11056 Commits

Author SHA1 Message Date
Ad Schellevis
7a143c8557 OpenVPN export, hide p12 password when not applicable. closes https://github.com/opnsense/core/issues/3500 2019-05-27 11:41:15 +02:00
Ad Schellevis
8bb3f1f38c OpenVPN export, support cryptoapicert to load certificates from the windows certificate system store, for https://github.com/opnsense/core/issues/3500 2019-05-26 14:47:45 +02:00
Ad Schellevis
e8dbda338f rework previous 2019-05-24 15:04:15 +02:00
Ad Schellevis
54551b03ee Proxy, minor regression in authentication. contraints are always checked now, which should only apply for local. related to https://github.com/opnsense/core/issues/3250 2019-05-24 15:02:56 +02:00
Franco Fichtner
4482cb1d6c interfaces: code review, flip logic 2019-05-24 07:56:58 +02:00
Franco Fichtner
5d83d8612c pkg: since CORE_PYTHON2 goes away make 3 the CORE_PYTHON default 2019-05-23 08:57:38 +02:00
Franco Fichtner
5184400115 firewall: change this back #3497 2019-05-23 08:30:32 +02:00
Franco Fichtner
7218726f59 system: style update 2019-05-22 07:06:35 +02:00
Ad Schellevis
fb4a9bedaa dhcp/leases, forgot to replace from-to with address range min, max. for https://github.com/opnsense/core/issues/3487 2019-05-21 20:34:31 +02:00
Ad Schellevis
446caa9941 dhcp/leases, simplify interface lookup and make it more consistent. should fix https://github.com/opnsense/core/issues/3487 2019-05-21 20:21:50 +02:00
Ad Schellevis
9b63e33621 Merge branch 'clystron-dhcp_failover_params' 2019-05-21 19:58:01 +02:00
Ad Schellevis
7a15556bad minor cleanups for https://github.com/opnsense/core/pull/3484 and handle 0 values. 2019-05-21 19:57:30 +02:00
Ad Schellevis
f886e4d439 Merge branch 'dhcp_failover_params' of https://github.com/clystron/core into clystron-dhcp_failover_params 2019-05-21 19:42:51 +02:00
Franco Fichtner
8b22eebb9c pkg: move python dep to 3 2019-05-21 09:04:26 +02:00
Franco Fichtner
f772b4ef9a system: reduce diff vs. stable 2019-05-21 09:01:53 +02:00
Franco Fichtner
255e9b76b4 system: add pluginctl -s support
For legacy components route -s option through plugins_services()
to get a list of services that can be controlled like the GUI
controls.  E.g.:

    # pluginctl dhcpd [start|stop|restart]

PR: https://forum.opnsense.org/index.php?topic=12781.0
2019-05-20 21:05:10 +02:00
Ad Schellevis
10108b0615 captiveportal, use "onestop" to stop captiveportal, when there's no zone configured "stop" would be skipped since the service is disabled. issue seems to be introduced in 0299224578 2019-05-20 16:36:34 +02:00
Franco Fichtner
4175a45f4b system: fix netflow lib permission 2019-05-20 13:24:38 +02:00
Thomas Jensen
283d62a007 Add homelab.no repository 2019-05-20 13:00:08 +02:00
Ad Schellevis
f086f8c48d flowd aggregate, minor bug in commit counter, leading to single row commits after row # 100k 2019-05-20 11:42:00 +02:00
Ad Schellevis
03c75f71be system: address CVE-2019-11816 privlege escalation bugs
Reported by: Arnaud Cordier
2019-05-19 09:39:18 +02:00
Ad Schellevis
28ed5741f4 netflow, make sure get_timeserie_data() returns string type objects in stead of bytes, to prevent 17e4e9c0fc (commitcomment-33587137)
we might find some other small type interpretation differences, but the bumpiest seems to be gone now.
2019-05-18 09:23:25 +02:00
Ad Schellevis
2bdc74b8a1 netflow, switch dump_log.py script to python3 2019-05-18 09:22:29 +02:00
Ad Schellevis
3d1617b2bd netflow, minor type issue, parameter received as bytes in get_timeseries.py 2019-05-17 16:50:32 +02:00
Ad Schellevis
918e4671ea netflow, fix rc script for flowd_aggregate 2019-05-17 16:42:19 +02:00
Ad Schellevis
31982e2872 netflow, migrate flowd aggregator to python 3 2019-05-17 16:41:08 +02:00
Northguy
0b40897fd3 Fix dhcp leases help text (#3488) 2019-05-17 15:26:25 +02:00
Ad Schellevis
17e4e9c0fc netflow, aggregator replace flowd with our new implementation 2019-05-16 18:32:55 +02:00
Ad Schellevis
8aecf38f2e netflow, log parser. for backwards compatibility add copy of recv_sec field in recv 2019-05-16 18:29:16 +02:00
Franco Fichtner
6cd82973ec ipsec: always reset to defaults; closes #3486 2019-05-16 18:11:43 +02:00
Ad Schellevis
5eef7248a8 netflow, flow log parser improvements
- faster / cleaner ipv4 conversion
- ipv6 conversion in compressed format, which equals flowd previous output
- unpack source and dest ports
2019-05-16 16:20:34 +02:00
Ad Schellevis
0bdbdf7d21 netflow, improve log parser performance, cache some calculations.
In theory we could probably increase performance even more by limitting the number of calls to struct.unpack, but this will make it more difficult to read.
This version is about 30% faster then the original C version shipped with flowd.

Some more testing todo, but preliminary results look good.
2019-05-16 13:54:24 +02:00
Ad Schellevis
93f7cff3d8 netflow, flowparser.py performance improvement in parsing ipv4/ipv6 addresses. 2019-05-15 22:01:27 +02:00
wolfgangp
8226709938 added failover_split parameter, there is still an issue with proper
handling of 0 as non-default
added hint to failover_peer help that the leases-file will be deleted on
change
2019-05-15 13:08:48 +02:00
Franco Fichtner
4ad677b521 pkg: fix plist 2019-05-15 08:35:32 +02:00
Ad Schellevis
a99d1ecf8e netflow, minor type issue in previous 2019-05-14 22:08:52 +02:00
Ad Schellevis
7e55ef5218 netflow, work in progress pure python replacement to parse /var/log/flowd.log files 2019-05-14 22:06:53 +02:00
Franco Fichtner
aa9c83571f dashboard: use cache_safe() for last unprotected logo instance
Placement is debatable here, but for the sake of consistency
do it like all the other spots already do.  It's cool.
2019-05-14 08:52:55 +02:00
Franco Fichtner
28f87839f2 make: LOCALBASE should be used 2019-05-14 07:24:59 +02:00
Franco Fichtner
c3aa7013ae pkg: remove unused file 2019-05-13 20:32:48 +02:00
Ad Schellevis
1dfc0e250a CaptivePortal, convert scripts from python 2 --> 3 2019-05-13 19:29:06 +02:00
Ad Schellevis
64186cca48 python3, minor compatibility fix in sqlite3_helper.py 2019-05-13 18:43:27 +02:00
Ad Schellevis
2ee18896f2 CaptivePortal, remove unused listARPtable.py script 2019-05-13 18:42:56 +02:00
Ad Schellevis
a06ad6a5d0 netflow, convert parts that don't depend on flowd to python 3 2019-05-13 15:48:33 +02:00
Ad Schellevis
645fdcffd6 proxy, remote access control convert to python 3 2019-05-13 15:30:12 +02:00
Franco Fichtner
0766615b89 system: use our symlink in configd interpreter 2019-05-13 14:24:39 +02:00
Ad Schellevis
df63625418 list ssl ciphers script, python 2 -> 3 conversion 2019-05-13 14:10:01 +02:00
Ad Schellevis
bb2d31ed20 configd, module doesn't need to know interpreter, cleanup. 2019-05-13 14:06:05 +02:00
Ad Schellevis
e41aa9a74b status interfaces, list_interrupts.py convert python 2 -> 3 2019-05-13 14:03:18 +02:00
Ad Schellevis
71cdb25d96 Routing/status, python 2-->3 conversion 2019-05-13 13:57:32 +02:00