Ad Schellevis
c314ac09e4
small cleanups for https://github.com/opnsense/core/pull/2748
2018-10-01 21:45:41 +02:00
Ad Schellevis
076ec93ce4
Merge branch 'master' of https://github.com/fprina/core into fprina-master
2018-10-01 21:28:29 +02:00
Franco Fichtner
7e2f825bf9
system: remove FreeBSD 10 password workaround
2018-09-28 18:29:40 +02:00
Franco Fichtner
996923d464
system: comment cleanups
...
The "mschapv2" code referenced was removed in 2b17ad9077 and
additional dead code in bd2d28c6223.
See also: https://github.com/pfsense/pfsense/commit/651d468705
2018-09-28 18:24:30 +02:00
Franco Fichtner
84f35e7088
system: start to cleanup legacy notifications #2408
2018-09-28 17:59:46 +02:00
Franco Fichtner
f8178e98d3
interfaces: 6RD IPv4 prefix is prefix only #2662
2018-09-26 15:29:43 +02:00
Franco Fichtner
737d4ba002
firewall: Traffic Shaper -> Shaper
...
A personal dream come true!
2018-09-23 18:52:51 +02:00
Franco Fichtner
4096b0e9e7
system: zap a few global $config references
2018-09-23 11:44:49 +02:00
Franco Fichtner
4ebb368b2c
unbound: hello bitrot my old friend :P
...
* Base unbound is no longer installed. Path is /usr/local/...
* remotecontrol.conf is not enough, need to use unbound.conf
* shuffle remote-control content into unbound.conf
* disable cache dump / load until its more clever
Case in point of how useless is it to have unused scripts hitching
along for the ride.
2018-09-23 10:59:05 +02:00
Franco Fichtner
993b205cb6
unbound: cache dump / load / flush
2018-09-23 10:04:09 +02:00
Franco Fichtner
da3a25b66d
system: unused return 0
2018-09-22 23:44:05 +02:00
Franco Fichtner
7ec2804f59
system: listen ips no more; closes #1257
2018-09-22 22:32:23 +02:00
Franco Fichtner
f5d2ee6fea
system: no more arguments for last two callers of function
2018-09-22 21:46:06 +02:00
Franco Fichtner
d93f60bf08
system: stop using get_possible_listen_ips()
2018-09-22 21:39:34 +02:00
Franco Fichtner
772ea4ace1
interfaces: tweak interfaces_addresses() slightly
...
* Input an array of interfaces to get addresses from,
saving multiple calls to ifconfig in the best case.
* Return interface name, family and scope along with
the actual address for further analysis.
2018-09-22 21:15:41 +02:00
Fabio Prina
f83e6cfc59
openvpn, option to match CSO against common_name or login
2018-09-22 19:42:48 +02:00
Franco Fichtner
93518e6ccd
interfaces: new static helpers and a bit of refactoring
2018-09-19 19:10:45 +02:00
Franco Fichtner
8fcda9f8aa
firmware: make firmware-upgrade the version file
2018-09-16 23:15:55 +02:00
Franco Fichtner
90296833f9
firmware: firmware-product, src/opnsense/version/opnsense, etc.
...
Now that we have metadata injection at build time read it instead
of its auxiliary files. Allow live-mount to snoop the metadata and
afterwards we can start to marry the version and firmware-product
file.
Last puzzle piece will be a tool called "opnsense-version" to read
the JSON metadata and return it in a piecemeal fashion of a part
of the system requires that info, especially from the shell.
2018-09-16 20:38:15 +02:00
Franco Fichtner
490a68e8c1
unbound: remove superflous msort() function
2018-09-16 18:49:05 +02:00
Franco Fichtner
a0d9ce9c3c
dnsmasq: skip link-local as well
...
If we can't set the scope chances are this doesn't
work properly anyway.
2018-09-16 18:08:34 +02:00
Franco Fichtner
c6706805a2
interfaces: interfaces_addresses() because...
...
... realif can be different for IPv6.
2018-09-16 18:04:11 +02:00
Franco Fichtner
1cf39968ad
unbound: remove get_possible_listen_ips() usage #1257
2018-09-16 17:05:02 +02:00
Franco Fichtner
7b0d16ec54
src: why not get rid of get_possible_listen_ips()
...
Kill what we can already. Only one plugin uses it (obsolete SNMP).
2018-09-16 15:14:04 +02:00
Franco Fichtner
18c3d97ef2
unbound: always bind to loopback
...
get_possible_listen_ips() should go away and Dnsmasq already
does the right thing so let Unbound follow.
While here get rid of writing empty values into the config
and even offering them on the GUI...
2018-09-16 15:14:04 +02:00
Franco Fichtner
866ff2ba92
src: allow login/error page to use cache_safe()
...
Now that we don't have version leakage we can extend the use
to the login page without risk (except that people know it's
at least the version that feature was introduced in).
2018-09-16 12:25:38 +02:00
Franco Fichtner
574bd308be
src: remove trailing dot workaround by removing trailing dots
2018-09-16 11:44:13 +02:00
Franco Fichtner
c1c27c3f61
ipsec: reverse ordering #1852
2018-09-13 07:05:44 +00:00
Franco Fichtner
36cde519cd
ipsec: multiple phase 1 dh groups #1852
2018-09-12 19:09:02 +02:00
Franco Fichtner
037a92f2ca
ipsec: multiple hash algos in phase 1 #1852
2018-09-12 15:11:34 +00:00
Franco Fichtner
1418e7a8da
src: more $config access avoidance
2018-09-12 09:00:00 +02:00
Franco Fichtner
21d3ff051f
system: iterate over gateways without $config access
...
Positive side-effect is we don't have to sanity-check access
anymore.
2018-09-12 08:59:26 +02:00
Franco Fichtner
baa43590d7
src: remove get_configured_interface_with_descr()'s $withdisabled
2018-09-11 22:16:31 +02:00
Franco Fichtner
a35b40a4a7
src: remove unused $only_opt
2018-09-11 21:52:34 +02:00
Franco Fichtner
8c00114edc
src: removal of get_configured_interface_list() 2/2
2018-09-11 21:30:53 +02:00
Franco Fichtner
7c853d62a9
src: get rid of get_configured_interface_list() 1/2
2018-09-11 21:14:53 +02:00
Franco Fichtner
6d5444f95b
src: unused/spurious $config spots
2018-09-11 20:37:30 +02:00
Franco Fichtner
6f6f8397e7
util: this is unused
2018-09-11 19:27:16 +02:00
Franco Fichtner
66430a8a02
services: cleanup after PR
2018-09-11 14:28:28 +00:00
marjohn56
195a0f6f42
dhcpd6 PD Auto tracking additons
...
Does not use dhcp6c mods. uses existing functions to deterrmine the PD length.
2018-09-11 15:31:12 +02:00
Franco Fichtner
6b805ffbe3
services: cleanups
...
* In override mode turn radvd off until enabled, same as DHCPv6
* Guard radvd against is_radvd_enabled(), same as DHCPv6
* Avoid extra hoops of using global $config where possible
2018-09-11 14:59:19 +02:00
Franco Fichtner
5eb0dd5f11
interfaces: fix edge cases in make_ipv6_64_address()
...
empty("00") != empty("0") so ::1000:0 would produce a suffix of ::1000
while ::1000:00 would correctly generate ::1000:00
2018-09-11 09:58:31 +00:00
Franco Fichtner
9d4552b5e7
interfaces: fix a typo
2018-09-10 19:22:08 +02:00
Franco Fichtner
3192f8f5cc
interfaces: some progress on IPv6 address for trackers #1993
2018-09-10 08:51:45 +02:00
Franco Fichtner
70e0fea6ca
interfaces: revert the prefix snooping for now
2018-09-09 10:23:51 +02:00
Franco Fichtner
a241040662
interfaces: do not give all trackers the same IPv6 in 6rd / 6to4
...
PR: https://github.com/opnsense/core/issues/2663
2018-09-08 16:43:23 +02:00
Franco Fichtner
2cb88d030e
interfaces: snoop prefix from wan for 6rd /64, slaac and dhcpv6 pd len "none"
...
PR: https://github.com/opnsense/core/issues/2663
2018-09-08 16:13:30 +02:00
Franco Fichtner
45a6e35c3d
interfaces: radvd stuff for diagnostics
2018-09-08 15:06:58 +02:00
Franco Fichtner
d8e41511da
interfaces: allow IPv4 address override in 6RD; closes #2662
2018-09-08 12:19:16 +00:00
Franco Fichtner
78662d76ba
interfaces: lower MTU via tracked interface MTU; closes #2643
2018-09-08 11:24:24 +00:00