Add nonewline to end of file to avoid issues when new options are added
Do not force the check to avoid garbling filesystems. Also be specific to check / filesystem and /cf on nano platform since the others will be checked on php code
Add the ability for dnsmasq to selectively respond to queries only on certain IPs and bind to specific interfaces.
Add the ability to change the port on which dnsmasq listens.
Show IPv6 link-local IPs as specific sources for ping, traceroute, and port testing.
Fix isvm check to match on product
Correct checking status of vhosts-http as submitted by: http://forum.pfsense.org/index.php/topic,61636.0.html
ipprotocol is inet or inet6
Take dynamic6 into consideration too
Deduplicate and simplify code
Disable apc during bootup since its useless anyway and just consumes memory uselessly
Reload ipsec with dynamic hostnames after bootup that dns is available. Helps: http://forum.pfsense.org/index.php/topic,61301.0.html
Make return value of vpn_ipsec_configure() have a meaning when ipsec is enabled. This can be used to detect if there are dynamic hostnames on ipsec policies
Seems behaviour of implode does not always produce a correct config so put it on the line to be generated
Make more strict comparison to avoid type issues when gw name only contain numbers. Fixes #2956
Fix whitespace and indent
Remove newline here
Rather test uniqueness from the filterdns itself to avoid duplicates
Do not put hostnames on the generated alias since filterdns will take care of that
Correct issue reported on: http://forum.pfsense.org/index.php/topic,61239.0.html
Update rc.firmware
Previous USB patch to add 4MB to partition size calculation was not only not working, but worse, causing dev's to close all related tickets as duplicates when it clearly still needed fixing.
Also, some dev's cited that "the CF install base is so much larger it's not worth breaking". Well, you've already broken it by adding a 4MB buffer for USB, which doesn't work. Either patch it right at 6MB, or completely take out the buffer all together to "fix" CF upgrades again. Why sit on a double broken patch?...
Don't force/hardcode background color in terminal. See http://forum.pfsense.org/index.php/topic,61131.0.html
Install Plan B for upgrading the RRD files to the newer format to add IPv6 fields.We now perform a search and replace on the XML contents to add fields instead of reading the XML into a PHP array.A conversion with a 2.0 config on a 128MB VM without swap is succesful, needs more testing....
Add default case when detecting dynamic gateway ip
Add a default to $wancfg['ipaddr'] case for both ipv4 and ipv6 to allow gateway ip to be returned rather then 'dynamic' for an openvpn connection
Make fc00::/7 private address space exclusion case insensitive
Add a new parameter to return all aliases, including hosts. It fixes #2941
Make fe80: addresses check case insensitive
point 2.1 to gui21
Not sure why this is part of the bootup process but it shouldn't. Hopefully nothing breaks
Use apinger macros to send the gateway name for openvpn and dyndns. Ipsec will reload all of it since its single process
Take into consideration even an all parameter
Include header here to be safe
Correct a bit formating here
Support even openvpn specifying a gateway group on the interface
Provide a function to get all gateway groups a gateway is member of
Optimize a bit interface_gateway_group_member
Correct syntax. Also support passing an interface as argument
Check if the argument is a gateway or an interface
Take into consideration the argument passed to the script and reload only related items
Run reconfiguration only for changed ip address or dynamic interface
Remove these from here
Sprinkle some unset to reduce footprint
Also ignore 'none' here on the backend to avoid letting previously broken rules mess up the rest of the ruleset.
Configure static arp inside interface_configure() since it removes all interface addresses and the static arps are removed together. It fixes #2939
Allow traffic initiated from host and without a default route to be sent to a gateway from policy routing.
Merge pull request #466 from stilez/master
Fix issue in version_compare that can cause versions to be wrongly marked incompatible
Make sure we do not pass an IP address to ip_in_subnet as a subnet, it does not handle that well.
Tidy up "shaper.inc" XHTML
Add missing closing P tag
Don't try to make /var/run a RAM disk if /var is already a RAM disk.
Update rc.filter_synchronize
A incorrect word
Fixes Javascript Errors
Fixes the Javascript error that prevents enabling/disabling the objectsin the interface.
Only check tunefs status when it's necessary, it avoids errors on iso boot. Fixes #2932
Only reload racoon when there is at least one tunnel enabled on the interface used to call rc.newwanip(v6). It fixes #2922
Merge pull request #512 from ExolonDX/branch_06
Tidy up "pfsense-utils.inc" XHTML
Add type to SCRIPT tagAdd CDATA section to SCRIPT tags
Add missing end TR tagAdd missing end TD tagAdd missing end SPAN tagMove table row start into the PHP IF statement, so that the IF statementgenerates the full table rowRemove duplicate ID in INPUT tagSize parameter in INPUT tag can only be a whole number...
Merge pull request #504 from awm/ldap_deref
Set LDAP option to dereference aliases when searching
Merge pull request #506 from phildd/master
Disabled package is also indicated by enable blank
Merge pull request #499 from phil-davis/master
Resync relevant OpenVPN instances when gateway group settings are modified
Show a little indicator icon if the direction of a firewall log entry is OUT, rather than the usual 'in'. No indicator is shown for IN.
Avoid adding URLs to filterdns.conf. It fixes #2921
Move some code to a function to avoid future duplication. Allow autocomplete on ping page. Add more escaping to command.
Clarify notes when there is an error reaching the openvpn management daemon for service status. Also, add service controls to the openvpn status page.
Consider packages that set enable to 'false' or 'off'
Check for disabled services when displaying service lists
Merge pull request #500 from ExolonDX/master
Tidy up HTML boolean operators
Update HTML boolean operators
Updated CHECKED, SELECTED and DISABLED boolean operator
Use is_module_loaded() to test these to avoid code duplication.
Provide openvpn_resync_gwgroup function
Allows all OpenVPN servers and clients that use a particular gateway group to be resynced in one easy call.
Fix whitespaces and indent
Fixes #1477. Use the new parameter to reduce igmpproxy logging level
Correct code and initialize properly variables escpecially arrays. Also do fixes and simplificate to make it more readble
Correct check from previous code path simplification
Initialize some arrays to avoid php issues and also use list() here to avoid double array dereference
Simplify a bit code branching no change on functionality
Merge pull request #498 from ExolonDX/master
Close INPUT tagsClose IMG tags and add "alt" parameterChange ONCLICK and ONCHANGE to lowercase
Give the process time to exit before running a new one
Merge pull request #497 from phildd/master
Do not bother with bogonsv6 if IPv6 allow is off
Use configured dns servers on radvd.conf, fixes #2905
Merge pull request #495 from phil-davis/master
Dynamic DNS add option for verbose logging
Improve bogonsv6 checks during update
Improvements to using pfctl to check the existence of the bogonsv6 table.
Only implement the bogonsv6 table if IPv6 allow is on. Otherwise, if it looks like there would be room for the table in pf, then save the file anyway to /etc/bogonsv6 so it is there if the user switches on IPv6 allow.
The rules already block all IPv6 when IPv6 allow is off, so it is a waste of 70,000+ table entries of V6 bogons. On small systems this matters, and I sometimes get errors loading rules with the default table entries limit even though I don't care for V6 stuff.
Tidy up "shaper" and "firewall shaper" XHTML
Update VALIGNDeprecated the ampersand in ANCHOR tagsUpdate TYPE in script
Add PHP shell playback script to control services from the command line (works like Status > Services)
Move these service control functions into service-utils.inc so they may be re-used.
The verbose log option is "set or not set" in the config and needs to be passed to subroutines as a boolean true or false.Note: This just works in services_dyndns_edit because the in-memory array of settings is keeping it as a boolean.
Put most log messages inside "if verbose logging". Things that are always logged are actual errors and success messages when something is done (or finally determined to not need doing).
Add CDATA sections to javascriptClose off the BR tags
Bump this a bit to allow for faster speed
Reduce a bit the entropy collection sources to not hurt performance. There are plenty of other sources on today systems
Escape the argument to avoid potential issues
Respect the product name here.
use a custom sysDescr for snmp similar to m0n0wall's format. Fixes #2893
Merge pull request #487 from rdlugosz/change_apinger_status_path
Track apinger status in /var/run instead of /tmp
No need for the ::(separators) they will be there