Franco Fichtner
2e314c016e
interfaces: push dhclient and dhcp6c to system log
...
Easier to see what's going on, both trigger most system reconfigure
events anyway.
PR: https://github.com/opnsense/core/issues/3197
Discussed with: @adschellevis
2019-02-07 18:17:20 +01:00
Ad Schellevis
7aab4a99d3
probe media before applying new settings, exclude vlan's (align to configure_interface_hardware()). for https://github.com/opnsense/core/issues/3198
...
We could debate that media is hardware setting and thus should move to configure_interface_hardware(), but seems to be the case for more settings in interface_configure().
Maybe it's an idea to move all of these things to a single point later, so legacy_interface_details() only needs to be called once.
2019-02-06 18:58:20 +01:00
Franco Fichtner
e4393e0dec
openssh: no hay /var/log/lastlog
2019-02-06 16:20:45 +01:00
Franco Fichtner
ae7af5314b
interfaces: change apply flow a bit, comment was misleading
2019-02-06 15:59:42 +01:00
Ad Schellevis
710b82917a
OpenVPN export, missing "port " in proto. for https://github.com/opnsense/core/issues/3193
2019-02-06 10:41:37 +01:00
Ad Schellevis
c83aa08c8f
obey verify-x509-name for "Remote Access ( User Auth )", for https://github.com/opnsense/core/issues/3193
2019-02-06 10:12:36 +01:00
Ad Schellevis
f0d7562e49
Monit, fix address validation. closes https://github.com/opnsense/core/issues/3195
2019-02-06 08:50:36 +01:00
Ad Schellevis
521afca140
rework 5ad905c897 ( https://github.com/opnsense/core/issues/3189 ), accidentally dropped support for known services ;)
2019-02-06 08:40:31 +01:00
Ad Schellevis
f3601c1c86
Revert "Util::isPort() validation issue, closes https://github.com/opnsense/core/issues/3189 "
...
This reverts commit 5ad905c89729d8540f7056e8ea2f94988d35f8ff.
2019-02-06 08:34:55 +01:00
Franco Fichtner
8e9dbc0c31
web proxy: switch to squid 4
2019-02-05 23:22:41 +01:00
Fabian Franz
01140aba5f
core: update config for squid version 4
2019-02-05 23:22:06 +01:00
Franco Fichtner
7363445d8d
interfaces: cleanups for MAC spoofing; closes #1352
2019-02-05 22:02:53 +01:00
Franco Fichtner
e5deb3e943
interfaces: correctly compare MAC addresses #1352
2019-02-05 21:45:32 +01:00
Ad Schellevis
5ad905c897
Util::isPort() validation issue, closes https://github.com/opnsense/core/issues/3189
2019-02-05 16:06:54 +01:00
Ad Schellevis
7ee1110d0f
ACL, reboot/halt. wrong pattern, for https://github.com/opnsense/core/issues/3187
2019-02-05 12:47:19 +01:00
Ad Schellevis
8f45e0d862
ipsec, nat before ipsec. if peer identifier isn't an address, spdadd can't add a tunnel. switch to remote-gateway if that is a valid ip address.
...
It's not a complete fix, for https://github.com/opnsense/core/issues/1773 but improves error logging and adds functionality when peer identifier is currently broken.
2019-02-05 11:23:14 +01:00
Franco Fichtner
9a9740dbfe
mvc: style issues
2019-02-04 12:38:01 +00:00
Ad Schellevis
830332a3ca
OpenVPN export, minor cleanup. server_cn field unused, could result in an error when not found (Undefined index).
2019-02-04 13:23:07 +01:00
Franco Fichtner
361fe644ed
ipsec: there is no text-default
2019-02-04 07:23:58 +01:00
Ad Schellevis
4a8e737ced
fix some gettext() + html_safe, discussed c4c7f8d732
2019-02-03 20:04:08 +01:00
Alexander Shursha
c4c7f8d732
Translate HighAvailability. ( #2744 )
2019-02-03 19:43:51 +01:00
Adi
427cac5dc7
Update squid.conf to add ESD file types ( #3156 )
2019-02-03 19:33:39 +01:00
Franco Fichtner
86872d4170
www: another escaping fix
2019-02-03 18:58:45 +01:00
Martin Wasley
28796e83a6
interfaces: DHCP Override MTU Option
...
It seems DHCP in 11.2 is honouring the ISPs MTU if it is sent. It
also seems there are some ISPs who send a stupid value. This fix
allows the user to ignore the ISP-supplied MTU (or not) with the
default set to ignore for compatibility with the previous behaviour.
PR: https://github.com/opnsense/core/issues/3173
2019-02-03 15:49:28 +01:00
Franco Fichtner
22dc4610da
pkg: fix plist
2019-02-03 11:45:42 +01:00
Ad Schellevis
6ee58cc30a
OpenVPN export, notation of verify-x509-name fix. should use a different seperator. for https://github.com/opnsense/core/issues/3174
2019-02-02 16:33:06 +01:00
Ad Schellevis
81364dd3dc
OpenVPN export, add missing compression setting, for https://github.com/opnsense/core/issues/3174
2019-02-02 16:15:59 +01:00
Ad Schellevis
9eebb2eb74
OpenVPN export, cleanse base name (only use alphanumeric characters), for https://github.com/opnsense/core/issues/3174
2019-02-02 16:12:44 +01:00
Max Weller
8f96ff81ed
IPSec: allow same Local Subnet if used in different Phase1 ( #3121 )
2019-02-01 18:40:23 +01:00
Ad Schellevis
f4ebba628f
netflow aggregate, prevent cleanup deleting current data when there's data recorded in the future.
...
Noticed on a test machine at the office, recorded some bytes at a timestamp in the future, which resulted in the current 2 hour range left empty....
2019-02-01 17:33:30 +01:00
Ad Schellevis
e9d1aa4579
OpenVPN export, some clients seem to have issues with uppercase protocol, ref https://forum.opnsense.org/index.php?topic=11415.msg51601
2019-02-01 17:27:49 +01:00
Ad Schellevis
defd8da1b1
flowd, dump our parsed log for debugging purposes
2019-02-01 16:38:03 +01:00
Ad Schellevis
df142dc8df
change os references to HardenedBSD
2019-02-01 16:13:12 +01:00
Franco Fichtner
ab2aa034a1
pkg: fix plist
2019-02-01 14:39:52 +01:00
NOYB
f5d532a0f4
Legacy Browsers Accommodation ( #3158 )
2019-02-01 10:26:30 +01:00
Franco Fichtner
654d6221da
interfaces: change indent in previous
2019-01-30 21:16:21 +01:00
Ad Schellevis
b154c3bee4
mpd, add Pin options to ModemIdentCustom. closes https://github.com/opnsense/core/issues/3164
2019-01-30 17:58:57 +01:00
Franco Fichtner
972c3aa2c6
firmware: fix previous
2019-01-30 08:28:13 +01:00
Franco Fichtner
b8116f8193
firmware: kernel / base version files no longer append architecture
2019-01-30 08:23:40 +01:00
Ad Schellevis
7ad7f55bca
fix some escape issues in legacy code
2019-01-29 19:05:33 +01:00
Ad Schellevis
2d444e92a2
Tokenize2, fix escaping, since our other escape fixes weren't pulled previously, we're fixing this locally for now.
...
(ref https://github.com/dragonofmercy/Tokenize2/pull/51 )
2019-01-29 18:47:04 +01:00
Ad Schellevis
0f6b29f5bb
MVC, PortField, add range validation and implement in TrafficShaper.xml, closes https://github.com/opnsense/core/issues/3162
2019-01-28 21:30:14 +01:00
Ad Schellevis
1df8c517e1
Alias, drop description validation constraints, closes https://github.com/opnsense/core/issues/3160
...
Input cleasing should already be handled by our framework, this should be harmless
2019-01-28 20:32:41 +01:00
Franco Fichtner
70a9cc6eaf
src: a little fun while at it
2019-01-28 12:12:37 +01:00
Ad Schellevis
9abf5af9a7
replace some JS includes with indexOf, IE compatibility
2019-01-27 11:33:03 +01:00
Ad Schellevis
543ab380b2
ipsec/phase1, replace includes for indexOf, closes https://github.com/opnsense/core/issues/3149
2019-01-26 19:16:19 +01:00
Ad Schellevis
7d964feff0
Revert "hook includes when not defined on String, for https://github.com/opnsense/core/issues/3149 "
...
This reverts commit ebb365f0618ad383c05aa7ada6f0a5461419d5cc.
2019-01-26 19:15:48 +01:00
Ad Schellevis
ebb365f061
hook includes when not defined on String, for https://github.com/opnsense/core/issues/3149
2019-01-26 16:59:59 +01:00
Ad Schellevis
f39f6c9b73
Revert "ipsec/phase1, replace includes for indexOf for https://github.com/opnsense/core/issues/3149 "
...
This reverts commit eff447b55902f48b59e4ac11081cce71445077b6.
2019-01-26 16:52:50 +01:00
Ad Schellevis
eff447b559
ipsec/phase1, replace includes for indexOf for https://github.com/opnsense/core/issues/3149
2019-01-26 16:16:07 +01:00