14602 Commits

Author SHA1 Message Date
Ad Schellevis
7d4597efe5
Virtual IP MVC/API conversion (#6105)
closes #5984 refactors legacy pages, includes the following:

o remove type field as this seems to be redundant and confusing
o input form additions (show hide related fields)
o add button for carp type to select first unused vhid
o implement configure action, caching removed addresses in /tmp/delete_vip_{$uuid}.todo files (by the controller)
o add mode filter to search action and complete with relevant fields for our grid
o fix warning in interfaces.inc (interface_proxyarp_configure()), array creation issue
o add validation for addresses used in port forwards and outbound nat rules. previous version tried to rename forwards, we choose to be consistent when it comes to edit/delete.
o change ACL to use the new endpoints, remove "show only" ACL. we can always consider putting it back later, but the experience of only able to reach the grid likely won't be practical.
o remove old firewall_virtual_ip*.php files
2022-10-26 16:42:46 +02:00
Franco Fichtner
607faca9ba firmware: in retrospect always fetch the signature file
When we move to the next major the file contents for
the txz are all the same but their signature is not.
So until the next changelog sync was carried out the
CHECKSUM matched and the signature will stay stale.
2022-10-26 12:53:38 +02:00
Franco Fichtner
5c65f49bce firmware: use effective ABI in changelog fetch 2022-10-26 12:48:06 +02:00
Franco Fichtner
2a15defa74 firmware: filename not prefix 2022-10-25 10:02:23 +02:00
Franco Fichtner
6f7aeba069 firmware: also ignore core.license 2022-10-25 09:59:00 +02:00
Franco Fichtner
166758a2e5 firmware: ignore os-OPNBEcore plugin since dependency is automatic 2022-10-25 09:48:53 +02:00
Franco Fichtner
854350f14b system: getOID() moved to somewhere else "apparently"
PR: https://forum.opnsense.org/index.php?topic=30772.0
2022-10-22 10:16:24 +02:00
Franco Fichtner
8a4ff5b1b3 intrusion detection: missing OPNsense categories; closes #6100 2022-10-21 13:46:41 +02:00
Franco Fichtner
2643985eb0 unbound: start dnsbl script earlier to stay clear of carp/cron 2022-10-21 08:58:31 +02:00
Franco Fichtner
64635342a0 src: tangential style updates 2022-10-20 17:49:12 +02:00
Franco Fichtner
2b3c783208 system: use service_log() #6099 2022-10-20 17:46:18 +02:00
Franco Fichtner
403759a14e firewall: use service_log() #6099 2022-10-20 17:46:18 +02:00
Franco Fichtner
c674f0afe8 interfaces: use service_log() #6099 2022-10-20 17:46:18 +02:00
Franco Fichtner
1dd68c7d93 dhcp: use service_log() #6099 2022-10-20 17:46:18 +02:00
Franco Fichtner
270110d12a ipsec: use service_log() #6099 2022-10-20 17:46:18 +02:00
Franco Fichtner
3d67dbae17 network time: use service_log() #6099 2022-10-20 17:46:18 +02:00
Franco Fichtner
8c1b15b9d2 opendns: use service_log() #6099 2022-10-20 17:46:18 +02:00
Franco Fichtner
d1d3735ddd openssh: use service_log() #6099 2022-10-20 17:46:18 +02:00
Franco Fichtner
c7b9b26251 openvpn: use service_log() #6099 2022-10-20 17:46:18 +02:00
Ad Schellevis
63cd61ffd2 MVC - Bootgrid / form control minor additions. minor fix for 528474372b373c720962e5efaad3c7cf6773917a moving formatters out of <input> section so types like checkboxes may also be converted if needed 2022-10-20 16:54:06 +02:00
Franco Fichtner
b55c77d751 loopback: use service_log() #6099 2022-10-20 12:59:46 +02:00
Franco Fichtner
4df9d04055 vxlan: use service_log() #6099 2022-10-20 12:58:16 +02:00
Franco Fichtner
c2a9ce8c26 plugins: $verbose argument in plugins_run() is spurious
plugins_run() was copied from plugins_configure() but since plugins_run()
already provides output and the only caller ignores the $verbose it is
better remvoed.
2022-10-20 12:54:04 +02:00
Franco Fichtner
a71a23739f dpinger: use service_log() #6099 2022-10-20 12:51:01 +02:00
Franco Fichtner
c40fc4d44d unbound: cache dump is also part of stop duty 2022-10-20 12:45:23 +02:00
Franco Fichtner
208db02afa unbound: wait for lock to release before stopping #6028
This could under the worst case cause the system to hang forever,
but for the time being in development it would be better to find
the issue than glossing over with a -w 30 or so...
2022-10-20 11:28:09 +02:00
Franco Fichtner
5899fca4bb dnsmasq: use service_log() #6099 2022-10-20 11:11:14 +02:00
Franco Fichtner
867766b154 rrd: use service_log() #6099 2022-10-20 11:08:00 +02:00
Franco Fichtner
e556d48577 webgui: use service_log() 2022-10-20 10:59:09 +02:00
Franco Fichtner
8f5bd0d36e unbound: stop seems to flip this on its head
Restructure again, not really knowing why 61c6bfa6be4d07df was done.
There is no reference to it, but it might have to do with blocklist
behaviour...
2022-10-20 10:27:16 +02:00
Franco Fichtner
45ebdd5320 unbound: repair stop/generate order and style cleanups 2022-10-20 10:18:51 +02:00
Franco Fichtner
1388f28006 unbound: make start script never fail early 2022-10-20 09:45:53 +02:00
Ad Schellevis
ea2337b6d1 Services: Unbound DNS - minor start/stop changes
simplify previous and make stop behaviour consistent for unbound_configure_do
2022-10-20 09:36:03 +02:00
Ad Schellevis
c20fd9a47a Services: Unbound DNS - minor start/stop changes
o make sure we are not going to exit the start script if rm fails for whatever reason
o add stop action which stops the service and unmounts volumes mounted by start, the current state only kills unbounds primary pid (without optional dhcp integration or mountpoints)
2022-10-20 09:08:13 +02:00
Ad Schellevis
d01df31304 Firewall: Diagnostics: Aliases - Minor sorting bug in aliases list, natural sorting not being applied. closes https://github.com/opnsense/core/issues/6090 2022-10-19 21:30:26 +02:00
Franco Fichtner
2671d49ff3 system: write a boot log using the embedded configuration messages 2022-10-19 21:01:42 +02:00
Ad Schellevis
2b77e049ff MVC / default template - remove duplicate JS import 2022-10-19 20:46:46 +02:00
Ad Schellevis
8827c390ea MVC / default template - missing comments in previous 2022-10-19 20:22:49 +02:00
Ad Schellevis
fe2f96d267 MVC / default template - move javascript and css imports to base controller so derivatives are able to extend the list easily (and still use our standard default.volt) 2022-10-19 17:25:13 +02:00
Ad Schellevis
3d1cc3c1e2 Firewall: Shaper - Allow the use of "dynamic" interface types, like enc0 and ipsecXXX. 2022-10-19 11:43:15 +02:00
Ad Schellevis
528474372b MVC - Boorgrid / form control minor additions.
o When row-id isn't specified on a "edit" target, use an empty string
o On form <input> tags support the "type_formatter" attribute, which defines the function to call in order to convert data before sending it to the server. This eases type conversions when needed (e.g. '1' --> 1 using a wrapper which uses parseInt())
o Add support for list type <select> content which offers a sorted list of key,value,selected attributes in addition to the current named array store.

Full example to offer properly typed integers to a backend:

    function form_format_integer(payload)
    {
        if (/^[+-]?[0-9]*$/.test(payload)) {
            return  parseInt(payload);
        } else {
            return payload;
        }
    }

<input type="text" type_formatter="form_format_integer" id="myform.quantity">

Sample data for list type <select> options:

"status":[{"key":null,"value":"-","selected":0},{"key":"PEN","value":"Pending","selected":1}]
2022-10-18 21:49:44 +02:00
Ad Schellevis
ac73ab9021 MVC - prevent UserExceptions to end up in the crash reporter. closes https://github.com/opnsense/core/issues/6098 2022-10-18 21:39:40 +02:00
Franco Fichtner
fcbceadb76 Scripts: improve license parsing for odd names 2022-10-18 14:19:26 +02:00
Daniel Aleksandersen
fcbf3b15d8
Unbound: Clarify “Verify CN” option field (#5897) 2022-10-18 13:51:11 +02:00
Daniel Aleksandersen
3654c94572
Change system domain name suggestions (#5898)
* Don't suggest using unreserved top-level domains.
* Use the reserved example.com|net domains for other examples.
* Encourage adoption of the special-purpose internal/site home.arpa (RFC 8375) domain.
2022-10-18 13:48:41 +02:00
Johnny S. Lee
ab9eb70d25 dnsmasq: DNSSEC: Remove expired root trust anchor
See: https://data.iana.org/root-anchors/root-anchors.xml
2022-10-18 13:09:59 +02:00
Franco Fichtner
d4ba371139 openvpn: ifctl does pfctl internally 2022-10-18 12:26:13 +02:00
Franco Fichtner
bb9abf86a4 firewall: remove ip_change_kill_states mechanic; closes #6092 2022-10-17 13:48:42 +02:00
Franco Fichtner
dfadc8190e console: store UUID for VLAN device #6086 2022-10-17 12:07:12 +02:00
Franco Fichtner
5d62b395d1 unbound: fix bail on python glue chown (read-only error) 2022-10-17 11:04:51 +02:00