Ad Schellevis
4f9caaa55b
upgrade jQuery 1.12.4 to 3.2.1 due to end of life, closes https://github.com/opnsense/core/issues/1739
2017-11-11 13:18:10 +01:00
Ad Schellevis
632d887d9a
filter.lib.inc, wrong interpretation, when carp is disabled it should enable the "Block carp traffic" for https://github.com/opnsense/plugins/issues/346
2017-11-08 18:11:48 +01:00
Ad Schellevis
76d18ef466
ipsec, add passthrough networks for https://github.com/opnsense/core/issues/1890
2017-10-24 20:17:22 +02:00
Franco Fichtner
fa347e5712
config: set stick multi wan as default #1874
2017-10-19 18:45:43 +00:00
Ad Schellevis
65a6fb2cda
Merge pull request #1881 from evbevz/firewall-register-table
...
Firewall plugin: register table
2017-10-18 18:29:49 +02:00
Ad Schellevis
312a42614e
ipsec, add rightsourceip = %radius for eap-radius
2017-10-18 18:25:39 +02:00
evbevz
24c066da8f
Firewall plugin: register table
2017-10-18 10:37:42 +03:00
Franco Fichtner
5c3021dca7
interface: make port switch a hard dependency
2017-10-17 06:07:01 +00:00
Franco Fichtner
5eacb95622
interfaces: mitigate KRACKAttacks by using ports if available
...
Also see: https://www.krackattacks.com/
2017-10-16 22:46:56 +02:00
Franco Fichtner
a9cebd1b4e
firewall: add port validation
2017-10-16 09:40:07 +02:00
shonjir
45d4e27a9f
Support non-whitespace field separators for URLtable lists ( #1873 )
2017-10-13 18:18:34 +02:00
Franco Fichtner
0cdac75bcb
config: make shared forwarding the default for 18.1-BETA
2017-10-10 09:48:53 +02:00
Franco Fichtner
f6dec7ea3b
firmware: pull the set size from the mirror
...
There is only one tiny missing piece: if we have both packages
and sets, we need to merge the download size and display it.
2017-10-08 18:14:45 +00:00
Franco Fichtner
d61c2a2336
firmware: -c can tell us if sets are locked
2017-10-08 14:57:44 +02:00
Franco Fichtner
32c4930aa2
system: fastforwarding no longer exists
...
PR: https://github.com/opnsense/src/issues/27
2017-10-02 08:14:58 +02:00
Franco Fichtner
f77ab1b3fe
gateways: ipv6 ll where appropriate
...
Normally, if we have an IPv6 link local monitor we use the link local
address which is always available. If not a link local address, try
to use a global address. If we don't have one, we can't reach the
outside anyway.
PR: https://forum.opnsense.org/index.php?topic=6028.0
2017-09-26 12:30:06 +02:00
Franco Fichtner
82a4249c62
interfaces: further flatten the directly send solicit case
2017-09-23 17:02:13 +02:00
Franco Fichtner
54ff427eaa
plugins: fix invoke for arbitrary configure; closes #1841
...
We need to include most legacy inc files as we don't know what
will happen.
2017-09-23 14:45:11 +00:00
Franco Fichtner
f0259c86c6
plugins: add pluginctl and assorted shuffling #1841
2017-09-23 14:52:58 +02:00
Franco Fichtner
99a53ad9b8
interfaces: revert TERM -> KILL escalation, it's not needed
2017-09-22 19:18:42 +02:00
Franco Fichtner
2b4787453a
rc: thin out the etc/ directory a bit by stashing boot scripts away
2017-09-22 19:10:36 +02:00
Franco Fichtner
7ced5ac1b9
openvpn: use the default of 5 seconds again #952
2017-09-22 19:03:32 +02:00
Franco Fichtner
58061809d4
openvpn: allow multiple servers for clients and many things, many things
2017-09-21 21:50:45 +02:00
Franco Fichtner
64fb9ac995
openvpn: POC for #952
2017-09-21 19:57:13 +02:00
Franco Fichtner
93c40a5e93
rc: refactor /var handling, get MFS dirs from rc vars
...
This works regardless of enabled state, as long as the plugin is
installed the directories are transitioned (makes sense for temporary
disabling of services).
PR: https://forum.opnsense.org/index.php?topic=5987.0
2017-09-19 08:33:42 +02:00
Ad Schellevis
de39b3b44d
filter, cleanup use of filter_generate_optcfg_array(), some more to go before starting with the restructure of our nat rules/logic
2017-09-17 20:14:56 +02:00
Franco Fichtner
c94509587d
dns: small cleanups related to #1806
2017-09-16 12:13:39 +02:00
Franco Fichtner
b5b92c1aad
interfaces: configure radvd correctly so that only dns *or* global dns is used #1806
2017-09-16 12:11:58 +02:00
Franco Fichtner
fd77e8be72
firewall: 18.1 will have shared forwarding for IPv6
2017-09-14 23:29:36 +02:00
Ad Schellevis
6902408634
filter, move filter_generate_ipsec_rules() to plugins
2017-09-13 19:16:04 +02:00
Ad Schellevis
9b112011d2
filter, cleanup, move update_alias_names_upon_change() to firewall_aliases_edit.php now it's only used there.
2017-09-12 13:11:26 +02:00
Ad Schellevis
65a55bb1aa
add firewall advanced setting pf_disable_force_gw, closes https://github.com/opnsense/core/issues/1801
2017-09-12 12:30:17 +02:00
Ad Schellevis
b782a5a04b
system.inc, cleanups system_default_route()
2017-09-11 20:17:49 +02:00
Franco Fichtner
a743954bb2
interfaces: let rtsold run to pick up routers if it can
2017-09-06 15:30:38 +02:00
Franco Fichtner
b7ebcf2267
xmlrpc: hardcode old config version for interoperability
...
We've always just given '11.2' here, instead of removing it keep
this so that boxes are ok between lower than <=> higher than 17.7.2.
2017-09-04 09:32:24 +02:00
Franco Fichtner
47ad0f7f9c
rc: clear /var/run on bootup; closes #1799
2017-09-04 09:18:34 +02:00
Franco Fichtner
bc1ff72e01
firmware: fix upgrade when major upgrades are allowed but not available; closes #1804
...
We abort on error, the error is that the file is not there. Mea culpa.
2017-09-04 08:31:43 +02:00
Franco Fichtner
b805277a00
pkg: add new trusted fingerprint for upcoming rotation
2017-09-02 08:49:03 +02:00
Franco Fichtner
dbd0a66b86
firewall: clean up after #1800
2017-09-01 22:41:06 +02:00
Franco Fichtner
f6804ba093
rc: ensure the directory exists
2017-08-31 08:20:03 +02:00
Franco Fichtner
d7a2cbafae
unbound: disband unbound_execute()
2017-08-26 17:56:57 +02:00
Franco Fichtner
2c3aac8ea6
unbound: restart on new wan IP if explicit interface matches
2017-08-26 17:56:07 +02:00
Ad Schellevis
8ae34afbba
virtual_ip, add optional vhid to support alias ip's on carp. for https://github.com/opnsense/core/issues/1779
2017-08-24 22:49:04 +02:00
Franco Fichtner
a169aeb580
system: cron.d directories starting with FreeBSD 11.1
...
It might be a good idea to move cron to the MVC system completely,
apart from the auto-write logic we could make this a priv-sep job
very easily now.
2017-08-21 11:35:37 +02:00
Franco Fichtner
83ec429db7
interfaces: use KILL instead of TERM here
...
An experimental change discussed via IRC.
2017-08-16 10:31:29 +02:00
Franco Fichtner
9779e7ac56
config: more related to previous
2017-08-16 09:14:08 +02:00
Franco Fichtner
4594fa6dc6
config: versioning is no longer needed
2017-08-16 09:05:51 +02:00
Franco Fichtner
b3cfe6e362
captiveportal: peek at PID, fix reboot startup
...
PR: https://forum.opnsense.org/index.php?topic=5708.0
2017-08-15 11:33:41 +02:00
Franco Fichtner
f4734704f1
openvpn: fix the server lookup mismatch for #1748
2017-08-15 08:36:26 +02:00
Ad Schellevis
9dc19a1c44
remove route-to rule for localhost 3676fb47b4
2017-08-14 17:24:46 +02:00