3558 Commits

Author SHA1 Message Date
Björn Kalkbrenner
8e361f3051 dhcp: added TFTP bootfile-name
PR: https://github.com/opnsense/core/pull/3074
2019-03-05 07:11:55 +01:00
Ad Schellevis
d9dbcaf052 IPSec / routed (VTI). add tunnel settings to phase2, https://github.com/opnsense/core/issues/2332 2019-03-04 19:41:44 +01:00
Ad Schellevis
9ccabe68a6 IPsec / routed (VTI), make installpolicy optional, for https://github.com/opnsense/core/issues/2332 2019-03-04 14:10:05 +01:00
Franco Fichtner
6d66dd81b2 system: avoid short PHP tag 2019-03-04 07:24:31 +01:00
Franco Fichtner
7e7f432b72 unbound: add aliases to listing; closes #3260 2019-03-03 11:11:47 +01:00
Franco Fichtner
7ee5ed2a43 www: style updates 2019-03-03 10:44:38 +01:00
Ad Schellevis
f685abcc9c Trust/cert, disable https://github.com/opnsense/core/pull/3234 until @fichtner adds phpseclib 2019-03-01 18:39:07 +01:00
Ad Schellevis
e65669383d Trust/cert, cleanup sign_cert_csr type 2019-03-01 18:36:44 +01:00
Ad Schellevis
2f919443dc cherry-pick https://github.com/opnsense/core/pull/3234 2019-03-01 18:35:50 +01:00
Ad Schellevis
be93dfcabb Merge branch 'reorder-log-settings' of https://github.com/MichaelDeciso/core into MichaelDeciso-reorder-log-settings 2019-03-01 15:06:13 +01:00
Ad Schellevis
3d07a9eb77 minor cleanups, closes https://github.com/opnsense/core/pull/3112 2019-03-01 14:55:36 +01:00
Franco Fichtner
81438578db unbound: add alias support for #3260
Break the rules of the Dnsmasq implementation while at it:

An alias can consist of a host and/or domain and/or description.
At least a host name or a domain need to be set, the rest will be
taken from the original entry.

Missing GUI parts in the override section...
2019-03-01 08:55:50 +01:00
Ad Schellevis
b214b89e20 HAsync, prevent sloppy apply behaviour in various places due to configuring the backup device and point the user to our status page.
- since the apply never has been complete, the current situations either results in user not knowning where their waiting for  (an openvpn client for example) or users assuming all is in sync (which isn't the case)
- move restart filter action to existing sync page

closes https://github.com/opnsense/core/issues/3165
2019-02-28 18:32:17 +01:00
Ad Schellevis
b82e54fb2f whitespace 2019-02-28 16:38:54 +01:00
Ad Schellevis
e7d04751c9 OpenVPN server, validate certificate type, closes https://github.com/opnsense/core/issues/3045 2019-02-28 16:36:40 +01:00
Michael Steenbeek
15ac90d94d Remote logging: move 'enable' to the top 2019-02-28 10:43:31 +01:00
Ad Schellevis
e4285e97fb Revert "System->Settings->Miscellaneous : add "Reset usb on boot" option"
This reverts commit 6dd8bbe14b1068d462654be46102a6f7f239c3c1.
2019-02-27 12:21:14 +01:00
Ad Schellevis
80d94767a7 firewall_schedule_edit.php, escape issues 2019-02-26 20:16:00 +01:00
Ad Schellevis
30931e5d6d Gateways/edit, escape issue which doesn't seem to add any value anymore 2019-02-26 19:46:54 +01:00
Ad Schellevis
6dd8bbe14b System->Settings->Miscellaneous : add "Reset usb on boot" option
While testing 4g modems, it seems that initial device detection isn't flawless leading to USB_ERR_IOERROR failures and non functional modems.
Most likely cause of these issues seems to be that some devices need a bit of time between powering the bus and performing registration.

This option adds an early boot script, which optionally performs a usbconfig reset on boot.
2019-02-25 16:49:25 +01:00
Ad Schellevis
f7213e84ea psec_mobile.php fix minor escaping issue 2019-02-20 08:44:18 +01:00
nhirokinet
895d6bb5b2 remove "show certificate info" on certificate list from pending CSR (#3243) 2019-02-18 11:36:09 +01:00
Franco Fichtner
b6cdbaa400 interfaces: do not do background ifconfig call 2019-02-14 19:02:26 +01:00
Franco Fichtner
9704e0d217 www: html_safe() for value=; closes #3218 2019-02-14 15:22:28 +01:00
Franco Fichtner
a1d5d74b5a www: everything not "dhcp" for #3218 2019-02-14 15:14:15 +01:00
Franco Fichtner
32cd65b9f9 firewall: tweak a help text 2019-02-14 15:02:12 +01:00
Franco Fichtner
0b879022ae www: d+f for #3218 2019-02-14 12:31:48 +01:00
Franco Fichtner
8f80173401 www: a few for #3218 2019-02-14 12:17:07 +01:00
Franco Fichtner
c0bbb4bbcb firewall: capture "nat" traffic like we do for "rdr" #3033 2019-02-14 09:41:46 +01:00
Ad Schellevis
2006837d18 system tunables, allow reset sysctl to factory defaults. between versions our defaults may vary, this provides an easy option to just use the current defaults. 2019-02-13 10:02:03 +01:00
Franco Fichtner
fdb7f22982 ntp: remove a confusing GPS logging hint 2019-02-12 23:20:06 +01:00
Ad Schellevis
d00fb61c92 LDAP, rename setUpCaEnv to setupCaEnv and fix StartTLS in system_usermanager_settings_ldapacpicker.php, closes https://github.com/opnsense/core/issues/3206 2019-02-12 09:05:16 +01:00
Franco Fichtner
e4f27ab8ba system: html_safe() for value='' 2019-02-11 09:41:10 +01:00
Ad Schellevis
afcbdee036 Auth cleanup, ditch ldap_setup_caenv() in favour of LDAP->setUpCaEnv(), for https://github.com/opnsense/core/issues/3206 2019-02-09 22:03:52 +01:00
Martin Wasley
7960f2ab77 Add validation check for time period for Dpinger (#3190) 2019-02-09 20:56:51 +01:00
Ad Schellevis
a5505463ab minor cleanups in firewall_nat_out_edit.php for https://github.com/opnsense/core/pull/3204
- strict page validation
- disable input's when hidden (generic page issue)
2019-02-08 15:12:31 +01:00
Fredrik Rönnvall
1e7b0d2082 Allow explicitly setting Source Hash Key
This key is randomly assigned unless set every time the ruleset is
loaded. In order to make it persist, allow setting it to a predetermined
value.
2019-02-08 14:21:46 +01:00
Franco Fichtner
ae7af5314b interfaces: change apply flow a bit, comment was misleading 2019-02-06 15:59:42 +01:00
Franco Fichtner
361fe644ed ipsec: there is no text-default 2019-02-04 07:23:58 +01:00
Ad Schellevis
4a8e737ced fix some gettext() + html_safe, discussed c4c7f8d732 2019-02-03 20:04:08 +01:00
Alexander Shursha
c4c7f8d732 Translate HighAvailability. (#2744) 2019-02-03 19:43:51 +01:00
Franco Fichtner
86872d4170 www: another escaping fix 2019-02-03 18:58:45 +01:00
Martin Wasley
28796e83a6 interfaces: DHCP Override MTU Option
It seems DHCP in 11.2 is honouring the ISPs MTU if it is sent. It
also seems there are some ISPs who send a stupid value. This fix
allows the user to ignore the ISP-supplied MTU (or not) with the
default set to ignore for compatibility with the previous behaviour.

PR: https://github.com/opnsense/core/issues/3173
2019-02-03 15:49:28 +01:00
Max Weller
8f96ff81ed IPSec: allow same Local Subnet if used in different Phase1 (#3121) 2019-02-01 18:40:23 +01:00
NOYB
f5d532a0f4 Legacy Browsers Accommodation (#3158) 2019-02-01 10:26:30 +01:00
Ad Schellevis
7ad7f55bca fix some escape issues in legacy code 2019-01-29 19:05:33 +01:00
Ad Schellevis
543ab380b2 ipsec/phase1, replace includes for indexOf, closes https://github.com/opnsense/core/issues/3149 2019-01-26 19:16:19 +01:00
Ad Schellevis
f39f6c9b73 Revert "ipsec/phase1, replace includes for indexOf for https://github.com/opnsense/core/issues/3149"
This reverts commit eff447b55902f48b59e4ac11081cce71445077b6.
2019-01-26 16:52:50 +01:00
Ad Schellevis
eff447b559 ipsec/phase1, replace includes for indexOf for https://github.com/opnsense/core/issues/3149 2019-01-26 16:16:07 +01:00
Franco Fichtner
87b939e7e2 monit: also whitespace tweak 2019-01-24 18:29:25 +01:00