11707 Commits

Author SHA1 Message Date
Ad Schellevis
2eebd08278 Shell inactivity timeout (for [t]csh). closes https://github.com/opnsense/core/issues/4936 2021-04-22 17:06:50 +02:00
Ad Schellevis
08dcb63b0d XMLRPC / HA sync - remove services from filter_configure_xmlrpc. closes https://github.com/opnsense/core/issues/4771
o add dpinger to routing, missed a spot there
2021-04-22 12:06:05 +02:00
Ad Schellevis
a9a844148d MVC: add uuid in ApiMutableModelControllerBase::validateAndSave() when a node is defined and has one. closes https://github.com/opnsense/core/issues/4904 2021-04-22 11:28:50 +02:00
Ad Schellevis
e2534f5a09 add "keyingtries" to IPsec Phase1 config, closes https://github.com/opnsense/core/issues/4204 2021-04-21 18:26:22 +02:00
Ad Schellevis
cdf328078b add policy based routing support for "dynamic gateway policy" type interfaces. closes https://github.com/opnsense/core/issues/4905
o expose gateway_interface property on gateway so consumers can act upon it
o exclude gateway_interface gateways on automatic "let out anything from firewall host itself (force gw)" rules to avoid side affects
o construct proper route-to statement when address is omitted
o construct proper reply-to statement when address is omitted and a reply-to property is set in the (dynamic) rule
2021-04-21 17:04:44 +02:00
Franco Fichtner
d3bc697309 importer: -p was never documented
It was actually written for the installer migration. \o/
2021-04-21 14:25:33 +02:00
Ad Schellevis
ca21b966a2 audit log: rename webgui to audit for https://github.com/opnsense/core/issues/4925 2021-04-20 10:34:30 +02:00
Ad Schellevis
cfb84fe8e9 Add audit log target and move related syslog messages (https://github.com/opnsense/core/issues/4925)
o add new "audit" log target
o move user auth log entries into the new scope
o send config changes to audit log including message if provided
o add messages in user and group administration
2021-04-19 18:04:35 +02:00
Franco Fichtner
253a888c26 installer: remove fluff 2021-04-19 14:19:04 +02:00
Greelan
19af1dc369
webgui: clarify help text for firewall rules traffic direction (#4848) 2021-04-19 13:51:22 +02:00
Ad Schellevis
65637ce15a phalcon 4, missed another Syslog for https://github.com/opnsense/core/issues/4012 2021-04-18 17:10:23 +02:00
Ad Schellevis
001325988c missed some small spots in https://github.com/opnsense/core/issues/4012
o one syslog unwrapped
o testsuite return class path missing
2021-04-18 17:04:34 +02:00
Franco Fichtner
e70427d9de system: leave an audit comment 2021-04-15 12:24:37 +02:00
Franco Fichtner
8bf56bf837 src: PHP error in Phalcon port
Fatal error: Declaration of OPNsense\Base\ViewTranslator::query($translateKey, array $placeholders = Array): string must be compatible with Phalcon\Translate\Adapter\Gettext::query($index, $placeholders = NULL) in /usr/core/src/opnsense/mvc/app/library/OPNsense/Base/ViewTranslator.php on line 45
2021-04-15 11:46:16 +02:00
Franco Fichtner
3a98ebb22f
Phalcon 4 migration (#4921)
phalcon 4 migration  #4012

o replace Phalcon\Session\Adapter\Files with new Phalcon\Session\Adapter\Stream adapter
o replace router->setUriSource() with handle() parameter
o combining sessions between phalcon and legacy php seems to be a bit problematic, first issue seems to be the legacy csrf check. refactor to use phalcon's method and legacy session
o Fix Phalcon Syslog usage in ControllerRoot (wrap in Logger class)
o session seems to miss standard prefix.
o also Gettext seems to like being wrapped...
o Gettext inheritance
o another handle()
o Volt: handle registerEngines / VoltEngine changes
o volt templates - missing session reference, bootstrap in ControllerBase
o router getRewriteUri() deprecated
o another handle() in index.php
o  Phalcon\Dispatcher::EXCEPTION_* moved to  Phalcon\Dispatcher\Exception::EXCEPTION_*
o changes in filter handling.
o fix plist
o Syslog usage changes
o refactor Validation changes
o FILTER_ALNUM - replaced FILTER_ALPHANUM
2021-04-15 11:36:57 +02:00
Franco Fichtner
cefe1069e4 installer: ok, one more ;) 2021-04-14 20:15:55 +02:00
Ad Schellevis
8d245d6d13 ipsec: fix php warning:
PHP Warning:  min(): Array must contain at least one element in /usr/local/etc/inc/plugins.inc.d/ipsec.inc on line 534
2021-04-14 13:19:59 +02:00
Franco Fichtner
161523247e installer: avoid padding to make this look fresh 2021-04-14 08:55:02 +02:00
Franco Fichtner
f9dd232a39 installer: remove old workaround 2021-04-13 15:01:30 +02:00
Franco Fichtner
55e4e45dac installer: no longer requires this 2021-04-13 14:06:18 +02:00
Franco Fichtner
3f3ebd9687 system: also pick up root user 2021-04-13 14:03:36 +02:00
Franco Fichtner
e8832a22fa rc: another zfs requirement for arm64 2021-04-13 13:34:36 +02:00
Franco Fichtner
95bfea65d0 rc: attempt to create /tmp if it does not exist 2021-04-13 12:07:06 +02:00
Franco Fichtner
a08b8ec72b installer: switch installer package 2021-04-13 09:35:28 +02:00
Franco Fichtner
10ea353bb5 filter: nop bweteen prints 2021-04-12 14:25:13 +02:00
Franco Fichtner
4fcc752721 system: CORE_SERIES is more accurate than CORE_ABI 2021-04-12 08:44:45 +02:00
kulikov-a
f6c0fa88d1
download_blacklists.py: match whole entry (#4915)
-match the entire string to prevent url entries
-add to skip stat if not match
2021-04-11 20:15:39 +02:00
kulikov-a
a76068beec
fw_log.volt: deffer url parsing (#4913) 2021-04-11 11:09:53 +02:00
Franco Fichtner
0f3fcd2b05 firmware: simplify for previous #4906 2021-04-09 14:28:05 +02:00
Franco Fichtner
35217ba0d1 firmware: if upstream package is missing complain; closes #4906
This points to a configuration error that should be resolved one
way or another.
2021-04-09 14:18:26 +02:00
Franco Fichtner
7d7aaa633d firmware: separate error for "forbidden" #4906 2021-04-09 14:06:27 +02:00
Franco Fichtner
61ca8a7b68 pkg: add series and nickname to metadata 2021-04-09 08:56:46 +02:00
Ad Schellevis
a785f71755 Firewall / Log Files / Live - refactor https://github.com/opnsense/core/pull/4902 a bit 2021-04-08 17:13:55 +02:00
Franco Fichtner
6658b92911 system: sort system_sysctl_get() output; closes #4907 2021-04-08 16:43:12 +02:00
Franco Fichtner
26c9ca7d08 rc: reverse list on stop action
Suggested by:	David Mora
PR:		https://github.com/opnsense/core/pull/4891
2021-04-08 16:43:12 +02:00
Franco Fichtner
bdb32652fb firmwre: make this clearer
Ideally, opnsense-update -M should replace this except
that -M is used to gain mirror access from other scripts
as well.  Need to think about it.
2021-04-08 16:43:12 +02:00
Franco Fichtner
aa56b3e45a system: reorder settings to let tunables override all 2021-04-08 16:43:12 +02:00
Ad Schellevis
f538c08065 unbound / blacklists: cleanse domain input. change regex in https://github.com/opnsense/core/issues/4898 per suggestion @kulikov-a 2021-04-08 16:43:12 +02:00
Franco Fichtner
d3063a2017 openvpn: remove OpenSSL engine support #4896 2021-04-08 16:43:12 +02:00
kulikov-a
90a4199e28
dialogTemplate.xml: dialog form 2021-04-06 12:03:18 +03:00
kulikov-a
8e8f87a15d
live view templates model 2021-04-06 11:00:21 +03:00
kulikov-a
903ba88fc7
live view templates model 2021-04-06 10:59:21 +03:00
kulikov-a
614c9fda8f
live view templates gui controller 2021-04-06 10:57:58 +03:00
kulikov-a
de4f483f7f
LvtemplatesController.php: live view templates 2021-04-06 10:56:28 +03:00
kulikov-a
7d66c4bf9b
fw_log.volt: add filter templates 2021-04-06 10:42:05 +03:00
Franco Fichtner
6c96038ced system: remove /dev/crypto GUI support #4896 2021-04-06 07:08:58 +02:00
Ad Schellevis
31a0c40e3f unbound / blacklists: cleanse domain input. closes https://github.com/opnsense/core/issues/4898
o while here, add missing import as well
2021-04-02 19:23:10 +02:00
Maurice Walker
0b9a778069
NPTv6 configuration clean-up (#4894)
* NPTv6 rule edit clean-up
Internal and external prefix length must be the same. Remove dstmask input and use srcmsk for source and destination.
"Invert" doesn't work for NPTv6. Remove.
Rephrase text to avoid confusion and match terminology used in firewall_nat_npt.php (Internal / External vs. Source / Destination).
* NPTv6 rule overview style fix
Uppercase for consistency.
2021-04-04 14:00:21 +02:00
Franco Fichtner
cd11a6a150 system: whitespace on previous 2021-04-01 14:24:15 +02:00
Martin Wasley
44072ec44c
Allow CPU temp display in Farenheit (#4098) 2021-04-01 14:22:50 +02:00