pfSense

If we cannot find a service executable for an item and we make it to the bottom of stop_service() then simply killall service name

MFC 10496
Improve traffic shaper rules for assigning packets to queues (special consideration for NAT): MFC for next snapshot.

Correctly check for ftp helper status on optional interfaces

Tested-by: databeestje

teehee

Correctly enable / disable auto login for console ONLY

MFC 10453
Ticket #857 - correctly print out interface macro

Fix wireless for this latest hal when changing settings a second time.

Nuke stationname

Do not install rdr rule if $extaddr is blank

MFC 10300
Handle both communication and XMLRPC related errors.
Ticket #855

Sleep 1 before bringing the interface up.

See http://forum.pfsense.org/index.php?topic=752.new;topicseen#new for more info.

Do not setup ipsec if the wan is not fully up

Mount for RW before writing out OLSR config

Noticed-by: LSF

Revert lat commit

do not delete interface

Don't flag the wizard when assigning interfaces

Cleanup CARP init routines

Missing o.

Doh.

Use ne-lease-per-client true;

Add \n

Disable preemption if arp load balancing is enabled

• Call arp -da from interfaces_staticarp_configure() and not from GUI page
• OLSR improvements / fixes

Add deny duplicates;

MFC
Shaper fixes from BillM

Missing /var/db/

$olsr -> $olsrd

break after first loop (dont insert interfaces multiple times)

Woops, $config can't be used this way. Change to $conf

Convert friendly interface name to real name

HUP any running olsrd process, do not blindly launch a new process.

• Add dynamic gateway polling time
• Fix interfaces
• Only edit olsr.conf and use one instance of program

Update path to chrooted dhcp leases file

Add OLSRD package

Remove bullshit dedication.

Do not redirect connections across ipsec vpns through PFTPX.

Correct enable polling per interface

Do not turn on polling here, its the wrong place

Reverse arguments

Ticket #835

If the check for 3 octets failed, check the 1st two octets.

This is a complete hack but since we are so close to release we don't have much room to play here.

Axe the first occurance of "done" during bootup. It's extra.

If carp ips are defined install them regardless of the settings

If carp ips are defined install them regardless of the settings

Do not alter loopback interface.

Woops, call sysctl!

Temporarily enable polling using kern.polling.enable=1

Another attempt at fixing logs

Don't hard code dhcpd path

Use < 20 for primary dhcpd

Missing \n

Chown DHCPD chroot to dhcpd:_dhcp

• Missing \n
• Remove /* */ carpdev code, it will never make it into RELENG_1 anyways

Back out untested 9999

Kill DHCPD by name now that we are running in a CHROOT

MFC 10007-100013
Run DHCPD as user DHCPD. Start DHCPD in a chroot for extra security.

Default to secondary then look for primary status via carp.

Woops, make that 10, not 0.

MFC 9998
Fix an unsettling logic error.

Set hosts with a skew higher than 102 as a backup dhcp server.

Found at Bluegrass.net while building a new CARP cluster.

Add missing images

Ticket #830

Add rules for port 21 and 8021. ftp.microsoft.com is now unbroken again.

If Squid is installed but not running after bootup, log a error alerting of this info

Actually change the txpower.

Kill trailing space

When redirecting back to an internal ip, add some extra goo to help the process

Ticket #807

• Sleep a little longer after killing mpd to allow it to cleanup
• If there was a problem killing mpd, try killing once more and log the attempt

Do not return duplicate DNS entries

Remove uniqueArray() which returns a unique array (removes duplicates)

Use array_unique() which is built into php instead.

Add uniqueArray() which returns a unique array (removes duplicates)

Do not allow blank nameserver entries

Fix HTTPS captive portal option

Ticket #732

Add -v pointed out by David Strout

Use port 8001 for HTTPS

s/21/8021/

Ticket #821

Do not sync items marked with <nosync/>

Symlink captive portal elements over to /var/db/cpelements on bootup and creation/deletion

Backout last commit, it was already present.

Don't duplicate path.

Add element paths

Ticket #818

Do one command or the other

Correctly detect start script

Correctly detect start script

Move gui globals to guiconfig.inc

OpenVPN cleanups by mposch@gmail.com

Add spammers table

Extra safety check

Require include file

Only call foreach if it exists

Correct extract deep array variable

Add nextmta option ot SpamD

\n

Start service

Download additional files first

Parse pkg config and require file if needed

Update spamd related rules

Mount RW

Add vlan_native_supp and vlan_long_frame

Add <include_file> which will require_once() a file without evaling it. This will show us exactly where errors are.

MFC: soon

Add c/r

MFC vpn ping code

Remove CARP preemption from RELENG_1. Option will stay in HEAD and will need to be fixed but #797 is now fixed for RELENG_1

In-discussion-with: Bill M
Huge-issues-found-by: Tmueko

MFC 9611
Ticket #792 - fix 6 month old shaper bug that caused erratic speeds and latencies. With a 10Mbit queue and 4 iperf jobs running through it in default and otherL queues, I can get an icmp through in otherH with a mere 25ms additional latency on average.

MFC 9611
Ticket #792 - fix 6 month old shaper bug that caused erratic speeds and latencies. With a 10Mbit queue and 4 iperf jobs running through it in default and otherL queues, I can get an icmp through in otherH with a mere 25ms additional latency on average.