10369 Commits

Author SHA1 Message Date
Ad Schellevis
3eba9a739e php, move session files into it's own directory 2019-02-17 18:37:51 +01:00
Ad Schellevis
969f4523d5 certs.inc, make sure create_temp_openssl_config() can't wrap lines 2019-02-17 15:57:31 +01:00
Ad Schellevis
02b16dcc03 ids, rule-updater.py, cleanup unused 2019-02-16 11:51:11 +01:00
Ad Schellevis
4337e25521 Merge branch 'fredronnv-dev/ipfwcaptiveportal' 2019-02-15 19:32:03 +01:00
Ad Schellevis
3a02d1ab3e Merge branch 'dev/ipfwcaptiveportal' of https://github.com/fredronnv/core into fredronnv-dev/ipfwcaptiveportal 2019-02-15 19:30:41 +01:00
Franco Fichtner
90c0c395a5 interfaces: check for valid alias IP #3197
Suggested by: @tbandixen
2019-02-15 11:26:14 +01:00
Franco Fichtner
8e9ae38fdc Revert "interfaces: remove arp flush from dhclient-script #3197"
This reverts commit a1dbbb5ef132487c88b2b144ac67eeedb00a576c.
2019-02-15 11:22:07 +01:00
Ad Schellevis
621f84e900 legacy_config_get_interfaces, let's make sure we don't stumble over an empty interface, closes https://github.com/opnsense/core/issues/3231 2019-02-15 11:01:40 +01:00
Fredrik Rönnvall
6c263d4349 Revert "ipfw: there's no need to loop over cp_interfaces"
This reverts commit 6178310af241221faf94e9515235b002a12dfbdf.

Don't want to risk opening 53 on wan
2019-02-15 08:27:36 +01:00
Fredrik Rönnvall
6178310af2 ipfw: there's no need to loop over cp_interfaces
We can allow traffic to this host via all.
2019-02-15 08:15:00 +01:00
Fredrik Rönnvall
f2da545261 ipfw: only allow traffic to/from me via cp_interfaces 2019-02-15 08:09:05 +01:00
Franco Fichtner
b6cdbaa400 interfaces: do not do background ifconfig call 2019-02-14 19:02:26 +01:00
Franco Fichtner
156d6f7287 openvpn: daemon is already in the config #3223 2019-02-14 18:58:59 +01:00
Franco Fichtner
bbe0592b83 system: syslog doesn't need background job
The foreground option is -F so we double-background it...
2019-02-14 18:57:42 +01:00
Franco Fichtner
c217bee6f2 openvpn: proper daemonize instead of background job #3223 2019-02-14 18:37:36 +01:00
Franco Fichtner
f10b710a58 openvpn: remove stale PID file as well
PR: https://github.com/opnsense/core/issues/3223
Suggested by: @marjohn56
2019-02-14 18:22:18 +01:00
Franco Fichtner
5bc3ed8ccf src: style sweep 2019-02-14 18:08:59 +01:00
Fredrik Rönnvall
e8af5bee77 ipfw: Remove VIP loop / Add explicit "to me" for DNS
There's no need to explicitly loop around VIPs. We can get away with
simply allowing DNS "to me" via the captive portal interfaces.

Removed unneccessary attribute in cp_interface_list
2019-02-14 15:31:46 +01:00
Franco Fichtner
9704e0d217 www: html_safe() for value=; closes #3218 2019-02-14 15:22:28 +01:00
Franco Fichtner
a1d5d74b5a www: everything not "dhcp" for #3218 2019-02-14 15:14:15 +01:00
Franco Fichtner
32cd65b9f9 firewall: tweak a help text 2019-02-14 15:02:12 +01:00
Franco Fichtner
0b879022ae www: d+f for #3218 2019-02-14 12:31:48 +01:00
Franco Fichtner
8f80173401 www: a few for #3218 2019-02-14 12:17:07 +01:00
Franco Fichtner
d8f2251d7b LICENSE: sync 2019-02-14 12:16:59 +01:00
Ad Schellevis
2eabec274f temp fix for https://github.com/opnsense/core/issues/3222, partly revert adf314a4ab 2019-02-14 10:29:45 +01:00
Franco Fichtner
c0bbb4bbcb firewall: capture "nat" traffic like we do for "rdr" #3033 2019-02-14 09:41:46 +01:00
Ad Schellevis
67f4948670 OpenVPN, extract ca chain for https://github.com/opnsense/core/issues/1487 2019-02-13 11:19:13 +01:00
Ad Schellevis
2006837d18 system tunables, allow reset sysctl to factory defaults. between versions our defaults may vary, this provides an easy option to just use the current defaults. 2019-02-13 10:02:03 +01:00
Ad Schellevis
b424a2f9b3 defaults, more hardened defaults, prevent icmp redirects being send. 2019-02-13 09:57:40 +01:00
Ad Schellevis
7eb9a4f755 Merge branch 'fabianfrz-rspamd_fix_constraint' 2019-02-13 08:52:10 +01:00
Ad Schellevis
74f7ae60b1 style sweep 2019-02-13 08:51:54 +01:00
Ad Schellevis
e5d6107bee Merge branch 'rspamd_fix_constraint' of https://github.com/fabianfrz/core into fabianfrz-rspamd_fix_constraint 2019-02-13 08:47:11 +01:00
Franco Fichtner
fdb7f22982 ntp: remove a confusing GPS logging hint 2019-02-12 23:20:06 +01:00
Ad Schellevis
7b758564cf IDS, support required rules/files in metadata package, closes https://github.com/opnsense/core/issues/3228 2019-02-12 21:22:09 +01:00
Ad Schellevis
8695737563 IPS, set stream.inline: true to avoid https://redmine.openinfosecfoundation.org/issues/2811, for https://github.com/opnsense/core/issues/3211 2019-02-12 16:58:36 +01:00
Ad Schellevis
1bda0f495d
Update issue templates
Initial issue templates
2019-02-12 16:39:02 +01:00
Ad Schellevis
d00fb61c92 LDAP, rename setUpCaEnv to setupCaEnv and fix StartTLS in system_usermanager_settings_ldapacpicker.php, closes https://github.com/opnsense/core/issues/3206 2019-02-12 09:05:16 +01:00
Franco Fichtner
7f3f522673 dhcp: style 2019-02-12 07:05:28 +01:00
Ad Schellevis
3e8c67bddd Merge branch 'MichaelDeciso-feature/3034' 2019-02-11 22:27:23 +01:00
Ad Schellevis
287851c52b HAsync, minor cleanups 2019-02-11 22:26:55 +01:00
Ad Schellevis
7b16b99b73 Merge branch 'feature/3034' of https://github.com/MichaelDeciso/core into MichaelDeciso-feature/3034 2019-02-11 22:06:45 +01:00
Ad Schellevis
3acb8c4d90 Auth/LDAP, move tls options https://github.com/opnsense/core/issues/3206 2019-02-11 19:27:27 +01:00
Fabian Franz
b135ee8bba rspamd: fix constraint 2019-02-11 18:07:01 +01:00
Franco Fichtner
cac40cfd95 system: fix translation 2019-02-11 15:29:53 +01:00
Fredrik Rönnvall
11ea61423e Check for ':' is redundant
Captive portal supports only ipv4, checking for ':' (ipv6) is therefore
redundant
2019-02-11 13:04:10 +01:00
Franco Fichtner
e4f27ab8ba system: html_safe() for value='' 2019-02-11 09:41:10 +01:00
Ad Schellevis
12b80b85a8 Auth/ldap, fix for https://github.com/opnsense/core/issues/3206 closes https://github.com/opnsense/core/pull/3217 2019-02-11 08:46:55 +01:00
Franco Fichtner
93ebf02468 tzdata: sync with tzdata2018i 2019-02-10 20:14:23 +01:00
Ad Schellevis
b3a6440aca opnsense.js, fix setFormData() htmldecode + minor style fixes, closes https://github.com/opnsense/core/pull/3209 2019-02-10 20:09:59 +01:00
Ad Schellevis
0cb7758f36 Firewall/alias, prevent new alias creation when adding an address in addAction, pfctl -T add will automatically create a new alias when not found, which leads to confusing behaviour.
There is a small side effect, aliases not created by the user can not be appended anymore (bogons), but since these are system managed it's likely a small price to pay for clarity.

Closes https://github.com/opnsense/core/issues/3215
2019-02-10 19:11:27 +01:00