pfSense

Fixes #4040 for pppoe use static route with -iface option to help when more than one pppoe has the same gateway. Also kill states when reloading apinger to catch up with new route

Correct logic of skipping for gif/gre/bridge on top of _vips. Even though this is not anymore a problem in 10 since the vip is on the physical interface but for now its ok.

Actually comment this code out since it causes more troubles than solves for any type

Make at least the code correct here even though it does not make sense on what it does!

Mute this since only spams logs when interface is not there

Move these functions nearby since thy are related

Actually get the correct value here!

Actually consider parentmtu 0 here to get the real value when unassgined

Properly respect other configured MTUs for other vlans. Properly respect parent of vlan MTU if configured. Also avoid errors when possible. This helps VLANs MTU handling but all the other interfaces as gre/gif/... needs the same handling. It is better to require reboot on MTU changes especially on complex configurations.

Partially revert the previous modification on vlan mtu. The function job is to find the biggest mtu between vlans and let it do that

convert_real_interface_to_friendly_interface_name() goes and checks the parent and this gives wrong information 99.9 percent of the time on scenarios like when this is called for unassigned vlans etc, while its real purpose is just to check if the interface is assigned and return the intermeddiate/config name of the interface. Leave the get_parent_option there in the function but it needs to be asked specifically for.

Skip the interface being configured from the list to check the mtu

Add checks for requirement as array here. Reported-by: garga

Rather than set the g['booting'] on globals provide a function to test for that doing the right checks

Use the new available function

fix typo

Use proper function now that this call is not needed anymore

Ticket #2786 handle the mtu on bridge same as on lagg. Cleanup some not needed code while here

Remove the mac address propagation to vlans since FreeBSD 10 handles this itself

Fixes #2786, properly handle the chain of interfaces during lagg configuration for mtu. For most interfaces this works, bridge will be added in a separate commit

Remove useless check

Correct logic for lagg mtu. Also optimize and cleanup dead code

Fix issue of previous commit on adding bridge memebers.

Fixes #1047, overhaul handling of flags for hardware offloading and make it work correctly for system_advanced page settings. Lagg is still a special case that needs a reboot.

Properly remove IPv6 carp vips as reported from https://forum.pfsense.org/index.php?topic=84392.0

Make this a bit more clean to read

Fixes #1047, Actually the code is trying to set flags on the parent. so allow it even for vlans since they will follow the parent. At least so seems on FreeBSD 10.

Do the tests check properly related to Ticket #2786

Actually use all hex values on the gateway of 6rd to please route command

Correct gateway for Ticket #2882 to the proper value as reported by: cmb

update error log in accordance with change in input validation. thanks Phil Davis for pointer

Actually trim if the user put any : on the prefix of the ISP to be able to properly set the gateway

Properly generate the default gw for 6rd set it to prefix:BR and also the prefixlen of the interface set it to the ISP prefix and on LAN set it to the delegated one.

Blah fix typo

Actually issue stfv4net even for /0|/32 subnet since its required

add vmx to list of ALTQ capable interfaces

Don't try to clear states to gateway, all that does is wipe the entire state table unnecessarily. rc.newwanip takes care of killing states appropriately as needed when an IP changes.

Use route command directly rather than trying to make a route search on php thorugh netstat. It Fixes #4000

hn(4) is ALTQ-capable, mark as such.

Do not do this during boot

Fixes #3967, properly resolve interface

touch up text

Lets put a logging to see what is bing passed to the rtsold script on calling. Helps with Ticket #3361

Fixes #3967, configure ip alias on top of carp by joining them to the same vhid as its parent

Ticket #3967. Allow to have carp as parent of ipaliases - continued

FreeBSD fails to set advskew back to 0 after you set it to any other
value. That's a separate issue that needs fixing upstream, but in the mean
time, we can work around it by removing all CARP VIPs in the same way we
do when "Temporarily Disable CARP" is chosen before adding them all back....

rename interfaces_carp_setup to interfaces_sync_setup and call it during bootup since it does not only relate to carp interfaces.

Make proper check here

Properly set MTU for lagg interface, it fixes #3922

Remove function that is not implemented properly. Nothing seems to use it.

CARP, allow carp ip to be outside interface and alias subnets (FreeBSD10 feature)

Make sure dhclient is not running before start it, it fixes console interface setup when interface is using dhcpv4. It should also help #3482

Implement a function to kill dhclient process, sometimes it takes a little time to die, so use a sleep(1) there

Fix guess_interface_from_ip() to account for differences in netstat output. Fixes #3853

Fixes #3664, actually make sense of this function to work properly

Fix shell script syntax, it should fix #3361

Convert almost all /sbin/sysctl calls to php functions

Fix #3702, make sure tunnel inside IP is set when interface changes

Fix #3700 and other syntax issues:

- Remove G parameter from pfctl since it doesn't exist anymore
Initialize $old_router
- Fix sh syntax on variable assign, it couldn't have space before =
- Simplify logic
- Avoid flush states twice, if it was done on IP change, don't do it...

allow ipaliases to be configured on lo0

Include the v4 prefix on the v6 netmask to make routing more sane and alos tracking interface configurations work!

Delete all ip aliases when interface is disabled, it should fix #3650

Spell that correctly

Handle enc0->IPSec convertion. Should help Ticket #3664

Make sure unbound is reconfigured when interfaces are

Merge pull request #1116 from PiBa-NL/interface_has_gateway-ipv4_gif_gre

Load if_stf module when needed

add gre and gif checks for for IPv4 function interface_has_gateway($friendly), like they are already for IPv6

fixing typo for GIF tunnels to work over IPv6

the call of get_interface_gatewayv6() in the creation of a GIF tunnel over IPv6 leads to a "Fatal error: Call to undefined function get_interface_gatewayv6() in /etc/inc/interfaces.inc on line 934". changeing the function call to get_interface_gateway_v6() fixed it for me on my local system.

Merge pull request #1041 from PiBa-NL/carp_maintenance_2.2

carp, provide a way to 'permanently' set carp to 'maintenance mode' (advskew 254) persisting a reboot

carp, provide a way to 'permanently' set carp to 'maintenance mode' (advskew 254) persisting a reboot
Option to set CARP interfaces to 'maintenance mode', persisting through a reboot so the primary machines stays as backup/inactive.
This is required when there are some problems (possibly with the hardware) and the primary machine needs to be booted and checked again before becoming 'master'. Currently it will take back the master state during reboot even though there might still be problems or some re-configuring to do....

Correct check that was broken even before to actually make the ieee8021x enable from proper setting. Reported-by: https://forum.pfsense.org/index.php?topic=74013.0

Merge pull request #1031 from ayvis/master-br-patch

replaced uppercase html tags with lowercase

Configure first the vhid and than pass the vhid when configuring the carp this makes the ip assigned to carp as well

Remove balancing reference that does not exist anymore

replaced uppercase html tags with lowercase
js files saved as UTF-8 / LF
language="JavaScript" deprecated, replaced with type="text/javascript"

Try a different strategy for fixing #3514 just send a HUP to dhcp6 to get it to reload.

Do not delete linklocal address

Fix for now 'IPv6 - LAN looses Prefix after link event'(forums) with a not elegant solution but works. Probably dhcpv6 client should solve this by itself and generate and event for it. For now just bump dhcpv6 client again to have the prefix interface reconfigured.

pfSense_interface_deladdress() only knows how to delete an ip address, not a subnet. It should fix #3513

bring up appropriate interface for GRE/GIF. Ticket #3281

Fix syntax

sync up ALTQ-capable interfaces list

Ticket #3484 Correct the case for GRE tunnels as well since they behave the same. GRE seems to need the prefixlen 128 specified all the time so do it explicitly to be on safe side

Ticket #3484 Note that for now prefixlen is useless in ipv6 tunnels. IPv4 accepts them

Fixes #3484. Provide a dynamic gateway for gif v6 tunnels so it can be used on firewall rules etc. The guide for setting up this tunnels on docs need to change to leave the gif interface as none type. People upgrading need to fix this themselves with a not on release notes. This can be fixed if the kernel condition is relaxed to allow setting the prefixlen on the tunnel as ipv4

Ticket #2627. Just pass the array over no need to traverse it

Fixes #2627. When an interface goes down try to shut the RAs and dhcpd6 service on that interface

Avoid recursion of convert_real_interface_to_friendly_interface_name with get_parent and on linkup of parent interface properly configure especially useful on ppp type links

Do some more error checking and put secondary radius attributes only if configured. Probably radius configuration should be merged with central server for logins!

Normally when an ip is set the interface comes up on BSD stacks. Though push this commit which Fixes #3281

Whitespace fix

Put a kludge for now which Fixes #3280. It should be improved later on to have proper handling and overloading of configuration functions

Fix symlink calls adding full link name, it fixes issue reported at https://forum.pfsense.org/index.php/topic,72405.0.html

Properly set the configuration here based on https://forum.pfsense.org/index.php/topic,68531.0.html

Make improvement to the check

Silent recently added symlink() calls

Use unlink_if_exists or @unlink to avoid PHP errors when file doesn't exist

Add escapeshellarg() calls on exec parameters. While I'm here, replace some exec() calls by php functions like symlink, copy, unlink, mkdir

Fix typo on variable name