14481 Commits

Author SHA1 Message Date
Ad Schellevis
484753b2ab Lobby: Dashboard - fix data cleansing issue in column_count and sequences. 2023-09-19 19:46:28 +02:00
jkoch22
c39a226a48 Update firewall_scrub_edit.php
Correct typo and standardize "Normalization"
2023-09-19 19:15:17 +02:00
Franco Fichtner
7a8129a5d7 backend: template reload wildcard was returning "OK" on partial failures
This is better now, but there is still one inconsistency at play that
doesn't seem to matter much in the grand scheme of things.  Leaving this
here for @adschellevis to decide.

  # configctl template reload 'OPNsense/Unbound/*'
  ERR
  # configctl template reload 'OPNsense/Unbound/core'
  Execute error
  # configctl template reload 'OPNsense/Unbounddd'
  ERR
2023-09-19 16:01:12 +02:00
Franco Fichtner
6af3ec2954 mvc: throw on template reload issues in mutable service controller #6487
While this omits all other callers of "template reload" functionality
we would only like to be concerned with these GUI ones and migrate everything
to using a mutable controller (for maintenance reasons at the very last).

Only make a short hint to where the error is.  The service is not started
on purpose now.
2023-09-19 15:40:02 +02:00
Ad Schellevis
6393c5b577 Firewall: Aliases - fix cleanup issue when renaming an alias. the is_managed() statement should search for a parser and a hash file know if it was managed (and safe for removal). closes https://github.com/opnsense/core/pull/6845 2023-09-19 10:17:17 +02:00
Franco Fichtner
29d5a1b129 interfaces: style update 2023-09-19 08:06:56 +02:00
Franco Fichtner
c2fea3c9e3 system: extend pluginctl -4 to also return the interface name used for lookup 2023-09-19 08:06:56 +02:00
Franco Fichtner
1b066afd77 openvpn: model lint pass 2023-09-19 07:25:49 +02:00
Franco Fichtner
d86702262b dhcp: fix previous, restructure for clarity 2023-09-18 20:53:57 +02:00
Maurice Walker
3582242d0f Add scope to link-local DHCPv6 static mapping when creating route for delegated prefix 2023-09-18 20:48:29 +02:00
Ad Schellevis
445a81d73b ui: selectpicker issue with ipv4v6net after version update - fix for https://github.com/opnsense/core/issues/6849
Handling is a bit different since the latest selectpicker doesn't select the top item in the list anymore, we need to choose an item to make it look less odd.
2023-09-18 20:28:07 +02:00
Ad Schellevis
6d5ca5da1a VPN: OpenVPN: Instances - Allow authentication without certificates (less safe) when verify_client_cert is set to none. closes https://github.com/opnsense/core/issues/6856 2023-09-18 20:06:30 +02:00
Ad Schellevis
d29e65dd08 VPN: OpenVPN: Instances - service control, force interface down before handing it over to OpenVPN. When "up" in some cases OpenVPN is not able to allocate the device when needed, leading to ioctl(TUNSIFMODE) errors. closes https://github.com/opnsense/core/issues/6861 2023-09-18 19:53:51 +02:00
Stephan de Wit
bb7b92c21c MVC: allow empty if not required 2023-09-18 14:35:53 +02:00
Stephan de Wit
f890334f9a MVC: extend allowEmpty to addFields in UniqueConstraint
We also make the option dependent on the field not being required.
It is invalid for a field to be empty and also be required, therefore
we apply it only if the field isn't required.
2023-09-18 13:12:52 +02:00
Franco Fichtner
2a6845a6fb interfaces: tried keys before but list() is too dense 2023-09-18 10:52:40 +02:00
Franco Fichtner
db5c43d106 interfaces: allow clean MVC acces to primary address
POC for IPv4.  Acme-client is being naughtly.
2023-09-18 10:18:34 +02:00
Franco Fichtner
6a4d6a6f5a interfaces: sync up gre code with IPv6 changes in gif
And fix a typo in previous gif code and restructure slightly.
2023-09-18 09:47:22 +02:00
Franco Fichtner
a10c1b5a36 system: remove unused 2023-09-18 09:32:13 +02:00
Franco Fichtner
2f3dd72d77 interfaces: change "realifxyz" vars to more sensible names 2023-09-18 09:32:01 +02:00
Franco Fichtner
2340751540 interfaces: special treatment of IPv6 remote address cases
PR: https://forum.opnsense.org/index.php?topic=35876.0
2023-09-18 08:47:13 +02:00
Franco Fichtner
cbaf7cee1f interfaces: use interfaces_restart_by_device() where appropriate 2023-09-15 14:50:23 +02:00
Franco Fichtner
6ea9d216e2 interfaces: 0e2751d2d means default gateway switching no longer requires this #6852
The change is not immediate but the watcher will take care of it.
2023-09-15 14:23:21 +02:00
Franco Fichtner
90ac0df95d system: setting $reloadif was removed in e40b64d5ba7 2023-09-15 13:40:06 +02:00
Franco Fichtner
22a2cc9836 system: clear a few legacy DynDNS leftovers 2023-09-15 13:21:49 +02:00
Franco Fichtner
496c1c787d openvpn: emit device name upon creation 2023-09-15 08:50:39 +02:00
Franco Fichtner
fa1efd0506 interfaces: signal wlan device creation success/failure 2023-09-15 08:46:20 +02:00
Franco Fichtner
6ccacaf0f9 web proxy: scrub model 2023-09-15 08:16:04 +02:00
Franco Fichtner
89386073f1 captive portal: scrub model 2023-09-15 08:10:12 +02:00
Franco Fichtner
231b4cde1e system: scrub syslog model 2023-09-15 08:09:19 +02:00
Franco Fichtner
9fa0e3c493 firewall: scrub shaper model 2023-09-15 08:07:18 +02:00
Franco Fichtner
b122a0ad71 intrusion detection: scrub model 2023-09-15 08:05:21 +02:00
Franco Fichtner
b57b43c34f openvpn: scrub model 2023-09-15 08:03:18 +02:00
Franco Fichtner
6ffb8d4468 ipsec: scrub models 2023-09-15 07:59:30 +02:00
Franco Fichtner
d1f389d788 monit: scrub model 2023-09-15 07:55:06 +02:00
Franco Fichtner
eb41f24d6a interafces: fix typo in previous 2023-09-14 21:56:05 +02:00
Franco Fichtner
49df30eb83 interfaces: do not annotate disabled state for members
Recently did the same for Unbound.  The context for the user is clear
and we shouldn't be too concerned for what the user thinks about disabled
interfaces since he disabled them in the first place.

Use the same interface description source in the overview page.
2023-09-14 21:46:52 +02:00
Franco Fichtner
3dae3b507a unbound: scrub model, no functional changes 2023-09-14 21:40:25 +02:00
Ad Schellevis
9fb7c048d7
VPN/OpenVPN/Instances - Update dialogCSO.xml and fix route gateways title 2023-09-14 18:11:05 +02:00
Franco Fichtner
1aa5848847
unbound: migrate active/outgoing interfaces discarding invalid values (#6851) 2023-09-14 17:45:22 +02:00
Franco Fichtner
15ee80908f unbound: remove spurious <hr/> as __mt does the job and looks cleaner 2023-09-14 14:06:10 +02:00
Franco Fichtner
a086f40b0a unbound: bring back 4a1bc9f8b5e to avoid dynamic reloads when possible; closes #6802 2023-09-14 14:00:29 +02:00
Franco Fichtner
fe17f4ff48 unbound: allow disabled interfaces in interface field
While we are not concerned with interfaces that have disappeared
we should keep track of disabled interfaces since there is no strict
link between this field and the interface (or OpenVPN) configuration
which would make validation fail for the wrong reasons and/or force
the user to deselect the interface in order to proceed.

Also exclude lo0 because it is always added to ensure local resolving
which had no complaints since 2018 when this was reworked.  The abilty
to select it would cause the question of why it's not adhered to if
anyone started looking.
2023-09-14 10:51:51 +02:00
Franco Fichtner
2306449329 interfaces: fix typo 2023-09-13 13:00:47 +02:00
Franco Fichtner
c4285c9937 interfaces: if members for bridge could not be added change return code 2023-09-13 11:26:55 +02:00
Franco Fichtner
189e3af29e interfaces: improve bridge code a bit
* Allow the bridge to come up without members.  While the GUI made sure
  to avoid empty bridges there is no reason for it and underneath if the
  interface was disabled the GUI made the interface disappear from the
  selection.  So now allow an empty bridge (may be nice for migration)
  and show disabled interfaces in the edit page.  Fix all callers to not
  assume the member property is always set.  Can probably go away once
  bridges are moved to MVC.
* Inline interface_bridge_add_member() since link_interface_to_bridge()
  is the only caller.  Improve the parameter passing a bit too.
* Add bridge interface return code to (_)interfaces_bridge_configure().
* Improve device resolution and a few mwexecf() replacements.
* Log the reason why a device could not be attached to bridge when one
  device is not there as expected.
2023-09-13 10:39:49 +02:00
Franco Fichtner
818f729379 system: avoid picking up an empty default route
GIF/GRE might do this when assigned so extend the check.
2023-09-12 11:38:58 +02:00
Franco Fichtner
da4144180b interfaces: refactor link_interface_to_bridge() slightly 2023-09-12 11:15:17 +02:00
Franco Fichtner
58b45cd533 interfaces: kill the ancient OpenVPN-tap-on-a-bridge magic on IPv4 reload
This brings IPv4 and IPv6 closer together as both now support GIF/GRE
exclusively.  OpenVPN devices are created on boot since 44cd7aee8e.
2023-09-12 11:01:53 +02:00
Franco Fichtner
a744327574 interfaces: improve GIF/GRE configuration robustness
Now that we fail if we can't get the tunnel up improve this a bit more:

1. First order of business is adding removing/adding the device.

2. Return the device name when configuration was successful.

3. Use device name return to avoid "linking" failed devices.  This
   helps us to bring it up later when it is likely ready.

4. Remove the system_routing_configure() madness from device creation.

5. We may have static routes which were not adhered to previously.  So now
   use the same interfaces_restart_by_device() hook but omit the
   interface_configure() to void unwantend recusion in that function.
   This has the addded benefit of system_routing_configure() only being
   called once for that interface by rc.newwanip(v6).
2023-09-12 10:41:17 +02:00