9c97df267f
Ticket #3967 . Allow to have carp as parent of ipaliases
2014-11-10 14:34:35 +01:00
80be089f05
Fixes #3995 . Do not set rightsourceip on site-to-site VPNs but only on mobile users ones otherwise nothing works.
2014-11-07 19:28:56 +01:00
20a9590486
Make ipsec_starter log go to ipsec.log rather than system one
2014-11-07 14:37:09 +01:00
e82a1d11d6
Reload also the configuration not only the secrets before trying to apply existing configuration. Ticket #3981
2014-11-07 14:14:50 +01:00
a838048088
fix text
2014-11-06 22:11:28 -06:00
6859f88157
show interface name, not identifier
2014-11-06 22:09:47 -06:00
d3d237548f
fix text, PPPoE Server, not VPN
2014-11-06 22:03:50 -06:00
7bd413ebc6
add a route debug option to log info about route commands executed (where those aren't already logged) to help with troubleshooting various routing scenarios.
2014-11-06 20:19:24 -06:00
708af6349c
remove unnecessary is_array check, thanks Renato
2014-11-06 17:16:27 -06:00
6c3be36500
Don't allow P2 local+remote network combinations that overlap with
...
interface+remote-gateway of the P1. Fixes #3812
2014-11-06 16:36:35 -06:00
dbb95f387b
set install_routes=no for charon to avoid the issues noted in ticket
2014-11-06 12:49:06 -06:00
27c2e32e28
Pass zone id to pfSense_ipfw_getTablestats(), should fix #3990
2014-11-06 16:38:00 -02:00
118218cb69
Make sure target has scope when it's a link-local. Fixes #3969
2014-11-06 11:54:11 -02:00
049c74ecbf
Check if array is set
2014-11-06 11:40:25 -02:00
10435fa9f7
Merge pull request #1330 from phil-davis/patch-1
2014-11-06 08:07:32 -05:00
3f6525c1ab
Make sure srcip has scope when it's link-local. Should fix #3969
2014-11-06 08:30:50 -02:00
e7752fc4ee
Remove extra ; and space
2014-11-06 07:57:21 -02:00
e7a0051400
Process obsolete files in shell script instead of php
2014-11-06 07:57:21 -02:00
48f77cef06
Simplify post_upgrade_command logic and obsolete /usr/local/sbin/cvs_sync.sh instead of removing it on post_upgrade_command
2014-11-06 07:57:21 -02:00
a68c678580
Fix to SMART disk matching
...
preg_match returns 0 when the string does not match the regex.
0 does not "===" FALSE
So this check is not always working.
preg_match returns 1 when the string matches the regex.
IMO it is better to check for !== 1 - then anything that is not success (0 or false or...) will be unset.
2014-11-06 15:14:38 +05:45
a012464eb4
fix captive portal status page display
2014-11-05 22:58:19 -06:00
bb18cfcb3b
fix up text
2014-11-05 22:45:06 -06:00
e8fa9843b5
Pass friendlyifname to handle_argument_group, not realifname. Fixes #3984 . clean up some text while here.
2014-11-05 20:45:13 -06:00
e55e4b748c
isset($_GET) seems to always evaluate to true, use something more specific. Fixes use of rc.linkup when run from CLI. Others likely fix similar circumstances, though maybe not ones that are used anywhere.
2014-11-05 19:47:22 -06:00
c75e8aed2f
Disable delete_old_states in dhclient-script. rc.newwanip handles this correctly in 2.2, and this killed states in multiple circumstances where that isn't necessary nor desirable.
2014-11-05 19:33:46 -06:00
9aec47b7d5
don't duplicate $message in CP log entries
2014-11-05 17:18:51 -06:00
d9b05eb490
When an alias contain hosts, add IPs and networks to filterdns too, otherwise you end up with a pre-defined and non-persistent table. Fixes #3939
2014-11-05 15:31:31 -02:00
87d4456cf4
Merge pull request #1323 from derelict-pf/master
2014-11-05 07:07:55 -02:00
f81011eadd
Merge pull request #1320 from phil-davis/patch-2
2014-11-05 07:05:59 -02:00
e39c963a09
fix up text
2014-11-04 23:31:36 -06:00
75756ab9c8
use a bit stronger of defaults in OpenVPN wizard
2014-11-04 23:19:45 -06:00
1c1fe6662f
Fix WINS description. It's not 1999, and it wasn't a good description for back then either. If you're running WINS at this point on your AD DCs...get rid of the Win 9x boxes, or realize you don't actually need or want WINS on anything Windows 2000 and newer.
2014-11-04 23:08:13 -06:00
7a22ab9bb1
fix up text
2014-11-04 23:05:20 -06:00
cbc6a13fa3
Fix updating of hosts file on host override updates by bringing back the same behavior from previous releases.
2014-11-04 22:01:36 -06:00
b7419cfc0b
skip disabled phase 1 entries in status output
2014-11-04 21:22:27 -06:00
261f2efe47
fix NAT-T status. The 'nat' in the status array just tells how the connection is configured, not what it's actually using. Port seems to be the best way to determine what it's using. Fix up some other text while here
2014-11-04 19:57:46 -06:00
531686c1ea
use tabs rather than spaces, as most of this already did.
2014-11-04 19:09:53 -06:00
d3c414e335
strongswan only has two options for NAT-T, force or auto.
2014-11-04 19:02:38 -06:00
a43ddd1a5f
setting nmbclusters to 0 just results in an error, remove unnecessary line
2014-11-04 18:44:29 -06:00
41367b9c2a
remove old DISABLE_PHP_LINT_CHECKING, which dates way back to the CVS days and hasn't been relevant in years.
2014-11-04 18:34:03 -06:00
276efd64ea
touch up text
2014-11-04 18:24:01 -06:00
32171e5935
fix invalid ipsec.conf
2014-11-04 18:18:22 -06:00
f643a1f131
clean up text
2014-11-04 18:02:09 -06:00
ea20169a38
Use a better method of finding disks for SMART.
...
Old code was inaccurate and also listed entries that were symlinks to other disks
2014-11-04 15:49:54 -05:00
0810a719e9
Restore 3 values back on NAT-T settings Just Enable now its Auto as per strongswan default. and off disabled mobike. Ticket #3979
2014-11-04 21:21:47 +01:00
1db2634e32
Rename the options to actually make sense with strongswan
2014-11-04 21:08:25 +01:00
86ef7a0a46
Remove Force options since it has not meaning for now.
2014-11-04 21:07:26 +01:00
756d867a89
fix comment
2014-11-04 13:31:38 -06:00
8a2229e3da
Catch some more sensitive info when sanitizing.
2014-11-04 12:43:24 -05:00
f384d8a5d7
Merge pull request #1329 from phil-davis/patch-3
2014-11-03 15:27:32 -02:00
Ermal
Chris Buechler
Renato Botelho
jim-p
Phil Davis
Chris Buechler