12231 Commits

Author SHA1 Message Date
Ad Schellevis
854942b4e0 widgets: traffic graph, link issue. closes https://github.com/opnsense/core/issues/4511 2020-12-09 19:23:38 +01:00
Ad Schellevis
9679471d90 Auth: move ldap case insensitive search to ldap connector instead of using it only in the totp variant. for https://github.com/opnsense/core/issues/4451 2020-12-09 09:31:18 +01:00
Ad Schellevis
d16642cea6 fix crashreport, when syslog section is unset for some reason, save can trigger warnings like "PHP Warning: Illegal string offset 'disable_clog' in /usr/local/www/diag_logs_settings.php on line 92" 2020-12-08 20:17:21 +01:00
Ad Schellevis
be13b6f9e3 IDPS: minor fixes and improvements for new policy feature (https://github.com/opnsense/core/issues/4445).
o feedback matched policy so we can easily find affective choice in the rule tab
o remove installed_action, installed_status since these values aren't valid anymore
o while here, set <pre/> tag width to a maximum to avoid overflow in alert page

Since values need to be persisted in order to return on query requests, single rule edits can lead to a bit odd behaviour (not toggling until after apply), since modifications are advised to be performed using policies, we will keep this for now.
(the alternative is to hook apply after these changes, which also isn't a great solution)
2020-12-08 17:20:06 +01:00
Ad Schellevis
edf1e2e8e0 Auth: webui session usernames and case sensitivity. for https://github.com/opnsense/core/issues/4451 2020-12-06 19:29:19 +01:00
Gauss23
184b126cb1
DHCPv4: Removed the need for a static IP being outside of the pool (#4447) 2020-12-02 19:48:42 +01:00
Franco Fichtner
a2e954a63e system: unify CPU labels; stray span tag 2020-12-02 11:51:22 +01:00
Ad Schellevis
80d7eb0ea7 Routing-gateways: select current IPv6 field in getInterfaceGateway(), closes https://github.com/opnsense/core/issues/4494 2020-12-01 14:12:48 +01:00
Ad Schellevis
c02155630e Firewall: minor validation issue (ipv6-icmp inet), closes https://github.com/opnsense/core/issues/4493 2020-11-30 17:10:27 +01:00
Franco Fichtner
4adddc00eb src: style sweep 2020-11-30 14:04:20 +01:00
Franco Fichtner
2c5dfb6a50 pkg: fix plist 2020-11-30 11:04:37 +01:00
Ad Schellevis
7be00bc067
NAT in IPsec with multiple Phase2 (#4492)
* IPsec: cleanup phase2 parsing and implement per reqid spd policies. for https://github.com/opnsense/core/issues/4460

* IPsec: persist reqid and (try to) maintain previous choices for route-based IPsec while doing so.

In order for this to work we need a legacy config migration, which we stick to the IPsec model used to store key-pairs. (trigger via /usr/local/opnsense/mvc/script/run_migrations.php)
The phase2 edit should (try to) assure new and modified entries are being equipt with a reqid, in order to use them in the policy mappings and interface generation (route-based).

Ideally we should add this feature when a new kernel arrives since changing reqid's on existing connections and setkey policies will likely have side-affects.

------

Sponsored by m.a.x. it
2020-11-30 09:42:03 +01:00
Ad Schellevis
650c17bdf0 Merge branch 'cloudfence-opnsense_block_outside_dns' 2020-11-28 10:02:50 +01:00
Ad Schellevis
19a39dc8b3 OpenVPN server: hide "openvpn_add_dhcpopts" fields when not parsed via the backend. while pulling in https://github.com/opnsense/core/pull/4475
ref 8b5a54e030/src/etc/inc/plugins.inc.d/openvpn.inc (L764-L772)
2020-11-28 10:00:00 +01:00
vnxme
30327a8518 DHCP: Add min-secs option for each subnet (#4486) 2020-11-28 09:48:32 +01:00
Ad Schellevis
e8c48067b6 interfaces: when interface mss is set, split mss calculation into a variant for IPv4 and one for IPV6. fixes incorrect header size for IPv6 (60 instead of 40 bytes). closes https://github.com/opnsense/core/issues/4484 2020-11-28 09:48:32 +01:00
Gabriel Mazzocato
c48ee6251a Update services_dhcpv6.php (#4489) 2020-11-28 09:48:32 +01:00
Ad Schellevis
f1afcae521 Logging: add "step into" icon on log lines. Since we always read the complete file, we can know the actual row number of a search result.
When investigating log files it's often practical to see the context of a message after searching for it. This feature offers the ability to go to the page in question by clicking on a filtered result.
2020-11-28 09:48:32 +01:00
Ad Schellevis
e379415a6c Web proxy: throw startup error to user to ease support. closes https://github.com/opnsense/core/issues/4483 2020-11-28 09:48:32 +01:00
kulikov-a
3d8fa354d3 SysInfo widget: add current CPU load progress-bar
refers to FR: https://github.com/opnsense/core/issues/4480
2020-11-28 09:48:32 +01:00
Franco Fichtner
12c3a4e508 system: fix PHP warning #4474 2020-11-28 09:48:32 +01:00
Ad Schellevis
147140f1e4 User management: add button to request a new TOTP seed on system_usermanager_passwordmg.php for https://github.com/opnsense/core/issues/4474 2020-11-28 09:48:32 +01:00
Franco Fichtner
65722f495d system: whitespaces :D 2020-11-28 09:48:32 +01:00
Franco Fichtner
e8bd614ffd pkg: fix plist 2020-11-28 09:48:32 +01:00
Ad Schellevis
13af12c67d whitespace 2020-11-28 09:48:32 +01:00
Ad Schellevis
19c4b5dc61 whitespace system_advanced_admin.php 2020-11-28 09:48:32 +01:00
Ad Schellevis
f73aa36ce3 User management: add user OTP seed option in System->Settings->Administration. for https://github.com/opnsense/core/issues/4474 2020-11-28 09:48:32 +01:00
Ad Schellevis
323cbfd81d IDPS: bug in policy parser preventing ruleset filter to function. for https://github.com/opnsense/core/issues/4445 2020-11-28 09:48:32 +01:00
Ad Schellevis
a7a3d1f2d4 IDPS: deprecate filter option on file downloads in favour of new policy option. migrates exsting filters to policies while there. for https://github.com/opnsense/core/issues/4445 2020-11-28 09:48:32 +01:00
Ad Schellevis
54663d2cb1 Firewall: live-log, allow larger selection. closes https://github.com/opnsense/core/issues/4476 2020-11-28 09:48:32 +01:00
vnxme
28caaf7342
DHCP: Add min-secs option for each subnet (#4486) 2020-11-28 09:44:00 +01:00
Ad Schellevis
d70a1aae03 interfaces: when interface mss is set, split mss calculation into a variant for IPv4 and one for IPV6. fixes incorrect header size for IPv6 (60 instead of 40 bytes). closes https://github.com/opnsense/core/issues/4484 2020-11-27 18:46:44 +01:00
Gabriel Mazzocato
4f8cc143b3
Update services_dhcpv6.php (#4489) 2020-11-27 17:32:37 +01:00
Ad Schellevis
0841c5a877 Logging: add "step into" icon on log lines. Since we always read the complete file, we can know the actual row number of a search result.
When investigating log files it's often practical to see the context of a message after searching for it. This feature offers the ability to go to the page in question by clicking on a filtered result.
2020-11-25 18:04:24 +01:00
Ad Schellevis
36e03d8681 Web proxy: throw startup error to user to ease support. closes https://github.com/opnsense/core/issues/4483 2020-11-25 16:07:24 +01:00
Ad Schellevis
235ef7f8e8 Merge branch 'kulikov-a-patch-4' 2020-11-25 15:22:04 +01:00
kulikov-a
26b77c2176
SysInfo widget: add current CPU load progress-bar
refers to FR: https://github.com/opnsense/core/issues/4480
2020-11-25 16:10:16 +03:00
Franco Fichtner
3158956a27 system: fix PHP warning #4474 2020-11-25 08:53:55 +01:00
Ad Schellevis
e162f07797 User management: add button to request a new TOTP seed on system_usermanager_passwordmg.php for https://github.com/opnsense/core/issues/4474 2020-11-24 14:19:09 +01:00
Franco Fichtner
8fb1a11e33 system: whitespaces :D 2020-11-24 10:33:46 +01:00
Franco Fichtner
4b125cb095 pkg: fix plist 2020-11-24 10:21:26 +01:00
Ad Schellevis
96ae155a39 whitespace 2020-11-23 20:09:56 +01:00
Ad Schellevis
d70171bdc5 whitespace system_advanced_admin.php 2020-11-23 20:08:59 +01:00
Ad Schellevis
2c6da85d42 User management: add user OTP seed option in System->Settings->Administration. for https://github.com/opnsense/core/issues/4474 2020-11-23 18:37:35 +01:00
Ad Schellevis
74a64ce187 IDPS: bug in policy parser preventing ruleset filter to function. for https://github.com/opnsense/core/issues/4445 2020-11-23 17:48:10 +01:00
Ad Schellevis
1221542a43 IDPS: deprecate filter option on file downloads in favour of new policy option. migrates exsting filters to policies while there. for https://github.com/opnsense/core/issues/4445 2020-11-23 16:42:41 +01:00
Ad Schellevis
7cb67a90e1 Firewall: live-log, allow larger selection. closes https://github.com/opnsense/core/issues/4476 2020-11-21 23:59:20 +01:00
Julio Camargo
8902734bf4 ref. issue #4422 - added block-outside-dns 2020-11-20 11:42:10 -03:00
Franco Fichtner
6e2375b044 src: fix a couple of copyright header misalignments 2020-11-19 16:26:23 +01:00
Ad Schellevis
6ae303f14d IPsec-VTI: allow mixed v4/v6. experiment for https://github.com/opnsense/core/issues/4472 2020-11-18 17:31:54 +01:00