Franco Fichtner
683f452295
firmware: add fingerprint for 21.1
2021-01-04 14:49:16 +01:00
Franco Fichtner
7216e3a241
system: allow self-signed renew for web GUI; closes #4567
...
The command to issue a reset is:
# configctl webgui restart renew
2021-01-04 11:28:30 +01:00
Franco Fichtner
e609494b59
system: adjust lifetime to new recommendation
2021-01-04 11:03:33 +01:00
Franco Fichtner
f187c63502
openvpn: adjust lifetime to new recommendation
2021-01-04 11:03:09 +01:00
Franco Fichtner
c008e97375
github: adjust templates used
2021-01-04 10:19:23 +01:00
Franco Fichtner
4e0fdb516a
firewall: add type 128 to outgoing IPv6 essentials #4565
2021-01-03 21:39:52 +01:00
Franco Fichtner
7fda1670ce
interfaces: l2tp/pptp cleanup; closes #2707
...
The interfaces are created by mpd5 daemon during configuration.
We do not seem to have more than one issue here: IPv6 disable
is too soon but that is easily fixed. Device creation moves
on ok and there is no apparent error in functionality with or
without it.
While here fix the link when a $pppid is set and properly protect
the redirect url. Previously empty() was too strict and it ignored
$pppid of zero.
Also remove spurious "IP Address" help text from PPP device
configuration.
2021-01-03 20:45:58 +01:00
Franco Fichtner
6b407b51dd
openvpn: fix typo in wizard redirect
2021-01-03 20:42:35 +01:00
Ad Schellevis
f3e6a227e5
filter: refactor filter_rules_legacy while fixing antispoof issues on bridge interfaces. closes https://github.com/opnsense/core/issues/4564
2021-01-03 14:18:13 +01:00
Lorenzo Milesi
074ccb9a15
Nextcloud backup: allow subdir ( #4077 )
2021-01-02 10:53:03 +01:00
Franco Fichtner
a69351722c
firmware: proper path to pkg-static
2021-01-01 20:04:25 +01:00
Ad Schellevis
06b1804a3d
firewall rules, type in for for https://github.com/opnsense/core/issues/4493 closes https://github.com/opnsense/core/issues/4562
2020-12-31 17:31:16 +01:00
Franco Fichtner
921b7c69f0
firmware: emulate -s for core package
2021-01-01 10:15:27 +01:00
Franco Fichtner
9ceeafc370
pkg: happy new year!
2021-01-01 09:57:29 +01:00
Ad Schellevis
7331b2717b
Firewall / live log - add manual refresh button. closes https://github.com/opnsense/core/issues/4550
2020-12-26 16:03:58 +01:00
Ad Schellevis
aa8a6ea717
Reporting / traffic: bugfixes and improvements to "top talkers" tab. while here add cumulative numbers, although the numbers will never be very accurate, it's not worse than it was when using rate in the previous version.
2020-12-26 13:21:33 +01:00
Ad Schellevis
4186f2bbe5
Reporting / traffic: add "top talkers" tab which shows the current (and max) bandwith usage per ip address sorted by total (in+out).
...
some people seem to miss the numbers, since the top host graph uses the same information over time, it wouldn't hurt to add a tab containting the raw numbers for the selected interfaces.
The current version doesn't limit the number of results, we might need to add a limit at some point in time, depending on how many results iftop samples.
general remarks:
o total amount of traffic is not being displayed, although we could count the "cumulative" from iftop, the numbers would always be flawed (since sampled with an interval)
o no reverse lookups, maybe for a future version, let's first see if this helps.
o hosts not seen for 120 seconds will automatically be removed from the list (fixed ttl)
2020-12-25 15:14:13 +01:00
kulikov-a
b4104cf0a3
QueryFilter.php: allow underscore in filter string ( #4548 )
2020-12-24 16:06:02 +01:00
Ad Schellevis
6c1b8a993e
DHCPDv4: hostname validation should include domain, missed interface domain. ref https://github.com/opnsense/core/issues/4544
2020-12-23 15:00:56 +01:00
Ad Schellevis
51c04e7abf
DHCPDv4: hostname validation should include domain. closes https://github.com/opnsense/core/issues/4544
2020-12-23 14:33:24 +01:00
Ad Schellevis
e686331888
Firewall:aliases - incorrect validation message for network type, addresses and hostnames are not allowed, only networks.
2020-12-22 09:44:38 +01:00
Franco Fichtner
2053a24600
src: more EOD/EOF usage with missing newline
...
Not fatal but better to fix style now.
2020-12-21 21:20:33 +01:00
Ad Schellevis
28fef1f4e9
xmlrpc: when debug output is enabled, show number of bytes received.
2020-12-21 19:37:10 +01:00
Ad Schellevis
1adefd7440
DNSmasq: use domain override for static hosts, closes https://github.com/opnsense/core/pull/4539
2020-12-21 11:21:55 +01:00
Ad Schellevis
8644af058c
HAsync(xmlrpc) : cleanup rc.filter_synchronize and expose "debug" parameter to output exchanged data.
...
/usr/local/etc/rc.filter_synchronize debug
ref https://github.com/opnsense/core/issues/4533
2020-12-21 11:06:24 +01:00
Ad Schellevis
24b0d9122a
Reporting/Traffic: safeguard localstorage for https://github.com/opnsense/core/issues/4512
2020-12-21 09:22:47 +01:00
Franco Fichtner
31dee2dfcc
xmlrpc: err, what, send EOL for #4533
2020-12-20 21:14:59 +01:00
Ad Schellevis
43d4a64350
Reporting/Traffic: persist interface selection using localStorage. closes https://github.com/opnsense/core/issues/4512
2020-12-20 19:35:28 +01:00
Franco Fichtner
93f5a9622b
system: lighttpd mod_compress -> mod_deflate migration
2020-12-20 10:55:14 +01:00
Franco Fichtner
adcade2fed
system: tell lighttpd >= 1.4.56 to disable TLS on HTTP
2020-12-18 10:57:30 +01:00
Ad Schellevis
03f71e97e9
MVC:Config make sure isArraySequential() is only true on array input (move previous check). closes https://github.com/opnsense/core/issues/4530
2020-12-17 18:04:43 +01:00
Franco Fichtner
d6f32818b9
firmware: add version output to audit logs; closes #4375
2020-12-17 10:57:35 +01:00
Franco Fichtner
98f586f73c
Revert "pkg: inject markupsafe dependency, hopefully pkg isn't stupid"
...
This reverts commit a124fd0e57004e114b54a480b9ced2760ff8c60a.
pkg is still bugging out on this.
2020-12-16 14:57:21 +01:00
Franco Fichtner
a124fd0e57
pkg: inject markupsafe dependency, hopefully pkg isn't stupid
2020-12-16 13:55:08 +01:00
Ad Schellevis
8d8bcb7e94
gateways: dpinger. ignore disabled gateways in monitor services.
2020-12-16 12:17:42 +01:00
garlic17
496c2ef24f
Display remote host in IPsec Status Overview ( #4234 )
...
Add a new 'Remote Host' column to the IPsec status overview page.
2020-12-16 12:04:28 +01:00
Ad Schellevis
5509fabfa3
gateways: dpinger. choose a better bind candidate for IPv4.
...
when an interface offers multiple addresses, we should at least try to bind to the address which can access the gateway, for example an interface with the following addresses configured:
10.0.1.1/24
10.0.2.1/24
10.0.3.1/24
and a gateway configured on 10.0.2.100 should try to bind on 10.0.2.1. when we can't find a candidate, fall back to the first. closes https://github.com/opnsense/core/pull/4221
2020-12-16 11:56:46 +01:00
Ad Schellevis
2ee04640a7
interfaces: non functional (minor) style fix
2020-12-16 11:23:19 +01:00
Ad Schellevis
dda072edda
Merge branch 'marjohn56-Add-port-to-filter-log-widget'
2020-12-16 11:04:13 +01:00
Ad Schellevis
dfa4f6d4b1
widgets: spacing for https://github.com/opnsense/core/pull/4108
2020-12-16 11:03:43 +01:00
Ad Schellevis
0a8806f59b
Merge branch 'Add-port-to-filter-log-widget' of https://github.com/marjohn56/core into marjohn56-Add-port-to-filter-log-widget
2020-12-16 10:58:39 +01:00
Franco Fichtner
b515105e12
firmware: -d will for install, but we just want to check
2020-12-16 10:20:21 +01:00
Ad Schellevis
18862d4409
ACL: minor fix for performance improvement in https://github.com/opnsense/core/issues/4508 , when groups contain non existing users we should discard the uid found,
2020-12-14 21:25:42 +01:00
Gabriel Mazzocato
80dc51e541
Fix DUID - LL description in Settings | Interfaces ( #4521 )
2020-12-14 10:57:07 +01:00
Franco Fichtner
b206ad8443
firmware: fix some issues with missing repository on server
2020-12-13 11:40:13 +01:00
Ad Schellevis
9cab5ee982
ACL: performance improvement loading user and group rights.
...
o cache user id's so we don't have to traverse the config again
o limit the number of (string) type casts, since on larger quantities they really do cost time...
closes https://github.com/opnsense/core/issues/4508
2020-12-11 22:08:02 +01:00
Ad Schellevis
8487b23a22
Proxy: lock download to prevent duplicate execution. closes https://github.com/opnsense/plugins/issues/2142
2020-12-11 19:56:44 +01:00
Ad Schellevis
3facaaa470
Unbound: dnsbl not reloading after update. for https://github.com/opnsense/core/issues/4518
2020-12-11 19:34:26 +01:00
vnxme
f8b7f92baf
DHCPv6: Fix sorting of IPv6 static mappings ( #4513 )
...
* DHCPv6: Fix sorting of IPv6 static mappings
The ipcmp() function doesn't seem to return a correct result for IPv6 addresses. That's why the DHCPv6 static mappings are shown in the order they were added. This commit introduces ip6cmp() function and fixes sorting of IPv6 static mappings.
* DHCPv6: Fix sorting of IPv6 static mappings
Move ip6cmp() approach to ipcmp(), use single function for both IPv4 and IPv6.
* DHCPv6: Fix sorting of IPv6 static mappings
Oops, fixed a typo in ipcmp()
2020-12-10 13:09:24 +01:00
Ad Schellevis
854942b4e0
widgets: traffic graph, link issue. closes https://github.com/opnsense/core/issues/4511
2020-12-09 19:23:38 +01:00