pfSense

Use exec_command instead of custom rolled function. Fix some logic here and there.

Adding PowerD knob to system -> advanced -> misc. This will be useful
for folks wishing for their firewall to use less power overall. Blurb
from the powerd man page from freebsd:

The powerd utility monitors the system state and sets various power con-...

Remove extra space

• Make it easier to switch back and forth between logging providers (clog, fifo)
• Add a $config['system']['usefifolog'] switch
• Switch back to defaulting to clog

• Hide interfaces internals to other code and use the propper interfaces.
  Basically use get_interface*() functions instead of accessing fields like 'ipaddr'/'descr' etc...
• Make get_interfaces_with_gateway less heavyweight by getting information from the configuration stored in config.xml...

Use mwexec()

Add space after tabs

Cleanup and reduce code line count.

Ensure fifolog_writer is still not running after killing syslogd.

Make logging work. Investigated by jim-p

fifolog_create size needs to be a multiple of 512

Use full path to fifolog_writer

Jettison clog. Man overboard!

Jettison clog and replace with fifolog which is included in FreeBSD 7.1

Use writev.

Tested by uploading to Picture widget, firmware update with 45 megabyte upload on 128 megabytes of ram.

Use write a the network backend to avoid FreeBSD falling all over
itself when uploading.

Do not use freebsd-kqueue and freebsd-sendfile

Use nice -n20 for common launched items

Check to make sure item is an array

• Make sure that $dns_lists is populated before operating on the item
• Make sure that $dns is populated before operating on the item

Revert "Merge IPv6 changes"

This reverts commit 1f9f2a95b7b42cf33e730535092e56e214fdb848.

Conflicts:

etc/inc/filter.inc
        etc/inc/interfaces.inc
        etc/inc/pfsense-utils.inc

use highest for systems with > 512 MB RAM available

Back out simoncpu's IPV6 code, it breaks IPV4.

increase server.max-write-idle to 999

Merge IPv6 changes

Mute messages from command when setting the default route.

Allow states to work outbound properly too.

Many thanks to Arthur Green for allowing me to use him as my remote
fingers to get this working right.

Turn on bridge filtering.

Noticed-by: BillM

Fix non working static route adding for DNS servers.
Needs to move to system_routing_configure?

Uhh, this is not a package any more.

Remove sleep

Return if booting

Remove quotes

Trim and correct var

Correct path to netstat

Correct route lookup

Surpress default route delete message

Surpress kill output.
Do not toggle polling on vlan interfaces

Surpress killall messages

Filter on outgoing too to allow things like keep state on tcp sessions and reply-to to
'work' on ipsec!

Suggedsted-by: billm@

Change it back to 1 not sure why we should look at the packet after the outer header is added.

Correct the value. We are interested on the packet after ipsec processing.

Change slightly the order of execution to allow overriding hardcoded defaults.

Disable bpf(4) abilities on enc0 by default its too much overhead to be on by default.
If one wishes to look up the ipsec traffic through tcpdump they can set the sysctl themselves with explanations here:
http://www.freebsd.org/cgi/man.cgi?query=enc&apropos=0&sektion=4&manpath=FreeBSD+8-current&format=html

Correctly pad with 0.

Change enc out sysctl to 0x00

Setup enc sysctl's

Add valid gateway check before adding route.
Why are we not getting a valid gateway here?
Add FIXME

Switch network-backend to freebsd-sendfile from writev now that
lighttpd 1.4.20 has had some fixes applied.

Moves the protocol and certificate options out of the general config page
to the Advanced admin access tab. The thought is that they should be next
to each other. The certificate management has also been modified to use
the centralized certificate manager. I took the liberty of removing the...

Simplify mod_expire statement

Cleanup authentication code. The basic auth method, the passwd, htpasswd
and pam backing functions have been removed. The basic auth method was
legacy code and the backing functions were redundant with no added value
that I could see. A simplified replacement backing function named...

• Fix 7.x uploads
• Include forgotten speedup commit

Compress javascript directory too

Add missing ,

Turn on Lighty caching and tell it what to cache

Make the GUI fast and capable of working in environments with RAM less than 128.
Actually this make the GUI on this system respond faster than in an ALIX with 256MB RAM.

Tested on: Soekris, Wrap, VMware environments

Remove trailing blank line

Correctly check if sysctl item is array

• Merge multiple PPPoE/PPTP interfaces from RELENG_1_MULTI_ANYTHING
• Much improved rule generation speed
• Many bug fixing in general of the interface handling

NOTE: this is only half part of the changes the other half will come after

Add relayd logging file

Always run openntpd as a client
Setup listeners if the service is requested

Correct return value

remove the setup_gateways_monitor() from system_routing_configure() as this causes a filter reload loop when
apinger is reloading.
Change apinger to reload instead of killing
use setup_gateways_monitor() in rc.bootup and rc.newwanip

Continue interface improvements.

Check if we have an array before enumerating it.

Add apinger configuration and gateway monitoring.

Only trigger backwards compatible path when we do not have a gateway address yet.

Make system_routing_configure() backwards compatible so that on upgrade from 1.2 the static routes still work.
Users can manually add gateways which can be referenced in the static routes after upgrade.

Add some checks before blindly trying to create a config file.

CarpDEV fixes. It now works!!

Tune PHP_FCGI_CHILDREN and PHP_FCGI_MAX_REQUESTS depending on how much
ram is installed for the captive portal operations.

Idea semi taken from http://forum.pfsense.org/index.php/topic,8861.new.html#new

NOTE: The forumula could probably be revised a bit but this is a good start.

If OpenBGPD is installed, allow the selection of BGP as our
default gateway.

Nuke opcode_* function.

Sync w/ HEAD

fix new gateway code to be backwards compatible.

don't foreach if it isn't an array (maybe temp fix while I'm working through other issues)

Backport -ss syslogd feature from HEAD. Only bind to 127.0.0.1 if we
are not remotely sending logs.

Make sure we sync before mounting ro.

Fix bug causing duplicate extension=apc.so entries in php.ini, which blows up PHP

Add ldap.so library.

Work sponsored-by: Centipede Networks

Set server.max-request-size to 384 for captive portal.

Set server.max-request-size to 384 for captive portal.

Limit captive portal uploads to /tmp/captiveportal which has no access to write files.

Convert the dns server code into a for loop and add 2 more dns servers on. Now we can easily control how many dns servers we want to allow entry for. Also get rid of code duplication.

Move route delete items to system.inc so they are performed on every change

When multiple gateways are present (muliwan) show a dropdown box next to each dns server allowing the operator to select which gateway the dns server should use to resolve addresses.

Improve fall through logic

Check if array exists

Add prelimenary Routing page.
Allow multiple gateways on one (static) interface

With the tweaks that have occured today fastcgi can now run again on 64 megabyte machines.

Add system tunables area which allows the user to fine control sysctl's.

Add trailing slashes to upload directory

Do proper locking when writing out php.ini.

Sync the disk contents to force the write to disk after closing the file. Hopefully this will help solve the php.ini from disappearing on bootup when a panic occurs.

Correct sysctl name.. it is movements not movement.

Remove trailing space

Set /sbin/sysctl -n net.link.ether.inet.log_arp_movement=0 when shared physical net is checked

Use mwexec() to avoid printing out the sysctl operation

Add missing text from ntp configure

We no longer need memory limit, our port does not use it.