Franco Fichtner
5ae42eeea8
rfc2136: forgot this #1478
2017-03-18 11:33:28 +01:00
Franco Fichtner
c61babf7bb
rfc2136: groundwork for #1478
2017-03-18 11:20:47 +01:00
Ad Schellevis
4388146cb9
(TrafficShaper) exclude ipaddress when using 3g/4g modems
2017-03-17 20:41:38 +01:00
Franco Fichtner
b595a3e2e9
rc: fix importer issue with empty prompt
2017-03-17 19:15:42 +01:00
Franco Fichtner
ea0eeadf15
pkg: cluster changed lines between master and stable
2017-03-17 16:43:04 +01:00
Franco Fichtner
2fd7118df9
ipsec: remove lock, we run through configd; verbose output
2017-03-17 16:31:44 +01:00
Franco Fichtner
6ca40bc406
mvc: new style checker has new style checks ;)
2017-03-17 09:26:02 +01:00
Franco Fichtner
9821d6fb7a
pkg: remove the release override, stable/xx.x will become release again
2017-03-17 13:09:02 +01:00
Franco Fichtner
d820240138
openvpn: take client IP for topology subnet in CSC
2017-03-17 11:11:10 +01:00
Franco Fichtner
0079214dce
openvpn: allow tunnel_network overrides to contain host addresses; closes #1476
2017-03-17 09:03:34 +01:00
Ad Schellevis
2dbc3ab259
(gwlb.inc) ok, this looks odd, I can't find a valid use of "ipprotocol" in the gatewaygroups. (other then the one filter.inc)
2017-03-14 21:43:02 +01:00
Ad Schellevis
ee8955e49d
(gwlb.inc) cleanups in return_gateway_groups_array()
2017-03-14 21:38:41 +01:00
Franco Fichtner
dd2a605dc5
unbound: simplify for #1449
2017-03-13 19:08:52 +01:00
Ad Schellevis
137dda204d
(groups) align groupname length, like 0829a34cef
2017-03-13 09:27:02 +01:00
Franco Fichtner
99973edc15
services: add route features to RA
2017-03-13 07:35:27 +01:00
Ad Schellevis
f89f1b349f
Merge pull request #1453 from fabianfrz/csrf_fixes
...
make csrf error page translateable, fix HTML errors in csrf.inc
2017-03-12 17:55:36 +00:00
Franco Fichtner
c7f463241b
firewall: keep previous order, 40 is shaper
2017-03-12 16:03:28 +01:00
Franco Fichtner
c2190c1f52
firewall: merge interface groups into firewall
...
Groups are only used as firewall rules interfaces, so move them
into the "pf" "plugin" and fix the menu accordingly.
2017-03-12 15:58:12 +01:00
Franco Fichtner
ce4052437e
intrusion detection: use hostmode 'auto', we have IPS
2017-03-12 12:27:54 +01:00
Franco Fichtner
03e59623ba
openvpn: do not offer external CA for selection; closes #1467
2017-03-12 11:08:10 +01:00
Franco Fichtner
0a3db65932
openvpn: file was not checked in, git grep didn't work ;)
2017-03-12 10:51:37 +01:00
Franco Fichtner
4f88afdfb9
system: fix scrambled password user add; closes #1468
2017-03-12 10:44:51 +01:00
Franco Fichtner
f347bb9ee9
openvpn: file was moved, not deleted
2017-03-11 19:29:06 +01:00
Franco Fichtner
e91951537a
openvpn: merge into plugin
2017-03-11 19:24:34 +01:00
Franco Fichtner
910ee16389
web proxy: while here, also move the squid auth script
2017-03-11 18:51:43 +01:00
Franco Fichtner
180d611a2b
ipsec: move/merge into plugins
2017-03-11 18:45:07 +01:00
Franco Fichtner
9b694b705d
start to hide IPsec and OpenVPN for pluginification
2017-03-11 17:51:54 +01:00
Franco Fichtner
2058b1cf56
system: fix CRL certificate count; closes #1458
2017-03-11 17:12:17 +01:00
Franco Fichtner
069019c8ec
unbound: typo in previous
2017-03-11 17:00:24 +01:00
Franco Fichtner
cdaa7affdf
unbound: add serve-expired option #1405
2017-03-11 16:56:16 +01:00
Franco Fichtner
6e57f407a7
dns: do not store empty recordtype #1457
2017-03-10 14:17:21 +01:00
Franco Fichtner
2acd4595cc
dns: small follow-up for #1457
2017-03-10 14:09:43 +01:00
Elias Werberich
fb7c4617e2
RFC2136 RecordType Option ( #1457 )
2017-03-10 13:58:18 +01:00
Franco Fichtner
73b1d444ee
interfaces: small simplification for #1455
2017-03-10 09:19:53 +01:00
Ad Schellevis
1dabd53dce
(plugins, interfaces) add ifgroup type, filter in interfaces_groups_edit.php. for https://github.com/opnsense/core/issues/1455
2017-03-10 09:06:37 +01:00
Ad Schellevis
f6d83a94e5
(interface groups) allow virtual interfaces, for https://github.com/opnsense/core/issues/1455
2017-03-09 21:48:26 +01:00
Fabian Franz
2407fa0105
make csrf error page translateable, fix HTML errors in csrf
2017-03-08 20:21:46 +01:00
Ad Schellevis
4169afd16e
(gwlb.inc) ipprotocol should be stored in gateway_item
2017-03-07 21:30:29 +01:00
Ad Schellevis
4f58e7f897
(gwlb.inc) more cleanups
2017-03-07 21:11:42 +01:00
Ad Schellevis
aa1221ae18
(gwlb.inc) same here, as $ifname for ipv6 is also unique
2017-03-07 20:50:06 +01:00
Ad Schellevis
a5d9897c1e
(gwlb.inc) more cleanups, $ifname == $gateway_item['friendlyiface'] looks kind of impossible here, $ifname is unique and not in $gateway_item yet...
2017-03-07 20:43:23 +01:00
Ad Schellevis
79a6df22ad
(gwlb.inc) remove some unreachable code in return_gateways_array()
2017-03-07 20:38:07 +01:00
Franco Fichtner
dc1ebe5bad
firewall: remove spurious migration for removed setting
2017-03-07 09:05:05 +01:00
Franco Fichtner
e29f1b4038
firewall: add pool options to redirection target in port forward; closes #1423
2017-03-05 20:57:18 +01:00
Franco Fichtner
76a2a1f34e
firewall: subnets are valid redirection targets, even 0.0.0.0/0 #1423
2017-03-05 20:39:41 +01:00
Franco Fichtner
87dfc1f126
firewall: add tag/tagged to port forwarding for #1423
...
It's a bit funny that the help text indicates we can use tag/tagged with
NAT rules as well, because this was never implemented although it really
works.
2017-03-05 20:09:27 +01:00
Franco Fichtner
2e386fe059
pkg: fix plist
2017-03-05 19:29:11 +01:00
Ad Schellevis
63e8101ea7
(firewall) empty means "in"... confusing ;) https://github.com/opnsense/core/blob/17.1.2/src/etc/inc/filter.inc#L2314-L2315
2017-03-05 19:18:06 +01:00
Ad Schellevis
58b4488069
(firewall) add port/address parsing to FilterRule(), should be backwards compatible with current config settings
2017-03-05 19:05:10 +01:00
Ad Schellevis
3e47ec946a
(firewall) add new Util class containing often used (static) helpers.
2017-03-05 19:03:38 +01:00
