pfSense

Extra sighup not needed on 7

oops, changed a line in testing, revert

Comment code on why primary pools port is in use - the front end should
probably only show fallback pools with the same port, but that will be
difficult if not impossible to put in place until we have a better AJAX
framework in place.

Only print out protocols that have actions assigned

Fix generation of protocol line

Turn off TSO for BCE, too

Remove copy / pasto error

Disable TSO

Add mute argument to mwexec

Use mute flag on mwexec

Enable pf when it is disabled.

Add valid gateway check before adding route.
Why are we not getting a valid gateway here?
Add FIXME

Correct var types.
Add debugging for command execution and log errors when command does not return 0 (succes)

Fix existing static gateway check.

Fix adding static entries to array.
Skip static entries from polluting the dynamic array

Fix up functions for dynamic gateways

Use the correct ssh port for sshlockout rule.

Check for loss

Restore gateway name check
----------------------------------------------------------------------

Correctly procces group gateways

Use correct var

Add trigger level support

swap fields, make pretty

correct name, add descr

Add backend for dynamic interfaces, ui pages next

Add factory_shipped_username

Add factory_shipped_password

Add services_dhcp_server_enable which allows the DHCP server to be turned
off easily.

Add \n to avoid rule breakage

add missing newline

Note that when enabling a LAN interface that enables "Full firewalling and nat modes"

Latest config is 5.3

If for some reason an invalid element gets written out in config.xml
such as a blank fieldname, pfSense resstores the previous configuration.
However after restoring the configuration the WAN looses its configuration,
default gateway goes bye-bye, etc. Call reload_all() if we restore...

Increase icmplim to 750

Restore correct stub

Another optimization which avoids passing the rules twice just to knwo that ipfw is needed.

Add stub functions for code that references old names(mostly pacakges).

Suggested-by: Scott

• Rename get_current_wan_address to get_interface_ip
• Rename get_real_wan_interface to get_real_interface
• Simplify get_interface_ip by using find_interface_ip which should help in speed to since its using caching. Pointed by billm@
• Cleanup some code when passing or remove some unused one.

Improve vlan interface code to try to activate as much as possible on the parent, this allows to not maintain a supported list.

Add newline

Look for <pfsense>

Check for bogus decrypted config.xml

Correct tagfile_deformat() call

Oops, use tunnel address not network.

Clenup some more when bringing down an interface.

Clear the arp entries for the interface going down.

Slightly change order of commands for dhcp.

Refactor some code so frontend does not need to know about details that might change
during development.

style(9)

Move from $debugging to $g["debug"].

Remove unused var.

Mpd4 handles itself mss even with reduced mtu on pppoe case.

When interface is configured for pppoe and mtu is also configured then adjust the pppoe mtu c
orrespondingly as to us this means pppoe mtu and not parent interface mtu.

Do not try to generate rules for the known interface groups or should we?

• Cleanup some logic for loading ipfw module which might improve somewhat rules speed on very large rulesets. The best option is moving this to rules generation itself which would really speed up things but i will check it later on.
• Fix scrub rules generation since it was 'broken' by generating mss-clamping for all interfaces which might be the reason for some slow transfers reported. Remove generation of mss clamping by pf in pppoe case since we handle this in mpd4 and seems to be a better fit for this.

If <prefix> does not exist, then call safe_mkdir on it.

Only attempt to run plugins if directory exists

• Add run_plugins() function
• Use run_plugins() function in filter.inc
• Add plugin hook for parse_config and write_config

Cleanup some not needed code and use the correct debug var.
A lot of code references $debug as var but actually there is only $g['debug'] and $debugging that are defined!!

When creating vlan interfaces from console fill all the needed information.

Restore accidentally removed code with bigpond removal which is causing issues with pppoe/pptp.

Check for valid IP address using is_ipaddr

Suggested-by: Ermal

Misc style fix and checking to see if this is noticed by GIT

Actually insert the interface address when the option is specified.

Revert this and see if it affects any of problem reported on latest builds.

Add global debug where needed

Only show debug Running commands if $debug is enabled

Read in tabcontrols.php and properly eval()

If /usr/local/www/themes/$themename/tabcontrols.php exists, then eval
it and allow the tabbing colors and nifty corners to be overriden.

The file simply needs to look like:

$tab_active_bg = "#EEEEEE";
$tab_inactive_bg = "#777777";...

No need to lock config when setting filter update status

• Remove bigpond support from backend.
• Use killbypid instead of sigkillbypid SIGUSR2 is not doing what is expected.
• Actually start pppoe/pptp when the routing is called for this.

Use the correct syslog LOG_ERR constant and make this file executable.

Actually take a shorter route at saving the gateway.

Use correct interface to record gateway.

trim description so long descriptions on IPsec doesn't create an invalid ruleset

Switch network-backend to freebsd-sendfile from writev now that
lighttpd 1.4.20 has had some fixes applied.

Cleanup the status queues so it does not does stupid things.
Apparnetly this needs to be converted to 'ajax' calls as the traffic graph but for now live with this.

run hostap later in script, fixes ral(4) card difference in FreeBSD 7.0. Works with ath(4) also.

Ticket #1813

Move alwaysbroadcast item to a settable field.

Ticket #1814

XXX: Create GUI option

Always broadcast to help fix vista fun.

Ticket #1814

Correct check if we are running with only one interface. LAN ca be deleted without problems with the new interface code.

Take into consideration the subnet mask configured.

Use correct variable name for parent interface.

Use correct arguments

Reffer to correct variable

Set full path to ping

If we really can't find what to ping just continue with the next graph

Remove dependency on WAN having the default route.
Also failed because it did not use the full path to /sbin

Make sure we get a valid address to ping for the rrd graphs.

kill(1) does not need SIG in front of signals anymore. Though i do not think mpd4 responds to SIGUSR[1,2] the same as mpd3.

Leave an XXX for later on.

Seems that mtu and up parameters of ifconfig cannot be specified together, at least on lagg(4) case.

Reintegrate global minimum count setting enforcment.

Correctly determine interface mismatches.

Remove unrelated code from function. Add some style(9) to code so readability is improved.

Filter_configure takes too long to run on embedded and this seems to
upset apinger?

Make it possible for pakages to insert additional tabbed pages into an
existing tab group. This requires that each page in the tab group call
add_package_tabs() with the tab group name before display_top_tabs() so
pages can be inserted. While far from optimal, this system is really a...

Fix Wireless detection logic

Disable the second call to the same script for configuring wireless interfaces it seems redundant.

Search disabled interfaces too, this is needed since some code assumes this(i.e. wireless).