11402 Commits

Author SHA1 Message Date
Franco Fichtner
11106c4990 vxlan: the idea was to have pluggable device code :)
While here change the expected device name from "vxlan.X" to "vxlanX",
since "." denotes the newer FreeBSD VLAN ID syntax on top of parent
devices (e.g. "igb0.12") and all devices should follow the regex of
"^[a-z]+[0-9]+".
2019-11-03 12:28:56 +01:00
Ad Schellevis
5db422e0cc VXLAN model version and proper description 2019-11-02 16:01:50 +01:00
Ad Schellevis
6628ae2e40
VXLAN support (#3787)
* VXLAN: hook vxlan_configure_interface to newwanip event, move interface (address) configuration responisibilty there as well. This might be a better spot for other device setups as well.
2019-11-01 21:25:27 +01:00
Franco Fichtner
c20b0083ef firmware: add /etc/remote to whitelist, NTP GPS uses it 2019-11-01 20:13:49 +01:00
Franco Fichtner
b97789b2d9 plugins: extend reach to "configurable" reject spots 2019-11-01 15:31:49 +01:00
Franco Fichtner
f2d6a44b4c plugins: add plugins_devices() facility for device plugging 2019-11-01 11:13:48 +01:00
Ad Schellevis
2afb3777b8 MVC: NetworkField type, add "NetMaskAllowed" option to validate on single addresses 2019-10-31 16:30:14 +01:00
Franco Fichtner
a2aec6c76e reporting: empty netflow egress default passes validation 2019-10-31 11:23:42 +01:00
Franco Fichtner
296a7e3c39 system: generate self-signed server certificate for web GUI 2019-10-31 10:13:09 +01:00
Franco Fichtner
48e0c47a96 interfaces: remove the "Directly send SOLICIT" option
We already do a more-or-less hybrid approach by starting rtsold
even if it isn't used at all.  Now we also have ISPs which do
not seem to send router advertisements after successful connect
so that the reconnect misses the HUP for dhcp6c to fix the
connectivity again.

To change that remove the option and its only conditional to
behave unconditionally which has few reasons to cause regressions.
2019-10-31 09:14:35 +01:00
Ad Schellevis
4465f108bf Proxy: fix validation, missed backreference 2019-10-30 15:36:11 +01:00
Ad Schellevis
5b159832eb Firmware: add "copy to clipboard" button in update textbox. 2019-10-30 13:22:20 +01:00
Franco Fichtner
f621e1ff3c system: small style update on previous 2019-10-30 10:36:30 +01:00
Ad Schellevis
875a1e2d4a authentication: extend opnsense-auth to respond with json encoded data when the authenticator received additional properties (such as framed ip addresses, groups, etc). needed for https://github.com/opnsense/core/issues/3266 should be a non-breaking change, since current authentication sequences only use the return code. 2019-10-30 10:25:01 +01:00
Franco Fichtner
f098b3a9ba pkg: suricata with RUST builtin doesn't work everywhere yet 2019-10-29 12:04:09 +01:00
Franco Fichtner
4e677c2b62 webproxy: indent 2019-10-29 11:02:59 +01:00
Franco Fichtner
ee0e6c2cef webproxy: constraint to proper place 2019-10-29 10:57:33 +01:00
Ad Schellevis
bb06e1a5e1
Switch backup to Google api php client v2 (#3778) 2019-10-29 10:34:23 +01:00
Franco Fichtner
900b23a97b unbound: add reload
PR: https://github.com/opnsense/plugins/pull/1554
2019-10-29 09:17:20 +01:00
Franco Fichtner
df0734b37b firmware: expect pkg to be installed as non-automatic #3473 2019-10-28 10:44:34 +01:00
Franco Fichtner
d643488126 reporting: a bit more shell script style 2019-10-28 09:20:03 +01:00
Franco Fichtner
820d5c2f32 ipsec: a bit more coding style 2019-10-28 09:13:42 +01:00
Franco Fichtner
25e4673c67 src: whitespace sweep 2019-10-27 18:42:31 +01:00
Frank Brendel
5b6b56aac8 netflow: improve error handling in rc.d script (#3658) 2019-10-27 15:08:33 +01:00
Ad Schellevis
9cbc0aa5af HASync, oops, needed an array. also for https://github.com/opnsense/core/issues/3779 2019-10-24 10:22:18 +02:00
Ad Schellevis
63769daaa9 HAsync, missed a spot for https://github.com/opnsense/core/issues/3779 2019-10-24 10:18:43 +02:00
Ad Schellevis
c6cb6df8ff HASync, add interface groups for https://github.com/opnsense/core/issues/3779 2019-10-24 10:09:28 +02:00
Franco Fichtner
953ada8761 system: Syslog-ng 3.24 2019-10-23 16:20:49 +02:00
Ad Schellevis
ac80046261 access space in previous 2019-10-18 08:58:38 +02:00
Ad Schellevis
7f3703d99d filter/schedules: log cause of reload in case of scheduled filter reconfigure. (to explain messages like kernel: pflog0: promiscuous mode disabled on periodic intervals) 2019-10-18 08:56:18 +02:00
Ad Schellevis
b609eed0c7 plugins, log executed tasks in configute and run. closes https://github.com/opnsense/core/issues/3771 2019-10-18 08:34:35 +02:00
Ad Schellevis
fa6bec1725 Merge branch 'strima-master' 2019-10-17 18:41:52 +02:00
Ad Schellevis
b02c7bb02f Fix style issues for https://github.com/opnsense/core/pull/3768 and make sure openssl_pkey_get_private using the correct params (https://www.php.net/manual/en/function.openssl-pkey-get-private.php). 2019-10-17 18:41:08 +02:00
Ad Schellevis
7431745c71 Merge branch 'master' of https://github.com/strima/core into strima-master 2019-10-17 17:51:17 +02:00
Franco Fichtner
bdfefacbc3 system: partial removal on previous #3770 2019-10-17 09:36:34 +02:00
Franco Fichtner
1a5da5c0a6 system: correct sysctl description; closes #3770 2019-10-17 09:35:26 +02:00
Martin Strigl
f0efe0f014 * added getKeyType to correctly handle private key type and therefore skip hardcoded RSA type in ipsec.secrets 2019-10-16 21:30:00 +02:00
Franco Fichtner
9299386602 system: fix PHP loop fail in tunable
Maybe 7.2.23 is broken, never seen this before.  oO

PR: https://forum.opnsense.org/index.php?topic=14652.0
2019-10-14 09:23:29 +02:00
Ad Schellevis
4f3781cfa9 dpinger: missing $gateways_arr in dpinger_status(), closes https://github.com/opnsense/core/issues/3759 2019-10-13 15:18:11 +02:00
Ad Schellevis
d5bd3a6cb7 dpinger: add details to status, so we can easily reproduce the outcome. for https://github.com/opnsense/core/issues/3759 2019-10-13 12:52:21 +02:00
Ad Schellevis
bb7557d38f pluginctl, add run mode, so we can execute things like "pluginctl -r return_gateways_status". easier to ask the user when debugging.
while looking into https://github.com/opnsense/core/issues/3759
2019-10-13 12:39:09 +02:00
Ad Schellevis
7a5a2712cd tokenize2 fix for https://github.com/opnsense/core/issues/3760
a4217d8fcc calls tokenize2() before it seems to be inititalized, lets check for content before calling clear.
2019-10-10 20:54:55 +02:00
Frank Wall
89918fc1de captive portal/ipsec: add description to restart actions (#3755) 2019-10-10 14:49:04 +02:00
sooslaca
69139fcbb2 Hide leaking hostname on SSH password auth (#3754) 2019-10-10 13:35:50 +02:00
Ad Schellevis
817be51986 configd: improve error handling while configd is either not active or not functional.
- reconnecting the socket stream_socket_client() is safe while not executing commands
- if configd dies during communication, we should log and retun an empty response. The caller should handle operation, since you can't be sure restarting the action is a safe operation.

closes https://github.com/opnsense/core/pull/3744
2019-10-10 09:59:08 +02:00
Franco Fichtner
65212fcded pkg: can't help it, change space to tab :D 2019-10-09 19:40:08 +02:00
Ad Schellevis
c4fba1c62e LDAP/StartTLS userimport, start using correct url and move logic to legacy page. for https://github.com/opnsense/core/issues/3445 2019-10-09 17:52:21 +02:00
Ad Schellevis
ec613d3042 switch to suricata 5.0.0-rc1 for -devel version 2019-10-09 16:15:01 +02:00
Ad Schellevis
1a46ff7399 Firewall/Log, uppercase IPv6 proto, closes https://github.com/opnsense/core/issues/3734 2019-10-07 21:40:18 +02:00
Ad Schellevis
da4a241cfd Firewall/SourceNat, don't store interace address, but a reference. closes https://github.com/opnsense/core/issues/3712 2019-10-07 21:34:48 +02:00