6004 Commits

Author SHA1 Message Date
Franco Fichtner
44e4ae85c0 upnp: remove from core 2017-01-03 23:29:13 +01:00
Franco Fichtner
130d52da8f wol: remove from core 2017-01-03 23:21:10 +01:00
Franco Fichtner
c91841afd6 igmp proxy: remove from core 2017-01-03 23:09:19 +01:00
Franco Fichtner
52184b09d3 snmp: remove from core 2017-01-03 22:58:42 +01:00
Franco Fichtner
80eefebf42 pkg: also rc.shutdown hook, better for ACPI shutdown 2017-01-03 17:54:51 +01:00
Franco Fichtner
a25633f1f9 intrusion detection: two more 2017-01-03 09:41:51 +01:00
Franco Fichtner
5cd40f0422 intrusion detection: fix spacing for apply button spinner 2017-01-03 09:31:31 +01:00
Franco Fichtner
d14bfe618f bump copyright; happy new year! 2017-01-01 14:39:47 +01:00
Ad Schellevis
151e633d09 (dhcpd/unbound) don't try to handle empty section, closes https://github.com/opnsense/core/issues/1320 2016-12-31 16:25:50 +01:00
Franco Fichtner
54e63dc41f system: options for IDS and Web Proxy XMLRPC sync; closes #1319 2016-12-31 15:12:32 +01:00
Franco Fichtner
3773faf7bf wol: fixed plist, but did not add file :D 2016-12-31 15:07:06 +01:00
Franco Fichtner
9fb7a30568 system: more migration of xmlrcp sync settings #1319 2016-12-31 15:04:19 +01:00
Franco Fichtner
2e44a885ca plugins: xml sync refactor for ipfw features #1319 2016-12-31 14:11:51 +01:00
Ad Schellevis
6e54b6c00b Merge pull request #1318 from sxnxl/master
Optimized dhcp_clean_leases()
2016-12-31 10:40:24 +01:00
Ad Schellevis
5f3936ab36 (netflow) fix missing check for egress_only 2016-12-30 17:42:53 +01:00
Senol Korkmaz
5d93e8d77d removed some whitespace characters from pattern for more optimization 2016-12-29 14:56:59 +03:00
Senol Korkmaz
9f883fd722 use regular expressions to optimize dhcp_clean_leases() 2016-12-29 14:25:54 +03:00
Franco Fichtner
5b4acfac2a firmware: mark auf-feindgebiet.de as Cloudflare CDN
This is a pretty good option for anybody with a lack of a viable
local mirror, sparked by talks of a South-East Asia region mirror.
2016-12-28 16:09:20 +01:00
Andrew Berry
16ffbff991 Note that src and dst ports only apply to TCP and UDP 2016-12-28 15:59:08 +01:00
Franco Fichtner
c687c9bb36 system: fix crash report in previous 2016-12-28 13:39:16 +01:00
Franco Fichtner
deda19dc61 system: tweak wording on previous 2016-12-28 13:32:09 +01:00
Franco Fichtner
384b751515 scripts: fix line breaks in csv 2016-12-28 10:26:32 +01:00
Ad Schellevis
c726dc39cf (proxy) fix subnet computation using netaddr.IPNetwork, closes https://github.com/opnsense/core/issues/1309 2016-12-27 18:13:19 +01:00
Ad Schellevis
15657d8749 (configd) add netaddr.IPNetwork to template helpers, for https://github.com/opnsense/core/issues/1309 2016-12-27 18:10:57 +01:00
Ad Schellevis
99dac4ab7e (webconfigurator) optionally limit ciphers. closes https://github.com/opnsense/core/issues/1301 2016-12-27 17:23:01 +01:00
Ad Schellevis
5f7fa5900d (IDS) fix previous 2016-12-27 12:21:50 +01:00
Ad Schellevis
565fd72bba (ids) add support for inline configuration settings (subscription based url's for example), add basic auth support.
Example supported format:

<?xml version="1.0"?>
<ruleset>
    <location url="https://www.snort.org/rules/snortrules-snapshot-2990.tar.gz?oinkcode=%%snort.oinkcode%%" prefix="Snort"/>
    <files>
        <file description="blacklist" url="inline::rules/blacklist.rules">snort.blacklist.rules</file>
    </files>
    <properties>
        <property name="snort.oinkcode" default=""/>
    </properties>
</ruleset>

---
Registers the setting "snort.oinkcode" which is used to construct the download url.
This commit doesn't include definitions for new content, in case someone wants to create a definition file, it should be easy now :)
2016-12-27 12:08:54 +01:00
Franco Fichtner
12882429d1 system: split up Portuguese for upcoming translations 2016-12-21 07:15:49 +01:00
Franco Fichtner
041681bae2 system: extend sudo usage for no password mode 2016-12-21 00:17:50 +01:00
Franco Fichtner
17117f5b9b configd: fix wildcard_pos usage 2016-12-21 00:13:45 +01:00
Franco Fichtner
e33a4ed298 firewall: remove comment that is now false 2016-12-20 22:42:04 +01:00
Franco Fichtner
31e16746fe firewall: how many times is this hardcoded? :) 2016-12-20 22:39:24 +01:00
Ad Schellevis
78af555666 (IDS) hook loading of general settings on tab events 2016-12-20 21:19:42 +01:00
Ad Schellevis
646f9838d0 (ids) move installable rules to separate tab, make room for additional settings 2016-12-20 20:08:27 +01:00
Franco Fichtner
ddca91c131 firewall: fix previous again 2016-12-20 15:17:40 +01:00
Franco Fichtner
d70e4b2652 firewall: glitch in previous 2016-12-20 15:06:46 +01:00
Franco Fichtner
7097b1d016 firewall: consolidate anti-lockout behaviour; closes #1304
Assume LAN unless we only have one interface and that is WAN.
If LAN is not there, no problem: the text will either show
WAN if it works or show LAN and do nothing.

We could argue that 1 interface that is not WAN or LAN is
possible and should receive anti-lockout too, but this would
change the previous behaviour too much and is not generally
possible from the GUI or console.
2016-12-20 14:23:51 +01:00
Ad Schellevis
6e260ef580 (mvc) fix mangled dropdown boxes on some inputs, reset all form_input_tr items to avoid further strangeness.. 2016-12-20 12:56:13 +01:00
Franco Fichtner
f8959e1a40 rc: oddities with vt(4), keep sc(4) for now 2016-12-20 08:21:38 +01:00
Franco Fichtner
6d46060214 Revert "system: strict serial mode, need to test this"
Don't need this, it was a comaptibility test.  The gained
flexibility from -D is far more important.

This reverts commit dfb094112e3297911ddbdfa478d3bdc129d22d22.
2016-12-20 08:00:11 +01:00
Franco Fichtner
7792d8ad7f auth: one more locking vs. no-password issue 2016-12-20 07:02:45 +01:00
Franco Fichtner
23cf4fe10f auth: when auth is integrated, don't write passwords
This finally repairs ssh key login.  :)
2016-12-19 23:14:23 +01:00
Ad Schellevis
da024c5dfe (ids) work in progress, extend metadata templates with user input (subscription codes, etc) 2016-12-19 21:49:30 +01:00
Ad Schellevis
7294202195 (ids) change download buffering 2016-12-19 21:48:04 +01:00
Ad Schellevis
d938708963 (resolver+forwarder) enhance port check, for https://github.com/opnsense/core/issues/1213 2016-12-19 19:55:22 +01:00
Ad Schellevis
4ebccaa233 (config) enable aesni in default config, closes https://github.com/opnsense/core/issues/1259 2016-12-19 19:41:36 +01:00
Franco Fichtner
4ac59b3485 auth: one bug down, but I think there's another 2016-12-19 18:59:21 +01:00
Ad Schellevis
74b0ed0002 (UIModelGrid) return all selected items for list types 2016-12-19 17:45:54 +01:00
Franco Fichtner
7f91fe62b1 src: back out previous, we're further securing PAM 2016-12-19 11:08:08 +01:00
Ad Schellevis
b5eda23e80 (volt, macro usage) revert macro change, it looks like this really was a bug in PHP7/Phalcon, looks solved now. closes https://github.com/opnsense/core/issues/1245 2016-12-19 11:05:41 +01:00