Franco Fichtner
7da7bed7d8
src: improve spacing in wpad additions
2018-07-18 08:20:40 +02:00
Franco Fichtner
5f6ca0163c
LICENSE: sync
2018-07-18 08:14:43 +02:00
Franco Fichtner
7b51858e09
mvc: resurrect whitespace
2018-07-18 00:06:35 +02:00
Franco Fichtner
7466c2eb30
system: remove unused action_disable setting
2018-07-18 00:01:05 +02:00
Franco Fichtner
cb0dcb2b13
dashboard: tweaks for #2554
2018-07-17 23:41:07 +02:00
Franco Fichtner
235fa8b999
pkg: fix plist
2018-07-17 23:11:10 +02:00
Ad Schellevis
f115eadb97
Merge branch 'marjohn56-Sidebar'
2018-07-17 22:00:47 +02:00
Ad Schellevis
6f333c123e
theme, detect if sidebar is loaded and link functionality when it is, move javascript logic into it's own script file.
2018-07-17 21:58:01 +02:00
Ad Schellevis
6e44a883e5
Merge branch 'Sidebar' of https://github.com/marjohn56/core into marjohn56-Sidebar
2018-07-17 18:14:12 +02:00
Ad Schellevis
9bcbd8a305
Nextclioud, regression
2018-07-17 18:04:30 +02:00
Ad Schellevis
c0d37accc5
NTPD/GPS, typo in SiRF selection
2018-07-17 14:42:13 +02:00
Ad Schellevis
1ddfad34c1
oops, ditch old return type
2018-07-17 09:31:39 +02:00
Ad Schellevis
939f53eff2
Firewall, exclude virtual ipv6 interfaces and change getInterfaceMapping() to generator type in the process
2018-07-17 09:23:20 +02:00
Franco Fichtner
2bf1200df8
firewall: cosmetic issue in bogons rule label
2018-07-17 09:18:17 +02:00
Ad Schellevis
46324ab7c7
Firewall, rework previous
2018-07-17 09:13:20 +02:00
Ad Schellevis
c0fcc2c38d
Firewall, bogons & privates, add ipprotocol to allow _stf interfaces to choose, for https://github.com/opnsense/core/issues/2546
2018-07-17 08:58:00 +02:00
Franco Fichtner
50fb5bcb0c
system: second part for #2535
2018-07-17 08:52:45 +02:00
Franco Fichtner
922c341974
firewall: copy description, and block priv/bogons #2546
2018-07-17 07:13:34 +02:00
Franco Fichtner
9747e1f328
firewall: like this better
2018-07-16 20:55:33 +02:00
Franco Fichtner
6227bb9220
firewall: actually use wan_stf, we need a hint from NtpRule #2546
2018-07-16 19:05:39 +02:00
Franco Fichtner
471149fac8
system: small cleanup for unused variables
2018-07-16 18:44:30 +02:00
Ad Schellevis
87c7d90857
Firewall/alias, fix is_alias() compatibility for https://github.com/opnsense/core/issues/1858
2018-07-16 18:29:05 +02:00
Ad Schellevis
14652b4fb1
openvpn export, move alias_expand() into single use-case, will be refactored later
2018-07-16 17:36:32 +02:00
Ad Schellevis
a02ad4cb00
Firewall, regression in forward reflection.
...
It looks like parseRdrRules() yields too many rdr rules, since it adds all reflection interfaces including the ones which don't serve the protocol of the interface.
Logically we should check if the selected interface has an address configured for the protocol at hand, like we seemed to have done for the nat rule following when nat reflection is enabled.
There might be some edge cases where we don't automatically render rules now, in cases where the interface doesn't have an address configured, but there's always an option to add forward rules manually.
2018-07-16 16:47:26 +02:00
Ad Schellevis
f12a931cac
Firewall/reflection, while working on https://github.com/opnsense/core/issues/2546 it seems that reflection rules are generated on IPv4 for IPv6 only interfaces, we should check before yielding new records.
...
ForwardRule likely has a similar issue
2018-07-16 10:29:27 +02:00
Ad Schellevis
445ffd1f79
Firewall, IPv6/stf, generate _stf interface and link to parent while parsing rules, for https://github.com/opnsense/core/issues/2546
...
The general idea here is to make it explicit that _stf generated another interface for IPv6 traffic, so we can use this knowledge when parsing rules easily.
2018-07-16 10:27:06 +02:00
Ad Schellevis
ac35e91dee
IDS, cleanup previously installed rules, which are known in the configuration but don't exist anymore in the definitions (uninstalled). Manually installed rules will remain untouched by this change. closes https://github.com/opnsense/core/pull/2448
2018-07-15 21:36:13 +02:00
Ad Schellevis
5d09ffdec1
phpdoc in previous
2018-07-15 20:51:43 +02:00
Ad Schellevis
3650787ae4
Firewall/alias, refactor alias usage when changing its name, for https://github.com/opnsense/core/issues/1858
2018-07-15 20:45:46 +02:00
Franco Fichtner
ea10cdb815
web proxy: guard resp/req ACL #2449
2018-07-15 20:31:47 +02:00
Franco Fichtner
d8c6c21f11
system: restart syslog if needed; closes #1130
2018-07-15 20:19:34 +02:00
Franco Fichtner
b36a3906e4
web proxy: allow to not use resp or req URL; closes #2449
2018-07-15 20:12:25 +02:00
Franco Fichtner
aa69410e65
unbound: update to latest root hints; closes #2147
...
We call the file ".min." so that our whitespace sweep does not
clean up whitespaces to retain the original checksum so that
the file can always be verified.
2018-07-15 20:05:49 +02:00
Franco Fichtner
6bbfcf4b02
system: allow USB-based serial ports; closes #2026
2018-07-15 19:47:43 +02:00
Franco Fichtner
086d372e7e
firmware: hide upgrade banner when update is done; closes #2514
2018-07-15 14:17:20 +02:00
Franco Fichtner
4cc324c862
system: make netflow labels clearer; closes #2197
2018-07-15 14:08:41 +02:00
Franco Fichtner
46438e696b
firmware: reboot hint only if download is possible; closes #2547
2018-07-15 14:00:27 +02:00
Franco Fichtner
a7f87559ca
system: write version to make sure we can catch incompatibilities #2535
2018-07-15 12:42:19 +02:00
Franco Fichtner
e66358562a
unbound: fix date in previous
2018-07-15 12:21:46 +02:00
Franco Fichtner
94b2df5517
system: enc/dec for backups is done in MD5...
...
and breaks when using OpenSSL 1.1.
Also start the header block for new crypt settings. It's a bit
unfortunate that the MVC backup factory doesn't handle the
headers... now we have to add them in any case to make all
interoperable.
PR: https://github.com/opnsense/core/issues/2535
2018-07-15 12:20:17 +02:00
Fabian Franz BSc
15534011f0
Nextcloud password: allow to set a separeate pw and allow no encryption ( #2545 )
2018-07-15 11:27:04 +02:00
Franco Fichtner
fdc52df6d5
src: style sweep
2018-07-14 18:04:49 +00:00
Daniil Baturin
7c833ea3d6
Add a special case for /31 networks to openvpn_get_interface_ip() (another instance of #2529 ).
2018-07-14 19:50:59 +02:00
Ad Schellevis
15fa1eb0d4
plist
2018-07-14 17:13:26 +02:00
Ad Schellevis
9a5d641943
Firewall/alias, validate before removal for https://github.com/opnsense/core/issues/1858
...
Raise an exception when the alias seems to be used and avoid removal, keep behaviour like it was in the legacy code for now.
Eventually it would be better to replace all alias usage for uuids, but that would be too tricky to implement at once.
2018-07-14 17:06:50 +02:00
Ad Schellevis
8bc7c10d59
MVC, errorhandling, in some cases it's way easier to just raise an exception when an action may not be executed.
...
If you raise an exception now, it's always called an "API exception".
This commit adds a "UserException" type which lets the developer set a title for the message and passes this to the endpoint.
2018-07-14 16:46:40 +02:00
Franco Fichtner
91ed6de294
dhcp: remvoe excess whitespace
2018-07-14 14:13:13 +02:00
Franco Fichtner
063a425f27
firewall: IPv6 does not have network address restrictions; closes #2543
2018-07-14 10:49:19 +00:00
Franco Fichtner
e1b8871961
firewall: typo in previous
2018-07-14 12:03:11 +02:00
Franco Fichtner
80b9a81681
firewall: make NPTv6 aware of 6rd and 6to4; closes #2538
2018-07-14 10:00:29 +00:00
