1301 Commits

Author SHA1 Message Date
NOYB
f509437f84 HTML Compliance - Attribute "content" value on Element <meta>
Error: A meta element with an http-equiv attribute whose value is X-UA-Compatible must have a content attribute with the value IE=edge.

The "Chrome=1" value was used to spawn Chrome Frame in IE 6,7,8,9.  However, "Google Chrome Frame was discontinued in January 2014", and think all IE<11 is beyond EOL.
So is this even needed/useful?

If needed/useful it would probably be better to support deployment by HTTP headers method instead.

Google Chrome Frame
https://en.wikipedia.org/wiki/Google_Chrome_Frame
2018-01-20 13:54:58 +01:00
Franco Fichtner
947718b44b firewall: fix booting alias resolve for #2102
While here, also honour ssl_no_verify and plug in force
usage in the right spot (currently unused but still).
2018-01-18 09:52:00 +01:00
Franco Fichtner
921b54d4fe intrusion detection: fix to backend scripts after refactor
PR: https://forum.opnsense.org/index.php?topic=6846.0
2018-01-13 10:10:57 +00:00
Ad Schellevis
60e4e8080c Firewall, aliasses. race condition in creating alias directory 2018-01-12 17:46:13 +01:00
Franco Fichtner
639bc741c7 dhcp: prefix delete is either a prerequisite, or...
an opportunistic delete so mute the failure in the log.
2018-01-10 19:00:40 +01:00
Franco Fichtner
018bea397a dhcp: second half of @marjohn56's changes; closes #2077 2018-01-10 18:48:57 +01:00
Franco Fichtner
c62f01f993 dhcp: address issue found by @marjohn56
PR: https://github.com/opnsense/core/pull/2077
2018-01-10 18:22:36 +01:00
Ad Schellevis
579d5f2510 firewall/alias, proper cleanup after kill, https://github.com/opnsense/core/issues/2051 2018-01-04 18:57:29 +01:00
Franco Fichtner
6b24c4ba57 system: fix openssl binary path #51 2017-12-29 12:35:16 +01:00
Franco Fichtner
65b7fb6453 firmware: remove the hotfix backend support, discontinued 2017-12-24 12:52:14 +01:00
Franco Fichtner
479908f1e4 firmware: patch in portable command usage #1992 2017-12-17 16:42:28 +00:00
Franco Fichtner
4d54029ec2 firmware: allow to reinstall kernel and base with reboot #1992 2017-12-16 20:11:18 +00:00
Franco Fichtner
a5d91a7e9b firmware: changes for kernel/base set visibility #1992 2017-12-16 18:26:01 +00:00
Franco Fichtner
16c65c0cc6 firmware: add frontend and middleware glue #1992 2017-12-14 23:04:13 +00:00
Franco Fichtner
a7132dec51 firmware: add backend support for health check #1992 2017-12-14 22:40:28 +00:00
Franco Fichtner
0e858edc39 firmware: strip arch from kerne/base display; closes #1992 2017-12-14 22:25:58 +00:00
Ad Schellevis
c202aee904 ipsec, upgrade vici lib to 5.5.3. https://github.com/opnsense/core/issues/1981 2017-12-12 20:24:22 +01:00
Franco Fichtner
a3e2687ddc firmware: the trick is to restart the GUI... 2017-12-12 09:29:49 +00:00
Franco Fichtner
de19a915b2 firmware: s/(?:family|core)/type/g
Consistent naming and a tiny bit of polish.
2017-12-12 06:16:38 +00:00
Franco Fichtner
fe8347663a firmware: allow to change release family from UI 2017-12-11 21:13:38 +00:00
Franco Fichtner
e6595f3028 firmware: do not act up on errors in core switch 2017-12-11 19:09:33 +00:00
Franco Fichtner
db6882fd58 firmware: test and switch for core package 2017-12-11 19:06:36 +00:00
Ad Schellevis
62e74933df firewall/aliases, only touch aliases we know how to handle (create room for other types handled differently), for https://github.com/opnsense/core/issues/1971 2017-12-11 13:29:24 +01:00
Ad Schellevis
aafa261e52 firewall/aliases, cleanup for https://github.com/opnsense/core/issues/1971 2017-12-11 13:28:50 +01:00
Ad Schellevis
a2b4ef98de firewall/alias, allow ipv4+ipv6 for geoip aliases, https://github.com/opnsense/core/issues/1971 2017-12-11 12:34:16 +01:00
Ad Schellevis
1188733c3a firewall, aliases. add basic exception handler on fetching remote url. for https://github.com/opnsense/core/issues/1971 2017-12-08 18:01:13 +01:00
Franco Fichtner
12702f34cc system: fix route resolve and remove stray hr 2017-12-06 07:56:45 +00:00
Franco Fichtner
e99ad4b4d0 system: reconfigure routes via apply #1774 2017-12-06 07:43:19 +00:00
Ad Schellevis
e51197e54b firewall / aliases, fix url parsing in new update. write alias contents while parsing (for traceability) 2017-12-04 21:55:34 +01:00
Ad Schellevis
c30704d101 firewall / alias, work in progress for https://github.com/opnsense/core/issues/1971 missed a check if the alias filename was already there. 2017-12-04 08:44:07 +01:00
Ad Schellevis
3503c16312 firewall, alias. work in progress https://github.com/opnsense/core/issues/1971 2017-12-03 20:18:34 +01:00
Ad Schellevis
a932093086 firewall / alias, work in progress https://github.com/opnsense/core/issues/1971 2017-12-02 09:59:44 +01:00
Ad Schellevis
7d815541bc filter / alias, wrap geoip download into separate package for further integration into new alias system 2017-12-01 15:34:01 +01:00
Ad Schellevis
e580afeab5 parse label from running firewall config, for https://github.com/opnsense/core/issues/1788 2017-11-03 22:41:07 +01:00
Ad Schellevis
708938328c work on live fw logging, https://github.com/opnsense/core/issues/1788 2017-11-03 21:52:13 +01:00
Ad Schellevis
15e2d55d77 insight, default sqlite timeout can be a bit low at 5 seconds, which can result in a failed commit (and daemon exit). 2017-10-24 21:13:12 +02:00
Ad Schellevis
d69f503938 firewall log parser script, bugfix, split rule and metadata during processing. for https://github.com/opnsense/core/issues/1788 2017-10-23 18:29:53 +02:00
Ad Schellevis
7c8f799011 filter log parsing, bug in parsing metadata (wrong order), work in progress for https://github.com/opnsense/core/issues/1788 2017-10-22 20:08:20 +02:00
Ad Schellevis
a0cb9c97b1 style fix in previous 2017-10-18 18:58:34 +02:00
Ad Schellevis
97fb9662bc add filter log parser script, for https://github.com/opnsense/core/issues/1788 2017-10-18 18:54:43 +02:00
Ad Schellevis
d567d90012 IPS, cleanup. move libs to shared location 2017-10-16 16:12:59 +02:00
Franco Fichtner
996d2bf363 firmware: allow `configctl firmware (un)lock'
Prevented throught the API action, but useful for an upcoming setting,
it locks the base + kernel.
2017-10-09 06:15:50 +00:00
Franco Fichtner
f6dec7ea3b firmware: pull the set size from the mirror
There is only one tiny missing piece: if we have both packages
and sets, we need to merge the download size and display it.
2017-10-08 18:14:45 +00:00
Franco Fichtner
7fd0451f32 firmware: rather say "unknown" instead of "none"
Remove an unused and only marginally useful value while there and
touch the strings that are displayed during execution, "please
wait" looks a lot friendlier and is more correct than 30 secs.
2017-10-08 14:30:51 +00:00
Franco Fichtner
75b06dc8ae firmware: anticipate base / kernel change from upgrade package 2017-10-08 14:18:47 +00:00
Franco Fichtner
ca9f2f3b85 firmware: remove "bsd" glue, it works without it 2017-10-08 13:59:23 +00:00
Franco Fichtner
6a05ba54b7 firmware: typo in revious 2017-10-08 15:03:20 +02:00
Franco Fichtner
d61c2a2336 firmware: -c can tell us if sets are locked 2017-10-08 14:57:44 +02:00
Franco Fichtner
bbe3ab4459 firmware: force-check to circumvent lock 2017-10-08 14:40:16 +02:00
Ad Schellevis
8f396690f2 IDS/IPS switch to tarball for et-open rules, improves download/install speed 2017-09-25 20:26:35 +02:00