12281 Commits

Author SHA1 Message Date
Franco Fichtner
683f452295 firmware: add fingerprint for 21.1 2021-01-04 14:49:16 +01:00
Franco Fichtner
7216e3a241 system: allow self-signed renew for web GUI; closes #4567
The command to issue a reset is:

  # configctl webgui restart renew
2021-01-04 11:28:30 +01:00
Franco Fichtner
e609494b59 system: adjust lifetime to new recommendation 2021-01-04 11:03:33 +01:00
Franco Fichtner
f187c63502 openvpn: adjust lifetime to new recommendation 2021-01-04 11:03:09 +01:00
Franco Fichtner
c008e97375 github: adjust templates used 2021-01-04 10:19:23 +01:00
Franco Fichtner
4e0fdb516a firewall: add type 128 to outgoing IPv6 essentials #4565 2021-01-03 21:39:52 +01:00
Franco Fichtner
7fda1670ce interfaces: l2tp/pptp cleanup; closes #2707
The interfaces are created by mpd5 daemon during configuration.
We do not seem to have more than one issue here: IPv6 disable
is too soon but that is easily fixed.  Device creation moves
on ok and there is no apparent error in functionality with or
without it.

While here fix the link when a $pppid is set and properly protect
the redirect url.  Previously empty() was too strict and it ignored
$pppid of zero.

Also remove spurious "IP Address" help text from PPP device
configuration.
2021-01-03 20:45:58 +01:00
Franco Fichtner
6b407b51dd openvpn: fix typo in wizard redirect 2021-01-03 20:42:35 +01:00
Ad Schellevis
f3e6a227e5 filter: refactor filter_rules_legacy while fixing antispoof issues on bridge interfaces. closes https://github.com/opnsense/core/issues/4564 2021-01-03 14:18:13 +01:00
Lorenzo Milesi
074ccb9a15
Nextcloud backup: allow subdir (#4077) 2021-01-02 10:53:03 +01:00
Franco Fichtner
a69351722c firmware: proper path to pkg-static 2021-01-01 20:04:25 +01:00
Ad Schellevis
06b1804a3d firewall rules, type in for for https://github.com/opnsense/core/issues/4493 closes https://github.com/opnsense/core/issues/4562 2020-12-31 17:31:16 +01:00
Franco Fichtner
921b7c69f0 firmware: emulate -s for core package 2021-01-01 10:15:27 +01:00
Franco Fichtner
9ceeafc370 pkg: happy new year! 2021-01-01 09:57:29 +01:00
Ad Schellevis
7331b2717b Firewall / live log - add manual refresh button. closes https://github.com/opnsense/core/issues/4550 2020-12-26 16:03:58 +01:00
Ad Schellevis
aa8a6ea717 Reporting / traffic: bugfixes and improvements to "top talkers" tab. while here add cumulative numbers, although the numbers will never be very accurate, it's not worse than it was when using rate in the previous version. 2020-12-26 13:21:33 +01:00
Ad Schellevis
4186f2bbe5 Reporting / traffic: add "top talkers" tab which shows the current (and max) bandwith usage per ip address sorted by total (in+out).
some people seem to miss the numbers, since the top host graph uses the same information over time, it wouldn't hurt to add a tab containting the raw numbers for the selected interfaces.
The current version doesn't limit the number of results, we might need to add a limit at some point in time, depending on how many results iftop samples.

general remarks:

o total amount of traffic is not being displayed, although we could count the "cumulative" from iftop, the numbers would always be flawed (since sampled with an interval)
o no reverse lookups, maybe for a future version, let's first see if this helps.
o hosts not seen for 120 seconds will automatically be removed from the list (fixed ttl)
2020-12-25 15:14:13 +01:00
kulikov-a
b4104cf0a3
QueryFilter.php: allow underscore in filter string (#4548) 2020-12-24 16:06:02 +01:00
Ad Schellevis
6c1b8a993e DHCPDv4: hostname validation should include domain, missed interface domain. ref https://github.com/opnsense/core/issues/4544 2020-12-23 15:00:56 +01:00
Ad Schellevis
51c04e7abf DHCPDv4: hostname validation should include domain. closes https://github.com/opnsense/core/issues/4544 2020-12-23 14:33:24 +01:00
Ad Schellevis
e686331888 Firewall:aliases - incorrect validation message for network type, addresses and hostnames are not allowed, only networks. 2020-12-22 09:44:38 +01:00
Franco Fichtner
2053a24600 src: more EOD/EOF usage with missing newline
Not fatal but better to fix style now.
2020-12-21 21:20:33 +01:00
Ad Schellevis
28fef1f4e9 xmlrpc: when debug output is enabled, show number of bytes received. 2020-12-21 19:37:10 +01:00
Ad Schellevis
1adefd7440 DNSmasq: use domain override for static hosts, closes https://github.com/opnsense/core/pull/4539 2020-12-21 11:21:55 +01:00
Ad Schellevis
8644af058c HAsync(xmlrpc) : cleanup rc.filter_synchronize and expose "debug" parameter to output exchanged data.
/usr/local/etc/rc.filter_synchronize debug

ref https://github.com/opnsense/core/issues/4533
2020-12-21 11:06:24 +01:00
Ad Schellevis
24b0d9122a Reporting/Traffic: safeguard localstorage for https://github.com/opnsense/core/issues/4512 2020-12-21 09:22:47 +01:00
Franco Fichtner
31dee2dfcc xmlrpc: err, what, send EOL for #4533 2020-12-20 21:14:59 +01:00
Ad Schellevis
43d4a64350 Reporting/Traffic: persist interface selection using localStorage. closes https://github.com/opnsense/core/issues/4512 2020-12-20 19:35:28 +01:00
Franco Fichtner
93f5a9622b system: lighttpd mod_compress -> mod_deflate migration 2020-12-20 10:55:14 +01:00
Franco Fichtner
adcade2fed system: tell lighttpd >= 1.4.56 to disable TLS on HTTP 2020-12-18 10:57:30 +01:00
Ad Schellevis
03f71e97e9 MVC:Config make sure isArraySequential() is only true on array input (move previous check). closes https://github.com/opnsense/core/issues/4530 2020-12-17 18:04:43 +01:00
Franco Fichtner
d6f32818b9 firmware: add version output to audit logs; closes #4375 2020-12-17 10:57:35 +01:00
Franco Fichtner
98f586f73c Revert "pkg: inject markupsafe dependency, hopefully pkg isn't stupid"
This reverts commit a124fd0e57004e114b54a480b9ced2760ff8c60a.
pkg is still bugging out on this.
2020-12-16 14:57:21 +01:00
Franco Fichtner
a124fd0e57 pkg: inject markupsafe dependency, hopefully pkg isn't stupid 2020-12-16 13:55:08 +01:00
Ad Schellevis
8d8bcb7e94 gateways: dpinger. ignore disabled gateways in monitor services. 2020-12-16 12:17:42 +01:00
garlic17
496c2ef24f
Display remote host in IPsec Status Overview (#4234)
Add a new 'Remote Host' column to the IPsec status overview page.
2020-12-16 12:04:28 +01:00
Ad Schellevis
5509fabfa3 gateways: dpinger. choose a better bind candidate for IPv4.
when an interface offers multiple addresses, we should at least try to bind to the address which can access the gateway, for example an interface with the following addresses configured:

10.0.1.1/24
10.0.2.1/24
10.0.3.1/24

and a gateway configured on 10.0.2.100 should try to bind on 10.0.2.1. when we can't find a candidate, fall back to the first. closes https://github.com/opnsense/core/pull/4221
2020-12-16 11:56:46 +01:00
Ad Schellevis
2ee04640a7 interfaces: non functional (minor) style fix 2020-12-16 11:23:19 +01:00
Ad Schellevis
dda072edda Merge branch 'marjohn56-Add-port-to-filter-log-widget' 2020-12-16 11:04:13 +01:00
Ad Schellevis
dfa4f6d4b1 widgets: spacing for https://github.com/opnsense/core/pull/4108 2020-12-16 11:03:43 +01:00
Ad Schellevis
0a8806f59b Merge branch 'Add-port-to-filter-log-widget' of https://github.com/marjohn56/core into marjohn56-Add-port-to-filter-log-widget 2020-12-16 10:58:39 +01:00
Franco Fichtner
b515105e12 firmware: -d will for install, but we just want to check 2020-12-16 10:20:21 +01:00
Ad Schellevis
18862d4409 ACL: minor fix for performance improvement in https://github.com/opnsense/core/issues/4508, when groups contain non existing users we should discard the uid found, 2020-12-14 21:25:42 +01:00
Gabriel Mazzocato
80dc51e541
Fix DUID - LL description in Settings | Interfaces (#4521) 2020-12-14 10:57:07 +01:00
Franco Fichtner
b206ad8443 firmware: fix some issues with missing repository on server 2020-12-13 11:40:13 +01:00
Ad Schellevis
9cab5ee982 ACL: performance improvement loading user and group rights.
o cache user id's so we don't have to traverse the config again
o limit the number of (string) type casts, since on larger quantities they really do cost time...

closes https://github.com/opnsense/core/issues/4508
2020-12-11 22:08:02 +01:00
Ad Schellevis
8487b23a22 Proxy: lock download to prevent duplicate execution. closes https://github.com/opnsense/plugins/issues/2142 2020-12-11 19:56:44 +01:00
Ad Schellevis
3facaaa470 Unbound: dnsbl not reloading after update. for https://github.com/opnsense/core/issues/4518 2020-12-11 19:34:26 +01:00
vnxme
f8b7f92baf
DHCPv6: Fix sorting of IPv6 static mappings (#4513)
* DHCPv6: Fix sorting of IPv6 static mappings

The ipcmp() function doesn't seem to return a correct result for IPv6 addresses. That's why the DHCPv6 static mappings are shown in the order they were added. This commit introduces ip6cmp() function and fixes sorting of IPv6 static mappings.

* DHCPv6: Fix sorting of IPv6 static mappings

Move ip6cmp() approach to ipcmp(), use single function for both IPv4 and IPv6.

* DHCPv6: Fix sorting of IPv6 static mappings

Oops, fixed a typo in ipcmp()
2020-12-10 13:09:24 +01:00
Ad Schellevis
854942b4e0 widgets: traffic graph, link issue. closes https://github.com/opnsense/core/issues/4511 2020-12-09 19:23:38 +01:00