10310 Commits

Author SHA1 Message Date
Ad Schellevis
2e6b138136 interfaces: interfaces_staticarp_configure(), don't flush arp table when booting, arp is really slow with a lot of interfaces. for https://github.com/opnsense/core/issues/3567 2019-07-12 14:43:27 +02:00
Ad Schellevis
028e7a260d interfaces, cleanup. while working on https://github.com/opnsense/core/issues/3567
Since $realhwif is the parent interface, it doesn't make sense to check for _vlan. We might as well remove the check and leave the rest as is, since it only triggers when either media or mediaopt is set.
2019-07-12 12:10:01 +02:00
Ad Schellevis
0a73a6f75f filter, pass ifconfig details in filter_core_rules_system() to improve loading. for https://github.com/opnsense/core/issues/3567 2019-07-12 11:25:11 +02:00
Ad Schellevis
197e70dbfa interfaces, performance. support passing the output of our ifconfig parser for https://github.com/opnsense/core/issues/3567 so we can prevent additional requests on non changing data 2019-07-12 11:03:06 +02:00
Ad Schellevis
24dc2a82b5 Insight. missing decode() when parsing ifconfig output leading to unexpected results. sqlite seems to store the binary in a varchar element, which looks right, but you can't compare it in your where statements. This doesn't seem to lead to issues when there is already valid content in the timeserie table. 2019-07-12 08:37:46 +02:00
Franco Fichtner
e914148f43 firmware: this made things worse 2019-07-12 06:52:15 +02:00
Ad Schellevis
29b383c33b filter/performance, improve loading speed by parsing legacy_interfaces_details() output through the plugin system. move verbose output while here. for https://github.com/opnsense/core/issues/3567 2019-07-11 22:03:53 +02:00
Franco Fichtner
9acb0ae66d firmware: this is better actually... 2019-07-11 21:01:16 +02:00
Franco Fichtner
0467bf28cb firmware: disable configd during upgrade
PR: https://forum.opnsense.org/index.php?topic=13431.15
2019-07-11 20:36:21 +02:00
Ad Schellevis
082b566d0f interfaces: performance for https://github.com/opnsense/core/issues/3567
* interfaces_addresses() only request single interface data when there's only one interface requested
* interface_configure() mtu check only needs a specific interface, don't request all
2019-07-11 18:44:43 +02:00
Ad Schellevis
67ba6bf12f style fix, while working on https://github.com/opnsense/core/issues/3567, noticed a naming issue in legacy_interfaces_details() 2019-07-11 18:43:12 +02:00
Ad Schellevis
e6a228da20 UI: auth.inc, use cached addresslist in referer check, for https://github.com/opnsense/core/issues/3567
This prevents ifconfig is executed on every request, which could take a long time when there are a lot of interfaces.
2019-07-11 18:37:36 +02:00
Ad Schellevis
292358b9e5 add cache helper function in config.inc, needed for https://github.com/opnsense/core/issues/3567
get_cached_json_content() deserialize json data when the file is found and not yet expired, returns null otherwise.
Since there might be some spots in the code where this can be convenient, it seemed like a good idea to wrap it in a function within the legacy code base.
Maybe config.inc is not enterily the right spot for this, but util.inc is quite diverse already.
2019-07-11 18:29:48 +02:00
Ad Schellevis
a6cd706755 Firewall, window_highlight_table_option(), safari seems to miss the border by one pixel, better to leave 1px spacing when animating the arrow to the right. 2019-07-11 13:45:48 +02:00
Ad Schellevis
e250b14ba7 console: banner, don't call ifconfig for each interface. one of the usability issues in https://github.com/opnsense/core/issues/3567
When there are a lot of interfaces, these calls consume quite some time and eventually the output of legacy_interfaces_details() is what matters to all of them.
2019-07-11 11:26:17 +02:00
Franco Fichtner
4c4bdea7d4 interfaces: further protect fallout triggered by 6ae356678dd
We can't be sure this won't happen again since the code makes
no effort to avoid such scenarios and happily moves on.  There's
probably more problematic code here down the line, but having
flushed out the other thing means we're on the right track.
2019-07-11 09:29:29 +02:00
Franco Fichtner
6ae356678d interfaces: fix ambiguity in get_parent_interface()
So having changed get_real_interface() to not check edge cases
for existing interfaces has bubbled up this check to the caller
get_parent_interface() which in turn made the check global.

The problem is that get_parent_interface() ran a hypothentical
code path through get_real_interface() and subsequently now
fails for dailup types leaving an empty interface.

That in turn caused some other refactoring to break where
individual device functions would take an argument or reload
all interfaces.  Now that dailup fiddles with get_parent_interface()
and overwrites the result of get_real_interface() in the main
interface_configure() run it would reconfigure previously
configured devices stripping their IP configuration in the
process.

Yikes!  :)

PR: https://forum.opnsense.org/index.php?topic=13442.0
2019-07-11 09:26:47 +02:00
Franco Fichtner
b2294eae1b firewall: pflog is doing strange things lately
Try to reload in case it can't open syslog and keep fully
reloading it to make sure that it stays operational.
2019-07-09 08:22:57 +02:00
Franco Fichtner
e184a5e403 firmware: the goal is to go directly to 19.7 2019-07-08 23:16:19 +02:00
Ad Schellevis
922ab1a95b packet capture, support multiple interfaces. closes https://github.com/opnsense/core/issues/2871
It's a short term solution, it would be better to refactor the legacy page and use configd calls, but since the "any" keyword wasn't possible in fbsd, it seemed like a good idea to allow multiple selections.

Changes in this commit:

- start tcpdump captures to files using /tmp/packetcapture_[INTERFACE].cap in stead of the single file before
- refactor "remove" action to delete all /tmp/packetcapture_*.cap
- refactor "view" action to iterate over all /tmp/packetcapture_*.cap files and return a named array per interface
- change download action to point to the actual filename and return content of found.
2019-07-07 15:22:00 +02:00
Ad Schellevis
7f84bff41e packet capture, typo in default 2019-07-07 11:08:42 +02:00
Ad Schellevis
3a6facd29e Revert "packet capture, add "any" interface option."
This reverts commit fea37f42efdd1690b0d729e62edf61966da007a1.
2019-07-07 11:02:44 +02:00
Ad Schellevis
fea37f42ef packet capture, add "any" interface option. 2019-07-05 13:38:22 +02:00
Franco Fichtner
8a51c13787 firmware: add message for update 2019-07-04 08:43:24 +02:00
Franco Fichtner
15cbd50b85 mvc: restyle a few opyright headers
More to come in views, currenty "make license" doesn't catch those
because the style doesn't match other files at all.
2019-07-04 08:10:57 +02:00
Ad Schellevis
220bb82007 Proxy, ditch "user-proxy-auth" usage and replace with local group restrictions. closes https://github.com/opnsense/core/issues/3250
constraints are easy to test with : /usr/local/sbin/opnsense-auth-test -s squid -u root
2019-07-02 15:33:06 +02:00
Ad Schellevis
5b5dc71d36 ACL, add support for group validation by id in inGroup(), needed for https://github.com/opnsense/core/issues/3250 2019-07-02 15:29:27 +02:00
Ad Schellevis
a1f93f43f2 stylefix 2019-07-02 15:00:13 +02:00
Ad Schellevis
3e8780873c MVC, AuthGroupField, don't add "none" if multiple selections are allowed. eventually we need to restructure this a bit more (https://github.com/opnsense/core/issues/3252), found while working on https://github.com/opnsense/core/issues/3250 2019-07-02 14:55:55 +02:00
Ad Schellevis
6811e6c7a9 firmware, typo in configd action (fix previous) 2019-07-02 13:50:31 +02:00
Ad Schellevis
707f52dc31 firmware, minor style issue. packages table has 6 columns 2019-07-02 13:44:22 +02:00
Ad Schellevis
930bb1002c Firmware, add repository and origin to local pkg query as well and use this one if installed. 2019-07-02 13:20:54 +02:00
Ad Schellevis
cdec5df11b Firmware, signal the user when installing a package from an external source.
* Adds repository, origin and path attributes to the api endpoint (for future use)
* When the software is not provided by OPNsense, popup a dialog informing the user.

We should probably refactor a bit more here, and make a clearer distinction between repositories in the frontend, this will have to wait until 19.7 is out.

as discussed with @fichtner
2019-07-02 12:01:11 +02:00
Franco Fichtner
091c0f5623 firmware: add 19.7 fingerprint 2019-07-02 08:30:14 +02:00
Franco Fichtner
a8c82ea748 firmware: requirements grew unfortunately 2019-07-02 10:09:38 +02:00
Franco Fichtner
5ef6d96dea firmware: add upgrade bits for 19.7.r1 2019-07-02 10:05:15 +02:00
Ad Schellevis
fc296c3ac4 Firewall/aliases. change default sorting from description to name, closes https://github.com/opnsense/core/issues/3550 2019-06-30 14:20:17 +02:00
Ad Schellevis
1d1ce841ff firewall/live-log, when changing the optimisation mode the line numbers don't seem to add up any more. Previously we used to parse the pf config to show our rules, it looks safer to use the actual running config using -vvPsr
ref https://forum.opnsense.org/index.php?topic=13308.0
2019-06-29 15:29:04 +02:00
Franco Fichtner
6b6e3ed32d firewall: give "none" values a valid translation; closes #3552 2019-06-25 17:12:38 +02:00
Franco Fichtner
5dc345bd4a src: style and whitespace sweep 2019-06-25 08:56:54 +02:00
Franco Fichtner
d7f509798f reporting: improve NetFlow validation and form behaviour #3547 2019-06-25 08:52:57 +02:00
Franco Fichtner
dea7824e0c ui: add a fail callback to e.g. disable progress spinners 2019-06-25 08:52:05 +02:00
Franco Fichtner
139f529942 system: syslog is syslogd really 2019-06-24 08:22:25 +02:00
Franco Fichtner
67b404f552 intrusion detection: try to fix $data['row'] handling #3474
Is this a browser-specific bug?
2019-06-23 20:49:07 +02:00
Ad Schellevis
c0fe5ceff4 IPv6 Router Advertisements, add advanced options, closes https://github.com/opnsense/core/issues/3366 2019-06-21 12:13:17 +02:00
Ad Schellevis
658e3d0092 Netflow, WAN|Egress interfaces should be in All / Listening interfaces list. for https://github.com/opnsense/core/issues/3547 2019-06-21 10:56:30 +02:00
Franco Fichtner
bc34ae18af reporting: small tweak on help label 2019-06-21 10:13:21 +02:00
Ad Schellevis
95e70f37e9 Netflow, minor addendum https://github.com/opnsense/core/issues/2197, in order for netflow to listen, all interfaces should be accounted for. 2019-06-21 09:41:42 +02:00
Ad Schellevis
58c3e6ccd9 Auth/ldap, use authentication factory for user import, might fix https://github.com/opnsense/core/issues/3445 2019-06-20 18:33:38 +02:00
Ad Schellevis
5ff6dd228c style fix, missing brackets 2019-06-20 18:18:01 +02:00