Commit Graph

8341 Commits

Author SHA1 Message Date
Scott Ullrich 64141c80bf Readding file for embedded. 2008-02-24 21:07:18 +00:00
Scott Ullrich 10ed00c6f3 Moving file to /conf.default/ 2008-02-24 21:02:19 +00:00
Scott Ullrich 01dec5a560 Move file to /conf.default/ 2008-02-24 21:01:59 +00:00
Scott Ullrich b458712246 Trigger initial wizard upon installation 2008-02-24 00:32:34 +00:00
Scott Ullrich ac08f689b3 Get ready for 1.2-RELEASE. 2008-02-23 04:31:28 +00:00
Scott Ullrich c5733422af Guard against javascript injection attacks
Ticket #1656
2008-02-22 00:11:58 +00:00
Scott Ullrich 59b2217456 Switch over to the newly provisioned 0.pfsense.pool.ntp.org which
ntp.org has graciously setup for pfSense.
2008-02-18 18:07:55 +00:00
Scott Ullrich 9f5b217f4f Backport -ss syslogd feature from HEAD. Only bind to 127.0.0.1 if we
are not remotely sending logs.
2008-02-18 17:44:16 +00:00
Chris Buechler 711ee16474 fix typo 2008-02-18 05:12:57 +00:00
Scott Ullrich 4d55dfba16 Remove bogus check. 2008-02-17 05:21:49 +00:00
Scott Ullrich 1b7df51e65 Ensure /tmp/y exists before running pkg_delete command. 2008-02-17 05:18:58 +00:00
Scott Ullrich ca5de7de98 Missing global $g and $config 2008-02-17 05:16:29 +00:00
Scott Ullrich a142c38d37 File an alert we cannot find a matching subnet for a CARP IP address. 2008-02-16 22:53:03 +00:00
Scott Ullrich 612b579a6d Do not destory CARP interface, simply delete it to avoid FreeBSD panics. 2008-02-16 22:40:00 +00:00
Chris Buechler 79ec2fe165 touch up text 2008-02-16 08:55:35 +00:00
Chris Buechler ebcd8b53bd clarify text 2008-02-16 08:44:18 +00:00
Scott Ullrich 667889e740 Close off XSS execution hole.
Submitted-by: Charles Hooper
2008-02-14 22:14:05 +00:00
Scott Ullrich eb5814ae59 Make sure we sync before mounting ro. 2008-02-14 18:41:55 +00:00
Scott Ullrich d5d2c5145a * Add xmlrpc declarations missed in last commit
* MFC exec_shell() package related function
* MFC exec_php() package related function
2008-02-14 04:57:31 +00:00
Scott Ullrich cdcb273e5e * Add merge_installedpackages_section_xmlrpc() call used for merging
specific <installedpackages><AREANAME> sub items without replacing
  the entire <installedpackages> area with just this item
* Adjust TinyDNS sync to use this new method to avoid replacing the
  entire destination <installedpackages> area which also whipes
  out all other installd package information.
2008-02-14 04:27:56 +00:00
Chris Buechler ac65e36e9f touch up text
Ticket #1644
2008-02-14 02:32:40 +00:00
Chris Buechler 36362c616d touch up text
Ticket #1644
2008-02-14 02:25:44 +00:00
Chris Buechler 3d897248d2 fix typo
Ticket #1645
2008-02-12 23:06:28 +00:00
Scott Ullrich b5aebbf5d1 Make scripts XSS input safe.
Pointed-out: by hoopercharles@gmail.com
2008-02-12 04:33:24 +00:00
Chris Buechler 6c13d55182 touch up text
Ticket #1627
2008-02-07 23:56:18 +00:00
Seth Mos fa22abe57b MFC from releng_1. Do not run pfctl -ss 4 times.
Dated Nov 15 2007
2008-02-06 21:20:22 +00:00
Scott Ullrich b5c12e7b11 Do not show Apply button twice. 2008-02-06 00:10:08 +00:00
Scott Ullrich 8dd629d06b Correctly deterimine if /boot/loader.conf exists. 2008-02-05 17:40:18 +00:00
Seth Mos 73a9865736 With the current Racoon we need to inform that we are reloading
our SPD entries with a SIGHUP
2008-02-05 09:11:59 +00:00
Scott Ullrich b096010e1c Only check disabled/enabled status on OPTX interfaces. WAN and LAN are
assumed to always be enabled.
2008-02-04 21:57:57 +00:00
Scott Ullrich 1288bfc1dc When a CARP parent interface is down or disabled, ignore the CARP IP
address as this will introduce a panic situation in FreeBSD.
2008-02-04 21:09:59 +00:00
Chris Buechler de6b5ecee9 correct bogons file location 2008-02-03 23:19:46 +00:00
Scott Ullrich 8de7d3615b Tag as RC5. We might not release RC5 but we need to seperate the previous
release from all of the misc changes made this week.  All of the changes
should work okay but it will be good to know this information if a bug
report comes in so we can seperate the last release from what is in the
tree at this point.
2008-02-03 20:10:42 +00:00
Chris Buechler 62d3ad831c Prevent users from entering queue names that break the ruleset
sort of related to Ticket #1612
2008-02-03 06:00:59 +00:00
Chris Buechler a8e5fc7ffb Trim long interface names to prevent broken rulesets.
Ticket #1612
2008-02-03 05:47:06 +00:00
Scott Ullrich 0a532641b4 Do not load CARP IP address if we cannot find a matching subnet on a
real interface.
2008-02-03 05:06:05 +00:00
Chris Buechler fcc2fc6c3c shorten description field to prevent creating rulesets that won't load.
Ticket #1619
2008-02-03 04:37:29 +00:00
Seth Mos cf7a51617b Update to racoon-0.7-cvs with Timo Teras patches.
Use setkey -f because spd loading works normally now.
2008-02-01 21:32:13 +00:00
Scott Ullrich 008da4cf1d Do not pass traffic on user proxy which can cause deadlocks in freebsd 2008-01-31 06:19:51 +00:00
Scott Ullrich 2eaa947d17 Lower threshold to 86. Noticed a scenario where slbd was chewing up
roughtly 91% of the cpu.
2008-01-31 04:36:45 +00:00
Scott Ullrich 0e7fe2ade7 Cleanup if(). Remove additional save message. 2008-01-29 00:10:19 +00:00
Scott Ullrich 3b7abf1c4a Use ip_in_subnet() to correctly determineif we have a matching real ip
address defined somewhere before allowing the CARP address to be added.
2008-01-28 23:56:49 +00:00
Chris Buechler ee9551786b touch up text
Ticket #1610
2008-01-27 20:48:10 +00:00
Scott Ullrich 276a350f68 When changing the IP address, reassign all static routes.
Tested-by: Gary Buckmaster via ORU
2008-01-22 21:31:41 +00:00
Chris Buechler 555a00ac9d Revert dhclient timeout to the default of 60 seconds (originally didn't realize it was in there two more times). 2008-01-22 03:20:36 +00:00
Chris Buechler 855645a8c3 Remove accidentally added debug code 2008-01-21 06:57:36 +00:00
Chris Buechler b448e2cb09 Revert dhclient timeout to the default of 60 seconds. Setting it to 20 minutes
is a bit insane (if you haven't gotten a reply in 60 seconds, you aren't
getting one), and causes systems to hang 20 minutes during
"Configuring WAN" at boot when there is no DHCP server available
on the WAN interface.
2008-01-21 06:54:51 +00:00
Chris Buechler 17912fda5d clarify wording in tabs to appropriately reflect purpose of these pages 2008-01-16 07:13:09 +00:00
Scott Ullrich 9d8a09fad2 Only process /boot/loader.conf if it exists avoiding a
somehwhat ugly looking error on cdrom boot.
2008-01-16 01:23:00 +00:00
Seth Mos 0282154320 attempt loading SPD entries 4 times 2008-01-15 17:29:04 +00:00