Ad Schellevis
416fc37ee9
Firewall: add model for categories. work in progress for https://github.com/opnsense/core/issues/4587
...
o replace type ahead with tokenizer (mutli select) while here, since the type ahead needed fixes which we rather don't copy to the other firewall sections
o we might want to change the model serializeToConfig() and reload and send it to a separate function in config.inc later to ease migration later. Part of it could be separated with a callback, but it's not super needed
o hook categories into model for firewall rules
2021-01-12 18:14:50 +01:00
Franco Fichtner
c6f4d40ae0
system: fix tab use in previous
2021-01-12 16:23:23 +01:00
Franco Fichtner
a398928ce5
system: update message of the day, mailing lists are going away
2021-01-12 16:01:36 +01:00
Franco Fichtner
718848a836
unbound: generate all files, make sure we say "apply" on apply: closes #4536
2021-01-12 14:16:47 +01:00
Franco Fichtner
4dbc220490
dhcp: use same logic as menu figuring out if dhcpv6 is reachable; closes #4406
2021-01-12 12:16:51 +01:00
Franco Fichtner
09659ff25b
firmware: disable autoscroll if client position differs; closes #4545
...
This excludes the "reset", i.e. when the action was done or the page
loads initially with the previous log file.
2021-01-12 11:55:45 +01:00
Franco Fichtner
93be19f402
firmware; show repository in overview; closes #4578
2021-01-12 11:20:14 +01:00
Franco Fichtner
45ab146df0
pkg: "development release", not package
2021-01-12 10:16:13 +01:00
Ad Schellevis
8b7d1a5b1b
MVC: add locking in JsonKeyValueStoreField type.
...
Although in theory the current stat() should at least make sure the same thread wouldn't execute the same action twice, it seems in reality actions are being executed
for every record in a set. Calling stat() after write+flush seems to return the previous status in stead of the one just written to disk (ufs issue on fbsd?). To prevent this from happening, use fstat() and lock the target
file while processing.
Found this with the firewall api plugin enabled and a set of rules in it, which seemed to trigger "list gateways" for every record.
2021-01-11 19:48:32 +01:00
Franco Fichtner
cc67f7625e
pkg: fix plist
2021-01-11 20:06:52 +01:00
Ad Schellevis
9550a9072a
Firewall: add model for categories. work in progress for https://github.com/opnsense/core/issues/4587
...
o while here, make sure the existing alias migration pins on the Alias model to avoid being called by other models.
2021-01-11 18:51:43 +01:00
Franco Fichtner
f1177fae5f
firmware: allow soon-to-be 21.1-RC1 update
2021-01-11 10:13:46 +01:00
Franco Fichtner
e232f24f04
make: too early, fix git checkout emulation
2021-01-11 09:32:23 +01:00
Franco Fichtner
50700b8cd7
pkg: wrong PHP default since a while
2021-01-11 09:30:51 +01:00
Franco Fichtner
1b0ebb2c8b
make: more git magic
2021-01-11 08:57:31 +01:00
Manuel Faux
6000c02a4f
Firewall ACLs: Add readonly actions to "Aliases" permission ( #4588 )
2021-01-10 20:11:46 +01:00
Franco Fichtner
986a49c2f0
LICENSE: sync
2021-01-10 19:40:45 +01:00
Franco Fichtner
7e7c9901eb
system: should be the case via 993c9e545fb5
2021-01-10 19:33:46 +01:00
Lucas Held
b138ca38a7
pftop: fix all state value ( #4584 )
2021-01-10 19:02:39 +01:00
Franco Fichtner
3bb2b4eb14
firmware: print core package name, database checkup first or return
2021-01-09 21:29:17 +01:00
Ad Schellevis
7c50093c12
UI: move sidebar stage from session to local storage to persist between tabs, closes https://github.com/opnsense/core/issues/4580
2021-01-08 19:14:05 +01:00
Franco Fichtner
93e5105f9e
src: style sweep
2021-01-08 19:44:45 +01:00
Franco Fichtner
5047bea79f
pkg: fix plist
2021-01-08 19:39:57 +01:00
Ad Schellevis
993c9e545f
WebGui-Auth: move authentication to unified service implementation. closes https://github.com/opnsense/core/issues/4505
...
eventually we might want to consider using pam, but at the moment this won't offer much more and would involve additional complexity when it comes to password expiry.
2021-01-08 18:46:30 +01:00
Ad Schellevis
42e36973f7
diag_authentication.php : stylesweep
2021-01-08 18:43:46 +01:00
Ad Schellevis
a57abe792f
legacy: ditch is_validaliasname() for good. closes https://github.com/opnsense/core/issues/4470
2021-01-08 17:33:00 +01:00
Ad Schellevis
a539124fe9
firewall: live log - add "host" and "port" filters. closes https://github.com/opnsense/core/issues/4365
2021-01-08 17:22:26 +01:00
Ad Schellevis
2c3c8e7a02
firewall: live log - sort interfaces in log_filters endpoint. closes https://github.com/opnsense/core/pull/4402
2021-01-08 16:24:19 +01:00
Ad Schellevis
bbeb2e71fa
firewall: live log - remove dup dst (from https://github.com/opnsense/core/pull/4402 )
2021-01-08 16:17:39 +01:00
Ad Schellevis
58abe70aed
firewall: live log - pull in "!" filters from https://github.com/opnsense/core/pull/4402
2021-01-08 16:16:11 +01:00
Ad Schellevis
8f929489e4
UI: tooltip service widgets, closes https://github.com/opnsense/core/issues/4188
2021-01-08 16:00:24 +01:00
Franco Fichtner
952637011e
console: makes more sense #4572
2021-01-08 09:54:47 +01:00
Franco Fichtner
fb49c70e10
console: more questions, more recovery #4572
...
I see no easy way to untangle this for now. At least make sure
the user is asked for the defaults to be restored making this
a little better than before.
2021-01-08 09:50:34 +01:00
Franco Fichtner
6cdf5bb48d
openssh: honour MAX_LISTEN_SOCKS; closes #4403
2021-01-08 09:32:24 +01:00
Franco Fichtner
ccb32474bf
pkg: fix plist
2021-01-08 09:20:26 +01:00
Franco Fichtner
a70c6a2374
make: on a fresh clone ensure the stable branch exists
2021-01-08 08:50:22 +01:00
Ad Schellevis
41eefdd105
IDPS: revert content part of 09f74fe1ce7b4805c1bb8354e5d0c5b98955497b until ETPro telemetry ships new content.
2021-01-07 20:32:21 +01:00
Ad Schellevis
2bed9fa877
firewall_rules.php: cleanup
2021-01-07 09:10:37 +01:00
Franco Fichtner
646628e593
dhcp: style sweep
2021-01-06 19:30:12 +01:00
Ad Schellevis
b185418cd7
filter / automatic IPv6 rules, add RFC4890 as suggested by @shonjir for https://github.com/opnsense/core/issues/4565
2021-01-06 18:21:47 +01:00
Ad Schellevis
f0b79d0b53
filter: category selector missing caption
2021-01-06 16:41:47 +01:00
Martin Wasley
61ea8d7993
Correct DHCPv6 Custom Options Unsigned Integer field ( #4573 )
...
Custom Options is incorrectly inserting quotes around the integer value.
2021-01-06 11:22:45 +01:00
Franco Fichtner
92c019b913
firmware: pretty sure parsing REMOVED was working in pkg 1.12
2021-01-05 17:02:31 +01:00
Franco Fichtner
ecec55ca0c
captive portal: no longer needed
2021-01-05 15:52:02 +01:00
Franco Fichtner
8c91019880
system: ok, extra mile on previous
2021-01-05 15:45:59 +01:00
Franco Fichtner
f8844af85d
system: unify code to extract issuer/subject
...
The code was adding an extra ", " at the end.
2021-01-05 15:31:33 +01:00
Franco Fichtner
444b8f405e
system: TLS compatibility in custom cipher option for now
2021-01-05 15:01:12 +01:00
Ad Schellevis
d9891b1ff9
filter/aliases: minor regression in maintaining target alias file (/var/db/aliastables/%s.txt). when it's either changed, expired or simply not there, it should dump the contents before loading it with pfctl
2021-01-05 14:52:44 +01:00
Franco Fichtner
f29c0b9728
system: pick up recommendations from #4533
...
Since the new default is TLS 1.2 only use the upstream recommended
list and fall back to TLS 1.1 and above for less secure ciphers if
the user specificed them manually.
We could support TLS 1.3 now but that seems to be an exclusive option
without a fallback.
2021-01-05 13:46:30 +01:00
Franco Fichtner
a90ecbab5f
system: generate a better self-signed certificate
2021-01-05 13:29:56 +01:00