pfSense

07/26/2017

05:08 PM Revision 508a84ed: Enable REDIS option for suricata

Renato Botelho

05:08 PM Revision 6b473757: Enable REDIS option for suricata

Renato Botelho

05:08 PM Revision d1637ec2: Enable REDIS option for suricata

Renato Botelho

02:50 PM Revision 1fea5a2e: Fixed 7128

Steve Beaver

02:11 PM Revision 38af638a: Allow recheck on refresh if JSON not available

Steve Beaver

01:44 PM Revision e14c441b: Make rules that deal with IP+MAC pairs to be layer2 only

Renato Botelho

07/25/2017

09:03 PM Revision 239b15fb: Add some info to HELP text (no code change otherwise)

NTP background isn't going to be widely known. So provide a bit of info so that it's done properly if someone cares.
... Stilez y

06:55 PM Revision f6e6ff31: Restore calls to pfSense_ipfw_table_zerocnt(), it's fixed now

Renato Botelho

05:10 PM Revision f4c867e0: Remove unused parameters

Renato Botelho

05:08 PM Revision 5f6825bb: Do not associate IP and MAC on down table

Renato Botelho

05:04 PM Revision 75395abf: Fix syntax

Renato Botelho

04:56 PM Revision fa6ae0ea: Remove leftover debug

Renato Botelho

04:47 PM Revision 3c4fcd5b: Ressurrect nomacfilter option on CP now IPFW supports combined tables with IP and MAC address

Renato Botelho

02:53 PM Revision b060e08c: Add support for IPv6 AUTO_LINKLOCAL flag on bridge interfaces

Lorenz Schori

02:49 PM Revision d751dee3: typo

"Networked" not "network" - "Internet of Things" especially. Stilez y

02:48 PM Revision 94ef78af: grammar fix

Stilez y

02:37 PM Revision ef77e40e: format %1$s etc in help

Stilez y

02:33 PM Revision b45746a3: Improve the HELP note about what will/won't work if TLD is set to ".local"

For example, some people won't use mDNS and won't know other things might break; also it's not clear that while ".loc... Stilez y

12:04 PM Revision b40b4a3e: Re-introduce Captive Portal statistics

Renato Botelho

07/24/2017

11:12 AM Revision eb0a2a94: Update translation files

Renato Botelho

11:04 AM Revision 46b206d7: Regenerate pot

Renato Botelho

07/20/2017

05:41 PM Revision a911c65a: Support widget visible by default

Steve Beaver

05:34 PM Revision b96b6d3b: Add customer support widget

Steve Beaver

05:04 PM Revision 629be5fd: Do not re-create core pkg repo when running with -r

Renato Botelho

05:04 PM Revision 47683c94: Do not re-create core pkg repo when running with -r

Renato Botelho

05:04 PM Revision 31fd94b3: Do not re-create core pkg repo when running with -r

Renato Botelho

07/19/2017

02:05 PM Revision e266811c: Update the base package exclude files list.

Luiz Souza

01:54 PM Revision 57ee53b6: Build frr for testing

Jim Pingle

07/18/2017

04:03 PM Revision 396a2796: Fix license

Jim Pingle

03:35 PM Revision e5aeaeb6: Add installer script to optionally recover config.xml off an existing drive. Implements #7708

Jim Pingle

07/17/2017

12:48 PM Revision ee8e4e73: Prevent iOS auto-capitalization on username field

Steve Beaver

12:14 PM Revision 376e6f67: Use attribute rekey_enable as usual but optionally allow to set margintime if rekeying is not disabled

hamnur

11:59 AM Revision c21d913d: Change login page links to absolute paths

Steve Beaver

05:24 AM Revision f72f2fac: add "very"

Stilez y

05:22 AM Revision 49bb19eb: slight further text/format improvement

Stilez y

05:11 AM Revision b0fc769a: Improve help text for promiscuous mode

"promiscuous mode" is often quoted but not always understood. Also its possible drawbacks (other than compatibility w... Stilez y

07/14/2017

07:36 PM Revision 3c05905d: Bump PRODUCT_REVISION to 2.3.4-p1

Renato Botelho

06:48 PM Revision db3b3afb: Use an alternate method to stop unbound and fix #7326

(cherry picked from commit 782453b4dbb77e5bc97a43f56b95a006c5434d65)
(cherry picked from commit 67fea036201f5af338338... Jim Pingle

06:47 PM Revision 67fea036: Use an alternate method to stop unbound and fix #7326

(cherry picked from commit 782453b4dbb77e5bc97a43f56b95a006c5434d65) Jim Pingle

06:46 PM Revision 782453b4: Use an alternate method to stop unbound and fix #7326

Jim Pingle

01:57 PM Revision 7505efe7: If a client address is in the webConfiguratorlockout table, do not allow them to access the GUI. Print an error and kill their states. Ticket #7693

Extra check to be sure that an existing open state cannot bypass lockout controls.
(cherry picked from commit cc9b0f... Jim Pingle

01:57 PM Revision f0da1eda: If a client address is in the webConfiguratorlockout table, do not allow them to access the GUI. Print an error and kill their states. Ticket #7693

Extra check to be sure that an existing open state cannot bypass lockout controls.
(cherry picked from commit cc9b0f... Jim Pingle

01:55 PM Revision cc9b0f76: If a client address is in the webConfiguratorlockout table, do not allow them to access the GUI. Print an error and kill their states. Ticket #7693

Extra check to be sure that an existing open state cannot bypass lockout controls. Jim Pingle

10:44 AM Revision 9d472f01: Fix indent of if-block

hamnur

10:36 AM Revision 7683e057: Merge branch 'master' of https://github.com/hamnur/pfsense into HEAD

hamnur

10:29 AM Revision af729f53: Check if margintime is numeric and smaller than P1 lifetime

hamnur

09:58 AM Revision e18ddb38: Hide margintime if rekeying is disabled

hamnur

12:17 AM Revision 47914246: Fix typo

(cherry picked from commit 2c3b9ac554cc3940962e7f9b1799857583c394ab)
(cherry picked from commit 930914fd813130b0d1bd8... Jim Pingle

12:17 AM Revision 930914fd: Fix typo

(cherry picked from commit 2c3b9ac554cc3940962e7f9b1799857583c394ab) Jim Pingle

12:17 AM Revision 2c3b9ac5: Fix typo

Jim Pingle

07/13/2017

07:52 PM Revision 725aee3f: Trafficshaper, show interface names for disabled interfaces, dont just show a kinda 'empty' spot..

Pi Ba

07:49 PM Revision f6cf3687: dns, allow deleting last row for "Additional Names for this Host"

Pi Ba

07:06 PM Revision 1fdecbe6: cron, fix job removal by index splice and write valid schedules for ramdrive backups

(cherry picked from commit ce3371fe969733c92cd91fe31d2acb69fc877986) Pi Ba

07:05 PM Revision aeb0e915: cron, dont write_config() when nothing changed.

Pi Ba

06:59 PM Revision ea7b8b00: Merge pull request #3771 from PiBa-NL/20170701-cron-fix

Renato Botelho

06:58 PM Revision bef8ce51: bootup, change message to "Checking config backups consistency..." to tell whats taking time, as there is usually little to cleanup involved

(cherry picked from commit c2530487978f68c46c663fee9c9049479f267925) Pi Ba

06:58 PM Revision d991f97b: Merge pull request #3772 from PiBa-NL/20170703-boot-config-check-message

Renato Botelho

06:58 PM Revision 04cd314b: nat, portforwards should not make up a new destination information when a configured dhcp interface does not currently have an address.

fixes: https://forum.pfsense.org/index.php?topic=127585.msg733528#msg733528
(cherry picked from commit 5a8a8bbea33ec2... Pi Ba

06:56 PM Revision 40c09b6d: Merge pull request #3782 from PiBa-NL/20170712-nat-configure-skip-no-dest

Renato Botelho

05:58 PM Revision 324bbc3f: Restructure how unbound zone data is written to fix processing of "redirect" zone entries. Fixes #7690

Also corrects some other misc issues for formatting of zone data.
While here, add an option, not exposed in the GUI, ... Jim Pingle

05:58 PM Revision 021332fa: Restructure how unbound zone data is written to fix processing of "redirect" zone entries. Fixes #7690

Also corrects some other misc issues for formatting of zone data.
While here, add an option, not exposed in the GUI, ... Jim Pingle

04:37 PM Revision 4541f84d: Restructure how unbound zone data is written to fix processing of "redirect" zone entries. Fixes #7690

Also corrects some other misc issues for formatting of zone data.
While here, add an option, not exposed in the GUI, ... Jim Pingle

07/12/2017

08:16 PM Revision 5a8a8bbe: nat, portforwards should not make up a new destination information when a configured dhcp interface does not currently have an address.

fixes: https://forum.pfsense.org/index.php?topic=127585.msg733528#msg733528 Pi Ba

07/10/2017

04:15 PM Revision 02068d31: Improve the way the auth server list is generated and account for a key being removed from the array when deleting. Fixes #7682

(cherry picked from commit fa628b1a15a1c03343caa2735e09de291ae4e382) Jim Pingle

04:15 PM Revision fa628b1a: Improve the way the auth server list is generated and account for a key being removed from the array when deleting. Fixes #7682

Jim Pingle

04:12 PM Revision 4e4cac0d: Improve the way the auth server list is generated and account for a key being removed from the array when deleting. Fixes #7682

Jim Pingle

02:36 PM Revision f49ef559: Fix OpenVPN Auth Digest Algorithm selection so it does not use duplicate/alias names in the list, and fix existing entries on upgrade so they use the actual digest name and not an alias.

Jim Pingle

07/09/2017

02:39 PM Revision 19be2fc2: Reduce complexity of checking whether system should be rebooted after RAM Disk option change.

Also fix the issue when RAM Disk option is changed, but there is an input error and thus on subsequent form submittin... Nazar Mokrynskyi

07/07/2017

09:07 PM Revision 2504e3f1: Fix CA reference so serial increases properly. Remove variable for feature that didn't work out. Ticket #7527

Jim Pingle

07/06/2017

06:27 PM Revision 5764c363: Stop using pecl-ssh2

Renato Botelho

06:27 PM Revision 7da9f1e5: Stop using pecl-ssh2

Renato Botelho

06:23 PM Revision b91d55c3: Deprecate pfSense freeradius2 package in favor of freeradius3

Renato Botelho

06:23 PM Revision 6761daa4: Deprecate pfSense freeradius2 package in favor of freeradius3

Renato Botelho

05:47 PM Revision 7db12011: Add another possible CSR Armor string when validating. Ticket #7383

Jim Pingle

05:30 PM Revision 0c82b8c2: Restructure how certificate types and SANs are handled in the cert manager when making a Cert/CSR/Signing, so each section can properly use the controls without duplicating. It is now possible to add SANs and EKUs to certificates when signing using the certificate manager. Fixes #7527 and also Fixes #7677

NOTE: Attributes such as SANs and KU/EKU cannot be copied from a CSR when signing due to a deficiency in OpenSSL's x5... Jim Pingle

12:27 PM Revision eb3435be: Removed MSS clamping exclusions

Robbert Rijkse

12:27 PM Revision b2e4bb17: Removed MSS clamping exclusions

(cherry picked from commit 53c26adecad735f7a015466dbbcba3f22655a902) Robbert Rijkse

12:27 PM Revision 2f55e551: Removed MSS clamping exclusions

(cherry picked from commit 53c26adecad735f7a015466dbbcba3f22655a902) Robbert Rijkse

12:21 PM Revision 53e138c0: Several complaints of unbound problems after commiting, so back this out. Revert "Change the way unbound is stopped when the process is being restarted, to give the old process enough time to exit cleanly. Fixes #7326"

This reverts commit 863804a917987ea10993433c84399b5711c3c352. Jim Pingle

12:21 PM Revision c59b2bc3: Several complaints of unbound problems after commiting, so back this out. Revert "Change the way unbound is stopped when the process is being restarted, to give the old process enough time to exit cleanly. Fixes #7326"

This reverts commit 0577d9df462063bb3d26f0805c1e06fbdb359157. Jim Pingle

12:20 PM Revision 6e094e04: Several complaints of unbound problems after commiting, so back this out. Revert "Change the way unbound is stopped when the process is being restarted, to give the old process enough time to exit cleanly. Fixes #7326"

This reverts commit 38d110824c87ff60c6289c0432d55009586ceee4. Jim Pingle

07/05/2017

08:41 PM Revision 282b6c66: Add the ability to set certificate type and SAN attributes in a CSR. Ticket #7527

TODO: They are not carried over after signing in the GUI Jim Pingle

07:07 PM Revision a3507259: Fix missing line from openssl.cnf

(cherry picked from commit c369871083ee6a5be958129df5457c8e952aa9e2) Jim Pingle

07:06 PM Revision c3698710: Fix missing line from openssl.cnf

Jim Pingle

07:03 PM Revision 5c985ed2: Fix missing line from openssl.cnf

Jim Pingle

05:53 PM Revision 276f8ce0: Do not ship .po files on images

Renato Botelho

05:49 PM Revision ba47d6fd: Update translation files

Renato Botelho

05:49 PM Revision 1d8a0e66: Regenerate pot

Renato Botelho

05:30 PM Revision b767fe6c: Add the username as the first SAN when making a user certificate from the user manager creation screen. Fixes #7666

Jim Pingle

05:30 PM Revision 2e1809dd: Fix some additional cases for CN->SAN handling, and move some code to a function to avoid duplication for other pending uses. Ticket #7666

Jim Pingle

04:56 PM Revision 2485e772: Include User Agent information when update bogons list

Renato Botelho

04:56 PM Revision 12e31e87: Include User Agent information when update bogons list

Renato Botelho

04:56 PM Revision 7fbb45be: Include User Agent information when update bogons list

Renato Botelho

04:27 PM Revision 6cc74faa: Remove extra spaces from User Agent

Renato Botelho

04:27 PM Revision 0d3d86c8: Remove extra spaces from User Agent

Renato Botelho

04:27 PM Revision ba7d82b0: Remove extra spaces from User Agent

Renato Botelho

04:22 PM Revision 41744bf9: Send uniqueid instead of UUID on user-agent

Renato Botelho

04:22 PM Revision ea8abb80: Declare user_agent variable in the function it's used

Renato Botelho

04:22 PM Revision e927083e: Move uniqueid read to a function system_get_uniqueid()

Renato Botelho

04:22 PM Revision 48600bc6: Send uniqueid instead of UUID on user-agent

Renato Botelho

04:22 PM Revision 7928e419: Declare user_agent variable in the function it's used

Renato Botelho

04:21 PM Revision 2bf67a6f: Send uniqueid instead of UUID on user-agent

Renato Botelho

04:05 PM Revision d49ad309: Declare user_agent variable in the function it's used

Renato Botelho

04:00 PM Revision cb61e2d8: Move uniqueid read to a function system_get_uniqueid()

Renato Botelho

03:59 PM Revision 2f8793b7: Move uniqueid read to a function system_get_uniqueid()

Renato Botelho

07/04/2017

02:57 AM Revision 3666d731: Add user option to sort interface names RELENG_2_3

Signed-off-by: Phil Davis <phil@jankaritech.com> Phil Davis

07/03/2017

10:24 PM Revision 7c6f38e4: ipsec, prevent simultaneous/repeated calling of vpn_ipsec_configure() by /etc/rc.newipsecdns

Pi Ba

08:15 PM Revision c2530487: bootup, change message to "Checking config backups consistency..." to tell whats taking time, as there is usually little to cleanup involved

Pi Ba

07/01/2017

09:01 PM Revision ce3371fe: cron, fix job removal by index splice and write valid schedules for ramdrive backups

Pi Ba

06/30/2017

08:41 AM Revision ab95d1fa: Merge remote-tracking branch 'upstream/master'

hamnur

08:41 AM Revision 1e0442e0: Activate RADIUS accounting for mobile ipsec if it was selected on the auth server view

hamnur

06/29/2017

04:34 PM Revision 863804a9: Change the way unbound is stopped when the process is being restarted, to give the old process enough time to exit cleanly. Fixes #7326

(cherry picked from commit 38d110824c87ff60c6289c0432d55009586ceee4) Jim Pingle

04:34 PM Revision cad82db7: unbound-control needs to know the config path or else it can't work properly. Fixes #7667

(cherry picked from commit 8a0aa42c197361ebb82387e5bdc8378e5440837f) Jim Pingle

04:34 PM Revision 0577d9df: Change the way unbound is stopped when the process is being restarted, to give the old process enough time to exit cleanly. Fixes #7326

(cherry picked from commit 38d110824c87ff60c6289c0432d55009586ceee4) Jim Pingle

04:34 PM Revision eb95f88c: unbound-control needs to know the config path or else it can't work properly. Fixes #7667

(cherry picked from commit 8a0aa42c197361ebb82387e5bdc8378e5440837f) Jim Pingle

04:32 PM Revision 38d11082: Change the way unbound is stopped when the process is being restarted, to give the old process enough time to exit cleanly. Fixes #7326

Jim Pingle

04:21 PM Revision 8a0aa42c: unbound-control needs to know the config path or else it can't work properly. Fixes #7667

Jim Pingle

02:18 PM Revision 95420116: Add strongswan rekeymargin attribute to vpn ipsec phase1 view

hamnur

02:02 PM Revision 1a96a3a9: Set a value for this variable in each case, so a previous value isn't re-used in a loop.

(cherry picked from commit faab657a256f9385d5e0ffb4084666e760b515a5)
(cherry picked from commit 86ab9eb54b30b591703e7... Jim Pingle

02:02 PM Revision 86ab9eb5: Set a value for this variable in each case, so a previous value isn't re-used in a loop.

(cherry picked from commit faab657a256f9385d5e0ffb4084666e760b515a5) Jim Pingle

02:01 PM Revision faab657a: Set a value for this variable in each case, so a previous value isn't re-used in a loop.

Jim Pingle

12:09 PM Revision 39eeab69: Enable Python support for Unbound. Implements #7549

Jim Pingle

06/28/2017

09:01 PM Revision 626aefbe: Revise Dark gray color code for login page

Steve Beaver

06/27/2017

03:01 PM Revision a33ece86: Fix missing '>' on /span tag

Steve Beaver

12:28 PM Revision 79cd920c: Add "Dark Gray" login page color

Steve Beaver

10:40 AM Revision 50153f21: Update translation files

Renato Botelho

10:37 AM Revision 651ad331: Regenerate pot

Renato Botelho