pfSense

Fix Queues view on the shaper.

On interface ip or gateway changes FreeBSD will remove routes related.

Ensure the routes are loaded back each time.

MFC: After testing at ORU

An attempt to fix some issues discovered with outgoing traffic with the wzard generated rules.

Fix an error with previous commit.

Revert back rules direction on the wizard wipped by previous commit accidentally.

Unbreak traffic shaper wizard incidentally i used explode instead of implode.

Unbreak tags on the floating tab.

Add back ldap auth caontainer picker.

Fix some typos.

Make the wizard generate safer rules.
Now it presents the user an option to make us know what type the opt* interfaces are, external(wan like) or internal(lan like).

Finish the Floating rules toolbar.
Now you can create rules with tags/direction/match by tag/choose direction/choose multiple interface/quick.

Just for note the queue assignment has been moved to the Firewall->Rules section. Now for every rule you create you can choose the queue for it.

Remove an accidentally slipped in line.

Show the user the interface the queue is located to make it easier now that the same queue name is used on multiple interfaces.

• Fix many bugs itroduced with the new shaper code import.
• Introduce a new tab to the Firewall - Rules section called "floating rules" where you can create rules with direction/tag/tagged/quick keywords of PF.
• Improve input validation on the shaper code and the wizard....

clarify wording in tabs to appropriately reflect purpose of these pages

Only process /boot/loader.conf if it exists avoiding a
somehwhat ugly looking error on cdrom boot.

• Hide password field
• Remove session timeout graphic
• Allow session timeout to remain blank

touch up text

Ticket #1586

Bring in the new traffic shaper.
It is capable of multi interface shaping.

Also bring the wizard up-to-date. Now it is capable of doing multi interface too.

touch up text

Ticket #1578

touch up text

Ticket #1577

touch up text

Ticket #1576

remove unnecessary grep

Ticket #1573

touch up text

Ticket #1569

touch up text

Ticket #1569

touch up text

Ticket #1569

touch up text

Ticket #1569

Do not reset every hour. Wait until the process goes out of control.

Remove the need to define authetnication containers. Now a user can login
anywhere in the LDAP tree and will use the groups to deterimine the access
privs.

Work sponsored-by: Centipede Networks

• Do not iterate item if it is not an array

Gracefully bail out if the LDAP server is unavailable.

Work sponsored-by: Centipede Networks

correct tab alignment

• Return OU=Users which is built-in to active directory
• Specify that LDAP is Active Directory compatible

Work sponsored-by: Centipede Networks

Make form look a little more pleasing to the eye.

Work sponsored-by: Centipede Networks

Adding LDAP Authentication container picker.

Work sponsored-by: Centipede Networks

Add Users containers setting where a ; seperated list of LDAP containers
can be specified to authenticate against. Final item will be a graphical
browser that can help the operator populate this box if they are feeling
lazy or do not understand LDAP completely....

Make the LDAP settings screen look better.

Work sponsored-by: Centipede Networks

Add LDAP test functions to verify that the LDAP settings are correct.
Return the OU's and show to the user after test completion.

change href link

include required files for when widget is being loaded by AJAX calls.

Use AJAX for loading of new widgets. Now most widgets will use AJAX for new data. Also improved performance

moved widget tab function to guiconfig.inc

show dns values correctly

new ajax functions for dashboard

Correctly display product name.

Clarify the notes/examples for each of the ldap options. This should make
it pretty clear until I finish the fancy LDAP tree viewer control.

I should also note that as of this commit the LDAP auth functions are now
working beautifully against a Windows 2000 Server Active Directory!...

• Allow LDAP users to login to pfSense.
• Cross reference Active Directory user groups with pfSense groups, apply
  groups where names match
• Clarify some of the settings items and give examples

Use correct var

Allow multiple groups to be assigned per user.

Work sponsored-by: Centipede Networks

• Hide search base
• Use correct variable name

Work sponsored-by: Centipede Networks

Add ldap.so library.

Work sponsored-by: Centipede Networks

Pretent we are a little bit more secure and hide the password from folks
that can look over your shoulder.

Adding LDAP options:

• Binding username
• Binding password
• Filter
• Search base

Work sponsored-by: Centipede Networks <http://centipedenetworks.com/>

Adding LDAP settings:

• Authentication backend
• LDAP Server:port

Work sponsored-by: Centipede Networks

Detect vmware and embedded platforms and lower the note duration
automatically.

Correct script checks.

add comment from RELENG_1_2

fix typo

touchup text

Change the beep duration /4 when the platform is embedded or we detect that the kern.hz has been altered in /boot/loader.conf.

• Only output one error message or save notice at a time
• Correc the reboot workaround for kernel panics (CARP interface deletion)

Ticket #1397

Do not corrupt output when a space is in the SSID name.

Ticket #1531

freeradius and pptp changes by forum-user 'cybrsrfr'

OpenVPN-multi-interface-patches by Fernando Tarl? Cardoso Lemos

Slow down the pipe even more

remove annoying and potentially problematic forced page refresh.

Ticket #1545

Make DNS $pconfig variables more consistent

Save all 4 DNS servers correctly

Adding dnswatch support.

Obtained-from: m0n0wall

Add product_copyright re-branding support
Add product_copyright_years re-branding support
Add product_website re-branding support
Add product_email re-branding support

Work sponsored-by: Centipede Networks

Add product_copyright re-branding support
Add product_copyright_years re-branding support
Add product_website re-branding support
Add product_email re-branding support

Work sponsored-by: Centipede Networks

change default kernel on upgrade to SMP. Virtually all installs are running the SMP kernel, defaulting to uniprocessor broke several systems.

related to Ticket #1534

s/Diagnostics/Status/

Correctly show and save DNS entries

Do not show hostname in page title.

Support DNS-O-Matic

Convert the dns server code into a for loop and add 2 more dns servers on. Now we can easily control how many dns servers we want to allow entry for. Also get rid of code duplication.

Move route delete items to system.inc so they are performed on every change

Show interfaces. Cleanup presentation.

Populate $ints with the interface list correctly

When multiple gateways are present (muliwan) show a dropdown box next to each dns server allowing the operator to select which gateway the dns server should use to resolve addresses.

Clarify that the httpsname should resolve to the correct interface ip on the captive portal interface.

Increase maximum alias count to 299 from 99.

http://forum.pfsense.org/index.php/topic,7068.0/topicseen.html

The attached patch adds a field to the services_dyndns.php form.
This field if provided will be written to the nscommands file (in
services.inc) as

"server <value>\n"

This allows you to update an arbitrary DNS server. If not provided,
the server line is omitted and the default behavior occurs....

Tell user which characters are bad

Use htmlentities() to detect html injections.

Do a check on all ID's > -1. When we a dup a rule with id 0 the checks where bypassed.

Spotted-by: billm

• Run through all posted values and encode them to a temporary variable. IF the contents differ then the operator is doing something bad. Simply reject the item with invalid character error and let them fix their XSS exploit attempt, etc.

Move PPPoE to services area.

List opt interfaces correctly.

Add multi user firewall nat port forward capabilities.

Only show interfaces user has accss to.

When showing the firewall rules page without a interface default to the first interface the user has access to.

Only show interfaces that the user has access to edit on the firewall rules edit page.

• Add PPTP, IPSEC and PPPOE
• Check for access to firewall interface tabs correctly

Allow each interface to have ACL's so you can assign a user to be able to edit just that interfaces rules.

Add firewall rules edit interface entries.

/Routes/Static Routes/

Remove confusing *

Add check all and check none buttons