pfSense

Bug#1528. Automatically create outbound NAT rules on WAN for localhost when switching to manual.

Fix automatic and manual outbound NAT for PPTP. Fixes #954

Fix typo

Clarify text on outbound NAT page.

Also fix easyrule and auto->manual nat switch code. Ticket #1243

If an outbound nat rule has a protocol specified, show it in the summary view.

Allow entering an arbitrary subnet for outbound NAT translations.

Fix variable names. Ticket #954

Merge remote branch 'mainline/master'

Conflicts:
usr/local/www/diag_smart.php
usr/local/www/firewall_rules_edit.php
usr/local/www/interfaces.php
usr/local/www/load_balancer_pool_edit.php
usr/local/www/pkg_mgr_settings.php

gettext() fixes on firewall_nat_out.php

Modify various (s)printf format strings to allow translations to change the order of the inserted strings.

don't static port 5060 by default, it breaks things much more often than it helps.

Merge remote branch 'mainline/master' into 2_firewall

Conflicts:
usr/local/www/diag_nanobsd.php
usr/local/www/diag_packet_capture.php
usr/local/www/firewall_shaper.php

Fix interface name display for various cases on NAT rule listings.

Checked gettext() implementation on firewall_nat_out.php

Checked gettext() implementation on firewall_nat_out.php

Merge remote branch 'mainline/master' into 2_firewall

Conflicts:
usr/local/www/firewall_nat_out.php
usr/local/www/firewall_rules.php
usr/local/www/firewall_rules_edit.php

Cleanup HTMl formatting a bit more, stick mode on its on TR

Cleanup HTMl formatting a bit more, stick mode on its on TR

Cleanup HTML formatting

Fixing gettext() calls on firewall_nat_out.php

Implement gettext() calls on firewall_nat_out.php

Revert "Implemment gettext()"

This reverts commit 1baff2e5d32ebb5a71b07f38d9f97e3c4788e3be.

Lot of syntax errors

Conflicts:

usr/local/www/firewall_nat_edit.php

Revert "Implemment gettext() calls"

This reverts commit 7502ef0a698a49d9652cd3616447eb717cba707d.
A lot of mistakes

Conflicts:

usr/local/www/firewall_nat.php

Revert "Implemment gettext() calls"

This reverts commit 49031495b501e4477941fa6248fe94cc698f9dcd.
A lot of mistakes

Conflicts:

usr/local/www/firewall_nat.php

Implemment gettext() calls

Implemment gettext() calls

Implemment gettext()

properly create auto AON rules for PPTP, PPPoE, L2TP and OpenVPN

Create rules for openvpn/l2tp/pppoe/pptp when switching to manual outbound nat so the user can do less work.

don't generate automatic outbound rules again if there are already rules defined

more fixes to auto generated outbound NAT rules to match what is actually created by default in auto NAT mode

fix up auto-generated outbound NAT rules.

Don't wipe out user's configured NAT rules when switching back to automatic.

Add the no nat for tftp-proxy entry. Ticket #140

Correctly unset rules when switching disabling AON.

Revert "Correctly unset rules when switching disabling AON."

This reverts commit 989e5d62da2f7f6dad2bb55d20d2558cfb3fa34a.

Correctly unset rules when switching disabling AON.

Ticket #140 Fix Outbound edit page to really show errors. Propperly generate rules when switching from/to AON.

Resolves #179. Propperly check if this is an array or not. This is required since php 5.+.

Require filter.inc and shaper.inc

Add pfSense_BUILDER_BINARIES: and pfSense_MODULE:. Adjust Copyright to include 2009 on files that I have asserted (C) on

• Reorganize the 'apply' button infrustructure in the GUI.
  - Present three new functions is/mark/clear_subsystem_dirty('name_of_subsystem'). This makes easier to create such things without needing to introduce new globals.
  - Convert all pages to the new infrustructure...

• Create two new functions lock($subsystem)/unlock() to have more reliable locking using semaphores.
  This function can sleep till the resource is free and can help find not well behaving code.
• Remove most of the config_lock/config_unlock logics on the whole scripts/pages it is an abuse of this....

• Hide interfaces internals to other code and use the propper interfaces.
  Basically use get_interface*() functions instead of accessing fields like 'ipaddr'/'descr' etc...
• Make get_interfaces_with_gateway less heavyweight by getting information from the configuration stored in config.xml...

Massive javascript cleanup, all .js files now live in $g['www_path']/javascript
Purged unused JS

Do not automatically create a record for WAN.

Do not harc code white

Rewrite the pfsense privilege system with the following goals in mind ...

1) Redefine page privileges to not use static urls
2) Accurate generation of privilege definitions from source
3) Merging the user and group privileges into a single set
4) Allow any privilege to be added to users or groups w/ inheritance...

When switching to AON rules do not create nat rules for interfaces that have gateway.
This fixes some broken generated rules.

NOTE: That some more work is needed to make it comply to interfaces that are set as dhcp or to produce nat rules for interfaces other then WAN.

• Merge multiple PPPoE/PPTP interfaces from RELENG_1_MULTI_ANYTHING
• Much improved rule generation speed
• Many bug fixing in general of the interface handling

NOTE: this is the other half of changes

Continue interface improvements

touch up text

Ticket #1569

Switch over to array style page titles. Obtained-from: m0n0wall

Add a plus button on the top header of these pages.
This to make it easier on large configurations.

Alter outbound nat descriptions to match operation

MFC: Soon?

Do not unset advanced outbound nat settings if user deletes all rules and saves. This prevents the operator from having a nat-free environment.

Reported-by: Andrew Thompson

MFC 11291
Ticket #893 Also address "bugs/features" in the new XML parser (should be safe to MFC - needs testing before commiting to RELENG_1 though, works in HEAD perfectly)

use isset

Woops, we want !

Do not create rules every time user saves settings.

Ticket #858

MFC

MFC 9581
Fix description field being to far to the right if you aren't using
static ports

MFC 7185
Add new port display to this screen. This was supposed to go with [7145] and would have been MFC'd with [7153].

Forgotten MFC

• Center
• Write out   if not set

Increase colspan

Include static port

Remove #!/usr/local/bin/php

MFC 8573
Correctly deterimine starting address Ticket #738

Remove reboot required checks

MFC 6877
Update terminology - should help cut down questions too

anymore -> any longer

Cleanup HTML

Ticket #467 destination network on firewall_nat_out_edit.php incorrectly parsed.

Submitted-by-someone-who-refuses-to-accept-cvs-account: databeestje

When creating outbound nat rules, label LAN correctly

Woops, use the complete xml path.

Replace OPT[n] with the interface description

Do not mapped disabled optional interfaces.

Ticket #416

friendly tags

Nuke old outgoing load balancnig code

updating files to use theme images
removing images from /usr/local/www
adding specific images into the correct theme directories

Merge in virtual IP code
This changeset does the following:
merges proxy arp and carp setup menus
removes proxy arp menu from left side
upgrades config file from 1.7 to 1.8
moves existing carp virtual IP and proxy arp config to new <virtualip> tag...

Fix bottom rounds

Change "Inbound NAT" to "Port Forward"
Update _edit.php's to use diaplay_topbar()
Change "Outgoing" to "Outbound" for consistency between load balancing and NAT

Apply changes is now handled in guiconfig.inc

• Curve bottom of grey areas if needed
• Curve tabs
• Cleanup

Move more items to head (<html>, DOCTYPE)

Set page titles

Use head.inc. It's cool.

• Introduce new function helper for creating smooth tab headers
• Conver firewall -> areas over

Revert last commit.

Automatically take into account multi-wan support.

• Do not write_config() twice
• Alert user that we have created default items for them

interface -> interfaces

Use correct variable

ip -> ipaddr

When user turns on advanced outbound nat, automatically create rules for them.

Ticket 155

Ticket #6: Allow for NAT rule duplication (adv. outbound nat this round)

Echo out interface name when its not WAN.

This should address Ticket #32

doubleclick for edit
allow clicking on description for selection