Minor text typo in DynDNS log message
I noticed the "Inital" typo in my syslog, so thought I might as well scan through the DynDNS messages and fix it up.
Minor fix to percentage output on pkg install
A variable not changed in a cut-paste.When on console, update_progress_bar should also only be called for 1-9 then every 10% progress, to reduce serial output volume.
Activate more Hash, DH, and PFS options that are available in racoon now. Note that SHA256-512 are RFC4868 compliant in FreeBSD, may break with other incompatible stacks.
Tidy package cleanup output
Add a "done." and newline after "Cleaning up..." Then when output is going to the serial console the next line will start cleanly and %age figures will not write over the top of "Clean".
Tidy up percentage logging to console
When on the console, the code only intended to update the percentage downloaded every 10%. Due to string-and-int type differences, the test was not working, all percentages were being logged. This is fixed.Also, add a newline after 100% - then whatever outputs next gets a clean start on a new line of output....
Ensure this gets a set default value or things can break
Correct variable name. Fixes #2571
Silence tar command to not garble console
To not clobber the console add \r when outputing status information on console
Correct mod_evasive setting per CP to confirm to what the CP page description says. Resolves #2270
Refine test
Do some cleanup of code for zones
Correct generation of lighty config for CP now that zone is passed as parameter
Merge pull request #196 from mtharp/dhcpv6-relay
Get DHCPv6 relay working (#1663)
Try to keep existing files rather than unlinking/replacing when restoring the package libraries during a package removal. Needs some testing, but for NanoBSD it fixes #1049
Unlock on return
There is no need to remove the @ from function names. Also properly unlock in case of exception. Size is constant and we know it no need for extra call to shmop. Put some more error checking just in case
Don't conf_mount_rw every time packages are listed
Every time System:Packages is selected, the code does a conf_mount_rw, checks for existence of some dirs, then does conf_mount_ro. This makes navigating the package install GUI slow on nanobsd, and it is not needed....
Make access to shared memory atomic
Use lock and unlock to make sure that all incrementing and decrementing of the reference count in the shared memory section is atomic. This ensures that there are not unusual timing conditions that could see 2 callers trying to update the reference count at the same time, which could result in the count never returning to zero. If that happened, then the filesystems would never be restored to read-only. (this is really just relevant to nanobsd) (note that shmop_* calls in php do not do any locking themselves - callers must coordinate their own access to the shared memory section)...
Construct the arguments to dhcrelay -6 correctly
Implements ticket #1663
Fix negative test
Pad data when adding to refcount reference, to avoid some oddities with how php handles such data. http://forum.pfsense.org/index.php/topic,51188.msg278141.html#msg278141
Supress the error message if the ldap bind doesnt happen
99./8 is not private IP space
Add the new 100.64/10 nat 444 CGN/LSN shared transition space netblock here. Also add it as a private network in the private network block
Merge pull request #192 from phil-davis/master
Validate advanced gateway monitoring settings
Allow dom_title width parameter to be null
This prevents warning messages if called without the width parameter - reported in forum http://forum.pfsense.org/index.php/topic,51822.0.htmlThe code already handles width being NULL or blank, it just needs to be explicitly defaulted when the parameter is not passed at all.
Put apinger default values into a function
The default advanced apinger parameter values are now returned by function return_apinger_defaults. So they can easily be obtained by any code that cares.
Expand cipher list and remove a cipher that Safari on iOS does not like after recent lighttpd changes. Fixes #2553
Make sure that we process the logic statement correctly, otherwise we might accidentally end up missing dual stacked or tunneled interface gateways
Merge pull request #175 from marcelloc/master
pkg_edit - add show_disable_value option to select_source xml option
include check to avoid function_exist errors
Be more verbose during upgrade to see why nanobsd isn't carrying over the setting as expected.
Fix for this crash report, received after resetting a test system to factory defaults and setting up initila stuff:i3868.3-RELEASE-p3FreeBSD 8.3-RELEASE-p3 #0: Sat Jul 7 21:34:19 EDT 2012 root@FreeBSD_8.3_pfSense_2.1.snaps.pfsense.org:/usr/obj./usr/pfSensesrc/src/sys/pfSense_wrap.8.i386...
Move locale files from /usr/share to /usr/local/share
Add an option to System > Advanced, misc tab to enable loading thermal modules (amdtemp, coretemp)
Fixup serial console settings that get applied to nanobsd. Fixes #2484
Fix system_routing_configure() function so it does not try to add static routes ipv6 subnets to ipv4 gateways or ipv4 subnets to ipv6 gateways while using aliases that includes both ipv4 and ipv6 subnets.
Fix Captive Portal SSL
Merge pull request #167 from ccesario/master
Change field name from lowloss to losslow fixes ticket #2537
Change field name from lowloss to losslowrelated in http://redmine.pfsense.org/issues/2537
Merge pull request #165 from r-duran/master
Fix get_staticroutes() function to handle IPv6 subnets properly
Make sure one_pass i selected when CP is active
Remove ca reference
Implement certificate chain in Captive Portal
Use Certificate Manager in Captive Portal settings
Do not directly print out a message when checking the interfaces, instead saving the list to use later. Display this list before the interface mismatch message. Fixes #2468 and fixes #2531
Merge pull request #158 from ccesario/master
Change ereg_replace to preg_replace() and ereg() to preg_match() functions
Fix LDAP over IPv6 (works fine, just needed slight adjustment to URI)
Reconfigure OpenVPN on gateway change
Change ereg_replace to preg_replace() function
Change ereg_replace() to preg_replace() function
Change ereg() to preg_match() function
OpenVPN servers can start on carp vips, just not clients.
Comment out adding static routes for gateway monitor IPs because we now bind to the correct Interface with apinger.
If we only have a IPv6 interface we'll use that, otherwise a IPv4 address always has preference. Revisit this for OpenVPN 2.3
Fix: Warning: preg_match(): No ending delimiter '/' found in /etc/inc/gwlb.inc on line 696
Add a small function to notify via remote methods only (smtp/growl). Notify when a dyndns IP changes.
firewall_aliases.php include tabs(ip,port,url) , list aliases sorted, use dom_title funcion to show titles.
Check in code that allows for using a gateway group as the interface on the OpenVPN server page. Only allow IPv4 gateway groups for now. We'll need to add IPv6 suppport here later when we import OpenVPN 2.3.Unbreak the gateway group function on broken configurations like a missing 3G stick....
Catch libraries from subdirectories of PBI lib dirs too
make sure this grep parameter is quoted
Setup library paths to include /usr/pbi/*/lib as a last resort to make sure things can find libraries. We may eventually replace this with a better method as this can lead to conflicts, but for now it will allow packages to find their proper libraries.
Do not try to start igmpproxy when there's no igmpentries configured.
Add missing global
Restore this code that was accidentally reverted
Make sure to skip "unexpected" RA messages from other interfaces, we don't want those.
Make sure that the limits are included in the normal ruleset, otherwise pf will use the defaults.
Remove null character at end of file
Fix trailing whitespace
A few launch improvements so that configuring the DHCP6 client on the WAN it immediately kicks in.With the fixed rc.newwanipv6 it should immediately spring to life.Redmine ticket #2414
Don't fall back to fetching PBIs from FreeBSD, they have none.
Support IPv6 aliases, the frontend already does. Removing does not work yet.See ticket #2483
Brazilian Portuguese (pt_BR) translations added
Add radvd to Status:Services #2485
Make sure this check is reversed, that way we only pick up the legacy field if the new one isn't set.
Merge pull request #140 from marcelloc/master
fix missing match array on help pages permission
fix missing match on help pages permission
Generalize the Crypto hardware option and add GUI support for AES-NI.
fix permissions check to xml package files and show only menus user has access to
Put configured limits on rules.limits file and load them before loading the ruleset. To avoid any issues with large rulests and options being loaded not first
Fixes #2490. If there is a descr set on the interface keep it and do not disable the iface
Make mac_format aware of cpzone but also friendly to previous code!
Revert "Make mac_format aware of multiple Captiveportal instances"
This reverts commit 54df925b9ea447bdd10f88a886e2ef11d44c3059.
Revert "Make sure mac_format is always defined"
This reverts commit 56f9032170d3130c2066e5eebbe18b96398073ca.
Make sure mac_format is always defined
Merge pull request #137 from bcyrill/patch-4
Fix Captiveportal zone
Make mac_format aware of multiple Captiveportal instances
Update Captiveportal
Added Captiveportal to service status
Merge pull request #134 from bcyrill/patch-1
Removed unused maxproc parameter
maxprocperip is defined per zone
Merge pull request #131 from marcelloc/master
fix jquery+domtt notices css on all themes
Needs a default case so IPv6 interfaces are resolved to a real interface