9361 Commits

Author SHA1 Message Date
Ad Schellevis
34ce46bbde Firewall / alias, hook new alias system into menu for https://github.com/opnsense/core/issues/1858 2018-08-24 17:54:36 +02:00
Ad Schellevis
9080e6b63a Firewall / alias, change template for https://github.com/opnsense/core/issues/1858 2018-08-24 17:53:27 +02:00
Ad Schellevis
0673a37a9a Firewall/alias, minor timing tweak, for https://github.com/opnsense/core/issues/1858 2018-08-24 16:47:01 +02:00
Ad Schellevis
dd2debaeaf MVC, add iterateItems() method to base field type to simplify callflow 2018-08-24 12:09:08 +02:00
Ad Schellevis
ab94750568 Firewall/alias, add reconfigure button + action for https://github.com/opnsense/core/issues/1858 2018-08-24 11:36:25 +02:00
andi-makandra
270e6de7ff dhcpd: treat EFI BC the same as EFI x86-64 (#2669)
Several vendors use EFI BC instead of the EFI x86-64 value for the arch, some thinkpads for example. We noticed this while we tried to use PXE on all our machines and that some EFI systems with 64-bit didn't work and some did. We then found the old commit that change the if clause from 00:07 to 00:09 and tested around. Thus we found out that some machines use 7 and some 9, so IMHO it's correct to redirect both cases to the 64bit syslinux filename. This commit doesn't break old configs, just adds the additional option.
2018-08-24 11:10:10 +02:00
Ad Schellevis
dcbd2ab547 firewal/alias, fix missing brackets for https://github.com/opnsense/core/issues/1858 2018-08-24 10:55:40 +02:00
Ad Schellevis
3add6c7cc9 configd, add xml attributes to template parser, when referring an uuid from a Jinja template use something similar to:
{{item['@uuid']}}
2018-08-23 21:32:58 +02:00
Ad Schellevis
d0458d50ae dhcpd / staticmap, remove unused inputs, see https://github.com/opnsense/core/pull/2651 2018-08-21 20:28:52 +02:00
Ingo Theiss
55f05950b5 Add DHCP Dynamic DNS key algorithm drop-down list (#2651) 2018-08-21 20:06:33 +02:00
Werner Fischer
bf0b3f1acc fix adding interfaces LAN bug of German interface (#2653) 2018-08-20 12:10:06 +02:00
Ad Schellevis
b693a3b99a ipsec, add ike keyexchange option, for https://github.com/opnsense/core/issues/2642 2018-08-17 11:54:51 +02:00
Franco Fichtner
6c4912cfce unbound: cleanups on previous #2627 2018-08-17 08:35:55 +02:00
John Keates
90efc01809 Swap stub-zone for forward-zone
stub-zone doesn't work for non-authorative upstream DNS servers, but forward-zone does.
2018-08-17 08:35:07 +02:00
Franco Fichtner
a3ff635dc6 firewall: nonfunctional updates to shaper addition 2018-08-17 08:12:04 +02:00
Franco Fichtner
82be7c461e firewall: whitespace cleanups 2018-08-17 08:02:02 +02:00
Franco Fichtner
4c5bff4991 openvpn: take this socket cleanup #2610 2018-08-17 07:40:06 +02:00
Ad Schellevis
81d70d630a openvpn, align auth-user.php to use common_name, closes https://github.com/opnsense/core/issues/2641 2018-08-16 21:28:39 +02:00
Franco Fichtner
4d664bc39d openvpn: allow /32, & bitwise operator is before != ???
PR: https://forum.opnsense.org/index.php?topic=9445.0
2018-08-16 16:15:49 +00:00
Franco Fichtner
8287fcf32a firewall: return alias types to unbreak outbound NAT rule edit 2018-08-16 11:13:17 +00:00
Franco Fichtner
ecbb352211 Revert "firewall: a bit weird, page indicates host aliases"
This reverts commit d30125e0fbf1d08f1e2053a4f088528d5632c5fa.
2018-08-16 11:11:44 +00:00
Franco Fichtner
5810cc7a31 firewall: fix more glitches in outbound alias target 2018-08-16 10:35:39 +02:00
Franco Fichtner
3ddea146e3 firewall: round-robin is for host alias nat/rdr; loosely refs #2625
This simplifies the logic for the interface redirect target
as we use :0 and push it directly to the kernel to resolve.

From pf.conf:

   Tables can also be used for the redirect address of nat and
   rdr rules and in the routing options of filter rules, but only
   for round-robin pools.
2018-08-16 10:17:05 +02:00
Franco Fichtner
d30125e0fb firewall: a bit weird, page indicates host aliases 2018-08-16 09:36:31 +02:00
Franco Fichtner
f31858bb96 firewall: a bit more of interface kernel resolving #2625 2018-08-16 08:36:25 +02:00
Franco Fichtner
075c0a92aa firewall: always push interface resolve into the kernel #2625 2018-08-16 08:36:25 +02:00
Alexander Graf
8222fe7700 don't wrap first column (date/time) of log viewer
the date/time column of the log viewer wraps when viewing logs with
very long lines (for example when viewing the acme client log)
this adds white-space: nowrap to the first column
2018-08-15 21:20:19 +02:00
Ad Schellevis
a52fce58a9 regression in previous, forgot namespace part. for https://github.com/opnsense/core/issues/2569 2018-08-15 20:57:54 +02:00
Ad Schellevis
fb072dbd6b Revert "Revert "load ipfw when either CP or the trafficshaper is enabled, final take on https://github.com/opnsense/core/issues/2569""
This reverts commit 6152f14b6b2c6662cc4a0d18258eb30e5a5141f6.
2018-08-15 20:27:45 +02:00
marjohn56
d1fc5afc2b interfaces: remove use of adv_dhcp6_prefix_interface_statement_sla_id
Section of code I've removed had been removed previously as during recent
PR's the ability to iterate through the interfaces was added. This 'solo'
bit of code appears to have made its way back in, don't know where and
don't know when as the song goes. Remove SLA_ID from Prefix interface.
It's collected from the LAN settings
2018-08-15 17:19:38 +00:00
Franco Fichtner
6152f14b6b Revert "load ipfw when either CP or the trafficshaper is enabled, final take on https://github.com/opnsense/core/issues/2569"
This reverts commit 82d207f98cd19690ee7ba4d02c7a46ed25d6fff4.
2018-08-15 14:52:35 +02:00
Franco Fichtner
5d2ff1def1 captive portal: fix server tag; closes #2638 2018-08-15 08:24:15 +02:00
Ad Schellevis
82d207f98c load ipfw when either CP or the trafficshaper is enabled, final take on https://github.com/opnsense/core/issues/2569 2018-08-14 20:51:21 +02:00
Franco Fichtner
32aa199882 ui: no minified version for tokenize2
Discussed with: @adschellevis
2018-08-14 17:48:07 +02:00
Franco Fichtner
2eae0a496b system: tweak previous to make code clearer 2018-08-14 17:45:21 +02:00
Franco Fichtner
eccc786ef1 system: fix policy check on empty password save 2018-08-14 13:03:48 +00:00
Franco Fichtner
f0b59689ce rc: remove fluff from ipfw load script 2018-08-14 11:23:29 +02:00
Ad Schellevis
75444ea6e8 ipfw/dummynet, don't depend on ipfw to load it's modules, it may cause side effects like https://github.com/opnsense/core/issues/2569 2018-08-14 10:54:53 +02:00
Ad Schellevis
e9dfa48953 Revert "squid, deleay startup during boot, for https://github.com/opnsense/core/issues/2569"
This reverts commit 72af231b41403447c682dc9337301ebde786a168.
2018-08-14 10:54:21 +02:00
Ad Schellevis
ee98ebb29e firewall/nat, hide Redirect target port when port is not applicable 2018-08-13 19:42:14 +02:00
Ad Schellevis
72af231b41 squid, deleay startup during boot, for https://github.com/opnsense/core/issues/2569 2018-08-13 16:49:52 +02:00
Franco Fichtner
bc3dd5afca interfaces: allow explicit mtu to reach the stf device; closes #2553 2018-08-13 00:58:21 +02:00
Franco Fichtner
adf314a4ab interfaces: register em1_stf instead of wan_stf
Discussed with: @adschellevis
2018-08-13 00:35:01 +02:00
Franco Fichtner
207ed37fac interfaces: $destroy does not exist anywhere 2018-08-13 00:34:06 +02:00
Franco Fichtner
2916d620d4 openvpn: "connection refused" cannot mean a lot of things #2610 2018-08-12 23:40:50 +02:00
Fabian Franz
3836464e86 fix table headers: tr elements cannot have a colspan, th elements can 2018-08-12 22:36:19 +02:00
Ad Schellevis
29cb71425d OpenVPN p2p_tls with /30 fix, for https://github.com/opnsense/core/issues/2624 2018-08-12 14:21:27 +02:00
Franco Fichtner
db50af0d5a ui: rework the resize logic to remember the current setting; closes #2628 2018-08-12 12:15:23 +02:00
Franco Fichtner
fb541dd8ba ui: fix footer boxing; closes #2626 2018-08-11 23:22:47 +02:00
Franco Fichtner
71043f1bb7 firewall: use runtime interface address resolving for #2625 2018-08-11 13:32:27 +02:00