11079 Commits

Author SHA1 Message Date
Franco Fichtner
3aa89a9bc2 CONTRIBUTING: small updates and label explanations 2019-06-13 16:59:11 +02:00
Ad Schellevis
b0eeccb784 syslog, work in progress. add helper function to hook in configd to list registered applications so we can easily use these values in our mvc forms. 2019-06-10 20:28:54 +02:00
Ad Schellevis
274ec3556e syslog, move core syslog facilities (applications in our case) to core plugin 2019-06-10 20:26:04 +02:00
Ad Schellevis
3b2c9aecdc syslog, remove remote keywords in _syslog() plugins, moved to syslog-ng template 2019-06-10 20:23:48 +02:00
Ad Schellevis
f32816d53a IDPS, show sid in alert view. closes https://github.com/opnsense/core/issues/3527 2019-06-10 14:46:09 +02:00
Franco Fichtner
85a7fcdf7c system: this isn't entirely true, but helps differentiate vs. "local syslog" 2019-06-09 18:49:05 +02:00
Ad Schellevis
3c13d7a2b2 plist 2019-06-09 17:31:24 +02:00
Ad Schellevis
41fcaf2436
move to syslog-ng (#3524)
Integrate syslog-ng into core system without removing current circular log functionality, the basic idea here is to keep syslogd to write circular log files which will turn into a consumer of syslog-ng messages. 

New sources, which will register automatically in s_all, are defined in /usr/local/opnsense/service/templates/OPNsense/Syslog/sources/. Plugins can write additional sources here (such as log sockets).

Legacy remote log targets are collected in syslog-ng-legacy-remote.conf, which should mimic the previous syslogd targets.
2019-06-09 16:28:50 +01:00
Ad Schellevis
d57aa5e4c8 IDPS, minor usability improvements.
* in download tab add enable selected with filter options
* when using bulk actions, obey filter results (filter -> select all -> action, should apply on visible items)
* move button actions to tab events, preventing accidental event removal
2019-06-07 18:18:28 +02:00
Ad Schellevis
1b09b47ff1 IDPS, Allow changing Suricata rule actions in bulk and some minor cleanups. closes https://github.com/opnsense/core/issues/3514 2019-06-07 16:20:09 +02:00
Ad Schellevis
34e942ad16 firewall_rules_edit.php, gateway validation issue (trying to validate groups). closes https://github.com/opnsense/core/issues/3511 2019-06-07 14:54:52 +02:00
Ad Schellevis
3af744e03d IDPS, when toggling rules, keep current action. closes https://github.com/opnsense/core/issues/3513 2019-06-07 14:42:31 +02:00
Franco Fichtner
e9f2862bd7 interfaces: background configd reconfigure; closes #2267 2019-06-07 11:15:43 +02:00
Franco Fichtner
55641d204d interfaces: actually just create the OpenVPN if needed 2019-06-05 11:45:21 +02:00
Franco Fichtner
2de53c3fa6 openvpn: guard doesn't make a lot of sense here 2019-06-05 11:11:13 +02:00
Franco Fichtner
ea04d268ec firmware: don't trust pkg now or in the future with `-q' 2019-06-05 08:33:20 +02:00
Franco Fichtner
f55ad273b7 pkg: move to Python 3.7 2019-06-03 07:59:55 +02:00
Ad Schellevis
459da410eb update copyright in previous while here. 2019-06-02 10:51:50 +02:00
Ad Schellevis
40bd0c5dc8 dhcpd leases watcher, file rotation issue. closes https://github.com/opnsense/core/issues/3478 2019-06-02 10:43:37 +02:00
Ad Schellevis
06acf28ae5 IDPS, missing header id in alerts tab resulting in wrong count for bootgrid, closes https://github.com/opnsense/core/pull/3367 2019-06-01 09:41:52 +02:00
Ad Schellevis
a79bb94cb7 dhcpdv4, better explain the relation between the gateway setting and the configured gateways. This question popups now and then. closes https://github.com/opnsense/core/issues/3509 2019-05-31 15:05:48 +02:00
Ad Schellevis
a714c22060 configd/templates add support for helpers.glob() to enable template traversal, which is practical when trying to merge several files into the same output.
required for https://github.com/opnsense/core/issues/3505
2019-05-31 14:41:59 +02:00
Ad Schellevis
a21baa1d85 openvpn server, add live-search to some longer lists. 2019-05-28 12:08:24 +02:00
Ad Schellevis
7a143c8557 OpenVPN export, hide p12 password when not applicable. closes https://github.com/opnsense/core/issues/3500 2019-05-27 11:41:15 +02:00
Ad Schellevis
8bb3f1f38c OpenVPN export, support cryptoapicert to load certificates from the windows certificate system store, for https://github.com/opnsense/core/issues/3500 2019-05-26 14:47:45 +02:00
Ad Schellevis
e8dbda338f rework previous 2019-05-24 15:04:15 +02:00
Ad Schellevis
54551b03ee Proxy, minor regression in authentication. contraints are always checked now, which should only apply for local. related to https://github.com/opnsense/core/issues/3250 2019-05-24 15:02:56 +02:00
Franco Fichtner
4482cb1d6c interfaces: code review, flip logic 2019-05-24 07:56:58 +02:00
Franco Fichtner
5d83d8612c pkg: since CORE_PYTHON2 goes away make 3 the CORE_PYTHON default 2019-05-23 08:57:38 +02:00
Franco Fichtner
5184400115 firewall: change this back #3497 2019-05-23 08:30:32 +02:00
Franco Fichtner
7218726f59 system: style update 2019-05-22 07:06:35 +02:00
Ad Schellevis
fb4a9bedaa dhcp/leases, forgot to replace from-to with address range min, max. for https://github.com/opnsense/core/issues/3487 2019-05-21 20:34:31 +02:00
Ad Schellevis
446caa9941 dhcp/leases, simplify interface lookup and make it more consistent. should fix https://github.com/opnsense/core/issues/3487 2019-05-21 20:21:50 +02:00
Ad Schellevis
9b63e33621 Merge branch 'clystron-dhcp_failover_params' 2019-05-21 19:58:01 +02:00
Ad Schellevis
7a15556bad minor cleanups for https://github.com/opnsense/core/pull/3484 and handle 0 values. 2019-05-21 19:57:30 +02:00
Ad Schellevis
f886e4d439 Merge branch 'dhcp_failover_params' of https://github.com/clystron/core into clystron-dhcp_failover_params 2019-05-21 19:42:51 +02:00
Franco Fichtner
8b22eebb9c pkg: move python dep to 3 2019-05-21 09:04:26 +02:00
Franco Fichtner
f772b4ef9a system: reduce diff vs. stable 2019-05-21 09:01:53 +02:00
Franco Fichtner
255e9b76b4 system: add pluginctl -s support
For legacy components route -s option through plugins_services()
to get a list of services that can be controlled like the GUI
controls.  E.g.:

    # pluginctl dhcpd [start|stop|restart]

PR: https://forum.opnsense.org/index.php?topic=12781.0
2019-05-20 21:05:10 +02:00
Ad Schellevis
10108b0615 captiveportal, use "onestop" to stop captiveportal, when there's no zone configured "stop" would be skipped since the service is disabled. issue seems to be introduced in 0299224578 2019-05-20 16:36:34 +02:00
Franco Fichtner
4175a45f4b system: fix netflow lib permission 2019-05-20 13:24:38 +02:00
Thomas Jensen
283d62a007 Add homelab.no repository 2019-05-20 13:00:08 +02:00
Ad Schellevis
f086f8c48d flowd aggregate, minor bug in commit counter, leading to single row commits after row # 100k 2019-05-20 11:42:00 +02:00
Ad Schellevis
03c75f71be system: address CVE-2019-11816 privlege escalation bugs
Reported by: Arnaud Cordier
2019-05-19 09:39:18 +02:00
Ad Schellevis
28ed5741f4 netflow, make sure get_timeserie_data() returns string type objects in stead of bytes, to prevent 17e4e9c0fc (commitcomment-33587137)
we might find some other small type interpretation differences, but the bumpiest seems to be gone now.
2019-05-18 09:23:25 +02:00
Ad Schellevis
2bdc74b8a1 netflow, switch dump_log.py script to python3 2019-05-18 09:22:29 +02:00
Ad Schellevis
3d1617b2bd netflow, minor type issue, parameter received as bytes in get_timeseries.py 2019-05-17 16:50:32 +02:00
Ad Schellevis
918e4671ea netflow, fix rc script for flowd_aggregate 2019-05-17 16:42:19 +02:00
Ad Schellevis
31982e2872 netflow, migrate flowd aggregator to python 3 2019-05-17 16:41:08 +02:00
Northguy
0b40897fd3 Fix dhcp leases help text (#3488) 2019-05-17 15:26:25 +02:00