Franco Fichtner
1d7f873528
src: style sweep
2019-05-09 12:27:17 +02:00
Franco Fichtner
ca5140cbf7
system: use userIsAdmin() even if we have to resolve again
2019-05-09 12:13:46 +02:00
Ad Schellevis
d6a5db4f63
auth, add small legacy helper function to check if user is full admin.
2019-05-09 11:48:28 +02:00
Franco Fichtner
abe6b092e0
firewall: kill hover, we have proper striping now
2019-05-09 11:28:22 +02:00
Ad Schellevis
b3550c97f3
filter/rules. fix striping in firewall_rules.php
2019-05-09 10:53:52 +02:00
Franco Fichtner
e7aab795b7
system: list the commands for pluginctl when no argument is given
2019-05-09 09:54:16 +02:00
Franco Fichtner
fed700680f
firewall: restyle a little more
...
Ideally we want to follow NAT as well, at least for the condensed layout.
For now move the padding to a class, we can't have two ids with the same
value. Initial striping seems broken. Let the browser render initially
for now.
2019-05-08 23:43:37 +02:00
Ad Schellevis
ccdd7f6586
auth / ldap, add group sync checkbox and help text for https://github.com/opnsense/core/issues/3471
2019-05-08 21:25:13 +02:00
Franco Fichtner
b0b51baefc
firewall: move no rules info to top into info box
...
Also experiment with "warning" and "success" coloring to further
leaverage bootstrap magic. The colors need tweaking or reverting,
but let's just see how this looks and feels for the time being.
2019-05-08 20:16:19 +02:00
Franco Fichtner
6c6f652b39
firewall: fix table layout jumping for @adschellevis
...
Hide some features on smaller layout, add magic icons to automatic
rules and change the expand drop down to the right which seems a
little more natural to operate.
2019-05-08 19:40:37 +02:00
Ad Schellevis
687c587ae9
firewall_rules.php, fix left+right spacing as discussed earlier in https://github.com/opnsense/core/issues/3462
2019-05-08 18:42:52 +02:00
Ad Schellevis
c907fe2a1c
Merge branch '19.7---Firewall-rules---page-margin---fix' of https://github.com/opnsenseuser/core into opnsenseuser-19.7---Firewall-rules---page-margin---fix
2019-05-08 18:35:11 +02:00
Ad Schellevis
0e9912c374
carp, status page, use net.inet.carp.demotion to control current demotion. for https://github.com/opnsense/core/issues/3163
2019-05-08 15:30:50 +02:00
Ad Schellevis
df4fe1c683
IDS, missing cleanup after rule installation, for https://github.com/opnsense/core/issues/3472
2019-05-08 11:47:54 +02:00
Ad Schellevis
e224771ce0
filter, prevent carp outgoing packets to use the configured gateway (route-to), for https://github.com/opnsense/core/issues/3468
2019-05-08 10:51:32 +02:00
Ad Schellevis
5f74394175
LDAP: authentication connector, add support to synchronise groups after login for https://github.com/opnsense/core/issues/3471 using the ldap_sync_memberof attribute.
...
This feature depends on ldap_read_properties to return user properties after login.
TODO:
- extend the server setup page to include the checkbox for ldap_sync_memberof
- add group list to limit scope of the sync
2019-05-07 22:09:46 +02:00
Franco Fichtner
461508544d
src: style sweep on filter.lib.inc
...
authgui.inc is the last file, it has a number of issues to be
looked at manually later on.
2019-05-07 07:58:54 +02:00
Franco Fichtner
cce8982e22
dhcpd: change rule prio to 1 to avoid bogon clash #2148
...
Discussed with: @adschellevis
2019-05-06 10:03:17 +02:00
Franco Fichtner
5f4315c40c
system: stop using a lock around resolv.conf handling #2267
...
This might kill a bit of delay in function use by doing an atomic
move to update resolv.conf. Even if several instances are running
at the same time the contents of the file will be the same now.
I don't expect issues with the DNS route updates either: even if
they are removed or added twice, they will always end up being there.
2019-05-06 08:36:30 +02:00
Franco Fichtner
426061a17b
src: time to extend style sweep to src/etc/inc
2019-05-06 07:43:07 +02:00
opnsenseuser
64602ca597
19.7 - Firewall rules - page margin - fix
...
#rules > thead > tr > th,
#rules > tbody > tr > td,
#rules > tfoot > tr > td {
padding:10px 0px 10px 20px;
}
i set the same values as in 19.1 (main.css)
see -> https://github.com/opnsense/core/issues/3462#issuecomment-489431982
2019-05-05 20:18:38 +02:00
Ad Schellevis
a6013d0545
filter, rules center select columns, closes https://github.com/opnsense/core/issues/3462
2019-05-05 14:11:29 +02:00
Franco Fichtner
d9f70415fa
firewall: translation fixes
2019-05-05 13:13:19 +02:00
Franco Fichtner
a90a920598
wizard: translate typehint as well
2019-05-05 11:08:19 +02:00
Ad Schellevis
97d0b22a60
firewall/nat outbound translation typo, closes https://github.com/opnsense/core/issues/3463
2019-05-04 19:44:41 +02:00
Franco Fichtner
8427198875
interfaces: wrong brace, wouldn't happen with mwexecf() :P
...
PR: https://github.com/opnsense/core/issues/3310
2019-05-04 14:46:21 +02:00
Franco Fichtner
ce68d5a547
dhcpd: finish pluginification by renaming services_dhcpd_configure()
...
While here let v4 and v6 DHCP steer what we're reloading. That
should be wee bit quicker...
2019-05-04 13:20:18 +02:00
Franco Fichtner
8279f28288
interfaces: IPv6 only reset trackers on new IPv6 #3415
2019-05-04 12:31:06 +02:00
Franco Fichtner
96383c8aa4
radvd: remove rasend/ranosend checkbox; closes #3365
...
I'm removing this after more research in the hopes that nobody
will be complaining about it. The sad side is that this is a
simple patch and a PR would have been an effective way to review
and decide on removal. This way, core team members are forced
to spend time otherwise spent on reasearching impact *and* also
writing the code to do it which from a divide-and-conquer view
makes this code change worse than it could have been. ;)
2019-05-04 12:11:28 +02:00
Franco Fichtner
3e3b371af1
radvd: CARP almost works correctly here
...
Although I doubt anybody is using this... It looks like there
is no HA sync option and the pair is advertising away in the
network. ;)
2019-05-04 12:00:26 +02:00
Franco Fichtner
e67dade991
radvd: use AdvDefaultLifetime 0, remove duplicates; closes #3343
2019-05-04 11:35:52 +02:00
Franco Fichtner
6e727e43d2
system: allow an arbitrary group for sudo like ssh login; closes #3407
2019-05-04 10:43:32 +02:00
René
db4b4570d5
opnsense - core theme modal fix for (19.7) ( #3459 )
2019-05-04 07:39:10 +02:00
Franco Fichtner
32ff471bf5
firmware: package manager not responding fixes; closes #3172
2019-05-03 17:09:18 +02:00
Franco Fichtner
8fe295f70e
web proxy: prettify timestamps
2019-05-03 13:50:21 +02:00
nhirokinet
1c1b8bcac9
Squid log webUI in readable date format #1831 ( #3326 )
2019-05-03 13:12:38 +02:00
Ad Schellevis
f2305e3445
Filter/aliases, port validation ignored leading/trailing spaces, align validation to how is_port() validates when writing the rules. unfortunately filter_var() still lacks proper validation for these cases. closes https://github.com/opnsense/core/issues/3458
2019-05-03 09:16:19 +02:00
Martin Wasley
1963eef793
Add EN DUID Generation using Opnsense PEN. ( #3436 )
2019-05-02 19:46:52 +02:00
Franco Fichtner
b4e7611601
firewall: part of #3429
2019-05-02 10:11:08 +02:00
Ad Schellevis
19bc872ae4
Revert "Gateways, move 6adafe8be0 around."
...
This reverts commit 2ed68adaafc5f6c5982d2e839e988dd966688f55.
2019-05-01 21:34:13 +02:00
Ad Schellevis
2ed68adaaf
Gateways, move 6adafe8be0 around.
2019-05-01 21:29:16 +02:00
Franco Fichtner
210f2c2564
src: whitespace sweep
2019-05-01 13:37:23 +02:00
Franco Fichtner
6adafe8be0
system: unset gateway here too
...
PR: https://forum.opnsense.org/index.php?topic=11540.0
2019-05-01 11:27:42 +02:00
Franco Fichtner
a4958ed125
ipsec: remove check, too trigger-happy
2019-04-30 14:33:36 +02:00
Franco Fichtner
da7b2232c1
src: style sweep
2019-04-30 00:46:56 +02:00
Franco Fichtner
ad640ed46a
interfaces: a little more back and forth
...
On the bright side, /64 is the standard for handing out subnets
on the LAN side and larger subnets are only delegated, not assigned.
2019-04-30 00:39:35 +02:00
Franco Fichtner
4db538d742
system: move pluggable call to plugin where it belongs
2019-04-30 00:26:29 +02:00
Franco Fichtner
0b03d14e16
interfaces: get_failover_interface() moves to dyndns plugin
2019-04-30 00:20:09 +02:00
Franco Fichtner
cff3ac98bb
interfaces: this seems wrong...
2019-04-30 00:09:03 +02:00
Franco Fichtner
db8373ffe4
system: rfc2136 supporting gwgroups is a lie
2019-04-29 23:56:02 +02:00