Franco Fichtner
17b3374c8b
system: fix setting net.link.bridge.pfil_member; closes #1180
2016-09-21 18:48:19 +02:00
Franco Fichtner
f88210b49e
rc: if -devel package allow phar for unit testing
2016-09-21 08:19:14 +02:00
Franco Fichtner
fed56b4ad6
rc: revamp rc.loader
...
We only merge chunks for loader.conf leaveraging a priority scheme
in order to be able to override standard modifications made by e.g.
core or plugins (in case of user changes).
Start to work on its scripts, but 20-console is dynamic so it needs
more work in the actual PHP code.
Discussed with: @adschellevis
2016-09-21 07:28:39 +02:00
Franco Fichtner
9a117cd0ff
rc: syshook print improvements
2016-09-21 07:10:08 +02:00
Avi H. D
e6f5a19190
Add CSV capability information to 'SSL no bump sites' form tool tip
2016-09-19 09:56:04 +02:00
Franco Fichtner
5a21a07ab4
interfaces: fix missing help toggle in settings
...
Reported by: Simon Brunet
2016-09-19 08:56:07 +02:00
Franco Fichtner
d569a8e180
access: allow root disable and prevent to disable own user
...
PR: https://forum.opnsense.org/index.php?topic=3684
2016-09-19 07:49:35 +02:00
Franco Fichtner
2f5468ae66
firewall: not my day :)
2016-09-18 20:26:33 +02:00
Franco Fichtner
1a2ab2afe5
src: whitespace sweep
2016-09-18 20:14:33 +02:00
Franco Fichtner
d27cdb4351
firewall: and another one
2016-09-18 20:08:26 +02:00
Franco Fichtner
1334374b61
firewall: fix typo
2016-09-18 20:07:22 +02:00
Franco Fichtner
0cd0c89575
firewall: tweak previous changes, '[+]' ASCII art will be confusing
...
Expand / join the descriptive text and explain floating rules a bit more.
2016-09-18 20:03:28 +02:00
Franco Fichtner
8f243538ad
consistent fix for 64f3742fb3
2016-09-18 18:34:02 +02:00
Ad Schellevis
86996d7bf7
(unbound) get_interface_subnet(v6) can return null, ignore network in that case.
...
Eventually we should move this kind of "get all attached networks" to a single and simple function, which uses legacy_get_interface_addresses() underneath. but there's still too much obscure code in this region to remove it easily
2016-09-18 12:18:48 +02:00
Ad Schellevis
ffbb29e414
(interfaces.inc) move single used find_interface_subnetv6() into get_interface_subnetv6()
2016-09-18 12:13:25 +02:00
Franco Fichtner
4461ea2391
rc: order syshooks by name
2016-09-16 17:09:06 +02:00
Franco Fichtner
4e16a07515
auth: parse for "\0", allow empty password for #998
2016-09-16 16:55:02 +02:00
Franco Fichtner
803af49280
interfaces: defang netgraph attach/detach for #1188
...
We don't particularly need this code and the utility as netgraph
is always attached on load as long as we don't detach and the
attach per interface is a custom feature that requires a kernel
patch we don't want to keep around for 17.1.
Only thing we need to measure is the performance impact of not
detaching netgraph. This only pertains to ethernet devices
anyway.
We do, however, keep interface_netgraph_needed() around for
reference as it's harmless by default.
2016-09-16 15:27:30 +02:00
Franco Fichtner
250a1493d8
pkg: it's ok for -devel to pull in the PAM glue now
2016-09-16 09:46:22 +02:00
Franco Fichtner
0cdd609ec6
pkg: omit spurious delete
2016-09-16 09:18:47 +02:00
Ad Schellevis
0be295ac38
(firewall, nati) wrong validation
2016-09-15 19:36:36 +02:00
Ad Schellevis
cdf0573539
(captive portal) also remove unactive zones on CP stop
2016-09-15 15:58:04 +02:00
Ad Schellevis
cc18336d35
(captive portal) when using multiple zones, uninstall the correct zone directories
2016-09-15 15:48:55 +02:00
Ad Schellevis
190ac1064d
Merge pull request #1186 from evbevz/ldap-auth-fix
...
LDAP fix: handle legal boolean return result from searchUsers()
2016-09-15 15:26:04 +02:00
Ad Schellevis
f107116e7d
ditch load_mac_manufacturer_table, replace with configd call
2016-09-15 15:21:04 +02:00
Ad Schellevis
5ad7adc60a
remove duplicate checks in interfaces.inc
2016-09-15 14:46:33 +02:00
Ad Schellevis
0db74efff4
lets not try to hide issues with a NIC, 11 year old code.
2016-09-15 14:30:40 +02:00
Ad Schellevis
2f86048748
Merge pull request #1187 from opnsense/carp_improvements
...
Carp improvements
2016-09-15 11:51:16 +02:00
Ad Schellevis
dcd0e06867
small style changes
2016-09-15 11:29:49 +02:00
Ad Schellevis
2c25e3e31c
oops, wrong block...
2016-09-15 11:18:44 +02:00
Ad Schellevis
75e7e0e44d
cleanup carp_status.php
2016-09-15 11:15:38 +02:00
Ad Schellevis
51aec445ec
fix typo
2016-09-15 10:33:13 +02:00
Ad Schellevis
5497ae4e78
revert carp to BSD standards
2016-09-15 10:27:38 +02:00
evbevz
652089dd78
LDAP fix: handle legal boolean return result from searchUsers()
2016-09-15 10:26:38 +03:00
Ad Schellevis
c782d9e813
remove unused link_ip_to_carp_interface in interfaces.inc
2016-09-14 21:30:47 +02:00
Ad Schellevis
5c6a2ef883
remove duplicate code in interfaces.inc
2016-09-14 21:23:50 +02:00
Ad Schellevis
87011debbf
(vips) remove odd logic
2016-09-14 21:21:09 +02:00
Ad Schellevis
1ccf6b4527
remove idletimeout requirement for ondemand connections
2016-09-14 20:08:37 +02:00
Ad Schellevis
b56bcf8392
wrap gettext() , closes https://github.com/opnsense/core/issues/1181
2016-09-14 10:29:50 +02:00
Ad Schellevis
ac8eba7d0f
another test
2016-09-13 20:28:30 +02:00
Ad Schellevis
bc2765ea86
bring vips down when interface is down, fix carp setup order.
2016-09-12 20:50:52 +02:00
Ad Schellevis
b90babbfd2
add opnsense-auth helper for pam support, https://github.com/opnsense/core/issues/998
2016-09-12 20:38:48 +02:00
Ad Schellevis
7b59e10cf8
(openvpn, auth) remove dead code
2016-09-12 18:36:11 +02:00
Ad Schellevis
9ba2b2f620
(ipsec, xauth) cleanup ipsec.auth-user.php script before moving to pam.
...
The old script had a lot of unused code in it, either stuff that couldn't be configured from OPNsense or dead code.
2016-09-12 18:16:46 +02:00
Ad Schellevis
f4e6e6f457
add some comments
2016-09-09 21:09:49 +02:00
Ad Schellevis
c7b1e46219
(interfaces/qinq) fix typo's
2016-09-09 18:02:48 +02:00
Ad Schellevis
ed4c923c97
Revert "(ids) style fix", aaa0ddafe1 can cause "Allowed memory size of ... bytes exhausted", better to set a sane default max here.
...
This reverts commit aaa0ddafe1179cebc68146bdc3c30b8b90c564b8.
2016-09-09 15:16:25 +02:00
Ad Schellevis
cf34abbac4
(firmware) change loader.conf.local generation, as discussed with @fichtner
2016-09-09 09:43:06 +02:00
Ad Schellevis
65653b7c97
missing global in filter.inc
2016-09-08 15:06:12 +02:00
Ad Schellevis
0e158f0b0c
(filter.inc) simply check if not empty
2016-09-08 14:05:33 +02:00