Commit Graph

12692 Commits

Author SHA1 Message Date
Renato Botelho 89cf3dc0b6 Fix logic to find available next number for limiters and queues. It fixes #3998 2014-11-13 10:09:41 -02:00
Renato Botelho 340ce958d9 Add an extra protection to avoid having an empty group created 2014-11-13 09:10:44 -02:00
Ermal 21cd92ac01 Oops wrong choice the checkbox is only for javascript 2014-11-12 21:41:52 +01:00
Ermal c9b70c0a67 Remove redundant code and check for dpd_enable checkbox to be set 2014-11-12 21:41:52 +01:00
Renato Botelho 2951a06ad8 Only create missing ssh keys, do not overwrite existing ones. It fixes #4003 2014-11-12 12:27:57 -02:00
Ermal aa5acb424f Use route command directly rather than trying to make a route search on php thorugh netstat. It Fixes #4000 2014-11-12 14:57:12 +01:00
Ermal 39f93e00ca Revert "Make phase1_status function wok whnever there is a smp dump. This should unbreak Ticket #3955"
This reverts commit 694d368d81.
2014-11-12 12:42:38 +01:00
Chris Buechler 5823df59eb remove this log, it's never logged anything useful that I've seen, and unnecessarily spams the secondary's system log on every config sync. 2014-11-12 00:32:36 -06:00
Chris Buechler 4de91fdae3 hn(4) is ALTQ-capable, mark as such. 2014-11-11 19:13:09 -06:00
Ermal 694d368d81 Make phase1_status function wok whnever there is a smp dump. This should unbreak Ticket #3955 2014-11-11 23:18:00 +01:00
Ermal c7f5b55a28 Actually require group name! 2014-11-11 21:36:57 +01:00
Ermal baca968c29 Do not do operations for empty group members 2014-11-11 21:35:29 +01:00
Ermal e16f6d03a7 Do not do this during boot 2014-11-11 21:28:13 +01:00
Ermal 63ba47297f Use leftcert for more options on IPsec authentication 2014-11-11 20:57:48 +01:00
Ermal 1f2f38f509 Ticket #3967 also sync other vip types that can be synched. 2014-11-11 20:49:11 +01:00
Ermal 94115b9313 Fixes #3967, properly resolve interface 2014-11-11 20:08:25 +01:00
Renato Botelho 992f60d0fb Set proxy env vars on interactive shell and also on crontab to make all scripts be able to use it. Ticket #3789 2014-11-11 11:57:38 -02:00
Renato Botelho eacdbc4d6a Revert "Ticket #3789. Put a start at using the proxyurl/proxyport from system configured settings for bogons. It still does not consider the user/pass configured"
This reverts commit 664adf3845.
2014-11-11 11:33:53 -02:00
Chris Buechler 0b7dbebe40 touch up text 2014-11-11 00:03:23 -06:00
Jim Thompson 29aef6c45b Change copyright statement to reflect reality 2014-11-10 23:36:14 -06:00
Ermal 7cdfe39e4e Strengthen check 2014-11-10 23:45:29 +01:00
Ermal f4443dce54 Compare the right things here. 2014-11-10 23:32:27 +01:00
Ermal d87fcac96b Do not require the default sysctl items to be set on the config.xml but rather extract the definitions from the sysctl tree. Also to reduce config.xml size 2014-11-10 21:47:14 +01:00
Ermal 24d728bb4f Retire flowtable_configure as a useless code since its not in kernel 2014-11-10 20:36:10 +01:00
Ermal c46f9695ec Actually make default sysctls reside on globals.inc and use those by default this allows to trim down the config.xml sysctl and also fixes #3666 by setting set source interface on reply of icmp 2014-11-10 20:32:05 +01:00
Ermal 894a0159a0 Tighten checks here to avoid overriding the default gw with garbage 2014-11-10 17:03:43 +01:00
Ermal d3c269d393 Make some more useful checks here 2014-11-10 16:15:08 +01:00
Ermal 6704590b35 Be sure the same gateway is not processed for v4 and v6 2014-11-10 16:09:58 +01:00
Ermal c87d89ae9f Lets put a logging to see what is bing passed to the rtsold script on calling. Helps with Ticket #3361 2014-11-10 15:38:37 +01:00
Ermal 6f55af1c25 Ticket 3967, revert upgrade code. Existing 2.2 installs might be impacted 2014-11-10 15:20:18 +01:00
Ermal b0d054ca3b Fixes #3967, configure ip alias on top of carp by joining them to the same vhid as its parent 2014-11-10 15:18:55 +01:00
Ermal 5063f1df93 Ticket #3967. Allow to have carp as parent of ipaliases - continued 2014-11-10 15:00:30 +01:00
Ermal 80be089f05 Fixes #3995. Do not set rightsourceip on site-to-site VPNs but only on mobile users ones otherwise nothing works. 2014-11-07 19:28:56 +01:00
Ermal 20a9590486 Make ipsec_starter log go to ipsec.log rather than system one 2014-11-07 14:37:09 +01:00
Ermal e82a1d11d6 Reload also the configuration not only the secrets before trying to apply existing configuration. Ticket #3981 2014-11-07 14:14:50 +01:00
Chris Buechler d3d237548f fix text, PPPoE Server, not VPN 2014-11-06 22:03:50 -06:00
Chris Buechler 7bd413ebc6 add a route debug option to log info about route commands executed (where those aren't already logged) to help with troubleshooting various routing scenarios. 2014-11-06 20:19:24 -06:00
Chris Buechler dbb95f387b set install_routes=no for charon to avoid the issues noted in ticket 2014-11-06 12:49:06 -06:00
Renato Botelho 27c2e32e28 Pass zone id to pfSense_ipfw_getTablestats(), should fix #3990 2014-11-06 16:38:00 -02:00
Renato Botelho 118218cb69 Make sure target has scope when it's a link-local. Fixes #3969 2014-11-06 11:54:11 -02:00
jim-p 10435fa9f7 Merge pull request #1330 from phil-davis/patch-1 2014-11-06 08:07:32 -05:00
Renato Botelho 3f6525c1ab Make sure srcip has scope when it's link-local. Should fix #3969 2014-11-06 08:30:50 -02:00
Renato Botelho 48f77cef06 Simplify post_upgrade_command logic and obsolete /usr/local/sbin/cvs_sync.sh instead of removing it on post_upgrade_command 2014-11-06 07:57:21 -02:00
Phil Davis a68c678580 Fix to SMART disk matching
preg_match returns 0 when the string does not match the regex.
0 does not "===" FALSE
So this check is not always working.
preg_match returns 1 when the string matches the regex.
IMO it is better to check for !== 1 - then anything that is not success (0 or false or...) will be unset.
2014-11-06 15:14:38 +05:45
Chris Buechler e8fa9843b5 Pass friendlyifname to handle_argument_group, not realifname. Fixes #3984. clean up some text while here. 2014-11-05 20:45:13 -06:00
Chris Buechler e55e4b748c isset($_GET) seems to always evaluate to true, use something more specific. Fixes use of rc.linkup when run from CLI. Others likely fix similar circumstances, though maybe not ones that are used anywhere. 2014-11-05 19:47:22 -06:00
Chris Buechler 9aec47b7d5 don't duplicate $message in CP log entries 2014-11-05 17:18:51 -06:00
Renato Botelho d9b05eb490 When an alias contain hosts, add IPs and networks to filterdns too, otherwise you end up with a pre-defined and non-persistent table. Fixes #3939 2014-11-05 15:31:31 -02:00
Chris Buechler cbc6a13fa3 Fix updating of hosts file on host override updates by bringing back the same behavior from previous releases. 2014-11-04 22:01:36 -06:00
Chris Buechler 531686c1ea use tabs rather than spaces, as most of this already did. 2014-11-04 19:09:53 -06:00