Ad Schellevis
071925da51
System: Settings: Tunables - refactor to MVC, closes https://github.com/opnsense/core/issues/7249
2025-01-04 12:42:10 +01:00
Ad Schellevis
b694c81be2
mvc:model - add Default() method to reset a model to it's factory defaults, required for https://github.com/opnsense/core/issues/7249
...
Sometimes its practical to be able to reset model settings to their defaults, in which case it makes sense to have a simple handle on the base model to flush all for a specific model.
Although this is a "hammer" (unable to validate referential constraints on its own), there is practical use when trying to reset a component to its factory state.
If useful, we could add a factory reset handle to the ApiMutableModelControllerBase class at some point as well to facility a "flush" in a more generic way.
2025-01-04 11:39:53 +01:00
Ad Schellevis
af2730dd36
System: Settings: Tunables - refactor to MVC for https://github.com/opnsense/core/issues/7249 (work in progress)
2025-01-01 20:14:07 +01:00
Ad Schellevis
75144ff498
Firewall: Automation: Filter - add "Max new connections", closes https://github.com/opnsense/core/issues/8143
2025-01-01 17:59:09 +01:00
Ad Schellevis
23e20aab3c
Firewall: Automation: Filter - add TOS/DSCP for https://github.com/opnsense/core/issues/8143
2025-01-01 14:48:11 +01:00
Ad Schellevis
c49af7824a
Firewall: Automation: Filter - add schedules for https://github.com/opnsense/core/issues/8143
2025-01-01 14:38:33 +01:00
Ad Schellevis
37a32842fd
System: Routes: Configuration - add support for rfc5549, missing implementation part for https://github.com/opnsense/core/issues/8157
...
When specifying different protocols for target network and gateway address, add protocol prefixes to both.
2024-12-30 16:03:59 +01:00
Ad Schellevis
52255d7e46
System: Routes: Configuration - add support for rfc5549, closes https://github.com/opnsense/core/issues/8157
...
This change lifts the constraint for matching protocols when the next hop is ipv6 and the route advertised is an ipv4 network.
While here, also cleanup the code a bit for readability and performance reasons.
2024-12-29 12:54:28 +01:00
Ad Schellevis
752795a229
Firewall: Automation: Filter - add tcpflags1,tcpflags2 for https://github.com/opnsense/core/issues/8143
2024-12-28 19:45:07 +01:00
Ad Schellevis
c1e44bcb65
Firewall: Automation: Filter - add match prio for https://github.com/opnsense/core/issues/8143
2024-12-28 19:06:44 +01:00
Ad Schellevis
92789c5278
Firewall: Automation: Filter - add tag, tagged for https://github.com/opnsense/core/issues/8143
2024-12-28 18:59:49 +01:00
Ad Schellevis
5eaa7fc19d
Firewall: Automation: Filter - add set-prio[-low] for https://github.com/opnsense/core/issues/8143
2024-12-28 18:28:38 +01:00
Ad Schellevis
70b48230e1
Firewall: Automation: Filter - add Max source connections for https://github.com/opnsense/core/issues/8143
2024-12-28 18:00:07 +01:00
Ad Schellevis
b8e3015f53
mvc:javascript:SimpleFileUploadDlg() - load csv as text to prevent encoding isssues, closes https://github.com/opnsense/core/issues/8169
2024-12-27 15:10:57 +01:00
Ad Schellevis
bbfd1f3f8b
Firewall: Automation: Filter - add adaptive timeouts for https://github.com/opnsense/core/issues/8143
2024-12-26 19:26:28 +01:00
Ad Schellevis
e6440cb867
Firewall: Automation: Filter - add allowopts for https://github.com/opnsense/core/issues/8143
2024-12-24 17:28:10 +01:00
Ad Schellevis
0d9550b912
Firewall: Automation: Filter - add max (states) option for https://github.com/opnsense/core/issues/8143
2024-12-24 17:17:28 +01:00
Ad Schellevis
207d51de55
Firewall: Automation: Filter - add max-src-nodes, max-src-states options for https://github.com/opnsense/core/issues/8143
2024-12-24 17:06:41 +01:00
Ad Schellevis
d07e3c620e
Firewall: Automation: Filter - add 'statetimeout' and validations for https://github.com/opnsense/core/issues/8143
...
Although this component is mainly used for api access, experiment a bit further with the inpu dialog as well.
2024-12-24 16:49:02 +01:00
Ad Schellevis
3cbea52267
System: High Availability - XMLRPC Client / replace file_get_contents() with curl implementation, closes https://github.com/opnsense/core/issues/7561
...
While here, also offer optional peer tls verification as this is/was disabled by default.
In most cases verification isn't very relevant when using a direct attached neighbor, but if someone has infrastructure in between, extra safeguards are now possible.
With this inplace, allow_url_fopen can safely be disabled on our end (which was the primary goal here).
2024-12-24 13:54:59 +01:00
Ad Schellevis
0bd12b5549
Firewall: Automation: Filter - add some fields for https://github.com/opnsense/core/issues/8143
2024-12-23 21:21:39 +01:00
Franco Fichtner
1e788857a5
system: reverse dependencies here too
2024-12-23 12:01:17 +01:00
Ad Schellevis
f16348457b
System: High Availability: Status - warn about version mismatches, closes https://github.com/opnsense/core/issues/8152
2024-12-22 14:46:34 +01:00
Ad Schellevis
adecb9ddf1
auth/sync_user.php - change import order as noted in https://github.com/opnsense/core/pull/8156
2024-12-22 14:43:29 +01:00
Ad Schellevis
96a1145c3e
System: Access: Users - add "system list shells" and hook to shell field, closes https://github.com/opnsense/core/issues/8155
2024-12-22 14:37:42 +01:00
Loganaden Velvindron
e0e7e0b638
Update ICANN Trust Anchor to include the new one which will be active in 2026 ( #7852 )
...
Signed-off-by: Jagveer Loky (jagveer@cyberstorm.mu )
Signed-off-by: Jagveer Loky (jagveer@cyberstorm.mu )
2024-12-21 09:25:29 +01:00
Stephan de Wit
909e945e7b
System: Access: Users: add missing dashboard container
2024-12-20 11:38:30 +01:00
Franco Fichtner
7f62439e7b
make: move to better spot
2024-12-19 17:30:49 +01:00
Franco Fichtner
9176999f7f
make: add "glint" target ;)
2024-12-19 17:27:35 +01:00
Ad Schellevis
514f87adb8
System: Access: Users - remove support for local passwords
...
Since https://github.com/opnsense/core/issues/998 we support our authenticators for all service types, for backward compatibility reasons we kept default unix authentication available, since this is hardly used anymore, after 8 years it's time to deprecate this option.
2024-12-19 12:59:54 +01:00
Franco Fichtner
6e9bcf7830
system: typo, end sentence
2024-12-19 12:41:56 +01:00
Franco Fichtner
44f5964921
src: style sweep
2024-12-19 12:13:40 +01:00
Ad Schellevis
7169b29e0b
System: Access: Users - allow long usernames for non local users (without a shell account), for https://github.com/opnsense/core/issues/7904
...
With the new mvc code inplace, it's also a good idea to loosen the constraints for some accounts. One of the mail advantages is that we can now user email addresses as usernames for most services.
2024-12-19 12:07:30 +01:00
Franco Fichtner
4f0fdfa1a3
wizard: revert a373d411f67cb1 now that new logos are in
2024-12-19 11:25:11 +01:00
Ad Schellevis
6a7352e528
authentication - remove expireaccounts script which has been disfunctional for some time, accounting for expirey is the responsibility of the authenticator.
...
ref: 252fd04811/src/opnsense/mvc/app/library/OPNsense/Auth/Local.php (L161-L162)
2024-12-19 10:09:26 +01:00
Franco Fichtner
252fd04811
ipsec: fix mobile clients reload missing system.inc
...
PRL https://forum.opnsense.org/index.php?topic=44724.0
2024-12-19 09:49:13 +01:00
Franco Fichtner
bf0c69dff2
mvc: style sweep
2024-12-19 09:17:48 +01:00
Ad Schellevis
10582447d3
Firewall: Automation: Filter - add interface inverse for https://github.com/opnsense/core/issues/8143
2024-12-18 20:53:03 +01:00
Ad Schellevis
83587d965f
Firewall: Automation: Filter - reorganize input dialog and add reply-to option, for https://github.com/opnsense/core/issues/8143
2024-12-18 20:31:08 +01:00
Ad Schellevis
8e310b1c1f
Firewall: Automation: Filter - always lowercase 'protocol' to avoid mismatches, partly reverts previous commit.
2024-12-18 15:49:01 +01:00
Ad Schellevis
bcb5bae3e6
Firewall: Automation: Filter - allow TCP/UDP combination in protocol selection, closes https://github.com/opnsense/core/issues/7962
2024-12-18 14:39:19 +01:00
Ad Schellevis
0a408b3d57
Firewall: Automation: Filter - add "IPv4+IPv6" in ipprotocol ( https://github.com/opnsense/core/issues/7962 )
2024-12-18 14:02:35 +01:00
Franco Fichtner
8302270ae8
src: style
2024-12-18 10:07:05 +01:00
Ad Schellevis
ee269a1991
Services: Kea DHCP: Kea DHCPv4 - align hostname validation with manual host entries (support RFC2181), closes https://github.com/opnsense/core/issues/8128
2024-12-18 09:19:09 +01:00
Ad Schellevis
6145b7f0d0
Mvc/Router - normalize multiple slashes in paths, fix regression in 61c9d2f5b1
...
Although zero (0) is hardly used in url's, when it is used, the function should not suppress it. Fix this by using a closure in array_filter() which only filters empty strings.
ref: https://www.reddit.com/r/opnsense/comments/1hghfzv/health_reporting_rrd_graphs_stopped_working_with/
2024-12-18 08:42:27 +01:00
Ad Schellevis
24485709f3
System: High Availability: Status - some missing links for https://github.com/opnsense/core/issues/7899
2024-12-17 18:24:20 +01:00
Franco Fichtner
3009ad964d
firmware: add a light script mode -S to launcher
...
Because otherwise we do not get the current return value in the
shell menu option script after the refactor.
2024-12-17 15:58:54 +01:00
Franco Fichtner
3681807e24
plist: fix
2024-12-17 13:00:08 +01:00
Franco Fichtner
7f61f1b80a
firmware: new fingerprint for 25.1
2024-12-17 11:15:31 +01:00
Franco Fichtner
ec4277c9aa
src: style
2024-12-17 08:52:34 +01:00
