Fix required options syntax typo
Remove errant double quote.
Merge pull request #692 from mgsmith1000/master
Omit IP warning if HTTP_REFERER check is disabled.
Do not reconfigure dhcp v6 on v4 ip address event. Only handle 6rd and 6to4 while the former is questionable if needed
Copy/pasto does well up to some point
On every ip change renew the hosts file
Enforce the checking of booting up for linkup events
Merge pull request #687 from falbertopl/master
Modified radius function to release the pinene
modified radius function to release the pineno
modified radius function to release the pinene if the client is not authenticated properly, and modified function captiveportal_get_next_dn_ruleno to initially takes the value 2000 for the first pipeno.
Include both dyndns and rfc2136 hosts in referer check
Include RFC2136 hosts in DNS rebinding checks.
Add server IP column and cached IP display to RFC2136 host list.
Add option to RFC2136 to find/use the public IP if the interface IP is private. (Off by default)
Fix double click row to edit for rfc2136
Add cached IP support to RFC2136, add GUI button to force update for single host.
Correct variable used to delete symlinks and files delete from CP filemanager. Reported-by: http://forum.pfsense.org/index.php/topic,64016.0/topicseen.html. While here reduce some uneeded extra operations
Add the interface's descr after the pool name.
Repect global conf_path
Merge pull request #686 from Klaws--/master
Added previously missing class selectors cs1-cs7 plus VA (voice-admit), plus the TOS values which still work with DSCP
Definitely requires my patches to the kernel patches to work (dscp.RELENG_*.diff). OTOH, it is currently broken anyway, so wahtever happens, it cannot get more broken. ;-)...
Fix the RRD RRA’s to collect the correct amount of data for the Previous Period view for each resolution.
Applied when RRD's are created.
RRA:AVERAGE:0.5:1:1200 = 20 hours of 1 minute dataRRA:AVERAGE:0.5:5:720 = 2.5 days of 5 minute data...
RRD Specify RRA and Resolution
Don't leave it up to RRD Tool to select the RRA and resolution to use.Specify the RRA and resolution to use per the graph havg value.
Adjust archives array values to match sizes for average calculation.
Archive start is “now” minus archive length. Not “end” minus archive length. Sometimes "end" is not "now".
Add a checkbox that can be used to request only a IPv6 prefix without a IPv6 address. Some ISPs DHCP6 servers will fail the request if both are requested and only a Prefix is allowed.
Conflicts:
usr/local/www/interfaces.php
Merge pull request #684 from N0YB/Advanced_DHCP_Client_Options
Add show/hide to the new "Reject Leases From" row
fix typos
Show for Basic and Advanced. Hide for Config File Override.
Merge pull request #671 from wrboyce/master
allow defining dhcp static mappings using dhcp-client-identifier
Merge branch 'Advanced_DHCP_Client_Options' of https://github.com/N0YB/pfsense into N0YB-Advanced_DHCP_Client_Options
Conflicts: usr/local/www/interfaces.php
Merge pull request #681 from phil-davis/master
Handle comma-separated list arg to rc.openvpn
The argument passed to rc.openvpn can be a comma-separated list of gateways - not just 1 gateway. Enhance the code to loop and process each gateway.
Be a lot more verbose in the logs during package reinstallation.
If the script_name is blank, try another method to locate what our filename is so we don't log an empty script name.
Fix CP status sorting to properly respect the zone.
Merge pull request #678 from johnbyronent/master
Add Dyn Dns Euro Dns Provider
DynDns Euro Dns Provider
Add a note about the LDAP hostname matching the server cert's CN.
Merge pull request #677 from plinss/master
Proposed fix for bug #3057
Update services.inc
Turn on AdvManagedFlag and AdvOtherConfigFlag for both 'managed' and 'assist' ramodes.
Add option and code to sync Auth servers with XMLRPC.
Add AAAA support to RFC2136 updates. Based on http://forum.pfsense.org/index.php/topic,50164.msg269138.html#msg269138
Fix #2887, based on NAT states that will be killed, also kill firewall states for same source and destination
Merge pull request #674 from PiBa-NL/SystemGroupmanager_16charName
System: Group manager, set max length for groupname to 16 characters
Merge pull request #673 from phil-davis/master
Use "Probe Interval" to describe this advanced gateway parameter
Use Probe Interval on gateway advanced settings
Correct gateway down/probe interval text.
Correct the comments describing the error with correct values
Use the name of the interface (lan, opt1, etc) rather than a loop-derived number for the DHCP failover peer name. This should be more accurate in cases where DHCP changes for interfaces happen out of order on CARP clusters, or when somehow an interface's configuration exists on one but not the other.
Allow removing CA and Cert entries that are blank/empty. Fixes #3005
Add an option to force IPsec to reload on failover, which is needed in some cases for IPsec to fail from one interface to another. Ticket #2896
Add a brief description about bandwidth vs bursting.
Add a field to allow rejecting DHCP leases from a specific upstream DHCP server.
A better fix for conditionally including burst.
Burst of 0 is also valid
Only add burst if a burst is defined
No need for this block of code, it will always have flags by this point if they are needed.
Ensure that we only add a state type on pass, and that we only add flags to a TCP reject rule if they were not added previously. Fixes #3050
Change test after IPsec apply to check for any value >= 0. If a user has hostnames vpn_ipsec_configure() now returns the number of hostnames, so the previous test failed and the "apply changes" button would never go away.
Fix #3049, set $config as global to it can be read
Allow user to set interval between attempts to resolve hostnames configured on aliases
Include the burst size in the limiter. Submitted-by: http://forum.pfsense.org/index.php/topic,62470.0.html
fix dhcp static mapping/client identifier validation
Add warning comment about missing IPv6 implementation
Add used binary
Remove referenced binary not used anymore
Remove unused code and spurious alert
Use file_put_contents for simplicity and readbility
Use family parameter for v6 to get correct interface
Remove useless variable and also correct some style
Do not do the same tricks here that are done on get_real_interface but just call the function directly
Get interface from inet6 domain
Use trim rather than str_replace. Also no need to sleep anymore since dhcp will configure first the interface
Remove unreferenced binaries. correct some formatting and also to make function clear to track correct the curly placement
Provide full path to route binary
Don't flip the IPv6 allow setting just because people are upgrading. Just upgrading versions shouldn't change this behavior. As much as most of us would like people to start deploying IPv6, the vast majority aren't going to be immediately post-upgrade, and changing this can change the firewall policy behavior by allowing v6 that previously wasn't allowed. Upgrades should never change the firewall behavior like that. At the time it was done, everyone using the 2.1 code base was using it for IPv6, so of course it tripped up quite a few people.
not true you have to log in again since HTTP basic auth was deprecated.
add MSS clamping to setup wizard. Now that MTU and MSS are separate, the MTU description was wrong, and both need to be there.
TCP flags are valid on any type of rule, don't skip them on block or reject rules
Fix max length for wpa passphrase, it fixes #3034
Allow queues to be deleted, it fixes #3037
Update list of mobile service providers
Fix exec perms on mail.php
Add a simple CLI mail script capable of sending an SMTP message using echo/piped input, e.g. ifconfig -a | mail.php -s"ifconfig output"
Split actual SMTP send into its own function.
Merge pull request #670 from francisuk/patch-1
EAOrigin.pat - Traffic Sharping Layer 7
The EA Store is now Origin, Tested and works (for now) will make changes if i come to anything useful.
Add the ability to disable Growl or SMTP notifications but keep their settings intact. Remove automatic test messages on save. Add individual test buttons for Growl and SMTP that work even if the service(s) are disabled.
Don't restrict the content of descr when making CA/Certs, it's free-form.
Actually do not allow the loop to continue. Related to Ticket #1928
Merge pull request #669 from francisuk/patch-1
SWF
Actually try to get the real interface for v6 family to correctly get stf(virtual) interfaces
As said on the pFsense forum http://forum.pfsense.org/index.php/topic,62863.0.html It works and tested by me.
Correct the command for setting the 6rd gw