Franco Fichtner
2a970b568a
src: style sweep
2022-01-07 12:24:18 +01:00
Franco Fichtner
c3d96426a3
Revert "fix copy-and-paste error in help div"
...
This reverts commit b2bca01f9ca5bcdfc7ea66df6f32b74bfaf8c488.
Actually there is no way to toggle these two so this is expected.
2022-01-07 12:10:45 +01:00
Franco Fichtner
5b77e24fa6
importer: issue with display when no ZFS is there
2022-01-07 10:45:34 +01:00
Franco Fichtner
d84768c82c
ipsec: a long long time ago, I can't still remember...
...
See: https://github.com/opnsense/src/commit/18b9d9d9365
2022-01-07 10:00:41 +01:00
Franco Fichtner
c17899c76c
firmware: almost there
2022-01-07 09:53:51 +01:00
Ad Schellevis
7672d54c78
IPsec: FreeBSD 13 compatibility fixes, closes https://github.com/opnsense/core/issues/5450 , https://github.com/opnsense/core/issues/5464
...
o remove unsupported algorithms, which have been removed in https://cgit.freebsd.org/src/commit/?id=16aabb761c0a
o make sure to load the ipsec module similatr to what the new rc scripts do (https://github.com/freebsd/freebsd-ports/commit/3b35676c7a812c7 )
o while here, simplify the algo selector and remove the weird checkbox/select options, keep backward compatibility for aes key key lengths.
2022-01-06 14:14:25 +01:00
Paolo Asperti
8222c6517e
add API call api/diagnostics/interface/get_interface_config ( #5448 )
...
exposes system ifconfig to the API
2022-01-06 09:04:03 +01:00
Franco Fichtner
7d7db31673
LICENSE: sync
2022-01-05 09:37:37 +01:00
Franco Fichtner
a8c6bd924d
system: display system tunables as well
...
This sort of completes the previous effort to improve the
sysctl handling. The idea to embed sysctls into the config.xml
is certainly valid, but for some values we needed more leeway
for system defaults and changing them over time, which lead
to this state where we can drop config.xml default tunables
since the system will now apply and display then for the same
visibility but offer less incentive to change these values.
One thing missing here is adding a system tunable override
(plus sign) for system values, but we shall deal with this later
because for now they can always be added manually by copy+paste.
2022-01-05 09:33:22 +01:00
Franco Fichtner
1ccfd260e9
firmware: show "misconfigured" first before defaulting to "orphaned"
...
The reason for this is the plugin conflict dialog pops up but it is
unclear what it wants. Once reset the orphaned status will be dispayed.
2022-01-05 08:36:05 +01:00
Franco Fichtner
a7ad2845a1
mvc: translate screen reader labels where we can
2022-01-05 07:54:38 +01:00
Franco Fichtner
a5f1e2c7c4
system: default to 1000 for net.inet6.ip6.intr_queue_maxlen
...
We do the same for IPv4. While here enforce these sysctls
instead of relying on the existence of tunables.
2022-01-04 17:22:21 +01:00
Franco Fichtner
208be46ce2
pkg: happy new year!
2022-01-03 11:21:26 +01:00
Franco Fichtner
f7ebd85268
system: add Polish, degrade Italian
2022-01-03 10:53:18 +01:00
Franco Fichtner
98a049a904
src: translation style issues
2022-01-03 10:29:56 +01:00
Ad Schellevis
dd1776030c
IPSec - change default ciphers and hash algoritms to more secure variants and add a note about unsecure options. closes https://github.com/opnsense/core/issues/5450
2021-12-31 20:13:34 +01:00
Ad Schellevis
a5dfeb476a
mvc: Add <hint> support for text fields, pull in and reformat https://github.com/opnsense/core/pull/5442
2021-12-31 16:01:13 +01:00
kulikov-a
36e12e1d7d
Firewall: Log Files: Live View - simplify previous ( #5444 )
...
since config data is always html-safe html() method can be used directly
2021-12-31 13:38:45 +01:00
Ad Schellevis
ce0186236c
Firewall: Log Files: Live View - fix escape, closes https://github.com/opnsense/core/issues/5432
...
escape info popup fields as well
2021-12-31 10:23:42 +01:00
Ad Schellevis
5da7349a12
Firewall: Log Files: Live View - fix escape, closes https://github.com/opnsense/core/issues/5432
...
unescape label texts before flusing to td element.
2021-12-31 09:31:38 +01:00
Franco Fichtner
6439c039d5
src: whitespace sweep
2021-12-29 12:54:16 +01:00
kulikov-a
d7a1d9fa75
MVC - initFormAdvancedUI: universal stripes adjustment ( #5435 )
2021-12-28 14:55:30 +01:00
Franco Fichtner
d6494ab06e
src: whitespace sweep
2021-12-28 11:15:49 +01:00
vnxme
aa20ccba4c
Firewall/Scrub: Display interface descriptions ( #5433 )
2021-12-28 09:07:41 +01:00
Christian Tramnitz
de3a021dd9
fix strict-order
...
Currently, when configured, "strict-order" adds the necessary "strict-order" argument. However, the hardcoded "all-servers" arguments overrides this, making "strict-order" pointless.
With this change, "all-servers" and "strict-order" are mutually exclusive.
2021-12-27 07:32:50 +01:00
Christian Tramnitz
b2bca01f9c
fix copy-and-paste error in help div
2021-12-27 07:31:53 +01:00
kulikov-a
cece0d28de
MVC - handleFormValidation : improve item match ( #5428 )
2021-12-26 19:29:14 +01:00
Bryce Verdier
26df508f07
Services / Intrusion detection - downloader.py style fixes ( #5413 )
2021-12-23 19:41:05 +01:00
kulikov-a
2aeaca5ad2
Firewall/Live View: skip rid for nat ( #5424 )
2021-12-22 20:29:48 +01:00
Franco Fichtner
f83209cae3
captive portal: use -f when deleting files that may not be there
...
Originally looked into
Starting API dispatcher
2021-12-22 11:03:56: (configfile.c.426) Warning: mod_auth should be listed in server.modules before dynamic backends such as mod_cgi
2021-12-22 11:03:56: (configfile.c.426) Warning: mod_auth should be listed in server.modules before dynamic backends such as mod_fastcgi
but it looks like this is a false positive since we don't have mod_auth in there.
2021-12-22 11:04:22 +01:00
Andrew
a719e43ae3
util: add support for terabytes, and petabytes to format_bytes ( #5405 )
...
This formatted number is used by the Interface Statistics widget,
and makes the columns go wider than necessary when going above a
terabyte of data. Add petabytes for good measure.
2021-12-22 08:00:02 +01:00
Franco Fichtner
eb786c95e8
firmware: although unlikely just patch this in then
2021-12-22 07:57:57 +01:00
Andrew
234fa8ba95
firmware/status: Update to support terabytes ( #5417 )
2021-12-22 07:56:27 +01:00
Ad Schellevis
94ed9756c9
fix plist
2021-12-21 19:02:30 +01:00
Ad Schellevis
834ef3b2e2
Monit - move logging to own log target. closes https://github.com/opnsense/core/issues/5422
2021-12-21 17:54:35 +01:00
Ad Schellevis
c281f1e573
Firewall / Alias - remove global $aliastable reference and use our shared \OPNsense\Firewall\Util::isAlias() instead. closes https://github.com/opnsense/core/issues/5423
...
Although a direct table lookup will be faster than using a lookup in isAlias(), it's likely not problematic to have a slightly slower lookup using is_alias(), but if performance is of the essence at some point we can easily cache results in isAlias() to reach the same target.
2021-12-21 16:59:24 +01:00
Franco Fichtner
e4d5478662
pkg: avoid upgrades if already done, use VERSIONBIN
2021-12-21 12:07:37 +01:00
Franco Fichtner
20cee8237b
system: add backend handler for log rotation
...
... and use it in usual spot as well as on boot to ensure that
latest.log files always exist (hello /var MFS). This makes
opnsense-log happier.
2021-12-21 09:17:26 +01:00
Franco Fichtner
9b8024ea85
system: do not mess with mount points in /var for /var MFS
2021-12-20 13:29:09 +01:00
Northguy
894e86c624
Patch traffic shaper texts ( #5420 )
2021-12-19 19:31:57 +01:00
kulikov-a
784ebd8d27
Logs: quick severity filter with "Warning" default ( #5370 )
2021-12-19 15:59:05 +01:00
Ad Schellevis
a984542d37
Firewall / Aliases - log resolve errors (ref https://forum.opnsense.org/index.php?topic=26034 )
2021-12-17 19:48:03 +01:00
Ad Schellevis
7629c9aa87
Firewall: Diagnostics: States - handle IPv6 NAT, closes https://github.com/opnsense/core/pull/5414
2021-12-17 19:10:22 +01:00
Franco Fichtner
ea2349af06
firmware: apparently /etc/motd is gone on FreeBSD 13
...
Long live /var/run/motd then...
2021-12-17 10:13:42 +01:00
Franco Fichtner
353468a261
system: default to both IPv4 and IPv6 redirects to disable
...
Done for hardening as done in b424a2f9b3b7 plus now IPv6 can
leverage ip6_tryforward() with the new default.
2021-12-16 16:56:55 +01:00
Franco Fichtner
876604b392
pkg: fix plist
2021-12-16 15:23:04 +01:00
Ad Schellevis
9008f98a6a
Interfaces / LTE - remove more or less dead cruft the 3gstats collects in some rare cases.
...
Although there probably are a couple of Huawei modems which do report status info as advertised in the script, there are also a lot who don't and maybe deadlocked when pulling for data on a "random" port.
For now we should remove this, if at some point in the future a sensible method would be supported to poll status in a more "vendor independent" manor, we can always revise.
2021-12-16 15:08:08 +01:00
Franco Fichtner
1eb25c2490
system: do not clobber mount points
...
In case of ZFS a move doesn't really work. Remove links only
and move the directory contents over.
2021-12-16 10:51:14 +01:00
Franco Fichtner
50d3f5e738
system: mostly adjust -z mode to give size and identifier from ZFS pools
2021-12-15 08:42:54 +01:00
Franco Fichtner
d7e6dbde38
system: df -t zfs returns duplicated tmpfs entries; closes #5344
...
When not using -t the list is correct and since we have -T make
sure we filter for the ones we asked for before. -a seems like
a good fit here too.
2021-12-14 22:19:48 +01:00