pfSense

MFC 8573
Use correct method. 'interfaces_carp_configure_xmlrpc' is used by the server but is not exposed.

Only process when booting

Do not enable STP on wireless interfaces

Surround alias with {}

• Use 0.0.0.0/0 so radius can allocate ips
• Do not set link mtu twice

Destroy carp interfaces before config so that after sync deleted interfaces are destroyed

override some global configuration parms if they exist
instead of hard coding these checks into the codebase

Bring bridge up later

Bring bridge up later

$bridges_total++ after each new bridge bringup

Adjust bringup order. Bring up bridge on wan too

MFC get_interface_list() so that NGX and CARPX does not show up in assign interfaces

Add aliasurl to array list. This will prevent developers working on head from preventing their firewall from booting when testing RELENG_1

Set $successful_update for NOCHG events

Ticket #736

MFC 8487
Work around an interesting bug when using not in rules by expanding the alias value since we cannot add the ! directive into the already defined aliases at the top which already have { } surrounding it

s/any/all

MFC 8476
Add quotes around label

MFC 8474
Make shaper first match - fix a months old oversight.

Set time and wan_ip earlier

Set time

Set $wan_ip

Log when we update the cache file

Setup captive portal for HTTPS when enabled.

Ticket #732

Echo out when waiting to bring up carp final

Sort array first

Do not return duplicate dns servers

Bring up optional and or LAN interface too

Down the bridge then bring it up

Do not lock alias if its empty

Ticket #729

Revert previous commit, the fix was in system.cin

Use nameservers.conf too, if it exists

If "/var/etc/nameservers.conf" doesn't exist then simply return the dns servers gathered up to this point

Use correct variable

Read in nameservers.conf for pppoe

Reverse $range_end and $extport⁰

Do not install reflection for rules that have a range greater than 500

Don't install rdr rules on subsequent filter configuration runs when pftpx is already started

Pointy-hat-to: ME

Bring bridgeX up

Bring bridgeX up

Remove inetd.conf if it exists before reloading it

Do not install nat reflection if we reach 19,991 rules

Restore previous behavior.

Set VERIFYHOST to false in all areas we are setting VERIFYPEER

Remove }

Don't verify SSL host on ZoneEdit

Seperate REGEX check into 2 checks

Only extract memory if dmesg.boot exists

MFC 8313
If no stationname is set, we still need stationname in front of the "pfsense" default we add.

Do not allow an alias name to be edited if the item is in use.

Ticket #720

Don't error when dns files do not exist in /var/etc/

run interfaces_carp_bring_up_final() at end of reload_all

• Add get_nameservers() which processes /var/etc/nameserver_$interface
• Use get_nameservers() instead of nameserver.conf since we may be in a multi-wan situation
• Only populate $master_list when item is <> ""

MFC array_intersect_key.inc

Use filter_configure_sync()

run filter_configure() as one of the last steps

Configure captive portal during reload_all())

Restart sshd during reload_all()

Fix captive portal redirects now that we are using LightHTTPD

Correctly detect captive portal on optional interfaces

If carp is not enabled then do not process

If carp is not enabled then do not process

Setup captive portal during reload_interfaces();

MFC 8197
Tickets:
#700 Problem when "Synchronize Enabled"
#716 syncing configuration data brokenMFC 8197
Tickets:
#700 Problem when "Synchronize Enabled"
#716 syncing configuration data brokenMFC 8197
Tickets:
#700 Problem when "Synchronize Enabled"...

sync carp_sync_client() and carp_sync_xml() with head

Treat NDIS drivers as wireless cards

Only update cache file when we get a success response from the provider

MFC 8165
Add 802.11g protection mode. (ticket #715)

Correct (cert key) order

• Correct argument order
• If user selects HTTPS but doesn't provide a port, default to 443

Disable fast-cgi

Do not unlink PID file, we may need it later.

Pointy-Hat-*2: me

Trim the contents when reading in

Remove useless debugging helper

Handle pppoe situations a little cleaner

Add a rule for the real interface in addition to ng0

Remove useless debugging message

• Cleanup redundant code
• Make sure ng0 gets processed if number of netgraph interfaces == 0

unlink pid file after kill operation

• Do not invoke fastcgi on memory constrained platforms (<72 megs)

Up maxprocs to 2

Lower maxprocs to 1

• Do not process hotplug events from pppoe
• Cleanup kill by pid function, accept a real pid (dhclient depends on this)

Remove -p

MFC 8066
Various fixes, set max_procs default value to 5, corrected system_generate_lighty_config invocation.
Use port #

Use Lighty. Hopefully it's here to stay, and mini_httpd is dead, jim.

MFC 8020
Use XML_RPC_encode() to populate XMLRPC arrays instead of setting a single XML_RPC_Value object.

Do not install rdr rule if we are launching PFTPX. Third attempt is a charm!

Use lowercase interface name

We no longer have system with FTP. We do it per interface.

MFC 7934
Expand src and dst aliases if required on traffic shaping rules

Ticket #696

MFC 7931
Correctly setup inetd items for tcp and udp

No need to use () when setting string variables.

• Center continue button
• <p> in between default text and login box

While here, cleanup default captive portal page quite a bit.

Compare upper case interface names

No need for 2 continue buttons. Zap the second.

Eliminate Warning: file_get_contents(/cf/conf/config.xml): failed to open stream: No such file or directory in /etc/inc/config.inc on line 68 bug when assigning interfaces

Use same exec() command when debugging

Avoid race conditions by usleeping for 100 microseconds after performing mount operations

When reloading_all() make sure we delete any old interfaces and recreate incase a user has reassigned the interfaces to new spots