pfSense

Call conf_mount_rw() and ro where needed

remove functional code from config.inc and place it in a library file config.lib.inc

Add pfSense_BUILDER_BINARIES: and pfSense_MODULE: additions

Turn off auto assignment of interfaces code until the author can fix its issues

Merge branch 'master' of git://rcs.pfsense.org/pfsense/techneck-auto_interface into review/master

Conflicts:
etc/inc/config.inc

• In config_install validate the file that will be installed not the already present config!
• Convert most hardcoded /tmp to the global variable
• Do not reboot the firewall under the hood without confirmation from the user after restoring. Just ask the user to do it....

Unbreak config_restore()

Fix another wrong code.
Initialize $config_parsed before even expecting things to work.
Set $config_parsed value inside lock protected code to avoid races inside function.

NOTE: That this still is racy, since the value of $config_parsed before being checked at the end of config.inc, but i will leave the task to the propper/sponsored person to fix!

Unbreak parse_config plugins and fix autoconfigbackup

Remove extra plugin info

Check even if the file exists or not. Only checking filesize its not enough for all cases.

Adds automated interface setup + sshd for installation only.

Set the memory limit to 128M

Correct spacing for interfaces. Reload interfaces after assinging is changed from console.

There is not necessity to launch mount commands for nothing.

Check for an array before doing anything else. The array handling has changed in PHP5.

Print the correct interface name to be used. This is reported on Issue #19 as a bug but really it is not.

Convert even ssh key gen to the new subsystem_dirty calls.

Prevent recursive calls to conf_mount_*

Remove trailing /

Remove trailing /

Correct the name its parse_config

• Reorganize the 'apply' button infrustructure in the GUI.
  - Present three new functions is/mark/clear_subsystem_dirty('name_of_subsystem'). This makes easier to create such things without needing to introduce new globals.
  - Convert all pages to the new infrustructure...

Teach config about nanobsd platform

No need to call conf_mount_rw() to generate config cache, its written to /tmp

s/./_/ for vlans since netgraph does not like .(dots) in the path names.

Include notices.inc to get the file_notice function.

Use $RealIf.vlan$tag interface names for vlans. This makes them more userfriendly.

Revert "Do not use tags for vlan interface names since there might be same vlan tags on different parent interfaces and this will break configs and will hide the reason it does not work. Thanks-to: smos@"

This reverts commit 83bdca55920ca6ab3d848f0993d57a1f9b85098f.

Do not use tags for vlan interface names since there might be same vlan tags on different parent interfaces and this will break configs and will hide the reason it does not work. Thanks-to: smos@

Move Sync of config from filter.inc filter_reload to write_config and all the code in a new file rc.filter_synchronize. The later is called by check_reload_status with the tmp/filter_sync action triggered with carp_sync_client() function. This solves the excessive syncing of configs on not needed cases and speedups the filter_configure_sync!

Some more locking fixes.

Match the logic with other functions.

Fix logic.

• Create two new functions lock($subsystem)/unlock() to have more reliable locking using semaphores.
  This function can sleep till the resource is free and can help find not well behaving code.
• Remove most of the config_lock/config_unlock logics on the whole scripts/pages it is an abuse of this....

Include crypt.inc explicitly.

• Shuffle functions around to reduce require_once() a little.

Fix vlan creation to use the interface tags and not numbers without any meaning. Reported on http://forum.pfsense.org/index.php/topic,15861.0.html.

touch up text, prevent "The second argument should be array or object" error when there are no interfaces detected.

Remove ftp-proxy/pftpx/ftpsesame references we handle all of this in kernel now.(yay!)

missing semicolon

Move 1700 lines of config upgrade code into it's own include file that's only
brought in when we actually need to upgrade the config file

Remove duplicate config.xml and restore conf.default/config.xml if /conf/config.xml and no backups exist

Modify captive portal to use centralized user management. The user manager has
been modified to include an account expiration option to support this service.

Rewrite the rrd upgrade code to use the newly added xml2array function specifically for the rrd upgrade code.
This is about 4 times faster then our builtin parser. Hoping this can solve part of the the 45 minute upgrade cycles on
embedded builds

Correct the configuration file IPsec certificate upgrade process.

Migrate IPsec certificate management to centralized system.

Use nice -n20 for common launched items

Unbreak the tree

Show dmesg interface names when first configuring the network

Fix check for running ftp proxy.
PHP bug, when running exec() the output array will not be cleared before using it again.
This means that one needs to clear it before reusing it. Otherwise the contents of the previous command will be used.

Properly escape more quotes and add more of them

Escape quotes in command
Add missing quote

Fix ftp-proxy check for running processes

Use the vlan tag for interface name even when creating vlans from console.

More fixes at escaped double quotes not working!

Correctly detect processes pid's.

• Do not restart ipfw-classifyd on every iteration just send a signal to reload the config. This way no data is lost
• Some cleanups to fix warning/spamming of the System logs
• Present is_module_loaded() function to check if a module is loaded.

Remove all global decalarations regarding pptp/pppoe/l2tp they are no more needed.

Opps, unbreak the page by removing unneeded curly.

The MS-Dos filesystem was renamed from msdos to msdosfs in 6.3.

Information submitted-by: Tim Judd

Correctly upgrade databases from 1.2

Don't divide roundtrip by 100 either?

Final attempt at making rows merger work before I throw in the towel.
Empty rows need to proceed the old data when growing the RRA archive

Keep RRD format the same during conversion.
After restoring the RRD resize the 3rd RRA (12 hours) to 3000 to cover 4 years

calculus when dividing old roundtrip times was off by 10

Cleanup output

Do not add a extra RRA archive while converting. It requires a alarming amount of parsing and calculation.
Deferring.

Remove log_error statements as syslog does not work during the config upgrade stage

Cleanup output

Set correct dump filename vars

Also convert quality databases. The delay value needs to be divided by 1000.
This because apinger logs in seconds, not in milliseconds.

Remove print_r debugging

Redirect stderr so we can log it to the system logs.

Make sure to reset array before beginning migration. otherwise the arrays get added to each other.

More debuggingeven

add debugging
fix parse error

Add logging

rename var

Correct typo

Correct find command

run enable_rrd_graphing() at the end to create a new updaterrd.sh

Make listtags global

RRD file conversion code. Needs testing ofcourse. So far early tests show promising.

remove stderr redirect

catch stderr for mwexec

add debugging so we can see what it's doing

Close comment tag

untested rrd upgrade code

Use mwexec so we can see if it fails.

Format has changed for quality, traffic and packets. Remove these files. They will be recreated

Tell ftp-proxy to tag packets passing on its rules with the same tag rdr rules does so at least some shaping policy can be applied on outbound packets through the Floating tab.

Remove non-working check

Update firmware lock (upgrade) variable

Do not allow ro mount when an upgrade is in progress

Make nat reflection timeouts consistent

Correct config path

Unbreak.

Pointy-hat-to-: Seth Mos

Gateway load balancer upgrade code courtesy of billm@

Surpress killall messages