Ad Schellevis
3eba9a739e
php, move session files into it's own directory
2019-02-17 18:37:51 +01:00
Ad Schellevis
969f4523d5
certs.inc, make sure create_temp_openssl_config() can't wrap lines
2019-02-17 15:57:31 +01:00
Ad Schellevis
02b16dcc03
ids, rule-updater.py, cleanup unused
2019-02-16 11:51:11 +01:00
Ad Schellevis
4337e25521
Merge branch 'fredronnv-dev/ipfwcaptiveportal'
2019-02-15 19:32:03 +01:00
Ad Schellevis
3a02d1ab3e
Merge branch 'dev/ipfwcaptiveportal' of https://github.com/fredronnv/core into fredronnv-dev/ipfwcaptiveportal
2019-02-15 19:30:41 +01:00
Franco Fichtner
90c0c395a5
interfaces: check for valid alias IP #3197
...
Suggested by: @tbandixen
2019-02-15 11:26:14 +01:00
Franco Fichtner
8e9ae38fdc
Revert "interfaces: remove arp flush from dhclient-script #3197 "
...
This reverts commit a1dbbb5ef132487c88b2b144ac67eeedb00a576c.
2019-02-15 11:22:07 +01:00
Ad Schellevis
621f84e900
legacy_config_get_interfaces, let's make sure we don't stumble over an empty interface, closes https://github.com/opnsense/core/issues/3231
2019-02-15 11:01:40 +01:00
Fredrik Rönnvall
6c263d4349
Revert "ipfw: there's no need to loop over cp_interfaces"
...
This reverts commit 6178310af241221faf94e9515235b002a12dfbdf.
Don't want to risk opening 53 on wan
2019-02-15 08:27:36 +01:00
Fredrik Rönnvall
6178310af2
ipfw: there's no need to loop over cp_interfaces
...
We can allow traffic to this host via all.
2019-02-15 08:15:00 +01:00
Fredrik Rönnvall
f2da545261
ipfw: only allow traffic to/from me via cp_interfaces
2019-02-15 08:09:05 +01:00
Franco Fichtner
b6cdbaa400
interfaces: do not do background ifconfig call
2019-02-14 19:02:26 +01:00
Franco Fichtner
156d6f7287
openvpn: daemon is already in the config #3223
2019-02-14 18:58:59 +01:00
Franco Fichtner
bbe0592b83
system: syslog doesn't need background job
...
The foreground option is -F so we double-background it...
2019-02-14 18:57:42 +01:00
Franco Fichtner
c217bee6f2
openvpn: proper daemonize instead of background job #3223
2019-02-14 18:37:36 +01:00
Franco Fichtner
f10b710a58
openvpn: remove stale PID file as well
...
PR: https://github.com/opnsense/core/issues/3223
Suggested by: @marjohn56
2019-02-14 18:22:18 +01:00
Franco Fichtner
5bc3ed8ccf
src: style sweep
2019-02-14 18:08:59 +01:00
Fredrik Rönnvall
e8af5bee77
ipfw: Remove VIP loop / Add explicit "to me" for DNS
...
There's no need to explicitly loop around VIPs. We can get away with
simply allowing DNS "to me" via the captive portal interfaces.
Removed unneccessary attribute in cp_interface_list
2019-02-14 15:31:46 +01:00
Franco Fichtner
9704e0d217
www: html_safe() for value=; closes #3218
2019-02-14 15:22:28 +01:00
Franco Fichtner
a1d5d74b5a
www: everything not "dhcp" for #3218
2019-02-14 15:14:15 +01:00
Franco Fichtner
32cd65b9f9
firewall: tweak a help text
2019-02-14 15:02:12 +01:00
Franco Fichtner
0b879022ae
www: d+f for #3218
2019-02-14 12:31:48 +01:00
Franco Fichtner
8f80173401
www: a few for #3218
2019-02-14 12:17:07 +01:00
Franco Fichtner
d8f2251d7b
LICENSE: sync
2019-02-14 12:16:59 +01:00
Ad Schellevis
2eabec274f
temp fix for https://github.com/opnsense/core/issues/3222 , partly revert adf314a4ab
2019-02-14 10:29:45 +01:00
Franco Fichtner
c0bbb4bbcb
firewall: capture "nat" traffic like we do for "rdr" #3033
2019-02-14 09:41:46 +01:00
Ad Schellevis
67f4948670
OpenVPN, extract ca chain for https://github.com/opnsense/core/issues/1487
2019-02-13 11:19:13 +01:00
Ad Schellevis
2006837d18
system tunables, allow reset sysctl to factory defaults. between versions our defaults may vary, this provides an easy option to just use the current defaults.
2019-02-13 10:02:03 +01:00
Ad Schellevis
b424a2f9b3
defaults, more hardened defaults, prevent icmp redirects being send.
2019-02-13 09:57:40 +01:00
Ad Schellevis
7eb9a4f755
Merge branch 'fabianfrz-rspamd_fix_constraint'
2019-02-13 08:52:10 +01:00
Ad Schellevis
74f7ae60b1
style sweep
2019-02-13 08:51:54 +01:00
Ad Schellevis
e5d6107bee
Merge branch 'rspamd_fix_constraint' of https://github.com/fabianfrz/core into fabianfrz-rspamd_fix_constraint
2019-02-13 08:47:11 +01:00
Franco Fichtner
fdb7f22982
ntp: remove a confusing GPS logging hint
2019-02-12 23:20:06 +01:00
Ad Schellevis
7b758564cf
IDS, support required rules/files in metadata package, closes https://github.com/opnsense/core/issues/3228
2019-02-12 21:22:09 +01:00
Ad Schellevis
8695737563
IPS, set stream.inline: true to avoid https://redmine.openinfosecfoundation.org/issues/2811 , for https://github.com/opnsense/core/issues/3211
2019-02-12 16:58:36 +01:00
Ad Schellevis
1bda0f495d
Update issue templates
...
Initial issue templates
2019-02-12 16:39:02 +01:00
Ad Schellevis
d00fb61c92
LDAP, rename setUpCaEnv to setupCaEnv and fix StartTLS in system_usermanager_settings_ldapacpicker.php, closes https://github.com/opnsense/core/issues/3206
2019-02-12 09:05:16 +01:00
Franco Fichtner
7f3f522673
dhcp: style
2019-02-12 07:05:28 +01:00
Ad Schellevis
3e8c67bddd
Merge branch 'MichaelDeciso-feature/3034'
2019-02-11 22:27:23 +01:00
Ad Schellevis
287851c52b
HAsync, minor cleanups
2019-02-11 22:26:55 +01:00
Ad Schellevis
7b16b99b73
Merge branch 'feature/3034' of https://github.com/MichaelDeciso/core into MichaelDeciso-feature/3034
2019-02-11 22:06:45 +01:00
Ad Schellevis
3acb8c4d90
Auth/LDAP, move tls options https://github.com/opnsense/core/issues/3206
2019-02-11 19:27:27 +01:00
Fabian Franz
b135ee8bba
rspamd: fix constraint
2019-02-11 18:07:01 +01:00
Franco Fichtner
cac40cfd95
system: fix translation
2019-02-11 15:29:53 +01:00
Fredrik Rönnvall
11ea61423e
Check for ':' is redundant
...
Captive portal supports only ipv4, checking for ':' (ipv6) is therefore
redundant
2019-02-11 13:04:10 +01:00
Franco Fichtner
e4f27ab8ba
system: html_safe() for value=''
2019-02-11 09:41:10 +01:00
Ad Schellevis
12b80b85a8
Auth/ldap, fix for https://github.com/opnsense/core/issues/3206 closes https://github.com/opnsense/core/pull/3217
2019-02-11 08:46:55 +01:00
Franco Fichtner
93ebf02468
tzdata: sync with tzdata2018i
2019-02-10 20:14:23 +01:00
Ad Schellevis
b3a6440aca
opnsense.js, fix setFormData() htmldecode + minor style fixes, closes https://github.com/opnsense/core/pull/3209
2019-02-10 20:09:59 +01:00
Ad Schellevis
0cb7758f36
Firewall/alias, prevent new alias creation when adding an address in addAction, pfctl -T add will automatically create a new alias when not found, which leads to confusing behaviour.
...
There is a small side effect, aliases not created by the user can not be appended anymore (bogons), but since these are system managed it's likely a small price to pay for clarity.
Closes https://github.com/opnsense/core/issues/3215
2019-02-10 19:11:27 +01:00