12336 Commits

Author SHA1 Message Date
Ad Schellevis
416fc37ee9 Firewall: add model for categories. work in progress for https://github.com/opnsense/core/issues/4587
o replace type ahead with tokenizer (mutli select) while here, since the type ahead needed fixes which we rather don't copy to the other firewall sections
o we might want to change the model serializeToConfig() and reload and send it to a separate function in config.inc later to ease migration later. Part of it could be separated with a callback, but it's not super needed
o hook categories into model for firewall rules
2021-01-12 18:14:50 +01:00
Franco Fichtner
c6f4d40ae0 system: fix tab use in previous 2021-01-12 16:23:23 +01:00
Franco Fichtner
a398928ce5 system: update message of the day, mailing lists are going away 2021-01-12 16:01:36 +01:00
Franco Fichtner
718848a836 unbound: generate all files, make sure we say "apply" on apply: closes #4536 2021-01-12 14:16:47 +01:00
Franco Fichtner
4dbc220490 dhcp: use same logic as menu figuring out if dhcpv6 is reachable; closes #4406 2021-01-12 12:16:51 +01:00
Franco Fichtner
09659ff25b firmware: disable autoscroll if client position differs; closes #4545
This excludes the "reset", i.e. when the action was done or the page
loads initially with the previous log file.
2021-01-12 11:55:45 +01:00
Franco Fichtner
93be19f402 firmware; show repository in overview; closes #4578 2021-01-12 11:20:14 +01:00
Franco Fichtner
45ab146df0 pkg: "development release", not package 2021-01-12 10:16:13 +01:00
Ad Schellevis
8b7d1a5b1b MVC: add locking in JsonKeyValueStoreField type.
Although in theory the current stat() should at least make sure the same thread wouldn't execute the same action twice, it seems in reality actions are being executed
for every record in a set. Calling stat() after write+flush seems to return the previous status in stead of the one just written to disk (ufs issue on fbsd?). To prevent this from happening, use fstat() and lock the target
file while processing.

Found this with the firewall api plugin enabled and a set of rules in it, which seemed to trigger "list gateways" for every record.
2021-01-11 19:48:32 +01:00
Franco Fichtner
cc67f7625e pkg: fix plist 2021-01-11 20:06:52 +01:00
Ad Schellevis
9550a9072a Firewall: add model for categories. work in progress for https://github.com/opnsense/core/issues/4587
o while here, make sure the existing alias migration pins on the Alias model to avoid being called by other models.
2021-01-11 18:51:43 +01:00
Franco Fichtner
f1177fae5f firmware: allow soon-to-be 21.1-RC1 update 2021-01-11 10:13:46 +01:00
Franco Fichtner
e232f24f04 make: too early, fix git checkout emulation 2021-01-11 09:32:23 +01:00
Franco Fichtner
50700b8cd7 pkg: wrong PHP default since a while 2021-01-11 09:30:51 +01:00
Franco Fichtner
1b0ebb2c8b make: more git magic 2021-01-11 08:57:31 +01:00
Manuel Faux
6000c02a4f
Firewall ACLs: Add readonly actions to "Aliases" permission (#4588) 2021-01-10 20:11:46 +01:00
Franco Fichtner
986a49c2f0 LICENSE: sync 2021-01-10 19:40:45 +01:00
Franco Fichtner
7e7c9901eb system: should be the case via 993c9e545fb5 2021-01-10 19:33:46 +01:00
Lucas Held
b138ca38a7
pftop: fix all state value (#4584) 2021-01-10 19:02:39 +01:00
Franco Fichtner
3bb2b4eb14 firmware: print core package name, database checkup first or return 2021-01-09 21:29:17 +01:00
Ad Schellevis
7c50093c12 UI: move sidebar stage from session to local storage to persist between tabs, closes https://github.com/opnsense/core/issues/4580 2021-01-08 19:14:05 +01:00
Franco Fichtner
93e5105f9e src: style sweep 2021-01-08 19:44:45 +01:00
Franco Fichtner
5047bea79f pkg: fix plist 2021-01-08 19:39:57 +01:00
Ad Schellevis
993c9e545f WebGui-Auth: move authentication to unified service implementation. closes https://github.com/opnsense/core/issues/4505
eventually we might want to consider using pam, but at the moment this won't offer much more and would involve additional complexity when it comes to password expiry.
2021-01-08 18:46:30 +01:00
Ad Schellevis
42e36973f7 diag_authentication.php : stylesweep 2021-01-08 18:43:46 +01:00
Ad Schellevis
a57abe792f legacy: ditch is_validaliasname() for good. closes https://github.com/opnsense/core/issues/4470 2021-01-08 17:33:00 +01:00
Ad Schellevis
a539124fe9 firewall: live log - add "host" and "port" filters. closes https://github.com/opnsense/core/issues/4365 2021-01-08 17:22:26 +01:00
Ad Schellevis
2c3c8e7a02 firewall: live log - sort interfaces in log_filters endpoint. closes https://github.com/opnsense/core/pull/4402 2021-01-08 16:24:19 +01:00
Ad Schellevis
bbeb2e71fa firewall: live log - remove dup dst (from https://github.com/opnsense/core/pull/4402) 2021-01-08 16:17:39 +01:00
Ad Schellevis
58abe70aed firewall: live log - pull in "!" filters from https://github.com/opnsense/core/pull/4402 2021-01-08 16:16:11 +01:00
Ad Schellevis
8f929489e4 UI: tooltip service widgets, closes https://github.com/opnsense/core/issues/4188 2021-01-08 16:00:24 +01:00
Franco Fichtner
952637011e console: makes more sense #4572 2021-01-08 09:54:47 +01:00
Franco Fichtner
fb49c70e10 console: more questions, more recovery #4572
I see no easy way to untangle this for now.  At least make sure
the user is asked for the defaults to be restored making this
a little better than before.
2021-01-08 09:50:34 +01:00
Franco Fichtner
6cdf5bb48d openssh: honour MAX_LISTEN_SOCKS; closes #4403 2021-01-08 09:32:24 +01:00
Franco Fichtner
ccb32474bf pkg: fix plist 2021-01-08 09:20:26 +01:00
Franco Fichtner
a70c6a2374 make: on a fresh clone ensure the stable branch exists 2021-01-08 08:50:22 +01:00
Ad Schellevis
41eefdd105 IDPS: revert content part of 09f74fe1ce7b4805c1bb8354e5d0c5b98955497b until ETPro telemetry ships new content. 2021-01-07 20:32:21 +01:00
Ad Schellevis
2bed9fa877 firewall_rules.php: cleanup 2021-01-07 09:10:37 +01:00
Franco Fichtner
646628e593 dhcp: style sweep 2021-01-06 19:30:12 +01:00
Ad Schellevis
b185418cd7 filter / automatic IPv6 rules, add RFC4890 as suggested by @shonjir for https://github.com/opnsense/core/issues/4565 2021-01-06 18:21:47 +01:00
Ad Schellevis
f0b79d0b53 filter: category selector missing caption 2021-01-06 16:41:47 +01:00
Martin Wasley
61ea8d7993
Correct DHCPv6 Custom Options Unsigned Integer field (#4573)
Custom Options is incorrectly inserting quotes around the integer value.
2021-01-06 11:22:45 +01:00
Franco Fichtner
92c019b913 firmware: pretty sure parsing REMOVED was working in pkg 1.12 2021-01-05 17:02:31 +01:00
Franco Fichtner
ecec55ca0c captive portal: no longer needed 2021-01-05 15:52:02 +01:00
Franco Fichtner
8c91019880 system: ok, extra mile on previous 2021-01-05 15:45:59 +01:00
Franco Fichtner
f8844af85d system: unify code to extract issuer/subject
The code was adding an extra ", " at the end.
2021-01-05 15:31:33 +01:00
Franco Fichtner
444b8f405e system: TLS compatibility in custom cipher option for now 2021-01-05 15:01:12 +01:00
Ad Schellevis
d9891b1ff9 filter/aliases: minor regression in maintaining target alias file (/var/db/aliastables/%s.txt). when it's either changed, expired or simply not there, it should dump the contents before loading it with pfctl 2021-01-05 14:52:44 +01:00
Franco Fichtner
f29c0b9728 system: pick up recommendations from #4533
Since the new default is TLS 1.2 only use the upstream recommended
list and fall back to TLS 1.1 and above for less secure ciphers if
the user specificed them manually.

We could support TLS 1.3 now but that seems to be an exclusive option
without a fallback.
2021-01-05 13:46:30 +01:00
Franco Fichtner
a90ecbab5f system: generate a better self-signed certificate 2021-01-05 13:29:56 +01:00