2558 Commits

Author SHA1 Message Date
Ad Schellevis
4f9caaa55b upgrade jQuery 1.12.4 to 3.2.1 due to end of life, closes https://github.com/opnsense/core/issues/1739 2017-11-11 13:18:10 +01:00
Ad Schellevis
632d887d9a filter.lib.inc, wrong interpretation, when carp is disabled it should enable the "Block carp traffic" for https://github.com/opnsense/plugins/issues/346 2017-11-08 18:11:48 +01:00
Ad Schellevis
76d18ef466 ipsec, add passthrough networks for https://github.com/opnsense/core/issues/1890 2017-10-24 20:17:22 +02:00
Franco Fichtner
fa347e5712 config: set stick multi wan as default #1874 2017-10-19 18:45:43 +00:00
Ad Schellevis
65a6fb2cda Merge pull request #1881 from evbevz/firewall-register-table
Firewall plugin: register table
2017-10-18 18:29:49 +02:00
Ad Schellevis
312a42614e ipsec, add rightsourceip = %radius for eap-radius 2017-10-18 18:25:39 +02:00
evbevz
24c066da8f Firewall plugin: register table 2017-10-18 10:37:42 +03:00
Franco Fichtner
5c3021dca7 interface: make port switch a hard dependency 2017-10-17 06:07:01 +00:00
Franco Fichtner
5eacb95622 interfaces: mitigate KRACKAttacks by using ports if available
Also see: https://www.krackattacks.com/
2017-10-16 22:46:56 +02:00
Franco Fichtner
a9cebd1b4e firewall: add port validation 2017-10-16 09:40:07 +02:00
shonjir
45d4e27a9f Support non-whitespace field separators for URLtable lists (#1873) 2017-10-13 18:18:34 +02:00
Franco Fichtner
0cdac75bcb config: make shared forwarding the default for 18.1-BETA 2017-10-10 09:48:53 +02:00
Franco Fichtner
f6dec7ea3b firmware: pull the set size from the mirror
There is only one tiny missing piece: if we have both packages
and sets, we need to merge the download size and display it.
2017-10-08 18:14:45 +00:00
Franco Fichtner
d61c2a2336 firmware: -c can tell us if sets are locked 2017-10-08 14:57:44 +02:00
Franco Fichtner
32c4930aa2 system: fastforwarding no longer exists
PR: https://github.com/opnsense/src/issues/27
2017-10-02 08:14:58 +02:00
Franco Fichtner
f77ab1b3fe gateways: ipv6 ll where appropriate
Normally, if we have an IPv6 link local monitor we use the link local
address which is always available.  If not a link local address, try
to use a global address.  If we don't have one, we can't reach the
outside anyway.

PR: https://forum.opnsense.org/index.php?topic=6028.0
2017-09-26 12:30:06 +02:00
Franco Fichtner
82a4249c62 interfaces: further flatten the directly send solicit case 2017-09-23 17:02:13 +02:00
Franco Fichtner
54ff427eaa plugins: fix invoke for arbitrary configure; closes #1841
We need to include most legacy inc files as we don't know what
will happen.
2017-09-23 14:45:11 +00:00
Franco Fichtner
f0259c86c6 plugins: add pluginctl and assorted shuffling #1841 2017-09-23 14:52:58 +02:00
Franco Fichtner
99a53ad9b8 interfaces: revert TERM -> KILL escalation, it's not needed 2017-09-22 19:18:42 +02:00
Franco Fichtner
2b4787453a rc: thin out the etc/ directory a bit by stashing boot scripts away 2017-09-22 19:10:36 +02:00
Franco Fichtner
7ced5ac1b9 openvpn: use the default of 5 seconds again #952 2017-09-22 19:03:32 +02:00
Franco Fichtner
58061809d4 openvpn: allow multiple servers for clients and many things, many things 2017-09-21 21:50:45 +02:00
Franco Fichtner
64fb9ac995 openvpn: POC for #952 2017-09-21 19:57:13 +02:00
Franco Fichtner
93c40a5e93 rc: refactor /var handling, get MFS dirs from rc vars
This works regardless of enabled state, as long as the plugin is
installed the directories are transitioned (makes sense for temporary
disabling of services).

PR: https://forum.opnsense.org/index.php?topic=5987.0
2017-09-19 08:33:42 +02:00
Ad Schellevis
de39b3b44d filter, cleanup use of filter_generate_optcfg_array(), some more to go before starting with the restructure of our nat rules/logic 2017-09-17 20:14:56 +02:00
Franco Fichtner
c94509587d dns: small cleanups related to #1806 2017-09-16 12:13:39 +02:00
Franco Fichtner
b5b92c1aad interfaces: configure radvd correctly so that only dns *or* global dns is used #1806 2017-09-16 12:11:58 +02:00
Franco Fichtner
fd77e8be72 firewall: 18.1 will have shared forwarding for IPv6 2017-09-14 23:29:36 +02:00
Ad Schellevis
6902408634 filter, move filter_generate_ipsec_rules() to plugins 2017-09-13 19:16:04 +02:00
Ad Schellevis
9b112011d2 filter, cleanup, move update_alias_names_upon_change() to firewall_aliases_edit.php now it's only used there. 2017-09-12 13:11:26 +02:00
Ad Schellevis
65a55bb1aa add firewall advanced setting pf_disable_force_gw, closes https://github.com/opnsense/core/issues/1801 2017-09-12 12:30:17 +02:00
Ad Schellevis
b782a5a04b system.inc, cleanups system_default_route() 2017-09-11 20:17:49 +02:00
Franco Fichtner
a743954bb2 interfaces: let rtsold run to pick up routers if it can 2017-09-06 15:30:38 +02:00
Franco Fichtner
b7ebcf2267 xmlrpc: hardcode old config version for interoperability
We've always just given '11.2' here, instead of removing it keep
this so that boxes are ok between lower than <=> higher than 17.7.2.
2017-09-04 09:32:24 +02:00
Franco Fichtner
47ad0f7f9c rc: clear /var/run on bootup; closes #1799 2017-09-04 09:18:34 +02:00
Franco Fichtner
bc1ff72e01 firmware: fix upgrade when major upgrades are allowed but not available; closes #1804
We abort on error, the error is that the file is not there.  Mea culpa.
2017-09-04 08:31:43 +02:00
Franco Fichtner
b805277a00 pkg: add new trusted fingerprint for upcoming rotation 2017-09-02 08:49:03 +02:00
Franco Fichtner
dbd0a66b86 firewall: clean up after #1800 2017-09-01 22:41:06 +02:00
Franco Fichtner
f6804ba093 rc: ensure the directory exists 2017-08-31 08:20:03 +02:00
Franco Fichtner
d7a2cbafae unbound: disband unbound_execute() 2017-08-26 17:56:57 +02:00
Franco Fichtner
2c3aac8ea6 unbound: restart on new wan IP if explicit interface matches 2017-08-26 17:56:07 +02:00
Ad Schellevis
8ae34afbba virtual_ip, add optional vhid to support alias ip's on carp. for https://github.com/opnsense/core/issues/1779 2017-08-24 22:49:04 +02:00
Franco Fichtner
a169aeb580 system: cron.d directories starting with FreeBSD 11.1
It might be a good idea to move cron to the MVC system completely,
apart from the auto-write logic we could make this a priv-sep job
very easily now.
2017-08-21 11:35:37 +02:00
Franco Fichtner
83ec429db7 interfaces: use KILL instead of TERM here
An experimental change discussed via IRC.
2017-08-16 10:31:29 +02:00
Franco Fichtner
9779e7ac56 config: more related to previous 2017-08-16 09:14:08 +02:00
Franco Fichtner
4594fa6dc6 config: versioning is no longer needed 2017-08-16 09:05:51 +02:00
Franco Fichtner
b3cfe6e362 captiveportal: peek at PID, fix reboot startup
PR: https://forum.opnsense.org/index.php?topic=5708.0
2017-08-15 11:33:41 +02:00
Franco Fichtner
f4734704f1 openvpn: fix the server lookup mismatch for #1748 2017-08-15 08:36:26 +02:00
Ad Schellevis
9dc19a1c44 remove route-to rule for localhost 3676fb47b4 2017-08-14 17:24:46 +02:00