- 06:49 PM Revision dbb95f38: set install_routes=no for charon to avoid the issues noted in ticket
- 06:38 PM Revision 27c2e32e: Pass zone id to pfSense_ipfw_getTablestats(), should fix #3990
- 01:54 PM Revision 118218cb: Make sure target has scope when it's a link-local. Fixes #3969
- 01:40 PM Revision 049c74ec: Check if array is set
-
01:07 PM Revision 10435fa9: Merge pull request #1330 from phil-davis/patch-1
- 10:30 AM Revision 3f6525c1: Make sure srcip has scope when it's link-local. Should fix #3969
- 09:57 AM Revision e7752fc4: Remove extra ; and space
- 09:57 AM Revision e7a00514: Process obsolete files in shell script instead of php
- 09:57 AM Revision 48f77cef: Simplify post_upgrade_command logic and obsolete /usr/local/sbin/cvs_sync.sh instead of removing it on post_upgrade_command
- 09:29 AM Revision a68c6785: Fix to SMART disk matching
- preg_match returns 0 when the string does not match the regex.
0 does not "===" FALSE
So this check is not always wor... - 04:58 AM Revision a012464e: fix captive portal status page display
- 04:45 AM Revision bb18cfcb: fix up text
- 02:45 AM Revision e8fa9843: Pass friendlyifname to handle_argument_group, not realifname. Fixes #3984. clean up some text while here.
- 01:47 AM Revision e55e4b74: isset($_GET) seems to always evaluate to true, use something more specific. Fixes use of rc.linkup when run from CLI. Others likely fix similar circumstances, though maybe not ones that are used anywhere.
- 01:33 AM Revision c75e8aed: Disable delete_old_states in dhclient-script. rc.newwanip handles this correctly in 2.2, and this killed states in multiple circumstances where that isn't necessary nor desirable.
11/05/2014
- 11:18 PM Revision 9aec47b7: don't duplicate $message in CP log entries
- 05:31 PM Revision d9b05eb4: When an alias contain hosts, add IPs and networks to filterdns too, otherwise you end up with a pre-defined and non-persistent table. Fixes #3939
- 09:12 AM Revision fcfa23da: Merge pull request #1319 from phil-davis/patch-1
- 09:07 AM Revision 87d4456c: Merge pull request #1323 from derelict-pf/master
- 09:06 AM Revision 5940e655: Merge pull request #1326 from phil-davis/patch-5
- 09:06 AM Revision 798d8644: Fix obviously broken test in rc.initial.setlanip
- IMO might as well back-port any obviously wrong code to 2.1 branch, just in case anybody on 2.1.n cares for it or the...
- 09:05 AM Revision f81011ea: Merge pull request #1320 from phil-davis/patch-2
- 05:31 AM Revision e39c963a: fix up text
- 05:19 AM Revision 75756ab9: use a bit stronger of defaults in OpenVPN wizard
- 05:08 AM Revision 1c1fe666: Fix WINS description. It's not 1999, and it wasn't a good description for back then either. If you're running WINS at this point on your AD DCs...get rid of the Win 9x boxes, or realize you don't actually need or want WINS on anything Windows 2000 and newer.
- 05:05 AM Revision 7a22ab9b: fix up text
- 04:01 AM Revision cbc6a13f: Fix updating of hosts file on host override updates by bringing back the same behavior from previous releases.
- 03:22 AM Revision b7419cfc: skip disabled phase 1 entries in status output
- 01:57 AM Revision 261f2efe: fix NAT-T status. The 'nat' in the status array just tells how the connection is configured, not what it's actually using. Port seems to be the best way to determine what it's using. Fix up some other text while here
- 01:09 AM Revision 531686c1: use tabs rather than spaces, as most of this already did.
- 01:02 AM Revision d3c414e3: strongswan only has two options for NAT-T, force or auto.
- 12:44 AM Revision a43ddd1a: setting nmbclusters to 0 just results in an error, remove unnecessary line
- 12:34 AM Revision 41367b9c: remove old DISABLE_PHP_LINT_CHECKING, which dates way back to the CVS days and hasn't been relevant in years.
- 12:24 AM Revision 276efd64: touch up text
- 12:18 AM Revision 32171e59: fix invalid ipsec.conf
- 12:02 AM Revision f643a1f1: clean up text
11/04/2014
-
08:49 PM Revision ea20169a: Use a better method of finding disks for SMART.
- Old code was inaccurate and also listed entries that were symlinks to other disks
-
08:21 PM Revision 0810a719: Restore 3 values back on NAT-T settings Just Enable now its Auto as per strongswan default. and off disabled mobike. Ticket #3979
-
08:08 PM Revision 1db2634e: Rename the options to actually make sense with strongswan
-
08:07 PM Revision 86ef7a0a: Remove Force options since it has not meaning for now.
- 07:31 PM Revision 756d867a: fix comment
-
05:44 PM Revision 5711c446: Catch some more sensitive info when sanitizing.
-
05:43 PM Revision 8a2229e3: Catch some more sensitive info when sanitizing.
11/03/2014
- 05:27 PM Revision f384d8a5: Merge pull request #1329 from phil-davis/patch-3
- 04:43 PM Revision a3fad592: Fixup dhcpd interface enabled check
- 03:04 PM Revision ba667cc6: Fix console set interface IP address
- Problem as per forum https://forum.pfsense.org/index.php?topic=83651.0
The problem comes whenever services_dhcpd_conf... - 12:56 PM Revision ec290464: Merge pull request #1328 from wagonza/master
- 12:54 PM Revision fe9d4894: Fix indent
- 12:52 PM Revision 2783e408: Revert "Indent better"
- This reverts commit a431bfc9e698c753d9a54218af9076184deb6251.
- 12:45 PM Revision d5566d43: Make sure defaults values are actually used. Fixes #3974
- 10:48 AM Revision 7bb24e18: Merge pull request #1327 from wagonza/pfSense-master
- 10:08 AM Revision 46a989ce: Indent here as well
- 10:08 AM Revision a431bfc9: Indent better
- 10:04 AM Revision 1b436de1: Be consistent with the other pages
- 10:03 AM Revision be11b6f1: Add braces
- 08:27 AM Revision 4c3abd34: Fix obviously broken test in rc.initial.setlanip
- IMO might as well back-port any obviously wrong code to 2.1 branch, just in case anybody on 2.1.n cares for it or the...
- 07:54 AM Revision 0a89d059: Merge pull request #1324 from phil-davis/patch-3
- 06:04 AM Revision 8727b3c8: Set interface address from consol tidy output
- While trying to see why this is not working for me (forum https://forum.pfsense.org/index.php?topic=83651.0 ) I have ...
11/01/2014
-
11:20 PM Revision ce21dfca: Correct dispaly of checkboxes for ipsec
-
10:41 PM Revision 8cb7d3e3: Properly configure NAT Tranversal setting.
-
07:54 PM Revision 6af85718: Remove debugging code
-
05:56 PM Revision f3dd7e8c: Properly test if FCGI is calling or are being triggered from shell. Normally Fixes #3361
-
05:55 PM Revision 9fdc167f: Properly test if FCGI is calling or are being triggered from shell. Normally Fixes #3361
-
05:49 PM Revision d338018f: Fixes #3938. Do more error checking.
-
05:44 PM Revision 935fcedb: Fixes #3941. When optimizations of the loops were made this brought the problems of overriding default gateway by dynamic interfaces. Try to stick to the first found for now!
-
05:43 PM Revision d35dfaae: Fixes #3941. When optimizations of the loops were made this brought the problems of overriding default gateway by dynamic interfaces. Try to stick to the first found for now!
- 06:42 AM Revision 038f6e96: clarify logs generated by newwanip(v6) when restarting packages, it's not only IP changes that end up here (by design).
10/31/2014
- 10:05 PM Revision a94a16cd: s/a/an/ and speling.
- 09:55 PM Revision 162a7b4e: s/then/than/
-
02:26 PM Revision 4045cf1e: Fix two more instances of rrd.tgz renaming.
-
02:26 PM Revision 8560c756: Fix two more instances of rrd.tgz renaming.
- 02:24 AM Revision c656bc75: Fix getext to gettext typo
- 02:23 AM Revision 41aa5cd4: Fix getext to gettext typo
- 02:23 AM Revision 29af6265: Fix getext to gettext typo
- 02:22 AM Revision 24516832: Fix getext to gettext typo
- 02:21 AM Revision b3f0b2e1: Fix getext to gettext typo
- 02:10 AM Revision 687712ee: More gettext typos
- 02:10 AM Revision 95169728: More gettext typos
- 02:09 AM Revision c69f62b8: More gettext typos
- 02:07 AM Revision 91ee10c0: More gettext typos
- 01:30 AM Revision e4982b90: fix typoed gettext
10/30/2014
- 09:37 PM Revision 1ae41bfe: Kill states associated with the old WAN IP when WAN IP has changed. Retain
- hidden config option to wipe all states on IP change, as there seemed to
be circumstances where the 'pfctl -k $oldip'... -
08:35 PM Revision 737b18f2: Allow accept_unencrypted_mainmode_messages to be enabled if needed
- 06:15 PM Revision 461eac09: only kill all states if the IP changed. ticket #1629
10/29/2014
- 08:39 PM Revision 5274102e: Hide burst for limiters, since it doesn't do anything. more details in
- ticket #3933
- 01:02 PM Revision a4372874: Fix a typo on array index, related to ticket #3963
- 06:08 AM Revision 002d286c: fix up text
10/28/2014
- 09:33 PM Revision eea2ad5d: FreeBSD fails to set advskew back to 0 after you set it to any other
- value. That's a separate issue that needs fixing upstream, but in the mean
time, we can work around it by removing al... - 07:06 PM Revision 70eef835: Remove redundancy as pointed out by phil-davis
- 07:06 PM Revision 44c7d73c: Decode recently created cert and key. It fixes #3964. While here, fix logical condition to create a new cert if crt or key is not present
- 06:31 PM Revision 569e2fdf: Add option to kill all states on IP change, currently a hidden option for more testing. ticket #1629
- 05:00 PM Revision fd057a56: Merge pull request #1317 from phil-davis/patch-1
- 04:55 PM Revision 0a8dd27b: Remove redundancy as pointed out by phil-davis
- 04:26 PM Revision 7c199791: Merge pull request #1297 from phil-davis/patch-23
- 12:17 PM Revision 143c22f7: Decode recently created cert and key. It fixes #3964. While here, fix logical condition to create a new cert if crt or key is not present
- 11:49 AM Revision 0a8d7fe9: Back to use listr instead of vncellt since it has small fonts and mitigate changes of go outside the sidget. It should fix #3937
- 11:24 AM Revision 30cb409d: Simplify logic
- 11:10 AM Revision bf50b0a4: Remove unecessary variables
- 11:08 AM Revision 9c76c0f1: Whitespace and indent
10/27/2014
- 08:36 PM Revision 4721677d: fix ping_hosts.sh to not ping IPsec if CARP is in backup
- 08:32 PM Revision 7e1aa4b7: fix ping_hosts.sh to not ping IPsec if CARP is in backup
10/26/2014
10/24/2014
-
05:18 PM Revision 23ed5b78: Enable unity plugin as per request from https://forum.pfsense.org/index.php?topic=79737.msg452808#msg452808
- 02:38 PM Revision 577b776e: Warn if attempting to import IPv6 range
- There is currently no code to convert an IPv6 range to a set of corresponding IPv6 subnets, so warn the user if they ...
- 02:32 PM Revision bb67ac32: Support converting an IP range to an array of addresses
- so that it can be used for expanding ranges in host alias input.
- 02:25 PM Revision feb1953e: Expand range or subnet for host alias
- When entering a host alias, if the user put an IP range (like 192.168.0.10-192.168.0.20) or a subnet (like 192.168.1....
10/23/2014
- 02:25 PM Revision e112f9ee: Merge pull request #1312 from phil-davis/patch-8
- 02:24 PM Revision 095707fe: Merge pull request #1313 from phil-davis/patch-9
10/21/2014
-
06:43 PM Revision a376c57d: Teach the certificate generation code how to make a self-signed certificate, and
- change the GUI cert generation code to use it. Also, move the GUI cert
generation code to its own function so we can ... -
06:25 PM Revision c25d1fd7: Encode values before displaying them back to the user in notification settings
-
06:25 PM Revision 5b473705: Encode values before displaying them back to the user in notification settings.
- 05:46 PM Revision 687d0a6d: remove the command number shown in the shell prompt, it's a pointless
- waste of screen space
- 09:32 AM Revision 99ba943a: Prevent Internal Server Error if range is backwards
- Fixes redmine #3950 - ip_range_to_subnet_array can easily swap the input parameters if the caller has passed/entered ...
- 09:18 AM Revision 29b3bb05: Prevent Internal Server Error if range is backwards
- Fixes redmine #3950 - ip_range_to_subnet_array can easily swap the input parameters if the caller has passed/entered ...
- 06:54 AM Revision 9b86d3fe: + is a valid character in some dynamic DNS providers' usernames. Fixes #3912
- 05:40 AM Revision 2fb66948: hostnames can end with a . (and actually always do, it's just usually implied), so allow that here. Fixes wrong input validation in parts of nsupdate GUI, among other things.
10/20/2014
- 05:00 PM Revision a23adfba: Merge pull request #1306 from phil-davis/patch-3
- 03:41 PM Revision 6d951458: Let user decide if he wants to proceed to the upgrade when sha256 fails to download. Fixes #3576
- 12:31 AM Revision 2c296872: h-node should be 8
- 12:30 AM Revision 13ec619c: h-node should be 8
10/19/2014
10/17/2014
10/16/2014
- 09:46 PM Revision 2ac79ade: Merge pull request #1310 from phil-davis/patch-6
- 09:44 PM Revision 308e3042: Merge pull request #1311 from phil-davis/patch-7
-
07:22 PM Revision 2f17d32e: Fix the log widget to lookup hosts by DNS using a link rather than AJAX. Quick fix for now. Ticket #3829
-
07:21 PM Revision 497563be: Fix the log widget to lookup hosts by DNS using a link rather than AJAX. Quick fix for now. Ticket #3829
10/15/2014
-
06:01 PM Revision b6dbbebc: Add command line script to generate and activate a new GUI certificate.
-
06:01 PM Revision 2cf2c62b: Fix descriptions and cn on generated GUI cert to be consistent.
-
02:23 PM Revision 2f5488df: Reintroduce the vfs.forcesync systl
- 01:49 PM Revision 29fb23d4: Merge pull request #1309 from phil-davis/patch-5
-
12:41 PM Revision 29be59ad: Tame the poodle. Disable SSLv3.
-
12:40 PM Revision 5ff7f58e: Tame the poodle. Disable SSLv3.
- 08:41 AM Revision 466aae83: Manage dhcpleaseinlocaltime consistently
- dhcpleaseinlocaltime is actually a global setting, but the setting is stored per-DHCP-enabled-interface.
The display ... - 06:41 AM Revision 73a96698: Provide an edit button for static mapped entries
- As suggested in forum https://forum.pfsense.org/index.php?topic=82883.msg0#new
Instead of a non-functioning red plus ... - 05:47 AM Revision fff9ee45: Whitespace in status_dhcp_leases.php
- 04:19 AM Revision 5d49ceac: Fix #3935 Properly allow WAN without LAN
- Was broken by https://github.com/pfsense/pfsense/commit/bd0b5d2dc7a279d3473a65a11d67efb5e39392be
10/14/2014
-
11:39 PM Revision 8ff85c39: rename interfaces_carp_setup to interfaces_sync_setup and call it during bootup since it does not only relate to carp interfaces.
-
10:59 PM Revision 4703c007: Fixes #3727 Do not unset ondemand for ppp type interfaces since it is controlled here only for pppoe/l2tp
-
10:55 PM Revision 664adf38: Ticket #3789. Put a start at using the proxyurl/proxyport from system configured settings for bogons. It still does not consider the user/pass configured
-
10:36 PM Revision e02ea742: Fixes #3213. Allow up to 2900 limiters. This was set to 30 since limiters are to be controlled by mask and not created manually!
-
09:21 PM Revision febe0112: Make proper check here
-
07:30 PM Revision 7c4c77ee: Teach the certificate generation code how to make a self-signed certificate, and change the GUI cert generation code to use it. Also, move the GUI cert generation code to its own function so we can add a GUI option to regenerate it later.
- Also use some more sane defaults for the contents of the default self-signed certificate's fields so it will be more ...
- 06:44 PM Revision 1f4ad8f4: update comment to reflect breakage caused here and reference associated redmine ticket, not high priority, can be fixed later
- 06:21 PM Revision eb71461c: block IPv4 link-local. Per RFC 3927, hosts "MUST NOT send the packet to
- any router for forwarding", and "any network device receiving such a
packet MUST NOT forward it". FreeBSD won't route... - 05:41 PM Revision 69b79ff0: Fix PSK for non-ascii also here, ticket #3917
- 05:23 PM Revision 5a42d9ef: Fix initial console menu layout, it fixes #3884
- 04:50 PM Revision b907136c: Improve IPsec status page for mobile. It fixes #3917
- 04:46 PM Revision ca1fdcce: Add missing gettext call
- 04:40 PM Revision d6c9dcf9: Add missing gettext calls
- 04:23 PM Revision 6795e0da: Fix indent and spaces
- 03:50 PM Revision 123d8700: Does not accept non-ascii characters on IPsec PSK. It fiixes #3931
- 03:48 PM Revision a4c1fff2: Close this form early since there is another form below
- 04:07 AM Revision dc4a8b9e: update input_error description after changes for ticket #3491
10/13/2014
- 05:36 PM Revision 71c26c22: Properly set MTU for lagg interface, it fixes #3922
- 04:09 PM Revision 5c2e6873: Make sentence more accurate as pointed out by phil-davis
- 03:42 PM Revision 1c764a3a: GIF interfaces MTU must be something between 1280 and 8192, make the correct check. It fixes #3927
- 11:54 AM Revision 07c24bf1: Merge pull request #1308 from phil-davis/patch-4
10/11/2014
- 03:17 AM Revision 3b5b437b: fix text
- 02:54 AM Revision 0c4cd13f: fix up text on sys_adv_misc
- 02:10 AM Revision 5046435d: fix text and descriptions in GRE edit page
- 12:09 AM Revision b22f436a: s/removing/omitting/g for gateway monitor log entires. "Removing" is not necessarily correct, there are many circumstances where this runs where it wasn't there to begin with, and is potentially misleading.
10/10/2014
10/09/2014
- 04:42 PM Revision cce09d94: Ticket #3860 Correctly display SMTP SSL TLS boxes
- After using the "Test" button, $_POST['smtpssl'] and $_POST['smtptls'] was 'on' or null - this got blindly copied bac...
10/08/2014
- 11:54 AM Revision 9da083fc: Fix an error introduced in bd0b5d2dc7 that makes system believe interfaces always mismatch
- 04:33 AM Revision bd0b5d2d: Remove the minimum NIC warning, this dates back to when minimum 2 NICs were supported and it made sense to throw this message at people. It's obvious a network appliance requires at least one NIC.
Also available in: Atom