Ad Schellevis
054d69cd01
Firewall/forward, typo in ForwardRule.php https://github.com/opnsense/core/issues/1326
2017-12-23 15:37:53 +01:00
Ad Schellevis
b291345848
Firewall, rule parsing. move suffix to parameters for parsePlainCurly() , also for https://github.com/opnsense/core/issues/1326
2017-12-23 15:11:49 +01:00
Ad Schellevis
a347623b41
Firewall/forward, missed a spot in last refactor https://github.com/opnsense/core/issues/1326
2017-12-23 14:53:43 +01:00
Ad Schellevis
c77718cb6b
Firewall, portforward. https://github.com/opnsense/core/issues/1326
...
Rename NatRule to ForwardRule, it seems better to split the logic for the different nat types and reuse the functionality in the base class. A portforward is actually a rdr entry combined with nat if relection is enabled, 1-on-1 nat is the exact opposite (nat, optionally combined with rdr). Which would make the parse logic to complicated to read if combined.
2017-12-23 14:13:23 +01:00
Ad Schellevis
bc235a3a69
Firewall/rules parsing, add support for reuse of fieldnames in ruleToText(). for https://github.com/opnsense/core/issues/1326
2017-12-23 13:57:22 +01:00
Ad Schellevis
6337818383
firewall, refactor text output so we can reuse the same logic in other classes as well. moved logic out of __toString() to ruleToText() in Rule class, only small downside is that conversion functions need to be accessible from the Rule() class for this to work, which requires them to be protected in stead of private.
...
related to https://github.com/opnsense/core/issues/1326
2017-12-23 13:45:46 +01:00
Ad Schellevis
fa0bb4a98c
firewall/rule parser, move standard rule parser logic to reader() in Rule class for reuse and rename fetchActualRules() to parseFilterRules() to better reflect it's function.
...
related to https://github.com/opnsense/core/issues/1326
2017-12-23 13:24:53 +01:00
Ad Schellevis
280781b582
firewall/rule parser, better to switch fetchActualRules() to a generator.
2017-12-23 12:45:17 +01:00
Ad Schellevis
6628d7f495
firewall/portforward, missing ipproto in reflection nat rule. for https://github.com/opnsense/core/issues/1326
...
pf can guess the ip protocol, but this doesn't appear to be flawless.
2017-12-23 11:34:59 +01:00
Fabian Franz
831bfc711e
lighttpd: add mime type for WPAD/PAC
2017-12-23 10:30:12 +01:00
Ad Schellevis
65d08b716c
firewall/nat, regression in previous. https://github.com/opnsense/core/issues/1326
...
Because we can't use :network when interfaces don't have any address configured on filter load, we need to make sure we know which addresses are configured, add relevant ifconfig
data to setInterfaceMapping() in filter.inc.
2017-12-22 21:52:46 +01:00
Ad Schellevis
3b53e1d089
firewall/nat, replace portforward code for https://github.com/opnsense/core/issues/1326
2017-12-22 21:01:24 +01:00
Ad Schellevis
687e71dc3d
firewall/nat, regression in forward. https://github.com/opnsense/core/issues/1326
2017-12-22 20:59:53 +01:00
Ad Schellevis
8ed255c696
firewall/nat, work in progress port forwards. Class names may change later on, but functionally this part should be able to render the portforward rules, which will be integrated first before moving the other redirect/nat portions.
2017-12-22 20:12:41 +01:00
Ad Schellevis
6d6ac731c9
firewall/parser add prefix and suffix to parseInterface, https://github.com/opnsense/core/issues/1326
2017-12-22 20:09:19 +01:00
Franco Fichtner
50e53ab4a0
interfaces: reload filter before reloading plugins for connectivity
...
PR: https://forum.opnsense.org/index.php?topic=4727.0
PR: https://github.com/opnsense/core/issues/1403
2017-12-22 18:18:31 +01:00
Franco Fichtner
4e1c7d4011
network time: ntp breaks the overly overlong lines, fix their parsing
...
PR: https://github.com/opnsense/core/issues/1764
2017-12-22 07:53:49 +00:00
Franco Fichtner
0ae4af9a7f
network time: third server offers IPv6 #1374
2017-12-22 08:31:48 +01:00
Franco Fichtner
97daba95d9
network time: we haz a pool! #1374
...
While here, time-update-interval does not exist and update the
xml lint pass to pick up the sample file, too.
2017-12-21 18:28:24 +01:00
Franco Fichtner
0284604dda
ntpd: fix for valid negative offset; closes #1968
2017-12-21 10:21:29 +01:00
Franco Fichtner
7c66c4f750
wizard: also disable dnsmasq on wizard to avoid clash
2017-12-21 09:44:10 +01:00
Franco Fichtner
85c1e0a82f
web proxy: tweak previous
...
We can't fix reconfigure, but at least we can split up restart
to be an explicit stop start to push 'squid -z -N' into the middle.
PR: https://github.com/opnsense/core/issues/2008
2017-12-21 07:18:45 +00:00
Franco Fichtner
25ca2ad23f
web proxy: run setup.sh more often to properly do squid -z
...
PR: https://github.com/opnsense/core/issues/2008
2017-12-21 07:30:16 +01:00
Ad Schellevis
6ab11f0636
firewall/aliases, template missing check for existence. https://github.com/opnsense/core/issues/1971
2017-12-20 18:26:12 +01:00
Franco Fichtner
5db9141a45
power: finally add that reboot wait dialog
...
And a few more tweaks in the other spots.
2017-12-20 08:14:16 +00:00
Franco Fichtner
0645d11653
webgui: reload stuff part 1 #1347
...
Reload the client side. If we can't connect back, the second
part of this rework will make sure that the system reverts to
its former state and this reload will be able to pick it up.
While here kill the questionable login autocomplete toggle.
2017-12-20 07:33:41 +00:00
Franco Fichtner
83670156ce
openvpn: start later alongside IPsec
...
Matches previous, no apparent reason not to do this.
2017-12-20 00:43:36 +01:00
Franco Fichtner
ed9005ada5
ipsec: move to plugin bootup hook
...
Eventually, OpenVPN should be loaded alongside IPsec like
we do in newwanip scripts, but that requires some research.
2017-12-20 00:33:49 +01:00
Ad Schellevis
78686814a4
traffix shaper, some small style fixes for https://github.com/opnsense/core/issues/2004
2017-12-19 19:21:33 +01:00
Ad Schellevis
f2a263b74b
Merge pull request #2006 from fabianfrz/ts_show_not
...
traffic shaper: add a ! for negated fields
2017-12-19 19:12:59 +01:00
Fabian Franz
9e5ea69585
traffic shaper: add a ! for negated fields
2017-12-19 19:05:45 +01:00
Ad Schellevis
980915871c
firewall, nat. work in progress for https://github.com/opnsense/core/issues/1326
2017-12-19 18:23:16 +01:00
Ad Schellevis
d3f245b646
firewall, utils (new). add getPortAlias() to figure out the ports within an alias for new style code, needed for https://github.com/opnsense/core/issues/1326
2017-12-19 18:21:50 +01:00
Ad Schellevis
48465e49f0
firewall/rules, move some more parse functions to the base class
2017-12-19 16:52:06 +01:00
Ad Schellevis
f58c2ece05
fix formatting for diag_dump_states.php https://github.com/opnsense/core/issues/2005
2017-12-19 15:09:53 +01:00
Franco Fichtner
426cbba88b
pkg: add finterprint for 18.1
2017-12-19 01:33:45 +01:00
Franco Fichtner
3f649be7db
firewall: fix typo
2017-12-19 07:06:53 +01:00
Franco Fichtner
d7b3a6ab79
interfaces: fix previous
2017-12-19 06:52:37 +01:00
Franco Fichtner
58184df417
interfaces: adjust messages for new IP
2017-12-19 00:01:18 +01:00
Franco Fichtner
a48167c403
wizard: add unbound to wizard, remove dnssec from default #1962
2017-12-18 21:55:48 +00:00
Ad Schellevis
e8a4fc1b46
ditch filterdns, since we've refactored the aliases in https://github.com/opnsense/core/issues/1971 the only use for this is ipsec, but it's doubtful if it's required. see https://github.com/opnsense/core/issues/2003
2017-12-18 20:44:16 +01:00
Ad Schellevis
82aa698f51
cleanup, rc.newroutedns looks unused now
2017-12-18 19:25:46 +01:00
Ad Schellevis
fa72a9205f
firewall/advanced settings, ditch filterdns for https://github.com/opnsense/core/issues/1971
2017-12-18 19:19:09 +01:00
Franco Fichtner
0eb35fe369
plugins: hybrid approach to #1835 migration
...
Keep old ones, but switch to new.
2017-12-18 18:13:45 +00:00
Franco Fichtner
94a85af77e
firmware: increase size to 2MB, text dumps are missing
2017-12-18 18:07:22 +00:00
Franco Fichtner
75931c58c2
firewall: add alias nesting node, reorder fields for clarity; closes #1957
2017-12-18 17:55:34 +00:00
Franco Fichtner
6c184975c3
firewall: GeoIP description; closes #1987
2017-12-18 17:47:36 +00:00
Ad Schellevis
fefa65fb6b
system->routes->status, sort "use" and "mtu" numerical. closes https://github.com/opnsense/core/issues/1531
2017-12-17 20:34:36 +01:00
Franco Fichtner
427b9c1220
wizard: good question. the answer is: nope
2017-12-18 08:36:43 +01:00
Franco Fichtner
15355008c9
system: make route model more official by using 1.0.0
2017-12-18 08:20:04 +01:00
