lucaspalomodevelop/core
1
0
Fork 0
mirror of https://github.com/lucaspalomodevelop/core.git synced 2026-03-14 08:34:39 +00:00
Code Issues Packages Projects Releases Wiki Activity
11,072 Commits 1 Branch 0 Tags
Commit Graph

11072 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Ad Schellevis
41fcaf2436
move to syslog-ng (#3524) 
Integrate syslog-ng into core system without removing current circular log functionality, the basic idea here is to keep syslogd to write circular log files which will turn into a consumer of syslog-ng messages. 

New sources, which will register automatically in s_all, are defined in /usr/local/opnsense/service/templates/OPNsense/Syslog/sources/. Plugins can write additional sources here (such as log sockets).

Legacy remote log targets are collected in syslog-ng-legacy-remote.conf, which should mimic the previous syslogd targets.
 2019-06-09 16:28:50 +01:00
Ad Schellevis
d57aa5e4c8 IDPS, minor usability improvements. 
* in download tab add enable selected with filter options
* when using bulk actions, obey filter results (filter -> select all -> action, should apply on visible items)
* move button actions to tab events, preventing accidental event removal
 2019-06-07 18:18:28 +02:00
Ad Schellevis
1b09b47ff1 IDPS, Allow changing Suricata rule actions in bulk and some minor cleanups. closes https://github.com/opnsense/core/issues/3514 2019-06-07 16:20:09 +02:00
Ad Schellevis
34e942ad16 firewall_rules_edit.php, gateway validation issue (trying to validate groups). closes https://github.com/opnsense/core/issues/3511 2019-06-07 14:54:52 +02:00
Ad Schellevis
3af744e03d IDPS, when toggling rules, keep current action. closes https://github.com/opnsense/core/issues/3513 2019-06-07 14:42:31 +02:00
Franco Fichtner
e9f2862bd7 interfaces: background configd reconfigure; closes #2267 2019-06-07 11:15:43 +02:00
Franco Fichtner
55641d204d interfaces: actually just create the OpenVPN if needed 2019-06-05 11:45:21 +02:00
Franco Fichtner
2de53c3fa6 openvpn: guard doesn't make a lot of sense here 2019-06-05 11:11:13 +02:00
Franco Fichtner
ea04d268ec firmware: don't trust pkg now or in the future with `-q' 2019-06-05 08:33:20 +02:00
Franco Fichtner
f55ad273b7 pkg: move to Python 3.7 2019-06-03 07:59:55 +02:00
Ad Schellevis
459da410eb update copyright in previous while here. 2019-06-02 10:51:50 +02:00
Ad Schellevis
40bd0c5dc8 dhcpd leases watcher, file rotation issue. closes https://github.com/opnsense/core/issues/3478 2019-06-02 10:43:37 +02:00
Ad Schellevis
06acf28ae5 IDPS, missing header id in alerts tab resulting in wrong count for bootgrid, closes https://github.com/opnsense/core/pull/3367 2019-06-01 09:41:52 +02:00
Ad Schellevis
a79bb94cb7 dhcpdv4, better explain the relation between the gateway setting and the configured gateways. This question popups now and then. closes https://github.com/opnsense/core/issues/3509 2019-05-31 15:05:48 +02:00
Ad Schellevis
a714c22060 configd/templates add support for helpers.glob() to enable template traversal, which is practical when trying to merge several files into the same output. 
required for https://github.com/opnsense/core/issues/3505
 2019-05-31 14:41:59 +02:00
Ad Schellevis
a21baa1d85 openvpn server, add live-search to some longer lists. 2019-05-28 12:08:24 +02:00
Ad Schellevis
7a143c8557 OpenVPN export, hide p12 password when not applicable. closes https://github.com/opnsense/core/issues/3500 2019-05-27 11:41:15 +02:00
Ad Schellevis
8bb3f1f38c OpenVPN export, support cryptoapicert to load certificates from the windows certificate system store, for https://github.com/opnsense/core/issues/3500 2019-05-26 14:47:45 +02:00
Ad Schellevis
e8dbda338f rework previous 2019-05-24 15:04:15 +02:00
Ad Schellevis
54551b03ee Proxy, minor regression in authentication. contraints are always checked now, which should only apply for local. related to https://github.com/opnsense/core/issues/3250 2019-05-24 15:02:56 +02:00
Franco Fichtner
4482cb1d6c interfaces: code review, flip logic 2019-05-24 07:56:58 +02:00
Franco Fichtner
5d83d8612c pkg: since CORE_PYTHON2 goes away make 3 the CORE_PYTHON default 2019-05-23 08:57:38 +02:00
Franco Fichtner
5184400115 firewall: change this back #3497 2019-05-23 08:30:32 +02:00
Franco Fichtner
7218726f59 system: style update 2019-05-22 07:06:35 +02:00
Ad Schellevis
fb4a9bedaa dhcp/leases, forgot to replace from-to with address range min, max. for https://github.com/opnsense/core/issues/3487 2019-05-21 20:34:31 +02:00
Ad Schellevis
446caa9941 dhcp/leases, simplify interface lookup and make it more consistent. should fix https://github.com/opnsense/core/issues/3487 2019-05-21 20:21:50 +02:00
Ad Schellevis
9b63e33621 Merge branch 'clystron-dhcp_failover_params' 2019-05-21 19:58:01 +02:00
Ad Schellevis
7a15556bad minor cleanups for https://github.com/opnsense/core/pull/3484 and handle 0 values. 2019-05-21 19:57:30 +02:00
Ad Schellevis
f886e4d439 Merge branch 'dhcp_failover_params' of https://github.com/clystron/core into clystron-dhcp_failover_params 2019-05-21 19:42:51 +02:00
Franco Fichtner
8b22eebb9c pkg: move python dep to 3 2019-05-21 09:04:26 +02:00
Franco Fichtner
f772b4ef9a system: reduce diff vs. stable 2019-05-21 09:01:53 +02:00
Franco Fichtner
255e9b76b4 system: add pluginctl -s support 
For legacy components route -s option through plugins_services()
to get a list of services that can be controlled like the GUI
controls.  E.g.:

    # pluginctl dhcpd [start|stop|restart]

PR: https://forum.opnsense.org/index.php?topic=12781.0
 2019-05-20 21:05:10 +02:00
Ad Schellevis
10108b0615 captiveportal, use "onestop" to stop captiveportal, when there's no zone configured "stop" would be skipped since the service is disabled. issue seems to be introduced in 0299224578 2019-05-20 16:36:34 +02:00
Franco Fichtner
4175a45f4b system: fix netflow lib permission 2019-05-20 13:24:38 +02:00
Thomas Jensen
283d62a007 Add homelab.no repository 2019-05-20 13:00:08 +02:00
Ad Schellevis
f086f8c48d flowd aggregate, minor bug in commit counter, leading to single row commits after row # 100k 2019-05-20 11:42:00 +02:00
Ad Schellevis
03c75f71be system: address CVE-2019-11816 privlege escalation bugs 
Reported by: Arnaud Cordier
 2019-05-19 09:39:18 +02:00
Ad Schellevis
28ed5741f4 netflow, make sure get_timeserie_data() returns string type objects in stead of bytes, to prevent 17e4e9c0fc (commitcomment-33587137) 
we might find some other small type interpretation differences, but the bumpiest seems to be gone now.
 2019-05-18 09:23:25 +02:00
Ad Schellevis
2bdc74b8a1 netflow, switch dump_log.py script to python3 2019-05-18 09:22:29 +02:00
Ad Schellevis
3d1617b2bd netflow, minor type issue, parameter received as bytes in get_timeseries.py 2019-05-17 16:50:32 +02:00
Ad Schellevis
918e4671ea netflow, fix rc script for flowd_aggregate 2019-05-17 16:42:19 +02:00
Ad Schellevis
31982e2872 netflow, migrate flowd aggregator to python 3 2019-05-17 16:41:08 +02:00
Northguy
0b40897fd3 Fix dhcp leases help text (#3488) 2019-05-17 15:26:25 +02:00
Ad Schellevis
17e4e9c0fc netflow, aggregator replace flowd with our new implementation 2019-05-16 18:32:55 +02:00
Ad Schellevis
8aecf38f2e netflow, log parser. for backwards compatibility add copy of recv_sec field in recv 2019-05-16 18:29:16 +02:00
Franco Fichtner
6cd82973ec ipsec: always reset to defaults; closes #3486 2019-05-16 18:11:43 +02:00
Ad Schellevis
5eef7248a8 netflow, flow log parser improvements 
- faster / cleaner ipv4 conversion
- ipv6 conversion in compressed format, which equals flowd previous output
- unpack source and dest ports
 2019-05-16 16:20:34 +02:00
Ad Schellevis
0bdbdf7d21 netflow, improve log parser performance, cache some calculations. 
In theory we could probably increase performance even more by limitting the number of calls to struct.unpack, but this will make it more difficult to read.
This version is about 30% faster then the original C version shipped with flowd.

Some more testing todo, but preliminary results look good.
 2019-05-16 13:54:24 +02:00
Ad Schellevis
93f7cff3d8 netflow, flowparser.py performance improvement in parsing ipv4/ipv6 addresses. 2019-05-15 22:01:27 +02:00
wolfgangp
8226709938 added failover_split parameter, there is still an issue with proper 
handling of 0 as non-default
added hint to failover_peer help that the leases-file will be deleted on
change
 2019-05-15 13:08:48 +02:00