10441 Commits

Author SHA1 Message Date
Ad Schellevis
74c2ac9a20 syslog, fix legacy remote logging. closes https://github.com/opnsense/core/issues/3682 2019-09-01 11:02:00 +02:00
Ad Schellevis
ae5692b477 filter/alias, missing refresh on geoip type closes https://github.com/opnsense/core/pull/3685 2019-08-31 14:51:44 +02:00
Ad Schellevis
2982424232 interfaces, only trigger newwanip event for affected interfaces 2019-08-30 15:09:06 +02:00
Ad Schellevis
2d73c2cba5 plugins_configure, log actions 2019-08-30 14:58:05 +02:00
Ad Schellevis
bd988894a5 ditch links ref eff129c820 (commitcomment-34882067) 2019-08-29 15:24:39 +02:00
Ad Schellevis
eff129c820 diag_dns.php it seems like a good time to delete non functional links here, since private.dnsstuff.com isn't active. closes https://github.com/opnsense/core/pull/3677 2019-08-29 09:54:06 +02:00
Franco Fichtner
79732b440e system: this is the right fix for #3676 ;) 2019-08-29 08:17:22 +02:00
Franco Fichtner
060f9edad7 system: fix translation order of tunables description; closes #3676 2019-08-29 08:08:56 +02:00
Ad Schellevis
28cc0dc5f4 CARP, kill vague advskew legacy hook when starting in maintenance mode (virtualip_carp_maintenancemode), closes https://github.com/opnsense/core/issues/3671 2019-08-26 21:37:22 +02:00
Ad Schellevis
55ae9124c0 Firewall: partially revert https://github.com/opnsense/core/issues/3591 2019-08-23 18:00:26 +02:00
Northguy
ed785a6612 Cosmetic changes to Tunables section (#3665)
Moved to apply notice, as this is the place where it is logical to be notified you might need to reboot after applying a tuneable
2019-08-23 12:46:10 +02:00
Franco Fichtner
83b4b71cb7 opendns: small tweaks 2019-08-23 11:35:11 +02:00
Ad Schellevis
a3a07327cb OpenDNS missing its own configure hooks (hidden in dyndns), move to core 2019-08-22 15:20:56 +02:00
gisforgirard
6bac85d66a Update head.inc (#3403)
more consistent html
2019-08-21 11:33:43 +02:00
Frank Brendel
8be6a03d94 monit: fix migration (#3661) 2019-08-21 11:17:18 +02:00
Ad Schellevis
5400903e0e IDS: minor ui improvement, change message not displayed after toggle or save 2019-08-21 11:10:03 +02:00
Ad Schellevis
3481c16af5 configctl: support using as event handler.
Syslog-NG has a convenient program output, which can be used to execute commands on receiving specific data on syslog. This commit adds functionality to configctl which should allow it to be used as a handler for this feature.

Something like the following should execute carp service events, with a latency of 0.5 seconds to prevent flooding the system.

destination ... {
  program("/usr/local/sbin/configctl -e -t 0.5 interface update carp service_status");
}
2019-08-20 18:22:05 +02:00
Ad Schellevis
36f3180937 configd: configd_ctl.py use argparse() to handle parameters 2019-08-20 16:28:53 +02:00
Ad Schellevis
1cf72c2fdf API auth, log api key when auth failed. 2019-08-19 10:54:28 +02:00
Frank Brendel
8afb87cc04 netflow: set active/inactive timeout (#3651) 2019-08-19 09:05:44 +02:00
Ad Schellevis
d3323a82f8
CARP: optionally promote/demote on service status (#3656)
CARP: optionally promote/demote on service status event handler.

This adds /usr/local/etc/rc.carp_service_status.d/ to register service check scripts, which on failure exit are considered blocking for normal service operation.

A service should emit the following on status change, which in response might lead to change of carp status:

configctl interface update carp service_status

The included early script assures an initial demotion value before interface setup.

ref  https://github.com/opnsense/core/issues/3636
2019-08-18 19:54:05 +02:00
opnsenseuser
090f94c04e Sidebar - bug fix; closes 3653
third party bug fix and source code improved
2019-08-18 06:21:13 +02:00
h-town
6c4b880705 Set absolute path to root.hints
root.hints file is located at /var/unbound not /

Current users may not be leveraging root.hints with unbound deployments.
2019-08-18 05:44:44 +02:00
Franco Fichtner
612cdd5118 src: style sweep 2019-08-18 04:56:48 +02:00
Ad Schellevis
d8ef93932b netflow: netflow aggregator, skip illegal flow records. https://forum.opnsense.org/index.php?topic=13711 2019-08-17 19:09:11 +02:00
Ad Schellevis
6ddff9e021 interfaces/vlan, don't show vlan interfaces in edit form, remove get_interface_list() usage and filter the relevant types here. closes https://github.com/opnsense/core/issues/3648 2019-08-16 12:13:35 +02:00
Ad Schellevis
4531ceea4d Flowd aggregator: python 3 exception doesn't have a "message" property, cast error to string and check for "malformed"
ref : https://forum.opnsense.org/index.php?topic=13711.0
2019-08-16 12:12:51 +02:00
Frank Brendel
41c31ee94b monit: add parent devices to interface list (#3643) 2019-08-13 10:01:37 +02:00
Ad Schellevis
cfead4c8a8 Config: when no backup could be restored, last resort should always be to go back to factory defaults (in the unlikely event that one of the backups are readable, it should not exit without a config) 2019-08-09 16:17:44 +02:00
Ad Schellevis
680846d65b config: the virtues of ufs...
In the unfortunate event that the kernel crashes during config save, both config.xml and the last backup might be broken. Let's try to find the last functional config when unable to init()
2019-08-09 16:09:33 +02:00
Ad Schellevis
853a4392c1 CARP status page, reformat the page a bit and add "carp demotion level from net.inet.carp.demotion). Before this change the status page would only report an issue, claiming it will be backup, which in reality doesn't have to be the case.
For debugging purposes its better to report what the actual status is.
2019-08-09 14:56:36 +02:00
Ad Schellevis
7bfadb2acd Revert "Filter, automatic rules. "let out anything from firewall host itself (force gw)" not visible, since its not bound to the interface. Although we might want to show all rules without interface as well, the gateway rule belongs to the interface as the interface address is used as from address"
This reverts commit f8d5c01a6f4ab2ef307324acd4711cd76e005827.

*** Needs revert, since priority fails when bound directly on interface
2019-08-08 17:14:25 +02:00
Ad Schellevis
df5a33381f pluginctl: explain what we are doing and prettify callflow a bit.
usage: pluginctl [-h] -[c] [-s] [arguments]

optional arguments:

	-h show this help text and exit
	-c configure mode (default), executes plugin [_configure] hook
	-s service mode (e.g. myservice restart)

	 without arguments, a list of plugins of the requested type is shown
2019-08-08 11:22:30 +02:00
Ad Schellevis
3211eaed62 unbound, support custom includes. for https://github.com/opnsense/core/issues/3621 2019-08-08 09:39:44 +02:00
Michael
d53c0b1b8b update helptext to reality (#3632) 2019-08-08 09:22:09 +02:00
Ad Schellevis
1aad01cc92 gateway (groups) overview, use table-condensed so our new layout fits easier. slightly related to https://github.com/opnsense/core/issues/3625 2019-08-08 09:13:52 +02:00
Ad Schellevis
af7d7236df firewall, rules. use same message as other legacy pages, which also informs the user about HAsync when needed. The background note is not very relevant anyway. 2019-08-07 17:03:30 +02:00
johnaheadley
06fb809eb6 OpenVPN wizard server cert check (#3634) 2019-08-07 17:01:58 +02:00
Ad Schellevis
d2fc3c2567 firewall, rules. refactor message dialog to show after toggle. ref https://github.com/opnsense/core/pull/3605 2019-08-07 10:32:03 +02:00
Ad Schellevis
c8b57d0bfe firewall/rules, toggle enabled/disabled, log on/off via ajax call, as discussed https://github.com/opnsense/core/pull/3605 2019-08-06 13:09:11 +02:00
Ad Schellevis
3ac18b9189 Merge branch 'logging_toggle' of https://github.com/johnaheadley/core into johnaheadley-logging_toggle 2019-08-06 12:27:46 +02:00
Ad Schellevis
bb6833d501 Gateways, minor overview cleanup. if all gateway_items are removed, we should remove the container to to prevent leaving an empty item. found while working on https://github.com/opnsense/core/issues/3625 2019-08-05 16:51:32 +02:00
Ad Schellevis
74ff64787c Gateways, missed a spot for https://github.com/opnsense/core/issues/3625 2019-08-05 16:40:33 +02:00
Franco Fichtner
7abd1c78ca firmware: unbreak base and kernel package listing
We don't have an upstream repository and origin here yet.
2019-08-04 21:26:22 +02:00
johnaheadley
acfc9f636f
Logging toggle v2 2019-08-04 11:03:55 -07:00
Ad Schellevis
93bbe1ee16 Gatways, add defunct items in disabled state, for https://github.com/opnsense/core/issues/3625 2019-08-04 19:48:29 +02:00
John Headley
50fbe6ca79 Merge remote-tracking branch 'opnsense/master' into logging_toggle
# Conflicts:
#	src/www/firewall_rules.php
2019-08-04 10:23:13 -07:00
Ad Schellevis
2d7f9cae2d Syslog, use fqdn when sending messages. closes https://github.com/opnsense/core/issues/3622 2019-08-02 15:43:14 +02:00
Franco Fichtner
de2b965304 firmware: small tweaks 2019-08-02 12:29:46 +02:00
Ad Schellevis
a91babfcba Gateways, for automatic outbound nat rules exclude gateways which are not configured on the interface and are not dynamic. mimic pre 19.7 behaviour 2019-08-02 11:59:11 +02:00