Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP

Comparing changes

Choose two branches to see what's changed or to start a new pull request. If you need to, you can also compare across forks.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also compare across forks.
base fork: dotike/pfsense.ja_JP.UTF8
...
head fork: dotike/pfsense.ja_JP.UTF8
Checking mergeability… Don't worry, you can still create the pull request.
This comparison is big! We're only showing the most recent 250 commits
Commits on May 10, 2012
@jim-p jim-p Revert "Bump config version to take care of new vips" - forgot to rev…
…ert this when I reverted the main vip commit.

This reverts commit ccf346d.
970934d
Commits on May 11, 2012
Warren Baker make use of the correct file to send notifications 777c202
Commits on May 14, 2012
@jim-p jim-p Fix redirect when saving settings in the widget, it was landing on th…
…e widget page instead of returning to the dashboard.
93efafe
@smos smos Make the ppp-linkup script understand both address families. 310c29c
Commits on May 15, 2012
@jim-p jim-p s/OpenNTPD/NTP/ for log pages and menu entry, to save space (and make…
… it easier if we switch)

Conflicts:

	usr/local/www/diag_logs.php
	usr/local/www/diag_logs_auth.php
	usr/local/www/diag_logs_dhcp.php
	usr/local/www/diag_logs_filter.php
	usr/local/www/diag_logs_filter_summary.php
	usr/local/www/diag_logs_gateways.php
	usr/local/www/diag_logs_ipsec.php
	usr/local/www/diag_logs_ntpd.php
	usr/local/www/diag_logs_openvpn.php
	usr/local/www/diag_logs_ppp.php
	usr/local/www/diag_logs_relayd.php
	usr/local/www/diag_logs_resolver.php
	usr/local/www/diag_logs_routing.php
	usr/local/www/diag_logs_settings.php
	usr/local/www/diag_logs_vpn.php
	usr/local/www/diag_logs_wireless.php
	usr/local/www/fbegin.inc
02414e3
@jim-p jim-p Fix ntp name here too
Conflicts:

	etc/inc/priv.defs.inc
a0c1677
@jim-p jim-p With FreeBSD's ntpd, the current options are irrelevant, but we can h…
…ave a nice status page

Conflicts:

	usr/local/www/fbegin.inc
49551bb
@jim-p jim-p Use FreeBSD's ntpd instead in the backend 321f307
@jim-p jim-p Add NTP status page using ntpq. 0770e60
@jim-p jim-p Use a text description instead of a code. ac91161
@efonne efonne Update gitsync with latest changes from master branch
feef287 - Remove obsolete files after gitsync
26b8990 - Move some constants in gitsync closer to the top of the source code and add some new ones of potential interest to those reconfiguring gitsync.  Also modify messages to indicate that Git URLs are also allowed.
ae26412 - Move git package name/URL to the configuration variables section.
d80eae9
@jim-p jim-p Clear process signals before exec() or ntpd misbehaves if called from…
… PHP on i386.
ac4bc58
@jim-p jim-p Fix syntax here too in case we need to revive it. 82deea6
@jim-p jim-p Revert "Clear process signals before exec() or ntpd misbehaves if cal…
…led from PHP on i386." -- this only works on PHP 5.3

This reverts commit ac4bc58.
df973fc
@jim-p jim-p Hackish workaround for ntpd failing to move away from init when calle…
…d from within PHP 5.2, PHP 5.3 has a better workaround.
317d1c0
Commits on May 16, 2012
@jim-p jim-p On its own, ntpd does not sync fast enough at bootup, so bring back t…
…he ntpdate sync but improve it so it can't get stuck forever.

Conflicts:

	etc/rc.newwanipv6
90df3bd
@jim-p jim-p Fixup ntpd logging b3f2cc0
@jim-p jim-p Fixup halt and reboot to catch the output from the shutdown process p…
…roperly.
b40e9b1
@jim-p jim-p ntpdate was hanging, use the same hacky fix that works for ntpd and i…
…t works too. All happy, even from a cold boot on ALIX 2d3 with no RTC battery.
10e741d
Commits on May 18, 2012
@marcelloc marcelloc Include movable code to reorder list,save button, domtt title message…
…s, also base64 decode option, description and custom text to checkbox fields.


New options need xml config to be included on package xml files, so no changes to packages that do not use these functions.

I've sucessfully testes with imspector-dev, dansguardian and varnish code.

Related post on forum with screenshots and full code
http://forum.pfsense.org/index.php/topic,49322.msg262903.html#msg262903
3802625
@sullrich sullrich Merge pull request #109 from marcelloc/patch-11
Patch 11
26c31b8
Commits on May 22, 2012
@ermal ermal Unlock if error occurs 66c1891
@ermal ermal If extra bw attributes are supplied during reauthentication apply and…
… log them
9261915
@ermal ermal Oops add forgotten global for config 6bab92a
Commits on May 23, 2012
@ermal ermal Make file names match to make this work 6b517c7
@ermal ermal Prevent 2 instances of rc.prunecaptiveportal from running in parallel…
…l since this might be a bad thing
3807002
@ermal ermal If specified use the default settings for bw limitation rather than 0 8e53abf
@ermal ermal Fixes #2209. Obey the mtu value set on the interfaces.php page. Thoug…
…h this value will be overwritten if there is a configuration under PPP settings tab. Maybe a good idea is to set MRU at the same value if not set?
e39b6fe
@ermal ermal Fixes #2364. On busy pppoe servers it might take some time before mpd…
… exits. Check for this before trying to restart
c714a1a
@jim-p jim-p Don't skip "lan" as a possible WAN for shaper, since someone could ha…
…ve renamed/repurposed it. Someone may shoot themselves in the foot if they pick it accidentally, but otherwise some valid configs may be prevented accidentally.
db46191
@ermal ermal Disable logging for now since it will spam every 60secs * #users 90d4bcc
Commits on May 24, 2012
@jim-p jim-p Test for empty here, rather than !, so a blank value (as from mobile …
…clients) doesn't fall to the other tests.
fd97f40
@jim-p jim-p Don't resolve on ipsec_get_phase1_dst() results, because ipsec_get_ph…
…ase1_dst() already does that before returning output.

Conflicts:

	etc/inc/ipsec.inc
29c7078
Commits on May 25, 2012
@jim-p jim-p Switch to a common function to determine anti-lockout ports, and fix …
…a bug that was getting the ports wrong with custom https+redirect on.
55cfe81
@jim-p jim-p List logged-in IPsec xauth users and provide a mechanism to disconnec…
…t them. Implements #1986

Conflicts:

	usr/local/www/diag_ipsec.php
bf3da81
Commits on May 26, 2012
@smos smos Adjust the +CPIN? cmd so it works for huawei 3G sticks too f94eb52
@smos smos do a direct return, it will not find the PinReady command 730c649
Commits on May 28, 2012
@jim-p jim-p Add missing div tag 30b9b16
Commits on May 29, 2012
@jim-p jim-p Add a knob to tune the maximum number of tables that can be defined, …
…the pf default of 1000 is too low for systems with >500 aliases.
d57f6f2
@jim-p jim-p Up the default for tables to 3000 4e2f4c1
Commits on May 30, 2012
@jim-p jim-p Bump to 2.0.2-RC2 after FreeBSD-SA-12:01 v1.1 and FreeBSD-SA-12:02 db2243e
@jim-p jim-p Don't display a "mobile" user without a username. 829fd8c
@jim-p jim-p Switch to ntpd from ports, add Services > NTP to select interfaces fo…
…r binding. Respect old ntp settings in the process.

Conflicts:

	etc/inc/system.inc
	usr/local/www/fbegin.inc
bb39c28
@jim-p jim-p Fix input validation and import test. f56a60e
@jim-p jim-p Fix copy/paste-o 18172ec
@ermal ermal Clarify comment. Fixes #2270 03bbdda
@ermal ermal Rather than doig a string search do a proper matching of selected int…
…erfaces. Fixes #2378
a501158
@ermal ermal Do not allow empty passwords since this might cause problems for some…
… authentication servers like ldap. Fixes #2326
d427980
Commits on Jun 04, 2012
@jim-p jim-p Revert "Make the ppp-linkup script understand both address families."
This reverts commit 310c29c.
2296834
Commits on Jun 05, 2012
@ermal ermal Import OpenVPN cisco style radius attributes applying policy to logge…
…d in users. Feature #2100
477cc2b
@ermal ermal Wrong branch
Revert "Import OpenVPN cisco style radius attributes applying policy to logged in users. Feature #2100"

This reverts commit 477cc2b.
1a69c4d
Commits on Jun 06, 2012
@ermal ermal Make lock files availble to all users for usage from php process f26f4fa
Commits on Jun 07, 2012
@ermal ermal Do not blindly startup check_reload_status check first 7fe30c7
@ermal ermal Actually do not try to reload everything during bootup since it will …
…be done by bootup code
0d9c502
@jim-p jim-p Provide a way to disable the pkg info link 364e4f7
Commits on Jun 11, 2012
@ermal ermal Put configured limits on rules.limits file and load them before loadi…
…ng the ruleset. To avoid any issues with large rulests and options being loaded not first
5c85580
Commits on Jun 12, 2012
Warren Baker Remove extra spaces and add closing <tr> tag ef62f98
@jim-p jim-p This should have been 2.1 only, and it's just causing some odd packag…
…e behavior on 2.0.2 (blank lines in squid's interface selection, for one). 2.1 has different code here anyhow. Revert "Added "interface_selection" type to enable interface selection in tinydns server"

This reverts commit 05d908d.
435b4ee
Commits on Jun 15, 2012
@ermal ermal Actually make reinstallpkg remove the bionaries and really reinstall …
…them
3ddb92a
@ermal ermal Remove missed line 2b52fee
Commits on Jun 16, 2012
@jim-p jim-p Revert "Remove missed line"
This reverts commit 2b52fee.
5a61e86
@jim-p jim-p This apparently is breaking reinstalls. Revert "Actually make reinsta…
…llpkg remove the bionaries and really reinstall them"

This reverts commit 3ddb92a.
3acbad1
Commits on Jun 22, 2012
Warren Baker Add missing global d405931
Commits on Jun 27, 2012
@jim-p jim-p LAN is not special here anymore. Do not remove the interface again (i…
…t was alraedy removed before this block), do not remove NAT and such (OPTs may still need it!) and no need to remove shaper. Improve DHCP check and generalize it to work on any interface, not just LAN.
766bbe9
@jim-p jim-p Bump 2.0.2 to RC3 00d7fd5
Commits on Jun 29, 2012
@jim-p jim-p CP Radius accounting wants bcmod() so we need to activate bcmath. 003436b
@jim-p jim-p OpenVPN _servers_ can start on carp vips, just not _clients_. e42b6dd
Commits on Jul 04, 2012
@ermal ermal Make sure one_pass i selected when CP is active d541951
Commits on Jul 11, 2012
Warren Baker Correctly handle getopt so notifications are sent 16187ec
Commits on Jul 18, 2012
@jim-p jim-p Expand cipher list and remove a cipher that Safari on iOS does not li…
…ke after recent lighttpd changes. Fixes #2553
d4f8cb1
Commits on Jul 27, 2012
@cbuechler cbuechler 99./8 is not private IP space 843f10c
@ermal ermal Put fix for IE 8/9 url handling bug 99d7d35
Warren Baker Make use of product_name 601c91a
Warren Baker Supress the error message if the ldap bind doesnt happen 01d518e
Commits on Jul 31, 2012
@jim-p jim-p Try to keep existing files rather than unlinking/replacing when resto…
…ring the package libraries during a package removal. Needs some testing, but for NanoBSD it fixes #1049
1032ab4
Commits on Aug 01, 2012
@ermal ermal Silence tar command to not garble console 007bb55
@jim-p jim-p Move to RC4... almost there. 3163c3a
@jim-p jim-p Protect against a potential infinite loop here. e97c277
@jim-p jim-p Ensure this gets a set default value or things can break 8b46d77
Commits on Aug 14, 2012
@ermal ermal Remove extra curly to allow checking braces closure easily in vi[m] bbaeb5c
@jim-p jim-p It's time... 53ac638
Commits on Aug 27, 2012
@jim-p jim-p Restructure these IP/subnet tests so they don't break transport mode 116ba66
Commits on Aug 29, 2012
@ermal ermal Be consistent on formatting to easy reading 13f334f
Commits on Aug 30, 2012
@ermal ermal Simplify schedules code and some styly nits d587bbf
Commits on Sep 12, 2012
@jim-p jim-p Print a nice large warning on the PPTP page about it no longer being …
…considered secure.
0888bdf
@jim-p jim-p Don't skip over wrap_vga here. bca84df
@jim-p jim-p Use a better link here. 82f6b8e
Commits on Sep 17, 2012
@dse dse fix for: Output from CSRF magic mangles files in Diagnostics > Edit File 6fda15a
Commits on Oct 02, 2012
@jim-p jim-p Don't die silently if the time is too far off. Fix from: dhatz fdcc1b8
@smos smos Make sure that the limits are included in the normal ruleset, otherwi…
…se pf will use the defaults.
a9f0df6
Commits on Oct 04, 2012
@jim-p jim-p Fix reference to limitrules d729dbe
@jim-p jim-p Verify posted kernel type against a defined list of good values.
Discovered-By: Yann CAM
fa9f5ff
@jim-p jim-p Sanitize some variables
Discovered-By: Yann CAM
f5acd06
@jim-p jim-p Eliminate system calls here, use PHP instead. 80ff6bf
Commits on Oct 31, 2012
@jim-p jim-p Update CSRF Magic b3a1733
@jim-p jim-p Set the CSRF Magic timeout to the same as the session timeout, so tha…
…t if a user sets a lower session time, the CSRF magic tokens do not outlive the user's session.
23c3ccb
@jim-p jim-p Remove debug output 56143f0
@jim-p jim-p Escape parameters better when managing tables. Fix test to allow dele…
…ting subnet entries as well as IPs.
1457cce
@jim-p jim-p Encode the if parameter before using it in html 52ab038
@jim-p jim-p Encode the if parameter before using it in redirects, too. ee89815
@jim-p jim-p Encode the interface parameter before using it in a redirect 7cf76e8
Commits on Nov 02, 2012
@jim-p jim-p Make a function to get the current theme and use it everywhere rather…
… than duplicating code or missing functions. (Fixes forced themes using the wrong theme for login screen)

Conflicts:

	etc/inc/util.inc
	usr/local/www/head.inc
7e66977
Commits on Nov 05, 2012
ogun acik fixed paths 8327246
@jim-p jim-p Merge pull request #245 from ogunacik/RELENG_2_0
fixed paths
19588ea
Commits on Nov 06, 2012
@ermal ermal Use a random exponent for the RSA generation of keys. Its is question…
…able if its needed to be saved as a value? Ticket #2657
32837bb
Commits on Nov 12, 2012
@ermal ermal Resolves #2678. Merge patch suggedted to stop warnings on PHP_errors.log a388261
@ermal ermal Resolves #2679. Correct behaviour when port is null to avoid warnings…
… on error log
69fec19
@thomasnoel thomasnoel fix last commit (#2679) 95a3099
@jim-p jim-p Merge pull request #249 from thomasnoel/RELENG_2_0
cherry-pick last commits to RELENG_2_0
75de894
Commits on Nov 15, 2012
@jim-p jim-p Re-add WOL to the services menu, it apparently disappeared in an earl…
…ier commit.
1213f83
Commits on Nov 16, 2012
ogun acik it was giving error at firebug 772ba79
@ermal ermal Merge pull request #252 from ogunacik/RELENG_2_0
Control whether text and node variables are not null.
b3f1ef1
@ermal ermal To allow limiters to work correctly on mutliwan for now enforce selec…
…ting a gateway on outgoing
66f445c
Commits on Nov 20, 2012
@ermal ermal Do not allow autocomplete of the password field to avoid security iss…
…ues:
6a68440
@ermal ermal Do not process ip options by default this is 2012 d680caf
@ermal ermal Remoev exec_raw.php since its a dangerous page 1e5eedb
@ermal ermal Allow only post action and not get to avoid security problems 36f5095
@jim-p jim-p No need to do this here - we have a System > Advanced option that alr…
…eady controls this. Revert "Do not allow autocomplete of the password field to avoid security issues:"

This reverts commit 6a68440.
e6a2acc
@jim-p jim-p Only apply this port check for TCP and UDP. a6f64d3
@ermal ermal Resolves #2294. Base64 encode the file when sending to the browser sa…
…me way it is encoded when sent to us. This prevents csrf from mangling things
6acfbc6
@jim-p jim-p Fixup kernel detection during upgrade process to ensure someone can't…
… end up with a kernel that doesn't exist any more.
f16a622
Commits on Nov 21, 2012
@efonne efonne Fix special build_commit tag that was broken from previous change to …
…how it read the file with the commit ID.

Backport of c578fb0
2fb5486
@cbuechler cbuechler remove non-applicable text 9f9df4e
Commits on Nov 27, 2012
@jim-p jim-p Safety belt checks to fix a PHP error that for whatever reason only a…
…ppeared in Chrome.
94d1cd8
Commits on Dec 07, 2012
@jim-p jim-p Also consider 0.0.0.0/0 here since it fails both these tests but is s…
…till a valid/special config.
2dd57bd
Commits on Dec 21, 2012
@jim-p jim-p Fix obtaining DNS servers from PPP 5feadf7
Commits on Dec 31, 2012
@jim-p jim-p Make sure a device actually exists before trying to act on it. Fixes …
…#2739
5486c48
Commits on Jan 02, 2013
@ermal ermal USe rtrim here as that it the meaning. This should unbreak the issues…
… on 2.0.2 with CP
aa32c88
@ermal ermal Simpligy lighty config and send all lighty logs to syslog rather to a…
… file not readble by anything
6f0d237
@ermal ermal Enable mod_evasive if needed for CP 192d893
@ermal ermal Make is_pid_running function return more conisten results by using is…
…validpid
d364738
Commits on Jan 03, 2013
@ermal ermal Make mod_fastcgi last to have url.rewrite work properly 860978f
Phil Davis Minimise rewriting of /etc/gettytab
See forum http://forum.pfsense.org/index.php/topic,57325.0.html
Avoid possible problems with having a partial /etc/gettytab file by not rewriting it at every boot.
This version is for RELENG_2_0 branch.
Tested on Alix nanobsd system running 2.0.2
d99f939
@jim-p jim-p Bump this, since it seems inevitable at this point. 8bc93c1
@jim-p jim-p Merge pull request #305 from phil-davis/RELENG_2_0
Minimise rewriting of /etc/gettytab
4a1a432
@jim-p jim-p Pass -S to tcpdump to avoid an increase in memory consumption over time. e83eaf3
@ermal ermal Always make sure php has its own process manager to make lighty happy eef77bf
@jim-p jim-p Be a little smarter about the default kernel in rare cases where we c…
…annot determine what was in use.
82bce0a
Phil Davis Fix out packet count reporting
This is a little tiny fix, for the similar issue that was fixed in 2.1 a month ago (the 2.1 fix had a mix of v4 and v6 packet counting fixUPS). The 2.0 IPv4-only code just had this 1 little error.
The 2.1 commit was at bsdperimeter/pfsense@4bdfa5d
1d6c4cb
@jim-p jim-p Merge pull request #306 from phil-davis/RELENG_2_0
Fix out packet count reporting
18749fa
Commits on Jan 04, 2013
@cbuechler cbuechler Welcoming in 2013 fed246d
@ermal ermal Always commit the session fast to allow other consumers to proceed to…
… their requests. This unbreaks now the lock up the GUI had allowing only one action from same source per time. Now even if you run a command that blocks indefinitely for example the GUI want lock anymore but allow you to proceed to other actions. Manual cherry-pick of 4111fcf
59d7657
@ermal ermal Remove preload.php even here now that is possible to avoid issues dur…
…ing startup of lighty
f16a2be
@ermal ermal Add exec_raw.php to obsolete files. 01abfd2
@ermal ermal GC cmd_chain.inc it never found uses since pfSense module got used mo…
…re. Also fix the problem with pfsync on bootup waiting 30 seconds since cmd chain was executed after and pfsync was never brought up to compleete the sync.
5d12884
@ermal ermal Obsolete /etc/inc/cmd_chain.inc 0b85e97
@ermal ermal Always use fastcgi since the requirement is the same anyhow 56ef4d2
@ermal ermal Remove to parameters from system_generate_lighty_config that are unus…
…ed and do a better job at tuning started php processes to not use less/more than needed. This also avoids DoS the system with php processes
c21b10d
@ermal ermal Use proper var here for calculation e321770
@ermal ermal Another fix for issues reported on 2.0.2 with php processes dying. Do…
… not use same path for system webGUI and CP webGUI of the php unix socket. This will cause the later started one, usually CP to exit when it attempts to bind/listen on the same path as previous process! Strange this has not been an issue beforegit diff!
7bd926d
@ermal ermal Get back to trim() and strip / from left/right but when redirecting p…
…roperly create the redirurl var
237c6ef
Warren Baker This is needed since preload is now gone d733ee9
@ermal ermal Remove cmd_chain.inc leftover 5b66196
@jim-p jim-p Add this fix here too for upnp, set the bits when specifying the list…
…ening IP.
5034a7f
@ermal ermal Merge improvements to filterdns daemon d9cdb36
@ermal ermal Merge: Just check the file_exists let pkill decide if its a vaild fil…
…e or not.
9ec91e3
Commits on Jan 05, 2013
@ermal ermal Remove upload_progress_meter references not used df53d67
@ermal ermal Remove diag_backup.js progress.php upload_progress.php since they are…
… not used since long time
65ce97d
@ermal ermal Add to obsolete files as well f2d7436
@ermal ermal Sync rc.php_init_setup with master 9f1e3d6
@ermal ermal Since php_sapi_name() is useless in pfSense test if argc has been reg…
…istered or not to avoid warnings on bootup
df0207c
Commits on Jan 07, 2013
@jim-p jim-p Make option 11 kill php and lighty like it does on HEAD f9a109a
@rbgarga rbgarga Interface assignment wrongly changing:
When WAN is set to PPPoE and user set other interfaces IP address using
console, it wrongly change the interface assignment to use the same
device of wan. It was caused by a hard coded "wan" on
console_get_interface_from_ppp() call, when it should use $interface
instead. It should fix #2074
202699a
Commits on Jan 09, 2013
Warren Baker In the case that no bandwidth limits are configured for queues but PR…
…IQ is been used then rather set a default otherwise a value of 0 is used in the CDEFs for RRD
f0fb3d4
Warren Baker Make values look a little prettier and prevent a potential problem e817ad1
Commits on Jan 10, 2013
@jim-p jim-p Update zoneinfo to 2012.j f424778
Warren Baker Stack the queue graphs. Fixes #2692 016d152
@bcyrill bcyrill Update etc/inc/voucher.inc
Apply to branch 2.0 as well.
Fix array initialization as noted by 'elratt0r' in http://forum.pfsense.org/index.php/topic,49799.0.html
9cdb8ee
@jim-p jim-p Merge pull request #319 from bcyrill/patch-4
Update etc/inc/voucher.inc
78efa29
@jim-p jim-p Show the hostname if it doesn't match 43ba395
@jim-p jim-p Put syslogd into secure mode so no remote log messages are accepted. …
…Sending to a remote syslog server still works with this option.
e6b741a
Commits on Jan 14, 2013
@jim-p jim-p Bold and note manifest entries that match the current architecture, a…
…nd add a note cautioning against a cross-architecture upgrade.
e550b82
@jim-p jim-p Something in the LDAP libraries has changed and it no longer likes sp…
…aces in the CA filename. Use the refid for the CA filename since it will always be unqiue, and it will never contain any spaces, unlike authname or the CA's descr.
6f165ff
Commits on Jan 15, 2013
@jim-p jim-p Better test if we're running at the cli or in lighty. Also suppress o…
…utput for the session start if it fails.
4683015
@jim-p jim-p Use functions to reduce code duplication; Add function to clear route…
… to the interface IP before starting openvpn, otherwise the process cannot start. Ticket #2712
f26c1f7
Commits on Jan 16, 2013
@jim-p jim-p Allow editing an imported CRL, and refresh OpenVPN CRLs when saving. …
…Implements #2652
170a855
Commits on Jan 17, 2013
@jim-p jim-p Validate passed parameters to smart commands, and the target device. …
…Also escape when used in shell commands even after validation.

Discovered-By: Bernhard Thaler
87537cf
@rbgarga rbgarga Preserve "Idle timeout" parameter on interfaces gui. It fixes a probl…
…em pointed out on ticket #2641
c1ce0c5
@rbgarga rbgarga Allow to edit default queue. Should fix #1995 473129b
Commits on Jan 21, 2013
@rbgarga rbgarga Previous attempt to fix #1995 allow to set more than one default queu…
…es, prevent it with this change. It should fix #1995
633c02c
@jim-p jim-p Run IPsec logs through htmlspecialchars before display. 25dc1bb
@ermal ermal Enable cgi for the webgui since some ports like lightsquid need it f8bb2aa
@jim-p jim-p No reason for the ppp log to use this display method, use dump_clog()…
… instead.
35b443a
Commits on Jan 26, 2013
@jim-p jim-p Add a note about rdr pass not supporting Multi-WAN. a216db0
@ermal ermal No need for escaping here since this is php internal functions eaf87cb
Commits on Jan 28, 2013
@jim-p jim-p Add header to DHCP static mappings table ee6bd11
Commits on Jan 30, 2013
@jim-p jim-p Change output style to follow halt.php and reboot.php so the shutdown…
… output appears in the correct location on the page.

Conflicts:

	usr/local/www/diag_defaults.php
256a2a5
@jim-p jim-p Whitespace fixes 3942066
@jim-p jim-p Bring in the RCFILEPREFIX as constant fixes from HEAD, since otherwis…
…e rc.stop_packages was globbing in the wrong dir and executing the wrong scripts. Also seems to have fixed the "bad fd" error.
a948810
Commits on Feb 05, 2013
@jim-p jim-p Test var before using as array. Should fix #2794 506c6be
@ermal ermal Unlink pid file before starting a new process 7b2c22a
Commits on Feb 06, 2013
@ermal ermal When going through the xmlrpc calls do not hold the lock since deadlo…
…ck might occur.
b36c115
@ermal ermal Correct url creation for xmlrpc. Fix lock order with voucher expire. …
…Bring from master fixes for exec_php xmlrpc code generation
d06b30e
@ermal ermal Actually let xmlrpc construct the url internally from the passed info…
… it is doing same checks
89ad939
Commits on Feb 08, 2013
@jim-p jim-p Restart ntpd a little differently, seems to stabilize it when restart…
…ed from rc.newwanip
0538767
@jim-p jim-p Fix fallback pool monitor selection. 25d0e8c
Commits on Feb 11, 2013
@ermal ermal Test that timeout value is bigger than 0 b16d70e
@ermal ermal If more than 2 minutes have passed from the prunning process ignore t…
…he lock
b9f6677
@jim-p jim-p Use the actual openvpn restart routine when starting/stopping from se…
…rvices rather than killing/restarting manually.
ef84458
Commits on Feb 12, 2013
@jim-p jim-p Fix page name. Fixes #2640 d6d775a
Commits on Feb 15, 2013
@jim-p jim-p Use our own git package and not the really old one from FreeBSD's ftp…
… archive for 8.1
83e18db
Commits on Feb 20, 2013
@rbgarga rbgarga fix typo c6a69ae
Commits on Feb 21, 2013
@jim-p jim-p Fix reference to SNMP interface binding. 51204df
Commits on Feb 24, 2013
@rbgarga rbgarga Encrypt backup after rrd data is added, it fixes #2836 343266c
Commits on Feb 25, 2013
@jim-p jim-p Always clear the OpenVPN route when using shared key, no matter what …
…the tunnel network "CIDR" is set to, it still needs it.
9bfa57b
@jim-p jim-p Better check for the right bits being set. 822a857
Commits on Feb 27, 2013
@jim-p jim-p Fix wording for VoIP address option in the shaper. Add rule going the…
… other direction to catch connections initiated both ways.
a11fb61
Commits on Mar 04, 2013
@jim-p jim-p Use the correct interface number (old code broke for >= 10) 9b64b52
Commits on Mar 07, 2013
@jim-p jim-p Fix variable name reference, fixes port display after lan IP reset. af8d854
Commits on Mar 08, 2013
Warren Baker Use the process name rather to avoid the infamous file not found error 99dcc48
Commits on Mar 11, 2013
@cbuechler cbuechler point to new github repo a876f1e
Commits on Mar 26, 2013
@ermal ermal Move status file to a ram disk to avoid possible latency issues 4d8a1ec
Commits on Mar 27, 2013
@rbgarga rbgarga Add a new class called addgatewaybox to make it easier to respect cus…
…tom themes. Fixes #2900

Conflicts:
	usr/local/www/interfaces.php
	usr/local/www/themes/_corporate/all.css
	usr/local/www/themes/code-red/all.css
	usr/local/www/themes/pfsense-dropdown/all.css
	usr/local/www/themes/pfsense/all.css
	usr/local/www/themes/pfsense_ng/all.css
	usr/local/www/themes/the_wall/all.css
3ffdcd4
Commits on Apr 03, 2013
@cbuechler cbuechler bump to 2.0.3-RELEASE c5df941
Commits on Apr 05, 2013
@cbuechler cbuechler change back to PRERELEASE, we'll re-enable public snapshots until we'…
…re confident the build problem is resolved.
43213ce
Commits on Apr 10, 2013
@cbuechler cbuechler bump to 2.0.3-RELEASE e523bba
Commits on Apr 18, 2013
@rbgarga rbgarga Make more strict comparison to avoid type issues when gw name only co…
…ntain numbers. Fixes #2956
ecf8dba
Commits on Apr 22, 2013
@jim-p jim-p Show the package section if the lock is present also 6c40042
Commits on Apr 24, 2013
@rbgarga rbgarga Avoid set 2 sources for penalty rules on shapper wizard. Fixes #2959 e4d3e32
Commits on Apr 25, 2013
@jim-p jim-p Move dnsmasq start to before ntp, or else the entry for the DNS forwa…
…rder in /etc/resolv.conf will always time out.
6e905c8
Warren Baker Correct spelling on editing gif interface 27d9f5a
Warren Baker Remove the - in the word 'number' 2ddc9ed
Commits on Apr 26, 2013
Warren Baker Fix isvm check to match on product aa72848
@jim-p jim-p Add nsswitch.conf to stop syslog from producing errors when sending f…
…ull messages.
459b531
Commits on May 16, 2013
@rbgarga rbgarga Fixes on HA setup:
- Disable pfsync when it's disabled on GUI
- Remove syncpeer and back it to default multicast address when it's
  removed from conf

Fixes #2491
92b27ea
Commits on May 17, 2013
@cbuechler cbuechler remove auto-added allow rule for pfsync 0b03b89
Commits on May 22, 2013
@jim-p jim-p Unbreak Dynamic DNS updates from DHCP, ISC changed the config layout …
…to require zone declarations, and the ddns-update-style directive only works globally.
a4f7c37
Commits on May 24, 2013
@jim-p jim-p remove preferoldsa as a default value from 2.0.x also (was removed fr…
…om 2.1 as default a few months ago)
70849d9
Commits on May 29, 2013
@jim-p jim-p "block" is also a reserved keyword that can't be an alias name, or pf…
… tosses an error.
eea88fd
Commits on Jun 03, 2013
@jim-p jim-p Correct mouseover description for adding a certificate. Fixes #3017 ae3caa3
Commits on Jun 05, 2013
@jim-p jim-p Fix up invalid/old .tcshrc for 2.0.x. 7954946
@jim-p jim-p Bump this so it's distinct in case we need it. At the very least so p…
…eople who have run gitsync to RELENG_2_0 are visibly different from a stock version.
2abd388
Commits on Jun 08, 2013
@rbgarga rbgarga Replace hardcoded path by vardb_path f57e418
Commits on Jun 12, 2013
@jim-p jim-p Don't restrict the content of descr when making CA/Certs, it's free-f…
…orm.
82b7f50
Commits on Jun 14, 2013
@rbgarga rbgarga Fix max length for wpa passphrase, it fixes #3034 664f9f3
Commits on Jun 17, 2013
@cbuechler cbuechler not true you have to log in again since HTTP basic auth was deprecated. 878454b
Commits on Jun 27, 2013
@jim-p jim-p Add a note about the LDAP hostname matching the server cert's CN. 97c98f1
Commits on Jul 05, 2013
@ermal ermal Resolves #2910. Make apinger write its status file just after startin…
…g so that thing work as expected
265be6f
Commits on Jul 12, 2013
Warren Baker Substitute Product name in privileges 95cb619
Commits on Jul 22, 2013
Warren Baker Add missing backup of gettytab eeb590a
Warren Baker Fix spelling mistake. Already fixed in other branches d580f7b
Commits on Jul 25, 2013
@rbgarga rbgarga Fix #3106, parse 'not' rules right on destination for port forward + …
…reflection proxy rules
9d81f90
Commits on Jul 30, 2013
@rbgarga rbgarga Check if hostname is valid, it fixes #3117 6eeb0b2
@rbgarga rbgarga Show friendly interface name, fixes #3095 1ff79f6
@rbgarga rbgarga Ignore vim swap files 8c88228
Commits on Sep 09, 2013
@jim-p jim-p Allow for easier override on $g values if needed. c7d4886
Commits on Sep 24, 2013
@jim-p jim-p Allow multiple valid time servers to be entered in the wizard, as the…
…y are allowed under System > General
49e60fa
Commits on Oct 07, 2013
Warren Baker fix text - add space between sentences. This got lost in another commit 7add9de
Warren Baker Replace pfSense with the rebrand e390d66
Commits on Dec 09, 2013
@rbgarga rbgarga Fix vpn_pppoe_get_id and stop duplicating pppoeid for multiple server…
…s, it fixes #2286
9a2d491