It works, thank you
Nelson Papel
----- Original Message -----
From: "Angelo Turetta" <[EMAIL PROTECTED]>
To: <[email protected]>
Sent: Tuesday, July 04, 2006 12:07
Subject: Re: [pfSense Support] OpenVPN syslogging
Nelson Papel wrote:
Yes, that is the issue, there are no OpenVPN messages being sent to my
syslog server.
Sorry, but my knowledge with Unix/BSD isn't that great. How do I apply
the patch?
I attach the patched system.inc, save a copy of your existing file (just
in case), then replace it with the attached one.
You can use the Edit File or Command Prompt pages, if you are not fluent
in shell-language.
Angelo.
--------------------------------------------------------------------------------
. All rights reserved. Redistribution and use in source and binary forms,
with or without modification, are permitted provided that the following
conditions are met: 1. Redistributions of source code must retain the above
copyright notice, this list of conditions and the following disclaimer. 2.
Redistributions in binary form must reproduce the above copyright notice,
this list of conditions and the following disclaimer in the documentation
and/or other materials provided with the distribution. THIS SOFTWARE IS
PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT
NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A
PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE
FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
DAMAGE. */ /* include all configuration functions */
require_once("functions.inc"); function
system_resolvconf_generate($dynupdate = false) { global $config, $g;
if(isset($config['system']['developerspew'])) { $mt = microtime(); echo
"system_resolvconf_generate() being called $mt\n"; } $syscfg =
$config['system']; $fd = fopen("{$g['varetc_path']}/resolv.conf", "w"); if
(!$fd) { printf("Error: cannot open resolv.conf in
system_resolvconf_generate().\n"); return 1; } $resolvconf = "domain
{$syscfg['domain']}\n"; $havedns = false; if
(isset($syscfg['dnsallowoverride'])) { /* get dynamically assigned DNS
servers (if any) */ $ns = array_unique(get_nameservers()); foreach($ns as
$nameserver) { if($nameserver) { $resolvconf .= "nameserver $nameserver\n";
$havedns = true; } } } if (!$havedns && is_array($syscfg['dnsserver'])) {
foreach ($syscfg['dnsserver'] as $ns) { if ($ns) { $resolvconf .=
"nameserver $ns\n"; $havedns = true; } } } fwrite($fd, $resolvconf);
fclose($fd); if (!$g['booting']) { /* restart dhcpd (nameservers may have
changed) */ if (!$dynupdate) services_dhcpd_configure(); } return 0; }
function get_nameservers() { global $config, $g; $master_list = array();
$dns_lists = split("\n", `ls /var/etc/nameserver_* 2>/dev/null`);
foreach($dns_lists as $dns) { $items = split("\n",
file_get_contents($dns)); foreach($items as $item) if($item <> "")
$master_list[] = $item; } if(!file_exists("/var/etc/nameservers.conf"))
return $master_list; $dns = `cat /var/etc/nameservers.conf`; $dns_s =
split("\n", $dns); foreach($dns_s as $dns) $master_list[] = $dns; return
$master_list; } function system_hosts_generate() { global $config, $g;
if(isset($config['system']['developerspew'])) { $mt = microtime(); echo
"system_hosts_generate() being called $mt\n"; } $syscfg =
$config['system']; $lancfg = $config['interfaces']['lan']; $dnsmasqcfg =
$config['dnsmasq']; if (!is_array($dnsmasqcfg['hosts'])) {
$dnsmasqcfg['hosts'] = array(); } $hostscfg = $dnsmasqcfg['hosts']; $fd =
fopen("{$g['varetc_path']}/hosts", "w"); if (!$fd) { printf("Error: cannot
open hosts file in system_hosts_generate().\n"); return 1; } $hosts = <<
\"$1\", \"(.*)\" => \"/index.php?redirurl=$1\" )"; } if($port <> "")
$lighty_port = $port; else $lighty_port = "80"; $memory = get_memory();
$avail = $memory[0]; if($avail > 0 and $avail < 75) { $max_procs = 1;
$max_requests = 1; } if($avail > 0 and $avail < 45) { $fast_cgi_enable =
false; } if($fast_cgi_enable == true) { $module = "\"mod_fastcgi\",
\"mod_cgi\""; $cgi_config = ""; $fastcgi_config = << ( "localhost" => (
"socket" => "/tmp/php-fastcgi.socket", "min-procs" => 1, "max-procs" =>
{$max_procs}, "max-load-per-proc" => 100, "idle-timeout" => 1,
"bin-environment" => ( "PHP_FCGI_CHILDREN" => "{$max_procs}",
"PHP_FCGI_MAX_REQUESTS" => "{$max_requests}" ), "bin-path" =>
"/usr/local/bin/php" ) ) ) #### CGI module cgi.assign = ( ".cgi" => "" )
EOD; } else { $fastcgi_config = ""; $module = "\"mod_cgi\""; $cgi_config =
<< "/usr/local/bin/php", ".cgi" => "" ) EOD; } $lighty_config .= <<
"application/pdf", ".sig" => "application/pgp-signature", ".spl" =>
"application/futuresplash", ".class" => "application/octet-stream", ".ps"
=> "application/postscript", ".torrent" => "application/x-bittorrent",
".dvi" => "application/x-dvi", ".gz" => "application/x-gzip", ".pac" =>
"application/x-ns-proxy-autoconfig", ".swf" =>
"application/x-shockwave-flash", ".tar.gz" => "application/x-tgz", ".tgz"
=> "application/x-tgz", ".tar" => "application/x-tar", ".zip" =>
"application/zip", ".mp3" => "audio/mpeg", ".m3u" => "audio/x-mpegurl",
".wma" => "audio/x-ms-wma", ".wax" => "audio/x-ms-wax", ".ogg" =>
"audio/x-wav", ".wav" => "audio/x-wav", ".gif" => "image/gif", ".jpg" =>
"image/jpeg", ".jpeg" => "image/jpeg", ".png" => "image/png", ".xbm" =>
"image/x-xbitmap", ".xpm" => "image/x-xpixmap", ".xwd" =>
"image/x-xwindowdump", ".css" => "text/css", ".html" => "text/html", ".htm"
=> "text/html", ".js" => "text/javascript", ".asc" => "text/plain", ".c" =>
"text/plain", ".conf" => "text/plain", ".text" => "text/plain", ".txt" =>
"text/plain", ".dtd" => "text/xml", ".xml" => "text/xml", ".mpeg" =>
"video/mpeg", ".mpg" => "video/mpeg", ".mov" => "video/quicktime", ".qt" =>
"video/quicktime", ".avi" => "video/x-msvideo", ".asf" => "video/x-ms-asf",
".asx" => "video/x-ms-asf", ".wmv" => "video/x-ms-wmv", ".bz2" =>
"application/x-bzip", ".tbz" => "application/x-bzip-compressed-tar",
".tar.bz2" => "application/x-bzip-compressed-tar" ) # Use the
"Content-Type" extended attribute to obtain mime type if possible
#mimetypes.use-xattr = "enable" #### accesslog module #accesslog.filename =
"/dev/null" ## deny access the file-extensions # # ~ is for backupfiles
from vi, emacs, joe, ... # .inc is often used for code includes which
should in general not be part # of the document-root url.access-deny = (
"~", ".inc" ) ######### Options that are good to be but not neccesary to be
changed ####### ## bind to port (default: 80) server.port = {$lighty_port}
## error-handler for status 404 #server.error-handler-404 =
"/error-handler.html" #server.error-handler-404 = "/error-handler.php" ##
to help the rc.scripts server.pid-file = "/var/run/{$pid_file}" ## virtual
directory listings server.dir-listing = "disable" ## enable debugging
debug.log-request-header = "disable" debug.log-response-header = "disable"
debug.log-request-handling = "disable" debug.log-file-not-found = "disable"
#### compress module #compress.cache-dir = "/tmp/lighttpd/cache/compress/"
#compress.filetype = ("text/plain", "text/html") {$fastcgi_config}
{$cgi_config} EOD; $cert = str_replace("\r", "", $cert); $key =
str_replace("\r", "", $key); $cert = str_replace("\n\n", "\n", $cert); $key
= str_replace("\n\n", "\n", $key); if($cert <> "" and $key <> "") { $fd =
fopen("{$g['varetc_path']}/{$cert_location}", "w"); if (!$fd) {
printf("Error: cannot open cert.pem in system_webgui_start().\n"); return
1; } chmod("{$g['varetc_path']}/{$cert_location}", 0600); fwrite($fd,
$cert); fwrite($fd, "\n"); fwrite($fd, $key); fclose($fd); $lighty_config
.= "\n"; $lighty_config .= "## ssl configuration\n"; $lighty_config .=
"ssl.engine = \"enable\"\n"; $lighty_config .= "ssl.pemfile =
\"{$g['varetc_path']}/{$cert_location}\"\n\n"; } $fd = fopen("{$filename}",
"w"); if (!$fd) { printf("Error: cannot open {$filename} in
system_generate_lighty_config().\n"); return 1; } fwrite($fd,
$lighty_config); fclose($fd); return 0; } function
system_password_configure() { global $config, $g;
if(isset($config['system']['developerspew'])) { $mt = microtime(); echo
"system_password_configure() being called $mt\n"; } /* sync passwords */
sync_webgui_passwords(); /* !NOTE! conf_mount_ro is done by
sync_webgui_passwords() */ return 0; } function system_timezone_configure()
{ global $config, $g; if(isset($config['system']['developerspew'])) { $mt =
microtime(); echo "system_timezone_configure() being called $mt\n"; }
$syscfg = $config['system']; if ($g['booting']) echo "Setting timezone...
"; /* extract appropriate timezone file */ $timezone = $syscfg['timezone'];
if (!$timezone) $timezone = "Etc/UTC"; conf_mount_rw(); exec("/usr/bin/tar
xzfO /usr/share/zoneinfo.tgz " . escapeshellarg($timezone) . " >
/etc/localtime"); conf_mount_ro(); if ($g['booting']) echo "done.\n"; }
function system_ntp_configure() { global $config, $g;
if(isset($config['system']['developerspew'])) { $mt = microtime(); echo
"system_ntp_configure() being called $mt\n"; } $syscfg = $config['system'];
if ($g['booting']) echo "Starting NTP client... "; else {
killbypid("{$g['varrun_path']}/runmsntp.pid");
killbypid("{$g['varrun_path']}/msntp.pid"); } /* start ntp client if
needed - needs to be forced into background */ $updateinterval =
$syscfg['time-update-interval']; if ($updateinterval > 0) { if
($updateinterval < 6) $updateinterval = 6; $timeservers = ""; foreach
(explode(' ', $syscfg['timeservers']) as $ts) $timeservers .= " " . $ts;
mwexec_bg("/usr/local/bin/runmsntp.sh " .
escapeshellarg("{$g['varrun_path']}/runmsntp.pid") . " " .
escapeshellarg("{$g['varrun_path']}/msntp.pid") . " " .
escapeshellarg($updateinterval) . " " . escapeshellarg($timeservers)); } if
($g['booting']) echo "done.\n"; } function system_halt() { global $g;
system_reboot_cleanup(); mwexec("nohup /etc/rc.halt > /dev/null 2>&1 &"); }
function system_reboot() { global $g; system_reboot_cleanup();
mwexec("nohup /etc/rc.reboot > /dev/null 2>&1 &"); } function
system_reboot_sync() { global $g; system_reboot_cleanup();
mwexec("/etc/rc.reboot > /dev/null 2>&1"); } function
system_reboot_cleanup() { mwexec("/usr/local/bin/beep.sh stop");
captiveportal_radius_stop_all(); } function system_do_shell_commands($early
= 0) { global $config, $g; if(isset($config['system']['developerspew']))
{ $mt = microtime(); echo "system_do_shell_commands() being called
$mt\n"; } if ($early) $cmdn = "earlyshellcmd"; else $cmdn = "shellcmd"; if
(is_array($config['system'][$cmdn])) { /* *cmd is an array, loop through */
foreach ($config['system'][$cmdn] as $cmd) { exec($cmd); } }
elseif($config['system'][$cmdn] <> "") { /* execute single item */
exec($config['system'][$cmdn]); } } function system_console_configure() {
global $config, $g; if(isset($config['system']['developerspew'])) { $mt =
microtime(); echo "system_console_configure() being called $mt\n"; } if
(isset($config['system']['disableconsolemenu'])) {
touch("{$g['varetc_path']}/disableconsole"); } else {
unlink_if_exists("{$g['varetc_path']}/disableconsole"); } } function
system_dmesg_save() { global $g;
if(isset($config['system']['developerspew'])) { $mt = microtime(); echo
"system_dmesg_save() being called $mt\n"; } $dmesg = "";
exec("/sbin/dmesg", $dmesg); /* find last copyright line (output from
previous boots may be present) */ $lastcpline = 0; for ($i = 0; $i <
count($dmesg); $i++) { if (strstr($dmesg[$i], "Copyright (c) 1992-"))
$lastcpline = $i; } $fd = fopen("{$g['varlog_path']}/dmesg.boot", "w"); if
(!$fd) { printf("Error: cannot open dmesg.boot in system_dmesg_save().\n");
return 1; } for ($i = $lastcpline; $i < count($dmesg); $i++) fwrite($fd,
$dmesg[$i] . "\n"); fclose($fd); return 0; } function
system_set_harddisk_standby() { global $g, $config;
if(isset($config['system']['developerspew'])) { $mt = microtime(); echo
"system_set_harddisk_standby() being called $mt\n"; } if
(isset($config['system']['harddiskstandby'])) { if ($g['booting']) { echo
'Setting hard disk standby... '; } $standby =
$config['system']['harddiskstandby']; // Check for a numeric value if
(is_numeric($standby)) { // Sync the disk(s) mwexec('/bin/sync'); if
(!mwexec('/sbin/sysctl hw.ata.standby=' . ((int)$standby))) { //
Reinitialize ATA-drives mwexec('/usr/local/sbin/atareinit'); if
($g['booting']) { echo "done.\n"; } } else if ($g['booting']) { echo
"failed!\n"; } } else if ($g['booting']) { echo "failed!\n"; } } } function
system_setup_sysctl() { global $config;
if(isset($config['system']['developerspew'])) { $mt = microtime(); echo
"system_setup_sysctl() being called $mt\n"; } $sysctl =
return_filename_as_array("/etc/sysctl.conf"); foreach($sysctl as $sysc) {
if($sysc <> "") mwexec("sysctl {$sysc} 2>/dev/null"); } if
(isset($config['system']['sharednet'])) {
system_disable_arp_wrong_if(); } } function system_disable_arp_wrong_if()
{ global $config; if(isset($config['system']['developerspew'])) { $mt =
microtime(); echo "system_disable_arp_wrong_if() being called $mt\n"; }
system("/sbin/sysctl -n net.link.ether.inet.log_arp_wrong_iface=0
2>/dev/null"); } function system_enable_arp_wrong_if() { global $config;
if(isset($config['system']['developerspew'])) { $mt = microtime(); echo
"system_enable_arp_wrong_if() being called $mt\n"; }
mwexec("/sbin/sysctl -n net.link.ether.inet.log_arp_wrong_iface=1"); }
function enable_watchdog() { global $config; $install_watchdog = false;
$supported_watchdogs = array("Geode"); $file =
file_get_contents("/var/log/dmesg.boot"); foreach($supported_watchdogs as
$sd) { if(stristr($file, "Geode")) { $install_watchdog = true; } }
if($install_watchdog == true) { exec("/usr/bin/killall watchdogd");
exec("/usr/sbin/watchdogd"); } } ?>
--------------------------------------------------------------------------------
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
