pfSense

Shutdown deleted process

Move assignment

Define interface correctly

Use unique name

move variable assignment more near to the code it is used in

Use array name for .crt|.key

Set keysize correctly

Use $int$port$proto for unique server name

Check for descr

• Obtain keysize
• Use keyname for server

Add missing #!

Add a shell interpriter

Add optional config locking reason and note it in the lock file.

Make multi-user friendly and lock config.xml during cert creation.

Make script executable.

Add me as a (C) holder add blurb about file being reritten by Fernando.

Correct log text and move to end of function.

Seperate server cert creation routines out to its own function for readability.

Note in logs when the server cert creation started.

Creatae server certificate if needed.

use description

Move easyrsapath to globals

touch up text

Integrate patch sent to m0n0wall-dev by Peter Allgeyer:

we have configured the captive portal to authenticate users against a
Radius server with reauthentication every minute. When using the MAC
Pass-Through feature, we have problems reaching hosts on the WAN side on...

Bump config version to 4.4

Return OpenVPN IP addresses when the alias type is openvpn.

Disable this rules alltogether with the note that tap(4) devices do not need any special treatment other than get exposed to the GUI of OpenVPN. This will come incrementally.
For rules a note would be added to the OpenVPN page as it is currently for PPTP/PPPoE to create filter rules themselves to allow traffic to flow....

Merge other missed fixes regarding FAIRQ.

Missed commit to make FAIRQ visible on the GUI.

Set limit of queue name to 15 chars.

Copy correct parameters when cloning queue.

Provide backend support for FAIRQ and apply some style to whitespaces

fix whitespace

don't prompt to remove LAN config if booting (you likely never assigned one, just remove it)

fix error when unset config items don't exist

add space to not errpr out while starting ftpseasame

First try to cope with the new ability of mpd to rename its interfaces.
This is just a s/ng0/typeof connection0/ for now.

The major work should be done to allow all optX and lan to be pppoe or pptp interafaces and take just assign the network interface accordingly. It simplifies a lot o things but this has to be done....

Only iterate variable if it is an array to silence error.

Tune PHP_FCGI_CHILDREN and PHP_FCGI_MAX_REQUESTS depending on how much
ram is installed for the captive portal operations.

Idea semi taken from http://forum.pfsense.org/index.php/topic,8861.new.html#new

NOTE: The forumula could probably be revised a bit but this is a good start.

Change the renaming of openvpn tun devices to ovpnX so netstat copes with the names.
Better do this than patch netstat to allow space for IFNAMSIZ in the interface column.

add IP alias support

TODO:
Remove IP aliases upon deletion
Add "type" icon

add IP alias support

TODO:
Remove IP aliases upon deletion
Add "type" icon

correct logic.

Differentiate between shared key and pki on the GUI.
Fix some errors with the javascript

Fix some typos.

Destroy the interface before creating a new one.

ticket#1700: comment out the fix, it does not work for editing existing entries. $_GET['act'] is not passed from pkg_edit to openvpn.inc... else the check would be easy...

Destroy the interface propperly to not have problems when recreating them.

Bump dpd from 20 to 120

Really check isset() correctly.

Damn you textmate.

Add pointtopoint style interfaces to get_interfaces_with_gateway()

Add missing ppp array item.

fix ticket#1700 and also check for protocol

fix ticket#1700

If gateway isn't an IP (ie. it's in the gateways array), then get the IP

Make recently commited code readable.

fix typo.

Convert old openvpn server configs to new the new config way.

Change back to the interface naming for tun(4) devices to openvpnX.
Openvpn allows this with the --dev-type and --dev-node arguments.
Better read the manual page throughly next time thugh i would like it to be handled automatically
but is not possible in Openvpn and FreeBSD devfs(5) currently.

Propperly fix certificate file creation for openvpn in client mode.

Fix a double '/' in the pathname for which openvpn seems to error out.

Comment out for now the renaming of tun interfaces to openvpn.
Seems like openvpn code has "tun"/"tap" hardcoded and FreeBSD devfs does not keep track of such interface renaming thus you cannot get a file descriptor to renamed device as openvpn like application do....

Remove debug messages that gave away info on why the login failed
add failed and successful login messages to syslog

Use DPD and frag support we already have

OpenVPN: remove keepalive, its already hardcoded

OpenVPN: added keepalive and infinite resolver options

Make loginpage more themeable. Only theme that uses this so far is the_wall. Other themes look ugly now (only loginpage) but are usable. Will be fixed within the next day(s).

OpenVPN: redirect-gateway: override instead of overwrite

OpenVPN: my fault... now its correct... the server pushes the commands...

OpenVPN: redirect-gateway added [for CSC]

OpenVPN: redirect-gateway added: missed the "push"-command

OpenVPN: redirect-gateway added

Send extra sighup after starting

Set /tmp/$interface_router even for non DHCP items.

Tag where the php.ini file was generated from

• Create tun interfaces for openvpn explicitly. * The only downside for now is that we can leak tun devices when tunnels are deleted.
  The propper fix can be by using devd script on down interface event or use the on down script called by openvpn itself....

Correct and error slipped in by previous commit.

Revert rc.firmware to a known working state now that the builder
process is a bit more sane.

Add Id

FreeBSD 7 has pf 4.1 which for stateless rules needs the "no state" keyword.
Make the needed change to make stateless rules be generated correctly.

Also there are no advanced options to be generated with this.
Fix this regression too.

• Unbreak By Queues view (it even allows full interface cloning now)
• Allow queues to be created safely
• Fix a typo on tab links for the traffic shaper tabs

Add detailed memory usage RRD graph.
Modifications by Nathan Moinvaziri (nathan@nathanm.com) to add

unbreak openvpn client config file generation

Call sync_webgui_passwords() instead of manual routine

Restore previous version.

Correctly grab root object for setting password.

Change default password to pfsense

Sync w/ HEAD

Bump version to 4.2

Pass -c along to mpd

• Use /tmp/firmwareupgrades
• Explode a mtree out to guarnatee we can extract a file

Latest round of fixes

Remove .tar file if it exists before extracting.

Correctly install files.

Do not pass z flag to tar. The item is now gzipped.

Disable some bandwidth checks(revisit later on)

Use correct variable

Correctly generate Floating rules.

Make OpenVPN rules work.

If XML Carp configuration sync fails, rerun the sync with setDebug(1).