pfSense

• Add missing cancel button
• cancel -> Cancel

Oops, remove keep fragments option - in pf this is global

Add $Id$ tag

• Remove return gateway from the rules section
• Add a gateway option to the optional interfaces
• Use new gateway in filter.inc when creating the rules if its defined

Use the firewall interface for reply-to directive.

• Do not output alias javascript array unless its an array
• Add return interface for return gateway

Save the return gateway value.

Add reply-to (aka return gateway) rule support for multiple WAN support.

And the crowd goes nuts!

Add pfsync and carp protocols

Add ICMP6 as a supported porotocol type.

Toggle OS dropdown off and on when a TCP rule is enabled or disabled.

Do not update os type unless its defined in the rule.

We can now put OS filtering in rules

clean up ICMP types

Make rules for icmp echo work

Only allow tcp rules to use alternate keep state methods

Be sure to save and restore state values.

Submitted-by: Bill Marquette <bill.marquette_AT_gmail.com>

Do not submit the form if the user presses enter in one of the textarea fields with a dropdown widget attached to it.

On input validation note that the source or destionation ports can now be aliases.

Style cleanup

Add auto_complete_helper.hs auto complete javascript helper file.

Aliases now work for ports. Add autocomplete hint field for aliases box on rules edit form.

Add per rule state timeout option. Good for heavily loaded http servers, etc.

Resync with 1.2b3 with the additional pf options.

Start the process of moving back to a m0n0wall style rules / queues system.

Disable fragmentation rule toggle.

Update a few (C)

remove /31 from interface IP assignment screens since a /31 subnet has 0 usable IP addresses. simpify all 1-32 loops by using the same code as much as possible.

Finish packaging storage mechanism. Upon package deletin the package manager will loop through the variables and set them so that you can invoke commands such as system("pw userdel " . $username); from the xml configuration file.

Merge in m0n0wall 1.2b3 changes.

Make the default source port any instead of other

Remove type and make all code uniform.

Make 2 line ifs all the same by nut using opening and closing braces {}

Throw a input_error if user tries to use modulate state or synproxy state and icmp or udp

Allow rules to be assigned different state mechanisms such as: keep state, modulate state, synproxy state and none.

Only insert alias if alias: is contained within the text item

add NOTE: Leave these fields blank to disable this feature. to edit rule

Add Simultaneous client connection limit (max-src-nodes) and Maximum state entries per host (max-src-states) webConfigurator

Move the alias selection screen to the dropdown menu that includes all network or alias, etc.

Change ALIAS color to pfSense red. Add a dropdown box that lists aliases on the rules that when you select it will fill in the alias name in either src or dst boxes.

Update changed files with new copyright, attribute Manuel Kasper

traffic shaper changes

do not allow user to select queue from firewall rule edit screen, instead the user will bond a queue up on the queue edit screen.

Instead of allowing the user to pick a scheduler per queue, we are supposed to pick a scheduler for overall interface

Initial revision