9936 Commits

Author SHA1 Message Date
Ad Schellevis
813595af4f fix previous, https://github.com/opnsense/core/issues/2964 2018-11-27 12:50:45 +01:00
Ad Schellevis
8fdaf264de Network insight, support custom configuration in flowd_aggregate_metadata.py for https://github.com/opnsense/core/issues/2964 2018-11-27 10:43:16 +01:00
Ad Schellevis
4e69e5923b Network insight, cleanup. -c vs --config for https://github.com/opnsense/core/issues/2964 2018-11-27 10:30:06 +01:00
Franco Fichtner
7b19321cb9 src: fix previous style 2018-11-27 07:28:57 +01:00
Ad Schellevis
7db9d0ed96 OpenVPN export, add TheGreenBow format, for https://github.com/opnsense/core/issues/2787 2018-11-26 21:40:16 +01:00
Ad Schellevis
d711ac49e1 minor regression in https://github.com/opnsense/core/issues/2787, last template selection got lost. 2018-11-26 17:08:29 +01:00
Michael
a890879a54 move bump_step1 down (#2973)
If sslurlonly is 0 "ssl_bump peek bump_step1 all" is listed twice.
Might be cosmetic only since it's working though ...
2018-11-26 16:10:35 +01:00
Ad Schellevis
8cd7657d6b ditch vpn_openvpn_export.php in favour of https://github.com/opnsense/core/issues/2787 2018-11-26 15:31:22 +01:00
Ad Schellevis
62a62a4309 plist for https://github.com/opnsense/core/issues/2787 2018-11-26 15:27:16 +01:00
Ad Schellevis
c13735237a OpenVPN export, add Viscosity format for https://github.com/opnsense/core/issues/2787
The old visc format will be removed, as visz is supported on all platforms
2018-11-26 15:20:09 +01:00
Franco Fichtner
5816df234e mvc: indent 2018-11-26 08:56:53 +01:00
Franco Fichtner
4bd4990593 www: inline single-use *cmp() functions 2018-11-26 08:10:03 +01:00
Franco Fichtner
1d9ef3cb0e dnsmasq: pretty up tables 2018-11-26 07:58:27 +01:00
Franco Fichtner
5cf5e5974a dnsmasq: test all options, unify style 2018-11-26 07:26:37 +01:00
Franco Fichtner
9dae2099b5 ipsec: for previous 2018-11-26 00:01:49 +01:00
Franco Fichtner
14e0e4952e ipsec: broken after cleanup 2018-11-25 23:59:01 +01:00
Franco Fichtner
a5e1e4bf1c interfaces: VLAN cleanup 2018-11-25 23:51:47 +01:00
Franco Fichtner
b94b00212f system: small cleanups / indent 2018-11-25 23:36:49 +01:00
Franco Fichtner
63e16c418b firewall: small adjustments to match previous 2018-11-25 23:29:59 +01:00
opnsenseuser
8ea6b72a03 Firewall:NAT:Port Forward - missing (disabled Linked rule) - fix
PR: https://github.com/opnsense/core/issues/2968
2018-11-25 23:29:59 +01:00
Franco Fichtner
3714302125 ui: another regression, change placeholder text to real text
In most cases the "placeholder" is a valid value so it doesn't
make sense to mark it as something less because that would mean
the user attention is drawn to it and more often than not these
unselected values are the good default behaviour so we might
draw users away from well-defined scenarios into support-heavy
edge cases.

Secondly, it looks more like disabled than placeholder.
2018-11-25 12:21:48 +01:00
Franco Fichtner
3ad1be040c src: style and whitespace sweep 2018-11-25 12:10:03 +01:00
Franco Fichtner
f4fad63aac unbound: avoid historic "DNS Resolver" mentions; closes #2969
This also helps with page clarity as we don't mention it in labels
so much anymore.  While here, minor tweaks to the previous changes
of Dnsmasq for similar effect.
2018-11-25 12:07:43 +01:00
Ad Schellevis
1680c1e1b0 Network insight, aggregator support single_pass (exit when there's no new data left), for https://github.com/opnsense/core/issues/2964 2018-11-24 21:40:13 +01:00
Ad Schellevis
c7660ca43f Network insight, another minor side affect of https://github.com/opnsense/core/issues/2964 export misses timestamp convert. 2018-11-24 16:10:09 +01:00
Ad Schellevis
9222f5e4de fix regression in previous, for https://github.com/opnsense/core/issues/2964 2018-11-24 16:03:06 +01:00
Franco Fichtner
c3b07c466a unbound: only use IPv6 when enabled and IPv4 is not preferred; closes #2913
A general disable seems reasonable but the IPv4 prefer does not really
mean we should diable IPv6 here.  In the ticket it was indicated that
Unbound does funky stuff in this scenario so to avoid further violation
of POLA it is disabled as well then.
2018-11-24 15:55:16 +01:00
Ad Schellevis
02c5bb692d Network insight, missing import for https://github.com/opnsense/core/issues/2964 2018-11-24 15:47:50 +01:00
Ad Schellevis
dc38875202 Network insight, cleanups and restructures for https://github.com/opnsense/core/issues/2964
Adds configuration yaml support, using a simple config yaml containing the previously hardcoded values:

```
library_path:  /path/to/core/src/opnsense/site-python
flowd_source: /path/to/flowd.log
database_dir: /path/to/netflow
pid_filename: /path/to/netflow.pid
```

Startup using local config, using:

```
flowd_aggregate.py -c my_config.yaml --console
```

Further then path relocations, this commit should not contain any new features. The other scripts, not related to the daemon have not been altered (yet)
2018-11-24 15:44:22 +01:00
Franco Fichtner
47d4b9b1ed unbound: same advanced change here 2018-11-24 15:38:23 +01:00
Franco Fichtner
a4b4db95b3 dnsmasq: add DNSSEC option, several cleanups; closes #2275
* As discussed a long time ago stop mentioning "DNS Forwarder"
* Remove strong tags from Dnsmasq form
* DNSSEC option, off by default
* Some GUI elements flattened
* Advanced button tweaks

Tested using: http://en.conn.internet.nl/connection/
2018-11-24 15:30:19 +01:00
Ad Schellevis
b52e139d34 fix typo 2018-11-24 15:08:24 +01:00
Franco Fichtner
c28fb86f37 interfaces: add note about CGN addresses included in private range; closes #2880 2018-11-24 14:15:41 +01:00
Franco Fichtner
03ef2ff81e system: tiny refactor 2018-11-24 13:20:16 +01:00
Franco Fichtner
0860755e3b firewall: same same, but different
filter_configure_sync() already calls filter_pflog_start().
2018-11-24 13:06:04 +01:00
Franco Fichtner
06151559bd system: top part of default gatway group switching #2279 2018-11-24 12:48:35 +01:00
Franco Fichtner
1adba66c2a ui: fix bootstrap-select width missed in #2939 2018-11-24 11:26:31 +01:00
René
0ef7222e28 sidebar - short fixes (#2959) 2018-11-24 10:04:24 +01:00
Michael Steenbeek
4d69429c30 Fix passing SANs to OpenSSL when generating CSRs (#2967) 2018-11-23 17:45:06 +01:00
Franco Fichtner
c99cfaa006 src: more manual cleanups 2018-11-23 14:50:53 +01:00
Franco Fichtner
559e8e79e2 pkg: fix plist 2018-11-23 14:37:42 +01:00
Michael Steenbeek
7ad3d8dff6 Replace some trivial double quotes with single ones 2018-11-23 14:36:44 +01:00
Michael Steenbeek
19ce1c57a4 Replace uncommon <> notation with != 2018-11-23 14:36:44 +01:00
Michael Steenbeek
53a17f9928 Add migration code for IDS rules with GeoIP settings (#2965) 2018-11-23 14:28:44 +01:00
Franco Fichtner
cd9630897f wizard: correct header 2018-11-23 10:41:32 +01:00
Michael Steenbeek
552fed10d7 Fix HTML errors (#2943) 2018-11-23 10:38:39 +01:00
Franco Fichtner
1bfc8ef5df system: typos in css 2018-11-23 10:30:39 +01:00
Frank Wall
2401eabaf0 firewall: ignore empty values in alias migration (#2958) 2018-11-23 08:17:25 +01:00
Franco Fichtner
c7b18721ce system: add link-local routes with correct scope #2561 2018-11-23 07:19:36 +01:00
Franco Fichtner
8084508c3f captive portal: work around renewed ordering issue; closes #2956 2018-11-22 22:14:58 +01:00