8440 Commits

Author SHA1 Message Date
Ad Schellevis
8c44049298 optional prefix gdrive backups with host and domain name, for https://github.com/opnsense/core/issues/2262 2018-03-16 18:59:44 +01:00
Franco Fichtner
6961ad48ba pkg: fix plist 2018-03-16 09:47:00 +01:00
Ad Schellevis
4e979a9bd6 services, move core/system service registration to core.inc for clearity. as discussed with @fichtner 2018-03-16 09:39:42 +01:00
Franco Fichtner
08c830f936 system: last tweak for previous 2018-03-16 08:12:51 +00:00
Franco Fichtner
397d78df9e system: make $keep the default 2018-03-16 08:06:48 +00:00
Franco Fichtner
09f45fbdbf system: rewrite the default route handling
With this, there is consistency in setting the default route
and associated marker file.  Nothing is done before the decision
is final, so we may not end up with a missing route after an
attempt to reconfigure for something that doesn't work anyway.

DHCPv4 and PPP still do this manually, but we will have to route
them through the same logic instead of them manually handling their
routes.  6rd and 6to4 may have a similar issue as well.

While here, swap the system_routing_configure() arguments to
align with the way other configure functions present their
arguments (verbose print flag first).

Gateway monitoring and default switching improvement since 2016.
Push $keep into default handling, it may be useful in general to
avoid spurious switches.  It could also be a default probably.
2018-03-16 07:41:17 +00:00
Ad Schellevis
9ca61d8b3e add service action to sync users and groups for https://github.com/opnsense/core/issues/2151 2018-03-15 21:33:41 +01:00
Ad Schellevis
d4e9da8b72 add syslog to services/diagnostics 2018-03-15 21:16:29 +01:00
Franco Fichtner
b3fb3e1b1d system: found small issue, but...
ended up realising the function is totally whacky from top to
bottom.  Writing default file hints before doing lookups for
said IPs, writing empty fallbacks, missing logging info.

To be continued.
2018-03-14 22:47:47 +00:00
Franco Fichtner
c2c4a24618 system: apply loader tunables, style for apply box #2083 2018-03-14 09:31:30 +00:00
Ad Schellevis
f4313ce368 Revert "IDS, suricata.log isn't in binary format... see https://github.com/opnsense/plugins/issues/606"
This reverts commit dc1cd4da918880a7a9b6036b02911b65128e2d7c.
2018-03-13 18:07:50 +01:00
Ad Schellevis
dc1cd4da91 IDS, suricata.log isn't in binary format... see https://github.com/opnsense/plugins/issues/606 2018-03-13 17:49:30 +01:00
Ad Schellevis
e8846eaf0c openvpn, show last timestamp in openvpn_get_client_status, for https://github.com/opnsense/core/issues/2243 2018-03-13 14:58:40 +01:00
Ad Schellevis
7ff5ec2340 openvpn, parse all states to retrieve most relevant one and some minor cleanups. for https://github.com/opnsense/core/issues/2243 2018-03-13 14:43:01 +01:00
Franco Fichtner
fdf4eccfaa system: cosmetic tweaks for #2083 2018-03-12 20:51:04 +00:00
Franco Fichtner
68cfe2aaf8 system: render tunables in loader.conf; closes #2083 2018-03-12 20:31:12 +00:00
Franco Fichtner
ef451142db interfaces: always allow /127, /128 and /32 static IPs; closes #2213 2018-03-12 21:07:17 +01:00
Franco Fichtner
86aa45633a voucher: tweak simple character set; closes #2257 2018-03-12 18:47:27 +01:00
Ad Schellevis
6b677051d4 bridging, hide already assigned interfaces, closes https://github.com/opnsense/core/issues/2256 2018-03-12 18:45:47 +01:00
Ad Schellevis
7401b27bad mvc / Monit, ditch work-around, closes https://github.com/opnsense/core/issues/2255 2018-03-12 18:23:51 +01:00
Ad Schellevis
117eb47666 MVC, keep track of model that created a field so our model relationfield can reuse the same object for choosing it's options, for https://github.com/opnsense/core/issues/2255 2018-03-12 18:22:21 +01:00
Franco Fichtner
33b3dabab3 interfaces: kill is_jumbo_capable()
Introduced in 2005 to separate good VLAN-capable driver from
the bad ones.  We wonder how relevant this is nowadays.

Breaks at least Xen where the driver fails to pass the host's
VLAN capabilities.

Discussed with: @adschellevis
2018-03-12 17:21:21 +01:00
Franco Fichtner
d823cc7193 firewall: switch back to old NAT auto-outbound behaviour
Use the first address only, ignoring all VIPs.

Discussed with: @adschellevis

PR: https://forum.opnsense.org/index.php?topic=7438.0
2018-03-12 14:36:11 +01:00
Franco Fichtner
9cce0a02fe pkg: this makes more sense, need to push to FreeBSD ports 2018-03-12 11:40:31 +01:00
Franco Fichtner
9e054ed704 interface: init variable directly 2018-03-12 07:50:27 +00:00
marjohn56
a28b048597 interface: dhcp6c creation breakout 2018-03-12 07:42:27 +00:00
Franco Fichtner
9efc0bf123 interfaces: do not break line 2018-03-12 07:30:37 +00:00
Franco Fichtner
95807fac47 interfaces: emit prefix-interface for trackers in advanced DHCPv6
While here, clean up the config write a little bit.
2018-03-12 07:24:46 +00:00
Franco Fichtner
b38317b34f interfaces: more log output streamlining 2018-03-12 06:59:01 +00:00
Ad Schellevis
dc74006c9a implement password policies for local accounts. for https://github.com/opnsense/core/issues/2252
This change consists of two components:

1) enforcing the user to change his or her password every x days, when pwd_changed_at is not set or longer ago then specified only access to the password page is prohibited
2) enforce minimal length or complexity settings depending on selected choices
2018-03-11 18:24:23 +01:00
marjohn56
8fb70ac4b1 interfaces: baby steps for #2234
Improve logging, minor cleanups.
2018-03-11 15:13:43 +00:00
Franco Fichtner
60b3db278f interfaces: revert useless commits
This reverts commit e6dc3265fe76d00aaf250cc7bf5515c1e3d922d4.
This reverts commit e211d1ab2702be8df65e8d1cce1e4589ccd37f5a.
2018-03-11 14:36:16 +00:00
Franco Fichtner
1a22b8822a service: almost entirely migrate monit model 1.0.0 et al. 2018-03-11 11:08:14 +00:00
Franco Fichtner
79500101c6 services: import monit service
Some things to work on:
* post-install should be a migration
* move to system?
* remove old notifications
2018-03-11 11:07:51 +00:00
Franco Fichtner
7cc7a26e60 mvc: small cleanups 2018-03-11 11:07:21 +00:00
Franco Fichtner
b3e2fa36a3 system: logging tweaks
* Allow clearing configd log in clear all
* Neither configd nor lighttpd remote exists

These things will have to wait till syslog-ng is properly integrated.
2018-03-11 10:40:56 +01:00
Franco Fichtner
dd71f72b45 src: style fix 2018-03-11 00:13:02 +01:00
Franco Fichtner
eb7644e953 pkg: fix plist 2018-03-10 16:46:46 +01:00
Ad Schellevis
9eeb057d30 configd deserves it's own space for logging, closes https://github.com/opnsense/core/issues/2067 2018-03-10 16:03:48 +01:00
Ad Schellevis
6901b5af8f webgui, set correct syslog facility 2018-03-10 15:52:48 +01:00
Ad Schellevis
535a27498b webgui, only set accesslog.use-syslog when accesslog is enabled 2018-03-10 15:21:34 +01:00
Franco Fichtner
003a1142b9 system: another tweak 2018-03-10 11:36:30 +01:00
Franco Fichtner
69befc0d05 system: change menu item name for previous 2018-03-10 11:34:21 +01:00
Franco Fichtner
69b12e2690 pkg: fix plist 2018-03-10 11:30:20 +01:00
Ad Schellevis
11363e4799 webui, add option to enable access log and fix lighttpd.log in the process. closes https://github.com/opnsense/core/issues/2248 2018-03-09 21:39:45 +01:00
Franco Fichtner
ac0a632812 src: style sweep 2018-03-09 11:58:19 +00:00
Franco Fichtner
93028ca39c make: small tweak to previous 2018-03-09 11:58:09 +00:00
Franco Fichtner
aeeb446779 pkg: php flavours are coming... break upgrade for now 2018-03-09 07:52:55 +01:00
Ad Schellevis
8f1f62138b openvpn, switch openvpn_get_server_status() to status version 3 which uses tabs in stead of comma's, for https://github.com/opnsense/core/issues/2245 2018-03-07 19:04:58 +01:00
Ad Schellevis
ec819ca59c mvc, move view_fetch_themed_filename() to index, so a stub can overwrite it's behaviour (when developing locally) 2018-03-06 21:16:02 +01:00