pfSense

Add status/log links to Firewall rules

Ticket #525. Correct message shown for a schedule now that the behviour has changed.

correctly go to interface for edit bogons/rfc1918

Simplify logic implemented on commit 673d29c0

When delete a filter rule that is associated with a nat rule, cleanup the association

The sum of % for table size should be 100%, fixing it

fix reject rules to the same as in 1_2. return is valid on all rules

Add missing PF 'max' tracking option , and clarify message for 'max-src-nodes'

Escape ' Ticket #143

Require filter.inc and shaper.inc

Add support for 'max-src-conn' PF feature, to limit the maximum number of established connections per host

Add pfSense_BUILDER_BINARIES: and pfSense_MODULE:. Adjust Copyright to include 2009 on files that I have asserted (C) on

Catch up to reality -- there are now 10 fields

Merge branch 'master' of git://rcs.pfsense.org/pfsense/automatically-managing-firewall-rules-with-nat-rules into review/master

Make the icon the correct size

Add avanced item indicator which will show when hovering the mouse over the icon which advanced item has been enabled

Added support for automatically managing firewall rules with NAT rules.

• Reorganize the 'apply' button infrustructure in the GUI.
  - Present three new functions is/mark/clear_subsystem_dirty('name_of_subsystem'). This makes easier to create such things without needing to introduce new globals.
  - Convert all pages to the new infrustructure...

• Create two new functions lock($subsystem)/unlock() to have more reliable locking using semaphores.
  This function can sleep till the resource is free and can help find not well behaving code.
• Remove most of the config_lock/config_unlock logics on the whole scripts/pages it is an abuse of this....

Move interface groups after Floating and before other interfaces

• Convert schedules to pf(4).
  This allows to schedule the whole feature of the rules like queues/limiters/gateways/blocks/allows/etc...
• Whitespace cleaning on filter.inc
• Move schedule backend logic from pfsense-utils.inc to filter.inc and prefix with filter_....

Use * instead of Default for consistency

Do not show an * in schedule box. No schedule is applied for block private.

• Introduce interface groups. For now they are availble only on Firewall:Rules section maybe it would be usable to have tham on nat too.
• Some fixes and cleanup.

Massive javascript cleanup, all .js files now live in $g['www_path']/javascript
Purged unused JS

More L2TP fixes

correct description on block bogon rule

Do not hard code white color

Honour listbg font properties

Use listbg instead of hard coding red background for RFC1918 information

Catch up with file rename.

Rework most of the OpenVPN support. The interfaces have been updated to
not use the pkg system and the configuration has been migrated to an
openvpn prefix. The centralized user and certificate manager is now used
to support the openvpn configurations. Most of the files removed in this...

Rewrite the pfsense privilege system with the following goals in mind ...

1) Redefine page privileges to not use static urls
2) Accurate generation of privilege definitions from source
3) Merging the user and group privileges into a single set
4) Allow any privilege to be added to users or groups w/ inheritance...

Rewrite portions of the user manager to ensure data is properly synced to
the system password and group databases. This is to provide better support
for centralized user management when local account administration is
preferred.

I also took this opportunity to do some housekeeping. A lot of funtions...

• Merge multiple PPPoE/PPTP interfaces from RELENG_1_MULTI_ANYTHING
• Much improved rule generation speed
• Many bug fixing in general of the interface handling

NOTE: this is the other half of changes

Use different name for loop var.

Continue interface improvements

Move alias popup to function. Display Alias popup for NATs now.

Introduce OpenVPN tab

Fix typo.

With addition of queue column there are 9 columns to fill now so the message when there are no rules fills the whole area.

Do not show LAN interface when it is not present.

minor cosmetic nitpick - move "selected" icons one column to the right
after the queues column got introduced

Finish the Floating rules toolbar.
Now you can create rules with tags/direction/match by tag/choose direction/choose multiple interface/quick.

Just for note the queue assignment has been moved to the Firewall->Rules section. Now for every rule you create you can choose the queue for it.

• Fix many bugs itroduced with the new shaper code import.
• Introduce a new tab to the Firewall - Rules section called "floating rules" where you can create rules with direction/tag/tagged/quick keywords of PF.
• Improve input validation on the shaper code and the wizard....

Bring in the new traffic shaper.
It is capable of multi interface shaping.

Also bring the wizard up-to-date. Now it is capable of doing multi interface too.

touch up text

Ticket #1569

When showing the firewall rules page without a interface default to the first interface the user has access to.

Only show interfaces that the user has access to edit on the firewall rules edit page.

• Add PPTP, IPSEC and PPPOE
• Check for access to firewall interface tabs correctly

Allow each interface to have ACL's so you can assign a user to be able to edit just that interfaces rules.

Remove duplicate $pgtitle entry.

Switch over to array style page titles. Obtained-from: m0n0wall

show ipsec tab properly when mobile clients is enabled and no tunnel exists

Show the IPSEC firewall rule interface when mobile ipsec is enabled

Only show IPsec tab when IPsec is truly enabled and configured

Add a plus button on the top header of these pages.
This to make it easier on large configurations.

Schedule icon change, round 3

MFC: asap

schedule icon update

MFC: asap

schedule icon update

MFC: asap

Show icon that indicates whether the traffic is being blocked or allowed

MFC: asap

check if schedule config is array first

MFC: asap

initialize variable correctly
MFC: asap

Show icon when schedule is active
MFC: asap

Schedule popup on firewall page, stop min 0>00
MFC: asap

highlight schedule column on single clicks

Fixed column alignment for new schedule column

Shift icons to the right now that the schedule column is appearing

Include schedule column

Added Alias popup description for firewall rules.

Include IPSEC tab

Correctly detect when PPPoE server is enabled

Add PPPOE options.

Tell user they can monitor the filter reload status when applying the rules.

Let user know firewall rules changes are reloading in the background.

MFC 9536

Add reserved/not yet allocated by IANA aka bogons indicator

Correct icon url, format cell correctly

Woops, ours is called icon_plus_d.gif

Add in new greyed out +

Add RFC 1918 block indicator from m0n0wall 1.21

Remove #!/usr/local/bin/php

Pass interface along

Use interface description in gateway field if there is one

Increase colspan by 1.

Pointed-out-by: databestje

Increase colspan by 1.

Pointed-out-by: databestje

Add gateway to summary list

Make individual rule delete work as expected, delete individual rule, not
just selected rules

Add delete icon to each row

Ticket #392

(Ticket #393) Only do ipsec stuff if IPSec is enabled and <tunnel> is an array

Correct reject usage.

Submitted-by: pscott

Only foreach through valid arrays

Add IPSEC connections to firewall rules screen

add pfSense (C)

Add PPPoE to interface list

Unlink dirty marker

Reboots suck. Drop kick it to the moon.

updating files to use theme images
removing images from /usr/local/www
adding specific images into the correct theme directories

Fix bottom rounds

Consolidate Apply changes button into the info box on the right hand side

• Curve bottom of grey areas if needed
• Curve tabs
• Cleanup