Franco Fichtner
897b2c96eb
rc: add changelog fetch script for #341
2016-11-10 20:27:22 +01:00
Franco Fichtner
528866c5d0
proxy: rc.conf.d subdir for squid, only way to merge configs
2016-10-26 19:34:30 +02:00
Ad Schellevis
f864511762
(proxy) add basic auth support for remote ACL's, replace urllib2 with requests.
2016-10-17 22:13:37 +02:00
Ad Schellevis
58ca02846b
(IDS) extend support for compressed files with "inline::" keyword to be able to download parts of an archive (required to download snort rules).
...
Change processing order to always stream data to tempfiles first, so we can reuse downloaded files (an archive scan isn't very expensive)
2016-10-16 19:26:55 +02:00
Ad Schellevis
fe81d2e887
(IDS) add support for compressed rule files, unpack *.rules into defined target filename
2016-10-16 16:54:05 +02:00
Franco Fichtner
b08d58270e
src/opnsense: apply style here too
2016-09-25 10:03:21 +02:00
Ad Schellevis
f107116e7d
ditch load_mac_manufacturer_table, replace with configd call
2016-09-15 15:21:04 +02:00
Ad Schellevis
cf34abbac4
(firmware) change loader.conf.local generation, as discussed with @fichtner
2016-09-09 09:43:06 +02:00
Ad Schellevis
6c7224072d
missed an enter in the previous commit
2016-09-08 10:48:29 +02:00
Ad Schellevis
af66f0da7c
(firmware) add configd "firmware loader" commands to control the contents of /boot/loader.conf.local
...
plugins can use this call to register new bootup parameters, new commands added:
configctl firmware loader show
configctl firmware loader rm <parameter>
configctl firmware loader edit <parameter> <value>
2016-09-08 10:44:55 +02:00
Ad Schellevis
5ec2101ac2
(insight) check database integrity before start, repair if broken
2016-08-07 16:10:19 +02:00
Franco Fichtner
4be8343259
src: switch robots meta to nofollow, noindex; closes #1089
2016-07-30 21:17:27 +02:00
Franco Fichtner
23930a8506
src: remove source maps and add sweep target; closes #1074
2016-07-27 08:27:35 +02:00
Ad Schellevis
0c42941315
(reporting/settings) option to flush all local netflow data. closes https://github.com/opnsense/core/issues/983
2016-07-25 17:33:49 +02:00
Ad Schellevis
b7657a6fdf
(rrd) add configd "systemhealth flush" command, add flush single report. closes https://github.com/opnsense/core/issues/984
2016-07-24 12:54:38 +02:00
Ad Schellevis
2641694a20
(ips) remove obsolete rbn ruleset, closes https://github.com/opnsense/core/issues/1063
2016-07-23 09:04:12 +02:00
Franco Fichtner
f9e71141b3
firmware: don't run cleanups on minor operations
2016-07-23 08:06:03 +02:00
Ad Schellevis
0227b1231b
(captiveportal) ignore incomplete mac entries
2016-07-15 10:08:15 +02:00
Ad Schellevis
2d9e600411
(ids) re-create database if table count doesn't match
2016-06-26 15:57:00 +02:00
Ad Schellevis
642cbe1cce
(ids) add action selection in rules tab, extend rule query with installed_action to represent the running configuration. closes https://github.com/opnsense/core/issues/751
2016-06-26 15:47:04 +02:00
Ad Schellevis
3f4d694fe3
captive portal, increase timeout, sometimes 2 seconds may not be enough.
...
fix for:
PHP Warning: SQLite3Stmt::execute(): Unable to execute statement: database is locked in /usr/local/opnsense/scripts/OPNsense/CaptivePortal/process_accounting_messages.php on line 68
2016-06-23 14:30:34 +02:00
Ad Schellevis
40e4bdc22e
(ids) add option to drop/reset suricata log file (eve.json*), closes https://github.com/opnsense/core/issues/997
2016-06-09 21:35:22 +02:00
Franco Fichtner
96be50d41a
firmware: backwards-compat for running script too
2016-06-01 14:07:08 +02:00
Franco Fichtner
5a3a3a8453
firmware: add running API action and reattach if possible; closes #646
2016-06-01 13:30:49 +02:00
Franco Fichtner
70998ed98b
firmware: add locking layer
2016-06-01 13:30:49 +02:00
Franco Fichtner
266a1e87a0
firmware: hotfix cannot take more than one arg
2016-05-24 09:25:12 +02:00
Franco Fichtner
f05b35d9c2
firmware: oddly enough, this reversed order is the correct one
2016-05-22 14:44:44 +02:00
Franco Fichtner
3b63072285
firmware: add wrapper to catch stderr for #951
2016-05-22 14:37:07 +02:00
Ad Schellevis
6ae6e594d1
(ids) remove rbn-malvertisers.rules, closes https://github.com/opnsense/core/issues/954
2016-05-21 08:47:51 +02:00
Franco Fichtner
c598f2c8da
firmware: allow stderr to reach the GUI progress window
2016-05-17 12:07:18 +02:00
Ad Schellevis
88a0b222ca
(network insight) check if target table exists before fetching data
2016-05-08 09:49:29 +02:00
Ad Schellevis
9ff3fcc797
(captive portal) catch exception for process_accounting_messages.php
2016-04-28 17:01:35 +02:00
Ad Schellevis
16e3ddf2fa
(ids) add test ruleset for suricata
...
enable the opnsense test ruleset and try to download the eicar virus:
http://www.eicar.org/download/eicar.com.txt
it should block (over http)
closes https://github.com/opnsense/core/issues/884
2016-04-28 16:40:03 +02:00
Ad Schellevis
b9aec139a5
(netflow, export) remove dependency
2016-04-22 17:31:10 +02:00
Ad Schellevis
60b543e5ee
(network insight) fix previous
2016-04-22 16:27:19 +02:00
Ad Schellevis
bd70ec1132
(network insight) export in local time
2016-04-22 16:25:48 +02:00
Ad Schellevis
2bc8e64bb0
(network insight) add (raw) data export
2016-04-21 18:57:43 +02:00
Ad Schellevis
9cc65c1965
(netflow, flowd agg) lesser commits
2016-04-21 15:06:37 +02:00
Ad Schellevis
aa86307484
(netflow, flowd agg) skip 30 seconds aggregation for ports and sources (unused)
2016-04-21 15:03:43 +02:00
Ad Schellevis
0a89f8249e
(filter) cleanup unused alias table, closes https://github.com/opnsense/core/issues/903
2016-04-21 09:49:02 +02:00
Ad Schellevis
3ee2d30366
(netflow, flowd agg) set FlowSourceAddrDetails to max 62 days
2016-04-20 16:30:20 +02:00
Ad Schellevis
8adc1d83bf
(netflow, flowd aggregate) add profile support, replace deepcopy for cheaper copy
2016-04-20 15:47:34 +02:00
Ad Schellevis
8872e1c783
(netflow, flowd agg) use ifconfig for interface numbering
2016-04-20 14:22:29 +02:00
Ad Schellevis
73fcb8719f
(proxy) cleanse cert output before writing
2016-04-20 11:51:11 +02:00
Ad Schellevis
08653da5ce
(captiveportal) cleanse cert output before writing
2016-04-20 11:50:45 +02:00
Ad Schellevis
77944999a0
(netflow, flowd agg) add FlowSourceAddrDetails class for more detailed statistics
2016-04-19 17:17:19 +02:00
Ad Schellevis
e930cc479f
(netflow, flowd agg) add last_seen (within timeslot) to aggregates
2016-04-19 17:14:32 +02:00
Ad Schellevis
fc72bf27f7
(network insight) utc in get_timeseries.py
2016-04-19 14:39:49 +02:00
Ad Schellevis
0468bfd1d0
(netflow, flowd agg) store dates in utc, accept multiple filters in get_top_data
2016-04-19 14:06:49 +02:00
Ad Schellevis
5e10c0d190
(netflow, flowd agg) add direction to source aggregate
2016-04-18 09:54:29 +02:00