2930 Commits

Author SHA1 Message Date
Franco Fichtner
4bbb00296f system: inline dpinger stop/start #2396
Our logic for figuring out $gwifip was subverted by an
opportunistic address lookup which does not take into
account link-local specialities in the IPv6 case.
2018-05-09 07:04:18 +00:00
Franco Fichtner
ce7a47a27c system: fix after refactor #2396 2018-05-09 07:04:18 +00:00
Franco Fichtner
699b5151a3 system: exec_safe for dpinger #2396 2018-05-09 08:32:54 +02:00
Franco Fichtner
a6db9d4fda radvd: cluster logic, less noise against stable #2394 2018-05-09 08:07:53 +02:00
Franco Fichtner
e2ae0ce54d system: small tweak for #2396 2018-05-09 06:03:50 +00:00
Lior Okman
3d03e00edf If SLAAC, don't fix the subnet based on the current address 2018-05-09 07:52:14 +02:00
Franco Fichtner
00f9f600c7 system: dedup gateway monitor setup code #2396 2018-05-09 07:45:00 +02:00
Franco Fichtner
412a1e971a system: this is better #2396 2018-05-09 07:24:09 +02:00
Franco Fichtner
f0c4f961ac system: cleanups for easier diff against stable #2396 2018-05-09 07:18:40 +02:00
Franco Fichtner
9462a10685 system: indent and sort #2396 2018-05-08 21:34:51 +02:00
Franco Fichtner
743b409d95 system: cleanups for RTTd visibility #2396 2018-05-08 16:56:50 +00:00
Franco Fichtner
8fda660bce system: fix dpinger RRD creation for #2396 2018-05-08 12:49:04 +00:00
Franco Fichtner
e8e7fa9840 dhcp: fix labels of services to align with menu 2018-05-08 09:32:36 +02:00
Franco Fichtner
fcf23eb835 services: tabs to spaces 2018-05-08 07:42:15 +02:00
Franco Fichtner
25381c02b7 radvd: deprecate prefix in SLAAC tracking mode #2394 2018-05-08 07:41:34 +02:00
Franco Fichtner
910a12990d system: dpiner cleanups #2396 2018-05-07 16:27:30 +00:00
Franco Fichtner
148056cd02 interfaces: add interface_track6_slaac_configure() for #2394 2018-05-07 17:01:16 +02:00
Franco Fichtner
c18569afcd system: tabs in previous #2396 2018-05-07 11:05:25 +00:00
Franco Fichtner
d243580ade system: dpinger instance reload and no more file name magic #2396 2018-05-07 11:03:29 +00:00
Franco Fichtner
881186530a system: dpinger startup for #2396 2018-05-07 08:53:48 +00:00
marjohn56
0df1c0dfef system: add dpinger monitoring option implementation #2326
stddev bits missing from status page / widget for clarity and
further discussion.  Other cleanups by @fichtner included.
2018-05-07 10:17:08 +02:00
Franco Fichtner
014c11e441 radvd: lowercase word 2018-05-07 09:31:48 +02:00
Franco Fichtner
ed7d525f1b interfaces: "this shouldn't happen" #2394 2018-05-07 08:32:48 +02:00
Franco Fichtner
53994b097d interfaces: minimum viable approach for #2394 2018-05-07 06:21:41 +00:00
Franco Fichtner
734e6f490e services: dedup stanzas; closes #2375 2018-05-06 23:49:17 +02:00
Rafael Cano
67383a8ddb Fix IPsec RADIUS secret (#2387)
Add double quotes around the RADIUS secret to prevent some corner cases where the secret was not fully read.
2018-05-06 19:42:28 +02:00
Franco Fichtner
00838b49ce src: move dhclient-script to proper location
".ext" came to be because dhclient-script from BSD is also under sbin/,
but since we always explicity use this one just move it to a neutral
location and point to it.
2018-05-06 14:32:06 +02:00
Franco Fichtner
e6e578c9df dhcp: ldap-server does not exist in v6 #2336 2018-05-06 11:17:05 +02:00
Franco Fichtner
fb31e549c2 dhcp: domain-search-list usage was removed in 2012 2018-05-06 11:13:10 +02:00
Franco Fichtner
28739cb8c9 system: update header 2018-05-06 11:08:36 +02:00
Franco Fichtner
41b1b07603 system: fix typo 2018-05-05 20:32:36 +02:00
Franco Fichtner
fe1f952389 rc: annotate ZFS requirements 2018-05-05 18:15:26 +02:00
Franco Fichtner
a6f582e006 rc: typo 2018-05-05 18:09:20 +02:00
Franco Fichtner
4ca7870364 rc: oops 2018-05-05 17:03:02 +02:00
Franco Fichtner
393ab55447 rc: mount improvements for edge cases 2018-05-05 17:00:45 +02:00
Franco Fichtner
617179613f rc: flip a mute and unmute 2018-05-05 16:43:49 +02:00
Franco Fichtner
d286e9a572 radvd: fix DNSSL settings 2018-05-05 09:51:59 +00:00
Franco Fichtner
94df5fbe68 dhcp: correctly "merge" arrays for #2336
Looks like this was introduced in 607d8eccd.
2018-05-05 09:44:40 +00:00
Ad Schellevis
0ac2af1c1a lib/interfaces, parse ifconfig tunnel data for https://github.com/opnsense/core/pull/2382 2018-05-05 10:01:24 +02:00
Ad Schellevis
62ed6633e4 legacy, configurable landing page and cleanups, for https://github.com/opnsense/core/issues/2385
With getAllowedPages() out of the way, we can ditch some more overlapping logic now.
2018-05-04 18:36:13 +02:00
Ad Schellevis
b5b7dceeac legac/auth, align acl check with mvc, eventually getPrivPages() should also move to the ACL() class, but doesn't hurt that much 2018-05-04 11:57:41 +02:00
Franco Fichtner
a0e3630364 src: unify the label printing of interfaces
This annoyed me for a long time: always print the literal description
if found, only use uppercase on the interface key if no description
is available.
2018-05-04 08:15:52 +00:00
Franco Fichtner
8ebfd58797 rc: simplify zfs mount #2386 2018-05-04 01:03:56 +02:00
Franco Fichtner
ce6a597ca1 rc: emulate zfs_enable="YES" #2386 2018-05-03 22:26:18 +00:00
Franco Fichtner
345e92fedc rc: initial zfs boot awareness for #2386
This should have no impact on existing non-zfs installations.
2018-05-03 21:42:01 +00:00
Franco Fichtner
10cf1bbcc2 www: more of the same typo 2018-05-03 21:34:29 +02:00
Franco Fichtner
4953add9b5 webgui|openssh: working theory for #2375 2018-05-03 16:10:58 +00:00
Franco Fichtner
9a604aa5bb ipsec: set ignore_acquire_ts to allow ASA compat
Let's try this unconditionally.  From the manual...

  If this is disabled the traffic selectors from the kernel's acquire events,
  which are derived from the triggering packet, are prepended to the traffic
  selectors from the configuration for IKEv2 connection. By enabling this,
  such specific traffic selectors will be ignored and only the ones in the
  config will be sent. This always happens for IKEv1 connections as the protocol
  only supports one set of traffic selectors per CHILD_SA.

PR: https://forum.opnsense.org/index.php?topic=8539.0
2018-05-02 16:04:14 +02:00
Franco Fichtner
5e41585d2c dhcp: fix unwanted name-server write
PR: https://forum.opnsense.org/index.php?topic=7837.0
2018-05-02 15:38:21 +02:00
Franco Fichtner
1b895d8adf system: safety belt for #1929
If authenticator init should fail for whatever reason,
do not call a function on an uninitialised object.
2018-05-01 18:30:11 +00:00