pfSense

Help page adjustments and additions. Periodic commit.

Resolves #155. Replace space characters with underscore ones.

Put the FQDN back into the page title. Many people have numerous firewalls up across tabs, and it's impossible to differentiate without this, which we've had for many years.

trigger setup wizard

More updates to help page mappings.

this is not a required field

Properly correct ipfw rule.

Revert "Correct ipfw rule."
Error of copy paste

This reverts commit 0f6fdf29a2f31bbf816eb3df33c3f1fc38c8b2a6.

Add some more redirect definitions.
Still working on this, just a periodic commit so nothing gets lost.

Fix whitespace error

Make help link open in a new window

properly enable/disable Everything field

fix typo

Proof of concept for a contextual help redirector. Still in early stages of content, but the code behind it works (for ?page= type redirection, http referral url is not yet tested)

Add support for contextual help on each page. Add a help icon to the upper right, and an entry under the Help menu. (Text, style, placement, etc are open for suggestions)

Add a help_base_url variable to globals.inc for use with contextual help.

Fix proxy ARP VIP addition (was calling old function)

rename function from interfaces_proxyarp... to interface_ to be consistent with the functions for carp, carpdev, and ipalias.

still a problem with proxy ARP, removing VIP doesn't kill off choparp (will open ticket)

Add a help icon to each theme. Part of the contextual help project.

I see no reason to retain this "braindeadedness". Create each CARP VIP with its VHID, and destroy accordingly.

Resolves #151

Correct ipfw rule.

Propperly fix the special case of proxyarp vip deleteion. With comments from cbuechler@.

Revert "Resolves #153 Treat proxyarp special case during deletion."

This reverts commit 5d5ec271de58dd8306fa7bacfb439b07b3dd2e51.

Resolves #153 Treat proxyarp special case during deletion.

Update page title to reflect its current menu name

Fix Bug #147.

Set executable

Move two include files to /etc/inc instead of leaving them in the www dir. Move filterparser.php to /usr/local/bin since it's not meant to be used from the web interface.

Remove redundant page title tag

call first tab "Active Users", and make it consistent

yes, I'll even fix typos in comments

Not sure why this was changed like this. As is, you couldn't disconnect the first client. I don't see any reason to do it that way, and this is the way it's done in RELENG_1_2

Don't add hard coded rules to allow traffic to the portal.
1) the no state breaks CP
2) it's never been automatically allowed previously, and hard coded non-editable rules are bad.

always return the IP address hosting the page, rather than forcing to the hostname, requiring functional DNS name resolution which possibly doesn't exist. Restores 1.2.x behavior where client IP isn't in the same subnet as any CP-enabled interface.

fix typos

fix typo

fix typos

actually allow DNS to forwarder. CP is still broken, but this is closer at least.

pointy-hat-to: eri

Patch from Ron Lockard that fixed restore_chflags due to a STDOUT redirection issue

When renaming an interface make sure to rename even its ng_ether node so mpd does not fail.

Allow udp only from/to our local dns server. If wanted pass through can be added.

Simplify divert port generation and make sure it is even to leave room to ipfw-classifyd to always open 2 divert sockets one for reading and one for writing.

Default to top -HS

Second pass at updateing protocol definitions.

Update layer 7 protocol definitions and adding new regex definitions.

Remove brain dead comment by another brain washed comment.

- Should fix captive portal on carps Issue #116
- Should fix the captive portal not working reports and Issue #118
NOTE: Now Captive portal is open on dns so no more is needed to add dns servers to pass through ips.

Previous commit on carp was strange and breaking the distinction and usefulness of some functions.
Make sure that the behaviour returns to the previous architecture and to keep things right.

Carp needs some more work on handling the interface as all other interfaces, but that needs an upgrade path too....

Do not 'spam' a new ipfw-classifyd for each save. If we hit save for an existing configuration(did changes to existing one) just tell ipfw-classifyd to reload the config.

Remove \r it makes editing in vi ugly.

Fixes Issue #142

fix typo

fix typo

err, this defeats the entire purpose of NAT-T for clients behind the firewall, let's not do this.

clean up RADIUS issued IPs, shouldn't be two fields, and it wasn't properly checked/unchecked before. Fixes cvstrac # 1722

Add explanation for additional fields.

Stop spamming the logs with config_unlock() is depricated please use unlock().

Merge branch 'master' of git@rcs.pfsense.org:pfsense/mainline

allow sending of same message twice when 'testing' smtp service

add links to IPsec logs under IPsec status and other pages

Kill racoon when disabling IPSEC. Restart it if re-enabled.

Don't add port on no nat rules. Fixes #120

show what pass/linked icons mean

show pass icon for rdr pass entries, fix editing of pass entries

old version got committed accidentally, fix

Fix "Filter rule association" "Pass" option

Move newer xmlreader code to xmlreader.inc. Restore old xmlparse code to xmlparse.inc. Default to the older xmlparse.inc but add a flag check if /cf/conf/use_xmlreader is present the newer code will be included instead until the remaining bugs can be resolved with it (see rcs for many).

Adding newer xmlreader code to it's own file so that it can be turned and off until remaining bugs are fixed

Nuke old dev bootstrap code that is no longer in use

Relax some very strict cases.

Be more strict on shaper checking and what is written to config. Clean up whitespace while here.

Unbreak returning the real mem and web interface in general. Pointy-hat-to: Scott.

Unbreak the wizards. Some one enabled this disabled parts without even testing! Pointy-hat-to: scott@?!

Fallback to using hw.realmem and hw.physmem sysctl's when we cannot probe the available memory from bootup log file. RouterStationPRO is an example

Add default load balancing monitor types for ICMP, TCP, HTTP, HTTPS and SMTP from BillM

The wizards do not set the rule type and queues should be enabled even on block rules so add the queues to the rules even if the type of rule is not set(which means pass btw). This unbreaks the traffic shaper wizards and block shaping rules.

Woops, remove accidental debugging line.

remove unnecessary cat

Cleanup of firewall_nat_out_edit.php, whitespace changes, add curlies
for statements. Unset dstport and natport so the firewall rules do not
break.

Turn off IPSEC net.inet.ip.ipsec_in_use when IPSEC is disabled

Set sysctl net.inet.ip.ipsec_in_use=1 when starting racoon

Revert "Fix no nat rules where ports 1024:65535 is added Resolves #120"

This reverts commit 8763e56d20eec74f1c4caaea80ac1cfcb46bbe03.

Fix no nat rules where ports 1024:65535 is added Resolves #120

Automatically populate linespeed when prefilling

Handle secondary DNS correctly for 3G

Switch over to handling DNS from ppp.linkup allowing mulitple 3G cards to coexist on the same box

Kill foreach error

Adding diag_logs_ppp.php

s/IPsec VPN/IPsec/ to keep the tab behavior

Set correct tab title

Set title

Add PPP logging tab

Handle uping interfaces a bit more sanely

Revert interfaces_bring_up changes

Check to see if interface exists

Add space between interface and real interface brackets

Add ppp endpoints IP as gateway

Add and use ppp-script

Move "

Remove extra "

Add newline