Michael Steenbeek
1bc9eb9afc
Process feedback
2019-02-01 16:15:54 +01:00
Michael Steenbeek
a3fbaffe28
Remove old ipaliases+vhid entries when syncing
2019-02-01 16:15:54 +01:00
Michael Steenbeek
ce4c5ab489
Also sync Virtual IPs with a VHID group to backup host
2019-02-01 16:15:54 +01:00
Michael Steenbeek
036468b916
Small cleanup of rc.filter_synchronize
2019-02-01 16:15:54 +01:00
Franco Fichtner
3ce9c740c7
src: support for 18.7 has ended
2019-01-24 18:15:37 +01:00
Franco Fichtner
c536751114
rc: squelch stray "OK" in boot sequence for now
2019-01-21 09:29:30 +01:00
Franco Fichtner
c6c3252dd3
rc: permanent location for patches
2019-01-20 14:58:52 +01:00
Franco Fichtner
9f935b533f
console: this is not entirely correct
2019-01-18 17:29:39 +01:00
Ad Schellevis
f201d02b6c
missed a spot in previous
2019-01-16 13:36:23 +01:00
Ad Schellevis
ac99876358
IPsec, add interface when phase1 is enabled, simplify logic. (from irc)
2019-01-16 13:21:54 +01:00
Michael Steenbeek
5689dc8048
Port reboot and shutdown pages to MVC ( #3133 )
2019-01-15 09:25:52 +01:00
Franco Fichtner
d8579502b7
system: remove some fluff from OpenSSL config
2019-01-14 09:49:03 +00:00
Michael Steenbeek
ea8dce33ba
Add option to create combined client and server certificate, closes #2800 ( #3130 )
2019-01-14 10:16:09 +01:00
Franco Fichtner
12b72e0edb
system: regenerate sample DH parameters
2019-01-11 07:14:09 +01:00
Max Weller
8464cfc31e
Generate correct config for "Hybrid-RSA + XAuth" IPSec ( #3117 )
2019-01-10 14:44:17 +00:00
Franco Fichtner
53024b5c15
unbound: prefer-ip6 is defaulting to 'no' for unbound
...
which makes this precaution a complication as unbound disables
IPv6 responses with it as well and we shouldn't set prefer-ip6
to 'yes' to avoid further breakage.
PR: https://forum.opnsense.org/index.php?topic=10810.0
2019-01-06 20:48:17 +01:00
Franco Fichtner
2b265279e5
src: change all instances to "comma-separated"
2019-01-06 15:04:28 +01:00
Michael Steenbeek
2c61e068a2
Small fixes ( #3096 )
2019-01-04 09:26:16 +01:00
Franco Fichtner
fada24d7c3
unbound: don't stop unbound_dhcpd twice, small refactor
...
Also see: https://www.reddit.com/r/OPNsenseFirewall/comments/aac7xj/does_this_pfsense_dns_bug_with_dhcp_and_multiple/
2019-01-04 07:43:50 +01:00
Franco Fichtner
0c751d732a
unbound: calculation is still suboptimal #3092
...
On the far side of the interval up to the next power of two
the lock contention increases drastically, meaning 31 threads
will only get 32 slabs etc.
2019-01-03 13:06:48 +00:00
Franco Fichtner
c6de22b584
unbound: optimize optimization calculation #3092
2019-01-03 13:52:08 +01:00
Franco Fichtner
a79a163a55
interfaces: allow OPT1 to carry anti-lockout #3005
...
When no LAN is present OPT1 can now be configured. To make sure that
anti-lockout doesn't shift never again assume that "LAN" can be assigned.
The same is already true for "WAN".
Some style while here...
2019-01-02 20:37:41 +01:00
Franco Fichtner
5c6f1d303c
shell: ask for OPT to be configured; closes #3005
2019-01-02 20:14:35 +01:00
Franco Fichtner
a43957ac94
system: `-d 0' is autmomatic, we don't have a GUI option
2018-12-30 22:27:15 +01:00
Ad Schellevis
8c0683540d
GRE + ip alias, for https://github.com/opnsense/core/pull/3080
2018-12-30 18:38:40 +01:00
Franco Fichtner
3bb0e00e19
interfaces: loosely related cleanups #2707
2018-12-30 14:04:22 +01:00
Martin Wasley
6dff027358
Add missing entries to Dpinger advanced section; closes #3077
...
It's only taken 8 months to do this.. impressive. :)
Modified by: @fichtner
2018-12-30 10:34:48 +01:00
Franco Fichtner
2bcc8f8a91
unbound: whitespace nit
2018-12-29 10:41:47 +01:00
Franco Fichtner
2c83768395
unbound: small error in previous #3051
2018-12-29 10:36:26 +01:00
Franco Fichtner
6cbae54033
unbound: since we support OpenVPN officially now...
...
fix the subnet of the tunnel network given via OpenVPN.
PR: https://github.com/opnsense/core/issues/3051
2018-12-29 10:32:45 +01:00
Franco Fichtner
ccd0f07fa8
interfaces: clear a faulty automatic DUID; closes #3061
2018-12-28 18:23:38 +01:00
Franco Fichtner
333dc0fce8
unbound: exclude OpenVPN from IP registration for #2828
2018-12-28 17:46:16 +01:00
Franco Fichtner
b6671c2b59
src: use new configdp_run() where appropriate
2018-12-25 09:27:47 +01:00
Franco Fichtner
3ba43c9728
backend: glue for parameter escaping
...
PR: https://github.com/opnsense/plugins/pull/1081
2018-12-24 15:58:58 +01:00
Michael Steenbeek
d27cc83642
Change foreach loops that don't use values to use array_keys()
2018-12-18 14:37:11 +01:00
Franco Fichtner
a1d6cd09f9
firmware: increase heat for upcoming 19.1-RC
2018-12-18 11:00:36 +01:00
Franco Fichtner
60f9ffea93
openvpn: make remote network optional
...
PR: https://twitter.com/simonszu/status/1074927719006306304
2018-12-18 12:30:41 +01:00
Martin Wasley
f41ca8d0fc
services: dhcpv6 override PD range fix; closes #3047
...
When using dhcpd6 overide, if the user does not enter a 'to' range
then at present the code writes an invalid PD range to dhcpd6.conf.
This change checks to see whether the user has entered a PD range,
if not then no PD range is written to the conf file.
2018-12-17 16:23:28 +01:00
Ad Schellevis
7d07a15fe0
HAsync, remove references to "automatic", since we don't usually sync automatic (maybe there are some spots left, which we better kill as well then). Add a link to the status page, to make it a bit more explicit in the settings.
...
discussed here https://github.com/opnsense/core/issues/2920
2018-12-17 11:27:25 +01:00
Franco Fichtner
5331c55c8c
interfaces: drop reload that is probably not even executed from the top
...
This has been on devel for a while and recent 18.7.x do not suggest
any problems in this particular area so let's just drop it.
2018-12-17 08:48:02 +01:00
Franco Fichtner
a285dc554b
openvpn: small cleanup
2018-12-17 08:46:55 +01:00
Franco Fichtner
d9f7574147
ipsec: mark descriptions "$unused" where appropriate
2018-12-16 21:17:43 +01:00
Franco Fichtner
14f8a4243e
system: minor whitespace cleanup
2018-12-16 20:54:29 +01:00
Ad Schellevis
8aa6da2fb0
cleanup notices to bare minimum, https://github.com/opnsense/core/pull/3031
2018-12-16 20:15:02 +01:00
Michael Steenbeek
0d7001ae68
Remove legacy SMTP notices (for #2919 ) ( #3031 )
...
* Remove remaining calls to notify_via_smtp()
* Remove SMTP notices code
* Remove SMTP notifications config from System/Settings/Notifications
* Move system beep settings to System/Settings/Miscellaneous, remove System/Settings/Notifications
2018-12-16 19:34:20 +01:00
Ad Schellevis
f9d9e09ebb
firewall/alias, signal table load errors to the user, it's not very obvious now that the table memory is defined too low. closes https://github.com/opnsense/core/issues/3046
2018-12-14 21:05:34 +01:00
Franco Fichtner
7060d4e633
interfaces: simplify once more
2018-12-13 16:21:32 +01:00
Franco Fichtner
4e8055fed3
system: there's no point globbing...
2018-12-13 10:51:24 +01:00
Franco Fichtner
6dcb9da10f
interfaces: simplify nameserver lookup
2018-12-13 10:47:15 +01:00
Michael Steenbeek
b36c30825c
Clean up IPsec log levels
2018-12-12 15:23:21 +01:00