Fixup update URL
Use the FreeBSD script for ldconfig to catch all libs
Avoid warnings later on if no config for layer7 exists
Get rid of embedded platform. Its time to GC this
Start using filterlog
Switch over to filterlog sooner than later
Unset also here
Do not allow upgrade_101_to_102 to exit early
This upgrade step does both Captive Portal stuff and OpenVPN stuff. So do not return early just because there is no Captive Portal config.Both Captive Portal and OpenVPN tests changed to be positive tests, to make sure that everything is checked/tested and there is no chance to return early.
console, reload firewall rules after enabling SSH
Get real interface when dhcrelay uses default GW
If the DHCP Relay server is not on any local subnet, and not on any subnet that has an internal static route, but is somewhere that no specific route is known, then this code finds the default gateway and uses that in the DHCP relay "-i" parameter. The current code gets just the interface name (like "wan", "opt1"). But DHCP Relay command needs to be fed the actual device name "vr0", "vr1" etc....
Merge pull request #1072 from marcelloc/patch-3
tls-verify requires quotes around the command to be executed. Ticket #3596
Nowdays there is no real difference between the kernels apart the ZFS support. So do not keep a distinction anymore
fixing typo for GIF tunnels to work over IPv6
the call of get_interface_gatewayv6() in the creation of a GIF tunnel over IPv6 leads to a "Fatal error: Call to undefined function get_interface_gatewayv6() in /etc/inc/interfaces.inc on line 934". changeing the function call to get_interface_gateway_v6() fixed it for me on my local system.
Also add similar checks on rc.newwanipv6 as in the v4 version
Forgot to remove the problematic part from previous OpenVPN loop fix commit
Take care of the loops reported for OpenVPN in tap mode. Also fixes the problems of tap disappearing from bridge if its a member.
fix git path calls and CODIR
it may need some checks/fixes on pkg-utils.inc as git downloads but not installs.
After manual pbi install of git, "pfSsh.php playback gitsync master" works fine with this fix.
Correct typo on function name that has slipped unnoticed. Reported-by: https://forum.pfsense.org/index.php?topic=74688.0
Merge pull request #1055 from ExolonDX/branch_master_10
Make extra sure that we do not start multiple instances of dhcpleases if, for example, the PID is stale/invalid and there is still a running instance.
Put the fix to be more generic to prevent any other leak possible in the long run. Fixes #3062
Update captiveportal.inc
Release unused pipeno when client is already authenticated.
Bug #3062
Indentation
Dont check for 'checked' but rather if it is just set
Tidy up "functions.inc"
Escape single quotes for TABLE and HREFUpdated closing TR tag
Make rc.php_ini_setup ready for php 5.5
Remove unnecessary semi-colon.
Remove TRIM_set and TRIM_unset support. This method isn't very elegant and isn't necessary in the long run. It's better handled in the installer stage and not after the fact.
Merge pull request #1041 from PiBa-NL/carp_maintenance_2.2
carp, provide a way to 'permanently' set carp to 'maintenance mode' (advskew 254) persisting a reboot
carp, provide a way to 'permanently' set carp to 'maintenance mode' (advskew 254) persisting a rebootOption to set CARP interfaces to 'maintenance mode', persisting through a reboot so the primary machines stays as backup/inactive.This is required when there are some problems (possibly with the hardware) and the primary machine needs to be booted and checked again before becoming 'master'. Currently it will take back the master state during reboot even though there might still be problems or some re-configuring to do....
Add privileges
Reflect the service name when starting it
Add localhost as always allowed and ensure to include the access lists
Write out the access list correctly
Configure acls for local networks and ensure listening interfaces are correctly set
Add missing new line
Correct reference
Ensure TXT support on host descriptions actually works
Remove even unused pamd.conf
Remove utterly old libmap.conf file
Update disktab to FreeBSD 10
Remove cvsup file from pfSense tree
Another remenant from old days
Remove remenants of pccardd from FreeBSD 5
Update protocols file as well
Remove unused files
Do not use the version_kernel ad version_base files since they are not relevant anyway
Use proper variable name for the interface
Correct check that was broken even before to actually make the ieee8021x enable from proper setting. Reported-by: https://forum.pfsense.org/index.php?topic=74013.0
Log everything when selected to do so
Correct the generation of antifpoof rules with tracker. Also honor the log directive. While here remove a duplicate antispoof declaration further down
Give each rule hardcoded on the ruleset a tracker so log entries give up proper results there
Make this a global so no errors occur
send crash reports via HTTPS
Change default charset on pages to utf-8
Merge pull request #1031 from ayvis/master-br-patch
replaced uppercase html tags with lowercase
Merge pull request #1035 from packetwerk/rc_permissions
fix permissions on two rc scripts
Fixes #3543, correct the typo in spelling
While here escape the passed valuye to avoid problems with input
Somehow these got changed to /usr/local/sbin/ipfw instead of /sbin/ipfw
Make this more usable by putting a delimiter in there
Fix this for master
Also configure log levels any time the daemon is restarted.
Try to put the connection name in the logs for easy identification
Fix deletion of ipfw rules and pipes for passthru mac, it fixes #3538
Fix file name for domain overrides and ensure trust anchor is referencing the correct file.
Use the correct xml tag to check against
Only display config title if option is enabled
Rather put forwarding for DNS servers into the configuration file
Ensure if port is configured it is then used
Add privileges for accessing DNS Resolver
Use array_flip even for the package parsers
Add require_once where needed to avoid redeclaration from nested includes
Configure first the vhid and than pass the vhid when configuring the carp this makes the ip assigned to carp as well
Remove balancing reference that does not exist anymore
Do not garble the error logging message
Avoid placing an empty "interface listen" directive in ntpd.conf
Try to restore last working ruleset rather than staying without configuration at all
replaced uppercase html tags with lowercasejs files saved as UTF-8 / LFlanguage="JavaScript" deprecated, replaced with type="text/javascript"
Merge pull request #907 from PiBa-NL/openvpn_client_usercredentials
openvpn, allow for entering client user credentials in the WebGUI
Merge pull request #953 from N0YB/Gateway_Quality_RRD
Fix gateway quality RRD to have the correct granularity and be consistent with the pfSense graphs set.
replaced <br>, <br/> with <br /> in ANSI encoded files. Converted these files to UTF-8
Disable default allow incoming rules for 6to4 and 6rd interfaces. This rule unintentionally allows all services on the interface to be reachble and maybe more!
Merge branch 'master-br' of https://github.com/ayvis/pfsense into ayvis-master-br
fix typo
standardize URLs
standardize on https on www.pfsense.org
standardize on https://www.pfsense.org, point to packages.pfsense.org
standardize on https://www.pfsense.org
Make the Additional tags that may be supplied compliant with new schema
Make the parser more efficient to test for keys rather than searching inside the array
Unbreak listtags(), it should return regular array
Correct variable name, while here unset some large var
xhtml Compliancereplaced <br>, <br/> and </br> with <br />