Ad Schellevis
119cfac389
add new mvc aliases to legacy_list_aliases() for https://github.com/opnsense/core/issues/1858
2018-07-22 20:02:18 +02:00
Ad Schellevis
df7a9697d7
add new alias location in get_alias_description() for https://github.com/opnsense/core/issues/1858
2018-07-22 19:43:39 +02:00
Franco Fichtner
b8a4173671
interfaces: legacy_getall_interface_addresses() is for extracting...
...
... usable IP addresses, which tunnels seem to be not.
2018-07-22 14:03:19 +02:00
Franco Fichtner
94adc3d0fb
webgui: switch bind behaviour
...
PR: https://forum.opnsense.org/index.php?topic=9128.0
2018-07-22 13:55:31 +02:00
Franco Fichtner
427e10ed2d
interfaces: avoid pulling IPv6 tunnel addresses
2018-07-22 13:55:31 +02:00
Franco Fichtner
8db88f3659
openssh: switch to different interface bind approach
2018-07-22 13:55:31 +02:00
Franco Fichtner
b09363fea5
Revert "change rule "interface address" parsing to use "interface:0" in stead of "interface", for https://github.com/opnsense/core/issues/2457 "
...
This reverts commit 2408d6a1261f61206eab437d1b933d2ecf8fbfca.
2018-07-20 11:58:49 +02:00
Franco Fichtner
188b098110
dnsmasq: always listen on loopback, resolv.conf must know
...
PR: https://github.com/opnsense/core/issues/2562
2018-07-19 21:38:52 +02:00
Franco Fichtner
5f924d263b
src: style...again
2018-07-18 21:13:23 +02:00
Franco Fichtner
cac939caba
firmware: typo
2018-07-18 21:04:47 +02:00
Franco Fichtner
8fe31c997d
installer: keep typewriter end of sentence style for nostalgic reasons
2018-07-18 14:10:50 +02:00
stilez
bcb11c9682
After install, give basic tip that GUI IP can be set in console
...
If the user's existing subnet isn't 192.168.1.1/xx, then telling the user to use this IP will fail. So tell the user how to set a different IP after reboot, rather than just telling them to use an IP that won't work for them.
Kept short this time - 1 line only :)
Also edited wording re certificate, to be clearer about this as well, by starting with what they will actually see (*"Your browser may..."* rather than *"You might need to..."*). Added just 1 line there as well.
Sorry for these - hopefully not overdoing it. (I'm a fan of making life fun for newcomers, and install is where newcomers first see if a thing works for them!) Perhaps they can be squashed down to save text space. If so please do.
2018-07-18 14:06:27 +02:00
Franco Fichtner
3ed15b1abb
rc: tweak previous
...
* Align to max. 80 characters, squeezed to 4 lines
* Only use product name once
* Use proper branding name
2018-07-18 13:10:30 +02:00
stilez
a3f44847ef
Clarify install media login message/options ( #2557 )
2018-07-18 12:38:30 +02:00
Franco Fichtner
5a7cc069c4
system: more on backups #2535
2018-07-18 09:12:16 +02:00
Franco Fichtner
73e85829e8
system: work on backups a bit more #2535
...
Switch the static implementation to act like the MVC one. The BEGIN
and END tag removal is opportunistic because we don't need to shuffle
several configs into one and it still fails if the tags are not correct.
2018-07-18 08:47:53 +02:00
Franco Fichtner
7da7bed7d8
src: improve spacing in wpad additions
2018-07-18 08:20:40 +02:00
Franco Fichtner
7b51858e09
mvc: resurrect whitespace
2018-07-18 00:06:35 +02:00
Franco Fichtner
7466c2eb30
system: remove unused action_disable setting
2018-07-18 00:01:05 +02:00
Franco Fichtner
cb0dcb2b13
dashboard: tweaks for #2554
2018-07-17 23:41:07 +02:00
Ad Schellevis
6f333c123e
theme, detect if sidebar is loaded and link functionality when it is, move javascript logic into it's own script file.
2018-07-17 21:58:01 +02:00
Ad Schellevis
6e44a883e5
Merge branch 'Sidebar' of https://github.com/marjohn56/core into marjohn56-Sidebar
2018-07-17 18:14:12 +02:00
Ad Schellevis
9bcbd8a305
Nextclioud, regression
2018-07-17 18:04:30 +02:00
Ad Schellevis
c0d37accc5
NTPD/GPS, typo in SiRF selection
2018-07-17 14:42:13 +02:00
Ad Schellevis
1ddfad34c1
oops, ditch old return type
2018-07-17 09:31:39 +02:00
Ad Schellevis
939f53eff2
Firewall, exclude virtual ipv6 interfaces and change getInterfaceMapping() to generator type in the process
2018-07-17 09:23:20 +02:00
Franco Fichtner
2bf1200df8
firewall: cosmetic issue in bogons rule label
2018-07-17 09:18:17 +02:00
Ad Schellevis
46324ab7c7
Firewall, rework previous
2018-07-17 09:13:20 +02:00
Ad Schellevis
c0fcc2c38d
Firewall, bogons & privates, add ipprotocol to allow _stf interfaces to choose, for https://github.com/opnsense/core/issues/2546
2018-07-17 08:58:00 +02:00
Franco Fichtner
50fb5bcb0c
system: second part for #2535
2018-07-17 08:52:45 +02:00
Franco Fichtner
922c341974
firewall: copy description, and block priv/bogons #2546
2018-07-17 07:13:34 +02:00
Franco Fichtner
9747e1f328
firewall: like this better
2018-07-16 20:55:33 +02:00
Franco Fichtner
6227bb9220
firewall: actually use wan_stf, we need a hint from NtpRule #2546
2018-07-16 19:05:39 +02:00
Franco Fichtner
471149fac8
system: small cleanup for unused variables
2018-07-16 18:44:30 +02:00
Ad Schellevis
87c7d90857
Firewall/alias, fix is_alias() compatibility for https://github.com/opnsense/core/issues/1858
2018-07-16 18:29:05 +02:00
Ad Schellevis
14652b4fb1
openvpn export, move alias_expand() into single use-case, will be refactored later
2018-07-16 17:36:32 +02:00
Ad Schellevis
a02ad4cb00
Firewall, regression in forward reflection.
...
It looks like parseRdrRules() yields too many rdr rules, since it adds all reflection interfaces including the ones which don't serve the protocol of the interface.
Logically we should check if the selected interface has an address configured for the protocol at hand, like we seemed to have done for the nat rule following when nat reflection is enabled.
There might be some edge cases where we don't automatically render rules now, in cases where the interface doesn't have an address configured, but there's always an option to add forward rules manually.
2018-07-16 16:47:26 +02:00
Ad Schellevis
f12a931cac
Firewall/reflection, while working on https://github.com/opnsense/core/issues/2546 it seems that reflection rules are generated on IPv4 for IPv6 only interfaces, we should check before yielding new records.
...
ForwardRule likely has a similar issue
2018-07-16 10:29:27 +02:00
Ad Schellevis
445ffd1f79
Firewall, IPv6/stf, generate _stf interface and link to parent while parsing rules, for https://github.com/opnsense/core/issues/2546
...
The general idea here is to make it explicit that _stf generated another interface for IPv6 traffic, so we can use this knowledge when parsing rules easily.
2018-07-16 10:27:06 +02:00
Ad Schellevis
ac35e91dee
IDS, cleanup previously installed rules, which are known in the configuration but don't exist anymore in the definitions (uninstalled). Manually installed rules will remain untouched by this change. closes https://github.com/opnsense/core/pull/2448
2018-07-15 21:36:13 +02:00
Ad Schellevis
5d09ffdec1
phpdoc in previous
2018-07-15 20:51:43 +02:00
Ad Schellevis
3650787ae4
Firewall/alias, refactor alias usage when changing its name, for https://github.com/opnsense/core/issues/1858
2018-07-15 20:45:46 +02:00
Franco Fichtner
ea10cdb815
web proxy: guard resp/req ACL #2449
2018-07-15 20:31:47 +02:00
Franco Fichtner
d8c6c21f11
system: restart syslog if needed; closes #1130
2018-07-15 20:19:34 +02:00
Franco Fichtner
b36a3906e4
web proxy: allow to not use resp or req URL; closes #2449
2018-07-15 20:12:25 +02:00
Franco Fichtner
aa69410e65
unbound: update to latest root hints; closes #2147
...
We call the file ".min." so that our whitespace sweep does not
clean up whitespaces to retain the original checksum so that
the file can always be verified.
2018-07-15 20:05:49 +02:00
Franco Fichtner
6bbfcf4b02
system: allow USB-based serial ports; closes #2026
2018-07-15 19:47:43 +02:00
Franco Fichtner
086d372e7e
firmware: hide upgrade banner when update is done; closes #2514
2018-07-15 14:17:20 +02:00
Franco Fichtner
4cc324c862
system: make netflow labels clearer; closes #2197
2018-07-15 14:08:41 +02:00
Franco Fichtner
46438e696b
firmware: reboot hint only if download is possible; closes #2547
2018-07-15 14:00:27 +02:00
