Franco Fichtner
07d7c28c80
unbound: shrink implementation of previous #4327
2021-07-20 17:23:59 +02:00
Franco Fichtner
3e66f270b1
unbound: migrate to single model #4327
2021-07-20 16:50:54 +02:00
Franco Fichtner
073681f895
mvc: allow to unset attribute via setAttributeValue
...
SimpleXML elements have no way of removing attributes so let
the base field do the work.
2021-07-20 16:46:58 +02:00
Franco Fichtner
8d20e2587d
unbound: add qname-minimisation-strict option #4327
...
While here get rid of the "apply" dialog on this page at least.
Removing all dialogs is difficult with the pages and settings
cluttered in the static page area depending on each other.
2021-07-20 11:54:48 +02:00
Franco Fichtner
72e6ca2fee
unbound: more refactoring, less pages, blacklist -> blocklist
...
PR: https://github.com/opnsense/core/issues/4327
2021-07-20 11:00:00 +02:00
Franco Fichtner
dac9a74479
interfaces: if it looks like SLAAC get rid of it
...
PR: http://forum.opnsense.org/index.php?topic=8985.0
2021-07-20 09:27:54 +02:00
Franco Fichtner
d6d0971677
unbound: integrade DoT grid; closes #5101
...
Extensive rewrite based on the original PR, but the models
have been merged into one Unbound.xml and the migration will
follow in the next commit.
2021-07-19 15:00:30 +02:00
Ad Schellevis
f5264d9085
usermanager - ldap import, prevent excessive config writes.
2021-07-16 14:07:05 +02:00
Ad Schellevis
e8079f0fcf
usermanager - missing ldap import button (regression in 18ad4dbbd3) cc @fichtner
2021-07-16 14:00:44 +02:00
Franco Fichtner
83cd07eda4
firmware: add version/date header here as well
2021-07-14 09:22:46 +02:00
Franco Fichtner
376ee793c9
system: do not split password into multiple pieces
...
PR: https://forum.opnsense.org/index.php?topic=23640.0
2021-07-13 15:50:00 +02:00
Franco Fichtner
b1241aeb74
shell: fix IPv4 /31 assignment
...
PR: https://forum.opnsense.org/index.php?topic=23878.0
2021-07-13 13:56:44 +02:00
Franco Fichtner
11b5fe6e9c
interfaces: deprecate SLAAC addresses on linkdown; closes #4929
2021-07-13 12:45:05 +02:00
Franco Fichtner
e8d7876d21
unbound: add 'unbound check' target for advanced options #4327
2021-07-13 12:27:14 +02:00
Franco Fichtner
354835abe7
interfaces: tiny cleanup
2021-07-13 12:26:35 +02:00
Franco Fichtner
4a1bc9f8b5
unbound: allow to retain cache; closes #2750
2021-07-13 11:21:01 +02:00
Franco Fichtner
d2a183a7a8
dhcp: check address family, not track address existence
2021-07-13 09:05:50 +02:00
Franco Fichtner
72bfc498da
unbound: remove custom configuration support #4327
...
Since we have /usr/local/etc/unbound.opnsense.d/ now we can
go ahead with the removal of the GUI based "permanent workaround".
2021-07-09 14:06:45 +02:00
Franco Fichtner
a0e7b21e2b
src: style sweep
2021-07-09 13:57:08 +02:00
Franco Fichtner
09f510fba2
unbound: fix /var MFS dilemma for DNSBL after boot; closes #4938
...
o Create a persistent directory to feed the unbound includes
o Move runtime data to /tmp directory
After reboot we use the old persistent list still available.
I am not sure if it's clear enough that the blacklists cannot
auto-update and therefore require a cron job or manual update
from the respective GUI page ("apply" essentially is "download
and apply").
2021-07-09 13:57:07 +02:00
rdd2
78c8be71d1
Enable group sync for LDAP servers, that do not return memberOf ( #5082 )
2021-07-08 13:09:27 +02:00
Franco Fichtner
b74b3799db
system: fix deprecated warning
...
PR: https://forum.opnsense.org/index.php?topic=23822.0
2021-07-07 12:40:32 +02:00
Franco Fichtner
69c007ef07
rc: opnsense-beep melody database directory
...
An idea from the last refactoring: create a database directory
that holds the defaults as portable files with the ability to
invoke other user-created melodies as well as override the default
using ".local" suffix.
2021-07-07 07:59:25 +02:00
Franco Fichtner
0e7097cfb1
system: isvalidpid() is not required for a single killbypid()
2021-07-06 12:31:59 +02:00
Franco Fichtner
0f488a166b
firewall: use permanent promiscuous mode for pflog0
2021-07-06 12:30:51 +02:00
Franco Fichtner
4d95b990ec
system: remove unused legacy log include
2021-07-05 09:51:47 +02:00
Franco Fichtner
986cea4f30
rc: annotate ip_change_kill_states situation
2021-07-04 10:04:18 +02:00
Franco Fichtner
efe7114daf
dhcpd: do not merge non-explicit suffix addresses #5078
...
As a rule of thumb only react on ^:: addresses to avoid
merging them with the globally unqiue prefix of the
interface.
2021-07-02 15:59:26 +02:00
Franco Fichtner
ba70f141e6
firewall: remove kill_states et al; closes #5045
2021-07-02 10:22:39 +02:00
Franco Fichtner
58dfb05dca
rc: bsdinstaller is no more
2021-07-02 08:47:43 +02:00
Franco Fichtner
44899af673
system: hide far gateway option for IPv6; closes #5066
2021-07-01 14:44:16 +02:00
Franco Fichtner
74455307d5
system: prevent use of client certificates in web GUI; closes #3048
2021-07-01 13:18:57 +02:00
Franco Fichtner
08b32d9102
firmware: update message to reflect new GUI behaviour
2021-07-01 09:25:49 +02:00
Franco Fichtner
5938431d8f
configd: squelch Pyhton 3.8 warning
2021-07-01 09:25:11 +02:00
Ad Schellevis
60ffb74043
xmlrpc-sync: lock config writes during merge.
...
This might prevent race conditions while the user interface is trying to save data at the same time the xmlrpc client pushes new data. Need some further testing.
2021-06-26 00:01:11 +02:00
Franco Fichtner
e963f315eb
dhcp: last round of changes; closes #4642
...
o Move the IPv6 recompress to dhcpd_staticmap()
o Add DHCPv4 leases page as consumer of dhcpd_staticmap()
o Emit the MAC address in IPv4 case in dhcpd_staticmap()
o Let dhcpd_staticmap() emit valid entries with an IP address
o Check for required hostname in Dnsmasq and Unbound integration
2021-06-30 11:48:06 +02:00
Franco Fichtner
84b9a75920
dhcp: merge IPv6 static leases into dynamic ones #4642
2021-06-30 11:24:36 +02:00
Franco Fichtner
3eb235f25c
firewall: possibility to filter nat/rdr action #5005
2021-06-29 17:52:33 +02:00
Franco Fichtner
28fa452a47
firmware: fix comment on previous
2021-06-29 14:42:43 +02:00
Franco Fichtner
38578176e4
firmware: comment on compexity avoidance in shell menu
...
Fix plist while here.
2021-06-29 14:39:14 +02:00
Franco Fichtner
e30d7c88cb
firmware: add marker files, maybe message persistently now
2021-06-29 14:04:46 +02:00
Ad Schellevis
6f7744993f
Syslog: when using non circular logs, "Disable writing log files to the local disk" seems to be ignored. make sure syslog-ng-local.conf requires both non-circular and enabled logging.
2021-06-25 02:14:27 +02:00
Franco Fichtner
f6cd78641e
firmware: revoke obsolete business and 20.7 community keys
2021-06-29 08:17:58 +02:00
Franco Fichtner
da673b58e5
firmware: add 21.7 fingerprint
2021-06-29 08:17:58 +02:00
Franco Fichtner
e723bddcfd
src: style sweep
2021-06-29 07:34:25 +02:00
Ad Schellevis
e8b183077c
Firewall / Diagnostics / States - move actions from diag_resetstate.php into a tab within the states view.
...
Although likely hardly used, we can keep both with minimal effort and ditch some legacy code while here. The help text is kept as is to prevent translation issues, but moved to a dialog to keep the tab cleaner.
2021-06-24 22:42:29 +02:00
Ad Schellevis
e2bc22ebda
Services / Intrusion detection / Alerts - regression in 644b647cf7, ignoring filters and number of items to show
2021-06-24 11:26:19 +02:00
kulikov-a
97643a3edb
read_log.py: set label for obsolete rule in log ( #5075 )
2021-06-27 13:34:32 +02:00
Franco Fichtner
9e1582ced1
ui: avoid line breaks from breaking JS
2021-06-25 07:41:33 +02:00
Ad Schellevis
d406ff2a83
MVC - serialize model to xml: replace model in stead of delete/add, which should keep the diff between versions more stable.
...
closes https://github.com/opnsense/core/issues/4603
2021-06-23 18:22:07 +02:00