Commit Graph

24095 Commits

Author SHA1 Message Date
Phil Davis c656bc75f8 Fix getext to gettext typo 2014-10-31 08:09:39 +05:45
Phil Davis 41aa5cd4da Fix getext to gettext typo 2014-10-31 08:08:54 +05:45
Phil Davis 29af62653b Fix getext to gettext typo 2014-10-31 08:08:06 +05:45
Phil Davis 24516832ea Fix getext to gettext typo 2014-10-31 08:07:23 +05:45
Phil Davis b3f0b2e1a8 Fix getext to gettext typo 2014-10-31 08:06:17 +05:45
Chris Buechler 1ae41bfe84 Kill states associated with the old WAN IP when WAN IP has changed. Retain
hidden config option to wipe all states on IP change, as there seemed to
be circumstances where the 'pfctl -k $oldip' didn't suffice for others
(much of history in redmine ticket, some on forum and elsewhere). ticket
2014-10-30 16:37:14 -05:00
Ermal 737b18f23b Allow accept_unencrypted_mainmode_messages to be enabled if needed 2014-10-30 21:35:51 +01:00
Chris Buechler 461eac099b only kill all states if the IP changed. ticket #1629 2014-10-30 13:15:41 -05:00
Chris Buechler 5274102ea4 Hide burst for limiters, since it doesn't do anything. more details in
ticket #3933
2014-10-29 15:39:15 -05:00
Renato Botelho a437287444 Fix a typo on array index, related to ticket #3963 2014-10-29 11:02:47 -02:00
Chris Buechler 002d286c9c fix up text 2014-10-29 01:08:03 -05:00
Chris Buechler eea2ad5d61 FreeBSD fails to set advskew back to 0 after you set it to any other
value. That's a separate issue that needs fixing upstream, but in the mean
time, we can work around it by removing all CARP VIPs in the same way we
do when "Temporarily Disable CARP" is chosen before adding them all back.
Ticket #3910
2014-10-28 16:33:09 -05:00
Chris Buechler 569e2fdfac Add option to kill all states on IP change, currently a hidden option for more testing. ticket #1629 2014-10-28 13:31:51 -05:00
Renato Botelho fd057a5676 Merge pull request #1317 from phil-davis/patch-1 2014-10-28 15:00:16 -02:00
Renato Botelho 0a8dd27b5f Remove redundancy as pointed out by phil-davis 2014-10-28 14:55:07 -02:00
Renato Botelho 7c1997914f Merge pull request #1297 from phil-davis/patch-23 2014-10-28 14:26:51 -02:00
Renato Botelho 143c22f771 Decode recently created cert and key. It fixes #3964. While here, fix logical condition to create a new cert if crt or key is not present 2014-10-28 10:17:16 -02:00
Renato Botelho 0a8d7fe996 Back to use listr instead of vncellt since it has small fonts and mitigate changes of go outside the sidget. It should fix #3937 2014-10-28 09:49:25 -02:00
Renato Botelho 30cb409d63 Simplify logic 2014-10-28 09:24:56 -02:00
Renato Botelho bf50b0a42f Remove unecessary variables 2014-10-28 09:10:47 -02:00
Renato Botelho 9c76c0f1e0 Whitespace and indent 2014-10-28 09:08:28 -02:00
Chris Buechler 7e1aa4b771 fix ping_hosts.sh to not ping IPsec if CARP is in backup 2014-10-27 15:32:17 -05:00
Chris Buechler e8b5f72496 domain and search should not both be defined in resolv.conf per FreeBSD man page and handbook (only the latter is actually used). Change this to just not use domain, and set the search to the system's domain where not using the function that generates the search list for dynamic WANs. 2014-10-25 22:11:45 -05:00
Ermal 23ed5b7871 Enable unity plugin as per request from https://forum.pfsense.org/index.php?topic=79737.msg452808#msg452808 2014-10-24 19:18:15 +02:00
Phil Davis 577b776e55 Warn if attempting to import IPv6 range
There is currently no code to convert an IPv6 range to a set of corresponding IPv6 subnets, so warn the user if they attempt that from the alias bulk import GUI.
2014-10-24 20:23:00 +05:45
Phil Davis bb67ac32bc Support converting an IP range to an array of addresses
so that it can be used for expanding ranges in host alias input.
2014-10-24 20:17:04 +05:45
Phil Davis feb1953e84 Expand range or subnet for host alias
When entering a host alias, if the user put an IP range (like 192.168.0.10-192.168.0.20) or a subnet (like 192.168.1.200/29) then expand it into a list of individual IP addresses. Check that it will not make too many rows to exceed the existing 5000 row limit on the GUI.
Note: expanding ranges and subnets like this is only for IPv4 for now. Entering an IPv6 range or subnet in a hosts alias will display a message telling the user that is not supported - it could be done in future but currently the routines that convert this stuff are only for IPv4.
I have done as much validation as I can think of, and where there is a problem the original user-entered data is preserved for re-display, as well as the input errors being displayed. So IMO it should be self-documenting.
2014-10-24 20:10:50 +05:45
Renato Botelho 095707fe9e Merge pull request #1313 from phil-davis/patch-9 2014-10-23 12:24:58 -02:00
jim-p c25d1fd7e5 Encode values before displaying them back to the user in notification settings 2014-10-21 14:25:53 -04:00
Chris Buechler 687d0a6d05 remove the command number shown in the shell prompt, it's a pointless
waste of screen space
2014-10-21 12:46:38 -05:00
Phil Davis 99ba943ad4 Prevent Internal Server Error if range is backwards
Fixes redmine #3950 - ip_range_to_subnet_array can easily swap the input parameters if the caller has passed/entered them the wrong way around. That is both friendly to the caller and ensures that a hostile caller can't blow up the routine.
This patch is for master (2.2)
2014-10-21 15:17:17 +05:45
Chris Buechler 9b86d3fe6f + is a valid character in some dynamic DNS providers' usernames. Fixes #3912 2014-10-21 01:54:13 -05:00
Chris Buechler 2fb6694858 hostnames can end with a . (and actually always do, it's just usually implied), so allow that here. Fixes wrong input validation in parts of nsupdate GUI, among other things. 2014-10-21 00:40:22 -05:00
Renato Botelho a23adfbaa0 Merge pull request #1306 from phil-davis/patch-3 2014-10-20 12:00:54 -05:00
Renato Botelho 6d9514581a Let user decide if he wants to proceed to the upgrade when sha256 fails to download. Fixes #3576 2014-10-20 10:41:12 -05:00
Chris Buechler 13ec619c9c h-node should be 8 2014-10-19 19:30:43 -05:00
Chris Buechler bc12ae8a7b Underscores are valid characters in domains. Fixes #3219 2014-10-19 18:38:13 -05:00
Ermal 621fed0e0f Ticket #3932 For more than 100 entries create pipes in line with the rules file to speedup the process 2014-10-18 01:33:42 +02:00
Renato Botelho 2ac79aded6 Merge pull request #1310 from phil-davis/patch-6 2014-10-16 16:46:11 -05:00
Renato Botelho 308e304218 Merge pull request #1311 from phil-davis/patch-7 2014-10-16 16:44:06 -05:00
jim-p 497563bec4 Fix the log widget to lookup hosts by DNS using a link rather than AJAX. Quick fix for now. Ticket #3829 2014-10-16 15:21:38 -04:00
jim-p b6dbbebc0f Add command line script to generate and activate a new GUI certificate. 2014-10-15 14:01:55 -04:00
jim-p 2cf2c62b27 Fix descriptions and cn on generated GUI cert to be consistent. 2014-10-15 14:01:00 -04:00
Ermal 2f5488df44 Reintroduce the vfs.forcesync systl 2014-10-15 16:23:29 +02:00
Renato Botelho 29fb23d449 Merge pull request #1309 from phil-davis/patch-5 2014-10-15 08:49:48 -05:00
jim-p 5ff7f58e59 Tame the poodle. Disable SSLv3. 2014-10-15 08:40:36 -04:00
Phil Davis 466aae837b Manage dhcpleaseinlocaltime consistently
dhcpleaseinlocaltime is actually a global setting, but the setting is stored per-DHCP-enabled-interface.
The display code in status_dhcp_leases already sorts this out - if any interface has the setting enabled then the displayed lease times are adjusted to local time.
This fixes up the input of the setting. If dhcpleaseinlocaltime is checked on any interface, then it will now be shown checked whichever interface tab the user happens to have open.
Whatever the user does to the checkbox, the setting is saved to all interfaces in the config - this is particularly neccesary when unchecking the box. The setting must be cleared in the config for all interfaces.
The way this change works, there is no need to convert existing configs. The code correctly works with both old and new configs.
This came up again in forum: https://forum.pfsense.org/index.php?topic=82881.msg0
It is an annoying "feature" so I think it is worth clearing it up on the UI.
2014-10-15 14:26:30 +05:45
Phil Davis 73a9669840 Provide an edit button for static mapped entries
As suggested in forum https://forum.pfsense.org/index.php?topic=82883.msg0#new
Instead of a non-functioning red plus icon, show an edit icon for static mapped entries, and take the user to services_dhcp_edit page if it is clicked. IMHO this makes it much easier to correct things that are noticed when viewing the Status, DHCP Leases display.
2014-10-15 12:26:29 +05:45
Phil Davis fff9ee45c3 Whitespace in status_dhcp_leases.php 2014-10-15 11:32:23 +05:45
Phil Davis 5d49ceac8b Fix #3935 Properly allow WAN without LAN
Was broken by bd0b5d2dc7
2014-10-15 10:04:57 +05:45