8506 Commits

Author SHA1 Message Date
Alexander Shursha
4e8e256333 squid: error_directory /usr/local/etc/squid/errors/{{lang}}; closes #2304 2018-03-29 06:38:42 +00:00
Franco Fichtner
99c9c7006a make: allow changing dependencies on the fly 2018-03-28 18:22:16 +00:00
Franco Fichtner
6a5f74e2d4 firewall: shared forwarding is fine 2018-03-28 15:36:33 +02:00
Franco Fichtner
4855b1a922 pkg: for testing suricata-devel
Requested by: @mimugmail
2018-03-28 08:30:02 +02:00
marjohn56
299782a2fd Fix incorrect display 2018-03-27 16:27:36 +02:00
Fabian Franz BSc
3a49512b44 Harden GUI by adding a CSP, XSS protection and referrer hiding (#2212) 2018-03-27 13:08:03 +02:00
Michael
c2d4ead250 Add delay option to pipe in Traffic Shaper (#2297) 2018-03-26 18:31:14 +02:00
Ad Schellevis
90e8e5fe20 Insight, add netflow data aggregator to service list, helps debugging issues like https://github.com/opnsense/core/issues/2296 2018-03-26 15:43:09 +02:00
Ad Schellevis
23d13aaa74 Proxy, pid isn't an option of service, but because the name matched it looked like it worked (used is_process_running in stead of pid) 2018-03-26 15:41:42 +02:00
Michael
aaf478aa03 updated link
Seems this option was in _admin and moved to _firewall. Now it links to the correct page for editing anti lockout rule
2018-03-26 12:10:15 +02:00
Michael
80ce75e373 Fix help text in Traffic Shaper masks (#2293)
* Update dialogPipe.xml

* Update dialogQueue.xml

* Update dialogPipe.xml

* Update dialogQueue.xml
2018-03-26 11:30:23 +02:00
Franco Fichtner
9e11911289 www: some final styling with feedback from @adschellevis 2018-03-26 09:28:20 +00:00
Franco Fichtner
5990f2c775 mvc: style update 2018-03-25 14:24:51 +00:00
Franco Fichtner
6b14406be6 system: another tweak 2018-03-25 16:13:35 +02:00
Franco Fichtner
e4d1e84da5 ipsec: simplify widget error case 2018-03-25 15:53:17 +02:00
Franco Fichtner
16f4a4962f www: flip table redraw, allows to remove spurious table mod #2290 2018-03-25 13:39:09 +00:00
Franco Fichtner
a4070abd3e www: small follow-up for #2290
For consistent stripe style.
2018-03-25 13:31:07 +00:00
Franco Fichtner
95b18c06fc system: config backup stripes and fix; closes #2290 2018-03-25 13:25:13 +00:00
Franco Fichtner
e9c3be35d6 www: visual cleanups, unused class/style zapping #2290 2018-03-25 13:10:27 +00:00
Franco Fichtner
b074216e93 www: style updates, less strong/bold markup #2290 2018-03-25 10:08:53 +00:00
Franco Fichtner
882b06fdd5 system: kickstarter for #2290 2018-03-24 16:58:16 +00:00
Franco Fichtner
1449503cdc system: "fly me to the moon" error in previous :) 2018-03-24 11:30:50 +00:00
Franco Fichtner
700dc954d4 system: small corrections in pfsync peer IP handling 2018-03-24 12:26:40 +01:00
Ad Schellevis
d5cdddedea backup, move google drive backup and settings into backup framework, add basic field types in diag_backup.php to render backup forms and remove crontab dependency since remote_backup doesn't really do anything when none of the providers are enabled. for https://github.com/opnsense/core/pull/2251 2018-03-23 19:25:05 +01:00
Franco Fichtner
63cfe0a96c services: monit dependency oversight, convert service control 2018-03-21 21:00:20 +00:00
Franco Fichtner
12d161cb6d interfaces: that's why we have named variables 2018-03-21 19:37:28 +01:00
Franco Fichtner
b2422546f8 src: small indent issue in previous 2018-03-21 07:15:32 +01:00
Franco Fichtner
92d809cfe8 src: whitespace and style sweep 2018-03-21 05:51:47 +01:00
Ad Schellevis
2eb5ac913a move google drive backup to new framework for https://github.com/opnsense/core/pull/2251
Still some work todo, integrate configuration into new interface and iterate through available options in remote_backup.php.
The current state is functionally unchanged, only some minor cleanups in the previous backup code.
2018-03-20 20:58:02 +01:00
Ad Schellevis
71485968d2 Cron, missed default setting to origin "cron" and some __String() to (string) replacements 2018-03-20 18:59:42 +01:00
Ad Schellevis
97156b5596 Cron, move to ApiMutableModelControllerBase to replace standard plumbing and add missing gettext() in custom validations 2018-03-20 18:53:33 +01:00
Ad Schellevis
335846e978 backup framework / encryption, replace -k for -pass as suggested by @fabianfr 2018-03-20 18:49:25 +01:00
Ad Schellevis
c12dc1e07c cron, fix menu registration, shouldn't display "workaround" in quick search 2018-03-20 18:00:48 +01:00
Ad Schellevis
75cb5279a0 missed a spot in previous 2018-03-20 17:03:38 +01:00
Ad Schellevis
e338b85f03 routes, add some missing phpdoc strings 2018-03-20 17:02:42 +01:00
Ad Schellevis
c2ad5547a7 routes/mvc, use ApiMutableModelControllerBase and add missing phpdocs 2018-03-20 16:57:04 +01:00
Ad Schellevis
92a8e402b1 ditch non functional QinQ interfaces, closes https://github.com/opnsense/core/issues/2274 2018-03-20 14:41:52 +01:00
Franco Fichtner
a458aec929 plugins: remove spurious rc.plugins_configure
Prodded by: @adschellevis
2018-03-20 11:05:58 +01:00
marjohn56
2f12b3dc55 interfaces: dhcp6-creation-breakout-step2; closes #2258
Additions to Franco's changes. Moved script creation to interface_dhcpv6_prepare().

Removed call to interface_dhcpv6_prepare() from interface_dhcpv6_configure(),
the conf and script creation needs to be called before we get there.
2018-03-20 08:41:06 +00:00
Franco Fichtner
b9691d58a9 pkg: fix plist 2018-03-20 06:59:16 +01:00
Franco Fichtner
77bcfefd97 interfaces: allow all IPv6 prefixes from 48 to 64
PR: https://forum.opnsense.org/index.php?topic=7650.0
2018-03-20 06:58:16 +01:00
Ad Schellevis
aedfc6b887 work in progress pluggable backup providers for https://github.com/opnsense/core/pull/2251
Define a basic interface for backup providers and try to move our GoogleDrive backup in the process.
The basic idea is there, now we need to attach this to the current user interface (don't want to rework the legacy backup/restore page now) and move the last pieces for the google backup feature over to this.
Next we should be able to iterate over our providers and request a backup for the ones that are activated.

The responisibilty for what to backup lies within the provider at the moment, to keep things compatible and simple for the caller.
2018-03-19 21:13:17 +01:00
Ad Schellevis
ad29ec2fe6 core/acl, remove check if acl entry starts with page-, seems confusing to register an acl which won't be parsed.... 2018-03-19 18:31:44 +01:00
Ad Schellevis
9fdc0f1ac6
Merge pull request #2271 from mimugmail/master
traffic shaper: respect mask in queue config
2018-03-19 12:38:08 +01:00
Michael
2838b562ad
respect mask in queue config 2018-03-19 12:35:30 +01:00
Franco Fichtner
6928d06aad rc: filter_configure_sync does gateway switching...
... so let's do that first and afterwards reload OpenVPN and IPsec.
It's not that problematic, because both variants reload the filter
when they have done something, so we merely spread out the call order
a bit instead of batching a number of filter reload at the end.

PR: https://github.com/opnsense/core/issues/2247
2018-03-19 11:28:12 +01:00
Franco Fichtner
6769bc7d41 firewall: reload schedules 2 minutes early
Frequently users have schedules same as the reload times, so we may
end up missing a closing schedule.  Reload 2 minutes earlier to improve
this behaviour slightly.
2018-03-19 11:16:04 +01:00
Franco Fichtner
ef61b13495 system: reverse reload order for gateway switching on openvpn #2247 2018-03-19 11:13:39 +01:00
Franco Fichtner
d141ea7d60 openvpn: final tweak on wording #2266 2018-03-19 08:33:39 +01:00
Franco Fichtner
e66cff65d7 openvpn: we need both messages on previous... #2266 2018-03-19 07:23:19 +00:00