pioorg
2a025de404
Improved password hashes.
...
Replaced crypt($password, '$6$') with password_hash and password_verify in order to produce salted hashes from passwords.
2016-11-28 18:17:15 +01:00
Franco Fichtner
d4fe7fbc71
rc: more $verbose conversion
2016-11-28 15:53:49 +01:00
Franco Fichtner
7c65a076d6
rc: remove cruft, it's gone out of style
...
See: https://github.com/pfsense/pfsense/commit/e93db4a1f8e
2016-11-28 14:04:26 +01:00
Franco Fichtner
68739fbbb7
system: q.e.d. previous
2016-11-28 09:45:35 +01:00
Franco Fichtner
8b6d43f5f3
system: console setup is rocket science...
2016-11-28 09:43:55 +01:00
Franco Fichtner
e21aa229e4
system: move VGA to top so it defaults to the default
2016-11-28 09:39:50 +01:00
Franco Fichtner
fbfb00191b
system: refactor previous for single kldload spot
2016-11-28 09:34:47 +01:00
Franco Fichtner
af8e12f550
system: another logic fail :)
2016-11-28 09:30:27 +01:00
Franco Fichtner
6b0b2569cd
system: make sure vital kernel modules are loaded and refactor
...
This partially reverts commit 8ecaf5f9102e329f6163ddc16f84647040d53485.
2016-11-28 09:21:17 +01:00
Franco Fichtner
7e4c3cf76e
system: logic error on previous
2016-11-28 07:12:26 +01:00
Franco Fichtner
d28b79a90d
system: improve writing etc/ttys even more to disable virtual
2016-11-28 07:08:20 +01:00
Franco Fichtner
9bc6342fa5
system: disable tty completely
2016-11-26 13:39:21 +01:00
Franco Fichtner
6b19b43646
system: typo in previous
2016-11-26 13:33:25 +01:00
Franco Fichtner
a7fbf99b62
system: disable all boot loader output for nullconsole usage
2016-11-26 13:31:53 +01:00
Franco Fichtner
85e6220415
system: deprecate 'enableserial' and refactor a bit
...
We don't need the flag anymore, it must be set through primary or
secondary console explicitly.
2016-11-26 13:09:32 +01:00
Franco Fichtner
8e78fd702a
system: write boot.config later, when the auto-detect has been done
2016-11-26 09:34:10 +01:00
Franco Fichtner
d5969056ca
system: always write consoles, figure out when serial is on
2016-11-26 09:16:49 +01:00
Franco Fichtner
f00d4309c5
system: add nullconsole setting
...
PR: https://forum.opnsense.org/index.php?topic=3972
2016-11-26 09:11:11 +01:00
Franco Fichtner
9e5aa0c76a
filter: fix typo in previous
...
PR: https://forum.opnsense.org/index.php?topic=3979.0
2016-11-25 17:08:43 +01:00
Franco Fichtner
0ec8569296
radvd: fix two regressions from 16.7.9
...
o Mark interface used in case of interface tracking
o Don't inject local DNS server when there is no IP
PR: https://github.com/opnsense/core/issues/1273
2016-11-25 12:23:40 +01:00
Ad Schellevis
dd80bded16
(plugins, xmlrpc sync) use standard help if none available
2016-11-25 07:55:33 +01:00
Franco Fichtner
5d65669ee0
firmware: tweak wording on the console dialog
2016-11-25 06:41:46 +01:00
Franco Fichtner
8e01375337
upnp: fix regression introduced in 16.7.8
...
PR: https://forum.opnsense.org/index.php?topic=3976
2016-11-24 16:54:09 +01:00
Franco Fichtner
52bfec334b
rc: less indent for console menu
2016-11-24 08:01:25 +01:00
Franco Fichtner
7526194b47
dnsmasq: reload dhcpleases on reconfigure; closes #1250
...
Private functions get "_" prefix, easy to spot from elsewhere
if needed. Yes, someone will try this eventually. ;)
2016-11-23 18:38:52 +01:00
Franco Fichtner
33c41b1613
unbound: register dhcp domain override for #1250
2016-11-23 18:15:50 +01:00
Franco Fichtner
2ca7253326
dnsmasq: domain override for dynamic dhcp lease registration
...
PR: https://github.com/opnsense/core/issues/1250
2016-11-23 18:06:30 +01:00
Franco Fichtner
7e75cf2631
dnsmasq: further cleanups for dhcpleases handling for #1226
...
o Respect the 'dnslocalhost' option, which wasn't previously possible
because dhcpleases clobbered /etc/hosts directly anyway.
o Align the code with how unbound does it: use a private file for
the hosts generation.
o HUP dnsmasq at the end of the hosts file regeneration.
o `--dhcp-hostsfile' was really really wrong as /etc/hosts is read
automatically, and the file specified here should have been adhering
to the dhcp leases format of on `--dhcp-host' argument per line.
2016-11-23 07:47:07 +01:00
Franco Fichtner
1b5c6d1b9a
dnsmasq: need to stop dhcpleases; should daemonize on its own
2016-11-23 06:48:59 +01:00
Franco Fichtner
bed2dbd8d8
dnsmasq: one more for #1226
2016-11-22 22:21:45 +01:00
Ad Schellevis
ad0109f60a
(plugins) add xmlrpc sync to plugins, closes https://github.com/opnsense/core/issues/1224
2016-11-22 20:56:43 +01:00
Franco Fichtner
a5fc46bd97
dnsmasq: refactor services_dhcpleases_configure() for #1266
2016-11-22 20:10:54 +01:00
Ad Schellevis
b9392f59b5
(ipsec) fix syslog output, eventually we should switch to the new style loggers, but for now it's better to make sure charondebug is respected.
...
From the docs:
Starting with version 4.2.9, strongSwan provides a much more flexible configuration of the loggers. Logger configurations in strongswan.conf have a higher priority than charondebug in ipsec.conf: If you define any loggers in strongswan.conf, charondebug does not have any effect at all.
2016-11-22 14:25:29 +01:00
Franco Fichtner
504c947bb7
ipsec: fix service name
2016-11-22 09:50:42 +01:00
Franco Fichtner
3222d5b25c
netflow: add service control; closes #1268
2016-11-22 09:14:56 +01:00
Ad Schellevis
aaa4813103
(firewall) add maximum fragements, closes https://github.com/opnsense/core/issues/1246
2016-11-21 20:20:58 +01:00
Franco Fichtner
2bb0f2301b
unbound: fix/secure unbound control
...
Turns out unbound reload flushes cache as well. Also, unbound-control
may hang when it runs into an "undefined state" (stoping a stopped
service, right), and lastly it wants to chroot after being chrooted
on reload, something that cannot be fixed with using unbound-control.
Keep unbound-control-setup in case somebody finds the facility useful.
2016-11-21 09:04:45 +01:00
Franco Fichtner
d539e535ed
ntpd: array() required for new-style functions
2016-11-21 08:02:17 +01:00
Franco Fichtner
4a7ff2456f
unbound: simply reload on /etc/hosts change
2016-11-21 07:58:15 +01:00
Franco Fichtner
5e1e138ff4
plugin: name by underlying system, not surfacing service
...
IPFW and PF are used for more than just firewall and shaper, e.g.
NAT, policy routing or shaping, and the plugin framework supports
registering multiple user-facing services per file.
2016-11-21 06:58:18 +01:00
Franco Fichtner
3b34f51f63
plugins: add firewall reload button, inline service_name_compare()
2016-11-21 00:02:41 +01:00
Franco Fichtner
8a5b32bff8
relayd: called the other 'local'
2016-11-20 23:42:05 +01:00
Franco Fichtner
fd987e639c
ntpd: it's a plugin!
2016-11-20 23:36:31 +01:00
Franco Fichtner
c602a7fd22
services: simplify config writes
2016-11-20 20:44:08 +01:00
Franco Fichtner
34cea24041
firmware: improve the major upgrade dialog
2016-11-20 19:23:05 +01:00
Franco Fichtner
8c25dd18c0
rc: align console menu for new motd
2016-11-20 16:23:34 +01:00
Franco Fichtner
bdb0fac62c
dhcp: also hand out domain override in v6
2016-11-20 15:40:26 +01:00
Franco Fichtner
b9820b0966
plugins: simplify names for DNS services again
2016-11-20 14:56:04 +01:00
Franco Fichtner
9991dc6c21
plugins: only execute hook if selected
2016-11-20 14:36:55 +01:00
Franco Fichtner
667b7d39ca
bsnmpd: use the force, don't want multiple services
2016-11-20 14:05:11 +01:00