pfSense

Some $config variable referencing $if but $if is not defined.

Change $if to $ifdescr to restore normal functionality.

Ticket #444. Use noatime even here.

Do not run netstat but use pfSense_get_interface_stats to gather interface statistics. This speedups a lot on nanobsd which needed some time to generate the statistics especially with dashboard

Ensure config.cache does not exist so the subsequent requests can cleanly reload the configuration. Ticket #601

Move get_include_contents function to pfsense-utils.inc

Add a GUI field to let the user configure the maxium table entries size. Resolves #588
NOTE: Actual tables, not states.

Remove unused function.

Improve NAT Port Forwarding

• Now you can disable a rule
• You can define "no rdr" rules
• Source type, address and port, with an option "not" for exceptions
• Destination type, address and port, with an option "not" for exceptions...

The console menu does not show if the terminal type is not cons25 - not sure why. Changed to cons25 to allow the menu to work on the serial console when enabling it through the web GUI. Ticket #316

Improve NanoBSD slice updating/changing a bit, add some error checking. Resolves #534.

Relocate some NanoBSD functions to a central place. Change NanoBSD diagnostics and system info widget to use the new code. Ticket #533 and some prerequisite parts of Ticket #534.

Add a new alias type, urltable, which downloads a file of IP/CIDR addresses and loads them into a pf persist table instead of importing the addresses directly into a traditional alias. This allows for using huge tables of addresses that would otherwise break the GUI and/or fail to load into pf. Part of ticket #512

Beef up the version comparison code. This should let us compare several combinations of local and remote versions and properly determine if the current version is older or the same as the remote version.

Make PPP redial when the connection is dropped. Also, fix PPP uptime display.

Remove unnecessary variables.

Implement reporting and logging of historical PPP uptime with data persistent through reboot.

Also, change the way uptime is captured. The mpd console is no longer used to
get PPP uptime data, which will prevent spamming of PPP logs with console access messages....

Changes to make PPP work again. mpd5 fails to establish a ppp link without
some username and password, so defaults are set if user enters nothing.
Removed interface_ppp_configure call from interfaces_ppp_edit.php. It was
useless there with the new structure, and it caused all PPP links to attempt...

Fix a few small bugs in new PPP code, and one type in pfsense-utils.inc

Ticket #447. Handle multiple instances propperly.

Redo most of the ppp interface handling to be consistent with the other mpd5 configurations. This way there is no more special handling for ppp around.

I have PPP with mpd5 working really well now, including setting the APN and APN
Number, and the SIM PIN and wait time for the SIM to settle after the PIN is
entered.

Still no work on multilink PPP with serial port links.

Right now the code creates the mpd.secret file. I tested it using the set auth...

Add unzip support if unzip binary exists

Add alias data url option. This code existed but lacked a backend daemon to update the data every 24 hours. Adding this as well.

Ticket #434. Do not die when parsing config since we know how to recover. Only die during packages.

fix text

Use pgrep/pkill to save a bit of cpu.

This may break booting so try only 100 times and fail gracely in case of error.

Fix console auto-login.

Do not spread checking for value accross code. Do it in the function that is supposed to do it.

Put safe_write_file to the include it belongs to.

Ticket #255. Fix get_interface_info output to return propper ip address by using pfSense_get_interface_addresses function.

Adding from RELENG_1_2: safe_write_file() Writes a file out atomically by first writing to a temporary file of the same name but ending with the pid of the current process, them renaming the temporary file over the original.

Make sure the item passed is a string!

Fix output errors and collisions counters. The output of netstat added a column so they were using the wrong data.

Unbreak default sysctl handling

If config['system']['altpkgrepo']['username'] and config['system']['altpkgrepo']['password'] then pass along these values to the XMLRPC layer so we can use password protected pkg servers

These patches give you a display of the uptime of the active PPP link
on the "Status-> Interfaces" page, and also logging on /conf (to
survive reboot) of uptimes of each session after it is closed. In
addition, the status_interfaces.php page displays the cumulative...

Fix failure on opening gettytab fir writing.

Start using the new utility for monitoring dns hostnames used in aliases.

Latest PPP changes from 'BG'. Reformat this royal mess of formatting while I am here.

Set 2nd parameter for isAllowedPage. Will be required for #34, 33, 32

Process old entries, too

Update ttys serial lines. Resolves #165

To prevent collisions with the sio(4) driver, the uart(4) driver
        uses different names for its device nodes. This means the
        onboard serial port will now most likely be called "ttyu0" 
        instead of "ttyd0". You may need to reconfigure applications to...

sysctl kern.polling.enable=0 has been phased out. Simply run ifconfig interface polling or ifconfig interface -polling. Ticket #124

Make sure to get the wireless status from the correct interface.
Add support for the rssi, rate and base station mac.

Return up instead of running

Use get_real_interface() and does_interface_exist()

Unbreak status -> interfaces. TODO: Unbreak Disable Carp button

Handle PPP interfaces

Correctly handle PPP interfaces with get_interface_info()

Add a new (unlinked) page which allows entering a custom pkg repo URL

• Convert carp/vips code to behave the same as other interfaces.
• Make optimizations around it.
• Make sure when we reload teh underlying interface we reload carp too.
• Some fixes around the code.

Reviewed-by: scott@ and billm@

If /etc/spwd.db.tmp exists remove it before running pwd_mkdb

Pass origname instead of relying on a global

Check for interfaces with same name as alias. Ticket #92

Add pfSense_BUILDER_BINARIES: and pfSense_MODULE: additions

Add split() wrapper so that when split() is removed from php 6 we will not have any extra gotchas. Resolves #57

• In config_install validate the file that will be installed not the already present config!
• Convert most hardcoded /tmp to the global variable
• Do not reboot the firewall under the hood without confirmation from the user after restoring. Just ask the user to do it....

Move functions to pfsense-utils.inc since they can be called from either console or gui side

Move download_file_with_progress bar back to shared are where it belongs. These functions can be called from both console and the webConfigurator. Unbreaks pkg operations on bootup such as resinstall broken packages

Move growl related functions to notices.inc

Silence dnscache message into a debug check

Trim results

Return

Adding missing ; and full path to cut

Adding get_freebsd_version(). Use get_freebsd_version() to check if we should set flowtable values

Adding register_via_growl()

Adding Notifications tab

Oops, store config in correct location

Only invoke growl functions when an ip address is defined.

Set priority to 1 (HIGH)

Remove double global declaration

Adding notify_via_growl() function which assists in sending growl messages to your device. Will be used to alert important things such as wan down, wan high latency, etc.

Test better with function change.

Use the available function to avoid some errors.

Add isvm() function which will return true if it detects that we are running in a virtualized environment

Add configurable option to enable glxsb.

Set kern.polling.idle_poll to 1 to match the FreeBSD 4.x behavior. Message from the mailing list:

"Polling and kern.polling.idle_poll" -- freebsd-net -- Jun 30 2009

"A while back I upgraded some old gateways from FreeBSD 4.x to FreeBSD 6.x.
I thought the upgrade had went smoothly, but a while later I started having...

• Fix the pppoe reset script.
• Do not reload recursevly services while configuring interfaces
• Clean up the resync_all and reload_interfaces to not call services recursievly
• Fix interfaces.php to not try to save the config after you click the apply button....

• Move functions that output html to guiconfig.inc
• Remove some recursive dependency on some includes
• Remove ^M or \r from files
• Remove some entries from functions.inc to avoid including them twice
• Remove some unneccessary includes from some files
  ...

Merge backup_vip_function to the synchronize code where its only used.

• Create two new functions lock($subsystem)/unlock() to have more reliable locking using semaphores.
  This function can sleep till the resource is free and can help find not well behaving code.
• Remove most of the config_lock/config_unlock logics on the whole scripts/pages it is an abuse of this....

Remove another unused function.

Move exec_command function to util.inc.

Rename filter_translate_type_to_real_interface to interface_translate_type_to_real
Move this function to interfaces.inc where it belongs.

Remove unused function and function that provide the same functionality as php built-in ones.

Remove function that is present on php5.

• Teach get_interface_subnet() about carp.
• Increase scope to all interfaces when searching for the carp parent since the later is used even on those scopes.
• General cleanup of unused vars and code.

• Shuffle functions around to reduce require_once() a little.

• Convert schedules to pf(4).
  This allows to schedule the whole feature of the rules like queues/limiters/gateways/blocks/allows/etc...
• Whitespace cleaning on filter.inc
• Move schedule backend logic from pfsense-utils.inc to filter.inc and prefix with filter_....

• Move other functions around to where it makes sense.
• Reduce somewhat require_once() overhead by removing the includes from gwlb.inc they are not needed.
  Some more analysis is needed on the include path

More functions moving from pfsense-utils to interfaces.inc.

Fix "disable checksum offloading", and some other bugs with certain combinations of options while here.

• Make the carp ip fix for ipsec more general so other services that use the same methodology work.
  - Basically get_interface_ip() now knows how to handle carp(4).
• Move interface related function from pfsense-utils.inc to interfaces.inc that is their place....

Match 1.X behavior for PF macros. pptp and pppoe should be lowercase macros.

Fix polling.

Raise tab char count to 82

Bumb value to > 70 for dropdown invocation.

Convert tab strips into a select dropdown when there are more than 50
characters appearing in the tab names combined.

Improve the matching of carp ints to IPs.
Previously this stristr substring match would return incorrect/unexpected results. 10.0.0.1 would also match 10.0.0.16, 10.0.0.135. Adding a space to the IP to check will only match the specific IP given, since it is followed by spaces in the ifconfig output.