145eb9907c
Fixes #4257 With the platform_booting() fixes a regression was done on openvpn tap interfaces or dynamic ones that are part of a bridge.
...
Allow during bootup rc.newwanip to continue up to a ceratin part to handle bridges or other complex interfaces.
2015-01-22 20:56:10 +01:00
8e24d1dacd
Make sure radvd is reconfigured when CARP is enabled/disabled. It should fix #4252
2015-01-22 10:01:37 -02:00
b711bfac32
Save the tradition and point to used binaries here
2015-01-22 12:41:48 +01:00
150d479bc5
When configuring radvd, check if carp is enabled. Ticket #4252
2015-01-22 09:00:54 -02:00
42cc62a2e7
Do not translate function return string
2015-01-22 09:00:29 -02:00
44763e5823
Fix typo in function name
2015-01-22 08:59:29 -02:00
7684d66fad
Strict comparison not necessary here, and makes this fail to work as
...
intended. Fixes #4258
2015-01-21 18:04:02 -06:00
005fd63af3
Ticket #4254 do not put duplicate interface names
2015-01-21 21:45:51 +01:00
44085a6555
Ticket #4254 Actually use proper variables allover to have correct route added
2015-01-21 21:40:25 +01:00
3ad33c0e25
Ticket #4254 Actually use proper interface to check if gateway exists
2015-01-21 21:33:56 +01:00
cde88d5ed1
Ticket #4254 Use proper variable
2015-01-21 21:25:45 +01:00
39e3b27b78
Ticket #4254 actually use the info on the protocol of the vpn sepcification to be more sure on the family to use
2015-01-21 21:09:35 +01:00
4e1fd3b6f0
Ticket #4254 Handle even hosts specified throguh dns name
2015-01-21 21:04:49 +01:00
c7edf1f8e8
Ticket #4524 Bring back static routes on ipsec to make sure charon does not send traffic through wrong iface. This handles properly ipv6
2015-01-21 21:00:25 +01:00
260c6a7eeb
Be compliant with gatway groups specified on ipsec. Ticket #4254
2015-01-21 20:31:16 +01:00
083ec796a8
Ticket #4254 Actually fix this on 2.2 branch since vips are not handled by get_real_interface apparently!
2015-01-21 19:32:36 +01:00
a693440176
When radvd is configured on a CARP interface, enable it when it is MASTER and disable when go to BACKUP. It should fix #4252
2015-01-21 14:36:38 -02:00
89ac17e338
Ticket #4254 specify the list of interfaces to be used by charon. This is a workaround for now. Being investigated the fix.
2015-01-21 09:31:54 +01:00
94efc59dff
Use the parent NIC rather than the VIP. Fixes part of Ticket #4252
2015-01-21 00:36:30 -06:00
de16863d9e
The reset button check should happen on all platforms, not only NanoBSD
2015-01-20 16:53:59 -05:00
ca276264ee
Add missing require for filter.inc since vpn_ipsec_configure() calls filter_configure(). It should fix #4236
2015-01-19 09:25:51 -02:00
7f3601524d
Add reset button support for APU and FW7541
2015-01-19 09:08:37 -02:00
ef9ef75fe1
add detection for 7541, APU
2015-01-16 23:18:28 -06:00
1195a12d3b
move jquery ui css to theme folders
2015-01-16 18:02:43 -06:00
b1fef27fcf
Set $arch accordingly to release
2015-01-16 17:42:30 -02:00
6aac31ef76
change update URLs for release
2015-01-16 13:40:48 -06:00
6434d5be0c
Bump to 2.2-RELEASE
2015-01-16 13:36:09 -06:00
17c982555a
Validate if both IP address and subnet are valid and the same version. Fixes #4223
2015-01-16 11:50:23 -02:00
5b7c33fc7e
Firewall Rules Apply be friendly to other languages
...
Forum: https://forum.pfsense.org/index.php?topic=86808.0
Redmine: https://redmine.pfsense.org/issues/3886
print_info_box_np() when called with just the first $msg parameter has some rough tests to decide if the "Apply" button should be displayed. It checks if the translation of "apply", "save" or "create" appears in the $msg string (which is a translated string itself). If the $msg string did not translate, and thus remains in English, but gettext("apply") does translate then the e.g. Turkish word for "apply" is not going to appear in the English $msg string. So things go wrong.
print_info_box_np already has extra parameters to tell it explicitly $showapply - and for this stuff we know we want the apply button, regardless of how the various text string translations work out. Thus I have provided those parameters here.
I also changed the construction of the text to pass as $msg, breaking it up like in firewall_aliases.php - this means that the string "You must apply the changes in order for them to take effect." translates and you get at least that Turkish displayed.
IMHO it would be beneficial to change lots of these print_info_box_np calls to explicitly set $showapply=true - that will ensure that the apply button shows (and thus the user can perform the needed actions) regardless of how well/not well the translation of the text turns out.
2015-01-15 19:05:32 -02:00
8d4e768a27
Time to let these go
2015-01-15 21:42:00 +01:00
05071b6541
Just do an update since it will handle itself properly.
2015-01-15 20:18:38 +01:00
4e8eacfd7c
Revert "Move to specifically specifying the ID type apart when an ip address to have strongswan do proper behaviour. Also for DynDNS names use the dns type id so strongswan does the resolving by its own."
...
This reverts commit 1ada4c8c51
2015-01-15 10:13:57 +01:00
23de1f0dec
Revert "Fix typos introduced by chaning to explicit id specification when necessary. Fixes #4202 "
...
This reverts commit 3243110433
2015-01-15 10:13:46 +01:00
bc62f818e9
Add RSA keys even for eap-mschapv2
2015-01-15 09:29:50 +01:00
f579c0fb42
Add EAP-MSChapv2 implementation for Windows ipsec support as reported here https://forum.pfsense.org/index.php?topic=81657.15
2015-01-15 09:29:40 +01:00
88a46519d9
Oops add missing curly
2015-01-14 17:03:08 +01:00
eb26d3102d
Also take care of ph1 mobile settings for eap-tls
2015-01-14 17:03:08 +01:00
6e0a0ab347
Obsolete libpng15 in favour of libpng16
2015-01-14 12:09:58 -02:00
9eec3be339
Correctly handle number of cores and power of 2. Merged from the package already had this. Fixes #4212
2015-01-14 09:23:11 -02:00
3a56c14663
Actually remove rekey/reauth from config to avoid strange issues. Ticket #4208
2015-01-13 20:43:59 +01:00
656fd270f0
Add some saftey belts here to be safe
2015-01-13 20:21:31 +01:00
a2feea3744
Heh bump the config version
2015-01-13 20:19:25 +01:00
b40137258e
To avoid issues with clashing SAIDs go back to specifying the reqid in strongswan config.
...
To be able to manage this first upgrade the config to assign each phase2 an reqid
Second use that during config generation
Ticket #4208
2015-01-13 19:57:28 +01:00
6db7ee23db
Improving aesthetics.
...
Make title color more consistent with other pages.
Improving aesthetics.
2015-01-13 13:01:07 -02:00
156938a87e
Where the P1 is disabled, show the P2s as disabled since they will be, same as in previous versions.
2015-01-12 19:25:47 -06:00
d71f979475
Fix IPsec widget for multiple P2, it fixes #4164
2015-01-12 21:50:52 -02:00
324a2387d0
Unbound is compiled with libevent so setting this to always be 4096.
2015-01-12 16:33:06 -06:00
ad9148aefa
Allow for overhead and up maximum limit from 8 to 32, also only set it if its set to 4 or above. Fixes https://forum.pfsense.org/index.php?topic=78356.msg472781#msg472781
2015-01-12 16:32:07 -06:00
bdb8fbffb0
Remove old write caching tunable as well. Ticket #4203
2015-01-12 12:43:13 -06:00
f66bcbaf4c
Remove the settings to disable DMA, which have changed in FreeBSD 10.
...
Ticket #4203
2015-01-12 12:37:37 -06:00
Ermal LUÇI
Renato Botelho
Chris Buechler
jim-p
Jared Dillard
Phil Davis
Warren Baker
xbipin