11433 Commits

Author SHA1 Message Date
Ad Schellevis
8917f1c06f sysctl: maxdgram --> 8192. closes https://github.com/opnsense/core/issues/3806 2019-11-14 08:57:05 +01:00
Franco Fichtner
b1702d0c0a firmware: duplicates stay in the config #1663
When we install "os-debug" it will deinstall "os-debug-devel" so
we should update our logic.
2019-11-12 08:59:52 +01:00
Ad Schellevis
fba3861477 IDS/syslog, missed a spot for https://github.com/opnsense/core/issues/3806 2019-11-12 08:30:37 +01:00
Franco Fichtner
7fe5fe52dc rc: whitespace noise 2019-11-12 07:05:23 +01:00
René Losert
16efb9aa34 use freebsd built in growfs script (#3810) 2019-11-12 07:01:54 +01:00
Franco Fichtner
ee73840e9c dpinger: back to where it was in April 2019
PR: #3693
2019-11-11 23:01:57 +01:00
Ad Schellevis
188c517a26 IDS: eve syslog, lower payload-buffer-size to prevent syslog size limit. for https://github.com/opnsense/core/issues/3806 2019-11-11 21:55:51 +01:00
stilez
0c35ffbb8d Add "type" field to self-doc. SPlit from PR#3812 (#3813) 2019-11-11 21:36:37 +01:00
Franco Fichtner
f0b348bca6 rc: since 11.2 fsck_ffs will actually return ERERUN error 2019-11-11 07:30:23 +01:00
Franco Fichtner
850760471e pkg: fix plist 2019-11-09 17:54:57 +01:00
Ad Schellevis
a219bf134f Traffic shaper: safeguard deletes, using https://github.com/opnsense/core/issues/1897 2019-11-08 18:51:25 +01:00
Ad Schellevis
d19ad59201 MVC: on ApiMutableModelControllerBase add opt-in parameter $internalModelUseSafeDelete to check for referential integrity before delete, throwing a UserException when the uuid is found inside a tag which logically originates from a model. (has a uuid attribute and a version attribute in one of its parents)
closes https://github.com/opnsense/core/issues/1897
2019-11-08 18:27:12 +01:00
Ad Schellevis
e1883f34ac MVC: refactor JsonKeyValueStoreField type, skip unit test since it depends on configd. for https://github.com/opnsense/core/issues/3252 2019-11-08 16:04:00 +01:00
Ad Schellevis
5324f35ceb MVC: refactor InterfaceField and add unit tests for https://github.com/opnsense/core/issues/3252 2019-11-08 15:29:13 +01:00
Ad Schellevis
10be0e4585 MVC: refactor CountryField and add unit test for https://github.com/opnsense/core/issues/3252 2019-11-08 14:32:19 +01:00
Ad Schellevis
50da9e3190 MVC: fix a validation bug while working on https://github.com/opnsense/core/issues/3252
InclusionIn() validation only works when using string, php seems to convert keys automatically, in which case the following input:

$data = ["101" => "abc", "102" => "cde"];

would lead to these keys:

array_keys($data) ==> [101, 102]

when validating if 101,100 is a valid item in the list InclusionIn() seems to think so....
2019-11-08 12:33:36 +01:00
Ad Schellevis
75a94d86f5 MVC: missed default validation message for https://github.com/opnsense/core/issues/3252 2019-11-08 12:18:55 +01:00
Ad Schellevis
9f579672b9 MVC: refactor AuthGroupField and add unit test for https://github.com/opnsense/core/issues/3252 2019-11-08 11:57:21 +01:00
Ad Schellevis
172f1aa1e9 MVC: cleanup debug info for https://github.com/opnsense/core/issues/3252 2019-11-08 11:56:25 +01:00
Ad Schellevis
def2513344 MVC: refactor AuthenticationServerField for https://github.com/opnsense/core/issues/3252 (unittest already in place) 2019-11-08 11:24:12 +01:00
Ad Schellevis
fdd95b6640 MVC: cleanup imports for https://github.com/opnsense/core/issues/3252 2019-11-08 11:23:16 +01:00
Ad Schellevis
f0e6e1e89f MVC: refactor ConfigdActionsField, skip unit test since we don't want to mock configd at the moment. for https://github.com/opnsense/core/issues/3252 2019-11-08 11:16:52 +01:00
Ad Schellevis
f5b5d0def7 MVC: refactor CertificateField and add unit test for https://github.com/opnsense/core/issues/3252 2019-11-08 11:07:02 +01:00
Ad Schellevis
72800ba34c MVC: refactor OptionField and add unit test for https://github.com/opnsense/core/issues/3252 2019-11-08 10:34:41 +01:00
Ad Schellevis
b2d84c812f MVC: add BaseListField type for https://github.com/opnsense/core/issues/3252 2019-11-08 10:33:00 +01:00
Ad Schellevis
d547bc48bc fix forceReload() closes https://github.com/opnsense/core/issues/3801 2019-11-08 10:06:38 +01:00
Ad Schellevis
01b74e60b1 Monit: disable unit test, since it can't be executed without an environment. Either fix in some future release or remove. 2019-11-08 09:54:07 +01:00
Ad Schellevis
e39474de90
Update CONTRIBUTING.md
add explicit timeout period
2019-11-07 17:08:41 +01:00
Ad Schellevis
196d462383 filter-list_counters skip empty lines, for https://github.com/opnsense/core/issues/3798 2019-11-07 09:26:45 +01:00
Ad Schellevis
8a83b3bb12 filter live log, ignore tag keyword in pfctl output. closes https://github.com/opnsense/core/issues/3796 2019-11-05 21:28:57 +01:00
Franco Fichtner
4c4da7dfed openvpn: move to shared device plugin spot
We already create interfaces on demand in interface_configure()
so it's ok to create remaining interfaces where IPsec and VXLAN
is done as well.
2019-11-04 08:31:29 +01:00
Franco Fichtner
11106c4990 vxlan: the idea was to have pluggable device code :)
While here change the expected device name from "vxlan.X" to "vxlanX",
since "." denotes the newer FreeBSD VLAN ID syntax on top of parent
devices (e.g. "igb0.12") and all devices should follow the regex of
"^[a-z]+[0-9]+".
2019-11-03 12:28:56 +01:00
Ad Schellevis
5db422e0cc VXLAN model version and proper description 2019-11-02 16:01:50 +01:00
Ad Schellevis
6628ae2e40
VXLAN support (#3787)
* VXLAN: hook vxlan_configure_interface to newwanip event, move interface (address) configuration responisibilty there as well. This might be a better spot for other device setups as well.
2019-11-01 21:25:27 +01:00
Franco Fichtner
c20b0083ef firmware: add /etc/remote to whitelist, NTP GPS uses it 2019-11-01 20:13:49 +01:00
Franco Fichtner
b97789b2d9 plugins: extend reach to "configurable" reject spots 2019-11-01 15:31:49 +01:00
Franco Fichtner
f2d6a44b4c plugins: add plugins_devices() facility for device plugging 2019-11-01 11:13:48 +01:00
Ad Schellevis
2afb3777b8 MVC: NetworkField type, add "NetMaskAllowed" option to validate on single addresses 2019-10-31 16:30:14 +01:00
Franco Fichtner
a2aec6c76e reporting: empty netflow egress default passes validation 2019-10-31 11:23:42 +01:00
Franco Fichtner
296a7e3c39 system: generate self-signed server certificate for web GUI 2019-10-31 10:13:09 +01:00
Franco Fichtner
48e0c47a96 interfaces: remove the "Directly send SOLICIT" option
We already do a more-or-less hybrid approach by starting rtsold
even if it isn't used at all.  Now we also have ISPs which do
not seem to send router advertisements after successful connect
so that the reconnect misses the HUP for dhcp6c to fix the
connectivity again.

To change that remove the option and its only conditional to
behave unconditionally which has few reasons to cause regressions.
2019-10-31 09:14:35 +01:00
Ad Schellevis
4465f108bf Proxy: fix validation, missed backreference 2019-10-30 15:36:11 +01:00
Ad Schellevis
5b159832eb Firmware: add "copy to clipboard" button in update textbox. 2019-10-30 13:22:20 +01:00
Franco Fichtner
f621e1ff3c system: small style update on previous 2019-10-30 10:36:30 +01:00
Ad Schellevis
875a1e2d4a authentication: extend opnsense-auth to respond with json encoded data when the authenticator received additional properties (such as framed ip addresses, groups, etc). needed for https://github.com/opnsense/core/issues/3266 should be a non-breaking change, since current authentication sequences only use the return code. 2019-10-30 10:25:01 +01:00
Franco Fichtner
f098b3a9ba pkg: suricata with RUST builtin doesn't work everywhere yet 2019-10-29 12:04:09 +01:00
Franco Fichtner
4e677c2b62 webproxy: indent 2019-10-29 11:02:59 +01:00
Franco Fichtner
ee0e6c2cef webproxy: constraint to proper place 2019-10-29 10:57:33 +01:00
Ad Schellevis
bb06e1a5e1
Switch backup to Google api php client v2 (#3778) 2019-10-29 10:34:23 +01:00
Franco Fichtner
900b23a97b unbound: add reload
PR: https://github.com/opnsense/plugins/pull/1554
2019-10-29 09:17:20 +01:00