Franco Fichtner
09f45fbdbf
system: rewrite the default route handling
...
With this, there is consistency in setting the default route
and associated marker file. Nothing is done before the decision
is final, so we may not end up with a missing route after an
attempt to reconfigure for something that doesn't work anyway.
DHCPv4 and PPP still do this manually, but we will have to route
them through the same logic instead of them manually handling their
routes. 6rd and 6to4 may have a similar issue as well.
While here, swap the system_routing_configure() arguments to
align with the way other configure functions present their
arguments (verbose print flag first).
Gateway monitoring and default switching improvement since 2016.
Push $keep into default handling, it may be useful in general to
avoid spurious switches. It could also be a default probably.
2018-03-16 07:41:17 +00:00
Ad Schellevis
9ca61d8b3e
add service action to sync users and groups for https://github.com/opnsense/core/issues/2151
2018-03-15 21:33:41 +01:00
Ad Schellevis
d4e9da8b72
add syslog to services/diagnostics
2018-03-15 21:16:29 +01:00
Franco Fichtner
b3fb3e1b1d
system: found small issue, but...
...
ended up realising the function is totally whacky from top to
bottom. Writing default file hints before doing lookups for
said IPs, writing empty fallbacks, missing logging info.
To be continued.
2018-03-14 22:47:47 +00:00
Franco Fichtner
c2c4a24618
system: apply loader tunables, style for apply box #2083
2018-03-14 09:31:30 +00:00
Ad Schellevis
f4313ce368
Revert "IDS, suricata.log isn't in binary format... see https://github.com/opnsense/plugins/issues/606 "
...
This reverts commit dc1cd4da918880a7a9b6036b02911b65128e2d7c.
2018-03-13 18:07:50 +01:00
Ad Schellevis
dc1cd4da91
IDS, suricata.log isn't in binary format... see https://github.com/opnsense/plugins/issues/606
2018-03-13 17:49:30 +01:00
Ad Schellevis
e8846eaf0c
openvpn, show last timestamp in openvpn_get_client_status, for https://github.com/opnsense/core/issues/2243
2018-03-13 14:58:40 +01:00
Ad Schellevis
7ff5ec2340
openvpn, parse all states to retrieve most relevant one and some minor cleanups. for https://github.com/opnsense/core/issues/2243
2018-03-13 14:43:01 +01:00
Franco Fichtner
fdf4eccfaa
system: cosmetic tweaks for #2083
2018-03-12 20:51:04 +00:00
Franco Fichtner
68cfe2aaf8
system: render tunables in loader.conf; closes #2083
2018-03-12 20:31:12 +00:00
Franco Fichtner
ef451142db
interfaces: always allow /127, /128 and /32 static IPs; closes #2213
2018-03-12 21:07:17 +01:00
Franco Fichtner
86aa45633a
voucher: tweak simple character set; closes #2257
2018-03-12 18:47:27 +01:00
Ad Schellevis
6b677051d4
bridging, hide already assigned interfaces, closes https://github.com/opnsense/core/issues/2256
2018-03-12 18:45:47 +01:00
Ad Schellevis
7401b27bad
mvc / Monit, ditch work-around, closes https://github.com/opnsense/core/issues/2255
2018-03-12 18:23:51 +01:00
Ad Schellevis
117eb47666
MVC, keep track of model that created a field so our model relationfield can reuse the same object for choosing it's options, for https://github.com/opnsense/core/issues/2255
2018-03-12 18:22:21 +01:00
Franco Fichtner
33b3dabab3
interfaces: kill is_jumbo_capable()
...
Introduced in 2005 to separate good VLAN-capable driver from
the bad ones. We wonder how relevant this is nowadays.
Breaks at least Xen where the driver fails to pass the host's
VLAN capabilities.
Discussed with: @adschellevis
2018-03-12 17:21:21 +01:00
Franco Fichtner
d823cc7193
firewall: switch back to old NAT auto-outbound behaviour
...
Use the first address only, ignoring all VIPs.
Discussed with: @adschellevis
PR: https://forum.opnsense.org/index.php?topic=7438.0
2018-03-12 14:36:11 +01:00
Franco Fichtner
9cce0a02fe
pkg: this makes more sense, need to push to FreeBSD ports
2018-03-12 11:40:31 +01:00
Franco Fichtner
9e054ed704
interface: init variable directly
2018-03-12 07:50:27 +00:00
marjohn56
a28b048597
interface: dhcp6c creation breakout
2018-03-12 07:42:27 +00:00
Franco Fichtner
9efc0bf123
interfaces: do not break line
2018-03-12 07:30:37 +00:00
Franco Fichtner
95807fac47
interfaces: emit prefix-interface for trackers in advanced DHCPv6
...
While here, clean up the config write a little bit.
2018-03-12 07:24:46 +00:00
Franco Fichtner
b38317b34f
interfaces: more log output streamlining
2018-03-12 06:59:01 +00:00
Ad Schellevis
dc74006c9a
implement password policies for local accounts. for https://github.com/opnsense/core/issues/2252
...
This change consists of two components:
1) enforcing the user to change his or her password every x days, when pwd_changed_at is not set or longer ago then specified only access to the password page is prohibited
2) enforce minimal length or complexity settings depending on selected choices
2018-03-11 18:24:23 +01:00
marjohn56
8fb70ac4b1
interfaces: baby steps for #2234
...
Improve logging, minor cleanups.
2018-03-11 15:13:43 +00:00
Franco Fichtner
60b3db278f
interfaces: revert useless commits
...
This reverts commit e6dc3265fe76d00aaf250cc7bf5515c1e3d922d4.
This reverts commit e211d1ab2702be8df65e8d1cce1e4589ccd37f5a.
2018-03-11 14:36:16 +00:00
Franco Fichtner
1a22b8822a
service: almost entirely migrate monit model 1.0.0 et al.
2018-03-11 11:08:14 +00:00
Franco Fichtner
79500101c6
services: import monit service
...
Some things to work on:
* post-install should be a migration
* move to system?
* remove old notifications
2018-03-11 11:07:51 +00:00
Franco Fichtner
7cc7a26e60
mvc: small cleanups
2018-03-11 11:07:21 +00:00
Franco Fichtner
b3e2fa36a3
system: logging tweaks
...
* Allow clearing configd log in clear all
* Neither configd nor lighttpd remote exists
These things will have to wait till syslog-ng is properly integrated.
2018-03-11 10:40:56 +01:00
Franco Fichtner
dd71f72b45
src: style fix
2018-03-11 00:13:02 +01:00
Franco Fichtner
eb7644e953
pkg: fix plist
2018-03-10 16:46:46 +01:00
Ad Schellevis
9eeb057d30
configd deserves it's own space for logging, closes https://github.com/opnsense/core/issues/2067
2018-03-10 16:03:48 +01:00
Ad Schellevis
6901b5af8f
webgui, set correct syslog facility
2018-03-10 15:52:48 +01:00
Ad Schellevis
535a27498b
webgui, only set accesslog.use-syslog when accesslog is enabled
2018-03-10 15:21:34 +01:00
Franco Fichtner
003a1142b9
system: another tweak
2018-03-10 11:36:30 +01:00
Franco Fichtner
69befc0d05
system: change menu item name for previous
2018-03-10 11:34:21 +01:00
Franco Fichtner
69b12e2690
pkg: fix plist
2018-03-10 11:30:20 +01:00
Ad Schellevis
11363e4799
webui, add option to enable access log and fix lighttpd.log in the process. closes https://github.com/opnsense/core/issues/2248
2018-03-09 21:39:45 +01:00
Franco Fichtner
ac0a632812
src: style sweep
2018-03-09 11:58:19 +00:00
Franco Fichtner
93028ca39c
make: small tweak to previous
2018-03-09 11:58:09 +00:00
Franco Fichtner
aeeb446779
pkg: php flavours are coming... break upgrade for now
2018-03-09 07:52:55 +01:00
Ad Schellevis
8f1f62138b
openvpn, switch openvpn_get_server_status() to status version 3 which uses tabs in stead of comma's, for https://github.com/opnsense/core/issues/2245
2018-03-07 19:04:58 +01:00
Ad Schellevis
ec819ca59c
mvc, move view_fetch_themed_filename() to index, so a stub can overwrite it's behaviour (when developing locally)
2018-03-06 21:16:02 +01:00
Ad Schellevis
67e95c4f52
MVC/Theme, force theme setting if base theme directory (/usr/local/opnsense/www/themes) doesn't exist, which might be the case for local test/development (we can't know for sure the predefined theme doesn't exist, but if we can't probe if we might as well trust the settings)
2018-03-06 18:29:16 +01:00
Ad Schellevis
c58c2fdc8d
MVC/Menu, oops, left some debugging output
2018-03-06 16:39:52 +01:00
Franco Fichtner
5c3c18d660
rc: style in previous
2018-03-06 16:29:02 +01:00
Ad Schellevis
267a086dcf
interface/link-up event, change unassigned to a valid (unassigned) ip address in src/etc/rc.linkup, to avoid configuring when one of the proto's isn't configured. brings back some of fdc754e426
2018-03-06 15:10:56 +01:00
Ad Schellevis
d1de8da1a9
MVC, add support for multiple model locations to collect menu items
2018-03-06 14:36:52 +01:00
