pfSense

Fixes #622. Add a new file status for signaling default gateway under /tmp. dhclient script will check for this file to define if the interface needs a default gateway or not from its given routes.

Revert "Use a global array for the most part of using the return_gateways_array() function in the backend which should lower the memory allocated/cached by php a lot."

This reverts commit e51cf5960f6718a14c07daa7b6e96337fdba1f0e.

Use a global array for the most part of using the return_gateways_array() function in the backend which should lower the memory allocated/cached by php a lot.

Use nanobsd

Use !=

Nuke nonsense

Add back needed functions

Only check g['platform'] for nanobsd

Add missing functions and move check earlier since this only checks on bootup

Add system_identify_specific_platform()

Add reset button support to alix/wrap. Obtained-from: m0n0wall

Do not throw the error message unnecerssarily. It is legal on 2.0 to not specify default gw on 2.0 with pppoe/pptp links specified.

Reduce the amount of logic in system_routing_configure to check for existing routes. This code is in the same style as used
by Ermal. Ticket #507

Do not unconditionaly remove the default route and readd it. This should make system_routing_configure more
reliably. Ticket #507
stability

fix up text

Ticket #567. Create an entry on hosts file with the ip address of lan or the first inerface ip without a gateway if lan is not present.

Reload gateway groups when changing them.

Ticket #507. Do not remove all static routes to readd them back. The change will never delete a rule but define the action to be taken on it, either add or change a present route. Be consinstent on gateways allowed to be selected as destinations for static routes, including dynamic gateways.

Do not enable fastforwarding with ipsec. Silence command because default gw might not exist yet.

Fix typo.

Upps use correct variable. Reported-by: kaarposoft(forum)

Generate hosts entries for all ips configured.

Use the -s ident option of mpd to send the logs for the PPPoE/PPTP/L2TP servers to syslogs appropriate files. Create the files for these vpn's as for the others. Logs can be viewed in the VPN tab of the system log.

Resolve problems with dns server setup when allow override is set. Also add static routes for all nameservers to be friendly with multiwan.

Only fetch inet family routes.

Correctly configure the default route addition when interfaces are configured for pppoe/pptp. Handle in system routing configure dynamic interfaces. Also when chaning or configuring the defaultgw reconfigure the underlying interface, this helps when this interfaces are dynamics one.

Actually put it to background.

Put this on background to avoid delays.

Default to http.

Make sure we have initialized vars.

Allow the GUI auth API to be used for doing authentication against authentication servers specified. Teach Openvpn to use this API. Allow openvpn to authenticate against multiple servers that can be selected on the server configuration page.

Mute route delete message, regenerate resolv.conf as this also corrects static routes to the DNS servers.

Add support for authenticating users against server specified in the system->user manager->servers for openvpn. While there propperly fill the shared secret field for raidus in the servers page.

Fix several handling of gif/gre addresses and automatically added routes.

Stop fighting php bugs where a variable is not defined on one system yet it is defined on another.

Include item

Really unbreak sysctl handling

Unbreak default sysctl handling

Add some missing braces

unbreak CP after HTTP > HTTPS redirect

Ticket #270

Boos max_procs

Replace some occurrence of /tmp with the propper global variable in attempt to minimize the search for what changes /tmp permissions.

redirect to the correct port

Add redirect from HTTP to HTTPS. Ticket #63

Use /tmp/ssl.key Ticket #63

Automatically generate a certificate Resolves #63

increase the default cert lifetime

Generate a certificate at first boot rather than using a default public cert/key pair. Ticket #63

Remove the existing default route before when can add a new one, check when it differs from the existing one

clarify comment, throw a log message when get into this code path, which should not happen

Fix deletion of ipaliases. Use get_real_interface instead of the long name of function.

Ticket #217. Comment out code that is half finished.

Fix typo in Importing SSL certificate message.

Move port to correct part of URL

Add lookup table for sysctl tunable (sysctl.inc). Make config.xml values default to value 'default' Ticket #71

Use preload.php

Sleep for a second in beween

Prefetch index.php after starting webConfigurator and send it to /dev/null allowing the priming of the apc cache

Check to see if processes are running before killing

Check to see if powerd is running before killing

Set name in array

Do not output done twice Ticket #63

Call file_exists for each file. Ticket #63

Setup a_cert and a_ca for write_config() Ticket #63

use same variable

Shorten output string. Setup crt

Assign unique ref and commit certificate. Ticket #63

Use lighty compression instead of php gzip Resolves #198

Fix reboot function on 2.0.

Set max_procs for > 128 megabytes ram. Set min-procs to 0. Set the MAX_REQUESTS to 2 when memory under 128 megabytes

Switch over to handling DNS from ppp.linkup allowing mulitple 3G cards to coexist on the same box

Add PPP logging tab

Simplify logic

Add dns server discovered with ppp

Add missing , Noticed-by @px via twitter

Revert "Properly send mpd logs to vpn.log. Filtering needs to be done in the file itself. Some trimming of what gets logged in the daemon itself needs to be done but that to a future review. This should partially fix Feature #73."

This reverts commit f441ab6809cdf358c321144bb74da1f550136b17.

Set max children to same amount as max procs

Cap max requests at 500

Adding PHP_FCGI_MAX_REQUESTS => 500. This problem seems to stem from a little-known issue with PHP: PHP stops accepting new FastCGI connections after handling 500 requests; unfortunately, there is a potential race condition during the PHP cleanup code in which PHP can be shutting down but still have the socket open, so lighty can send request number 501 to PHP and have it accepted, but then PHP appears to simply exit, causing a 500 return from lighty.

Adding PHP_FCGI_MAX_REQUESTS => 500. This problem seems to stem from a little-known issue with PHP: PHP stops accepting new FastCGI connections after handling 500 requests; unfortunately, there is a potential race condition during the PHP cleanup code in which PHP can be shutting down but still have the socket open, so lighty can send request number 501 to PHP and have it accepted, but then PHP appears to simply exit, causing a 500 return from lighty.

Add pfSense_BUILDER_BINARIES: and pfSense_MODULE: additions

Properly send mpd logs to vpn.log. Filtering needs to be done in the file itself. Some trimming of what gets logged in the daemon itself needs to be done but that to a future review. This should partially fix Feature #73.

Allow up to 3 remote syslog servers. Resolves #11

Merge branch 'master' of git://rcs.pfsense.org/pfsense/nigel-ca-chain into review/master

Conflicts:
etc/inc/certs.inc
etc/inc/upgrade_config.inc

Note when openNTPD is starting. Resolves #42

Allow logging everything to syslog (allows syslog of snort, amongst other things)

Allow tcpdump by default on enc. There is no measurable performance impact, and it's annoying to flip the sysctls to allow when needed.

Tell syslogd to not compress information to the following line is repeated N times. This unbreaks sshlockout_pf.

Add better checks to the lighty port setting to prevent some issues with php5 arrays and wrongly set values.

Turn off fastcgi for installations with less than 65 megabytes of ram

Fix static route code so that upgrading from 1.2 works as intended.
We failed to clear a variable which meant we entered the wrong logic loop and with the default gateway IP at that.

Disable watchdogd until we can workaround its brain-dead-eness

Remove unneccessary include from system.inc

Port voucher login ability on CaptivePortal from M0n0Wall.

Various locking fixes are done with the import and this means that as of now pfSense has a better performin/behaving CP than m0n0wall.

Make sure that the apinger messages end up in the load balancer tab

Set hostname then call hostid onestart

Added support for certificate chains to manager so that lighty can deliver them via SSL.

Use exec_command instead of custom rolled function. Fix some logic here and there.

Adding PowerD knob to system -> advanced -> misc. This will be useful
for folks wishing for their firewall to use less power overall. Blurb
from the powerd man page from freebsd:

The powerd utility monitors the system state and sets various power con-...

Remove extra space