Project

General

Profile

Statistics
| Branch: | Tag: | Revision:

# Date Author Comment
4c6a49d7 12/25/2010 06:40 PM Scott Ullrich

backup and restore libs in correct location

2b216e51 12/25/2010 06:38 PM Scott Ullrich

misc text formatting fixes (tabs)

b2dd7ab4 12/25/2010 06:04 PM Scott Ullrich

Only backup libraries at the beginning of the deinstall cycle.

7102210a 12/25/2010 06:03 PM Scott Ullrich

Add tab

d96623ef 12/25/2010 05:52 PM Scott Ullrich

Add newline after installation aborted

76a6d6ae 12/25/2010 05:51 PM Scott Ullrich

s/Trying to download/Downloading

62743ffa 12/25/2010 05:34 PM Scott Ullrich

Version bump to 2.0-BETA5. Merry christmas!

e9c7a334 12/25/2010 05:20 PM Scott Ullrich

Backup system libraries and restore during pkg deinstall.

1916d34a 12/23/2010 08:11 PM Ermal LUÇI

Instead of replacing the whole array just add the new vlanif member to the config. Should fix issues reported in http://forum.pfsense.org/index.php/topic,28202.15.html

5af3a589 12/23/2010 08:07 PM Ermal LUÇI

Add some more safe belts and remove code that is commented from long time now. Reported on http://forum.pfsense.org/index.php/topic,28202.15.html

e503c44a 12/23/2010 08:06 PM Ermal LUÇI

Add some more safe belts and remove code that is commented from long time now. Reported on http://forum.pfsense.org/index.php/topic,28202.15.html

60b66b60 12/23/2010 06:41 PM Ermal LUÇI

Ticket #1128. Ooops pass the right parameter to unlock.

100b7219 12/23/2010 01:58 PM Ermal LUÇI

Hanlde the case when advbase is not present especially on previous 2.0 setups.

c513c309 12/22/2010 10:32 PM Ermal LUÇI

Prevent other types of interface for being added to ng_ether(4). It might be the cause of panics reported here http://forum.pfsense.org/index.php/topic,31404.0.html

a8d6ac1a 12/22/2010 07:51 PM Ermal LUÇI

Ticket #757. Use correct pidfile.

4e8d55dd 12/22/2010 04:42 PM Scott Ullrich

Include captiveportal.inc if captiveportal_syslog() is not defined.

34507786 12/22/2010 04:41 PM Scott Ullrich

Use captiveportal_syslog()

ba482f41 12/22/2010 04:06 PM Scott Ullrich

Fix whitespace.

f6d4854b 12/22/2010 03:57 PM Renato Botelho

Typecast second param for array_merge to silent a warning that is breaking build since we check output of test_php.php looking for a string 'FCGI-PASSED PASSED'

673e8095 12/22/2010 03:39 PM Scott Ullrich

nuke trailing carriage returns

2d7bbd65 12/22/2010 03:36 PM Scott Ullrich

Nuke trailing carriage returns

4d5bbdfb 12/22/2010 03:32 PM Scott Ullrich

White space fixes and (C) for both Ermal and myself

4ac251b8 12/22/2010 03:29 PM Scott Ullrich

Log voucher errors. Fix whitespace. Remove trailing c/r

40eb0394 12/22/2010 02:08 PM Erik Fonnesbeck

Fix incorrect variable name.

d526314b 12/22/2010 01:59 PM Ermal LUÇI

Be consistent on having 1K == 1024

d31bc32a 12/22/2010 01:11 AM Ermal LUÇI

Make the CP locking more granular and make use correctly of exclusive/shared locks where appripriate. This speeds up CP login process.

eb7aa263 12/22/2010 12:27 AM Ermal LUÇI
  • Use exclusive locking for parts of config involving CP db.
  • Use more strict checking against empty/not set values for timeout and idletimeout
  • Do not overwrite idletimeout value with the per user idletimeout value during processing
  • Make distinction between radius accounting and re-authentication with radius to allow the code to be executed correctly. Ticket #1013
7513352b 12/21/2010 11:45 PM Ermal LUÇI

merge the dynamic obtained result with the static maintained list to not avoid strange problems as in Ticket #1123.

31eee4a6 12/21/2010 11:45 PM Ermal LUÇI

Do not do useless work.

90b4cc7d 12/20/2010 09:48 PM Chris Buechler

This checkbox enables, remove confusing enable/disable.

49659e1c 12/20/2010 07:41 PM Ermal LUÇI

Move the CP rule below webConfigurator abusal rule to allow adding the same protection to CP.

4cc23374 12/20/2010 07:38 PM Ermal LUÇI

Well now that CP has the proper conditions and fastforwarding is disabled by default its needed to untighten a bit the rule of CP with direction out on pf(4).

3d04de61 12/20/2010 04:47 PM Ermal LUÇI

attach to ng_ether(4) only on pppoe/l2tp/pptp links no others.

92a1c8e6 12/20/2010 04:43 PM Ermal LUÇI

Unbreak pppoe clients. Pointy-hat: myself

332bb9ab 12/19/2010 12:39 AM Scott Ullrich

Remove newline

df40aa86 12/18/2010 08:43 PM Scott Ullrich

Be less chatty

e9954aef 12/18/2010 08:32 PM Scott Ullrich

Do not spam console, spam log

77a842ef 12/18/2010 08:22 PM Scott Ullrich

No need to output 'Loading new configuration'. We already have a line written out telling the user what we are doing

81868072 12/18/2010 08:12 PM Scott Ullrich

use is_dir(). Sometimes php lack of uniform function names can be annoying.

42ee8bde 12/18/2010 07:57 PM Scott Ullrich

Ensure log directory exists before invoking syslogd

d64fa7f2 12/18/2010 07:42 PM Scott Ullrich

Touch log file so it can be created on livecd

4d0a1ade 12/18/2010 03:44 AM Scott Ullrich

Echo out newline

7afb7ea9 12/17/2010 11:28 PM Ermal LUÇI

Safe belts to avoid errors.

67b057a9 12/17/2010 10:55 PM Ermal LUÇI

Do not attach ng_etther(4) to every system interface. Instead do a search if netgraph is needed on single/every interface during interface configuration. Also enable netgraph support for interface as needed when enabling pptp/l2tp/pppoe/... . This should prevent the netgraph queue to slow down network performance on fast links.

ffdc499a 12/17/2010 08:34 PM Scott Ullrich

Show when disk is encrypted. Do not uppercase .eli

f8895161 12/17/2010 06:19 PM Jim Pingle

Add missing - in syslogd command line parameters, fixes #1111

6141561c 12/17/2010 03:53 PM Scott Ullrich

Add newline after 99 menu option. Otherwise it looks very strange.

3aad9551 12/17/2010 03:32 PM Jim Pingle

When we supply a version number, it should be under All/ and not Latest/ (which has names but no version numbers)

f444c396 12/17/2010 12:45 AM Erik Fonnesbeck

Prevent division by zero if the file size is zero.

979c5783 12/16/2010 06:56 PM Jim Pingle

Make $rel lowercase, since that's how it is on FreeBSD's package servers.

9c4c5e80 12/16/2010 03:12 PM Jim Pingle

If the IP stays the same, still resync VPNs if it's a PPP type interface.

ebbae443 12/16/2010 03:12 PM Jim Pingle

Move these back, it may not play nice with DHCP renews

b7c38b2e 12/16/2010 02:57 PM Jim Pingle

Move IPsec up too, it should always resync.

4d3367b1 12/16/2010 02:55 PM Jim Pingle

OpenVPN needs resync even if the IP did not change, because the IP may have disappeared and caused it to exit.

451e4a05 12/16/2010 12:19 AM Erik Fonnesbeck

Fix condition that needed to be negated after a recent layout change here and prevent a PHP warning if there are no voucher rolls. Fixes #1106

a5e64ca0 12/15/2010 04:22 AM Erik Fonnesbeck

Remove config lock for filter reload, since no config file reads or writes are happening here. Ticket #1071

f5c05fcc 12/14/2010 10:48 PM Ermal LUÇI

Make voucher xmlrpc error checking the same as others.

666bc4d1 12/14/2010 10:39 PM Ermal LUÇI

Ticket #1087. Cleanup whitespace and also do not rely on having the db dirty flag set for backing up the dbs but always do this!

eaca40df 12/14/2010 10:27 PM Ermal LUÇI

Cleanup of whitespace and use exclusive lock during reconfiguration of vouchers.

d12003c9 12/14/2010 10:22 PM Jim Pingle

Revert "Add voucher backup, configurable from Diagnostics > NanoBSD. Fixes #1087" - voucher db backup already existed under a different name. Ticket is still fixed, just by different code that was already there.

This reverts commit 0d89a2fcac3deea06bdc4a481bbdfae4f18b1ff8.

deeaf52c 12/14/2010 10:21 PM Jim Pingle

Revert "Set execute bit on backup script" Not needed.

This reverts commit d3a217e5d9e615058652cff5881a216c1a91a8c0.

d3a217e5 12/14/2010 10:13 PM Jim Pingle

Set execute bit on backup script

0d89a2fc 12/14/2010 10:10 PM Jim Pingle

Add voucher backup, configurable from Diagnostics > NanoBSD. Fixes #1087

95ceb35b 12/14/2010 09:15 PM Ermal LUÇI

No functional change just simple cleanup.

74b7361f 12/14/2010 05:38 PM Jim Pingle

Backend support for the retry parameter.

a776c720 12/14/2010 03:42 PM Jim Pingle

Move some lb status parsing functions to a common area so they can be reused by the widget.

26732357 12/13/2010 09:18 PM Pierre POMES

Ticket #960. Use XMLRPC automatic base64 encoding for strings (XML_RPC_auto_base64)

c9b08a50 12/12/2010 11:49 PM Jim Pingle

Show the full URL used to download package files, to aid in tracking down packages that do not install correctly.

25f6730a 12/11/2010 01:42 AM Pierre POMES

Add IPSec 'ipalias' VIP support. Ticket #1041

2c6b0d67 12/10/2010 11:44 PM Ermal LUÇI

Call a filter reload even though the ip might not have changed. This makes the gateway pools work after an interface comes up again.

6d8ff5e9 12/10/2010 11:26 PM Scott Ullrich

Hard code maxlockouts to 15 until GUI portion is ready

ca092d26 12/10/2010 10:51 PM Ermal LUÇI

Correct error messages.

65f7fba8 12/10/2010 09:53 PM Scott Ullrich

Correct webConfgurator auth/error messages

20699f3f 12/10/2010 09:38 PM Jim Pingle

Some IPsec mobile changes to inch a little closer to working L2TP+IPsec. Ticket #475

3aba1835 12/10/2010 09:02 PM Scott Ullrich

Add log_auth() which with send items to syslogd using LOG_AUTH facilities. Use this new log_authh() for login error and success entries

d0f980d4 12/10/2010 07:38 PM Ermal LUÇI

Log on the host the errors so we can use the sshlockout software for protection against abusal.

4d775dd0 12/10/2010 07:35 PM Ermal LUÇI

Be consistent on shifting array during authentication. Also check for array to avoid strange errors.

602cb4b0 12/10/2010 07:13 PM Ermal LUÇI

Leave a notice for this as well.

52a93b82 12/10/2010 07:10 PM Ermal LUÇI

If we fail to authenticate consider it as fatal since nothing else can be done.

9e18b392 12/10/2010 06:55 PM Scott Ullrich

Do not call rc.newwanip on bootup. Remove bogus return 0;

d1265444 12/10/2010 06:53 PM Ermal LUÇI

Start relayd after routing has been started.

9132ae35 12/10/2010 06:43 PM Ermal LUÇI

Do not spam logs uselessly on bootup and sleep a bit before starting apinger.

0567899d 12/10/2010 06:34 PM Ermal LUÇI

Fix config synchronization. Also unbreak the config when erroring out because it will loop indefinitely.

4ecc2263 12/10/2010 01:18 AM Ermal LUÇI

Hmmm use correct keys to returned array.

de272dac 12/10/2010 12:44 AM Ermal LUÇI

Just the password here.

18be996d 12/10/2010 12:34 AM Ermal LUÇI

Actually we expect an array to be returned.

e501de37 12/10/2010 12:19 AM Ermal LUÇI

Hello xmlrpc to another function!

68ef6e03 12/09/2010 08:42 PM Ermal LUÇI

Teach convert_friendly_interface_to_friendly_descr about carp vips. This helps cases like Ticket #1086.

8c3450c7 12/09/2010 08:33 PM Ermal LUÇI

Make this at least right though it might not be correct.

ec3e48f1 12/09/2010 07:03 PM Jim Pingle

Remove \n here, it was being printed on the console. Echo should do the right thing and print a newline at the end on its own.

f1a93dee 12/09/2010 02:24 PM Ermal LUÇI

Use the array index for this.

4f76b144 12/08/2010 06:45 PM Ermal LUÇI

Get rid of fastforwarding since it is not maintained from long time. Courtesy-of: battlez_ IRC

8ab82dec 12/08/2010 06:04 PM Jim Pingle

Only print "sainfo anonymous" also for xauth-psk setups. See http://forum.pfsense.org/index.php/topic,29164.msg157864.html#msg157864

2a834dcd 12/07/2010 11:59 PM Ermal LUÇI

Adjust even advbase while synching. This should be params though.

6f247d1f 12/07/2010 11:51 PM Ermal LUÇI

Expose advbase option of carp(4) to alleviate advanced configs.

a00fc1e2 12/07/2010 08:30 PM Ermal LUÇI

Do not atempt to start a service during installation.

c5901d28 12/07/2010 06:32 PM Ermal LUÇI

Use full path to binary and silence errors if any on unlink.

422bc2a7 12/07/2010 06:25 PM Ermal LUÇI

Move all dynamic dns update processes under the same even 'reload dyndns' since it makes sense to do so.

8c41a3e4 12/07/2010 06:13 PM Ermal LUÇI

Do the filter reload before vpn and some other services which get impacted or impact filter reload. Let alone that they do not impact filter reload at all.

7380bcdb 12/07/2010 12:30 PM Ermal LUÇI

Prevent sync problems when upgrading carp clusters. Now we check that the other cluster is at least at our config file version.