8045 Commits

Author SHA1 Message Date
Ad Schellevis
8af5e4da01 Firewall/Nat, rule logic. better to force spacing in ruleToText() to prevent different pf command's from sticking together. for https://github.com/opnsense/core/issues/1326 2017-12-29 11:01:50 +01:00
Franco Fichtner
c1d54e3e1e filter: simplify scrub code 2017-12-29 10:49:31 +01:00
Ad Schellevis
457e8cd87d Firewall/rules engine, small regression in removal of old interface aliases, scrubbing still seemed to be using it.. 2017-12-29 10:36:39 +01:00
Franco Fichtner
4637139074 firmware: allow dot in package name; closes #2031 2017-12-29 09:10:21 +01:00
Ad Schellevis
9849a8e781 Firewall, rule parsing, cleanup. it should be safe now to remove the interface aliases since our new code doesn't use them anymore.. https://github.com/opnsense/core/issues/1326 2017-12-28 21:58:30 +01:00
Ad Schellevis
41e89fe13c Firewall/rule parsing, fix some spacings. for https://github.com/opnsense/core/issues/1326 2017-12-28 21:50:44 +01:00
Ad Schellevis
70d795dfe2 Firewall/rule engine, plugin outbound rules, move functions out of the way for further cleanup later. https://github.com/opnsense/core/issues/1326
This needs additional testing, rules look ok, but the number of changes has been quite a few.
Next on the list is firewall_nat_out.php, make sure it reflects reality.
2017-12-28 21:38:54 +01:00
Ad Schellevis
a75a6a1186 Firewall/forward, when parsing rdr rules, don't generate reflection redirects for nordr type, for https://github.com/opnsense/core/issues/1326 2017-12-28 21:31:24 +01:00
Franco Fichtner
59faa1e918 wizard: fix this appropriately 2017-12-28 12:42:31 +01:00
Franco Fichtner
ae79fa4f51 wizard: adhere to defaults in the xml
Instead of using the config values even if set...
2017-12-28 11:32:31 +01:00
Franco Fichtner
7b10393f5a wizard: uncheck dnssec by default 2017-12-28 11:25:32 +01:00
Ad Schellevis
a94700e7cc diag_packet_capture.php, stick level of detail... 2017-12-28 10:54:35 +01:00
marjohn56
bff4ace717 interfaces: allow the user to fix the dhcp6 duid; closes #2021
The existing DUID may be recalled and stored in the
config file or else a new DUID may be created.
2017-12-28 10:26:20 +01:00
Franco Fichtner
20654c3869 rc: kill _opnsense_bootup_run migration glue on master branch 2017-12-27 18:51:08 +01:00
Ad Schellevis
12d174e79d firewall/rule engine, keep some behaviour from legacy code as long as we're not sure wrong data can enter the config. for https://github.com/opnsense/core/issues/1326 2017-12-27 18:27:34 +01:00
Franco Fichtner
19c4253b1c webgui: explain the confirm / recovery
PR: https://github.com/opnsense/core/issues/1347
2017-12-27 18:23:23 +01:00
Franco Fichtner
fa3ad8025a webgui: flip-flop on old and new URL in case something went wrong
The initial timeout of 20 seconds is long, but it's safer to wait so
that we're not bouncing back to the old web GUI before it goes down.

PR: https://github.com/opnsense/core/issues/1347
2017-12-27 17:55:20 +01:00
Franco Fichtner
e63299809a firmware: list installed plugins first
The markup is a bit too much now, but we can figure something
out sooner or later.
2017-12-27 14:26:42 +00:00
Franco Fichtner
4638791ef8 mvc: do not render empty toggle header, dialogs do the same 2017-12-27 14:15:52 +00:00
Franco Fichtner
533ccbde0c rc: backup DUID for /var MFS et al
Make sure to delete the backup prior to backing up to mimick
the current system state.  Same goes for restore, no backup
means remove the DUID to sync the system state to what it was.
2017-12-27 13:35:35 +00:00
Franco Fichtner
b64b378219 mvc: code sniffer sniffs code 2017-12-27 11:56:23 +00:00
Franco Fichtner
2b71525147 make: enable new sniff for codesniffer 2017-12-27 11:56:00 +00:00
Franco Fichtner
6c13cbf4dd interfaces: tweak previous
o do not escape execf shell escaping
o simplify the wording on the labels
2017-12-27 11:07:49 +00:00
marjohn56
e634186ae4 dhcp6c No Release Option
dhcp6c sends a release signal on exit by default. This can cause the loss of the allocated prefix or address and a new one on the next connection. This is especially the case with many ISPs.

This option allows the user to disable the release send.

I added the  -n option to the FreeBSD dhcp6c quite a while back.
2017-12-27 11:47:04 +01:00
Franco Fichtner
9425d3bdd0 wizard: cleanup closes #2007 2017-12-27 11:29:18 +01:00
Franco Fichtner
420cbc6e07 wizard: cleanup for #2007 2017-12-27 11:26:59 +01:00
Franco Fichtner
502db3ab8d system: cleanup for #2007 2017-12-27 11:24:56 +01:00
Franco Fichtner
55c989971c openvpn: cleanup for #2007 2017-12-27 11:23:43 +01:00
Franco Fichtner
5c31153d35 auth: cleanup for #2007 2017-12-27 11:21:40 +01:00
Franco Fichtner
ff8b1c77a8 interfaces: simplify previous
It's better to align this with the DHCP setting, remove explicit
mention of PPPoE as it pertains to other PPP types too.
2017-12-27 08:40:14 +01:00
Franco Fichtner
33e3545709 auth: revert a change for #1929
There will be time to work on this, but it is not now.
2017-12-27 08:26:17 +01:00
Franco Fichtner
adf34de710 pkg: fix plist 2017-12-27 08:25:06 +01:00
Ad Schellevis
1621d72899 Firewall/rule parser, work in progress snat, for https://github.com/opnsense/core/issues/1326 2017-12-26 19:59:17 +01:00
Ad Schellevis
d3afd68acb Firewall/rule parsing. add initial SNAT implementation, for https://github.com/opnsense/core/issues/1326 2017-12-26 19:20:24 +01:00
Ad Schellevis
8a0ac7ca25 Firewall/rule parsing, ok, someone thought it was a good idea to use the "network" field in outbound rules as the "address" field in all the other rule types.... not a big fan of duplicating code, but for now it's bett
er to keep the address conversion in one spot (which some duplicate code).

All still for https://github.com/opnsense/core/issues/1326
2017-12-26 18:45:24 +01:00
Ad Schellevis
50a0b8c39f Firewall/rule parsing, improve naming, the 1:1 rules are destination nat rules, outbound will be source nat type. for https://github.com/opnsense/core/issues/1326 2017-12-26 18:10:20 +01:00
Ad Schellevis
b70880e33e firewall/rule logic, some minor improvements for https://github.com/opnsense/core/issues/1326 , add parseStaticText() and remove duplicates 2017-12-26 18:00:36 +01:00
Franco Fichtner
4f9cbc83eb web proxy: fix wrong character 2017-12-26 12:49:04 +01:00
Franco Fichtner
6f9c3177e1 mvc: pass form data, copy+paste for others but not quite ;( 2017-12-26 11:28:40 +00:00
Franco Fichtner
369721b818 mvc: rework for extensibility 2017-12-26 12:13:32 +01:00
Franco Fichtner
131dc9a340 mvc: (sub)tabs to partials 2017-12-26 11:56:05 +01:00
Franco Fichtner
8902ddb4c9 mvc: after further feedback...
The code for the Service controllers originated from IDS and
Web Proxy, not the Postfix plugin where this was originally
copied from before being turned into a mutabe variant with the
work from the mutable model class.
2017-12-25 22:53:29 +01:00
Franco Fichtner
85abd91c7c mvc: rename controller internals 2017-12-25 16:38:44 +01:00
Ad Schellevis
f722081b87 interfaces, add "IPv6 Static over parent v4 PPPoE link" for https://github.com/opnsense/core/pull/2017 ditching some side affects from get_real_interface() in the process. 2017-12-25 13:40:48 +01:00
Franco Fichtner
9eac980047 web proxy: cache reconfigure detection for #2008 2017-12-24 23:20:28 +01:00
Franco Fichtner
7f7a96f758 mvc: fix call 2017-12-24 16:30:31 +01:00
Franco Fichtner
426cbdc5a0 mvc: we do not care about the model name 2017-12-24 16:23:41 +01:00
Franco Fichtner
e9e99cb254 mvc: further fixes :) 2017-12-24 16:17:03 +01:00
Franco Fichtner
a77c8535ef mvc: fix class usage 2017-12-24 16:11:13 +01:00
Franco Fichtner
b83282f267 mvc: add a mutable service controller for easy reuse 2017-12-24 15:57:17 +01:00