pfSense

correctly convert friendly name for PPTP interface.

Ticket #1875 (cvstrac)

Fix PPPoE/PPTP

cvstrac ticket #1892

Use nat port range 1024:65535

Fix UDP NAT Reflection

Ticket #1528

Revert "Add protocol options for Manual Outbound NAT rules. See ticket #1887"

This reverts commit 15f2431e9dcb567754434162a62ce179c31b11ac.

This really belongs on mainline, not RELENG_1_2, since it is a new feature.

Add protocol options for Manual Outbound NAT rules. See ticket #1887

use highest for systems with > 512 MB RAM available

Set version to 7.1

Blow away GIT repo until I get it under control (no pun intended)

Merge branch 'RELENG_1_2' of http://gitweb.pfsense.org/pfsense/mainline into RELENG_1_2

changes from smos@

Add per user bw bits from Ermal

Use set auth authname

Match 2.0 in terms of how we read in product name, etc.

Merge branch 'RELENG_1_2' of http://gitweb.pfsense.org/pfsense/mainline into RELENG_1_2

Use full path to binaries

Don't enable STP on any virtual interface.

increase server.max-write-idle to 999

Set CURLOPT_TIMEOUT to 0

Add check for after_install_info and display this info after package installation

Use $branch

Initial changes for NAT-T

Allow assignment of tun interfaces

add support for IP-less interfaces (primarily for assigning tun interfaces for filtering purposes).

Unbreal RELENG_1_2 checkouts

pkg_add -r git

Add missing ;

Log an error when we cannot lookup a gateways interface.

fix for IPsec timeouts/issues with large frames

fix CPU RRD graphs

Fix foreach error when dhcp settings do not exis on status -> services

Fix fend URL

Revert this back since it is used by packages, I thought it was unused. Need to fix fend.

gah.. minus two more lines that snuck in there.

remove unused line

don't enable STP on VLANs

Use product_website in footer

Update (c) year, update fend to include same links, etc. as prior to product_name change.

s/n/N/

Use correct co dir

Operate similar to builder scripts for GIT checkouts

Set sail for the sea of cheese aka 1.2.3.

Add missing '

Add missing '

Remove mainline and HEAD previous checkouts (CVS)

Use fetch and merge on subsequent checkouts

Use fetch and merge on subsequent checkouts

Use /root/pfSense/GITREPO/

Add missing ;

Correctly checkout branches

Checkout GIT correctly

use git fetch and merge

Correctly checkout GIT

Pull GIT repo

Use $g['product_name']

Use $g['product_name'] instead of pfSense

Use $g['product_name'] instead of pfSense

Reformat using tabs. No functional changes.

Set git fetch URL correctly

Checkout master correctly

Handle git branches correctly (missing half the command)

The MS-Dos filesystem was renamed from msdos to msdosfs in 6.3.

Update scripts for git (final repo cut).

Update bogons included in releases before an update

Make sure we match the right SPI to src and dst address, otherwise the purge of the old
spi fails.

- Add proper support for using hostnames for the remote IPsec gateway.
- Make IPsec reloading granular, this resolves the long standing issue
that a IPsec reload will cause all tunnels to drop.
- Change IPsec edit screen description for remote gateway that a IP...

Fix logic to prevent rule errors when dyndns hostnames do not resolve.
Previous Logic did not work

Replace another route -n get command. These can sometimes hang and cause a filter reload to get stuck.
Always use netstat -rn instead, these behave differently and can not hang according to ermal@

Version bump to 1.2.2

Include IPSEC reload patch from Seth Mos which was tested on his work
IPSEC cluster.

remove unused function

Rewrite bridge creation code to handle all scenarios correctly. Fixes numerous bridge bugs where more than two interfaces are bridged, and works correctly for all scenarios.

Set version to 1.2.1

Bump to 1.2.1-RC4. A couple of late FTP fixes have snuck in that
warrants yet another RC.

Write out all commands that should be run after filter load instead
of requiring the command to be run 5+ times for certain scenarios.

Fix sponsored by BSD Perimeter

Back out "Rules have not changed. Not reloading" changes.

Add missing product_ items. product_website is used on the system
firmware settings page.

Start building 1.2.1-RC3

Replace route get default with netstat -rn|awk '/default/ {print $2}' which
cannot block according to ermal because it uses libkvm

Do not show starting pflog0

• Reset filter reload status to Done if rules are the same
• Add a note that the rules are not the same and that the filter will
  not be reloaded to the system logs

fix CARP panics with VLANs

Check to make sure file exists before operating on it.

Don't use broadcast on CARP IPs.

Don't add CARP IPs on an interface that doesn't exist to prevent panic.

log mwexec if developerspew is on

Compare rules.debug to previously loaded rules. If no rule changes
have occured, do not try to reload the rules and sync changes to backup
members which can result in the rules being reloaded constantly when
load balancing is in use, etc.

return works fine with any firewall rule. it doesn't return anything for protos other than TCP, UDP, or TCP/UDP, but is valid in all rules. never exclude it.

fix "no state" rules

Remove 2.0ism

s/counf/conf/

Only pause 5 seconds if we actually started openvpn

Update firmware lock (upgrade) variable

Do not allow ro mount when an upgrade is in progress

Nuke stray n's

• Add interface_supports_polling()
• Use interface_supports_polling()

Fix NOBACKUP

Oops, this is PHP

Work on embedded, too

• Honor $config['system']['polling'
• Enable / disable polling even if we are not booting.