3099 Commits

Author SHA1 Message Date
Ad Schellevis
119cfac389 add new mvc aliases to legacy_list_aliases() for https://github.com/opnsense/core/issues/1858 2018-07-22 20:02:18 +02:00
Ad Schellevis
df7a9697d7 add new alias location in get_alias_description() for https://github.com/opnsense/core/issues/1858 2018-07-22 19:43:39 +02:00
Franco Fichtner
b8a4173671 interfaces: legacy_getall_interface_addresses() is for extracting...
... usable IP addresses, which tunnels seem to be not.
2018-07-22 14:03:19 +02:00
Franco Fichtner
94adc3d0fb webgui: switch bind behaviour
PR: https://forum.opnsense.org/index.php?topic=9128.0
2018-07-22 13:55:31 +02:00
Franco Fichtner
427e10ed2d interfaces: avoid pulling IPv6 tunnel addresses 2018-07-22 13:55:31 +02:00
Franco Fichtner
8db88f3659 openssh: switch to different interface bind approach 2018-07-22 13:55:31 +02:00
Franco Fichtner
188b098110 dnsmasq: always listen on loopback, resolv.conf must know
PR: https://github.com/opnsense/core/issues/2562
2018-07-19 21:38:52 +02:00
Franco Fichtner
3ed15b1abb rc: tweak previous
* Align to max. 80 characters, squeezed to 4 lines
* Only use product name once
* Use proper branding name
2018-07-18 13:10:30 +02:00
stilez
a3f44847ef Clarify install media login message/options (#2557) 2018-07-18 12:38:30 +02:00
Franco Fichtner
7da7bed7d8 src: improve spacing in wpad additions 2018-07-18 08:20:40 +02:00
Franco Fichtner
7466c2eb30 system: remove unused action_disable setting 2018-07-18 00:01:05 +02:00
Ad Schellevis
939f53eff2 Firewall, exclude virtual ipv6 interfaces and change getInterfaceMapping() to generator type in the process 2018-07-17 09:23:20 +02:00
Franco Fichtner
2bf1200df8 firewall: cosmetic issue in bogons rule label 2018-07-17 09:18:17 +02:00
Ad Schellevis
46324ab7c7 Firewall, rework previous 2018-07-17 09:13:20 +02:00
Ad Schellevis
c0fcc2c38d Firewall, bogons & privates, add ipprotocol to allow _stf interfaces to choose, for https://github.com/opnsense/core/issues/2546 2018-07-17 08:58:00 +02:00
Franco Fichtner
9747e1f328 firewall: like this better 2018-07-16 20:55:33 +02:00
Franco Fichtner
471149fac8 system: small cleanup for unused variables 2018-07-16 18:44:30 +02:00
Ad Schellevis
87c7d90857 Firewall/alias, fix is_alias() compatibility for https://github.com/opnsense/core/issues/1858 2018-07-16 18:29:05 +02:00
Ad Schellevis
14652b4fb1 openvpn export, move alias_expand() into single use-case, will be refactored later 2018-07-16 17:36:32 +02:00
Franco Fichtner
d8c6c21f11 system: restart syslog if needed; closes #1130 2018-07-15 20:19:34 +02:00
Franco Fichtner
aa69410e65 unbound: update to latest root hints; closes #2147
We call the file ".min." so that our whitespace sweep does not
clean up whitespaces to retain the original checksum so that
the file can always be verified.
2018-07-15 20:05:49 +02:00
Franco Fichtner
6bbfcf4b02 system: allow USB-based serial ports; closes #2026 2018-07-15 19:47:43 +02:00
Franco Fichtner
fdc52df6d5 src: style sweep 2018-07-14 18:04:49 +00:00
Daniil Baturin
7c833ea3d6 Add a special case for /31 networks to openvpn_get_interface_ip() (another instance of #2529). 2018-07-14 19:50:59 +02:00
Franco Fichtner
91ed6de294 dhcp: remvoe excess whitespace 2018-07-14 14:13:13 +02:00
Franco Fichtner
3b8c5da4e2 rc: stf... stf everywhere 2018-07-14 11:32:43 +02:00
Franco Fichtner
24f1d05c77 openvpn: p2p_tls is also used by client so treat all of it accordingly
PR: https://forum.opnsense.org/index.php?topic=9133.0
2018-07-12 11:45:27 +02:00
Franco Fichtner
69fef9cb9e openvpn: translate validated field names while at it #2536 2018-07-12 08:36:26 +02:00
Franco Fichtner
399d719ede openvpn: avoid accepting /32 "networks" where hosts are not allowed #2536
192.168.1.1/32 is not accepted, but 192.168.1.0/32 was.
2018-07-12 08:21:54 +02:00
Franco Fichtner
a7846bdaba system: use priv-sep for remote backup 2018-07-11 14:24:34 +00:00
Franco Fichtner
195cec19c4 system: do not use down / forced down for gateway switching
PR: https://forum.opnsense.org/index.php?topic=9115.0
2018-07-11 11:46:08 +02:00
Franco Fichtner
18569b5633 console: like setaddr.sh also reset DHCPv6 configuration 2018-07-11 08:47:20 +02:00
Franco Fichtner
c5f345334e ipsec: prettier label 2018-07-10 20:33:31 +02:00
Ad Schellevis
76bad0d5cc IPsec, rename option, closes https://github.com/opnsense/core/issues/2531 2018-07-10 18:41:28 +02:00
Ad Schellevis
1b9db2bf7d whitespace 2018-07-10 09:11:30 +02:00
Ad Schellevis
82c869df89 IPSec, add pks+eap-tls scheme for https://github.com/opnsense/core/issues/2531 2018-07-10 09:10:01 +02:00
Ad Schellevis
5b9d4240c3 IPsec, attr.subnet seems to send the wrong networks to the client, align to phase2 entries, for https://github.com/opnsense/core/issues/2531 2018-07-09 22:47:07 +02:00
Franco Fichtner
0c1e39fdbe rc: cosmetics for account expiry 2018-07-09 08:56:27 +02:00
Franco Fichtner
c6034f651c interfaces: I don't know why but it makes more sense to me... #2521 2018-07-08 20:10:40 +02:00
Franco Fichtner
bc378402b5 interfaces: retain zapped prefix length calculation #2521 2018-07-08 20:04:25 +02:00
Franco Fichtner
83f8321bce interfaces: allow /0 to /32 in 6rd #2521 2018-07-08 10:58:38 +00:00
Franco Fichtner
6df682c9dd interfaces: allow 6rd prefix 0 which is prefix 32 ? #2521 2018-07-08 10:35:21 +00:00
Fabian Franz BSc
095c7ae491 Unbound: add WPAD (#2097) 2018-07-06 21:41:24 +02:00
Fabian Franz BSc
8257d1abfa add WPAD to dhcp server (#2088) 2018-07-06 21:38:51 +02:00
Ad Schellevis
c2e75d2606 firewall/alias, forgot to select external aliases in legacy_list_aliases() 2018-07-06 16:57:18 +02:00
Franco Fichtner
a9159026dc firewall: properly extract first error from pfctl
While here, we no longer need the ALTQ trickery.
2018-07-02 17:25:27 +00:00
Franco Fichtner
bd59d9a5ad unbound: reformat, bump copyright after recent changes 2018-07-02 18:31:04 +02:00
Franco Fichtner
ad6c7384e4 dnsmasq: second part of slurp rework
Align this code with Unbound, slowly ridding ourselves of
get_possible_listen_ips() in the process as well.

PR: https://twitter.com/wget42/status/1009886764155260928
2018-07-02 16:21:02 +00:00
Franco Fichtner
f344e9d447 dnsmasq: slurp all addresses for bind
PR: https://twitter.com/wget42/status/1009886764155260928
2018-07-02 17:58:01 +02:00
Franco Fichtner
0e26ebe473 filter: we split ":", but it can be a character in the interface :D
"no IP address found for ovpnc2:0 - The line in question reads [0]:"

PR: https://forum.opnsense.org/index.php?topic=9030.0
2018-07-02 16:05:02 +02:00