Ad Schellevis
73e31caf87
ditch use of xml2array, related to https://github.com/opnsense/plugins/issues/269
2017-09-16 17:45:20 +02:00
Franco Fichtner
c94509587d
dns: small cleanups related to #1806
2017-09-16 12:13:39 +02:00
Franco Fichtner
b5b92c1aad
interfaces: configure radvd correctly so that only dns *or* global dns is used #1806
2017-09-16 12:11:58 +02:00
Franco Fichtner
fd77e8be72
firewall: 18.1 will have shared forwarding for IPv6
2017-09-14 23:29:36 +02:00
Franco Fichtner
105fb5bb57
intrusion detection: fix for #1825
2017-09-14 14:22:52 +02:00
Franco Fichtner
22e7b5e26e
ipsec: fix typo
...
PR: https://forum.opnsense.org/index.php?topic=5966.0
2017-09-14 13:21:33 +02:00
Fabian Franz
0e581c8c78
Proxy: adjust default URLs for the c-icap plugin
2017-09-13 22:55:47 +02:00
Ad Schellevis
6902408634
filter, move filter_generate_ipsec_rules() to plugins
2017-09-13 19:16:04 +02:00
Ad Schellevis
44aa1d3604
filter/rule, better to use isset() when checking for reply-to, otherwise it might get the default when provided empty.
2017-09-13 08:16:02 +02:00
Ad Schellevis
ba1c0029ac
filter, gateway, parseRoute with an empty value returns the first gateway in the list....
2017-09-12 21:49:33 +02:00
Ad Schellevis
5c5077098a
typo in previous
2017-09-12 21:44:02 +02:00
Ad Schellevis
316ed91c9f
filter/model, add missing reply-to specific gateway
2017-09-12 21:05:51 +02:00
Ad Schellevis
9b112011d2
filter, cleanup, move update_alias_names_upon_change() to firewall_aliases_edit.php now it's only used there.
2017-09-12 13:11:26 +02:00
Ad Schellevis
6f15e5999f
cleanup, with the legacy upgrades removed there's no real use in keeping this either.
2017-09-12 12:47:03 +02:00
Ad Schellevis
65a55bb1aa
add firewall advanced setting pf_disable_force_gw, closes https://github.com/opnsense/core/issues/1801
2017-09-12 12:30:17 +02:00
Ad Schellevis
b782a5a04b
system.inc, cleanups system_default_route()
2017-09-11 20:17:49 +02:00
Franco Fichtner
35ae83bed9
filter: support anchor quick keyword; closes #1740
2017-09-11 16:39:54 +02:00
Ad Schellevis
49bf501062
proxy, Squid: log name now starts with a module name, closes https://github.com/opnsense/core/issues/1815
2017-09-10 19:18:02 +02:00
Ad Schellevis
30fde1ef05
IDS, missing gzip decode on download.
2017-09-10 13:30:22 +02:00
Franco Fichtner
20117edc41
firewall: naturally order settings menu
2017-09-09 08:28:12 +02:00
Franco Fichtner
283fd7ac2a
firewall: wrong double-encode, closes #1813
2017-09-09 08:26:04 +02:00
Franco Fichtner
1d3b6e610d
ipsec: better safe than sorry
2017-09-06 18:21:27 +02:00
Franco Fichtner
e2c7dc562b
traffic graph: lower default to 10
2017-09-06 17:40:56 +02:00
Franco Fichtner
660c582c91
traffic graphs: fix alignment in code indent
2017-09-06 17:34:39 +02:00
Franco Fichtner
a743954bb2
interfaces: let rtsold run to pick up routers if it can
2017-09-06 15:30:38 +02:00
Franco Fichtner
b7ebcf2267
xmlrpc: hardcode old config version for interoperability
...
We've always just given '11.2' here, instead of removing it keep
this so that boxes are ok between lower than <=> higher than 17.7.2.
2017-09-04 09:32:24 +02:00
Franco Fichtner
47ad0f7f9c
rc: clear /var/run on bootup; closes #1799
2017-09-04 09:18:34 +02:00
Franco Fichtner
bc1ff72e01
firmware: fix upgrade when major upgrades are allowed but not available; closes #1804
...
We abort on error, the error is that the file is not there. Mea culpa.
2017-09-04 08:31:43 +02:00
Franco Fichtner
b805277a00
pkg: add new trusted fingerprint for upcoming rotation
2017-09-02 08:49:03 +02:00
Franco Fichtner
dbd0a66b86
firewall: clean up after #1800
2017-09-01 22:41:06 +02:00
Ad Schellevis
8be01ff9fa
remove filter reload, closes https://github.com/opnsense/core/issues/1800
2017-09-01 19:43:43 +02:00
Ad Schellevis
6ce13946ea
stored xss in diag_pf_info.php, closes https://github.com/opnsense/core/issues/1796
2017-08-31 10:18:29 +02:00
Franco Fichtner
f6804ba093
rc: ensure the directory exists
2017-08-31 08:20:03 +02:00
Ad Schellevis
c4bbef0953
IDS, selectable home nets as advanced option, for https://github.com/opnsense/core/issues/1793
2017-08-29 21:10:35 +02:00
Ad Schellevis
5d457fed10
model, extend NetworkField so multiple items can be returned as a list (like other options), for https://github.com/opnsense/core/issues/1793
2017-08-29 21:08:12 +02:00
Franco Fichtner
4757892b39
webgui: another small tweak
2017-08-29 10:45:04 +02:00
Franco Fichtner
bc261c67b8
webgui: add and use backend call
...
PR: https://github.com/opnsense/plugins/issues/236
2017-08-29 10:37:46 +02:00
Franco Fichtner
11f359c94a
www: add $logsplit to log view templates
...
PR: https://github.com/opnsense/plugins/issues/69
2017-08-28 17:54:50 +02:00
Franco Fichtner
a91c23d78c
www: zap unused variable
2017-08-28 11:42:06 +02:00
Fabian Franz
1a9fe4d6c4
patch translations into bootgrid at runtime, based on the work of kekek2; closes #1633
2017-08-27 21:57:33 +02:00
Ad Schellevis
328bfe7d29
firewall / nat, align target port to dst port when creating a new entry, for https://github.com/opnsense/core/issues/1787
2017-08-27 11:41:27 +02:00
Ad Schellevis
b69bedea98
firewall / nat 1-1, source aliases are only allowed for nat type rules, closes https://github.com/opnsense/core/issues/1789
2017-08-27 11:01:22 +02:00
Franco Fichtner
d7a2cbafae
unbound: disband unbound_execute()
2017-08-26 17:56:57 +02:00
Franco Fichtner
2c3aac8ea6
unbound: restart on new wan IP if explicit interface matches
2017-08-26 17:56:07 +02:00
Ad Schellevis
8ae34afbba
virtual_ip, add optional vhid to support alias ip's on carp. for https://github.com/opnsense/core/issues/1779
2017-08-24 22:49:04 +02:00
Franco Fichtner
733118ae91
reporting: scrap transform that doesn't do anything
2017-08-21 20:02:35 +02:00
Franco Fichtner
b70bd2f303
traffic graph: firefox complains abou missing "px", better padding
2017-08-21 11:52:46 +02:00
Franco Fichtner
a169aeb580
system: cron.d directories starting with FreeBSD 11.1
...
It might be a good idea to move cron to the MVC system completely,
apart from the auto-write logic we could make this a priv-sep job
very easily now.
2017-08-21 11:35:37 +02:00
Franco Fichtner
72d5e865cb
configd: make note when we are not running
...
Even if we are supposed to return well-formed output it's better
to show a hard error here so we can trace the problem to this message.
It's somewhat aligned with rc's restart message but not with a
question mark at the end so that it's clear...
2017-08-21 10:49:57 +02:00
Franco Fichtner
87e982043d
configd: don't dispatch in build environments
...
The check is a bit lax here, assume that the pid file isn't there.
It's better than invoking the rc system on every run.
2017-08-21 10:31:17 +02:00
