Franco Fichtner
11106c4990
vxlan: the idea was to have pluggable device code :)
...
While here change the expected device name from "vxlan.X" to "vxlanX",
since "." denotes the newer FreeBSD VLAN ID syntax on top of parent
devices (e.g. "igb0.12") and all devices should follow the regex of
"^[a-z]+[0-9]+".
2019-11-03 12:28:56 +01:00
Ad Schellevis
5db422e0cc
VXLAN model version and proper description
2019-11-02 16:01:50 +01:00
Ad Schellevis
6628ae2e40
VXLAN support ( #3787 )
...
* VXLAN: hook vxlan_configure_interface to newwanip event, move interface (address) configuration responisibilty there as well. This might be a better spot for other device setups as well.
2019-11-01 21:25:27 +01:00
Franco Fichtner
c20b0083ef
firmware: add /etc/remote to whitelist, NTP GPS uses it
2019-11-01 20:13:49 +01:00
Franco Fichtner
b97789b2d9
plugins: extend reach to "configurable" reject spots
2019-11-01 15:31:49 +01:00
Franco Fichtner
f2d6a44b4c
plugins: add plugins_devices() facility for device plugging
2019-11-01 11:13:48 +01:00
Ad Schellevis
2afb3777b8
MVC: NetworkField type, add "NetMaskAllowed" option to validate on single addresses
2019-10-31 16:30:14 +01:00
Franco Fichtner
a2aec6c76e
reporting: empty netflow egress default passes validation
2019-10-31 11:23:42 +01:00
Franco Fichtner
296a7e3c39
system: generate self-signed server certificate for web GUI
2019-10-31 10:13:09 +01:00
Franco Fichtner
48e0c47a96
interfaces: remove the "Directly send SOLICIT" option
...
We already do a more-or-less hybrid approach by starting rtsold
even if it isn't used at all. Now we also have ISPs which do
not seem to send router advertisements after successful connect
so that the reconnect misses the HUP for dhcp6c to fix the
connectivity again.
To change that remove the option and its only conditional to
behave unconditionally which has few reasons to cause regressions.
2019-10-31 09:14:35 +01:00
Ad Schellevis
4465f108bf
Proxy: fix validation, missed backreference
2019-10-30 15:36:11 +01:00
Ad Schellevis
5b159832eb
Firmware: add "copy to clipboard" button in update textbox.
2019-10-30 13:22:20 +01:00
Franco Fichtner
f621e1ff3c
system: small style update on previous
2019-10-30 10:36:30 +01:00
Ad Schellevis
875a1e2d4a
authentication: extend opnsense-auth to respond with json encoded data when the authenticator received additional properties (such as framed ip addresses, groups, etc). needed for https://github.com/opnsense/core/issues/3266 should be a non-breaking change, since current authentication sequences only use the return code.
2019-10-30 10:25:01 +01:00
Franco Fichtner
f098b3a9ba
pkg: suricata with RUST builtin doesn't work everywhere yet
2019-10-29 12:04:09 +01:00
Franco Fichtner
4e677c2b62
webproxy: indent
2019-10-29 11:02:59 +01:00
Franco Fichtner
ee0e6c2cef
webproxy: constraint to proper place
2019-10-29 10:57:33 +01:00
Ad Schellevis
bb06e1a5e1
Switch backup to Google api php client v2 ( #3778 )
2019-10-29 10:34:23 +01:00
Franco Fichtner
900b23a97b
unbound: add reload
...
PR: https://github.com/opnsense/plugins/pull/1554
2019-10-29 09:17:20 +01:00
Franco Fichtner
df0734b37b
firmware: expect pkg to be installed as non-automatic #3473
2019-10-28 10:44:34 +01:00
Franco Fichtner
d643488126
reporting: a bit more shell script style
2019-10-28 09:20:03 +01:00
Franco Fichtner
820d5c2f32
ipsec: a bit more coding style
2019-10-28 09:13:42 +01:00
Franco Fichtner
25e4673c67
src: whitespace sweep
2019-10-27 18:42:31 +01:00
Frank Brendel
5b6b56aac8
netflow: improve error handling in rc.d script ( #3658 )
2019-10-27 15:08:33 +01:00
Ad Schellevis
9cbc0aa5af
HASync, oops, needed an array. also for https://github.com/opnsense/core/issues/3779
2019-10-24 10:22:18 +02:00
Ad Schellevis
63769daaa9
HAsync, missed a spot for https://github.com/opnsense/core/issues/3779
2019-10-24 10:18:43 +02:00
Ad Schellevis
c6cb6df8ff
HASync, add interface groups for https://github.com/opnsense/core/issues/3779
2019-10-24 10:09:28 +02:00
Franco Fichtner
953ada8761
system: Syslog-ng 3.24
2019-10-23 16:20:49 +02:00
Ad Schellevis
ac80046261
access space in previous
2019-10-18 08:58:38 +02:00
Ad Schellevis
7f3703d99d
filter/schedules: log cause of reload in case of scheduled filter reconfigure. (to explain messages like kernel: pflog0: promiscuous mode disabled on periodic intervals)
2019-10-18 08:56:18 +02:00
Ad Schellevis
b609eed0c7
plugins, log executed tasks in configute and run. closes https://github.com/opnsense/core/issues/3771
2019-10-18 08:34:35 +02:00
Ad Schellevis
fa6bec1725
Merge branch 'strima-master'
2019-10-17 18:41:52 +02:00
Ad Schellevis
b02c7bb02f
Fix style issues for https://github.com/opnsense/core/pull/3768 and make sure openssl_pkey_get_private using the correct params ( https://www.php.net/manual/en/function.openssl-pkey-get-private.php ).
2019-10-17 18:41:08 +02:00
Ad Schellevis
7431745c71
Merge branch 'master' of https://github.com/strima/core into strima-master
2019-10-17 17:51:17 +02:00
Franco Fichtner
bdfefacbc3
system: partial removal on previous #3770
2019-10-17 09:36:34 +02:00
Franco Fichtner
1a5da5c0a6
system: correct sysctl description; closes #3770
2019-10-17 09:35:26 +02:00
Martin Strigl
f0efe0f014
* added getKeyType to correctly handle private key type and therefore skip hardcoded RSA type in ipsec.secrets
2019-10-16 21:30:00 +02:00
Franco Fichtner
9299386602
system: fix PHP loop fail in tunable
...
Maybe 7.2.23 is broken, never seen this before. oO
PR: https://forum.opnsense.org/index.php?topic=14652.0
2019-10-14 09:23:29 +02:00
Ad Schellevis
4f3781cfa9
dpinger: missing $gateways_arr in dpinger_status(), closes https://github.com/opnsense/core/issues/3759
2019-10-13 15:18:11 +02:00
Ad Schellevis
d5bd3a6cb7
dpinger: add details to status, so we can easily reproduce the outcome. for https://github.com/opnsense/core/issues/3759
2019-10-13 12:52:21 +02:00
Ad Schellevis
bb7557d38f
pluginctl, add run mode, so we can execute things like "pluginctl -r return_gateways_status". easier to ask the user when debugging.
...
while looking into https://github.com/opnsense/core/issues/3759
2019-10-13 12:39:09 +02:00
Ad Schellevis
7a5a2712cd
tokenize2 fix for https://github.com/opnsense/core/issues/3760
...
a4217d8fcc calls tokenize2() before it seems to be inititalized, lets check for content before calling clear.
2019-10-10 20:54:55 +02:00
Frank Wall
89918fc1de
captive portal/ipsec: add description to restart actions ( #3755 )
2019-10-10 14:49:04 +02:00
sooslaca
69139fcbb2
Hide leaking hostname on SSH password auth ( #3754 )
2019-10-10 13:35:50 +02:00
Ad Schellevis
817be51986
configd: improve error handling while configd is either not active or not functional.
...
- reconnecting the socket stream_socket_client() is safe while not executing commands
- if configd dies during communication, we should log and retun an empty response. The caller should handle operation, since you can't be sure restarting the action is a safe operation.
closes https://github.com/opnsense/core/pull/3744
2019-10-10 09:59:08 +02:00
Franco Fichtner
65212fcded
pkg: can't help it, change space to tab :D
2019-10-09 19:40:08 +02:00
Ad Schellevis
c4fba1c62e
LDAP/StartTLS userimport, start using correct url and move logic to legacy page. for https://github.com/opnsense/core/issues/3445
2019-10-09 17:52:21 +02:00
Ad Schellevis
ec613d3042
switch to suricata 5.0.0-rc1 for -devel version
2019-10-09 16:15:01 +02:00
Ad Schellevis
1a46ff7399
Firewall/Log, uppercase IPv6 proto, closes https://github.com/opnsense/core/issues/3734
2019-10-07 21:40:18 +02:00
Ad Schellevis
da4a241cfd
Firewall/SourceNat, don't store interace address, but a reference. closes https://github.com/opnsense/core/issues/3712
2019-10-07 21:34:48 +02:00