Franco Fichtner
4594fa6dc6
config: versioning is no longer needed
2017-08-16 09:05:51 +02:00
Franco Fichtner
b3cfe6e362
captiveportal: peek at PID, fix reboot startup
...
PR: https://forum.opnsense.org/index.php?topic=5708.0
2017-08-15 11:33:41 +02:00
Franco Fichtner
f4734704f1
openvpn: fix the server lookup mismatch for #1748
2017-08-15 08:36:26 +02:00
Ad Schellevis
9dc19a1c44
remove route-to rule for localhost 3676fb47b4
2017-08-14 17:24:46 +02:00
Ad Schellevis
ccdf67adb6
ditch convert_real_interface_to_friendly_descr()
2017-08-12 14:58:14 +02:00
Ad Schellevis
afcca42432
accidentally dropped an extra line in there... https://github.com/opnsense/core/issues/1681
2017-08-12 11:33:13 +02:00
Ad Schellevis
53a4a54f2b
vlan_mtu and vlan_hwcsum usually can't be disabled, better to skip from the list of configurable hardware options.
2017-08-11 17:05:11 +02:00
Ad Schellevis
621edec479
probe vlan hardware settings before changing
2017-08-11 17:01:26 +02:00
Ad Schellevis
3676fb47b4
rework for https://github.com/opnsense/core/issues/1681 , only add gateway rules when the protocol is assigned to the interface
2017-08-11 15:56:52 +02:00
Ad Schellevis
5739487938
Revert "filter, cleanup, closes https://github.com/opnsense/core/issues/1681 "
...
This reverts commit 511cdd471e6c90ab5ecbbd5d5125adb0b906601f.
2017-08-10 20:52:36 +02:00
Franco Fichtner
713f8b8d48
interfaces: typo in previous
2017-08-10 15:43:30 +02:00
Franco Fichtner
a7ca166130
interfaces: the renaming in one ifconfig may be unstable
2017-08-10 15:15:42 +02:00
Ad Schellevis
c14000892b
Merge pull request #1766 from opnsense/license_generate
...
License overview generation for GitHub
2017-08-09 22:49:25 +02:00
Franco Fichtner
4ff939c806
openssh: last bug, I swear #1750
2017-08-09 14:35:41 +02:00
Franco Fichtner
f635d8d873
openssh: flip-flop, enabled always wins #1750
2017-08-09 14:27:51 +02:00
Franco Fichtner
db1b20b893
openssh: feedback for #1750
...
Prodded by: @adschellevis
2017-08-09 14:24:45 +02:00
Franco Fichtner
13f63a4919
system: remove old and forgotten nameservers.conf
...
PR: https://github.com/opnsense/core/issues/1768
Also see: https://github.com/pfsense/pfsense/commit/1033de748
2017-08-09 13:40:50 +02:00
Franco Fichtner
7145dcb43e
openssh: when running in installer add service #1750
...
Tests ok, only oddity that came up is this one...
2017-08-09 07:46:56 +02:00
Franco Fichtner
9e7418c9ac
Revert "rc: put unconditional filter reload back for testing"
...
This reverts commit 051e44ca727cfa98904be1ad3d7b8e57e7018637.
Looks like this is either incomplete or not necessary.
2017-08-09 06:20:49 +02:00
Franco Fichtner
de801cefc0
installer: consistent state for initial SSH handling #1750
2017-08-08 22:08:01 +02:00
Franco Fichtner
62ac77d2f6
openssh: a bit more for #1750
2017-08-08 17:30:30 +02:00
Franco Fichtner
cc6444bf7f
ssh: fix ssh installer anti-lockout on WAN/LAN-only setups
...
PR: https://github.com/opnsense/core/issues/1750
2017-08-08 17:16:16 +02:00
Franco Fichtner
ec58aadd94
www: do not set LC_ALL locale
...
Since we have removed WITHOUT_LOCALES in src.conf a while
back this call here causes undesided side effects. Remove
this to restore the behaviour to what it was before the
locales were added.
Spotted by: @adschellevis
Also see: https://github.com/opnsense/tools/commit/e988255
This reverts commit 930f7974e6cc842e0741554ecabfb0f68d39ac11.
This reverts commit dc53c74c0721ca7f2a467ea54620c5ef71ddbdfd.
2017-08-07 10:52:06 +02:00
Franco Fichtner
f22ade58db
interfaces: fix lock vs. non-lock priority in loop
2017-08-07 06:19:45 +02:00
Franco Fichtner
dc53c74c07
rc: did PHP 7.0.22 flip-flop on dot vs. comma usage in floats?
...
The same thing happened with 930f7974e. This is a worrying trend.
2017-08-07 06:08:21 +02:00
Franco Fichtner
81aed9877d
interfaces: add ability to lock vital interfaces
...
They will prevent any interface mismatch and individual deletion
from the GUI on the assignment page.
PR: https://forum.opnsense.org/index.php?topic=5667.0
2017-08-07 06:07:45 +02:00
Franco Fichtner
0c2fefab03
src: transform Ad's copyrights, add e-mail everywhere
2017-08-06 11:19:35 +02:00
Franco Fichtner
051e44ca72
rc: put unconditional filter reload back for testing
...
PR: https://forum.opnsense.org/index.php?topic=5622.0
2017-08-05 23:58:31 +02:00
Franco Fichtner
c5d4002541
src: add Scott's e-mail everywhere
2017-08-05 20:57:29 +02:00
Franco Fichtner
968a3afc8e
src: four errors in the copyrights
...
* interfaces_assign.php: creation year addition for Jim McBeath
* filter_log.inc: spurious attribution via 96899e89f0c
* diag_traceroute.php: typo in split via d87c6ff556
* Manuel Kasper e-mail missing in a few pages
2017-08-05 20:40:53 +02:00
Franco Fichtner
d87c6ff556
Scripts: add a license generator for GitHub
2017-08-05 20:21:35 +02:00
Franco Fichtner
c598ca816c
services: log error when IP detection failed
2017-08-04 09:03:30 +02:00
Franco Fichtner
9066aec2e3
firmware: flip print order for new changelog console fetch
2017-08-04 08:32:10 +02:00
Franco Fichtner
11ac9b2507
firmware: wrong function in previous
2017-08-03 09:17:39 +02:00
Franco Fichtner
ef0f86a346
firmware: automatically support "other" flavours
...
We always have an internal ABI prefix now, if the flavour is a short
keyword, we should always use the ABI on it so "experimental" becomes
"17.7/experimental". If a path is set "17.7/MINT/17.7/LibreSSL" we
detect the slash and assume the explicit ABI was selected.
This may eventually support things such as "nightly" or others without
fiddling through this code every time something else is added.
2017-08-03 09:14:13 +02:00
Franco Fichtner
a5e5661414
openvpn: fields were off, another try #1737
2017-08-01 15:37:02 +02:00
Franco Fichtner
f43f02d7c8
openvpn: adjust time, ISO print format #1737
2017-08-01 14:53:26 +02:00
Franco Fichtner
35e57c0fe9
openvpn: set time in server peer to perr case, too #1737
2017-07-31 22:36:06 +02:00
Ad Schellevis
da66245abe
add nat type selection in firewall_nat_1to1 and change some descriptions, for https://github.com/opnsense/core/issues/440
2017-07-30 20:20:09 +02:00
Franco Fichtner
9584bbf7b5
pkg: revoke 17.1 fingerprint
2017-07-30 17:58:36 +02:00
Franco Fichtner
535cb2cfbc
ipsec: align with OpenVPN in group enforcement #1748
2017-07-30 17:53:24 +02:00
Franco Fichtner
27f26f0dab
ipsec: mock authcfg for backwards compat, "none" is not an auth server #1748
2017-07-30 14:11:29 +02:00
Franco Fichtner
6bb6110562
ipsec: local group enforcement, some comments follow #1748
...
o group_source was removed as it was unused
o stop passing global authcfg through the ipsec config--wtf?
o if the mobile client section is disable, refuse authentication
o make xauth privilege optional, it will go away in 18.1
2017-07-30 13:49:35 +02:00
Ad Schellevis
76839db73a
ipsec, cleanup spd entries after removal, for https://github.com/opnsense/core/issues/440
2017-07-30 12:58:17 +02:00
Franco Fichtner
ee0c1705a1
openvpn: allow local group enforcement #1748
...
While there, strip a bit of legacy cruft.
2017-07-30 12:34:28 +02:00
Franco Fichtner
1fe8341a19
ipsec: keep the namespace prefix ipsec_, inline a compare function
2017-07-30 10:39:02 +02:00
Ad Schellevis
814d18ac37
ipsec, support manually defined spd entries, for https://github.com/opnsense/core/issues/440
2017-07-29 14:58:10 +02:00
Ad Schellevis
9351e45d59
restructure ipsec_find_id, remove dependency of ipsec_configure_do(), work for https://github.com/opnsense/core/issues/440
2017-07-29 14:21:52 +02:00
Franco Fichtner
eaff826af5
firewall: support outbound NAT source invert; closes #1747
2017-07-29 10:46:47 +02:00
Franco Fichtner
ecbd90e2ef
system: set local + no fallback as default auth mode
...
softcoding local + local fallback seems weird.
2017-07-28 21:34:53 +02:00
