7604 Commits

Author SHA1 Message Date
Franco Fichtner
0cdac75bcb config: make shared forwarding the default for 18.1-BETA 2017-10-10 09:48:53 +02:00
Franco Fichtner
19fe357608 firmware: add server in Frankfurt, DE courtesy of ieji.de 2017-10-10 01:32:04 +02:00
Franco Fichtner
c01454e4f1 firmware: translate packages size and merge with sets size 2017-10-09 06:41:02 +00:00
Franco Fichtner
996d2bf363 firmware: allow `configctl firmware (un)lock'
Prevented throught the API action, but useful for an upcoming setting,
it locks the base + kernel.
2017-10-09 06:15:50 +00:00
Franco Fichtner
f6dec7ea3b firmware: pull the set size from the mirror
There is only one tiny missing piece: if we have both packages
and sets, we need to merge the download size and display it.
2017-10-08 18:14:45 +00:00
Franco Fichtner
6fe66d4b91 firmware: refactor this back to where it still is on 17.7.x 2017-10-08 16:42:49 +02:00
Franco Fichtner
7fd0451f32 firmware: rather say "unknown" instead of "none"
Remove an unused and only marginally useful value while there and
touch the strings that are displayed during execution, "please
wait" looks a lot friendlier and is more correct than 30 secs.
2017-10-08 14:30:51 +00:00
Franco Fichtner
75b06dc8ae firmware: anticipate base / kernel change from upgrade package 2017-10-08 14:18:47 +00:00
Franco Fichtner
ca9f2f3b85 firmware: remove "bsd" glue, it works without it 2017-10-08 13:59:23 +00:00
Franco Fichtner
6a05ba54b7 firmware: typo in revious 2017-10-08 15:03:20 +02:00
Franco Fichtner
d61c2a2336 firmware: -c can tell us if sets are locked 2017-10-08 14:57:44 +02:00
Franco Fichtner
bbe3ab4459 firmware: force-check to circumvent lock 2017-10-08 14:40:16 +02:00
Franco Fichtner
32d2e31fd2 interfaces: remove a lie 2017-10-05 14:18:41 +02:00
Franco Fichtner
bcbfb5750d firmware: use HTTPS for HiHo.ch 2017-10-05 09:08:13 +02:00
Franco Fichtner
6dd968f164 routes: add more debug output
This really needs work...
2017-10-04 05:17:45 +00:00
Franco Fichtner
32c4930aa2 system: fastforwarding no longer exists
PR: https://github.com/opnsense/src/issues/27
2017-10-02 08:14:58 +02:00
Ad Schellevis
ffb97cd141 Merge pull request #1780 from fabianfrz/bootgrid_glue
bootgrid glue: make it more robust to errors; handle disabled entries…
2017-09-28 21:07:42 +02:00
Alexander Shursha
9db0673f9b Don't used OPNsense.proxy.forward.icap.UsernameHeader (#1851) 2017-09-28 10:16:14 +02:00
Franco Fichtner
498247b4df firewall: another 2017-09-28 09:54:16 +02:00
Franco Fichtner
bb5e7d434f firewall: another cleanup 2017-09-28 09:52:52 +02:00
Franco Fichtner
d33f91ddf9 firewall: prevent VHID from changing at all
Editing the page and forcing a form error changes the VHID which
is still suboptimal.  Now never touch the setting, but leave
the button to be used and add a verification for CARP to enforce
a selected VHID.

PR: https://github.com/opnsense/core/issues/1849
2017-09-28 07:40:51 +00:00
Franco Fichtner
58c9c32810 firewall: add label for "none" VHID for #1849 2017-09-28 09:10:15 +02:00
Franco Fichtner
ab12bf0233 firewall: fixup button submit behaviour and UX in VIP edit; closes #1849 2017-09-27 04:18:50 +00:00
Ad Schellevis
bcba583191 disable tabstop in firewall_virtual_ip_edit.php / unused, for https://github.com/opnsense/core/issues/1849 2017-09-26 20:28:50 +02:00
Franco Fichtner
6bee17ac45 firmware: new mirror sponsored by HiHo via Fabian Abplanalp 2017-09-26 18:50:59 +02:00
Franco Fichtner
f77ab1b3fe gateways: ipv6 ll where appropriate
Normally, if we have an IPv6 link local monitor we use the link local
address which is always available.  If not a link local address, try
to use a global address.  If we don't have one, we can't reach the
outside anyway.

PR: https://forum.opnsense.org/index.php?topic=6028.0
2017-09-26 12:30:06 +02:00
Ad Schellevis
8f396690f2 IDS/IPS switch to tarball for et-open rules, improves download/install speed 2017-09-25 20:26:35 +02:00
Ad Schellevis
c99bc3b9de IDS/IPS, don't allow group interface types. closes https://github.com/opnsense/core/issues/1845 2017-09-25 19:38:17 +02:00
David Harrigan
d6c5531297 Really fix the typo this time!
-=david=-
2017-09-25 14:42:39 +02:00
David Harrigan
e3e3a6f307 Add in missing property and fix typo.
-=david=-
2017-09-25 14:37:30 +02:00
Ad Schellevis
accc4636b5 Merge pull request #1809 from kekek2/icap
Icap whitelist
2017-09-25 10:27:26 +02:00
Franco Fichtner
f9823e0ad3 src: whitespace cleanup 2017-09-25 10:06:16 +02:00
Franco Fichtner
82a4249c62 interfaces: further flatten the directly send solicit case 2017-09-23 17:02:13 +02:00
Franco Fichtner
54ff427eaa plugins: fix invoke for arbitrary configure; closes #1841
We need to include most legacy inc files as we don't know what
will happen.
2017-09-23 14:45:11 +00:00
Franco Fichtner
107632b082 web proxy: move plugin reloads to backend directly
This avoids double-bouncing.  ConfigParser allows header continuation,
something we've discussed briefly during the SSO plugin review.  In this
style, the scripting becomes more obvious.
2017-09-23 16:26:28 +02:00
Franco Fichtner
6566213c42 make: better reset borrowed from plugins.git 2017-09-23 15:12:58 +02:00
Franco Fichtner
a2fde613b1 make: only let clean clear the src/ directory
Many hours have likely been wasted because it would reset global changes.  ;)
2017-09-23 15:02:43 +02:00
Franco Fichtner
f0259c86c6 plugins: add pluginctl and assorted shuffling #1841 2017-09-23 14:52:58 +02:00
Franco Fichtner
29f475dd3f plugins: fix argument count here
PR: b769f359b3 (commitcomment-24507972)
2017-09-23 13:50:44 +02:00
Franco Fichtner
99a53ad9b8 interfaces: revert TERM -> KILL escalation, it's not needed 2017-09-22 19:18:42 +02:00
Franco Fichtner
2b4787453a rc: thin out the etc/ directory a bit by stashing boot scripts away 2017-09-22 19:10:36 +02:00
Franco Fichtner
7ced5ac1b9 openvpn: use the default of 5 seconds again #952 2017-09-22 19:03:32 +02:00
Franco Fichtner
30f267781c firmware: small tweak on wording 2017-09-22 19:00:42 +02:00
Franco Fichtner
ceeaca8a09 firmware: prevent submit of empty crash reports; closes #1496 2017-09-22 08:24:04 +00:00
Franco Fichtner
73abc7c3d6 openvpn: switcheroo for ns-cert-type / remote-cert-tls
PR: https://forum.opnsense.org/index.php?topic=6003.0
2017-09-21 22:14:36 +00:00
Franco Fichtner
b605812b71 system: user-based language, no wonder nobody wants works on this ;)
PR: https://github.com/opnsense/core/issues/1218
2017-09-21 22:05:04 +00:00
Franco Fichtner
930e6281d5 openvpn: small cleanup for previous #952 2017-09-21 21:58:38 +02:00
Franco Fichtner
58061809d4 openvpn: allow multiple servers for clients and many things, many things 2017-09-21 21:50:45 +02:00
Franco Fichtner
64fb9ac995 openvpn: POC for #952 2017-09-21 19:57:13 +02:00
Franco Fichtner
7338549ba5 CONTRIBUTING: small update 2017-09-21 09:36:18 +02:00