9917 Commits

Author SHA1 Message Date
opnsenseuser
8ea6b72a03 Firewall:NAT:Port Forward - missing (disabled Linked rule) - fix
PR: https://github.com/opnsense/core/issues/2968
2018-11-25 23:29:59 +01:00
Franco Fichtner
3714302125 ui: another regression, change placeholder text to real text
In most cases the "placeholder" is a valid value so it doesn't
make sense to mark it as something less because that would mean
the user attention is drawn to it and more often than not these
unselected values are the good default behaviour so we might
draw users away from well-defined scenarios into support-heavy
edge cases.

Secondly, it looks more like disabled than placeholder.
2018-11-25 12:21:48 +01:00
Franco Fichtner
3ad1be040c src: style and whitespace sweep 2018-11-25 12:10:03 +01:00
Franco Fichtner
f4fad63aac unbound: avoid historic "DNS Resolver" mentions; closes #2969
This also helps with page clarity as we don't mention it in labels
so much anymore.  While here, minor tweaks to the previous changes
of Dnsmasq for similar effect.
2018-11-25 12:07:43 +01:00
Ad Schellevis
1680c1e1b0 Network insight, aggregator support single_pass (exit when there's no new data left), for https://github.com/opnsense/core/issues/2964 2018-11-24 21:40:13 +01:00
Ad Schellevis
c7660ca43f Network insight, another minor side affect of https://github.com/opnsense/core/issues/2964 export misses timestamp convert. 2018-11-24 16:10:09 +01:00
Ad Schellevis
9222f5e4de fix regression in previous, for https://github.com/opnsense/core/issues/2964 2018-11-24 16:03:06 +01:00
Franco Fichtner
c3b07c466a unbound: only use IPv6 when enabled and IPv4 is not preferred; closes #2913
A general disable seems reasonable but the IPv4 prefer does not really
mean we should diable IPv6 here.  In the ticket it was indicated that
Unbound does funky stuff in this scenario so to avoid further violation
of POLA it is disabled as well then.
2018-11-24 15:55:16 +01:00
Ad Schellevis
02c5bb692d Network insight, missing import for https://github.com/opnsense/core/issues/2964 2018-11-24 15:47:50 +01:00
Ad Schellevis
dc38875202 Network insight, cleanups and restructures for https://github.com/opnsense/core/issues/2964
Adds configuration yaml support, using a simple config yaml containing the previously hardcoded values:

```
library_path:  /path/to/core/src/opnsense/site-python
flowd_source: /path/to/flowd.log
database_dir: /path/to/netflow
pid_filename: /path/to/netflow.pid
```

Startup using local config, using:

```
flowd_aggregate.py -c my_config.yaml --console
```

Further then path relocations, this commit should not contain any new features. The other scripts, not related to the daemon have not been altered (yet)
2018-11-24 15:44:22 +01:00
Franco Fichtner
47d4b9b1ed unbound: same advanced change here 2018-11-24 15:38:23 +01:00
Franco Fichtner
a4b4db95b3 dnsmasq: add DNSSEC option, several cleanups; closes #2275
* As discussed a long time ago stop mentioning "DNS Forwarder"
* Remove strong tags from Dnsmasq form
* DNSSEC option, off by default
* Some GUI elements flattened
* Advanced button tweaks

Tested using: http://en.conn.internet.nl/connection/
2018-11-24 15:30:19 +01:00
Ad Schellevis
b52e139d34 fix typo 2018-11-24 15:08:24 +01:00
Franco Fichtner
c28fb86f37 interfaces: add note about CGN addresses included in private range; closes #2880 2018-11-24 14:15:41 +01:00
Franco Fichtner
03ef2ff81e system: tiny refactor 2018-11-24 13:20:16 +01:00
Franco Fichtner
0860755e3b firewall: same same, but different
filter_configure_sync() already calls filter_pflog_start().
2018-11-24 13:06:04 +01:00
Franco Fichtner
06151559bd system: top part of default gatway group switching #2279 2018-11-24 12:48:35 +01:00
Franco Fichtner
1adba66c2a ui: fix bootstrap-select width missed in #2939 2018-11-24 11:26:31 +01:00
René
0ef7222e28 sidebar - short fixes (#2959) 2018-11-24 10:04:24 +01:00
Michael Steenbeek
4d69429c30 Fix passing SANs to OpenSSL when generating CSRs (#2967) 2018-11-23 17:45:06 +01:00
Franco Fichtner
c99cfaa006 src: more manual cleanups 2018-11-23 14:50:53 +01:00
Franco Fichtner
559e8e79e2 pkg: fix plist 2018-11-23 14:37:42 +01:00
Michael Steenbeek
7ad3d8dff6 Replace some trivial double quotes with single ones 2018-11-23 14:36:44 +01:00
Michael Steenbeek
19ce1c57a4 Replace uncommon <> notation with != 2018-11-23 14:36:44 +01:00
Michael Steenbeek
53a17f9928 Add migration code for IDS rules with GeoIP settings (#2965) 2018-11-23 14:28:44 +01:00
Franco Fichtner
cd9630897f wizard: correct header 2018-11-23 10:41:32 +01:00
Michael Steenbeek
552fed10d7 Fix HTML errors (#2943) 2018-11-23 10:38:39 +01:00
Franco Fichtner
1bfc8ef5df system: typos in css 2018-11-23 10:30:39 +01:00
Frank Wall
2401eabaf0 firewall: ignore empty values in alias migration (#2958) 2018-11-23 08:17:25 +01:00
Franco Fichtner
c7b18721ce system: add link-local routes with correct scope #2561 2018-11-23 07:19:36 +01:00
Franco Fichtner
8084508c3f captive portal: work around renewed ordering issue; closes #2956 2018-11-22 22:14:58 +01:00
Fabian Franz BSc
7829450dab fix advanced field bug in dialogs (#2957) 2018-11-22 20:02:31 +01:00
Michael Steenbeek
9f7ca43981 Change tabs to spaces 2018-11-22 12:03:54 +01:00
Michael Steenbeek
5d49c6afcd PHP: Fix lots of refs to undefined vars (#2952) 2018-11-22 09:22:57 +01:00
Franco Fichtner
a095c72857 firewall: avoid translating "by", remove excessive markup 2018-11-22 09:04:15 +01:00
Franco Fichtner
fcae284873 mvc: adapt headers 2018-11-22 08:57:00 +01:00
Franco Fichtner
69381716bc system: always prefill these values according to perference; closes #2948 2018-11-21 18:26:13 +01:00
Franco Fichtner
b56aaecc8d system: while at it... 2018-11-21 15:25:37 +01:00
Franco Fichtner
bfcfe4d823 system: avoid silent fatal error when OUs could not be retrieved 2018-11-21 15:09:17 +01:00
Franco Fichtner
e5cb29c344 firewall: previous broke page actually 2018-11-21 11:45:34 +01:00
Michael Steenbeek
7f09e04d81 Fix some HTML errors 2018-11-21 11:42:01 +01:00
Franco Fichtner
9325d87b4e firmware: finalise mtree health check
Not what I was expecting from a base tool like mtree...

* Missing files are not seen as an error condition, so
  remove our ignored files (they show up as nonexistent)
  and then count how many files are missing.  If there
  is at least a missing file show the output and don't
  say everything is swell.

* Since we prefilter MTREE_OUT on a real error just show
  the output since it's likely there's an error to see.
2018-11-21 09:03:42 +01:00
Ad Schellevis
57bef4363f OpenVPN type fix, for https://github.com/opnsense/core/issues/2787 2018-11-21 08:30:19 +01:00
Franco Fichtner
760300db52 firmware: stop checking /var due to MFS possibililty 2018-11-21 08:27:28 +01:00
Franco Fichtner
10df4a19a3 openvpn: style fixes, annotate property issue 2018-11-21 08:03:46 +01:00
Franco Fichtner
cecd7b68c1 ui: whitespace sweep says this file needs a lot of cleanups 2018-11-21 08:03:06 +01:00
Franco Fichtner
32c5691951 system: fix visibility in NextCloud backup class 2018-11-21 08:02:34 +01:00
Franco Fichtner
dd16e3d4da system: fix clashing vars in previous function merge #2914 #2948 2018-11-21 07:25:49 +01:00
Ad Schellevis
ceb54b9657 OpenVPN export, move base filename into own method for easier reuse. https://github.com/opnsense/core/issues/2787 2018-11-20 20:39:31 +01:00
Ad Schellevis
0a0e5ee747 OpenVPN export, regression in configuredSetttings(), use collected presets when server settings aren't found. for https://github.com/opnsense/core/issues/2787 2018-11-20 20:23:48 +01:00