3409 Commits

Author SHA1 Message Date
Michael Steenbeek
1bc9eb9afc Process feedback 2019-02-01 16:15:54 +01:00
Michael Steenbeek
a3fbaffe28 Remove old ipaliases+vhid entries when syncing 2019-02-01 16:15:54 +01:00
Michael Steenbeek
ce4c5ab489 Also sync Virtual IPs with a VHID group to backup host 2019-02-01 16:15:54 +01:00
Michael Steenbeek
036468b916 Small cleanup of rc.filter_synchronize 2019-02-01 16:15:54 +01:00
Franco Fichtner
3ce9c740c7 src: support for 18.7 has ended 2019-01-24 18:15:37 +01:00
Franco Fichtner
c536751114 rc: squelch stray "OK" in boot sequence for now 2019-01-21 09:29:30 +01:00
Franco Fichtner
c6c3252dd3 rc: permanent location for patches 2019-01-20 14:58:52 +01:00
Franco Fichtner
9f935b533f console: this is not entirely correct 2019-01-18 17:29:39 +01:00
Ad Schellevis
f201d02b6c missed a spot in previous 2019-01-16 13:36:23 +01:00
Ad Schellevis
ac99876358 IPsec, add interface when phase1 is enabled, simplify logic. (from irc) 2019-01-16 13:21:54 +01:00
Michael Steenbeek
5689dc8048 Port reboot and shutdown pages to MVC (#3133) 2019-01-15 09:25:52 +01:00
Franco Fichtner
d8579502b7 system: remove some fluff from OpenSSL config 2019-01-14 09:49:03 +00:00
Michael Steenbeek
ea8dce33ba Add option to create combined client and server certificate, closes #2800 (#3130) 2019-01-14 10:16:09 +01:00
Franco Fichtner
12b72e0edb system: regenerate sample DH parameters 2019-01-11 07:14:09 +01:00
Max Weller
8464cfc31e Generate correct config for "Hybrid-RSA + XAuth" IPSec (#3117) 2019-01-10 14:44:17 +00:00
Franco Fichtner
53024b5c15 unbound: prefer-ip6 is defaulting to 'no' for unbound
which makes this precaution a complication as unbound disables
IPv6 responses with it as well and we shouldn't set prefer-ip6
to 'yes' to avoid further breakage.

PR: https://forum.opnsense.org/index.php?topic=10810.0
2019-01-06 20:48:17 +01:00
Franco Fichtner
2b265279e5 src: change all instances to "comma-separated" 2019-01-06 15:04:28 +01:00
Michael Steenbeek
2c61e068a2 Small fixes (#3096) 2019-01-04 09:26:16 +01:00
Franco Fichtner
fada24d7c3 unbound: don't stop unbound_dhcpd twice, small refactor
Also see: https://www.reddit.com/r/OPNsenseFirewall/comments/aac7xj/does_this_pfsense_dns_bug_with_dhcp_and_multiple/
2019-01-04 07:43:50 +01:00
Franco Fichtner
0c751d732a unbound: calculation is still suboptimal #3092
On the far side of the interval up to the next power of two
the lock contention increases drastically, meaning 31 threads
will only get 32 slabs etc.
2019-01-03 13:06:48 +00:00
Franco Fichtner
c6de22b584 unbound: optimize optimization calculation #3092 2019-01-03 13:52:08 +01:00
Franco Fichtner
a79a163a55 interfaces: allow OPT1 to carry anti-lockout #3005
When no LAN is present OPT1 can now be configured.  To make sure that
anti-lockout doesn't shift never again assume that "LAN" can be assigned.
The same is already true for "WAN".

Some style while here...
2019-01-02 20:37:41 +01:00
Franco Fichtner
5c6f1d303c shell: ask for OPT to be configured; closes #3005 2019-01-02 20:14:35 +01:00
Franco Fichtner
a43957ac94 system: `-d 0' is autmomatic, we don't have a GUI option 2018-12-30 22:27:15 +01:00
Ad Schellevis
8c0683540d GRE + ip alias, for https://github.com/opnsense/core/pull/3080 2018-12-30 18:38:40 +01:00
Franco Fichtner
3bb0e00e19 interfaces: loosely related cleanups #2707 2018-12-30 14:04:22 +01:00
Martin Wasley
6dff027358 Add missing entries to Dpinger advanced section; closes #3077
It's only taken 8 months to do this.. impressive. :)

Modified by: @fichtner
2018-12-30 10:34:48 +01:00
Franco Fichtner
2bcc8f8a91 unbound: whitespace nit 2018-12-29 10:41:47 +01:00
Franco Fichtner
2c83768395 unbound: small error in previous #3051 2018-12-29 10:36:26 +01:00
Franco Fichtner
6cbae54033 unbound: since we support OpenVPN officially now...
fix the subnet of the tunnel network given via OpenVPN.

PR: https://github.com/opnsense/core/issues/3051
2018-12-29 10:32:45 +01:00
Franco Fichtner
ccd0f07fa8 interfaces: clear a faulty automatic DUID; closes #3061 2018-12-28 18:23:38 +01:00
Franco Fichtner
333dc0fce8 unbound: exclude OpenVPN from IP registration for #2828 2018-12-28 17:46:16 +01:00
Franco Fichtner
b6671c2b59 src: use new configdp_run() where appropriate 2018-12-25 09:27:47 +01:00
Franco Fichtner
3ba43c9728 backend: glue for parameter escaping
PR: https://github.com/opnsense/plugins/pull/1081
2018-12-24 15:58:58 +01:00
Michael Steenbeek
d27cc83642 Change foreach loops that don't use values to use array_keys() 2018-12-18 14:37:11 +01:00
Franco Fichtner
a1d6cd09f9 firmware: increase heat for upcoming 19.1-RC 2018-12-18 11:00:36 +01:00
Franco Fichtner
60f9ffea93 openvpn: make remote network optional
PR: https://twitter.com/simonszu/status/1074927719006306304
2018-12-18 12:30:41 +01:00
Martin Wasley
f41ca8d0fc services: dhcpv6 override PD range fix; closes #3047
When using dhcpd6 overide, if the user does not enter a 'to' range
then at present the code writes an invalid PD range to dhcpd6.conf.
This change checks to see whether the user has entered a PD range,
if not then no PD range is written to the conf file.
2018-12-17 16:23:28 +01:00
Ad Schellevis
7d07a15fe0 HAsync, remove references to "automatic", since we don't usually sync automatic (maybe there are some spots left, which we better kill as well then). Add a link to the status page, to make it a bit more explicit in the settings.
discussed here https://github.com/opnsense/core/issues/2920
2018-12-17 11:27:25 +01:00
Franco Fichtner
5331c55c8c interfaces: drop reload that is probably not even executed from the top
This has been on devel for a while and recent 18.7.x do not suggest
any problems in this particular area so let's just drop it.
2018-12-17 08:48:02 +01:00
Franco Fichtner
a285dc554b openvpn: small cleanup 2018-12-17 08:46:55 +01:00
Franco Fichtner
d9f7574147 ipsec: mark descriptions "$unused" where appropriate 2018-12-16 21:17:43 +01:00
Franco Fichtner
14f8a4243e system: minor whitespace cleanup 2018-12-16 20:54:29 +01:00
Ad Schellevis
8aa6da2fb0 cleanup notices to bare minimum, https://github.com/opnsense/core/pull/3031 2018-12-16 20:15:02 +01:00
Michael Steenbeek
0d7001ae68 Remove legacy SMTP notices (for #2919) (#3031)
* Remove remaining calls to notify_via_smtp()
* Remove SMTP notices code
* Remove SMTP notifications config from System/Settings/Notifications
* Move system beep settings to System/Settings/Miscellaneous, remove System/Settings/Notifications
2018-12-16 19:34:20 +01:00
Ad Schellevis
f9d9e09ebb firewall/alias, signal table load errors to the user, it's not very obvious now that the table memory is defined too low. closes https://github.com/opnsense/core/issues/3046 2018-12-14 21:05:34 +01:00
Franco Fichtner
7060d4e633 interfaces: simplify once more 2018-12-13 16:21:32 +01:00
Franco Fichtner
4e8055fed3 system: there's no point globbing... 2018-12-13 10:51:24 +01:00
Franco Fichtner
6dcb9da10f interfaces: simplify nameserver lookup 2018-12-13 10:47:15 +01:00
Michael Steenbeek
b36c30825c Clean up IPsec log levels 2018-12-12 15:23:21 +01:00