Make autocomplete on the login form optional.
Skip step #9 for non pfSense branded installations
Various CRL fixes, handle empty internal CRLs better.
Reload the wizard and then redirect to a wizard completed step. Prompt the user to donate to the project.
Merge branch 'master' of http://gitweb.pfsense.org/pfsense/mterron-clone into review/master
Misc fixes to make the openvpn wizard stop re-creating a CA previously made via the wizard if you re-ran the wizard and chose a CA instead. Fixes #1512
this should be checking for synchronizetoip not pfsyncpeerip
Reorder instructions and do not reload dns if its not allowed from the dns allow override setting.
If we are disabling the radius inputs, also disable the secondary radius inputs.
This field should be server2
Use the availble constant on php for this and also the right value that comes with it since PHP never supported u_int. There is a bug open still on PHP about bcmod but some more info is needed.
Misc OpenVPN CRL selection fixes.
When deleting a CA, delete its associated CRLs.
Correct wrong key for checking if a interface type switched. Ticket #1420
Set default colors explicity, the theme can then override them. This prevents missing colors in themes from crashing the graphs.
If the rrd multiplier is negative, use 5% for out instead of 95% for the 95th percentile line.
Set password on the OS instead of just the gui. Fixes #1485
Remove static routes that are added for dns servers when allow override is allowed when a ppp interface goes down. Code borrowed from dhclient-script.
Ticket #1408. Honor the allow override settings even for ppp devices.
Correct saving of qinq specified members and also correctly destroy parent vlan when deleteing the interfaces. Also take care of attaching to netgraph now that we detach by default.
Correct code description during assignment
fix typo
Comment out debug print
Whitespace cleanup, code cleanup, add choice to filter on ipv4/ipv6 and also accept a subnet to filter on via the host field.
Allow users to select SSL/TLS+User Auth with external authentication sources.
No need to include head.inc twice
Show OpenVPN instances on Status > Traffic Graphs, with descriptions.
Provide a method for rebrands to force a theme. Otherwise upgrading nanobsd from pfSense to a rebrand image without the theme in the config.xml will have a broken GUI since the theme isn't there.
Set user when removing privileges, otherwise things like the user's shell would not be reset until pressing save, which is inconsistent with that step not being needed when adding privileges.
Reject encrypted CA private keys. Resolves #1446
Add an option under advanced->misc to specify a proxy for retreiving pfsense package info or downloading packages.
Only start log update ajax timer if the updateDelay is defined. http://forum.pfsense.org/index.php/topic,35771.0.html
Properly set/unset voucher enable/disable bit.
Move the link to add a gateway up next to the drop-down box so it is more obvious.
Test if a variable is set before trying to unset it. If a user has no rules in their config, then $config['filter'] would not be undefined, so unsettings $config['filter']['bypassstaticroutes'] would result in an error. http://forum.pfsense.org/index.php/topic,35702.0.html
Add missing fields for l2tp to define dns and wins servers
Also exclude grep from running processes when grepping for a running packet capture. Also, fix other test to match the recent changes made.
Add a toggle under System > Advanced on the misc tab to enable/disable debug mode for racoon.
Fix copy/paste error
Make sure a theme directory actually exists before blindly using it.
Rework ntpdate_sync_once.sh, so it makes sure ntp/ntpdate/itself are not running before trying to sync time, and then launch ntpd at the end for time sync (last commit was premature)
Don't unconditionally start ntpd after doing ntpdate, it might be disabled.
Send ntpdate output to syslog
Remove extra variable set
Remove copy paste
Unbreak check if capture is running
When using ' variables are not expanded. Use double quotes so that the variable is exanded
Don't test for a user cert here either, see previous commit.
Don't test if a cert is in use here, you could in theory use a cert for a user and a server.
Fix link; use same message for missing certs.
Make the default openvpn cert authority message a bit relaxed and let user know about the wizard option as well
Correct text to include PPTP as well.
Resolves #1391. Bring back VPN auto rule disable advanced setting.
Resolves #1418. Correct test to actully do what's intended.
Make sure all themes have the right colors defined.
<script/> tags are put in the function build_javascript no need to put them here. Prevents errors reported at:http://forum.pfsense.org/index.php/topic,34139.0.html
Switch back to dev_mode so existing configs aren't broken by the other changes.
standardize the device_mode variable
Try again to fix the calculation for out bits 95th percentile. (Works for me)
clarify text
Apparently rrdtool VDEF functions can't take a multiplier, only CDEF. Fixes traffic graphs.
Allow editing of CAs, so that imported CAs can have their private keys added later (mainly affected users upgrading from 1.2.3 and wanting to use the cert manager). Also, allow editing the CA's serial, since this shouldn't really be 0 for imported CAs, but the serial of the last cert that was made from this CA.
Allow importing a CRL for an external CA.
Add missing color, add multiplier to calculus for inverting line
Fix spamd rrd graph command.
In IPsec, s/mobileclients/client/, this was changed long ago in the config but not everywhere followed.
Test the existence of route_vpn_gateway variable and if set use it as a gateway. Recommended-by: http://forum.pfsense.org/index.php/topic,24436.msg158589.html#msg158589
Correctly synchronize the db of vouchers from master. Also correctly write it to the files since before it is only allowed during bootup and not from xmlrpc.
Actually remember that the vouchers are enabled
Allow to enable vouchers with the only things specified the voucher database synchronization since the other values will be fetched from it.
Note that disabling does not survive a reboot
Optimized all images using Yahoo Smush.it service.Savings:-------------------------------------Total images uploaded - 1432Total images smushed - 575Total uploaded images size - 4507518 bytesTotal smushed image size - 3928995 bytesPercentage saving - 14.724452%...
fix text
Unbreak adding subqueues to limiters. Correct some text in the way.
Add all to the reserved keywords
Merge branch 'master' of rcs.pfsense.org:pfsense/mainline
Update GUI to enable L2TP client configuration.
Add missing "Connect/Disconnect" button to GUI for L2TP client connections.
Select the device mode to tun if variable device_mode not exist in the configuration
Added option to select the type of device for use in the tunnel openvpn
Add Total number of CP users graph
Hopefully improve the useless ipsec logs with highlighting
Fix ticket #1354
ipfw is not referenced here.
Do more strict checking if an ppp type interface is assigned before starting the mpd process behind it. Trigered-by: http://forum.pfsense.org/index.php/topic,34377.0.html
Prevent the command wol for being called without propper ip information. Reported-by: http://forum.pfsense.org/index.php/topic,34314.0.html
Fix typo
Clarify text on outbound NAT page.
Add the 95th percentile line to the traffic graphs
Add missing image. Fixes #1339
Enforce session establishment.
Add missing pages to the authentication system.
Make sure we tell the code that the interface exists otherwise multiple laggs might get created.
Ensure the protocol on the firewall rule from the OpenVPN wizard ends up lower case, or it causes some GUI irregularities. Seen http://forum.pfsense.org/index.php/topic,33865.0.html and elsewhere.
Show friendly names of interface for root queues of ALTQ.