10280 Commits

Author SHA1 Message Date
Ad Schellevis
707f52dc31 firmware, minor style issue. packages table has 6 columns 2019-07-02 13:44:22 +02:00
Ad Schellevis
930bb1002c Firmware, add repository and origin to local pkg query as well and use this one if installed. 2019-07-02 13:20:54 +02:00
Ad Schellevis
cdec5df11b Firmware, signal the user when installing a package from an external source.
* Adds repository, origin and path attributes to the api endpoint (for future use)
* When the software is not provided by OPNsense, popup a dialog informing the user.

We should probably refactor a bit more here, and make a clearer distinction between repositories in the frontend, this will have to wait until 19.7 is out.

as discussed with @fichtner
2019-07-02 12:01:11 +02:00
Franco Fichtner
091c0f5623 firmware: add 19.7 fingerprint 2019-07-02 08:30:14 +02:00
Franco Fichtner
a8c82ea748 firmware: requirements grew unfortunately 2019-07-02 10:09:38 +02:00
Franco Fichtner
5ef6d96dea firmware: add upgrade bits for 19.7.r1 2019-07-02 10:05:15 +02:00
Ad Schellevis
fc296c3ac4 Firewall/aliases. change default sorting from description to name, closes https://github.com/opnsense/core/issues/3550 2019-06-30 14:20:17 +02:00
Ad Schellevis
1d1ce841ff firewall/live-log, when changing the optimisation mode the line numbers don't seem to add up any more. Previously we used to parse the pf config to show our rules, it looks safer to use the actual running config using -vvPsr
ref https://forum.opnsense.org/index.php?topic=13308.0
2019-06-29 15:29:04 +02:00
Franco Fichtner
6b6e3ed32d firewall: give "none" values a valid translation; closes #3552 2019-06-25 17:12:38 +02:00
Franco Fichtner
5dc345bd4a src: style and whitespace sweep 2019-06-25 08:56:54 +02:00
Franco Fichtner
d7f509798f reporting: improve NetFlow validation and form behaviour #3547 2019-06-25 08:52:57 +02:00
Franco Fichtner
dea7824e0c ui: add a fail callback to e.g. disable progress spinners 2019-06-25 08:52:05 +02:00
Franco Fichtner
139f529942 system: syslog is syslogd really 2019-06-24 08:22:25 +02:00
Franco Fichtner
67b404f552 intrusion detection: try to fix $data['row'] handling #3474
Is this a browser-specific bug?
2019-06-23 20:49:07 +02:00
Ad Schellevis
c0fe5ceff4 IPv6 Router Advertisements, add advanced options, closes https://github.com/opnsense/core/issues/3366 2019-06-21 12:13:17 +02:00
Ad Schellevis
658e3d0092 Netflow, WAN|Egress interfaces should be in All / Listening interfaces list. for https://github.com/opnsense/core/issues/3547 2019-06-21 10:56:30 +02:00
Franco Fichtner
bc34ae18af reporting: small tweak on help label 2019-06-21 10:13:21 +02:00
Ad Schellevis
95e70f37e9 Netflow, minor addendum https://github.com/opnsense/core/issues/2197, in order for netflow to listen, all interfaces should be accounted for. 2019-06-21 09:41:42 +02:00
Ad Schellevis
58c3e6ccd9 Auth/ldap, use authentication factory for user import, might fix https://github.com/opnsense/core/issues/3445 2019-06-20 18:33:38 +02:00
Ad Schellevis
5ff6dd228c style fix, missing brackets 2019-06-20 18:18:01 +02:00
Ad Schellevis
b877610296 HASync- add dashboard widgets, closes https://github.com/opnsense/core/issues/3482 2019-06-20 17:39:32 +02:00
Ad Schellevis
9dcacab209 services_dhcp.php, ddnsdomainprimary validation (looks like a typo) 2019-06-20 17:22:37 +02:00
Ad Schellevis
9bf07564b7 services_dhcpv6.php, validation issue in ddnsdomainprimary https://github.com/opnsense/core/issues/3546 2019-06-20 17:17:07 +02:00
Ad Schellevis
c5c6bb1601 services_dhcpv6.php, fix typo in validation message , ref https://github.com/opnsense/core/issues/3546 2019-06-20 17:14:24 +02:00
Ad Schellevis
ebcd30c971 auth.inc local_sync_accounts(), missing -g in groupdel. for https://github.com/opnsense/core/issues/3519 2019-06-20 16:35:30 +02:00
Ad Schellevis
cdaa275fff Proxy, add support tab with reset button, which clears all stored cache data and restarts squid. Since a squid stop can take long and consistency isn't very important on files bound to be deleted, its faster to killall -9. closes https://github.com/opnsense/core/issues/3545 2019-06-20 13:03:48 +02:00
Franco Fichtner
b62b34fe64 interfaces: fix "OR hostname" validation message after latest change
Some style updates while here.
2019-06-19 08:08:28 +02:00
Alexander Shursha
d4cf429ba6 Only IP-address allowed in PPTP gateway. (#3499) 2019-06-18 19:07:20 +01:00
Robin Schneider
f2769fe099 Sort interface groups in GUI to match firewall rule order (#3537)
This now makes it easy and predictable to add interfaces to multiple
groups.

Before this change, the interfaces_groups GUI was sorted by the
order that interface groups were added. However, this was not the order
that the actual pf rules would then be generated making it unpredictable
when adding interfaces to multiple groups.

The filter_rules_sort function already took care of the actual pf rule
order.

I also took care of only marking the filter subsystem dirty when needed.
I tested this patch quite a bit on 19.1.8. When updating, users only
need to make one change to the interface groups to have them sorted in
the GUI.

I hope I did not miss anything because this patch is against master. In
it’s current state, the patch can be directly applied to 19.1.x or
master.
2019-06-18 16:46:04 +01:00
Ad Schellevis
464495b58e Proxy, access log over syslog. This is at the moment the best I can think of, since we can't combine clog and plain log it's better to make the choices explicit in our code.
Access log over syslog will write to /var/log/squid.log, where the normal plain log would write to /var/log/squid/access.log

For https://github.com/opnsense/core/issues/3454
2019-06-18 11:47:06 +02:00
Ad Schellevis
1a86b31f76 Syslog-NG, sort programs by name in destination field 2019-06-18 10:54:00 +02:00
Ad Schellevis
18be8214d9 MVC, JsonKeyValueStoreField type, add SortByValue option to influence sorting order. 2019-06-18 10:48:36 +02:00
Ad Schellevis
b62de24aea IDPS, duplicate eve logging section when syslog_eve is checked to support eve logging over syslog. Requires current syslog-ng work in master to be functional. closes https://github.com/opnsense/core/issues/3401 2019-06-17 20:09:06 +02:00
Ad Schellevis
25df4f28ba
Syslog-NG destination setup (#3539)
Syslog-NG add user customizable target destinations using our standard model grid.

* registers on all source feeds (s_all)
* adds udp(4|6), tcp(4|6) transport options.
* use persist-name() to avoid collisions
* basic filters (program, level, facility)
* statistics grid for debugging and traceability
2019-06-17 16:56:45 +01:00
Ad Schellevis
7770075f09 Syslog-NG, service reload not funcitonal, use syslog-ng-ctl instead (or restart when valid pid not found) 2019-06-17 14:06:36 +02:00
Ad Schellevis
dd01423e91 Syslog-NG, restart both syslog daemons on service restarts to avoid communication issues. Since both services (syslog-ng, syslog) have their own status its good to show them separately, for proper functionality they should however be treated as one.
Add a stop action to prevent service stop from only stopping the service named "syslog".
2019-06-17 13:36:17 +02:00
Ad Schellevis
6b92b81702 Trust, import csr. move csr_info and csr_info_json commands to post to prevent sending large / possible illegal blobs of data in uri. closes https://github.com/opnsense/core/issues/3538 2019-06-17 08:53:05 +02:00
Ad Schellevis
5722394b18 Syslog, add "configctl syslog list applications" action to output registered applications in json format 2019-06-14 17:47:57 +02:00
Ad Schellevis
0e8d1fb39e Alias. import alias reference issue, we need to make sure our newly imported items are considered valid options as well. closes https://github.com/opnsense/core/issues/3522 2019-06-14 17:21:50 +02:00
Ad Schellevis
4e1112edc9 IDSP, alert screen action sometimes not visible due to selectpicker init. https://github.com/opnsense/core/issues/1976 ? 2019-06-13 17:36:45 +02:00
Ad Schellevis
b0eeccb784 syslog, work in progress. add helper function to hook in configd to list registered applications so we can easily use these values in our mvc forms. 2019-06-10 20:28:54 +02:00
Ad Schellevis
274ec3556e syslog, move core syslog facilities (applications in our case) to core plugin 2019-06-10 20:26:04 +02:00
Ad Schellevis
3b2c9aecdc syslog, remove remote keywords in _syslog() plugins, moved to syslog-ng template 2019-06-10 20:23:48 +02:00
Ad Schellevis
f32816d53a IDPS, show sid in alert view. closes https://github.com/opnsense/core/issues/3527 2019-06-10 14:46:09 +02:00
Franco Fichtner
85a7fcdf7c system: this isn't entirely true, but helps differentiate vs. "local syslog" 2019-06-09 18:49:05 +02:00
Ad Schellevis
41fcaf2436
move to syslog-ng (#3524)
Integrate syslog-ng into core system without removing current circular log functionality, the basic idea here is to keep syslogd to write circular log files which will turn into a consumer of syslog-ng messages. 

New sources, which will register automatically in s_all, are defined in /usr/local/opnsense/service/templates/OPNsense/Syslog/sources/. Plugins can write additional sources here (such as log sockets).

Legacy remote log targets are collected in syslog-ng-legacy-remote.conf, which should mimic the previous syslogd targets.
2019-06-09 16:28:50 +01:00
Ad Schellevis
d57aa5e4c8 IDPS, minor usability improvements.
* in download tab add enable selected with filter options
* when using bulk actions, obey filter results (filter -> select all -> action, should apply on visible items)
* move button actions to tab events, preventing accidental event removal
2019-06-07 18:18:28 +02:00
Ad Schellevis
1b09b47ff1 IDPS, Allow changing Suricata rule actions in bulk and some minor cleanups. closes https://github.com/opnsense/core/issues/3514 2019-06-07 16:20:09 +02:00
Ad Schellevis
34e942ad16 firewall_rules_edit.php, gateway validation issue (trying to validate groups). closes https://github.com/opnsense/core/issues/3511 2019-06-07 14:54:52 +02:00
Ad Schellevis
3af744e03d IDPS, when toggling rules, keep current action. closes https://github.com/opnsense/core/issues/3513 2019-06-07 14:42:31 +02:00