Properly generate a subnet based on the range of IPs for PPTP clients. Bonus: fix off-by-one math error in the NAT code that does the same thing. Fixes #1614
New line missing after pkg is extracted.
More whitespace fixes.
If no event_address in globals.inc specified assume the default. Also fixed whitespaces.
Kill olsrd if it is not enabled. Reported-by: http://forum.pfsense.org/index.php/topic,37931.0.html
Do not check dynamic and special interfaces for a complete interface mismatch error
Do not create blank domain lines if domain is gone from config.xml. It breaks tools such as dig when troubleshooting, etc.
Fix formatting of fastcgi params in lighty config.
Add a GUI field to adjust the max number of processes for lighttpd.
Do a more thorough check for platform on the ro call, or factory reset blows up.
PHP says that arrays cannot be used as keys, protect against this case as reported that some keys are arrays!
Restore this back to allow both users and vouchers enabled at same time.
Up config number for username sync upgrade.
Upgrade sync username to latest config version.
Correct functiong does_vip_exist() to actually work. Fixes #1598
Ooops fix the function. Spotted-by: wagnosa(IRC)
NEw functiong does_vip_exist() which works for carp and ipalias type vips to help in carp sync issues. Fixes #1598
Do not call time() uselessly every time for each entry. Instead just snapshot it and use it in calculations. This helps performance and useless paranoic time fetching since every 60 seconds the code will be executed again.
Do not test for availbility of voucher session_timeout in the database it is mandatory for vouchers. This will make sure that if ever a corrupted db happens a user will be required to relogin and correct the db. Possibly related to: http://forum.pfsense.org/index.php/topic,37636.0.html
Fixes #1327. Trigger synching of vouchers to config through check_reload_status. Retire the saveinterval option since it is not useful anymore. Use the prune process of captiveportal to sync vouchers as well to fix issues as reported-by: http://forum.pfsense.org/index.php/topic,37636.0.html
Ticket #1545. Ooops pass parameter so the dyndns works correctly. Pointy-hat: Copy/pasto
Allow OpenNTPD to listen on Virtual IPs, not just interfaces. Fixes #342
Fixes #1341. If a table has not entries it is marked as persist and pf(4) does not clear its contents. Schedule a table flush for these tables after filter reload to make sure an entry is not forgotten.
Actually correct vip check to be correct for all vip types.
Do not destroy and create the vip during interface [re]configuration since it causes unecessary work and most importantly issues.
Disconnect any voucher forced to expire if there are active sessions with it.
Allow a second optional argument to captiveportal_read_db to be able to index the read db by the field in the db.
Correct variable name so voucher disconnect on synchronized vouchers works properly.
Correct event calling during bootup for rc.newipsecdns and also convert the command executed during an ipsec even to go through check_reload_status which will prevent races on calling rc.newipsecdns. Which might lead to many filterdns processes.
Fix pppoe server user rule generation. Fixes #1577
Correct possible lock leak.
Fix whitespace.
Ticket #1412. Fixing the access login to the user manager presented another problem since now users cannot change their passwords anymore. Allow this through another page and an extra priviledge needed to be added to the user for allowing them to change the password.
Ticket #1545. Take into account curl errors during dyndns service checks otherwise will just mark some updates as successful even though they are not.
Merge branch 'master' of github.com:bsdperimeter/pfsense
Typoes
If a mode_cfg subnet is defined for IPsec, also add it to outbound NAT.
Add a GUI selection for racoon's generate_policy directive since it may be useful in certain configurations, especially for mobile clients.
When making a P2P SSL/TLS OpenVPN server, if the given CIDR for the tunnel network is a /30, don't use the OpenVPN server directive. See ticket #1417
Show how much data has passed on an SAD entry.
Disable this until it can be properly fixed.
Add tunable, by default disabled, to enable the default gateway switching feature when the default one 'disappears'.
Include .inc files for plugin system
Prevent races on resovlconf generation as well by adding a lock.
Only add pppoe to the interfaces list if it both has an entry and is in server mode (i.e. not disabled.)
Some extra protection against putting empty values into the ruleset.
Ticket #1534. Try to stop packages during reboot of system.
Increase timeout to 2 minutes. Ticket #1545.
Ticket #1545. Lock each dnsHost to be updated to prevent running two instances in parallell.
Silence the route changing since it fills the logs with not needed info.
Just use the long reference here instead of creating potential dangerous reference.
Add function header
Adding a new hook system for firewall nat edit and firewall rules edit page.Basically if the directory exists it will suck in the files to extend these pags.
/usr/local/pkg/firewall_nat/input_validation/usr/local/pkg/firewall_nat/pre_write_config/usr/local/pkg/firewall_nat/htmlphpearly...
Rather make use of $global variable for RRD path.
Remove out-dated RRD file as it will cause broken images to appear on RRD graphs page.
Provide a voucher_expire function so that voucher can be expired through a POST.
Put some debug info during dyndns update under debug conditionals.
Actually add more error checking and do not schedule a scan if it is not possible to retreive the wan ip address.
Improve some code and check return value from _checkIP.
Don't overwrite the $target variable. Fixes #1415
Check that the returned ip is an ip_address and not blindly trust the returned information.
Correct dhcpd statement for unknown-clients. Fixes #1555
Update some code to be more readble and more compliant to php5
Correct the interface alias generation. Wrong copy-pasto before.
Correct the interface alias generation.
Use remoteips here.
Resolves #1243. Properly handle pppoe new format of config so correct rulesets are generated.
Fix automatic and manual outbound NAT for PPTP. Fixes #954
Fix syntax error/typo. Fixes #1372
Fixes #1444. Implements the same fix that issue ermal made in #1522 to the console menu
Fixes #1386. Correct unlooping nested port aliases.
Correct code to use correct refernces for proxy settings set in Advanced->misc. Reported-by: http://forum.pfsense.org/index.php/topic,36939.0.html
Correct curl setting for setting a proxy username and password. Reported-by: http://forum.pfsense.org/index.php/topic,36939.0.html
Reject alias names that are too long. Fixes #1510
When uninstalling packages try to remove even any rc files created by packages.
When converting 1.2.3 LB pools to 2.0 gateway groups, strip invalid characters from the group names and update any rules referencing the old name. Fixes #1515
Correct default code disabling! Ponty-hat: myself
Disable the default route switching code since its causing more issues than solving. It needs more work to get re-enabled.
Fix PPTP server radius settings upgrade from 1.2.3. Fixes #1292
When uninstalling a service actually stop it first.
Test for null names passed to these functions as a safety precaution.
Ticket #1534. Check if a rc file exists before trying to run it. Also return if we execute a stop command through rc file to be consistent with the start_service function.
Don't put an empty PSK into the file, and try to avoid extra whitespace to be safe.
Remove Total users graph this has become redundant and replaced with a cumulative result.
Fix small typo
MAC prefix to vendor resolution at Status->Interfaces, Status->DHCP leases, Diagnostics->ARP table
Merge branch 'axscode-pfs'
Merge branch 'master' into yakatz-ssl
Merge branch 'drcookie-he.net'
Added HE.net (dns.he.net) to the list of available dyndns services.
Resolves #1529. Check if the file exists before opening it.
Resolves #1524. USe the correct field from netstat parsed output.
Test for array before using variable as one.
This function takes two parameters, fix PHP error. Reported at http://forum.pfsense.org/index.php/topic,36648.0.html
Make autocomplete on the login form optional.
Fix IPsec descr trimming for rule labels. Ticket #1426
Test for array/size before foreach