pfSense

Don't show LAN in Interfaces menu if it doesn't actually exist.

Bye bye, LAN interface requirement.

Add back Save button.

Do not show LAN interface when it is not present.

• If the LAN interface exists, do not allow DHCP server on WAN.
• If the LAN interface does not exist, do not allow DHCP server on LAN.

LAN interface is now optional. Allow it to be deleted.

touch up text

Ticket #1627

Correctly deterimine if /boot/loader.conf exists.

Fix 'slingbox' setting so the xml parser does not bail at it.

Add Slingbox to the raise/lower protocols screen.(requested by Scott)

• Add Slingbox to the raise/lower protocols screen.(requested by Scott)
• Fix a bug with the creation of rules for this section of the wizard.
• Also set the qACK where it makes sense.

Sync w/ 1.2's filter diag logs.

Turn Pages Accessible field foreground to white.

shorten description field to prevent creating rulesets that won't load.

Ticket #1619

Only assign &$ if item is an array.

Allow reserved IP addresses to fall within the DHCP Server range. DHCPD
does not barf with these changes, so why not?

Allow reserved IP addresses to fall within the DHCP Server range. DHCPD
does not barf with these changes, so why not?

Add   after each field so that empty spans do not break the css
look and field. Minor nitpick.

Fix rule creation for prioritizing hosts/aliases specified during the wizard

Make the wizard more userfriendly.

Latest eDir / Active Directory tweaks from Mark Batchelor.

Thanks again for him helping us with this project!

Lower threshold to 86. Noticed a scenario where slbd was chewing up
roughtly 91% of the cpu.

Fix bandwidth assignment on LAN qOthersLow queue.

Only iterate groups if it is an array.

Validate better some input. This avoids some empty javascript errors.

Use ip_in_subnet() to correctly determineif we have a matching real ip
address defined somewhere before allowing the CARP address to be added.

minor cosmetic nitpick - move "selected" icons one column to the right
after the queues column got introduced

cosmetic fixes
output product name correctly

correctly output product name

use friendly names, not opt names

rm per Ermal

Fix a stale calculation. They are not yet safe(for now).

Update the wizard.
This commit makes it capable of 1 LAN and multiple WAN's. Other wizards will come after this.
Now you can specify per each link upload and download and the wizard will do its math accordingly.
Also can specify per link guranteed VoIP bandwidth....

Round up some values from divison calculations.

Use buttons for queue action instead of images.

Make sure the 80% limit for linkshare is not passesd by qVoIP during wizard.

Only calculate a factor for HFSC scheduler.

• Insert a "Remove Shaper" button to the GUI.
• Make the wizard gnerate a better policy for the shaper.

• Correct cosmetic percentages
• Add note of what percentages can be input for the p2p bandwidth

Propperly show the name of interface on the queues status page.

Fix wrong check during the wizard.
If you didn't enable the Games prioritizing you would not have queues created.

Found by: Scott

Fix an error on the wizard.

Clean up from some leftovers that are not needed anymore.

Cosmetic change. Move the Queue and Interface tab on the top level instead of providing a second level tab section for them.

Fix Queues view on the shaper.

On interface ip or gateway changes FreeBSD will remove routes related.

Ensure the routes are loaded back each time.

MFC: After testing at ORU

An attempt to fix some issues discovered with outgoing traffic with the wzard generated rules.

Fix an error with previous commit.

Revert back rules direction on the wizard wipped by previous commit accidentally.

Unbreak traffic shaper wizard incidentally i used explode instead of implode.

Unbreak tags on the floating tab.

Add back ldap auth caontainer picker.

Fix some typos.

Make the wizard generate safer rules.
Now it presents the user an option to make us know what type the opt* interfaces are, external(wan like) or internal(lan like).

Finish the Floating rules toolbar.
Now you can create rules with tags/direction/match by tag/choose direction/choose multiple interface/quick.

Just for note the queue assignment has been moved to the Firewall->Rules section. Now for every rule you create you can choose the queue for it.

Remove an accidentally slipped in line.

Show the user the interface the queue is located to make it easier now that the same queue name is used on multiple interfaces.

• Fix many bugs itroduced with the new shaper code import.
• Introduce a new tab to the Firewall - Rules section called "floating rules" where you can create rules with direction/tag/tagged/quick keywords of PF.
• Improve input validation on the shaper code and the wizard....

clarify wording in tabs to appropriately reflect purpose of these pages

Only process /boot/loader.conf if it exists avoiding a
somehwhat ugly looking error on cdrom boot.

• Hide password field
• Remove session timeout graphic
• Allow session timeout to remain blank

touch up text

Ticket #1586

Bring in the new traffic shaper.
It is capable of multi interface shaping.

Also bring the wizard up-to-date. Now it is capable of doing multi interface too.

touch up text

Ticket #1578

touch up text

Ticket #1577

touch up text

Ticket #1576

remove unnecessary grep

Ticket #1573

touch up text

Ticket #1569

touch up text

Ticket #1569

touch up text

Ticket #1569

touch up text

Ticket #1569

Do not reset every hour. Wait until the process goes out of control.

Remove the need to define authetnication containers. Now a user can login
anywhere in the LDAP tree and will use the groups to deterimine the access
privs.

Work sponsored-by: Centipede Networks

• Do not iterate item if it is not an array

Gracefully bail out if the LDAP server is unavailable.

Work sponsored-by: Centipede Networks

correct tab alignment

• Return OU=Users which is built-in to active directory
• Specify that LDAP is Active Directory compatible

Work sponsored-by: Centipede Networks

Make form look a little more pleasing to the eye.

Work sponsored-by: Centipede Networks

Adding LDAP Authentication container picker.

Work sponsored-by: Centipede Networks

Add Users containers setting where a ; seperated list of LDAP containers
can be specified to authenticate against. Final item will be a graphical
browser that can help the operator populate this box if they are feeling
lazy or do not understand LDAP completely....

Make the LDAP settings screen look better.

Work sponsored-by: Centipede Networks

Add LDAP test functions to verify that the LDAP settings are correct.
Return the OU's and show to the user after test completion.

change href link

include required files for when widget is being loaded by AJAX calls.

Use AJAX for loading of new widgets. Now most widgets will use AJAX for new data. Also improved performance

moved widget tab function to guiconfig.inc

show dns values correctly

new ajax functions for dashboard

Correctly display product name.

Clarify the notes/examples for each of the ldap options. This should make
it pretty clear until I finish the fancy LDAP tree viewer control.

I should also note that as of this commit the LDAP auth functions are now
working beautifully against a Windows 2000 Server Active Directory!...

• Allow LDAP users to login to pfSense.
• Cross reference Active Directory user groups with pfSense groups, apply
  groups where names match
• Clarify some of the settings items and give examples

Use correct var

Allow multiple groups to be assigned per user.

Work sponsored-by: Centipede Networks

• Hide search base
• Use correct variable name

Work sponsored-by: Centipede Networks

Add ldap.so library.

Work sponsored-by: Centipede Networks

Pretent we are a little bit more secure and hide the password from folks
that can look over your shoulder.

Adding LDAP options:

• Binding username
• Binding password
• Filter
• Search base

Work sponsored-by: Centipede Networks <http://centipedenetworks.com/>

Adding LDAP settings:

• Authentication backend
• LDAP Server:port

Work sponsored-by: Centipede Networks

Detect vmware and embedded platforms and lower the note duration
automatically.

Correct script checks.

add comment from RELENG_1_2