Select default interface when WAN is disabled
If WAN is disabled, then the Traffic Graph does not default to a valid interface when it first displays. This fix selects the first valid interface if WAN is not there.e.g. at one site there used to be 2 ISPs, on WAN and OPT1. Now the ISP on WAN has been turned off, and the interface marked disabled. The default gateway etc is all on OPT1. After a bit of history at a site, it can happen like this that WAN is disabled in the config.
Merge pull request #270 from CarpeNoctem/CarpeNoctem
Added 'Copy my MAC address' to captive portal Pass-through MAC form, as ...
Fix: Captive Portal status widget
Merge pull request #297 from bcyrill/patch-15
Fix: last activity on CP status
Update usr/local/www/services_dhcp.php
Inform user how the Primary/Secondary DHCPd process is determined in a failover pair so they don't end up with two secondary servers. For example, when using advskew=64 (and advskew=164 if using settings sync to peer for carp ips) on the carp master machine which they think will be the DHCP primary.
Self-test should be hypenated, and the T should be lower case.
Correct tcp flags explanation code for CWR (should be W, not C)
Fix DHCPv6 lease deletion. Fixes #2726
Static mappings are not pool-specific. They exist independent of any pool, and you can't actually add static mappings "inside" a pool range. So disable the static map list/controls if editing a pool, since they are "global" for an interface. Fixes #2370.
Add description to additional DHCP pools. Implements #2733
Various fixes to removal of pipes
Merge pull request #287 from bcyrill/alias_gif
Add IP alias support to GIF interfaces
Remove whitespace
Fix stray DOS carriage return.
Sync PBI scripts
Convert the CP db to sqlite rather than a text file. Some more optimizations might be needed and probably vouchers db might need conversion as well.
Merge pull request #276 from N0YB/Diagnostics-Tables-Top-Status
Include bogons last update info in Diagnostics: Tables
Add square brackets around IPv6 addresses
Add missing >. Fixes #2722
Cleanup the pipes as well when removing or operating on tables for hostnames/ips/mac
Handle even hostname through filterdns entries correctly now that only 3/4 table exists and they consider pipe argument. While here adapt addinga hostname without reloading CP
There is no more table 5,6,7,8,9,10
Separate ipfw rule no db from limiter ones. Since ipfw has per instance feature while dummynet/limiters is a single instance.
only trim the / if it is alone
only trim the / at the end of the redirurl
always use the shortcut cpcfg variable
Fix line endings
Correctly retrieve the mac address
Do not exit from php rather return to not have to refork again from the manager
Switch all the actions(pipe create/table modify/get mac address) during fast path of CP to pfSense modules ones.
Remove IPFW_FILTER flag since it gets not used anymore
Add extra check for DHCP static mapping edit pages to prevent an error when no DHCP config exists yet.
Add extra checks for reading and saving certain wireless settings and fix an existing check.
ARP Table Static Entries from Individual DHCP Static Mappings
Assign individual DHCP static mappings as ARP table static entries.Useful / necessary for sending WoL magic packets from external services / sources, and for any other purpose that needs a static ARP table entry.
Don't allow transport mode to be selected for mobile clients. Fixes #2713
Merge pull request #273 from N0YB/Widget-Firewall-Logs-Filtering
Widget Firewall Logs Filtering
Update usr/local/www/javascript/filter_log.js
Firewall Logs Widget FilteringOptions to filter on interfaces, 'pass', 'block', & 'reject'
Update usr/local/www/widgets/widgets/log.widget.php
license: Bump and fix some copyrights.
The copyright statements have been taken from source archives 1:1
Notes:- FreeBSD is NOT an Inc. it's the FreeBSD project (and exists since 1992!) (Took COPYRIGHT from RELENG 8.3)- ISC changed to an Inc. and does not explicitely state...
Merge pull request #271 from brunostein/master
Add input autocomplete array aliases
add input autocomplete array aliases
Merge pull request #269 from N0YB/Diagnostics-Tables-Top-Status
Diagnostics Tables Top Status
Add input validation to reject invalid combinations of IPv4/IPv6 openvpn protocols and interface/VIPs.
Fix more tests for DHCP relay being enabled.
Remove this now-irrelevant comment.
Fix test to see if DHCP Relay is enabled.
Do a more strict type match here, otherwise if the result returned is 0, that is also "== false" but not actually boolean false.
Merge remote-tracking branch 'origin/master' into Diagnostics-Tables-Top-Status
Be a little more verbose when starting the NTP daemon
Add a couple more (small, optional) snmp modules.
Added 'Copy my MAC address' to captive portal Pass-through MAC form, as seen on services_dhcp_edit.php
Update usr/local/www/diag_tables.php
String correction
Updated: Removed variable from gettext fuction call.Add table entries count to status line.Place table status line at top so don't have to scroll to bottom of large tables to see.Add Download latest bogon data button to bogonsv6 table.
Simplify logic
Only try to get mac if the its required
Add table entries count to status line.Place table status line at top so don't have to scroll to bottom of large tables to see.Add Download latest bogon data button to bogonsv6 table.
Fixes #1575. Allow Match option to be used with limiters as well. The support is there in kernel so allow rules to be configured on this.
The context creation and memmber interfaces are only used during rules creation so make that contained only in init_rules and rule creation functions
Resolves #2529. Load the ipfw module before any commands are executed on CP. Also move the filter_load_ipfw() to captiveportal.inc:captiveportal_load_modules() since no other place uses ipfw(4)
Fix syntax and do not commit late :)
Merge pull request #265 from PiBa-NL/outbound_nonat
outbound nat, remove non-applicable translation option 'any'
Correct syntax
Fix parentheses matching
outbound nat, remove non-applicable option
The pppoe handle script
Correct reload of ppp interface after modifications in the assign->ppps section
Up the char count to include a port number
If destination is larger than 15 then truncate it, otherwise blocks like VRRP advertisements push the values out
remove non-applicable text
Merge pull request #260 from PiBa-NL/outbound_nonat
show difference between outbound NAT and outbound NONAT.
add " address" behind the interface nat name
This is not needed here
Remove other potential places where someone could select a kernel we no longer ship. Try to improve kernel detection a little more.
Add these file so they get added during regeneration
Resolves #2294. Base64 encode the file when sending to the browser same way it is encoded when sent to us. This prevents csrf from mangling things
While I'm here, allow an ICMP rdr.
Only apply this port check for TCP and UDP.
Allow only post action and not get to avoid security problems
Remoev exec_raw.php since its a dangerous page
Commit a revised version of https://github.com/bsdperimeter/pfsense/pull/264.diff
Fix: Repopulate field
updated pfSense.pot
Removing unnecessary gettext function calls
To allow limiters to work correctly on mutliwan for now enforce selecting a gateway on outgoing
Update usr/local/www/vpn_ipsec_phase1.php
Correct missing $
Add extra safety belts here.
Remove none per Jim since it is confusing
Remove preload.php which warmed the caches. IT hurts on embedded and really does not help that much
Not sure why this has been hidden so deep but putting that in the right place should help with error displayed related to HEADER already sent in PHP errors.log
Enhance reporting read-write setting
If the user has already selected Current Read/Write Status to be Read-Write, then they also choose Permanent Read/Write the mount refcount becomes 2. Then if they turn off Permanent Read/Write the setting is saved, but the refcount goes back to 1. This results in the file system still being mounted Read-Write....
Allow not setting group authentication
Remove accidental copy/pasto
Correct Select button when no ca_ref is defined
Allow other system authentication types to be used with ipsec. LDAP/RADIUS/local acc
Add button to switch between read/write and read-only on Diag > NanoBSD; Add setting to keep the media read/write at all times; Add indication of ro/rw status on Dashboard.