Ad Schellevis
761e55184c
IPSec: prepend fqdn when selected, related to https://github.com/opnsense/core/issues/4860
2021-04-28 09:25:04 +02:00
Ad Schellevis
45b697f6db
IPsec - typo in auto generated rules. closes https://github.com/opnsense/core/issues/4920
2021-04-26 18:21:49 +02:00
Ad Schellevis
ca67acc9d8
OpenVPN wizard broken, seems like a regression from 71d6d0adeb closes https://github.com/opnsense/core/issues/4943
2021-04-26 08:49:42 +02:00
Franco Fichtner
7c59484dc1
pkg: fix plist
2021-04-23 10:09:18 +02:00
Franco Fichtner
0dbfddd864
firmware: exclude /etc/csh.cshrc for #4936
2021-04-22 17:16:10 +02:00
Ad Schellevis
2eebd08278
Shell inactivity timeout (for [t]csh). closes https://github.com/opnsense/core/issues/4936
2021-04-22 17:06:50 +02:00
Ad Schellevis
08dcb63b0d
XMLRPC / HA sync - remove services from filter_configure_xmlrpc. closes https://github.com/opnsense/core/issues/4771
...
o add dpinger to routing, missed a spot there
2021-04-22 12:06:05 +02:00
Ad Schellevis
a9a844148d
MVC: add uuid in ApiMutableModelControllerBase::validateAndSave() when a node is defined and has one. closes https://github.com/opnsense/core/issues/4904
2021-04-22 11:28:50 +02:00
Ad Schellevis
e2534f5a09
add "keyingtries" to IPsec Phase1 config, closes https://github.com/opnsense/core/issues/4204
2021-04-21 18:26:22 +02:00
Ad Schellevis
cdf328078b
add policy based routing support for "dynamic gateway policy" type interfaces. closes https://github.com/opnsense/core/issues/4905
...
o expose gateway_interface property on gateway so consumers can act upon it
o exclude gateway_interface gateways on automatic "let out anything from firewall host itself (force gw)" rules to avoid side affects
o construct proper route-to statement when address is omitted
o construct proper reply-to statement when address is omitted and a reply-to property is set in the (dynamic) rule
2021-04-21 17:04:44 +02:00
Franco Fichtner
d3bc697309
importer: -p was never documented
...
It was actually written for the installer migration. \o/
2021-04-21 14:25:33 +02:00
Ad Schellevis
ca21b966a2
audit log: rename webgui to audit for https://github.com/opnsense/core/issues/4925
2021-04-20 10:34:30 +02:00
Franco Fichtner
75f9880a94
pkg: fix plist
2021-04-20 10:27:50 +02:00
Ad Schellevis
cfb84fe8e9
Add audit log target and move related syslog messages ( https://github.com/opnsense/core/issues/4925 )
...
o add new "audit" log target
o move user auth log entries into the new scope
o send config changes to audit log including message if provided
o add messages in user and group administration
2021-04-19 18:04:35 +02:00
Franco Fichtner
253a888c26
installer: remove fluff
2021-04-19 14:19:04 +02:00
Greelan
19af1dc369
webgui: clarify help text for firewall rules traffic direction ( #4848 )
2021-04-19 13:51:22 +02:00
Ad Schellevis
65637ce15a
phalcon 4, missed another Syslog for https://github.com/opnsense/core/issues/4012
2021-04-18 17:10:23 +02:00
Ad Schellevis
001325988c
missed some small spots in https://github.com/opnsense/core/issues/4012
...
o one syslog unwrapped
o testsuite return class path missing
2021-04-18 17:04:34 +02:00
Franco Fichtner
e70427d9de
system: leave an audit comment
2021-04-15 12:24:37 +02:00
Franco Fichtner
8bf56bf837
src: PHP error in Phalcon port
...
Fatal error: Declaration of OPNsense\Base\ViewTranslator::query($translateKey, array $placeholders = Array): string must be compatible with Phalcon\Translate\Adapter\Gettext::query($index, $placeholders = NULL) in /usr/core/src/opnsense/mvc/app/library/OPNsense/Base/ViewTranslator.php on line 45
2021-04-15 11:46:16 +02:00
Franco Fichtner
3a98ebb22f
Phalcon 4 migration ( #4921 )
...
phalcon 4 migration #4012
o replace Phalcon\Session\Adapter\Files with new Phalcon\Session\Adapter\Stream adapter
o replace router->setUriSource() with handle() parameter
o combining sessions between phalcon and legacy php seems to be a bit problematic, first issue seems to be the legacy csrf check. refactor to use phalcon's method and legacy session
o Fix Phalcon Syslog usage in ControllerRoot (wrap in Logger class)
o session seems to miss standard prefix.
o also Gettext seems to like being wrapped...
o Gettext inheritance
o another handle()
o Volt: handle registerEngines / VoltEngine changes
o volt templates - missing session reference, bootstrap in ControllerBase
o router getRewriteUri() deprecated
o another handle() in index.php
o Phalcon\Dispatcher::EXCEPTION_* moved to Phalcon\Dispatcher\Exception::EXCEPTION_*
o changes in filter handling.
o fix plist
o Syslog usage changes
o refactor Validation changes
o FILTER_ALNUM - replaced FILTER_ALPHANUM
2021-04-15 11:36:57 +02:00
Franco Fichtner
cefe1069e4
installer: ok, one more ;)
2021-04-14 20:15:55 +02:00
Ad Schellevis
8d245d6d13
ipsec: fix php warning:
...
PHP Warning: min(): Array must contain at least one element in /usr/local/etc/inc/plugins.inc.d/ipsec.inc on line 534
2021-04-14 13:19:59 +02:00
Franco Fichtner
161523247e
installer: avoid padding to make this look fresh
2021-04-14 08:55:02 +02:00
Franco Fichtner
f9dd232a39
installer: remove old workaround
2021-04-13 15:01:30 +02:00
Franco Fichtner
55e4e45dac
installer: no longer requires this
2021-04-13 14:06:18 +02:00
Franco Fichtner
3f3ebd9687
system: also pick up root user
2021-04-13 14:03:36 +02:00
Franco Fichtner
e8832a22fa
rc: another zfs requirement for arm64
2021-04-13 13:34:36 +02:00
Franco Fichtner
95bfea65d0
rc: attempt to create /tmp if it does not exist
2021-04-13 12:07:06 +02:00
Franco Fichtner
a08b8ec72b
installer: switch installer package
2021-04-13 09:35:28 +02:00
Franco Fichtner
10ea353bb5
filter: nop bweteen prints
2021-04-12 14:25:13 +02:00
Franco Fichtner
4fcc752721
system: CORE_SERIES is more accurate than CORE_ABI
2021-04-12 08:44:45 +02:00
kulikov-a
f6c0fa88d1
download_blacklists.py: match whole entry ( #4915 )
...
-match the entire string to prevent url entries
-add to skip stat if not match
2021-04-11 20:15:39 +02:00
kulikov-a
a76068beec
fw_log.volt: deffer url parsing ( #4913 )
2021-04-11 11:09:53 +02:00
Franco Fichtner
0f3fcd2b05
firmware: simplify for previous #4906
2021-04-09 14:28:05 +02:00
Franco Fichtner
35217ba0d1
firmware: if upstream package is missing complain; closes #4906
...
This points to a configuration error that should be resolved one
way or another.
2021-04-09 14:18:26 +02:00
Franco Fichtner
7d7aaa633d
firmware: separate error for "forbidden" #4906
2021-04-09 14:06:27 +02:00
Franco Fichtner
61ca8a7b68
pkg: add series and nickname to metadata
2021-04-09 08:56:46 +02:00
Franco Fichtner
26c8fbb267
pkg: fix plist
2021-04-08 17:16:46 +02:00
Ad Schellevis
361e336d3e
Merge branch 'kulikov-a-lvtemplates'
2021-04-08 17:14:38 +02:00
Ad Schellevis
a785f71755
Firewall / Log Files / Live - refactor https://github.com/opnsense/core/pull/4902 a bit
2021-04-08 17:13:55 +02:00
Franco Fichtner
6658b92911
system: sort system_sysctl_get() output; closes #4907
2021-04-08 16:43:12 +02:00
Franco Fichtner
26c9ca7d08
rc: reverse list on stop action
...
Suggested by: David Mora
PR: https://github.com/opnsense/core/pull/4891
2021-04-08 16:43:12 +02:00
Franco Fichtner
bdb32652fb
firmwre: make this clearer
...
Ideally, opnsense-update -M should replace this except
that -M is used to gain mirror access from other scripts
as well. Need to think about it.
2021-04-08 16:43:12 +02:00
Franco Fichtner
aa56b3e45a
system: reorder settings to let tunables override all
2021-04-08 16:43:12 +02:00
Ad Schellevis
f538c08065
unbound / blacklists: cleanse domain input. change regex in https://github.com/opnsense/core/issues/4898 per suggestion @kulikov-a
2021-04-08 16:43:12 +02:00
Franco Fichtner
d3063a2017
openvpn: remove OpenSSL engine support #4896
2021-04-08 16:43:12 +02:00
Franco Fichtner
cf8d1d045f
system: sort system_sysctl_get() output; closes #4907
2021-04-08 12:24:01 +02:00
Franco Fichtner
7316071974
rc: reverse list on stop action
...
Suggested by: David Mora
PR: https://github.com/opnsense/core/pull/4891
2021-04-07 14:50:04 +02:00
Franco Fichtner
2fe4de6819
firmwre: make this clearer
...
Ideally, opnsense-update -M should replace this except
that -M is used to gain mirror access from other scripts
as well. Need to think about it.
2021-04-07 12:07:32 +02:00