7778 Commits

Author SHA1 Message Date
Ad Schellevis
34a695074a filter, port alias download uses wrong interpretation of checkaliasesurlcert option, by default it doesn't seem to validate certs. we should definitely change our config details to enable this.... 2017-11-28 17:44:09 +01:00
Ad Schellevis
fc7fd2be4c cleanup, move X-Frame-Options up for clarity 2017-11-28 14:24:22 +01:00
Franco Fichtner
145c7c8f24 system: translate default language indicator 2017-11-28 13:51:26 +01:00
Franco Fichtner
c45a428ef6 ui: nicer header spacing 2017-11-28 13:34:51 +01:00
Ad Schellevis
1219f2f1db system_certmanager, xss with crafted cert. for https://github.com/opnsense/core/issues/1964 2017-11-28 10:57:01 +01:00
Ad Schellevis
2b94b6691a another take on tab removal. (https://github.com/opnsense/core/issues/1928)
The current dev version has two main issues when there are too many sub menu's, this commit aims to smoothen these issues as far as possible.

1) When an item is selected which lies beyond the visible area, the menu looses track of what is selected. This commit forces the selected item to center.
2) Scrolling in a large list hides the top level structure, using this commit the selected path will always stay on top by temporary moving the menu items into another z-index.

because the menu system applies to both legacy as new style code, we need the same construction in both templates. maybe we should at some point move these into functions somewhere in an extrenal js file.

@fichtner for me this fixes the need to bring tabs back into the firewall section.
2017-11-27 21:44:17 +01:00
Ad Schellevis
70b74c29dc filter, port aliases (url type) fix a type and separate loading before we can change the other aliases.
url_ports didn't work, in a first step we're goint to split logic so we can remove the dependency for the other (network) alias types by switching to tables later in combination with a different procedure to actually load the alias contents.
At some point in time we might consider removing the url port types, their not used very often and can't use table types and therefore can't detach creation from loading.
2017-11-26 20:11:06 +01:00
Franco Fichtner
96b97eabfa firmware: terminate session for all but config read/write for #1954
This finally fixes some of the aborted internally errors given by the page.
2017-11-24 08:10:02 +00:00
Franco Fichtner
7ccfe1ba9f web proxy: synchronous service start, no delay, session closed for #1954 2017-11-24 07:54:39 +00:00
Ad Schellevis
91c8493068 openvpn, forgot to show remote_network for other server modes. for https://github.com/opnsense/core/issues/1932 2017-11-23 21:21:05 +01:00
Ad Schellevis
7338c4f81f mvc, change default (non api) pages to send X-Frame-Options:SAMEORIGIN, to deny embedding in [i]frames from other locations. 2017-11-23 08:29:13 +01:00
Ad Schellevis
35dd2ea09c openvpn, remove check for mode in remote_network, remote_networkv6
It doesn't seem to make sense to ask for a value and ignore it afterwards, there doesn't appear to be a valid reason to validate here.
For https://github.com/opnsense/core/issues/1932
2017-11-23 06:51:44 +01:00
Franco Fichtner
70f5acad06 ui: service control indicators and button rework; closes #1562
While here, use fontawesome icons and make the legacy and MVC
header section match in layout terms.
2017-11-22 11:45:42 +00:00
Franco Fichtner
f228940d97 mvc: small fix and style sweep for dialog titles 2017-11-22 09:45:36 +00:00
Franco Fichtner
821002c560 mvc: breadcrumb titles in all core pages; closes #1948 2017-11-22 09:23:39 +00:00
Franco Fichtner
f6e5e963f1 pkg: easy dhparam target for regeneration
Regenerate, while at it...
2017-11-22 09:40:31 +01:00
Franco Fichtner
95215828a7 openvpn: more relocations for private scripts 2017-11-22 08:56:26 +01:00
Franco Fichtner
dc353d4860 openvpn: move internal script file to plugin location 2017-11-22 08:50:54 +01:00
Franco Fichtner
aaf2178f5a www: merge ticker.js into opnsense_legacy.js 2017-11-22 08:45:49 +01:00
Franco Fichtner
8e9f4db5bc system: autoupdate firmware privs are not needed since forever 2017-11-22 07:34:46 +00:00
Franco Fichtner
6102d61056 system: additional sanity check, otherwise we kill the system default #1218 2017-11-22 07:28:26 +00:00
Franco Fichtner
543c7b286d system: add syslog-ng, disable processing so that it coexists with syslogd 2017-11-22 07:13:53 +00:00
Franco Fichtner
d3373a848d mvc: switch function order for smaller diff against stable/17.7 2017-11-21 17:51:39 +01:00
Franco Fichtner
d021ae1431 firmware: fix typos 2017-11-21 17:17:37 +01:00
Ad Schellevis
2f84c67427 MVC/Menu system, restructure interface collection a bit. less repetition, should be faster as well. 2017-11-21 17:12:20 +01:00
Franco Fichtner
a58dcf7cdf ui: the neverending tab story #1922 2017-11-21 08:50:54 +00:00
Ad Schellevis
2826d6206e ui/mvc, make "advanced mode" sticky too, requested https://github.com/opnsense/core/issues/1915 2017-11-21 08:55:25 +01:00
Franco Fichtner
c12b4ab610 menu: flip back, unify naming by adding "v4" suffix 2017-11-21 08:14:41 +01:00
Franco Fichtner
5ce9933f2b firewall: fix scrub edit cancel link 2017-11-21 05:24:55 +00:00
Franco Fichtner
db785c954f firewall: fix rules edit cancel menu behaviour #1928 2017-11-21 05:24:01 +00:00
Franco Fichtner
94713036f2 radvd: advertise on virtual IPs
PR: https://github.com/opnsense/core/issues/1937
2017-11-20 21:00:26 +00:00
Franco Fichtner
38c1daa965 dhcp: support stateless DHCP
* Support stateless RA and update help text
* Allow DHCPv6 to run without a range

PR: https://forum.opnsense.org/index.php?topic=6418.0
2017-11-20 20:24:43 +00:00
Ad Schellevis
38aafc8fa7 IDS, add tls and http logging in eve and alert log viewer.
- add options to suricata yaml
- add tls and http options in alert view
- bug: fix issue with grid when interface is missing (crash on replace())
- style: change dialog markup, a bit wider and less padding.

a bit related to https://github.com/opnsense/core/issues/1911
2017-11-20 21:03:03 +01:00
Franco Fichtner
edf4210b6f menu: kill display_top_tabs(); closes #1928 2017-11-20 17:16:00 +00:00
Franco Fichtner
224579328c menu: rework wireless status for #1928 2017-11-20 17:14:25 +00:00
Ad Schellevis
581b8b17bc ipsec, add support for elliptical curve dh groups and change default dhgroup in the process (from 2 -> 24), last but not least some dhgroups seemed to be missing an implementation. for https://github.com/opnsense/core/issues/1942 2017-11-20 13:10:42 +01:00
Ad Schellevis
df4de782b3 insight, reverse lookup acl fix 2017-11-20 08:05:26 +01:00
Franco Fichtner
a3d16f7844 intrusion detection: two issues, closes #1935 2017-11-20 06:19:50 +00:00
Franco Fichtner
39f95f01e9 mvc: style sweep 2017-11-20 05:35:45 +01:00
Franco Fichtner
f48e891ed8 system: fix regression in spaghetti code for #1218 2017-11-20 03:33:06 +00:00
Franco Fichtner
d4c14d5ab2 system: properly translate login failure message
PR: https://github.com/opnsense/core/issues/1218
2017-11-19 21:36:28 +00:00
Franco Fichtner
c28070014e system: push set_language() further down
PR: https://github.com/opnsense/core/issues/1218
2017-11-19 21:28:41 +00:00
Franco Fichtner
416c76745a mvc: rework previous for #1218
doAuth() is a good spot for language, but we need to set the
system language even on auth failures, carfully checking if
the session is valid (username is set), and only then changing
to the user's preferred language.
2017-11-19 20:30:22 +00:00
Alexander Shursha
378e91864f User-based language in MVC (#1921) 2017-11-19 21:11:11 +01:00
Franco Fichtner
97c4edf4d2 router advertisements: fix dhcp6 start on 'unamaged'
We set the mode for radvd config, not for preventing users to
configure a DHCP6 while in unmanaged mode.

PR: https://github.com/opnsense/core/issues/1258
2017-11-19 21:00:45 +01:00
Ad Schellevis
5376520776 opnsense theme / tabs, compile for https://github.com/opnsense/core/issues/1922 2017-11-19 18:49:34 +01:00
Franco Fichtner
65e18d2ee8 mvc: tab layout tweaks for #1922 2017-11-19 18:44:06 +01:00
Ad Schellevis
6f33916b1f IDS, if we're calling configd actions and don't need a session futher on, we should definitely close our session before calling it. prevents lockups 2017-11-19 18:32:28 +01:00
Franco Fichtner
84bd7d8e30 unbound: register dhcp domain name for interface if found
PR: https://github.com/opnsense/core/issues/1940
2017-11-19 17:45:30 +01:00
Ad Schellevis
735f9b8770 configd / template overwrites, for https://github.com/opnsense/core/issues/1934
as discussed with @fichtner use +TARGETS.D to host the target overwrite tags
2017-11-19 15:53:01 +01:00