13100 Commits

Author SHA1 Message Date
Ad Schellevis
8622b93c15 Interfaces / Diagnostics / Packet Capture - fix "PHP Warning: in_array() expects parameter 2 to be array, null given in /usr/local/www/diag_packet_capture.php on line 355" 2021-07-29 13:49:21 +02:00
braninl
9f60452eb9
Update AliasField.php to fix misspelling (#5122)
Fixed the misspelling of limitting to limiting.
2021-07-29 07:32:39 +02:00
Ad Schellevis
92f96b2aa0 Interfaces / Diagnostics / Packet Capture - easy (de)select all interfaces button, saves some work when trying to figure out where traffic is leaving. 2021-07-28 18:21:08 +02:00
Ad Schellevis
4738eb409e OpenVPN/Server - genkey format changed, leading to warnings. ref 0d80b562e4 2021-07-28 11:19:24 +02:00
Franco Fichtner
f331061387 firmware: changes for EoL of 21.1
o Remove revoked business fingerprints that were never used
o Revoke fingerprint for 21.1 as it is no longer needed
o Remove upgrade hint file to avoid development version upgrade loops
2021-07-27 16:04:57 +02:00
Franco Fichtner
10e25cdf87 firmware: final stepping stone 2021-07-27 07:55:55 +02:00
Franco Fichtner
4ae1555e07 firewall: change "proto" to "protonum" to avoid ambiguity 2021-07-23 09:02:22 +02:00
Franco Fichtner
538e2f04c2 firewall: update filterlog reader slightly
CARP in IPv4 and IPv6 uses the IP header's "ttl" or "hoplimit" so
that we use the same name for reading it to avoid duplication.
The values are the same in any case.

Change "flowlabel" to "flow" to avoid confusion with "label".

Change IP "version" to "ipversion" and consolidate CARP "version(2)"
into "version".
2021-07-23 08:14:36 +02:00
Franco Fichtner
1aeb520631 firewall: parse ridentifier as rid if != '0' #5016 2021-07-22 17:34:02 +02:00
Franco Fichtner
5979fb50e5 mvc: give a little more context on default error; closes #5061 2021-07-22 12:24:31 +02:00
Franco Fichtner
bf8604d9b8 plugins: widen error scope loosely related to #5061 2021-07-22 12:07:17 +02:00
Franco Fichtner
4bdc777bef mvc: catch all errors (including syntax error and class not found)
PR: https://github.com/opnsense/core/issues/5061
2021-07-22 11:56:46 +02:00
Franco Fichtner
8f5f53121e system: allow cron-based restarts of all [restart] providers; closes #5030 2021-07-22 10:42:13 +02:00
Franco Fichtner
5e860053e1 firmware: mask subscription in GUI output 2021-07-22 10:16:04 +02:00
kulikov-a
35b373407c
openvpn: check ipv4 tunnel prefix. v2 (#5114)
* wizard.inc: check ipv4 tunnel prefix
* vpn_openvpn_server.php: check ipv4 tunnel prefix
2021-07-22 09:02:55 +02:00
Ad Schellevis
be90cf00a6 Firewall / Diagnostics / States, Sessions - fix some minor glitches.
o mark unsortable columns
o fix type validations (avg=* isn't an int).
o better to return an empty structure than [], avoid JS errors in the frontend
2021-07-21 18:49:10 +02:00
kulikov-a
74ccf1683b
wizard.inc: make working rules (#5112) 2021-07-21 19:13:28 +02:00
Franco Fichtner
5028c93393 pkg: actually demote to warning 2021-07-21 09:20:29 +02:00
Franco Fichtner
ed4ffa894c pkg: give CORE_ABI hint anyway, remove safety belt
Just let it crash and burn worst case.

PR: https://forum.opnsense.org/index.php?topic=23996.0
2021-07-21 08:53:16 +02:00
Franco Fichtner
2e8269bc21 pkg: fix plist 2021-07-21 07:55:18 +02:00
Ad Schellevis
e4aa3e4f5e Firewall / Diagnostics - time to kill legacy diag_system_pftop.php and replace it with "Sessions", which offers insights into the top sessions on the firewall related to rules and network segments. 2021-07-20 21:53:33 +02:00
Franco Fichtner
75d91570a0 unbound: minimal cleanups, closes #4327 2021-07-20 20:52:45 +02:00
Franco Fichtner
07d7c28c80 unbound: shrink implementation of previous #4327 2021-07-20 17:23:59 +02:00
Franco Fichtner
3e66f270b1 unbound: migrate to single model #4327 2021-07-20 16:50:54 +02:00
Franco Fichtner
073681f895 mvc: allow to unset attribute via setAttributeValue
SimpleXML elements have no way of removing attributes so let
the base field do the work.
2021-07-20 16:46:58 +02:00
Franco Fichtner
8d20e2587d unbound: add qname-minimisation-strict option #4327
While here get rid of the "apply" dialog on this page at least.
Removing all dialogs is difficult with the pages and settings
cluttered in the static page area depending on each other.
2021-07-20 11:54:48 +02:00
Franco Fichtner
72e6ca2fee unbound: more refactoring, less pages, blacklist -> blocklist
PR: https://github.com/opnsense/core/issues/4327
2021-07-20 11:00:00 +02:00
Franco Fichtner
dac9a74479 interfaces: if it looks like SLAAC get rid of it
PR: http://forum.opnsense.org/index.php?topic=8985.0
2021-07-20 09:27:54 +02:00
Franco Fichtner
d6d0971677 unbound: integrade DoT grid; closes #5101
Extensive rewrite based on the original PR, but the models
have been merged into one Unbound.xml and the migration will
follow in the next commit.
2021-07-19 15:00:30 +02:00
Ad Schellevis
f5264d9085 usermanager - ldap import, prevent excessive config writes. 2021-07-16 14:07:05 +02:00
Ad Schellevis
e8079f0fcf usermanager - missing ldap import button (regression in 18ad4dbbd3) cc @fichtner 2021-07-16 14:00:44 +02:00
Franco Fichtner
83cd07eda4 firmware: add version/date header here as well 2021-07-14 09:22:46 +02:00
Franco Fichtner
376ee793c9 system: do not split password into multiple pieces
PR: https://forum.opnsense.org/index.php?topic=23640.0
2021-07-13 15:50:00 +02:00
Franco Fichtner
b1241aeb74 shell: fix IPv4 /31 assignment
PR: https://forum.opnsense.org/index.php?topic=23878.0
2021-07-13 13:56:44 +02:00
Franco Fichtner
11b5fe6e9c interfaces: deprecate SLAAC addresses on linkdown; closes #4929 2021-07-13 12:45:05 +02:00
Franco Fichtner
e8d7876d21 unbound: add 'unbound check' target for advanced options #4327 2021-07-13 12:27:14 +02:00
Franco Fichtner
354835abe7 interfaces: tiny cleanup 2021-07-13 12:26:35 +02:00
Franco Fichtner
4a1bc9f8b5 unbound: allow to retain cache; closes #2750 2021-07-13 11:21:01 +02:00
Franco Fichtner
d2a183a7a8 dhcp: check address family, not track address existence 2021-07-13 09:05:50 +02:00
Franco Fichtner
72bfc498da unbound: remove custom configuration support #4327
Since we have /usr/local/etc/unbound.opnsense.d/ now we can
go ahead with the removal of the GUI based "permanent workaround".
2021-07-09 14:06:45 +02:00
Franco Fichtner
a0e7b21e2b src: style sweep 2021-07-09 13:57:08 +02:00
Franco Fichtner
09f510fba2 unbound: fix /var MFS dilemma for DNSBL after boot; closes #4938
o Create a persistent directory to feed the unbound includes
o Move runtime data to /tmp directory

After reboot we use the old persistent list still available.

I am not sure if it's clear enough that the blacklists cannot
auto-update and therefore require a cron job or manual update
from the respective GUI page ("apply" essentially is "download
and apply").
2021-07-09 13:57:07 +02:00
rdd2
78c8be71d1
Enable group sync for LDAP servers, that do not return memberOf (#5082) 2021-07-08 13:09:27 +02:00
Franco Fichtner
b74b3799db system: fix deprecated warning
PR: https://forum.opnsense.org/index.php?topic=23822.0
2021-07-07 12:40:32 +02:00
Franco Fichtner
69c007ef07 rc: opnsense-beep melody database directory
An idea from the last refactoring: create a database directory
that holds the defaults as portable files with the ability to
invoke other user-created melodies as well as override the default
using ".local" suffix.
2021-07-07 07:59:25 +02:00
Franco Fichtner
0e7097cfb1 system: isvalidpid() is not required for a single killbypid() 2021-07-06 12:31:59 +02:00
Franco Fichtner
0f488a166b firewall: use permanent promiscuous mode for pflog0 2021-07-06 12:30:51 +02:00
Franco Fichtner
10a5313b47 make: shorten magic variable for common use with plugins 2021-07-06 09:05:44 +02:00
Franco Fichtner
4d95b990ec system: remove unused legacy log include 2021-07-05 09:51:47 +02:00
Franco Fichtner
986cea4f30 rc: annotate ip_change_kill_states situation 2021-07-04 10:04:18 +02:00