8867 Commits

Author SHA1 Message Date
Fabian Franz BSc
67c679299f www/squid: fix pac template (#2806) 2018-10-14 16:35:09 +02:00
Ad Schellevis
9aeb91cced Restore area - line break is missing, closes https://github.com/opnsense/core/pull/2813 2018-10-14 12:19:59 +02:00
Ad Schellevis
54f4ec89bb OpenVPN linkup/down scripts, add IPv6 + ifconfig_local ipv4 route, for https://github.com/opnsense/core/issues/2799 2018-10-14 12:11:53 +02:00
Franco Fichtner
724f41dadb Revert "border between <a>´s are missing"
This reverts commit d60b154b0ccd25aafd861b57e4898227b03da286.
The normal theme menu does not use separators so the sidebar
shouldn't use them as well.  Noticed this morning with a fresh
pot of coffee.
2018-10-14 12:10:05 +02:00
Franco Fichtner
62f9073b8d firmware: small tweaks for future flexibility
Most of this will only be relevant for 19.1 where we shall have
an "enforcement" of mtree files through the sets so that this
check can audit our whole system for issues... :)
2018-10-14 12:02:58 +02:00
Franco Fichtner
e65fef947d firmware: rename security audit script for clarity 2018-10-14 11:57:18 +02:00
Franco Fichtner
e7bd9d3a74 firmware: wrong audit ;) 2018-10-14 11:46:17 +02:00
Franco Fichtner
ffe4910513 firmware: first part of mtree verification
PR: https://github.com/opnsense/update/issues/37
2018-10-14 11:39:36 +02:00
Ad Schellevis
58eaa62599 OpenVPN linkup, add remote address as route when set, for https://github.com/opnsense/core/issues/2799 2018-10-13 21:15:36 +02:00
Ad Schellevis
fe21186e05 Firewall/live log, replace color styles with classes, for https://github.com/opnsense/plugins/issues/912 2018-10-13 16:50:11 +02:00
Ad Schellevis
f2b30558ac IDS/IPS, abuse.ch fingerprint ruleset for suricata 4.1.x using tls_cert_fingerprint keyword for better performance.
keep on master while still on suricata 4.0.x
2018-10-13 11:15:56 +02:00
opnsenseuser
d60b154b0c border between <a>´s are missing
I noticed that the separation of the individual <a> links is missing. Now it is up to you to say if we should install it again or not. if you do not want it please just delete this pr. have added two screenshots as a comparison. Thank you, best regards, René
2018-10-13 09:09:25 +02:00
Ad Schellevis
dcbd0366a1 Revert "IDS, replace tls.fingerprint with tls_fingerprint for better performance in custom rules"
This reverts commit a00e646ca2899a078db6c332a582ecfeffa54e16.
2018-10-12 22:18:53 +02:00
MichaelDeciso
f30c54420d Use single guillemets for previous/next page (#2802)
Currently, pagination uses double guillemets for first/last page and lower than/greater than signs for previous next (like so: `« < 1 2 3 > »`). Change this to use single guillemets, for visual consistency (like so: `« ‹ 1 2 3 › »`).
2018-10-11 09:28:44 +02:00
Franco Fichtner
e8c38e6710 ui: cleanups in previous 2018-10-11 09:06:50 +02:00
René
482492b8b1 sidebar optimization (#2784) 2018-10-11 09:03:26 +02:00
Ad Schellevis
82cc7171f0 Merge branch 'mimugmail-pie' 2018-10-11 08:55:31 +02:00
Ad Schellevis
bf34881348 replace validation message for https://github.com/opnsense/core/pull/2794 2018-10-11 08:54:56 +02:00
Franco Fichtner
4389fdad77 unbound: fix a lie, remove bold markup while at it; closes #2805 2018-10-11 08:54:36 +02:00
Ad Schellevis
7b1e838109 Merge branch 'pie' of https://github.com/mimugmail/core into mimugmail-pie 2018-10-11 08:36:39 +02:00
Ad Schellevis
239e89fd5f missed a spot in https://github.com/opnsense/core/issues/2670 leading to basemodel to being able to find iterateItems(), previous functionality used a specialized property which was passed using __get() 2018-10-11 08:28:53 +02:00
Michael
d1bbe29c6a
fix contraint msg and indents 2018-10-11 08:19:32 +02:00
opnsenseuser
b27a62b7f5 ui: sidebar shadow fix; closes #2801
shadow fix for div.collapse.in > div.collapse.in
2018-10-10 22:24:58 +02:00
Ad Schellevis
06ad789c29 OpenVPN client export, add list accounts (certificates) and associated users endpoint for https://github.com/opnsense/core/issues/2787
The legacy code populated a list of users and certificates, where the user only seems to be used to prefix some content and filter on server type, it seems more obvious to just export related certs for the requested server and show which users it connects to.
2018-10-10 18:43:13 +02:00
Ad Schellevis
3a5874309e Firewall, live log. Don't cleanup visible records when limit isn't reached. Without this fix it's difficult to keep track on logs which change often. 2018-10-10 11:53:03 +02:00
Ad Schellevis
e539530014 firewall/live log, add direction icon in grid and show icons in detail view (since we don't have a legend on screen), for https://github.com/opnsense/core/issues/2804 2018-10-10 11:06:08 +02:00
Franco Fichtner
bb15cdb0f4 firmware: remove training wheels 2018-10-10 09:44:21 +02:00
Ad Schellevis
ae10e588b4 OpenVPN export, list providers api call, for https://github.com/opnsense/core/issues/2787 2018-10-09 17:53:48 +02:00
opnsenseuser
c4a2520915 a few entries that are no longer needed
@fichtner opnsense-theme
2018-10-08 21:30:13 +02:00
Franco Fichtner
b9ba4f60ea system: fix ACL for previous 2018-10-07 16:19:57 +02:00
Franco Fichtner
913d80037d system: "firmware" log idea inspired by HardenedBSD 2018-10-07 16:13:29 +02:00
Franco Fichtner
777ff4acfd src: style sweep 2018-10-07 14:04:07 +02:00
Franco Fichtner
5828ad5f3d src: whitespace sweep 2018-10-07 14:02:49 +02:00
Michael
927b68b232
Update ipfw.conf 2018-10-06 14:17:38 +02:00
Ad Schellevis
8d08b67d28 Firewall/alias, keep previous content for url alias type on fetch error. closes https://github.com/opnsense/core/issues/2793 2018-10-05 22:59:33 +02:00
Michael
81e5aaae78
Update TrafficShaper.xml 2018-10-05 19:03:41 +02:00
Michael
869941a5cb
Update TrafficShaper.xml 2018-10-05 18:53:15 +02:00
Ad Schellevis
a00e646ca2 IDS, replace tls.fingerprint with tls_fingerprint for better performance in custom rules 2018-10-05 16:16:00 +02:00
opnsenseuser
81c2ec9721 opnsense theme chrome browser outline fix
opnsense theme chrome browser outline fix
@fichtner
2018-10-05 15:56:56 +02:00
marjohn56
cceb1bcd8c Add FTI/ to password - tidy end of useridhex 2018-10-05 09:49:31 +02:00
Ad Schellevis
89802d77b6 MVC, add SingleSelectConstraint type and fixup unittest, closes https://github.com/opnsense/core/issues/2757 2018-10-04 14:03:44 +02:00
marjohn56
bb5144ed88 Correct missing '"'' at the end of the userclass field 2018-10-04 09:44:17 +02:00
Ad Schellevis
fa461dd77c dhcp/language, align messages (same message used in 3 places) 2018-10-04 08:15:05 +02:00
Ad Schellevis
4709d7b59e OpenVPN/client export, work in progress https://github.com/opnsense/core/issues/2787
Add an empty boilerplate for our new client export module
2018-10-03 18:04:38 +02:00
Ad Schellevis
943ca1f6b2 config/legacy, speedup parsing very large config files.
When using toArray() on a config, it would try to detect sequential items by reading all keys using isArraySequential(), this may cost a lot of time (seconds) if the config
contains a lot of items. Found when testing Sensei.

This change doesn't impact mvc style components.
2018-10-03 16:34:25 +02:00
marjohn56
472f5d8967 interfaces: Add RFC 3118 Option; closes #2781
This allows us to call a funcion which will generate the correct
credentials where they need to be hashed or not. In the function
in this PR, the function returns all of the request and send
options required for Orange France and fills in the client fields
automatically.

Also in the case of Orange France an extra entry box appears to
allow the entry of the LiveBox_ID.

The PR is a work in progress, but all that is needed to make it
work for Orange France is the hash routine.

It's also possible to use the functions create the hex strings
needed for other ISPs and auto fill the options as needed.
2018-10-03 16:02:22 +02:00
Ad Schellevis
e8908f4a32 Firewall/alias, extend /api/firewall/alias_util/ alias to support instant address additions and deletions, saved to config when applicable.
-- /api/firewall/alias_util/add/[alias]
-- /api/firewall/alias_util/delete/[alias]

both accepting address as parameter, sample usage added to the pfTables diagnostic page
2018-10-02 21:46:16 +02:00
opnsenseuser
651bccc47f ui: sticky sub-submenu; closes #2782
sticky sub-submenu on mouseout when next item does not have a sub-submenu
-> https://github.com/opnsense/core/issues/2554
2018-10-02 20:56:23 +02:00
Ad Schellevis
8b79dd1672 Firewall/alias, regression in toggle, closes https://github.com/opnsense/core/issues/2759 2018-10-02 20:28:24 +02:00
Ad Schellevis
ce98b297fa MVC, integrate menu endpoint better, remove auth hooks, align with logout page. for https://github.com/opnsense/core/issues/2778 2018-10-02 17:31:37 +02:00