Activity
From 10/22/2014 to 11/20/2014
11/20/2014
-
08:30 PM Revision 750c9ff6: Change wording at the end of the wizard to remove "donate" since that is no longer an option
-
- 07:19 PM Revision 874599b9: Modified DynDns -> Eurodns url
-
-
03:25 PM Revision a8a642c5: Fixes #3198, check that subnet masks are equal when choosing binat type for IPSec to avoid errors on ruleset.
-
-
-
-
-
-
-
-
- 12:25 PM Revision c1a50dd7: Remove debugging code that can lead us to XSS injection, also pass variables through htmlspecialchars() to sanitize
- 12:25 PM Revision 3bdc7f59: Remove debugging code that can lead us to XSS injection, also pass variables through htmlspecialchars() to sanitize
-
-
-
-
-
- 10:59 AM Revision 140183fd: Merge pull request #1344 from phil-davis/patch-2
-
- 06:04 AM Revision 3fc92f97: Display Resolver host override aliases
- On the main unbound resolver GUI page, like they display on the dnsmasq forwarder GIU page.
As per forum: https://for... - 01:10 AM Revision 687ff78c: Only skip tap-type OpenVPN servers, not all. Fixes #3713
11/19/2014
- 10:20 PM Revision 355c2f8b: also check port of dnsmasq/unbound and skip 127.0.0.1 in resolv.conf if
- not port 53. Ticket #4022
- 10:06 PM Revision 97383d2b: don't blow away previous contents of this variable. fixes #4022
-
08:27 PM Revision 14f7afb1: Do the tests check properly related to Ticket #2786
-
-
- 04:40 PM Revision b40a44a6: Merge pull request #1343 from phil-davis/patch-1
- 04:33 PM Revision bdf5efc5: Matching bracket in vpn.inc
- Reported forum https://forum.pfsense.org/index.php?topic=84322.0
- 09:48 AM Revision b3c6783f: Make sure system_hosts_generate() is called by services_unbound_configure(). It should fix #4027
- 09:07 AM Revision bcd42a4e: Merge pull request #1342 from phil-davis/patch-1
- 08:46 AM Revision 0420f519: Remove var_dump from production code
- 08:44 AM Revision fa5b16c9: Remove var_dump from production code
-
-
-
- 05:33 AM Revision ab8d50ac: Shorten up the MAC pass-through descr. It was redundant, and for those with huge numbers of auto-added MAC passthrough entries, it adds up to a significant amount of config space (adding to delays when launching CP). helps Ticket #3932
- 01:05 AM Revision 7bc953d1: update error log in accordance with change in input validation. thanks Phil Davis for pointer
11/18/2014
-
-
- 08:40 PM Revision 3ba07784: Revert "Revert "Use unbound from ports, it should fix #4020""
- This reverts commit cd7b929ac0ee324b96baabcd216cf303be937db7.
- 08:40 PM Revision 3f5e1542: Revert "Revert "Obsolete unbound from FreeBSD base files, ticket #4020""
- This reverts commit d56dc72a43405ef7276f2b22ce4dc204ac1469fe.
-
-
- 02:03 PM Revision a8c82ef9: Pass path parameter through htmlpecialchars()
- 02:03 PM Revision f376043c: Define a local boolean var for showact to avoid security issues, also pass order parameter trough htmlspecialchars()
- 01:54 PM Revision ae38cb75: Pass path parameter through htmlpecialchars()
- 01:49 PM Revision 4b40d036: Define a local boolean var for showact to avoid security issues, also pass order parameter trough htmlspecialchars()
- 01:40 PM Revision e91a43d6: Fix whitespace and indent
- 11:21 AM Revision d56dc72a: Revert "Obsolete unbound from FreeBSD base files, ticket #4020"
- This reverts commit 8fde4ae8be00bfe7f9cfec107f6566413f41b5f7.
- 11:21 AM Revision cd7b929a: Revert "Use unbound from ports, it should fix #4020"
- This reverts commit f13df0e3f1bf45d8dab01805f757e623165c044f.
- 10:50 AM Revision f13df0e3: Use unbound from ports, it should fix #4020
- 10:48 AM Revision 8fde4ae8: Obsolete unbound from FreeBSD base files, ticket #4020
- 09:47 AM Revision 8cfaf7bc: Merge pull request #1341 from phil-davis/patch-6
- 09:46 AM Revision 8a5265b2: Merge pull request #1332 from phil-davis/patch-3
- 09:45 AM Revision a0b72ec3: Merge pull request #1331 from phil-davis/patch-2
- 05:27 AM Revision 8ce04d22: Static gateways weren't being added to the routing table after configuring at the console, fix that.
- 04:12 AM Revision ebb5ba62: check for IPs here also to avoid invalid config entries. change my last fix to v4/v6-specific
- 03:53 AM Revision d4b9bc5a: Make OpenVPN desccriptions appear in interfaces assign dropdown
- As reported in forum https://forum.pfsense.org/index.php?topic=84251.0
The fix turned out to be easy. - 02:20 AM Revision 845fd268: Verify IP address before putting into unbound config. some "Array" entries were ending up there.
- 02:15 AM Revision d25f0912: 192.254.0.0/16 isn't private, remove
- 02:04 AM Revision 83cafbc8: Clean up unbound advanced page HTML
- 12:33 AM Revision ec6ac69c: add vmx to list of ALTQ capable interfaces
11/17/2014
- 07:55 PM Revision ed6e93ea: correctly specify arrays here. Fixes last of issue with Ticket #3955, and
- probably a variety of other bugs.
- 07:54 PM Revision 224b4208: Fix pw syntax when local_group_set() is called with reset == true, -M always require a parameter
- 04:58 PM Revision a0814e4c: Merge pull request #1339 from dembeck/master
- 04:48 PM Revision d33e6008: Merge pull request #1338 from SilvioGiunge/change_system_usermanager_settings_test_page
- 04:47 PM Revision a5a0f615: Merge pull request #1340 from phil-davis/patch-5
- 04:08 PM Revision b3977493: Unbound improvements and fixes, ticket #4011:
- - Create dhcpleases_entries.conf, feed by dhcpleases
- Do not read lines created by dhcpleases from /etc/hosts to pop... - 04:03 PM Revision 21713b25: Take unbound into consideration when creating /etc/hosts, also use new unbound parameters for dhcpleases when it's necessary, helps ticket #4011
- 04:02 PM Revision d3801fdb: Clear dirty subsystem for hosts and staticmaps when unbound is enabled
-
- 11:09 AM Revision a0e387a5: Improve test in unbound_add_domain_overrides
- Actually the test condition happened to work OK! But this change makes it easier to understand what is really intended.
-
11/16/2014
- 10:09 PM Revision 1deb0924: add the last few missed files to obsoletedfiles list. Ticket #3970
- 09:58 PM Revision 9e7e2c94: Properly handle CARP IP binding in dnsmasq post-changes for FreeBSD 10.x CARP. Ticket #4012
- 08:11 PM Revision 11fb4543: show tunnelv4 on v4 the same way tunnelv6 is shown on v6
- 08:09 PM Revision bac17444: show tunnelv4 on v4 the same way tunnelv6 is shown on v6
- 09:21 AM Revision 67be8c3d: Sorted the provider names alphabetically
- 09:13 AM Revision 984abd66: Handle reverse-lookup zones for unbound
- By default unbound returns nothing for private reverse lookups. Here is some information about that from https://www....
- 07:18 AM Revision 4e82cebf: Don't show a big red "alarm"-looking message on every visit to the DHCP/DHCPv6 Server pages. Confuses people in that context, and it's not something that justifies highlighting in such a fashion. Move the message to show when you have no eligible interfaces.
- 06:05 AM Revision f2b4a29b: Don't try to clear states to gateway, all that does is wipe the entire state table unnecessarily. rc.newwanip takes care of killing states appropriately as needed when an IP changes.
- 05:37 AM Revision 9a25a85d: show user that something is actually happening when they choose php-fpm_restart
- 05:12 AM Revision b026cb18: Use appropriate size for the interface selects. Ticket #3989. clean up some text while here
- 12:40 AM Revision b5acc797: fix Unbound Advanced options
- 12:16 AM Revision 88a0937d: if unbound is enabled, assign interface IP as DNS, same behavior as dnsmasq
11/15/2014
-
02:21 PM Revision a0f9f9f7: Changes in the test page of user manager
- 07:27 AM Revision 0c50e94b: fix missing strpos parameter
11/14/2014
- 11:12 PM Revision 63d129cc: 6RD Rapid Deployment is akin to ATM Machine, PIN Number, ... read: it's redundant. let's just call it 6RD Configuration.
- 11:51 AM Revision 4dbcf2fb: Make sure dhcpleases use correct pid file for dnsmasq or unbound. Fixes #4008
- 09:51 AM Revision 9612943e: Obsolete a lot of files forgotten during all last pfSense versions. It fixes #3970
- 09:46 AM Revision e09797b0: Deal correct with filenames with spaces
- 09:46 AM Revision cc814aef: Make it possible to remove a directory on obsoletedfiles
- 09:46 AM Revision e0141b7a: sort obsoletedfiles
- 07:43 AM Revision e2accfac: Update default config.xml for 2.2. Disable dnsmasq, enable Unbound. Remove
- outdated comments that used to sort of document the config file, but had
been neglected for quite some time and aren'...
11/13/2014
- 07:58 PM Revision b95399a7: outbound NAT can apply to any type of interface, make WAN-type specific reference generic
-
- Also, while I'm here, fixup copyright.
- 05:23 PM Revision 99b7f4b2: Merge pull request #1335 from brunostein/remove_multiple_groups
- 05:22 PM Revision 98d11ee7: Merge pull request #1334 from brunostein/remove_multiple_users
- 05:21 PM Revision b6fd5c8f: Merge pull request #1336 from phil-davis/patch-4
- 04:55 PM Revision b9608ab6: Implement advanced settings in unbound.conf
- The settings are made in the Advanced tab in the GUI and are stored in the config.
Now actually implement them in unb... - 04:50 PM Revision b4e0f02b: Make sure $cpzoneid is defined and use it to call pfSense_ipfw_Tableaction() and pfSense_ipfw_getTablestats(). Also fix fieldnames for captiveportal_hostnames. It should fix #4001
- 04:50 PM Revision 0cd7c91a: Subnet parameter is mandatory for pfSense_ipfw_Tableaction(), add where it's missing
-
-
-
12:15 PM Revision b95a96ec: remove checkall checkbox
- 12:10 PM Revision 8105ffa6: Fix logic to find available next number for limiters and queues. It fixes #3998
- 12:09 PM Revision 89cf3dc0: Fix logic to find available next number for limiters and queues. It fixes #3998
-
-
-
-
-
- 11:10 AM Revision 340ce958: Add an extra protection to avoid having an empty group created
11/12/2014
-
-
-
-
-
-
-
- 05:26 PM Revision 71f45fed: Don't allow interface descriptions that are strictly numbers as that
- generates an invalid ruleset. Ticket #4005
- 05:22 PM Revision a19cc600: fix variable typo
- 05:20 PM Revision 2b114010: fix text
- 04:22 PM Revision 61dec0b0: Make sure empty group or user are not created when editing
- 02:27 PM Revision 2951a06a: Only create missing ssh keys, do not overwrite existing ones. It fixes #4003
-
-
-
- This reverts commit 694d368d818508a40bdef4f1a3f64b414b11c442.
- 06:32 AM Revision 5823df59: remove this log, it's never logged anything useful that I've seen, and unnecessarily spams the secondary's system log on every config sync.
- 01:13 AM Revision 4de91fda: hn(4) is ALTQ-capable, mark as such.
11/11/2014
-
-
-
-
-
-
-
- 01:57 PM Revision 992f60d0: Set proxy env vars on interactive shell and also on crontab to make all scripts be able to use it. Ticket #3789
- 01:33 PM Revision eacdbc4d: Revert "Ticket #3789. Put a start at using the proxyurl/proxyport from system configured settings for bogons. It still does not consider the user/pass configured"
- This reverts commit 664adf3845cf1df89769bb0ed5fc113048e0912e.
-
-
- 06:03 AM Revision 0b7dbebe: touch up text
- 05:53 AM Revision 5f4f8365: fix text
-
05:36 AM Revision 29aef6c4: Change copyright statement to reflect reality
-
- 04:24 AM Revision e7896fc8: Change copyright statement to reflect reality
- 04:13 AM Revision e120d5ce: Fix syntax error in CARP status page. Ticket #3967
- 04:07 AM Revision a1b66bec: Restore the CARP parent display in firewall_virtual_ip.php. Ticket #3967
- 03:52 AM Revision a9b305a8: Set this to /8 instead since that's how it's done in stock FreeBSD 10.1. Ticket #3941
- 03:37 AM Revision b0533f16: Setting an interface's IP to 0.0.0.0 with mask 0.0.0.0 overwrites the
- default route with that interface's link route. Later in dhclient, that
gets deleted and leaves the system with no de...
11/10/2014
-
-
-
-
-
-
- 06:38 PM Revision da66ef4f: Stop FQDN in hostname field
- 06:37 PM Revision 2d86ee95: Stop FQDN in hostname field
- 06:36 PM Revision 762fc5c0: Stop FQDN in hostname field
- using new is_unqualified_hostname function
- 06:35 PM Revision c941faa4: Stop FQDN in hostname field
- using new is_unqualified_hostname function
- 06:34 PM Revision 34c2b8f2: Stop FQDN in hostname field
- 06:33 PM Revision 84c4efc4: Stop FQDN in hostname field
- 06:31 PM Revision 6bcbd862: Add is_unqualified_hostname function
-
-
-
-
-
-
-
-
11/07/2014
-
-
-
- 05:19 AM Revision bcb83c9e: Reintroduce graphcounter var to traffic_graphs.widget.php
- This counter got lost in commit https://github.com/pfsense/pfsense/commit/ee965a5c7bf37b852795e1201688e3b20bf3d8d1
Bu... - 04:11 AM Revision a8380480: fix text
- 04:09 AM Revision 6859f881: show interface name, not identifier
- 04:03 AM Revision d3d23754: fix text, PPPoE Server, not VPN
- 02:19 AM Revision 7bd413eb: add a route debug option to log info about route commands executed (where those aren't already logged) to help with troubleshooting various routing scenarios.
11/06/2014
- 11:16 PM Revision 708af634: remove unnecessary is_array check, thanks Renato
- 10:36 PM Revision 6c3be365: Don't allow P2 local+remote network combinations that overlap with
- interface+remote-gateway of the P1. Fixes #3812
- 06:49 PM Revision dbb95f38: set install_routes=no for charon to avoid the issues noted in ticket
- 06:38 PM Revision 27c2e32e: Pass zone id to pfSense_ipfw_getTablestats(), should fix #3990
- 01:54 PM Revision 118218cb: Make sure target has scope when it's a link-local. Fixes #3969
- 01:40 PM Revision 049c74ec: Check if array is set
-
- 10:30 AM Revision 3f6525c1: Make sure srcip has scope when it's link-local. Should fix #3969
- 09:57 AM Revision e7752fc4: Remove extra ; and space
- 09:57 AM Revision e7a00514: Process obsolete files in shell script instead of php
- 09:57 AM Revision 48f77cef: Simplify post_upgrade_command logic and obsolete /usr/local/sbin/cvs_sync.sh instead of removing it on post_upgrade_command
- 09:29 AM Revision a68c6785: Fix to SMART disk matching
- preg_match returns 0 when the string does not match the regex.
0 does not "===" FALSE
So this check is not always wor... - 04:58 AM Revision a012464e: fix captive portal status page display
- 04:45 AM Revision bb18cfcb: fix up text
- 02:45 AM Revision e8fa9843: Pass friendlyifname to handle_argument_group, not realifname. Fixes #3984. clean up some text while here.
- 01:47 AM Revision e55e4b74: isset($_GET) seems to always evaluate to true, use something more specific. Fixes use of rc.linkup when run from CLI. Others likely fix similar circumstances, though maybe not ones that are used anywhere.
- 01:33 AM Revision c75e8aed: Disable delete_old_states in dhclient-script. rc.newwanip handles this correctly in 2.2, and this killed states in multiple circumstances where that isn't necessary nor desirable.
11/05/2014
- 11:18 PM Revision 9aec47b7: don't duplicate $message in CP log entries
- 05:31 PM Revision d9b05eb4: When an alias contain hosts, add IPs and networks to filterdns too, otherwise you end up with a pre-defined and non-persistent table. Fixes #3939
- 09:12 AM Revision fcfa23da: Merge pull request #1319 from phil-davis/patch-1
- 09:07 AM Revision 87d4456c: Merge pull request #1323 from derelict-pf/master
- 09:06 AM Revision 5940e655: Merge pull request #1326 from phil-davis/patch-5
- 09:06 AM Revision 798d8644: Fix obviously broken test in rc.initial.setlanip
- IMO might as well back-port any obviously wrong code to 2.1 branch, just in case anybody on 2.1.n cares for it or the...
- 09:05 AM Revision f81011ea: Merge pull request #1320 from phil-davis/patch-2
- 05:31 AM Revision e39c963a: fix up text
- 05:19 AM Revision 75756ab9: use a bit stronger of defaults in OpenVPN wizard
- 05:08 AM Revision 1c1fe666: Fix WINS description. It's not 1999, and it wasn't a good description for back then either. If you're running WINS at this point on your AD DCs...get rid of the Win 9x boxes, or realize you don't actually need or want WINS on anything Windows 2000 and newer.
- 05:05 AM Revision 7a22ab9b: fix up text
- 04:01 AM Revision cbc6a13f: Fix updating of hosts file on host override updates by bringing back the same behavior from previous releases.
- 03:22 AM Revision b7419cfc: skip disabled phase 1 entries in status output
- 01:57 AM Revision 261f2efe: fix NAT-T status. The 'nat' in the status array just tells how the connection is configured, not what it's actually using. Port seems to be the best way to determine what it's using. Fix up some other text while here
- 01:09 AM Revision 531686c1: use tabs rather than spaces, as most of this already did.
- 01:02 AM Revision d3c414e3: strongswan only has two options for NAT-T, force or auto.
- 12:44 AM Revision a43ddd1a: setting nmbclusters to 0 just results in an error, remove unnecessary line
- 12:34 AM Revision 41367b9c: remove old DISABLE_PHP_LINT_CHECKING, which dates way back to the CVS days and hasn't been relevant in years.
- 12:24 AM Revision 276efd64: touch up text
- 12:18 AM Revision 32171e59: fix invalid ipsec.conf
- 12:02 AM Revision f643a1f1: clean up text
11/04/2014
-
- Old code was inaccurate and also listed entries that were symlinks to other disks
-
-
-
- 07:31 PM Revision 756d867a: fix comment
-
-
11/03/2014
- 05:27 PM Revision f384d8a5: Merge pull request #1329 from phil-davis/patch-3
- 04:43 PM Revision a3fad592: Fixup dhcpd interface enabled check
- 03:04 PM Revision ba667cc6: Fix console set interface IP address
- Problem as per forum https://forum.pfsense.org/index.php?topic=83651.0
The problem comes whenever services_dhcpd_conf... - 12:56 PM Revision ec290464: Merge pull request #1328 from wagonza/master
- 12:54 PM Revision fe9d4894: Fix indent
- 12:52 PM Revision 2783e408: Revert "Indent better"
- This reverts commit a431bfc9e698c753d9a54218af9076184deb6251.
- 12:45 PM Revision d5566d43: Make sure defaults values are actually used. Fixes #3974
- 10:48 AM Revision 7bb24e18: Merge pull request #1327 from wagonza/pfSense-master
- 10:08 AM Revision 46a989ce: Indent here as well
- 10:08 AM Revision a431bfc9: Indent better
- 10:04 AM Revision 1b436de1: Be consistent with the other pages
- 10:03 AM Revision be11b6f1: Add braces
- 08:27 AM Revision 4c3abd34: Fix obviously broken test in rc.initial.setlanip
- IMO might as well back-port any obviously wrong code to 2.1 branch, just in case anybody on 2.1.n cares for it or the...
- 07:54 AM Revision 0a89d059: Merge pull request #1324 from phil-davis/patch-3
- 06:04 AM Revision 8727b3c8: Set interface address from consol tidy output
- While trying to see why this is not working for me (forum https://forum.pfsense.org/index.php?topic=83651.0 ) I have ...
11/01/2014
-
-
-
-
-
-
-
-
- 06:42 AM Revision 038f6e96: clarify logs generated by newwanip(v6) when restarting packages, it's not only IP changes that end up here (by design).
10/31/2014
- 10:05 PM Revision a94a16cd: s/a/an/ and speling.
- 09:55 PM Revision 162a7b4e: s/then/than/
-
-
- 02:24 AM Revision c656bc75: Fix getext to gettext typo
- 02:23 AM Revision 41aa5cd4: Fix getext to gettext typo
- 02:23 AM Revision 29af6265: Fix getext to gettext typo
- 02:22 AM Revision 24516832: Fix getext to gettext typo
- 02:21 AM Revision b3f0b2e1: Fix getext to gettext typo
- 02:10 AM Revision 687712ee: More gettext typos
- 02:10 AM Revision 95169728: More gettext typos
- 02:09 AM Revision c69f62b8: More gettext typos
- 02:07 AM Revision 91ee10c0: More gettext typos
- 01:30 AM Revision e4982b90: fix typoed gettext
10/30/2014
- 09:37 PM Revision 1ae41bfe: Kill states associated with the old WAN IP when WAN IP has changed. Retain
- hidden config option to wipe all states on IP change, as there seemed to
be circumstances where the 'pfctl -k $oldip'... -
- 06:15 PM Revision 461eac09: only kill all states if the IP changed. ticket #1629
10/29/2014
- 08:39 PM Revision 5274102e: Hide burst for limiters, since it doesn't do anything. more details in
- ticket #3933
- 01:02 PM Revision a4372874: Fix a typo on array index, related to ticket #3963
- 06:08 AM Revision 002d286c: fix up text
10/28/2014
- 09:33 PM Revision eea2ad5d: FreeBSD fails to set advskew back to 0 after you set it to any other
- value. That's a separate issue that needs fixing upstream, but in the mean
time, we can work around it by removing al... - 07:06 PM Revision 70eef835: Remove redundancy as pointed out by phil-davis
- 07:06 PM Revision 44c7d73c: Decode recently created cert and key. It fixes #3964. While here, fix logical condition to create a new cert if crt or key is not present
- 06:31 PM Revision 569e2fdf: Add option to kill all states on IP change, currently a hidden option for more testing. ticket #1629
- 05:00 PM Revision fd057a56: Merge pull request #1317 from phil-davis/patch-1
- 04:55 PM Revision 0a8dd27b: Remove redundancy as pointed out by phil-davis
- 04:26 PM Revision 7c199791: Merge pull request #1297 from phil-davis/patch-23
- 12:17 PM Revision 143c22f7: Decode recently created cert and key. It fixes #3964. While here, fix logical condition to create a new cert if crt or key is not present
- 11:49 AM Revision 0a8d7fe9: Back to use listr instead of vncellt since it has small fonts and mitigate changes of go outside the sidget. It should fix #3937
- 11:24 AM Revision 30cb409d: Simplify logic
- 11:10 AM Revision bf50b0a4: Remove unecessary variables
- 11:08 AM Revision 9c76c0f1: Whitespace and indent
10/27/2014
- 08:36 PM Revision 4721677d: fix ping_hosts.sh to not ping IPsec if CARP is in backup
- 08:32 PM Revision 7e1aa4b7: fix ping_hosts.sh to not ping IPsec if CARP is in backup
10/26/2014
10/24/2014
-
- 02:38 PM Revision 577b776e: Warn if attempting to import IPv6 range
- There is currently no code to convert an IPv6 range to a set of corresponding IPv6 subnets, so warn the user if they ...
- 02:32 PM Revision bb67ac32: Support converting an IP range to an array of addresses
- so that it can be used for expanding ranges in host alias input.
- 02:25 PM Revision feb1953e: Expand range or subnet for host alias
- When entering a host alias, if the user put an IP range (like 192.168.0.10-192.168.0.20) or a subnet (like 192.168.1....
10/23/2014
Also available in: Atom