5374 Commits

Author SHA1 Message Date
Ad Schellevis
65653b7c97 missing global in filter.inc 2016-09-08 15:06:12 +02:00
Ad Schellevis
0e158f0b0c (filter.inc) simply check if not empty 2016-09-08 14:05:33 +02:00
Ad Schellevis
6c7224072d missed an enter in the previous commit 2016-09-08 10:48:29 +02:00
Ad Schellevis
af66f0da7c (firmware) add configd "firmware loader" commands to control the contents of /boot/loader.conf.local
plugins can use this call to register new bootup parameters, new commands added:

configctl firmware loader show
configctl firmware loader rm <parameter>
configctl firmware loader edit <parameter> <value>
2016-09-08 10:44:55 +02:00
Ad Schellevis
d3d583ab83 (firewall, nat) change "Redirect target IP" to alias/host selectionbox like the rest. 2016-09-06 21:00:06 +02:00
Ad Schellevis
801d7ca05a (crashreport) PHP Warning: in_array() expects parameter 2 to be array, null given in /usr/local/www/services_unbound.php on line 176 2016-09-05 21:24:43 +02:00
Ad Schellevis
64f3742fb3 (crashreport) PHP Warning: Illegal string offset 'rule' in /usr/local/www/diag_logs_filter.php on line 277 2016-09-05 21:17:01 +02:00
Ad Schellevis
2f741d7ad4 (crashreport) limit output chunks to 5MB, if we can't find </head> within that area it's very unlikely that it exists in the output.
report:
PHP Fatal error:  Allowed memory size of 268435456 bytes exhausted (tried to allocate 35997807 bytes) in /usr/local/www/csrf/csrf-magic.php on line 144
2016-09-05 21:12:57 +02:00
Ad Schellevis
aab13817d7 (packet capture) limit the maximum number of output lines, prevent "PHP Fatal error: Allowed memory size of ..."
collected from crashreport
2016-09-05 20:26:51 +02:00
Ad Schellevis
d26cbd6615 (crashreport) PHP Warning: in_array() expects parameter 2 to be array, null given in /usr/local/www/vpn_openvpn_csc.php on line 406 2016-09-05 20:16:17 +02:00
Ad Schellevis
ca1270a8cf missing parameter in system_usermanager_settings_ldapacpicker.php 2016-09-05 20:08:39 +02:00
Ad Schellevis
69e28f8491 (firewall) remove extra button, closes https://github.com/opnsense/core/issues/1173 2016-09-05 18:29:35 +02:00
Ad Schellevis
9503d722d9 (firewall) unhide bottom row for https://github.com/opnsense/core/issues/1173 2016-09-05 16:11:38 +02:00
Ad Schellevis
e98569bbec (IDS) missing plugin for https://github.com/opnsense/core/issues/1018 2016-09-05 14:24:48 +02:00
Ad Schellevis
b9ff688b9e (IDS) add syslog support, closes https://github.com/opnsense/core/issues/1018 2016-09-05 14:24:07 +02:00
Ad Schellevis
69d2c462e7 (mvc) glitch in JS error handling, closes https://github.com/opnsense/core/issues/1163 2016-09-05 11:48:17 +02:00
Ad Schellevis
f7217de593 Merge pull request #1155 from fabianfrz/cleanup
changes in services_unbound_advanced.php
2016-09-05 11:38:28 +02:00
Ad Schellevis
9dfee192dd (openvpn, csc) add tunnel_networkv6 for https://github.com/opnsense/core/issues/1161 2016-09-05 10:21:06 +02:00
Ad Schellevis
6abb99d072 Merge pull request #1171 from fabianfrz/translation
fix translation in firewall_virtual_ip.php
2016-09-05 09:04:58 +02:00
Ad Schellevis
15374ba7e2 (cron) missing translation, thanks @fabianfrz 2016-09-04 20:06:37 +02:00
Ad Schellevis
c3daf44a7c (cron) add some spacing 2016-09-04 16:44:37 +02:00
Fabian Franz
a94af0da51 fix translation in firewall_virtual_ip.php 2016-09-04 13:26:46 +02:00
Fabian Franz
d1e9265fa9 changes in services_unbound_advanced.php
* translation fixes (for example submit button)
* remove some not operators
* make short echo tags look more like a template
2016-09-03 17:27:37 +02:00
Franco Fichtner
d73199570f dashboard: this needs absolte redirects, some missed spots
Relative redirect is used almost everywhere, but to be honest
it looks safer to make all paths absolute.

PR: https://github.com/opnsense/core/issues/1168
2016-09-02 10:06:01 +02:00
Franco Fichtner
a85a46b8d0 dashboard: url_safe() redirects
PR: https://github.com/opnsense/core/issues/1168
2016-09-02 09:55:20 +02:00
Franco Fichtner
bd66467db8 rc: do not clobber php.ini up front
PR: https://forum.opnsense.org/index.php?topic=3573.0
2016-09-02 08:29:40 +02:00
Ad Schellevis
f95082442a add ksort() to previous 2016-09-01 20:59:43 +02:00
Ad Schellevis
74e8e203b1 (openvpn) refactor openvpn_get_cipherlist and openvpn_get_digestlist, fix compatibilty with both --show-ciphers outputs 2016-09-01 20:52:46 +02:00
Franco Fichtner
6f503e565a system: add dynamic DNS update to cron 2016-09-01 20:50:58 +02:00
Franco Fichtner
c6d2cca0e9 lang: s/Automagic/Automatic/g
Suggested by: SimonB
2016-08-31 16:19:49 +02:00
Franco Fichtner
927f4e0efe plugins: do not call write_config() in plugins_interfaces()
Since we weaved the latter into the former, we can now get rid of
the transition code.  The behaviour doesn't change.
2016-08-31 09:36:49 +02:00
Franco Fichtner
143e759f00 ids: first pass for simpler ruleset handling #1129
This does:

o Enable/disable all text as opposed to confusing icons of
  checkboxes.  Also mark them as "primary".
o Make the info button a pencil / edit button as we can modify
  data from there.
o Minor cleanups.

Missing:

o Removing the toggle buttons for each rule (the edit button
  is sufficient).  Haven't done this because the rowtoggle
  mechanism is probably better adapted by @adschellevis.
o Maybe move the enable disable all buttons back to the bottom.
2016-08-31 08:40:33 +02:00
Franco Fichtner
1611955b2d openvpn: more tweaks for previous
There is no need to visually overload the field descriptions with
stop chars like a slash, the help is sufficient in explaining that
multiple networks can be used and the chances are high that most
will only ever use one network here.
2016-08-31 07:54:26 +02:00
Franco Fichtner
db356ac9b0 openvpn: annotate IPv4 where appropriate
Suggested by: SimonB via Pootle
2016-08-31 07:48:23 +02:00
Ad Schellevis
8eae446e8b rework https://github.com/opnsense/core/pull/1160 2016-08-29 20:04:20 +02:00
Ad Schellevis
1372e8a23c Merge pull request #1160 from fabianfrz/add_constraint
Camellia can only be used with IKEv2
2016-08-29 19:56:25 +02:00
Franco Fichtner
82bece2a6d pkg: shadow the sample files, delete on uninstall is undesired
While there also get rid of the need for a /usr/ports dir (this will
make tools.git crash and burn for sure.)

shadow.ucl adapted from https://github.com/freebsd/freebsd-ports/blob/master/Keywords/sample.ucl
2016-08-29 19:46:37 +02:00
Fabian Franz
a5e24cadf5 Camellia can only be used with IKEv2 2016-08-29 17:17:02 +02:00
Fabian Franz
d640e5b179 add camellia to cipher list 2016-08-29 14:26:55 +02:00
Franco Fichtner
ab4f67c872 openvpn: treat all pages with plugins.inc require 2016-08-29 10:26:53 +02:00
Ad Schellevis
f3f36924b8 (status_gateway_groups) missed a sport, for https://github.com/opnsense/core/issues/1132 2016-08-29 10:06:13 +02:00
Franco Fichtner
5dc170e2ad src: whitespace sweep 2016-08-29 10:04:37 +02:00
Franco Fichtner
5c3b07504d ipsec: "pre shared key" display on main page annoys me 2016-08-29 09:25:03 +02:00
Franco Fichtner
5585e10967 src: strip gettext() from write_config(); closes #1158 2016-08-29 09:18:17 +02:00
Franco Fichtner
b1af5b7b2f ipsec: improve interface plugging; closes #1157
Required a little soft-coding in areas that could be thought of as
"pluggable" firewall rules.  It looks very doable for 17.7, we could
potentially make IPsec and OpenVPN plugins!  Or at least prove that
the plugin framework is capable of plugging in a complex VPN tech.
2016-08-29 08:48:25 +02:00
Ad Schellevis
f8b1879908 (status_gateway_groups.php) wrong status, https://github.com/opnsense/core/issues/1132 2016-08-29 08:39:53 +02:00
Franco Fichtner
1811e1d204 openvpn: improve plugging further for #1157 2016-08-29 07:25:00 +02:00
Franco Fichtner
1d73b3b59d plugins: follow the footsteps of plugins_syslog() and plugins_services()
This looks simple enough now.  Discussed with @adschellevis.
2016-08-29 07:10:29 +02:00
Franco Fichtner
74870bbf05 ipsec: iron out code oddities with apply/enable handling 2016-08-28 17:31:17 +02:00
Franco Fichtner
3947fff487 ipsec: more interface plugging after previous 2016-08-28 17:10:26 +02:00