331 Commits

Author SHA1 Message Date
Franco Fichtner
897b2c96eb rc: add changelog fetch script for #341 2016-11-10 20:27:22 +01:00
Franco Fichtner
528866c5d0 proxy: rc.conf.d subdir for squid, only way to merge configs 2016-10-26 19:34:30 +02:00
Ad Schellevis
f864511762 (proxy) add basic auth support for remote ACL's, replace urllib2 with requests. 2016-10-17 22:13:37 +02:00
Ad Schellevis
58ca02846b (IDS) extend support for compressed files with "inline::" keyword to be able to download parts of an archive (required to download snort rules).
Change processing order to always stream data to tempfiles first, so we can reuse downloaded files (an archive scan isn't very expensive)
2016-10-16 19:26:55 +02:00
Ad Schellevis
fe81d2e887 (IDS) add support for compressed rule files, unpack *.rules into defined target filename 2016-10-16 16:54:05 +02:00
Franco Fichtner
b08d58270e src/opnsense: apply style here too 2016-09-25 10:03:21 +02:00
Ad Schellevis
f107116e7d ditch load_mac_manufacturer_table, replace with configd call 2016-09-15 15:21:04 +02:00
Ad Schellevis
cf34abbac4 (firmware) change loader.conf.local generation, as discussed with @fichtner 2016-09-09 09:43:06 +02:00
Ad Schellevis
6c7224072d missed an enter in the previous commit 2016-09-08 10:48:29 +02:00
Ad Schellevis
af66f0da7c (firmware) add configd "firmware loader" commands to control the contents of /boot/loader.conf.local
plugins can use this call to register new bootup parameters, new commands added:

configctl firmware loader show
configctl firmware loader rm <parameter>
configctl firmware loader edit <parameter> <value>
2016-09-08 10:44:55 +02:00
Ad Schellevis
5ec2101ac2 (insight) check database integrity before start, repair if broken 2016-08-07 16:10:19 +02:00
Franco Fichtner
4be8343259 src: switch robots meta to nofollow, noindex; closes #1089 2016-07-30 21:17:27 +02:00
Franco Fichtner
23930a8506 src: remove source maps and add sweep target; closes #1074 2016-07-27 08:27:35 +02:00
Ad Schellevis
0c42941315 (reporting/settings) option to flush all local netflow data. closes https://github.com/opnsense/core/issues/983 2016-07-25 17:33:49 +02:00
Ad Schellevis
b7657a6fdf (rrd) add configd "systemhealth flush" command, add flush single report. closes https://github.com/opnsense/core/issues/984 2016-07-24 12:54:38 +02:00
Ad Schellevis
2641694a20 (ips) remove obsolete rbn ruleset, closes https://github.com/opnsense/core/issues/1063 2016-07-23 09:04:12 +02:00
Franco Fichtner
f9e71141b3 firmware: don't run cleanups on minor operations 2016-07-23 08:06:03 +02:00
Ad Schellevis
0227b1231b (captiveportal) ignore incomplete mac entries 2016-07-15 10:08:15 +02:00
Ad Schellevis
2d9e600411 (ids) re-create database if table count doesn't match 2016-06-26 15:57:00 +02:00
Ad Schellevis
642cbe1cce (ids) add action selection in rules tab, extend rule query with installed_action to represent the running configuration. closes https://github.com/opnsense/core/issues/751 2016-06-26 15:47:04 +02:00
Ad Schellevis
3f4d694fe3 captive portal, increase timeout, sometimes 2 seconds may not be enough.
fix for:
PHP Warning:  SQLite3Stmt::execute(): Unable to execute statement: database is locked in /usr/local/opnsense/scripts/OPNsense/CaptivePortal/process_accounting_messages.php on line 68
2016-06-23 14:30:34 +02:00
Ad Schellevis
40e4bdc22e (ids) add option to drop/reset suricata log file (eve.json*), closes https://github.com/opnsense/core/issues/997 2016-06-09 21:35:22 +02:00
Franco Fichtner
96be50d41a firmware: backwards-compat for running script too 2016-06-01 14:07:08 +02:00
Franco Fichtner
5a3a3a8453 firmware: add running API action and reattach if possible; closes #646 2016-06-01 13:30:49 +02:00
Franco Fichtner
70998ed98b firmware: add locking layer 2016-06-01 13:30:49 +02:00
Franco Fichtner
266a1e87a0 firmware: hotfix cannot take more than one arg 2016-05-24 09:25:12 +02:00
Franco Fichtner
f05b35d9c2 firmware: oddly enough, this reversed order is the correct one 2016-05-22 14:44:44 +02:00
Franco Fichtner
3b63072285 firmware: add wrapper to catch stderr for #951 2016-05-22 14:37:07 +02:00
Ad Schellevis
6ae6e594d1 (ids) remove rbn-malvertisers.rules, closes https://github.com/opnsense/core/issues/954 2016-05-21 08:47:51 +02:00
Franco Fichtner
c598f2c8da firmware: allow stderr to reach the GUI progress window 2016-05-17 12:07:18 +02:00
Ad Schellevis
88a0b222ca (network insight) check if target table exists before fetching data 2016-05-08 09:49:29 +02:00
Ad Schellevis
9ff3fcc797 (captive portal) catch exception for process_accounting_messages.php 2016-04-28 17:01:35 +02:00
Ad Schellevis
16e3ddf2fa (ids) add test ruleset for suricata
enable the opnsense test ruleset and try to download the eicar virus:

http://www.eicar.org/download/eicar.com.txt

it should block (over http)

closes https://github.com/opnsense/core/issues/884
2016-04-28 16:40:03 +02:00
Ad Schellevis
b9aec139a5 (netflow, export) remove dependency 2016-04-22 17:31:10 +02:00
Ad Schellevis
60b543e5ee (network insight) fix previous 2016-04-22 16:27:19 +02:00
Ad Schellevis
bd70ec1132 (network insight) export in local time 2016-04-22 16:25:48 +02:00
Ad Schellevis
2bc8e64bb0 (network insight) add (raw) data export 2016-04-21 18:57:43 +02:00
Ad Schellevis
9cc65c1965 (netflow, flowd agg) lesser commits 2016-04-21 15:06:37 +02:00
Ad Schellevis
aa86307484 (netflow, flowd agg) skip 30 seconds aggregation for ports and sources (unused) 2016-04-21 15:03:43 +02:00
Ad Schellevis
0a89f8249e (filter) cleanup unused alias table, closes https://github.com/opnsense/core/issues/903 2016-04-21 09:49:02 +02:00
Ad Schellevis
3ee2d30366 (netflow, flowd agg) set FlowSourceAddrDetails to max 62 days 2016-04-20 16:30:20 +02:00
Ad Schellevis
8adc1d83bf (netflow, flowd aggregate) add profile support, replace deepcopy for cheaper copy 2016-04-20 15:47:34 +02:00
Ad Schellevis
8872e1c783 (netflow, flowd agg) use ifconfig for interface numbering 2016-04-20 14:22:29 +02:00
Ad Schellevis
73fcb8719f (proxy) cleanse cert output before writing 2016-04-20 11:51:11 +02:00
Ad Schellevis
08653da5ce (captiveportal) cleanse cert output before writing 2016-04-20 11:50:45 +02:00
Ad Schellevis
77944999a0 (netflow, flowd agg) add FlowSourceAddrDetails class for more detailed statistics 2016-04-19 17:17:19 +02:00
Ad Schellevis
e930cc479f (netflow, flowd agg) add last_seen (within timeslot) to aggregates 2016-04-19 17:14:32 +02:00
Ad Schellevis
fc72bf27f7 (network insight) utc in get_timeseries.py 2016-04-19 14:39:49 +02:00
Ad Schellevis
0468bfd1d0 (netflow, flowd agg) store dates in utc, accept multiple filters in get_top_data 2016-04-19 14:06:49 +02:00
Ad Schellevis
5e10c0d190 (netflow, flowd agg) add direction to source aggregate 2016-04-18 09:54:29 +02:00