12224 Commits

Author SHA1 Message Date
Ad Schellevis
80d7eb0ea7 Routing-gateways: select current IPv6 field in getInterfaceGateway(), closes https://github.com/opnsense/core/issues/4494 2020-12-01 14:12:48 +01:00
Ad Schellevis
c02155630e Firewall: minor validation issue (ipv6-icmp inet), closes https://github.com/opnsense/core/issues/4493 2020-11-30 17:10:27 +01:00
Franco Fichtner
4adddc00eb src: style sweep 2020-11-30 14:04:20 +01:00
Franco Fichtner
2c5dfb6a50 pkg: fix plist 2020-11-30 11:04:37 +01:00
Ad Schellevis
7be00bc067
NAT in IPsec with multiple Phase2 (#4492)
* IPsec: cleanup phase2 parsing and implement per reqid spd policies. for https://github.com/opnsense/core/issues/4460

* IPsec: persist reqid and (try to) maintain previous choices for route-based IPsec while doing so.

In order for this to work we need a legacy config migration, which we stick to the IPsec model used to store key-pairs. (trigger via /usr/local/opnsense/mvc/script/run_migrations.php)
The phase2 edit should (try to) assure new and modified entries are being equipt with a reqid, in order to use them in the policy mappings and interface generation (route-based).

Ideally we should add this feature when a new kernel arrives since changing reqid's on existing connections and setkey policies will likely have side-affects.

------

Sponsored by m.a.x. it
2020-11-30 09:42:03 +01:00
Ad Schellevis
650c17bdf0 Merge branch 'cloudfence-opnsense_block_outside_dns' 2020-11-28 10:02:50 +01:00
Ad Schellevis
19a39dc8b3 OpenVPN server: hide "openvpn_add_dhcpopts" fields when not parsed via the backend. while pulling in https://github.com/opnsense/core/pull/4475
ref 8b5a54e030/src/etc/inc/plugins.inc.d/openvpn.inc (L764-L772)
2020-11-28 10:00:00 +01:00
vnxme
30327a8518 DHCP: Add min-secs option for each subnet (#4486) 2020-11-28 09:48:32 +01:00
Ad Schellevis
e8c48067b6 interfaces: when interface mss is set, split mss calculation into a variant for IPv4 and one for IPV6. fixes incorrect header size for IPv6 (60 instead of 40 bytes). closes https://github.com/opnsense/core/issues/4484 2020-11-28 09:48:32 +01:00
Gabriel Mazzocato
c48ee6251a Update services_dhcpv6.php (#4489) 2020-11-28 09:48:32 +01:00
Ad Schellevis
f1afcae521 Logging: add "step into" icon on log lines. Since we always read the complete file, we can know the actual row number of a search result.
When investigating log files it's often practical to see the context of a message after searching for it. This feature offers the ability to go to the page in question by clicking on a filtered result.
2020-11-28 09:48:32 +01:00
Ad Schellevis
e379415a6c Web proxy: throw startup error to user to ease support. closes https://github.com/opnsense/core/issues/4483 2020-11-28 09:48:32 +01:00
kulikov-a
3d8fa354d3 SysInfo widget: add current CPU load progress-bar
refers to FR: https://github.com/opnsense/core/issues/4480
2020-11-28 09:48:32 +01:00
Franco Fichtner
12c3a4e508 system: fix PHP warning #4474 2020-11-28 09:48:32 +01:00
Ad Schellevis
147140f1e4 User management: add button to request a new TOTP seed on system_usermanager_passwordmg.php for https://github.com/opnsense/core/issues/4474 2020-11-28 09:48:32 +01:00
Franco Fichtner
65722f495d system: whitespaces :D 2020-11-28 09:48:32 +01:00
Franco Fichtner
e8bd614ffd pkg: fix plist 2020-11-28 09:48:32 +01:00
Ad Schellevis
13af12c67d whitespace 2020-11-28 09:48:32 +01:00
Ad Schellevis
19c4b5dc61 whitespace system_advanced_admin.php 2020-11-28 09:48:32 +01:00
Ad Schellevis
f73aa36ce3 User management: add user OTP seed option in System->Settings->Administration. for https://github.com/opnsense/core/issues/4474 2020-11-28 09:48:32 +01:00
Ad Schellevis
323cbfd81d IDPS: bug in policy parser preventing ruleset filter to function. for https://github.com/opnsense/core/issues/4445 2020-11-28 09:48:32 +01:00
Ad Schellevis
a7a3d1f2d4 IDPS: deprecate filter option on file downloads in favour of new policy option. migrates exsting filters to policies while there. for https://github.com/opnsense/core/issues/4445 2020-11-28 09:48:32 +01:00
Ad Schellevis
54663d2cb1 Firewall: live-log, allow larger selection. closes https://github.com/opnsense/core/issues/4476 2020-11-28 09:48:32 +01:00
vnxme
28caaf7342
DHCP: Add min-secs option for each subnet (#4486) 2020-11-28 09:44:00 +01:00
Ad Schellevis
d70a1aae03 interfaces: when interface mss is set, split mss calculation into a variant for IPv4 and one for IPV6. fixes incorrect header size for IPv6 (60 instead of 40 bytes). closes https://github.com/opnsense/core/issues/4484 2020-11-27 18:46:44 +01:00
Gabriel Mazzocato
4f8cc143b3
Update services_dhcpv6.php (#4489) 2020-11-27 17:32:37 +01:00
Ad Schellevis
0841c5a877 Logging: add "step into" icon on log lines. Since we always read the complete file, we can know the actual row number of a search result.
When investigating log files it's often practical to see the context of a message after searching for it. This feature offers the ability to go to the page in question by clicking on a filtered result.
2020-11-25 18:04:24 +01:00
Ad Schellevis
36e03d8681 Web proxy: throw startup error to user to ease support. closes https://github.com/opnsense/core/issues/4483 2020-11-25 16:07:24 +01:00
Ad Schellevis
235ef7f8e8 Merge branch 'kulikov-a-patch-4' 2020-11-25 15:22:04 +01:00
kulikov-a
26b77c2176
SysInfo widget: add current CPU load progress-bar
refers to FR: https://github.com/opnsense/core/issues/4480
2020-11-25 16:10:16 +03:00
Franco Fichtner
3158956a27 system: fix PHP warning #4474 2020-11-25 08:53:55 +01:00
Ad Schellevis
e162f07797 User management: add button to request a new TOTP seed on system_usermanager_passwordmg.php for https://github.com/opnsense/core/issues/4474 2020-11-24 14:19:09 +01:00
Franco Fichtner
8fb1a11e33 system: whitespaces :D 2020-11-24 10:33:46 +01:00
Franco Fichtner
4b125cb095 pkg: fix plist 2020-11-24 10:21:26 +01:00
Ad Schellevis
96ae155a39 whitespace 2020-11-23 20:09:56 +01:00
Ad Schellevis
d70171bdc5 whitespace system_advanced_admin.php 2020-11-23 20:08:59 +01:00
Ad Schellevis
2c6da85d42 User management: add user OTP seed option in System->Settings->Administration. for https://github.com/opnsense/core/issues/4474 2020-11-23 18:37:35 +01:00
Ad Schellevis
74a64ce187 IDPS: bug in policy parser preventing ruleset filter to function. for https://github.com/opnsense/core/issues/4445 2020-11-23 17:48:10 +01:00
Ad Schellevis
1221542a43 IDPS: deprecate filter option on file downloads in favour of new policy option. migrates exsting filters to policies while there. for https://github.com/opnsense/core/issues/4445 2020-11-23 16:42:41 +01:00
Ad Schellevis
7cb67a90e1 Firewall: live-log, allow larger selection. closes https://github.com/opnsense/core/issues/4476 2020-11-21 23:59:20 +01:00
Julio Camargo
8902734bf4 ref. issue #4422 - added block-outside-dns 2020-11-20 11:42:10 -03:00
Franco Fichtner
6e2375b044 src: fix a couple of copyright header misalignments 2020-11-19 16:26:23 +01:00
Ad Schellevis
6ae303f14d IPsec-VTI: allow mixed v4/v6. experiment for https://github.com/opnsense/core/issues/4472 2020-11-18 17:31:54 +01:00
Ad Schellevis
9924a2c811 System/gateways: there's no reason to enforce alias names in gateways. closes https://github.com/opnsense/core/issues/4470 2020-11-17 16:22:16 +01:00
Julio Cesar Camargo (JCC)
dae2efeee1
Add GSuite and Youtube filtering in proxy (#4425) 2020-11-17 15:51:24 +01:00
Ad Schellevis
4632286c55 Proxy: add missing X-Forwarded-For header option, closes https://github.com/opnsense/core/issues/4467 2020-11-16 20:55:02 +01:00
Ad Schellevis
bb8c58a3a8 system/logging: simplify log format parsing 2020-11-13 22:28:37 +01:00
Franco Fichtner
512730bd1a system: syslog-ng again; fix this the hard way 2020-11-13 10:56:36 +01:00
Franco Fichtner
e6daf55d67 Revert "system: remove syslog-ng @version hint"
This reverts commit 9ed04c754b28c8b9abd48e78a3af1946ef8d32a5.
2020-11-13 10:45:29 +01:00
Franco Fichtner
a05612603c Revert "system: break this, FreeBSD on the move already"
This reverts commit ff728e837cef2a6fe8a13b9b14269be0a89e9e95.
2020-11-13 10:45:24 +01:00