Franco Fichtner
3158956a27
system: fix PHP warning #4474
2020-11-25 08:53:55 +01:00
Ad Schellevis
e162f07797
User management: add button to request a new TOTP seed on system_usermanager_passwordmg.php for https://github.com/opnsense/core/issues/4474
2020-11-24 14:19:09 +01:00
Franco Fichtner
8fb1a11e33
system: whitespaces :D
2020-11-24 10:33:46 +01:00
Franco Fichtner
4b125cb095
pkg: fix plist
2020-11-24 10:21:26 +01:00
Ad Schellevis
96ae155a39
whitespace
2020-11-23 20:09:56 +01:00
Ad Schellevis
d70171bdc5
whitespace system_advanced_admin.php
2020-11-23 20:08:59 +01:00
Ad Schellevis
2c6da85d42
User management: add user OTP seed option in System->Settings->Administration. for https://github.com/opnsense/core/issues/4474
2020-11-23 18:37:35 +01:00
Ad Schellevis
74a64ce187
IDPS: bug in policy parser preventing ruleset filter to function. for https://github.com/opnsense/core/issues/4445
2020-11-23 17:48:10 +01:00
Ad Schellevis
1221542a43
IDPS: deprecate filter option on file downloads in favour of new policy option. migrates exsting filters to policies while there. for https://github.com/opnsense/core/issues/4445
2020-11-23 16:42:41 +01:00
Ad Schellevis
7cb67a90e1
Firewall: live-log, allow larger selection. closes https://github.com/opnsense/core/issues/4476
2020-11-21 23:59:20 +01:00
Franco Fichtner
6e2375b044
src: fix a couple of copyright header misalignments
2020-11-19 16:26:23 +01:00
Ad Schellevis
6ae303f14d
IPsec-VTI: allow mixed v4/v6. experiment for https://github.com/opnsense/core/issues/4472
2020-11-18 17:31:54 +01:00
Ad Schellevis
9924a2c811
System/gateways: there's no reason to enforce alias names in gateways. closes https://github.com/opnsense/core/issues/4470
2020-11-17 16:22:16 +01:00
Julio Cesar Camargo (JCC)
dae2efeee1
Add GSuite and Youtube filtering in proxy ( #4425 )
2020-11-17 15:51:24 +01:00
Ad Schellevis
4632286c55
Proxy: add missing X-Forwarded-For header option, closes https://github.com/opnsense/core/issues/4467
2020-11-16 20:55:02 +01:00
Ad Schellevis
bb8c58a3a8
system/logging: simplify log format parsing
2020-11-13 22:28:37 +01:00
Franco Fichtner
512730bd1a
system: syslog-ng again; fix this the hard way
2020-11-13 10:56:36 +01:00
Franco Fichtner
e6daf55d67
Revert "system: remove syslog-ng @version hint"
...
This reverts commit 9ed04c754b28c8b9abd48e78a3af1946ef8d32a5.
2020-11-13 10:45:29 +01:00
Franco Fichtner
a05612603c
Revert "system: break this, FreeBSD on the move already"
...
This reverts commit ff728e837cef2a6fe8a13b9b14269be0a89e9e95.
2020-11-13 10:45:24 +01:00
fhloston
2c888dadfc
Change dpinger syslog message to reflect correct RTT and RTTd unit ( #4456 )
...
Dpinger actually reports RTT and RTTd in µs.
2020-11-12 18:41:18 +01:00
Ad Schellevis
d992cfc2a2
Auth: support case insensitive username matching on LDAP+TOTP. closes https://github.com/opnsense/core/issues/4451
2020-11-10 09:21:21 +01:00
Franco Fichtner
ff728e837c
system: break this, FreeBSD on the move already
...
We could keep syslog-ng329 or we could just dash ahead with the
same binary package now named syslog-ng. Breaks core builds
intermittently but all will be fine once 20.7.5 hits.
2020-11-09 16:26:44 +01:00
Ad Schellevis
4765043e49
fix plist
2020-11-09 15:09:22 +01:00
Ad Schellevis
a0c043e693
IDS: work in progress policy editor for https://github.com/opnsense/core/issues/4445
...
With this commit policies functionally work, but there's still some refactoring todo.
o migrate download filters to a policy
o remove download filter option
o point to policies in the download section
o (maybe) move single rule overwrites to policies as well.
2020-11-09 15:02:14 +01:00
Franco Fichtner
dd2894d03d
pkg: fix plist
2020-11-09 10:20:52 +01:00
Franco Fichtner
9ed04c754b
system: remove syslog-ng @version hint
...
Following a discussion in FreeBSD ports to simplify ports handling
the missing @version will no longer trigger a warning in recent
syslog-ng releases so it's better to remove this to ease future
transitions of the port (merged into one "syslog-ng" port then).
2020-11-09 10:20:35 +01:00
Ad Schellevis
e00758ade6
IDS: bugfix previous for for https://github.com/opnsense/core/issues/4445
2020-11-08 19:37:58 +01:00
Ad Schellevis
289da7475d
IDS - work in progress policy editor for https://github.com/opnsense/core/issues/4445
...
o page render performance improvements
o layout rules section
2020-11-06 17:57:39 +01:00
Ad Schellevis
668d916834
MVC - core: add VirtualIPField including unit tests for https://github.com/opnsense/plugins/issues/2091
2020-11-06 14:23:06 +01:00
Franco Fichtner
8282910e5b
pkg: fix plist
2020-11-06 08:11:40 +01:00
Ad Schellevis
766bd666ae
IDPS: work in progress policy editor for https://github.com/opnsense/core/issues/4445
2020-11-05 18:15:01 +01:00
Ad Schellevis
6c6a94e95f
Revert "gateways: far gateway IPv6 for https://github.com/opnsense/core/issues/4436 "
...
This reverts commit d87f4d79c42deb84b51a0cac59f06cb55b93a199.
2020-10-30 17:37:35 +01:00
Ad Schellevis
d87f4d79c4
gateways: far gateway IPv6 for https://github.com/opnsense/core/issues/4436
...
(I'm not sure this works, let's ask for a test first)
2020-10-30 17:32:13 +01:00
Franco Fichtner
4e9a8abf98
firmware: add async reconfigure hook to syslog
...
rc.configure_plugins is likely fixed, but rc.configure_firmware
has the same issue so make this more maintanable by moving the
async request to the system function and put the former call back
with the async flag set.
Should fix syslog-ng related package configure hangs with regard
to pkg-based bug in recent versions.
2020-10-29 09:08:28 +01:00
Ad Schellevis
0ad3ec432f
openvpn: (ipv4 only) when only ifconfig_local is provided, calculate first network address as gateway address. for https://github.com/opnsense/core/pull/4433
2020-10-28 20:09:01 +01:00
Ad Schellevis
84e3c4b33a
Merge branch 'nowstuseeit-master' into master
2020-10-24 01:22:21 +02:00
Ad Schellevis
4198a1a8f3
proxy: cleanup, simlpify and add model version for https://github.com/opnsense/core/pull/4383
2020-10-24 01:21:51 +02:00
Ad Schellevis
f6865ddffb
Syslog: make sure to start/stop the correct syslog facility, detach reconfiguration in rc.configure_plugins for https://github.com/opnsense/core/issues/4397
2020-10-24 01:14:47 +02:00
Franco Fichtner
5ebce0d8ac
system: second try ;)
2020-10-24 01:14:47 +02:00
Franco Fichtner
b92bbb37b5
pkg: plist fix
2020-10-24 01:14:47 +02:00
Ad Schellevis
3ee8e907fe
add Base64Field type, closes https://github.com/opnsense/core/issues/4398
2020-10-24 01:14:47 +02:00
Franco Fichtner
74843e75b6
Revert "system: syslog_ng_pid replaced by syslog_ng_pidfile in FreeBSD ports"
...
This reverts commit 466b0de94dd2c61aebec6d53cd4adca26b7bba30.
2020-10-24 01:14:47 +02:00
ServiusHack
097a894c4e
Auth/LDAP: Fix reading displayName attribute ( #4418 )
...
In 6f76b5f the displayName attribute was added as the first camel case
attribute being read from the search result. As various[^1] comments[^2]
for `ldap_search` mention the attribute names must be lower case, even
though the LDAP server might return them differently.
Using all lower case to access the returned attribute results in the
value of displayName actually being used as the full name of the user.
[^1]: https://www.php.net/manual/en/function.ldap-search.php#37317
[^2]: https://www.php.net/manual/en/function.ldap-search.php#28991
2020-10-24 01:14:47 +02:00
Ad Schellevis
4235c72900
Filter: associated nat rules miss state keyword and when they would, the tag wouldn't be processed properly ($rule['type'] --> pass)
...
The associated nat rules remain a terrible construct, ideally we would make sure the automated rule matches a regular one, but if they do, the firewall_rules_edit.php page has to handle all sorts of corner cases leading to other unexpected behaviour.
This fixes a bug, cleaning this up would either need proper validations in the filter page or no extra validations at all (create/update, only note the relation, but don't try to enforce anything when associated-rule-id is set.
2020-10-24 01:14:47 +02:00
Franco Fichtner
9ad7e5463f
unbound: sort targets
2020-10-24 01:14:47 +02:00
Ad Schellevis
327850e1b0
firewall_nat_edit.php fix "PHP Warning: in_array() expects parameter 2 to be array, null given in /usr/local/www/firewall_nat_edit.php on line 542" when interface is missing, closes https://github.com/opnsense/core/pull/4407
2020-10-24 01:14:47 +02:00
Ad Schellevis
e7c01545bf
event "auth user changed", optimize core_user_changed_groups() to only perform local_group_set() when there are changes needed. found while working on https://github.com/opnsense/core/issues/4411
2020-10-24 01:14:47 +02:00
Ad Schellevis
ad747cdff0
system - usermanager: signal "auth user changed" when a user is modified via the webui. This should be rather harmless (the event was added in ecfd53ac2f)
...
Eventually some of the functionality in user/group management maybe moved to this hook, but to ensure a fast path to production, we'll keep duplicate work for now.
for https://github.com/opnsense/core/issues/4411
2020-10-24 01:14:47 +02:00
Frank Wall
d3d352c21d
ipsec: add description to reconfigure action ( #4401 )
...
refs https://github.com/opnsense/plugins/issues/2019
2020-10-24 01:14:47 +02:00
Ad Schellevis
ade287d61e
interfaces / assignments: lexical sort interface keys, closes https://github.com/opnsense/core/issues/4394
2020-10-24 01:14:47 +02:00