1960 Commits

Author SHA1 Message Date
pioorg
2a025de404 Improved password hashes.
Replaced crypt($password, '$6$') with password_hash and password_verify in order to produce salted hashes from passwords.
2016-11-28 18:17:15 +01:00
Franco Fichtner
d4fe7fbc71 rc: more $verbose conversion 2016-11-28 15:53:49 +01:00
Franco Fichtner
7c65a076d6 rc: remove cruft, it's gone out of style
See: https://github.com/pfsense/pfsense/commit/e93db4a1f8e
2016-11-28 14:04:26 +01:00
Franco Fichtner
68739fbbb7 system: q.e.d. previous 2016-11-28 09:45:35 +01:00
Franco Fichtner
8b6d43f5f3 system: console setup is rocket science... 2016-11-28 09:43:55 +01:00
Franco Fichtner
e21aa229e4 system: move VGA to top so it defaults to the default 2016-11-28 09:39:50 +01:00
Franco Fichtner
fbfb00191b system: refactor previous for single kldload spot 2016-11-28 09:34:47 +01:00
Franco Fichtner
af8e12f550 system: another logic fail :) 2016-11-28 09:30:27 +01:00
Franco Fichtner
6b0b2569cd system: make sure vital kernel modules are loaded and refactor
This partially reverts commit 8ecaf5f9102e329f6163ddc16f84647040d53485.
2016-11-28 09:21:17 +01:00
Franco Fichtner
7e4c3cf76e system: logic error on previous 2016-11-28 07:12:26 +01:00
Franco Fichtner
d28b79a90d system: improve writing etc/ttys even more to disable virtual 2016-11-28 07:08:20 +01:00
Franco Fichtner
9bc6342fa5 system: disable tty completely 2016-11-26 13:39:21 +01:00
Franco Fichtner
6b19b43646 system: typo in previous 2016-11-26 13:33:25 +01:00
Franco Fichtner
a7fbf99b62 system: disable all boot loader output for nullconsole usage 2016-11-26 13:31:53 +01:00
Franco Fichtner
85e6220415 system: deprecate 'enableserial' and refactor a bit
We don't need the flag anymore, it must be set through primary or
secondary console explicitly.
2016-11-26 13:09:32 +01:00
Franco Fichtner
8e78fd702a system: write boot.config later, when the auto-detect has been done 2016-11-26 09:34:10 +01:00
Franco Fichtner
d5969056ca system: always write consoles, figure out when serial is on 2016-11-26 09:16:49 +01:00
Franco Fichtner
f00d4309c5 system: add nullconsole setting
PR: https://forum.opnsense.org/index.php?topic=3972
2016-11-26 09:11:11 +01:00
Franco Fichtner
9e5aa0c76a filter: fix typo in previous
PR: https://forum.opnsense.org/index.php?topic=3979.0
2016-11-25 17:08:43 +01:00
Franco Fichtner
0ec8569296 radvd: fix two regressions from 16.7.9
o Mark interface used in case of interface tracking
o Don't inject local DNS server when there is no IP

PR: https://github.com/opnsense/core/issues/1273
2016-11-25 12:23:40 +01:00
Ad Schellevis
dd80bded16 (plugins, xmlrpc sync) use standard help if none available 2016-11-25 07:55:33 +01:00
Franco Fichtner
5d65669ee0 firmware: tweak wording on the console dialog 2016-11-25 06:41:46 +01:00
Franco Fichtner
8e01375337 upnp: fix regression introduced in 16.7.8
PR: https://forum.opnsense.org/index.php?topic=3976
2016-11-24 16:54:09 +01:00
Franco Fichtner
52bfec334b rc: less indent for console menu 2016-11-24 08:01:25 +01:00
Franco Fichtner
7526194b47 dnsmasq: reload dhcpleases on reconfigure; closes #1250
Private functions get "_" prefix, easy to spot from elsewhere
if needed.  Yes, someone will try this eventually.  ;)
2016-11-23 18:38:52 +01:00
Franco Fichtner
33c41b1613 unbound: register dhcp domain override for #1250 2016-11-23 18:15:50 +01:00
Franco Fichtner
2ca7253326 dnsmasq: domain override for dynamic dhcp lease registration
PR: https://github.com/opnsense/core/issues/1250
2016-11-23 18:06:30 +01:00
Franco Fichtner
7e75cf2631 dnsmasq: further cleanups for dhcpleases handling for #1226
o Respect the 'dnslocalhost' option, which wasn't previously possible
  because dhcpleases clobbered /etc/hosts directly anyway.
o Align the code with how unbound does it: use a private file for
  the hosts generation.
o HUP dnsmasq at the end of the hosts file regeneration.
o `--dhcp-hostsfile' was really really wrong as /etc/hosts is read
  automatically, and the file specified here should have been adhering
  to the dhcp leases format of on `--dhcp-host' argument per line.
2016-11-23 07:47:07 +01:00
Franco Fichtner
1b5c6d1b9a dnsmasq: need to stop dhcpleases; should daemonize on its own 2016-11-23 06:48:59 +01:00
Franco Fichtner
bed2dbd8d8 dnsmasq: one more for #1226 2016-11-22 22:21:45 +01:00
Ad Schellevis
ad0109f60a (plugins) add xmlrpc sync to plugins, closes https://github.com/opnsense/core/issues/1224 2016-11-22 20:56:43 +01:00
Franco Fichtner
a5fc46bd97 dnsmasq: refactor services_dhcpleases_configure() for #1266 2016-11-22 20:10:54 +01:00
Ad Schellevis
b9392f59b5 (ipsec) fix syslog output, eventually we should switch to the new style loggers, but for now it's better to make sure charondebug is respected.
From the docs:

Starting with version 4.2.9, strongSwan provides a much more flexible configuration of the loggers. Logger configurations in strongswan.conf have a higher priority than charondebug in ipsec.conf: If you define any loggers in strongswan.conf, charondebug does not have any effect at all.
2016-11-22 14:25:29 +01:00
Franco Fichtner
504c947bb7 ipsec: fix service name 2016-11-22 09:50:42 +01:00
Franco Fichtner
3222d5b25c netflow: add service control; closes #1268 2016-11-22 09:14:56 +01:00
Ad Schellevis
aaa4813103 (firewall) add maximum fragements, closes https://github.com/opnsense/core/issues/1246 2016-11-21 20:20:58 +01:00
Franco Fichtner
2bb0f2301b unbound: fix/secure unbound control
Turns out unbound reload flushes cache as well.  Also, unbound-control
may hang when it runs into an "undefined state" (stoping a stopped
service, right), and lastly it wants to chroot after being chrooted
on reload, something that cannot be fixed with using unbound-control.

Keep unbound-control-setup in case somebody finds the facility useful.
2016-11-21 09:04:45 +01:00
Franco Fichtner
d539e535ed ntpd: array() required for new-style functions 2016-11-21 08:02:17 +01:00
Franco Fichtner
4a7ff2456f unbound: simply reload on /etc/hosts change 2016-11-21 07:58:15 +01:00
Franco Fichtner
5e1e138ff4 plugin: name by underlying system, not surfacing service
IPFW and PF are used for more than just firewall and shaper, e.g.
NAT, policy routing or shaping, and the plugin framework supports
registering multiple user-facing services per file.
2016-11-21 06:58:18 +01:00
Franco Fichtner
3b34f51f63 plugins: add firewall reload button, inline service_name_compare() 2016-11-21 00:02:41 +01:00
Franco Fichtner
8a5b32bff8 relayd: called the other 'local' 2016-11-20 23:42:05 +01:00
Franco Fichtner
fd987e639c ntpd: it's a plugin! 2016-11-20 23:36:31 +01:00
Franco Fichtner
c602a7fd22 services: simplify config writes 2016-11-20 20:44:08 +01:00
Franco Fichtner
34cea24041 firmware: improve the major upgrade dialog 2016-11-20 19:23:05 +01:00
Franco Fichtner
8c25dd18c0 rc: align console menu for new motd 2016-11-20 16:23:34 +01:00
Franco Fichtner
bdb0fac62c dhcp: also hand out domain override in v6 2016-11-20 15:40:26 +01:00
Franco Fichtner
b9820b0966 plugins: simplify names for DNS services again 2016-11-20 14:56:04 +01:00
Franco Fichtner
9991dc6c21 plugins: only execute hook if selected 2016-11-20 14:36:55 +01:00
Franco Fichtner
667b7d39ca bsnmpd: use the force, don't want multiple services 2016-11-20 14:05:11 +01:00