Ad Schellevis
445ffd1f79
Firewall, IPv6/stf, generate _stf interface and link to parent while parsing rules, for https://github.com/opnsense/core/issues/2546
...
The general idea here is to make it explicit that _stf generated another interface for IPv6 traffic, so we can use this knowledge when parsing rules easily.
2018-07-16 10:27:06 +02:00
Ad Schellevis
ac35e91dee
IDS, cleanup previously installed rules, which are known in the configuration but don't exist anymore in the definitions (uninstalled). Manually installed rules will remain untouched by this change. closes https://github.com/opnsense/core/pull/2448
2018-07-15 21:36:13 +02:00
Ad Schellevis
5d09ffdec1
phpdoc in previous
2018-07-15 20:51:43 +02:00
Ad Schellevis
3650787ae4
Firewall/alias, refactor alias usage when changing its name, for https://github.com/opnsense/core/issues/1858
2018-07-15 20:45:46 +02:00
Franco Fichtner
ea10cdb815
web proxy: guard resp/req ACL #2449
2018-07-15 20:31:47 +02:00
Franco Fichtner
d8c6c21f11
system: restart syslog if needed; closes #1130
2018-07-15 20:19:34 +02:00
Franco Fichtner
b36a3906e4
web proxy: allow to not use resp or req URL; closes #2449
2018-07-15 20:12:25 +02:00
Franco Fichtner
aa69410e65
unbound: update to latest root hints; closes #2147
...
We call the file ".min." so that our whitespace sweep does not
clean up whitespaces to retain the original checksum so that
the file can always be verified.
2018-07-15 20:05:49 +02:00
Franco Fichtner
6bbfcf4b02
system: allow USB-based serial ports; closes #2026
2018-07-15 19:47:43 +02:00
Franco Fichtner
086d372e7e
firmware: hide upgrade banner when update is done; closes #2514
2018-07-15 14:17:20 +02:00
Franco Fichtner
4cc324c862
system: make netflow labels clearer; closes #2197
2018-07-15 14:08:41 +02:00
Franco Fichtner
46438e696b
firmware: reboot hint only if download is possible; closes #2547
2018-07-15 14:00:27 +02:00
Franco Fichtner
a7f87559ca
system: write version to make sure we can catch incompatibilities #2535
2018-07-15 12:42:19 +02:00
Franco Fichtner
e66358562a
unbound: fix date in previous
2018-07-15 12:21:46 +02:00
Franco Fichtner
94b2df5517
system: enc/dec for backups is done in MD5...
...
and breaks when using OpenSSL 1.1.
Also start the header block for new crypt settings. It's a bit
unfortunate that the MVC backup factory doesn't handle the
headers... now we have to add them in any case to make all
interoperable.
PR: https://github.com/opnsense/core/issues/2535
2018-07-15 12:20:17 +02:00
Fabian Franz BSc
15534011f0
Nextcloud password: allow to set a separeate pw and allow no encryption ( #2545 )
2018-07-15 11:27:04 +02:00
Franco Fichtner
fdc52df6d5
src: style sweep
2018-07-14 18:04:49 +00:00
Daniil Baturin
7c833ea3d6
Add a special case for /31 networks to openvpn_get_interface_ip() (another instance of #2529 ).
2018-07-14 19:50:59 +02:00
Ad Schellevis
15fa1eb0d4
plist
2018-07-14 17:13:26 +02:00
Ad Schellevis
9a5d641943
Firewall/alias, validate before removal for https://github.com/opnsense/core/issues/1858
...
Raise an exception when the alias seems to be used and avoid removal, keep behaviour like it was in the legacy code for now.
Eventually it would be better to replace all alias usage for uuids, but that would be too tricky to implement at once.
2018-07-14 17:06:50 +02:00
Ad Schellevis
8bc7c10d59
MVC, errorhandling, in some cases it's way easier to just raise an exception when an action may not be executed.
...
If you raise an exception now, it's always called an "API exception".
This commit adds a "UserException" type which lets the developer set a title for the message and passes this to the endpoint.
2018-07-14 16:46:40 +02:00
Franco Fichtner
91ed6de294
dhcp: remvoe excess whitespace
2018-07-14 14:13:13 +02:00
Franco Fichtner
063a425f27
firewall: IPv6 does not have network address restrictions; closes #2543
2018-07-14 10:49:19 +00:00
Franco Fichtner
e1b8871961
firewall: typo in previous
2018-07-14 12:03:11 +02:00
Franco Fichtner
80b9a81681
firewall: make NPTv6 aware of 6rd and 6to4; closes #2538
2018-07-14 10:00:29 +00:00
Franco Fichtner
3b8c5da4e2
rc: stf... stf everywhere
2018-07-14 11:32:43 +02:00
Franco Fichtner
cc2902e4dd
interfaces: 6rd validation and avoid assignment #1501
2018-07-14 09:11:42 +00:00
Franco Fichtner
893e9cf0f4
dashboard: add a 6 columns option
...
5 doesn't work because bootstrap works on layouts based
on 12, so we can only have 1, 2, 3, 4, 6, 12...
2018-07-14 08:41:23 +00:00
Franco Fichtner
24f1d05c77
openvpn: p2p_tls is also used by client so treat all of it accordingly
...
PR: https://forum.opnsense.org/index.php?topic=9133.0
2018-07-12 11:45:27 +02:00
Franco Fichtner
69fef9cb9e
openvpn: translate validated field names while at it #2536
2018-07-12 08:36:26 +02:00
Franco Fichtner
399d719ede
openvpn: avoid accepting /32 "networks" where hosts are not allowed #2536
...
192.168.1.1/32 is not accepted, but 192.168.1.0/32 was.
2018-07-12 08:21:54 +02:00
Franco Fichtner
5a9d6773df
firewall: whitespace alignments in new alias page
2018-07-12 08:04:00 +02:00
Ad Schellevis
aa215fcbdb
Firewall/alias, ignore namelookup when no nameservers are configured
...
https://forum.opnsense.org/index.php?topic=9103.0
2018-07-12 07:03:09 +02:00
Franco Fichtner
a7846bdaba
system: use priv-sep for remote backup
2018-07-11 14:24:34 +00:00
Franco Fichtner
9ca729b2c1
system: remote backup via cron
...
PR: https://forum.opnsense.org/index.php?topic=5763.0
2018-07-11 16:20:19 +02:00
Franco Fichtner
195cec19c4
system: do not use down / forced down for gateway switching
...
PR: https://forum.opnsense.org/index.php?topic=9115.0
2018-07-11 11:46:08 +02:00
Franco Fichtner
b8ff445601
firmware: ask for the right base/kernel in edge case
...
We already know a new kernel/base is there, but look up the old
one which may fail if it has been deleted. This causes the sets
to be omitted from the update list, even though later on the
upgrade works as expected.
2018-07-11 07:40:09 +00:00
Franco Fichtner
a02f4a078f
pkg: fix plist
2018-07-11 08:48:41 +02:00
Franco Fichtner
18569b5633
console: like setaddr.sh also reset DHCPv6 configuration
2018-07-11 08:47:20 +02:00
Ad Schellevis
01b62ca888
Firewall/alias, exit migration to prevent master branch becoming defunct
2018-07-10 20:38:59 +02:00
Franco Fichtner
c5f345334e
ipsec: prettier label
2018-07-10 20:33:31 +02:00
Ad Schellevis
62878b3535
Firewall/alias, finish migration for https://github.com/opnsense/core/issues/1858
2018-07-10 20:31:00 +02:00
Ad Schellevis
3c0746d90b
Firewall/alias, prefer mvc aliases in isAlias(), at the moment we need to keep scanning both (legacy,mvc) to make sure the migration can actually run. for https://github.com/opnsense/core/issues/1858
2018-07-10 20:29:37 +02:00
Ad Schellevis
409b8aac38
MVC, add post() action after model migration, in some cases it's not possible to drop the old config in the migration step, the new post() will be run after successful config sync
2018-07-10 20:11:33 +02:00
Ad Schellevis
76bad0d5cc
IPsec, rename option, closes https://github.com/opnsense/core/issues/2531
2018-07-10 18:41:28 +02:00
Ad Schellevis
fada28880b
Firewall/alias, fix validations using our new CallbackValidator type, for https://github.com/opnsense/core/issues/1858
2018-07-10 18:01:37 +02:00
Ad Schellevis
970140aa36
MVC/CallbackValidator, minor style cleanup
2018-07-10 16:10:59 +02:00
Ad Schellevis
ba5b127ee8
whitespace
2018-07-10 10:56:50 +02:00
Ad Schellevis
9bde30e6cb
cleanup ApiMutableModelControllerBase, remove duplicate code and make sure all validation errors are returned to the client. (in stead of only the first)
2018-07-10 10:52:41 +02:00
Ad Schellevis
829c0a8f39
MVC, add simple callback validator which fits our framework. The standard Phalcon callback can only serve a complete list of known attributes in stead of the actual field pushed to our validator.
...
This implementation makes sure the callback is called with the actual field value and may return a list of validation errors.
Related to https://github.com/opnsense/core/issues/1858
2018-07-10 10:10:48 +02:00
