Activity
From 11/21/2014 to 12/20/2014
12/20/2014
- 08:13 PM Revision 30501526: Prevent resolvconf(8) from stomping all over our newly generated
- resolv.conf and subsequent updates.
- 06:12 PM Revision fe416714: Put line break only if IPv4 address exists
- This makes a line for the IPv4 address if it is there. If the IPv4 address goes away, the whole line will disappear, ...
- 06:05 PM Revision 7a0c88f8: Interfaces widget remove blank line if no IPv4 address
- If the interface had an IPv6 address but no IPv4 address, there was a blank line where the IPv4 address would have be...
- 05:16 PM Revision 6e795218: Set Interfaces widget IPv6 address
- Now that get_interfacestatus() is returning us the IPv6 address, and interfaces.widget.php has a div to put it in, ac...
- 05:12 PM Revision d7884992: Send IPv4 and IPv6 address in get_interfacestatus
- And make them strong (bold), which is how they are displayed originally by interfaces.widget.php
This allows the AJAX... - 05:08 PM Revision 2795f40b: Interfaces widget create all div
- All div for the various things need to be created here, so that later AJAX can switch the necessary things on/off and...
- 01:57 AM Revision 5b4ed0e1: Use correct port for viewing portal page contents. Ticket #4125
- 01:56 AM Revision 5a098344: Use correct port for viewing portal page contents. Ticket #4125
12/19/2014
-
09:18 PM Revision 8cd0dba6: Fix help for UPnP/NAT-PMP
-
-
08:25 PM Revision 41c4ef39: Correct the leftsubnet specification for transport mode.
-
-
-
-
- 06:43 PM Revision 83aaa431: Remove option that has now been merged into infra-host-ttl.
-
-
-
-
-
- 12:22 AM Revision 19ddaa31: include $myid in these PSK lines. Ticket #4126
- 12:19 AM Revision 42a10991: include $myid in these PSK lines. Ticket #4126
12/18/2014
- 06:13 PM Revision bd1a6267: Simplify logic using a proper function as spotted by Ermal
- 06:13 PM Revision 019c7b2d: Simplify logic using a proper function as spotted by Ermal
- 03:52 PM Revision 0fcab48b: Replace ; by newlines when upgrading custom_options from unbound packages, it's related to ticket #4090
- 03:51 PM Revision c23f4d8f: Replace ; by newlines when upgrading custom_options from unbound packages, it's related to ticket #4090
-
-
- 11:54 AM Revision 1a2ea2cc: Display better message when booting and awaiting package reinstall
- 11:21 AM Revision 906ae455: Merge pull request #1391 from ExolonDX/master
- 10:03 AM Revision 02f65ece: Add openvpn interfaces to group when they are created, it should fix #4110
- 10:03 AM Revision afe81d69: Check if interface exist before try to add it to group
- 10:03 AM Revision da4f91a9: Add openvpn interfaces to group when they are created, it should fix #4110
- 10:02 AM Revision 67de15fc: Check if interface exist before try to add it to group
- 07:17 AM Revision 5454fd1b: Allow dot at end of FQDN for a host
- Redmine #4124 has discussion of this.
- 04:24 AM Revision 2ccdd739: Display better message when booting and awaiting package reinstall
- 04:22 AM Revision 8aec06e0: Display better message when booting and awaiting package reinstall
12/17/2014
- 06:48 PM Revision 55092b0e: Bump latest_config version that I forgot on previous commit. Spotted by Jim Pingle
- 06:47 PM Revision a03551c2: Bump latest_config version that I forgot on previous commit. Spotted by Jim Pingle
- 06:25 PM Revision 264d17a5: syslogd can't just be HUPed to pick up its new config, as many of those
- are command line arguments. Go back to 2.1x and prior behavior of TERM and
restart. Fixes source IP use with syslog a... - 06:21 PM Revision f1905a3e: syslogd can't just be HUPed to pick up its new config, as many of those
- are command line arguments. Go back to 2.1x and prior behavior of TERM and
restart. Fixes source IP use with syslog a... - 06:17 PM Revision b0885c5a: Add a cron item to expire items from webConfiguratorlockout, also add config upgrade code. This fixes #4122
- 06:17 PM Revision 56c8376a: Add a cron item to expire items from webConfiguratorlockout, also add config upgrade code. This fixes #4122
- 05:27 PM Revision aafa7657: Check if interface is disabled when configuring DHCP server. It fixes #4119
- 05:27 PM Revision b2379012: Disable dhcp server when interface is disabled. Ticket #4119
- 05:27 PM Revision a030a437: Do not check disabled interfaces, ticket #4119
- 05:26 PM Revision 57006646: Check if interface is disabled when configuring DHCP server. It fixes #4119
- 05:25 PM Revision f4c40620: Disable dhcp server when interface is disabled. Ticket #4119
- 05:25 PM Revision e94692c0: Do not check disabled interfaces, ticket #4119
-
-
12/16/2014
-
-
-
-
-
-
-
-
-
-
-
-
- 07:49 PM Revision c2e6e8e2: Remove "link", "vlink" and "alink" from BODY tag
- This is a positional change to remove "link", "vlink" and "alink" from
the BODY tag, the following themes do not have... -
-
- 07:13 PM Revision 24a87e44: Use provided function to change user's password
- 07:10 PM Revision c445a9f5: Use provided function to change user's password
-
-
-
- See also: ATM Machine, ISP Provider, DMZ Zone, LCD Display, GMT Time...
-
- See also: ATM Machine, ISP Provider, DMZ Zone, LCD Display, GMT Time...
-
-
-
-
-
-
- 01:34 PM Revision 9d26addd: Make logic more visible as suggested by Ermal
- 01:33 PM Revision 136217fd: Make logic more visible as suggested by Ermal
- 01:28 PM Revision d4ea38c5: Tidy up "widgets" XHTML
- Add CDATA sections to scripts
Add ALT to image tags and close image tags
DIV tag cannot be inside a STRONG tag, so sw... - 01:28 PM Revision 04e722a6: Merge pull request #1388 from ExolonDX/master
- 12:22 PM Revision 936e554b: Cleanup aliases when temporarily disable CARP, fixes #4116
- 12:22 PM Revision 43157c8f: Teach interface_vip_bring_down() to deal with IP Alias over CARP
- 12:19 PM Revision dd0cb9fc: Cleanup aliases when temporarily disable CARP, fixes #4116
- 12:18 PM Revision 28268a4a: Teach interface_vip_bring_down() to deal with IP Alias over CARP
12/15/2014
-
-
-
-
- 07:18 PM Revision 73041230: Add DNS Resolver to the list of services to be sync'd on HA, make sure it and DNS Forwarder are not enabled simultaneously. It fixes #4067
- 07:18 PM Revision d691465c: Fix password field name
- 07:18 PM Revision 03226d75: Use newline to separate unbound custom options during config upgrade, it should fix #4104
- 07:18 PM Revision 8f3b2775: Add a shortcut for unbound and enable it
- 07:18 PM Revision f6179f4c: Fix password field name to apply correct style
- 07:16 PM Revision c25caf5b: Add DNS Resolver to the list of services to be sync'd on HA, make sure it and DNS Forwarder are not enabled simultaneously. It fixes #4067
- 06:43 PM Revision fa2122b0: Fix password field name
- 06:42 PM Revision 387ab31a: Use newline to separate unbound custom options during config upgrade, it should fix #4104
- 06:18 PM Revision 6bb9db05: Add a shortcut for unbound and enable it
- 04:47 PM Revision 99441482: Fix password field name to apply correct style
- 12:46 PM Revision 5cfd9481: Add missing BR tags and fix display with pfsense_ng_fs theme. It fixes #4115
- 12:44 PM Revision e51d6e1b: Add missing BR tags and fix display with pfsense_ng_fs theme. It fixes #4115
12/14/2014
- 10:03 PM Revision 6678fdd1: Tidy up "widgets" XHTML
- Add CDATA sections to scripts
Add ALT to image tags and close image tags
DIV tag cannot be inside a STRONG tag, so sw...
12/13/2014
- 07:25 PM Revision 7dd5f0f7: Where binding Unbound to *:53, set "interface-automatic: yes" so replies are sourced from the correct IP. Ideally this should always work this way, but setting this causes Unbound to bind to *:53, which shouldn't happen where specific interfaces are chosen. Ticket #4111
- 07:24 PM Revision f358fe3f: Where binding Unbound to *:53, set "interface-automatic: yes" so replies are sourced from the correct IP. Ideally this should always work this way, but setting this causes Unbound to bind to *:53, which shouldn't happen where specific interfaces are chosen. Ticket #4111
12/12/2014
- 05:41 PM Revision b78111c4: Validation of y/n answers in setlanip
- At the moment the user can answer "yes" to most of the questions, but then later code only checks if the answer is "y...
- 05:40 PM Revision 00aa3b79: Merge pull request #1385 from phil-davis/patch-11
- 05:16 PM Revision e6abcccc: Validation of y/n answers in setlanip
- At the moment the user can answer "yes" to most of the questions, but then later code only checks if the answer is "y...
- 04:56 PM Revision d7b9b993: Update service providers xml to sync with upstream
- 04:55 PM Revision 38e1541b: Update service providers xml to sync with upstream
- 04:49 PM Revision a7d7cd7f: rc.initial.setlanip fix validation of CIDR within range
- Currently this allows the user to input any number for the CIDR. I happened to try 44 for an IPv4 CIDR when playing.
... - 04:49 PM Revision 3bc55eee: Merge pull request #1383 from phil-davis/patch-10
- 03:19 PM Revision 87657b95: rc.initial.setlanip fix validation of CIDR within range
- Currently this allows the user to input any number for the CIDR. I happened to try 44 for an IPv4 CIDR when playing.
... - 02:30 PM Revision 245f78d2: Regenerate Turkish mo
- 02:30 PM Revision 6220186b: Update po from last pot
- 02:30 PM Revision 4770b341: Update Turkish translation file from last version available on old translation server
- 02:29 PM Revision c45c6ccd: Regenerate Turkish mo
- 02:28 PM Revision 019645ff: Update po from last pot
- 02:27 PM Revision 66f8965d: Update Turkish translation file from last version available on old translation server
- 02:14 PM Revision 6e84f8c0: Regenerate pfSense.pot
- 02:13 PM Revision fb0495f3: Regenerate pfSense.pot
- 11:17 AM Revision 9b8f26cf: Fix password confirmation name to make style working as expected. Fixes #3992
- 11:17 AM Revision 2e65babb: Fix password confirmation name to make style working as expected. Fixes #3992
- 10:40 AM Revision 946e55bd: Base URL must be specified when alturlenable on
- I had a 2.1.5 system that I was wondering why the dashboard always said it could not check for updates. I discovered ...
- 10:40 AM Revision a516c81e: Merge pull request #1381 from phil-davis/patch-8
- 04:53 AM Revision a93bc299: Base URL must be specified when alturlenable on
- I had a 2.1.5 system that I was wondering why the dashboard always said it could not check for updates. I discovered ...
12/11/2014
- 09:50 PM Revision fcc96054: Split ICMP and ICMPv6 types on Firewall Rules
- - Remove redundant declaration of $icmptypes and move it to a common
place (filter.inc)
- Add missing ICMP types for ... - 09:49 PM Revision c03ed2fb: Fix indent and spaces
- 09:47 PM Revision d3bf4a41: Split ICMP and ICMPv6 types on Firewall Rules
- - Remove redundant declaration of $icmptypes and move it to a common
place (filter.inc)
- Add missing ICMP types for ... - 08:55 PM Revision 0ab1f107: Fix indent and spaces
- 06:46 PM Revision 470b14d8: Fix #4099:
- - When interface is 'lo0', strpos returns 0, that is erroneously
considered false (boolean) on the test. Be more stri... - 06:43 PM Revision 11bdc638: Fix #4099:
- - When interface is 'lo0', strpos returns 0, that is erroneously
considered false (boolean) on the test. Be more stri... - 05:05 PM Revision 79fabc8f: Fix #3790:
- - Do not let 2 interfaces to setup the same track6 prefix id
- Show correct prefix id range for each interface - 05:03 PM Revision 986fd3d9: Fix #3790:
- - Do not let 2 interfaces to setup the same track6 prefix id
- Show correct prefix id range for each interface - 09:40 AM Revision bf310189: Change text and color delimiter to carat sign
- To match change made in functions.inc.php
- 09:40 AM Revision f2d27f93: Gateway Status Widget keep IP address bold
- Forum: https://forum.pfsense.org/index.php?topic=85187.msg467438#msg467438
The bold is specified literally in gatewa... - 09:39 AM Revision 8d5be861: Merge pull request #1378 from phil-davis/patch-10
- 09:38 AM Revision 07ab838e: Improve check if no OpenVPN defined
- Alternate version of https://github.com/pfsense/pfsense/pull/1376
This version retains the is_array() checks and then... - 09:37 AM Revision 21e71044: Merge pull request #1379 from phil-davis/patch-11
- 02:39 AM Revision 04c0724e: Improve check if no OpenVPN defined
- Alternate version of https://github.com/pfsense/pfsense/pull/1376
This version retains the is_array() checks and then... - 01:30 AM Revision 2cc10e2c: Change text and color delimiter to carat sign
- To match change made in functions.inc.php
- 01:28 AM Revision 6385c335: Gateway Status Widget keep IP address bold
- Forum: https://forum.pfsense.org/index.php?topic=85187.msg467438#msg467438
The bold is specified literally in gatewa...
12/10/2014
-
- This way, a router running NanoBSD won't sit at a db> prompt indefinitely if it crashes.
-
- This way, a router running NanoBSD won't sit at a db> prompt indefinitely if it crashes.
- 03:40 PM Revision e519371d: Fixup text rule should be route
- This code was obviously taken from firewall rules and reused here without changing the word "rule" to "route".
- 03:39 PM Revision b3986dd1: Merge pull request #1377 from phil-davis/patch-9
- 03:32 PM Revision f4d094b4: Fixup text rule should be route
- This code was obviously taken from firewall rules and reused here without changing the word "rule" to "route".
- 02:14 PM Revision 59c5e4bd: Remove spurious '>', fixes #4091
- 02:14 PM Revision d7563eeb: Remove spurious '>', fixes #4091
- 11:58 AM Revision b8dd129d: Make sure this message is only displayed on console
- 11:58 AM Revision 52e97bcc: Make sure this message is only displayed on console
- 11:56 AM Revision c02acef2: get_failover_interface() is already called inside get_interface_ip(v6), no need to call it twice. It should fix #4089
- 11:55 AM Revision 76f12171: get_failover_interface() is already called inside get_interface_ip(v6), no need to call it twice. It should fix #4089
12/08/2014
- 09:45 PM Revision e2a319f3: Use exit instead of return here, otherwise script's return code is always 0 and user with wrong password is authenticated
- 09:44 PM Revision 9a92e2ef: Use exit instead of return here, otherwise script's return code is always 0 and user with wrong password is authenticated
12/07/2014
- 10:32 PM Revision 34d03237: Standardise css list padding
- for _corporate
- 10:32 PM Revision 63d41775: Standardise css list padding
- for code-red theme
- 10:32 PM Revision 40a27d2c: Standardise css list padding
- for metallic theme
- 10:32 PM Revision fa367078: Standardise css list padding
- for nervecenter theme
- 10:32 PM Revision ed1457e3: Standardise css list padding
- for pfsense-dropdown theme
- 10:32 PM Revision ba1ff148: Standardise css list padding
- for pfsense theme
- 10:32 PM Revision 433f5949: Standardise css list padding
- for pfsense_ng_fs theme
- 10:32 PM Revision 93365bbd: Standardise css list padding
- for the_wall theme
- 10:32 PM Revision 14bd365a: Provide success return indication from console_configure_dhcpd
- Recent commit https://github.com/pfsense/pfsense/commit/9ea554ee5cb25ea3bf5bb6bf7997c6c7379ce349 added testing of the...
- 10:31 PM Revision ae0daa80: Merge pull request #1371 from phil-davis/patch-6
- 10:30 PM Revision 47a12231: Merge pull request #1370 from phil-davis/patch-5
- 04:56 PM Revision eca5402b: Provide success return indication from console_configure_dhcpd
- Recent commit https://github.com/pfsense/pfsense/commit/9ea554ee5cb25ea3bf5bb6bf7997c6c7379ce349 added testing of the...
- 04:28 PM Revision 2ce15f63: Standardise css list padding
- for the_wall theme
- 04:26 PM Revision fe9273cf: Standardise css list padding
- for pfsense_ng_fs theme
- 04:24 PM Revision 4fb660ae: Standardise css list padding
- for pfsense theme
- 04:23 PM Revision 6e74f280: Standardise css list padding
- for pfsense-dropdown theme
- 04:21 PM Revision 09b095b0: Standardise css list padding
- for nervecenter theme
- 04:19 PM Revision af978cb9: Standardise css list padding
- for metallic theme
- 04:16 PM Revision 04d21981: Standardise css list padding
- for code-red theme
- 04:11 PM Revision 66591feb: Standardise css list padding
- for _corporate
- 03:42 PM Revision cd4d0c29: Standardise css list padding
- On Status->Services, the Services Status widget when a service status is down, the red "x" button does not line up wi...
- 03:41 PM Revision e17748e2: Typo CIDR in UPnP GUI page
- As reported by johnpoz https://forum.pfsense.org/index.php?topic=84964.0
- 03:41 PM Revision f3dac61c: Merge pull request #1368 from phil-davis/patch-3
- 03:40 PM Revision f060bd2a: Merge pull request #1369 from phil-davis/patch-4
- 01:25 PM Revision 9241d942: Typo CIDR in UPnP GUI page
- As reported by johnpoz https://forum.pfsense.org/index.php?topic=84964.0
- 09:47 AM Revision 0f3d668f: Standardise css list padding
- On Status->Services, the Services Status widget when a service status is down, the red "x" button does not line up wi...
12/05/2014
- 09:06 PM Revision a4e07baf: Disable RC4 ciphers in lighttpd
- 09:05 PM Revision fa10244f: Disable RC4 ciphers in lighttpd
- 07:04 PM Revision 72e79bc7: Call filter_configure_sync() is a better fix for #4066, as pointed by Ermal
- 07:04 PM Revision 56c6993c: Call filter_configure_sync() is a better fix for #4066, as pointed by Ermal
- 06:23 PM Revision 6a7dae05: Fix #4066:
- Make sure pf is configured before other services are restarted when WAN
IP changes. The way it was before, 'pass out'... - 06:20 PM Revision 6d744cc8: Fix #4066:
- Make sure pf is configured before other services are restarted when WAN
IP changes. The way it was before, 'pass out'... - 01:06 PM Revision 5c3dae18: Add RELENG_2_2 to gitsync
- 01:06 PM Revision a911f2e2: Set text and color of Gateways Widget Status
- getstats.php calls functions.inc.php get_stats(), which calls get_gatewaystats().
get_gatewaystats() now returns the ... - 01:06 PM Revision 3002168f: Explicitly pass gateway status and color
- This code was passing a whole load of html to attempt to set various properties of the Gateways Widget Status column ...
- 01:06 PM Revision d68be5d6: Use proper listr class for Gateways Widget Status
- The Gateways Widget Status was not using the listr class, and so it was missing the borders for the right and bottom ...
- 01:05 PM Revision 8da00522: Add RELENG_2_2 to gitsync
- 01:05 PM Revision 75f65f9c: Merge pull request #1367 from phil-davis/patch-2
- 12:09 PM Revision 95d045fc: Set text and color of Gateways Widget Status
- getstats.php calls functions.inc.php get_stats(), which calls get_gatewaystats().
get_gatewaystats() now returns the ... - 11:58 AM Revision beb7d9e3: Explicitly pass gateway status and color
- This code was passing a whole load of html to attempt to set various properties of the Gateways Widget Status column ...
- 11:51 AM Revision 6404148c: Use proper listr class for Gateways Widget Status
- The Gateways Widget Status was not using the listr class, and so it was missing the borders for the right and bottom ...
- 09:01 AM Revision d4337df8: Fix gateway widget status update
- Redmine #4077
- 09:00 AM Revision d57c55ca: Merge pull request #1366 from phil-davis/patch-1
- 07:55 AM Revision 5eeee40f: Fix gateway widget status update
- Redmine #4077
- 05:39 AM Revision 04d307d8: dyn.dns.he.net uses a self-signed cert, disable verification for it.
- 05:38 AM Revision 393dac91: dyn.dns.he.net uses a self-signed cert, disable verification for it.
- 05:19 AM Revision d69414fe: Don't try to launch 3gstats unless it's on a valid device.
- 05:19 AM Revision 514512dd: Don't try to launch 3gstats unless it's on a valid device.
- 05:11 AM Revision a0b470ee: Proper CA certificates are in place to validate SSL in these cases where it previously couldn't be, remove disabling of verification.
- 05:10 AM Revision 5ed9fab7: Proper CA certificates are in place to validate SSL in these cases where it previously couldn't be, remove disabling of verification.
- 03:02 AM Revision 95bd66a0: replace spaces with tabs
- 03:00 AM Revision 590aa3e7: After discussion with Ermal, remove this to force consumers to send things
- properly. I fixed the scenario in Unbound where it was sending IPs to
these functions rather than an interface, so th... - 02:58 AM Revision 32a81561: Don't include link-locals as unbound interface candidates
- Unbound does not presently support link-local interfaces.
- 02:57 AM Revision 8742f799: Merge pull request #1365 from jean-m-cyr/master
12/04/2014
- 11:34 PM Revision 0af2fab6: The time has come - bump to 2.2-RC
- 11:20 PM Revision b3460e3d: The time has come - bump to 2.2-RC
- 09:58 PM Revision 1d57a7f7: After discussion with Ermal, remove this to force consumers to send things
- properly. I fixed the scenario in Unbound where it was sending IPs to
these functions rather than an interface, so th... - 06:18 PM Revision a623defd: replace spaces with tabs
- 06:07 PM Revision ad62d077: Don't include link-locals as unbound interface candidates
- Unbound does not presently support link-local interfaces.
- 05:52 PM Revision d0b5ddce: Fix update url since now we have RELENG_2_2
-
- Revert "Can't skip this if booting, ends up breaking config. Ticket #4071"
This reverts commit effb3a3cfe4e57b781f35... -
- 10:40 AM Revision b8959f3c: Provide friendly descr in error message in Interfaces Assign
- I was doing drastic things testing some stuff, swapping WAN and OPT1 interfaces in Interfaces->Assign. I accidentally...
- 10:39 AM Revision 9fc7e40d: Merge pull request #1364 from phil-davis/patch-4
- 10:31 AM Revision f0eef2ef: Provide friendly descr in error message in Interfaces Assign
- I was doing drastic things testing some stuff, swapping WAN and OPT1 interfaces in Interfaces->Assign. I accidentally...
- 10:01 AM Revision 01b8dbb0: Put -4 in the right place in ntpq clockver command #4074
- I had pasted it in here between "-c" and "clockvar", that was not good.
That's all I have for #4074 (I hope) - 10:01 AM Revision 9bcb0919: Use IPv4 for ntpq if IPv6 not allowed in widget #4074
- Similar code here. Shame it was not in a subroutine called from both places, but not about to re-engineer that now:)
- 10:01 AM Revision 99a80364: Merge pull request #1363 from phil-davis/patch-3
- 10:00 AM Revision 2966bc42: Merge pull request #1362 from phil-davis/patch-2
-
- Revert "Can't skip this if booting, ends up breaking config. Ticket #4071"
This reverts commit effb3a3cfe4e57b781f35... -
- 08:05 AM Revision 62a407da: Put -4 in the right place in ntpq clockver command #4074
- I had pasted it in here between "-c" and "clockvar", that was not good.
That's all I have for #4074 (I hope) - 07:59 AM Revision c2914fc9: Use IPv4 for ntpq if IPv6 not allowed in widget #4074
- Similar code here. Shame it was not in a subroutine called from both places, but not about to re-engineer that now:)
- 06:23 AM Revision e26effd3: change the ordering of dhcpd_configure and unbound_configure here, claims on forum it fixes issue I can't seem to replicate.
- 06:12 AM Revision 888dd494: Merge pull request #1361 from phil-davis/patch-2
- 05:41 AM Revision e4a496ae: Use IPv4 for ntpq if IPv6 not allowed
- Forum: https://forum.pfsense.org/index.php?topic=84890.0
- 05:07 AM Revision 679c54fc: Merge pull request #1360 from jean-m-cyr/master
- 03:23 AM Revision f302a333: Link local interfaces don't have subnet.. don't create access-control statement
- Selecting link local interface for unbound causes invalid access-control
statement in unbound config since link local... - 02:43 AM Revision effb3a3c: Can't skip this if booting, ends up breaking config. Ticket #4071
12/03/2014
- 06:42 PM Revision e78509cc: fix IPv6 static routes, is_ipaddrv6 returns true for strings including a
- CIDR mask, which then ended up broken.
- 05:05 PM Revision 30640018: Change our default resolv-retry back to OpenVPN's default. Changing this
- didn't help the ticket where it was intended to help, which was later
fixed differently. This change in defaults is p... - 12:57 PM Revision 576af570: Merge pull request #1359 from phil-davis/patch-1
- 11:42 AM Revision efa28692: Display installed pkg version even if pkg server not available
- Forum: https://forum.pfsense.org/index.php?topic=84820.0
It seems reasonable to me to display the currently installed... - 03:35 AM Revision a94b1edc: Merge pull request #1348 from phil-davis/patch-4
- 03:28 AM Revision c042bc3b: Merge pull request #1357 from DasTestament/patch-1
- 02:50 AM Revision d12e3d3c: reload Unbound here, fixes some instances of PD-assigned v6 IPs missing from unbound.conf
- 02:15 AM Revision a0e9e17d: If get_interface_ip(v6) is passed an IP, return the IP.
- Properly set up interface binding for v6 link local IPs. Ticket #4021
except had to comment out the fix for now beca...
12/02/2014
-
- 05:14 PM Revision 690b557c: wait 10 minutes before retrying on soft failures to avoid us getting DoSed
- if something is wrong there (like someone's system can't validate the
cert) - 05:08 PM Revision a82b458f: don't include cert.pem in the obsoletedfiles list.
-
-
-
-
-
-
-
-
-
-
12/01/2014
- 10:54 PM Revision 9eabb248: also take into account the "all" option in Unbound Network Interfaces when
- setting 127.0.0.1 into resolv.conf.
- 11:18 AM Revision be5b4133: Revert "/etc/ssl/cert.pem was obsoleted by mistake, remove it"
- Since /usr/local/ssl/cert.pem is in place now, it can be obsoleted
This reverts commit bb788b8ceb3337b62401819378ec3... - 11:17 AM Revision bb788b8c: /etc/ssl/cert.pem was obsoleted by mistake, remove it
- 11:06 AM Revision 4dd7ca80: Update filter.inc
- Add missing gettext.
p.s: Is it really needed to log? Lots of rules causes lots of spam on ifaces without gw. Such k... -
-
-
11/29/2014
- 07:43 PM Revision e3afacbb: Only set i_dont_care_about_security_and_use_aggressive_mode_psk=yes where there is a P1 with aggressive+PSK enabled. Log a warning when such a configuration is in use.
- 12:27 PM Revision cc62e5ed: Merge pull request #1356 from phil-davis/patch-3
- 12:20 PM Revision 9c97e4b8: Correctly delete xml file after restore and conversion to rrd
- When doing "Generating RRD graphs" at bootup, the data is restored from /cf/conf/rrd.tgz into xml format files in /va...
- 12:10 PM Revision 345145e2: Merge pull request #1355 from phil-davis/patch-2
- 11:45 AM Revision 8c2a5a73: Fix bracketing of if statement in unbound
- Stops message:
Warning: in_array() expects parameter 2 to be array, null given in /etc/inc/unbound.inc on line 607
Th... - 04:58 AM Revision 978b8f50: fix syntax on prefix6 for DHCPv6 PD
- 01:33 AM Revision c5cd9b75: validate MTU and MSS as integers, and don't allow MSS larger than pf will accept to avoid broken rulesets.
- 01:17 AM Revision a96dc32e: Add input validation on vpn_ipsec_settings.php. Fixes #4052.
11/28/2014
- 11:30 PM Revision 5a663a5d: Skip v6 WANs in Unbound access-control. Ticket #4023
- 10:30 PM Revision 80075b9e: fix v6 access-control in Unbound, Ticket #4023
-
- 10:09 PM Revision f4620b36: check if Unbound is enabled in addition to dnsmasq for v6 DNS assignment. Fixes #4051
- 09:54 PM Revision b7960673: Fix input validation for DNS resolver when localhost is enabled in resolv.conf and "all" chosen in Network Interfaces. While here, set something other than '' when all is chosen.
-
09:47 PM Revision 2388a1ac: Merge pull request #1354 from phil-davis/patch-2
-
-
- 05:39 PM Revision 8676899f: Process RRD backup compression in var
- Prior to this the RRD xml files were added uncompressed to the archive in /cf/conf and then that archive was compress...
-
-
- 02:43 PM Revision 16d6c1df: Add a parameter on platform_booting to help detect if it's on GUI on console and use it in appropriate places, it fixes #4049
- 02:15 PM Revision 5acce704: Fix sapi name check to detect if it's on console, ticket #4049
-
-
-
-
-
-
-
- 09:17 AM Revision 4dbc18db: Merge pull request #1352 from phil-davis/patch-8
- 09:17 AM Revision ba44446f: Merge pull request #1351 from phil-davis/patch-7
- 08:10 AM Revision f865302f: Add input validation to Unbound advanced settings page. Ticket #4050
- 06:47 AM Revision 823cabba: Validate as integers, not just numeric, to prevent possible breakage.
- 04:10 AM Revision f8f5ba1a: Add option to disable auto-added access-control entries for users who want to manually manage ACLs. Ticket #4023
- 03:03 AM Revision aea7da2f: Fixup misleading comment
- This comment was misleading - this is the IP of whatever interface that is being processed, not just WAN IP. Might as...
- 02:55 AM Revision bd4471a4: Fix module name in top comment
- A bit of rubbish to update while I notice it.
11/27/2014
-
-
-
-
- 06:54 PM Revision 045287e8: use correct variable here
-
-
-
-
-
- 11:58 AM Revision 2bc1451a: Merge pull request #1350 from phil-davis/patch-6
-
-
- 10:27 AM Revision e318d592: Fix Unbound host_entries.conf warnings on console during boot
- system_hosts_generate() tried to make /var/unbound/host_entries.conf at various times in the boot sequence before the...
- 09:46 AM Revision 23c5cf73: Merge pull request #1349 from phil-davis/patch-5
- 09:43 AM Revision 3cd3cbd2: Setup rrd dir before calling create_gateway_quality_rrd
- Stops error:
ERROR: opening '/var/db/rrd/WAN_DHCP-quality.rrd': No such file or directory
in system log during boot.
... -
-
-
-
11/26/2014
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- 11:11 AM Revision b9767e86: Fix variable typos introduced in eb8ad408
-
-
-
- 10:15 AM Revision 708aa0ef: Remove variable use here since it's confusing sshdcond package, ticket #3959
- 07:18 AM Revision c683f627: include 169.254./16 in unbound's DNS rebinding protection
- 07:00 AM Revision e3045c51: include Unbound access-control entries for local IPv6 networks reachable via static route. Ticket #4023
- 05:42 AM Revision edee528c: Send the gateway name to this function. Fixes #4047
- 04:57 AM Revision 31afa084: Skip interface subnets for IPv4 here, this is best handled via the NAT networks list. Ticket #4023
- 04:39 AM Revision 3bdf2a70: Use the subnets automatic outbound NAT uses for tonatsubnets for Unbound's access-control config, as this is a good source of what networks are internal. Ticket #4023
- 03:12 AM Revision f1a6f696: If localhost is configured to be included in resolv.conf, force its selection in Unbound. The resolv.conf logic prevents that from being a problem, but people don't seem to realize they have to pick that to use Unbound for the host itself. Force it here rather than just silently skipping its inclusion in resolv.conf.
- 02:20 AM Revision 95834f84: correct logic here to omit 127.0.0.1 from resolv.conf when no DNS resolver bound there.
- 01:36 AM Revision f72fce18: fix text here, variables came back empty and aren't all that useful here anyway.
11/25/2014
- 10:16 PM Revision 563ea7ea: only show aggressive/main mode for IKEv1
- 09:01 PM Revision a46dc3c7: fix typo
-
-
-
-
-
-
- 07:30 PM Revision 79f4c970: fix IPsec widget status display after recent changes broke it. Ticket #4045
-
-
-
-
-
-
-
- 04:48 PM Revision fc86e6c1: remove unused function referencing racoon
- 04:31 PM Revision 8ce58e05: Option for browser tab text order
- 04:29 PM Revision 0274d41a: Option for browser tab text order
- Easy thing to do - add an option for the user to select if they want the host name or page name text to display first...
-
-
-
-
-
-
- 09:24 AM Revision c039d44a: Merge pull request #1347 from phil-davis/patch-3
- 05:37 AM Revision 24aa9e40: fix up text
11/24/2014
-
-
-
-
- Revert "Do not let the user mess with SAs from this page. The daemon and primary status page handles tat"
This rever... -
-
-
- Revert "Gather DNS information and return on bootup"
This reverts commit c2847e0faa781712f6419c8f305c97df66d9d233. -
-
-
-
-
-
-
- 04:29 AM Revision a8604dc6: Process unbound start from status services
- This was missing, so nothing happened when the user tried to start Unbound from Status->Services
11/23/2014
- 08:49 PM Revision e0dd1fdd: Merge pull request #1346 from SunStroke74/patch-2
- 07:35 PM Revision cfbe7e09: Removing extra closing bracket
11/22/2014
- 09:34 PM Revision 1ea3b03b: Merge branch 'wagonza'
- 09:33 PM Revision 38e91976: Merge branch 'master' of https://github.com/wagonza/pfsense into wagonza
- 07:24 PM Revision e840fc8c: Don't unset these items for PPP configurations as they're not configured here and doing so loses settings configured in interfaces_ppps_edit.php. Ticket #3727
- 07:13 PM Revision 15fbb5ec: Fix ovpn-linkup for tun + topology subnet case setting router as ifconfig_local envvaar when route_vpn_gateway and ifconfig_remote are both not defined. Keep using 5th parameter as a seatbelt in last case. While I'm here, improve sh syntax. It should fix #3968
- 07:03 PM Revision 68ce5a28: phone number is a required field
- 06:57 PM Revision 02a2bffa: add a usleep here to prevent killing twice. Ticket #3894
- 06:42 PM Revision 93ead355: In some circumstances, OpenVPN doesn't exit on SIGTERM. SIGKILL it when that happens. Ticket #3894
- 05:17 PM Revision e295e7ca: MSS clamping on VPNs is necessary in both directions where it's needed. Rather than requiring setting on both ends, especially since the remote side can be some third party device where MSS clamping may not be available or not work, set in both directions here.
- 07:15 AM Revision b7b3f343: fix up text
- 03:52 AM Revision 7786c9d6: clean up tabs in strongswan.conf
- 03:11 AM Revision 0a69eb7a: touch up text
11/21/2014
- 07:26 PM Revision d266dc07: Merge branch 'master' of github.com:wagonza/pfsense
- 07:24 PM Revision 0a5a8df9: d DHCPLeases starting before Unbound/DNSMasq and returning a pid not found message. Add missing reload feature
- 07:10 PM Revision 5ce68025: d DHCPLeases starting before Unbound/DNSMasq and returning a pid not found message. Add missing reload feature
- 06:27 PM Revision 5b506a49: Fix input validation of custom-type dynamic DNS hostnames.
-
- 12:22 PM Revision d274a75b: Fix syntax
-
- Revert "Merge e3cffd6cefc - Properly remove IPv6 carp vips as reported from https://forum.pfsense.org/index.php?topic...
-
-
Also available in: Atom