Renato Botelho
89cf3dc0b6
Fix logic to find available next number for limiters and queues. It fixes #3998
2014-11-13 10:09:41 -02:00
Renato Botelho
340ce958d9
Add an extra protection to avoid having an empty group created
2014-11-13 09:10:44 -02:00
Ermal
21cd92ac01
Oops wrong choice the checkbox is only for javascript
2014-11-12 21:41:52 +01:00
Ermal
c9b70c0a67
Remove redundant code and check for dpd_enable checkbox to be set
2014-11-12 21:41:52 +01:00
Renato Botelho
2951a06ad8
Only create missing ssh keys, do not overwrite existing ones. It fixes #4003
2014-11-12 12:27:57 -02:00
Ermal
aa5acb424f
Use route command directly rather than trying to make a route search on php thorugh netstat. It Fixes #4000
2014-11-12 14:57:12 +01:00
Ermal
39f93e00ca
Revert "Make phase1_status function wok whnever there is a smp dump. This should unbreak Ticket #3955 "
...
This reverts commit 694d368d81
.
2014-11-12 12:42:38 +01:00
Chris Buechler
5823df59eb
remove this log, it's never logged anything useful that I've seen, and unnecessarily spams the secondary's system log on every config sync.
2014-11-12 00:32:36 -06:00
Chris Buechler
4de91fdae3
hn(4) is ALTQ-capable, mark as such.
2014-11-11 19:13:09 -06:00
Ermal
694d368d81
Make phase1_status function wok whnever there is a smp dump. This should unbreak Ticket #3955
2014-11-11 23:18:00 +01:00
Ermal
c7f5b55a28
Actually require group name!
2014-11-11 21:36:57 +01:00
Ermal
baca968c29
Do not do operations for empty group members
2014-11-11 21:35:29 +01:00
Ermal
e16f6d03a7
Do not do this during boot
2014-11-11 21:28:13 +01:00
Ermal
63ba47297f
Use leftcert for more options on IPsec authentication
2014-11-11 20:57:48 +01:00
Ermal
1f2f38f509
Ticket #3967 also sync other vip types that can be synched.
2014-11-11 20:49:11 +01:00
Ermal
94115b9313
Fixes #3967 , properly resolve interface
2014-11-11 20:08:25 +01:00
Renato Botelho
992f60d0fb
Set proxy env vars on interactive shell and also on crontab to make all scripts be able to use it. Ticket #3789
2014-11-11 11:57:38 -02:00
Renato Botelho
eacdbc4d6a
Revert "Ticket #3789 . Put a start at using the proxyurl/proxyport from system configured settings for bogons. It still does not consider the user/pass configured"
...
This reverts commit 664adf3845
.
2014-11-11 11:33:53 -02:00
Chris Buechler
0b7dbebe40
touch up text
2014-11-11 00:03:23 -06:00
Jim Thompson
29aef6c45b
Change copyright statement to reflect reality
2014-11-10 23:36:14 -06:00
Ermal
7cdfe39e4e
Strengthen check
2014-11-10 23:45:29 +01:00
Ermal
f4443dce54
Compare the right things here.
2014-11-10 23:32:27 +01:00
Ermal
d87fcac96b
Do not require the default sysctl items to be set on the config.xml but rather extract the definitions from the sysctl tree. Also to reduce config.xml size
2014-11-10 21:47:14 +01:00
Ermal
24d728bb4f
Retire flowtable_configure as a useless code since its not in kernel
2014-11-10 20:36:10 +01:00
Ermal
c46f9695ec
Actually make default sysctls reside on globals.inc and use those by default this allows to trim down the config.xml sysctl and also fixes #3666 by setting set source interface on reply of icmp
2014-11-10 20:32:05 +01:00
Ermal
894a0159a0
Tighten checks here to avoid overriding the default gw with garbage
2014-11-10 17:03:43 +01:00
Ermal
d3c269d393
Make some more useful checks here
2014-11-10 16:15:08 +01:00
Ermal
6704590b35
Be sure the same gateway is not processed for v4 and v6
2014-11-10 16:09:58 +01:00
Ermal
c87d89ae9f
Lets put a logging to see what is bing passed to the rtsold script on calling. Helps with Ticket #3361
2014-11-10 15:38:37 +01:00
Ermal
6f55af1c25
Ticket 3967, revert upgrade code. Existing 2.2 installs might be impacted
2014-11-10 15:20:18 +01:00
Ermal
b0d054ca3b
Fixes #3967 , configure ip alias on top of carp by joining them to the same vhid as its parent
2014-11-10 15:18:55 +01:00
Ermal
5063f1df93
Ticket #3967 . Allow to have carp as parent of ipaliases - continued
2014-11-10 15:00:30 +01:00
Ermal
80be089f05
Fixes #3995 . Do not set rightsourceip on site-to-site VPNs but only on mobile users ones otherwise nothing works.
2014-11-07 19:28:56 +01:00
Ermal
20a9590486
Make ipsec_starter log go to ipsec.log rather than system one
2014-11-07 14:37:09 +01:00
Ermal
e82a1d11d6
Reload also the configuration not only the secrets before trying to apply existing configuration. Ticket #3981
2014-11-07 14:14:50 +01:00
Chris Buechler
d3d237548f
fix text, PPPoE Server, not VPN
2014-11-06 22:03:50 -06:00
Chris Buechler
7bd413ebc6
add a route debug option to log info about route commands executed (where those aren't already logged) to help with troubleshooting various routing scenarios.
2014-11-06 20:19:24 -06:00
Chris Buechler
dbb95f387b
set install_routes=no for charon to avoid the issues noted in ticket
2014-11-06 12:49:06 -06:00
Renato Botelho
27c2e32e28
Pass zone id to pfSense_ipfw_getTablestats(), should fix #3990
2014-11-06 16:38:00 -02:00
Renato Botelho
118218cb69
Make sure target has scope when it's a link-local. Fixes #3969
2014-11-06 11:54:11 -02:00
jim-p
10435fa9f7
Merge pull request #1330 from phil-davis/patch-1
2014-11-06 08:07:32 -05:00
Renato Botelho
3f6525c1ab
Make sure srcip has scope when it's link-local. Should fix #3969
2014-11-06 08:30:50 -02:00
Renato Botelho
48f77cef06
Simplify post_upgrade_command logic and obsolete /usr/local/sbin/cvs_sync.sh instead of removing it on post_upgrade_command
2014-11-06 07:57:21 -02:00
Phil Davis
a68c678580
Fix to SMART disk matching
...
preg_match returns 0 when the string does not match the regex.
0 does not "===" FALSE
So this check is not always working.
preg_match returns 1 when the string matches the regex.
IMO it is better to check for !== 1 - then anything that is not success (0 or false or...) will be unset.
2014-11-06 15:14:38 +05:45
Chris Buechler
e8fa9843b5
Pass friendlyifname to handle_argument_group, not realifname. Fixes #3984 . clean up some text while here.
2014-11-05 20:45:13 -06:00
Chris Buechler
e55e4b748c
isset($_GET) seems to always evaluate to true, use something more specific. Fixes use of rc.linkup when run from CLI. Others likely fix similar circumstances, though maybe not ones that are used anywhere.
2014-11-05 19:47:22 -06:00
Chris Buechler
9aec47b7d5
don't duplicate $message in CP log entries
2014-11-05 17:18:51 -06:00
Renato Botelho
d9b05eb490
When an alias contain hosts, add IPs and networks to filterdns too, otherwise you end up with a pre-defined and non-persistent table. Fixes #3939
2014-11-05 15:31:31 -02:00
Chris Buechler
cbc6a13fa3
Fix updating of hosts file on host override updates by bringing back the same behavior from previous releases.
2014-11-04 22:01:36 -06:00
Chris Buechler
531686c1ea
use tabs rather than spaces, as most of this already did.
2014-11-04 19:09:53 -06:00