lucaspalomodevelop/core
1
0
Fork 0
mirror of https://github.com/lucaspalomodevelop/core.git synced 2026-03-17 01:54:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
13,545 Commits 1 Branch 0 Tags
Commit Graph

13545 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Franco Fichtner
1ccfd260e9 firmware: show "misconfigured" first before defaulting to "orphaned" 
The reason for this is the plugin conflict dialog pops up but it is
unclear what it wants.  Once reset the orphaned status will be dispayed.
 2022-01-05 08:36:05 +01:00
Franco Fichtner
a7ad2845a1 mvc: translate screen reader labels where we can 2022-01-05 07:54:38 +01:00
Franco Fichtner
a5f1e2c7c4 system: default to 1000 for net.inet6.ip6.intr_queue_maxlen 
We do the same for IPv4.  While here enforce these sysctls
instead of relying on the existence of tunables.
 2022-01-04 17:22:21 +01:00
Franco Fichtner
208be46ce2 pkg: happy new year! 2022-01-03 11:21:26 +01:00
Franco Fichtner
f7ebd85268 system: add Polish, degrade Italian 2022-01-03 10:53:18 +01:00
Franco Fichtner
98a049a904 src: translation style issues 2022-01-03 10:29:56 +01:00
Ad Schellevis
dd1776030c IPSec - change default ciphers and hash algoritms to more secure variants and add a note about unsecure options. closes https://github.com/opnsense/core/issues/5450 2021-12-31 20:13:34 +01:00
Ad Schellevis
a5dfeb476a mvc: Add <hint> support for text fields, pull in and reformat https://github.com/opnsense/core/pull/5442 2021-12-31 16:01:13 +01:00
kulikov-a
36e12e1d7d
Firewall: Log Files: Live View - simplify previous (#5444) 
since config data is always html-safe  html() method can be used directly
 2021-12-31 13:38:45 +01:00
Ad Schellevis
ce0186236c Firewall: Log Files: Live View - fix escape, closes https://github.com/opnsense/core/issues/5432 
escape info popup fields as well
 2021-12-31 10:23:42 +01:00
Ad Schellevis
5da7349a12 Firewall: Log Files: Live View - fix escape, closes https://github.com/opnsense/core/issues/5432 
unescape label texts before flusing to td element.
 2021-12-31 09:31:38 +01:00
Franco Fichtner
6439c039d5 src: whitespace sweep 2021-12-29 12:54:16 +01:00
kulikov-a
d7a1d9fa75
MVC - initFormAdvancedUI: universal stripes adjustment (#5435) 2021-12-28 14:55:30 +01:00
Franco Fichtner
d6494ab06e src: whitespace sweep 2021-12-28 11:15:49 +01:00
vnxme
aa20ccba4c
Firewall/Scrub: Display interface descriptions (#5433) 2021-12-28 09:07:41 +01:00
Christian Tramnitz
de3a021dd9 fix strict-order 
Currently, when configured, "strict-order" adds the necessary "strict-order" argument. However, the hardcoded "all-servers" arguments overrides this, making "strict-order" pointless.

With this change, "all-servers" and "strict-order" are mutually exclusive.
 2021-12-27 07:32:50 +01:00
Christian Tramnitz
b2bca01f9c fix copy-and-paste error in help div 2021-12-27 07:31:53 +01:00
kulikov-a
cece0d28de
MVC - handleFormValidation : improve item match (#5428) 2021-12-26 19:29:14 +01:00
Bryce Verdier
26df508f07
Services / Intrusion detection - downloader.py style fixes (#5413) 2021-12-23 19:41:05 +01:00
kulikov-a
2aeaca5ad2
Firewall/Live View: skip rid for nat (#5424) 2021-12-22 20:29:48 +01:00
Franco Fichtner
f83209cae3 captive portal: use -f when deleting files that may not be there 
Originally looked into

    Starting API dispatcher
    2021-12-22 11:03:56: (configfile.c.426) Warning: mod_auth should be listed in server.modules before dynamic backends such as mod_cgi
    2021-12-22 11:03:56: (configfile.c.426) Warning: mod_auth should be listed in server.modules before dynamic backends such as mod_fastcgi

but it looks like this is a false positive since we don't have mod_auth in there.
 2021-12-22 11:04:22 +01:00
Andrew
a719e43ae3
util: add support for terabytes, and petabytes to format_bytes (#5405) 
This formatted number is used by the Interface Statistics widget,
and makes the columns go wider than necessary when going above a
terabyte of data. Add petabytes for good measure.
 2021-12-22 08:00:02 +01:00
Franco Fichtner
eb786c95e8 firmware: although unlikely just patch this in then 2021-12-22 07:57:57 +01:00
Andrew
234fa8ba95
firmware/status: Update to support terabytes (#5417) 2021-12-22 07:56:27 +01:00
Ad Schellevis
94ed9756c9 fix plist 2021-12-21 19:02:30 +01:00
Ad Schellevis
834ef3b2e2 Monit - move logging to own log target. closes https://github.com/opnsense/core/issues/5422 2021-12-21 17:54:35 +01:00
Ad Schellevis
c281f1e573 Firewall / Alias - remove global $aliastable reference and use our shared \OPNsense\Firewall\Util::isAlias() instead. closes https://github.com/opnsense/core/issues/5423 
Although a direct table lookup will be faster than using a lookup in isAlias(), it's likely not problematic to have a slightly slower lookup using is_alias(), but if performance is of the essence at some point we can easily cache results in isAlias() to reach the same target.
 2021-12-21 16:59:24 +01:00
Franco Fichtner
e4d5478662 pkg: avoid upgrades if already done, use VERSIONBIN 2021-12-21 12:07:37 +01:00
Franco Fichtner
20cee8237b system: add backend handler for log rotation 
... and use it in usual spot as well as on boot to ensure that
latest.log files always exist (hello /var MFS).  This makes
opnsense-log happier.
 2021-12-21 09:17:26 +01:00
Franco Fichtner
9b8024ea85 system: do not mess with mount points in /var for /var MFS 2021-12-20 13:29:09 +01:00
Northguy
894e86c624
Patch traffic shaper texts (#5420) 2021-12-19 19:31:57 +01:00
kulikov-a
784ebd8d27
Logs: quick severity filter with "Warning" default (#5370) 2021-12-19 15:59:05 +01:00
Ad Schellevis
a984542d37 Firewall / Aliases - log resolve errors (ref https://forum.opnsense.org/index.php?topic=26034) 2021-12-17 19:48:03 +01:00
Ad Schellevis
7629c9aa87 Firewall: Diagnostics: States - handle IPv6 NAT, closes https://github.com/opnsense/core/pull/5414 2021-12-17 19:10:22 +01:00
Franco Fichtner
ea2349af06 firmware: apparently /etc/motd is gone on FreeBSD 13 
Long live /var/run/motd then...
 2021-12-17 10:13:42 +01:00
Franco Fichtner
353468a261 system: default to both IPv4 and IPv6 redirects to disable 
Done for hardening as done in b424a2f9b3b7 plus now IPv6 can
leverage ip6_tryforward() with the new default.
 2021-12-16 16:56:55 +01:00
Franco Fichtner
876604b392 pkg: fix plist 2021-12-16 15:23:04 +01:00
Ad Schellevis
9008f98a6a Interfaces / LTE - remove more or less dead cruft the 3gstats collects in some rare cases. 
Although there probably are a couple of Huawei modems which do report status info as advertised in the script, there are also a lot who don't and maybe deadlocked when pulling for data on a "random" port.
For now we should remove this, if at some point in the future a sensible method would be supported to poll status in a more "vendor independent" manor, we can always revise.
 2021-12-16 15:08:08 +01:00
Franco Fichtner
1eb25c2490 system: do not clobber mount points 
In case of ZFS a move doesn't really work.  Remove links only
and move the directory contents over.
 2021-12-16 10:51:14 +01:00
Franco Fichtner
50d3f5e738 system: mostly adjust -z mode to give size and identifier from ZFS pools 2021-12-15 08:42:54 +01:00
Franco Fichtner
d7e6dbde38 system: df -t zfs returns duplicated tmpfs entries; closes #5344 
When not using -t the list is correct and since we have -T make
sure we filter for the ones we asked for before.  -a seems like
a good fit here too.
 2021-12-14 22:19:48 +01:00
Franco Fichtner
1977e3539f Revert "firmware: work around FreeBSD 13 faulty validation" 
This reverts commit d7d69895cd8672379a634488fb116e1a0bbbeaa6.
Was properly solved in stable/22.1.
 2021-12-14 11:58:36 +01:00
Franco Fichtner
250ecd5bc4 system: opnsense-importer -m mode 
Was in need of something like this to gain access to a ZFS pool without
having to run a command sequence from the top of my head.

Comes in pretty handy when being included from a recovery install stick.
 2021-12-14 09:34:00 +01:00
Ad Schellevis
67910fbfea Services: Intrusion Detection - rule downloads : gently log when connectivity issues appear. 2021-12-10 17:23:37 +01:00
Franco Fichtner
d7d69895cd firmware: work around FreeBSD 13 faulty validation 
ping6: -4 and -6 cannot be used simultaneously

No, that's not how argument parsing works...
 2021-12-10 12:46:40 +01:00
Franco Fichtner
7767a6db9e firmware: for quick troubleshooting support -O like opnsense-update 2021-12-10 12:28:27 +01:00
Franco Fichtner
f122316ba5 firmware: next beta coming up 2021-12-10 10:29:37 +01:00
Ad Schellevis
03f7dbc431 VPN / OpenVPN / Connection Status - kill by common name when address doesn't seem to be possible. closes https://github.com/opnsense/core/issues/5038 2021-12-09 19:09:33 +01:00
Franco Fichtner
602d5c5912 firmware: be more chill about missing product_check and always return product info #5394 2021-12-09 09:47:24 +01:00
Franco Fichtner
7a68bab085 firmware: deleting the file under configd execution and copy...; closes #5396 
... leaves us with permission 640 even though we have copied a
644 file.  Removing the unlink() makes this work without a
chmod but the unlink is there for the fact that /etc/ssl/cert.pem
used to be a symlink and could clobber the actual file linked
which was the original package provided.

Might be an umask issue, but better leave it where it is.
 2021-12-08 14:33:14 +01:00