pfSense

Do not allow DHCP Server to be used on WAN when it does not have a static IP address.

Single interface support
Appliance Project

Guard against javascript injection attacks

Ticket #1656

Do not show duplicate queues names on rules edit page

• First attempt at fixing queues rrd graph

• Fix some bugs when deleteing queues
• Remove Manuel from firewall_shaper.php copyright this has nothing to do with him
• Apply fixes to show the actions taken on queues directly(you needed a refresh to display those), though we pay some penalty for this now

Remove the statement Only Supports one Container Currently!!!

Correctly save pages with . in the ACL.

Add cg2

Remove blank page

remove {$concurrent}, it breaks user manager.

Remove (FAILOVER)

Rename Hidden: Exec to Command

Add page title.

At least one group is required for saving.

Correctly save pages.

Add Edir, etc to the LDAP other description.

Correctly deterimine if user is local

Do not allow password change for non local user.

Make select button really a button intead of HTML <a href>

Make form more user friendly:

"Active Directory"

hide:
LDAP Filter (use default: (samaccountname=$username))
LDAP Naming Attribute (use default: samaccountname)
Group Membership Attribute Name (use default: memberOf)

"eDirectory"

hide:
LDAP Filter (use default: (cn=$username))...

Do not allow a user to add or remove childs on a default queue.
Better prevent them from doing this than dealing with other situarions.

• Unbreak creation of new queues
• Fix input validation for bandwidth

Back commit. Wrong branch.

Sync w/ RELENG_1

fix typo

Fix page title issues

PPP

Initial import of PPP for 3G and dial up modem support.

Needs testing and likely some fixing, then porting to HEAD once verified working.

Use /var/log/openvpn.log

Add head.inc.

Adding OpenVPN status page originall written by Peter Allgeyer
and Manuel Kasper.

Importing OpenVPN status page form m0n0wall.

When bdiff is detected in the filename, invoke the binary update
routines.

Speed product correctly

Noticed-by: Martin

s/package/Package/CVS: ----------------------------------------------------------------------

Add other misc areas.

Add other custom pkg.php areas.

• Add CARP Settings custom pkg handler

• Remove blank trailing line
• Allow custom urls that include pkg.php to be saved

Ensure $allowed is set correctly.

Check if item is an array. admin user has permission to all without array.

Add custom priv for granting access to the user manager.

touch up text

clarify text

Close off XSS execution hole.

Submitted-by: Charles Hooper

• Add xmlrpc declarations missed in last commit
• MFC exec_shell() package related function
• MFC exec_php() package related function

• Add merge_installedpackages_section_xmlrpc() call used for merging
  specific <installedpackages><AREANAME> sub items without replacing
  the entire <installedpackages> area with just this item
• Adjust TinyDNS sync to use this new method to avoid replacing the...

touch up text

Ticket #1644

touch up text

Ticket #1644

fix typo

Ticket #1645

Make scripts XSS input safe.

Pointed-out: by hoopercharles@gmail.com

Fix multicast traffic display in widget.

With addition of queue column there are 9 columns to fill now so the message when there are no rules fills the whole area.

Move tag/mark options to the Advanced section.

Do not show the LAN interface when it is not present.

• Show WAN instead of LAN when LAN does not exist for anti-lockout
• Do not show the LAN interface when it is not present in SSH config options

Return false if $net is not defined.

Do not show LAN related items when the interface is not present.

Do not show LAN interface when it is not present.

Do not show LAN related items when the interfafe does not exist.

Do not show LAN related items when the interfafe does not exist.

Do not show the LAN interface when it does not exist.

Remove dhcpd.leases and reload daemon after LAN interface removal.

Remove additional menu items that aren't applicable on single interface deployments

Remove additional menu items that aren't applicable on single interface deployments

When deleting the LAN interface, automatically unset the following
configuration areas:

• Interfaces -> LAN
• DHCPD -> LAN
• Traffic Shaper
• EZ Shaper settings
• Firewall -> NAT

NOTE: when adding back an interface if LAN does not exist, it is added...

• Whenb deleting the LAN interface unset NAT rules.

When deleting the LAN interface automatically unset: * EZ Shaper configuration * Traffic Shaper Configuration

No need for any of the NAT screens in a single interface environment, so don't show them.

Fix braindead php {}

Don't show LAN in Interfaces drop down if it doesn't actually exist.

Bye bye, LAN interface requirement.

Show string in uppercase.

Fix braindead php {}

Set the starting interface when LAN does not exist to WAN.

Fix for "Invalid argument supplied for foreach()" on 937

Show WAN if LAN is not enabled.

Don't show LAN in Interfaces menu if it doesn't actually exist.

Bye bye, LAN interface requirement.

Add back Save button.

Do not show LAN interface when it is not present.

• If the LAN interface exists, do not allow DHCP server on WAN.
• If the LAN interface does not exist, do not allow DHCP server on LAN.

LAN interface is now optional. Allow it to be deleted.

touch up text

Ticket #1627

Correctly deterimine if /boot/loader.conf exists.

Fix 'slingbox' setting so the xml parser does not bail at it.

Add Slingbox to the raise/lower protocols screen.(requested by Scott)

• Add Slingbox to the raise/lower protocols screen.(requested by Scott)
• Fix a bug with the creation of rules for this section of the wizard.
• Also set the qACK where it makes sense.

Sync w/ 1.2's filter diag logs.

Turn Pages Accessible field foreground to white.

shorten description field to prevent creating rulesets that won't load.

Ticket #1619

Only assign &$ if item is an array.

Allow reserved IP addresses to fall within the DHCP Server range. DHCPD
does not barf with these changes, so why not?

Allow reserved IP addresses to fall within the DHCP Server range. DHCPD
does not barf with these changes, so why not?

Add   after each field so that empty spans do not break the css
look and field. Minor nitpick.

Fix rule creation for prioritizing hosts/aliases specified during the wizard

Make the wizard more userfriendly.

Latest eDir / Active Directory tweaks from Mark Batchelor.

Thanks again for him helping us with this project!

Lower threshold to 86. Noticed a scenario where slbd was chewing up
roughtly 91% of the cpu.

Fix bandwidth assignment on LAN qOthersLow queue.

Only iterate groups if it is an array.

Validate better some input. This avoids some empty javascript errors.

Use ip_in_subnet() to correctly determineif we have a matching real ip
address defined somewhere before allowing the CARP address to be added.