5589 Commits

Author SHA1 Message Date
Ad Schellevis
fd12c6682a (filter) more refactoring, as discussed with @fichtner move core rules out of plugin scope 2016-10-30 12:34:11 +01:00
Franco Fichtner
2c2192d70d rc: explicitly use `-p' , it should be set but can't go wrong here
PR: https://github.com/opnsense/core/issues/1077
2016-10-29 10:19:26 +02:00
Franco Fichtner
a89858db9d firmware: improve GUI responses; closes #1009 2016-10-29 09:36:48 +02:00
Franco Fichtner
569bc3fdbb rc: tweak previous a little 2016-10-29 08:30:23 +02:00
Franco Fichtner
e6e85ce70c rc: finally deal with message of the day
Content follows, for now just use the sweet template Framework
to get this party started.

We're using "motd.in" so allow replacement during package builds.
2016-10-29 08:23:19 +02:00
Franco Fichtner
8d11de1be9 miniupnpd: forgot syntax for a second there 2016-10-29 00:59:06 +02:00
Franco Fichtner
850cd7a5fa miniupnpd: merge inc files, minor tweaks on the code
Since we have pluggable anchors, this is ready to move to
plugins to shink down the base system a bit.
2016-10-29 00:43:48 +02:00
Franco Fichtner
d01b729630 inc: apply random style fixes 2016-10-29 00:08:00 +02:00
Ad Schellevis
3085e4d18f (plugins / firewall) first steps in moving static firewall rules to plugin registrations.
Te idea is simple, start parsing rules in a uniform way, so we're eventually able to display and alter all auto generated rules.
Because of the large set of legacy code rules, we're going to migrate step by step, leaving the current setup intact.
2016-10-28 20:14:29 +02:00
Ad Schellevis
0755bdac78 (filter.inc) move anchor, pre requirement for wrapping rule plugin 2016-10-28 20:00:22 +02:00
Franco Fichtner
477fba1122 src: switch template reload to new slash notation; #1238 2016-10-28 08:41:42 +02:00
Franco Fichtner
53f44c89c7 rc: split out netgraph modules into own loader chunk 2016-10-27 10:38:04 +02:00
Franco Fichtner
df2fbeb22e rc: make individual chunks a bit more apparent in loader.conf 2016-10-27 10:10:29 +02:00
Franco Fichtner
765b22f1be system: only append, less intrusive and last match wins 2016-10-27 10:05:17 +02:00
Franco Fichtner
7094a5cd3b rc: the trusty rc.opnsense couldn't cope with subdirs 2016-10-26 19:54:14 +02:00
Franco Fichtner
528866c5d0 proxy: rc.conf.d subdir for squid, only way to merge configs 2016-10-26 19:34:30 +02:00
Franco Fichtner
243681049f system: don't run async auth templates 2016-10-26 15:42:15 +02:00
Franco Fichtner
a4b9c0298b configd: small improvements loosely related to #1238
o Don't look for templates in manufacturer directory
o Allow to use "/" component separator, it's safe
o Hook up the "template list" command
2016-10-26 15:26:27 +02:00
Franco Fichtner
35122576f4 proxy: allow alt auth framework config file
We fall back to the local authentication if not found.

PR: https://github.com/opnsense/plugins/issues/43
2016-10-26 08:23:14 +02:00
Franco Fichtner
2d450939a0 system: consolidate previous
* system_console_configure() is really system_login_configure()+
* make a template for sudoers config setting
* move auth template generation to single spot
2016-10-26 07:17:58 +02:00
Ad Schellevis
cacfdd058d (filter) work in progress filter refactoring 2016-10-25 20:52:25 +02:00
Ad Schellevis
f88eabc00b (pam) switch to pam, with the option to disable our pam helper and switch back to unix mode... for https://github.com/opnsense/core/issues/998 2016-10-25 20:36:55 +02:00
Ad Schellevis
089a3f07d6 fix for https://github.com/opnsense/core/issues/1196 2016-10-25 19:51:39 +02:00
Ad Schellevis
aca6eb44ba (filter) work in progress filter refactoring 2016-10-24 21:48:02 +02:00
Franco Fichtner
84d6d43b7a firewall: align this code more for IPv6 #1232 2016-10-24 21:07:31 +02:00
Franco Fichtner
dc0def5fc3 rc: if_stf doesn't exist in FreeBSD 11.0...
... and it may be that it never will...
2016-10-24 18:21:40 +02:00
Ad Schellevis
fe8ebc8081 (mvc) improve api errors for configuration issues (wrong/missing type) and remove unused return value 2016-10-24 11:18:16 +02:00
Franco Fichtner
e713d12a36 templates: remove +MANIFEST; closes #1236
We have manifests for packages, no need to duplicate info
about sub-packages that aren't really packages.

Approved by: @adschellevis
2016-10-24 11:11:42 +02:00
Franco Fichtner
5ac1ab3f48 proxy: auto-order menu 2016-10-24 10:36:35 +02:00
Franco Fichtner
2bc0ea0f0a rc: chase a race condition during +POST_INSTALL run 2016-10-24 09:13:30 +02:00
Franco Fichtner
909f2b134d config: style issues 2016-10-24 08:28:10 +02:00
Franco Fichtner
661445dd43 filter: properly add nat reflection helper for IPv6; closes #1232 2016-10-23 21:07:05 +02:00
Franco Fichtner
9385d1fbe6 filter: improve print style in rules file 2016-10-23 20:35:09 +02:00
Franco Fichtner
04a1d6c4d5 filter: minor style issues 2016-10-23 20:30:40 +02:00
Franco Fichtner
b406098dd8 www: remove dead code 2016-10-23 17:17:43 +02:00
Franco Fichtner
5d238412ae www: prepare to die! fix validation code now that issue is triggered
PR: https://forum.opnsense.org/index.php?topic=3824
2016-10-23 17:11:01 +02:00
Ad Schellevis
7c82fe6202 (hassync) trigger xmlrpc sync before service action, for https://github.com/opnsense/core/issues/1217 2016-10-23 13:42:28 +02:00
Ad Schellevis
b27e026904 (unittests) previous commit killed the model unit tests 2016-10-23 13:22:06 +02:00
Ad Schellevis
0d4f6eb5ec (mvc, migrations) remove the need for empty boilerplates by using BaseModelMigration when no custom migration is available for the current version. 2016-10-23 12:54:30 +02:00
Ad Schellevis
8f00c9c7dd (ipsec) remove ipsec_force_reload, replace with ipsec_configured_on_interface() to check if a tunnel is configured before reloading ipsec 2016-10-22 15:48:50 +02:00
Ad Schellevis
8b6108a89a (ipsec) remove failoverforcereload, when enabled it just calls ipsec_configure() twice, which doesn't look usefull 2016-10-22 15:37:20 +02:00
Ad Schellevis
a801eb11bd interface offloading, add txcsum6, trxcsum6 for https://github.com/opnsense/core/issues/1227 2016-10-22 15:19:22 +02:00
Ad Schellevis
e55feb1eb5 (mvc) unused, pull part of https://github.com/opnsense/core/pull/1134 2016-10-22 15:05:28 +02:00
Ad Schellevis
f67ef5e787 (mvc) some style fixes in ApiMutableModelControllerBase.php from https://github.com/opnsense/core/pull/1134 2016-10-22 14:41:10 +02:00
Ad Schellevis
e14a6b7e57 (ui) add modal form in legacy template to signal the user about pending service action (stop,start,restart) 2016-10-22 14:09:47 +02:00
Ad Schellevis
e434df240c (mvc) remove incomplete error handling, was superseded 22701ee038 (diff-755c67cb284868a802a88a873c75038c) closes https://github.com/opnsense/core/issues/1234 2016-10-22 13:20:48 +02:00
Ad Schellevis
5a6f5b6422 (ipsec) restart should stop/start the service in stead of trying an apply again.
The current issue is you can't actually restart ipsec without disabling and enabling the service, which is odd and confusing.

Convert actions to configd template and change service registration.
2016-10-22 10:56:59 +02:00
Franco Fichtner
6d2c81d74b plugins: everything should be plugins...
Since plugins are now tied to the heartbeat of the system itself,
it makes sense to split out hardcoded base functionality into
their pluggable counterparts.  Start with the candidates that
already have a plugin file.

Discussed with: @adschellevis
2016-10-21 08:52:30 +02:00
Franco Fichtner
023090c006 Merge pull request #1231 from fabianfrz/fix_squid_config
fix broken squid configuration
2016-10-21 07:31:58 +02:00
Fabian Franz
bbab5ea335 fix broken squid configuration 2016-10-20 21:17:46 +02:00