13356 Commits

Author SHA1 Message Date
Franco Fichtner
29bd7f49c5 interface: small cleanup for #5334 2021-11-04 10:08:24 +01:00
Ad Schellevis
23c80c4083 Interfaces - shift check and improve logging a bit for https://github.com/opnsense/core/issues/5334 2021-11-04 09:43:51 +01:00
Franco Fichtner
27d30a7479 src: style sweep 2021-11-03 19:40:02 +01:00
Franco Fichtner
55ed3528c1 interfaces: comment style and info update 2021-11-03 19:36:17 +01:00
Ad Schellevis
2808a62b84 Interfaces - log and exit interface_configure() when device node doesn't exist, for https://github.com/opnsense/core/issues/5334 2021-11-02 21:33:58 +01:00
Ad Schellevis
abba23fda5 Interfaces - add description to ifconfig output, closes https://github.com/opnsense/core/issues/5331
Since -accept_rtadv is always executed, we can combine setting a description to prevent another call to ifconfig, we already need quite some calls which can slowdown configuration.
(FreeBSD 13 seems to be faster, but limiting calls in this case seems like a fair trade)
2021-11-02 19:06:06 +01:00
Ad Schellevis
ecb34928fb VPN / IPSec / Tunnel settings - Change overview page to support pagination lowering load times on large setups, closes https://github.com/opnsense/core/issues/5279
o remove legacy page and references
o bug fix delete phase 1 button (using wrong id)
2021-11-02 14:46:56 +01:00
Ad Schellevis
da936ef321 MVC - UIBootgrid, prevent event propagation to avoid click() events being forwarded to the row when rowSelect is used. 2021-11-02 14:04:58 +01:00
Ad Schellevis
6e9484e7cc VPN / IPSec / Tunnel settings - Change overview page to support pagination lowering load times on large setups (https://github.com/opnsense/core/issues/5279)
o add phase1/2 to grid heading on load
2021-11-01 21:46:09 +01:00
Ad Schellevis
022e5b4ce4 Firmware - mirrors, remove unavailable Hostcentral mirror 2021-10-31 20:46:36 +01:00
Ad Schellevis
42e8f99918 VPN / IPSec / Tunnel settings - Change overview page to support pagination lowering load times on large setups (https://github.com/opnsense/core/issues/5279)
o add legacy control buttons (edit, clone)
o refactor LegacySubsystemController to include "enable" status and simplify applyConfigAction to be more or less the same as its mvc cousins
o add alternate id fields for phase1/2 search actions
o add toggle phase[1|2] actions
o add toggle IPsec enable action
o copy legacy "apply changes" dialog from key_pairs.volt
2021-10-31 19:49:26 +01:00
Ad Schellevis
3be0173e55 System/Wizard - omit dhcp config when not available, closes https://github.com/opnsense/core/issues/5316 2021-10-30 20:06:17 +02:00
kulikov-a
149564b96a
add live view templates ACL (#5327) 2021-10-31 10:58:31 +01:00
Ad Schellevis
3527717787 VPN / IPSec / Tunnel settings - new overview page, hook in phase1/2 delete actions. for https://github.com/opnsense/core/issues/5279
o since ikeid is unique for a phase1 entry, we should use it as a unique key there.
o phase2 entries don't have a unique key, in which case we can only fallback to sequence, which has concurerrency issues.
2021-10-30 19:46:00 +02:00
kulikov-a
898c1d58f1
Trust / Authorities - get keyid string (#5323)
regression in 5b9d7baccb
2021-10-30 18:22:06 +02:00
Ad Schellevis
b585c331e5 VPN / IPsec / Advanced settings - add sha256_96 flag, minor cleanups for https://github.com/opnsense/core/pull/5321 2021-10-29 19:31:57 +02:00
Patrick M. Hausen
1d733fb95c
VPN / IPsec / Advanced settings - add sha256_96 flag (#5321) 2021-10-30 18:08:24 +02:00
kulikov-a
eab536021e
add new line (#5320)
add trailing new line after each file included so as not to control its presence in each inclusion
2021-10-30 15:50:26 +02:00
Franco Fichtner
412027a885 firmware: new alpha with RSS 2021-10-29 12:28:06 +02:00
Larry Rosenman
510aec3a3f
revise help link for google drive to point to (#5317) 2021-10-29 08:30:54 +02:00
Franco Fichtner
a763313d13 system: remove broken code 2021-10-29 07:54:04 +02:00
Ad Schellevis
2202b028df IPsec - VTI device [re]creation. could be https://github.com/opnsense/core/issues/5263
When local or remote isn't set to an ip address every configure will start removing the current device (and thus routes), although hostnames will likely always be a bit wacky (needs resolving, might change in which case the underlaying components likely miss the event). It's probably still a good idea to resolve when no addresses are used before concluding a device has changed.

In the process change ipsec_resolve() to support both IPv4 and IPv6, but to limit risk, keep callers at IPv4 (which was the old behaviour), since it's not entirely sure we can use the phase 1 protocol for the tunnel itself as well.
2021-10-28 20:13:55 +02:00
Franco Fichtner
bae5ccbc3a pkg: fix plist 2021-10-28 16:46:39 +02:00
Franco Fichtner
bf2b1efa73 interfaces: copy+paste fail in refactor of scoped IPv6 acquire
PR: https://forum.opnsense.org/index.php?topic=25162.0
2021-10-28 16:45:42 +02:00
Ad Schellevis
1c34b86cb5 IDPS: hook et-open to suricata 5 ruleset including migration, brings 41eefdd105 back in 2021-10-28 14:21:22 +02:00
Franco Fichtner
2230a95553 src: style sweep 2021-10-27 10:55:34 +02:00
Ad Schellevis
2fc0287c2f Dashboards / interfaces_list - missing </td>, closes https://github.com/opnsense/core/pull/5302 2021-10-26 18:22:13 +02:00
Ad Schellevis
fed83ecb5a VPN / IPSec / Tunnel settings - work in progress for https://github.com/opnsense/core/issues/5279
bugfix previous
2021-10-26 17:00:51 +02:00
Ad Schellevis
68b02429bf VPN / IPSec / Tunnel settings - work in progress for https://github.com/opnsense/core/issues/5279
o finish phase2 search ednpoint
o integrate master/detail navigation events.
2021-10-26 16:47:04 +02:00
Franco Fichtner
a4726d4409 firmware: fix check for base/kernel reboot
opnsense-update no longer sets -bkp by default which
requires us to use them on the command line.
2021-10-26 12:16:38 +02:00
Patrick M. Hausen
636b2c501f
system/ntpd - expose iburst option in the UI (#5309) 2021-10-26 10:49:47 +02:00
Franco Fichtner
44f9a2a208 system: set kern.randompid to autoselect for FreeBSD 13
kern.randompid is read-only on HBSD but in the meantime we also
have a better default so let's use that on 22.1.

See: https://reviews.freebsd.org/D12238
2021-10-26 10:40:03 +02:00
Franco Fichtner
4778d1429b system: use sysctl info to indicate nonexistent ones
Also it seems that sysctl -ad returns sysctls that the kernel
considers sysctls with no value.  These are likely read-only
of some type so bring them in as well with a blank value.

Mark unsupported and read-only with text-danger since their
use is not doing anything for the system.
2021-10-26 10:26:07 +02:00
Ad Schellevis
3e7aaee902 auth tester, fix missing escape in diag_authentication.php 2021-10-26 10:14:31 +02:00
Franco Fichtner
1ddeeca108 system: assorted improvements
o Only modify default sysctls when default is known
o Let user know a default is not available for tunable
o Parse system descripton and type and show in GUI
2021-10-26 10:06:00 +02:00
kulikov-a
061cb006b2
Firewall / Rules allow 'any' as a port range lower bound (#5306) 2021-10-26 09:36:08 +02:00
Franco Fichtner
84d6b2acd5 unbound: make so-reuseport conditional upon RSS status
We only ask the tunables configuration layer for the current value
which is likely going to match.  We could fetch the actual value
from the system but speed and priviledge separation concerns weigh
heavier.

PR: https://forum.opnsense.org/index.php?topic=24409.0
2021-10-26 08:33:43 +02:00
Franco Fichtner
f394d2127f src: style sweep 2021-10-26 07:40:02 +02:00
Ad Schellevis
c29aa1e3c1 VPN / IPSec / Tunnel settings - work in progress for https://github.com/opnsense/core/issues/5279
o add boilerplate for phase2 search action
o change disable to enable status and hook standard toggle widget
o uniform formatters
2021-10-25 19:27:33 +02:00
Ad Schellevis
f0ae569477 Squashed commit of the following:
commit 4be5387afb88689cb760c4dc60e0933834a7d9fd
Author: Ad Schellevis <ad@opnsense.org>
Date:   Mon Oct 25 17:56:57 2021 +0200

    Firewall / Diagnostics add 'rules' to Statistics (https://github.com/opnsense/core/pull/5292)

    o minor cleanups
    o cleanup pfctl call handling, when a section is provided only extract the one asked for.

commit be7f3f6b22fb88c96178102ac5b5266f52fbfe71
Merge: 116453543 f1a7b9320
Author: kulikov-a <36099472+kulikov-a@users.noreply.github.com>
Date:   Wed Oct 20 19:31:45 2021 +0300

    Merge branch 'master' into patch-20

commit 116453543ef50c3706633bbfe52436ba9ca4f009
Author: kulikov-a <36099472+kulikov-a@users.noreply.github.com>
Date:   Wed Oct 20 19:25:55 2021 +0300

    suffix

commit 70ea8ebb536b4fe282ce395a0d12f7b7496d9d07
Author: kulikov-a <36099472+kulikov-a@users.noreply.github.com>
Date:   Tue Oct 19 23:20:30 2021 +0300

    open node on label click

commit deef33fb07b4844641374ef5929613e51b1926d7
Author: kulikov-a <36099472+kulikov-a@users.noreply.github.com>
Date:   Tue Oct 19 18:49:30 2021 +0300

    add 'rules' to pf stats

    add 'rules' to pf stats

    add 'rules'

    add 'rules'

    Update pfstatistcs
2021-10-25 18:30:57 +02:00
Ad Schellevis
f314a4364b VPN / IPSec / Tunnel settings - phase 1 overview endpoint and grid for https://github.com/opnsense/core/issues/5279 2021-10-25 14:04:35 +02:00
Ad Schellevis
0d77358c1d interfaces: VLAN spoofmac taints siblings and parent interface. closes https://github.com/opnsense/core/issues/5297
o move media detection to generic legacy_interfaces_details() parser
o hide options when not applicable (only auto-select means non physical it seems).
2021-10-24 10:39:07 +02:00
Ad Schellevis
3a75948e25 interfaces: VLAN spoofmac taints siblings and parent interface
o refactor spoofmac to apply on the actual interface at hand
o add permanent promisc setting

for https://github.com/opnsense/core/issues/5297
2021-10-23 22:35:33 +02:00
Franco Fichtner
d6261e0896 src: style sweep 2021-10-23 20:33:04 +02:00
Ad Schellevis
133baa7d19 Interfaces - parse flags in legacy_interfaces_details() and minor style cleanup, for https://github.com/opnsense/core/issues/5297 2021-10-22 22:17:39 +02:00
Ad Schellevis
75043595db Firewall / Rules - fix parser to support "maximum" ranges. Currently it's possible to input values like "80-any", in which case the lower bound is ignored (only "any" sticks).
Since it's technically not very problematic to support ranges where "any" means either upper or lower bound, we best make sure the values inserted are at least used. (as soon as it's a range, it can't be an alias anyway due to the colon)

There is a small risk of regressions in existing setups where people accidentally used the unsupported input, but this looks like a reasonable risk.

The other option would be to extend the validation and reject the input.

This commit doesn't handle the user input for the "any - static port" type, which currently doesn't seem to be supported. As discussed with @kulikov-a, who might have ideas about the user input part when he has some time.
2021-10-22 21:35:46 +02:00
Franco Fichtner
e76ba2657c interfaces: stristr() -> strstr()
The suffix/infix used is always lowercase so change the matching
to a consistent strstr() lookup.
2021-10-22 16:24:30 +02:00
pv2b
28b91ae61b
Make is_linklocal properly detect all LL addresses (#5301)
Link local addresses cannot start only with fe80:: but can be anything in fe80::/10. So therefore I extended is_linklocal to also cover these cases.
2021-10-22 10:42:26 +02:00
Franco Fichtner
e5e2e46300 dhcp: clarify code around is_linklocal() conditional 2021-10-22 10:03:13 +02:00
NOYB
f76691b984
Interfaces Other Types - Dynamic Options (#5300)
A more deterministic direct approach that won't break with changing or differing ancestry depths.
Also cleaner and clearer than .parent().parent().
2021-10-22 09:35:40 +02:00