12594 Commits

Author SHA1 Message Date
Franco Fichtner
90ad674928 interfaces: also needs #4576 2021-02-26 02:56:19 +01:00
Franco Fichtner
a980771d7f interfaces: experiment for #4576 2021-02-26 02:51:23 +01:00
Franco Fichtner
e345b965cc interfaces: looks like a typo
Probably dead code but better to align it.  Some style on the side.
2021-02-26 02:22:36 +01:00
Franco Fichtner
70f856bf2f firmware: emit api version string, second major iteration already #4500 2021-02-25 13:59:35 +01:00
Franco Fichtner
db29e02ecb dhcpd: unify loop, improve leases page #4642 2021-02-25 13:40:50 +01:00
Ad Schellevis
43b50ed086 Netflow: prevent crash when attributes missing, closes https://github.com/opnsense/core/issues/4751 2021-02-25 12:08:46 +01:00
Franco Fichtner
e73db9c7ae dhcp: remove interface key #4642
At first the idea was to pass it, but especially since this only
passes one entry as noted by @maurice-w it is probably better to
ditch it.  :)
2021-02-24 20:00:34 +01:00
Franco Fichtner
f67e242eaa www: fix $$ weirdness loosely related to typo in #4702 2021-02-24 16:23:02 +01:00
Franco Fichtner
63978a60c8 interfaces: better primary address detection; closes #4702 2021-02-24 16:19:09 +01:00
Ad Schellevis
8b9764fa86 Lobby / Dashboard / Traffic Graph: prevent duplicate traffic pollers mangling with the graphs. 2021-02-24 11:28:57 +01:00
Martin Wasley
4e9144f885
Correct help text for Range (#4738) 2021-02-24 10:08:45 +01:00
Franco Fichtner
d0822b0067 dhcpd: move staticmap preparation to parent #4642
Move all the duplication out of Unbound/Dnsmasq code and just
iterate over the results there.
2021-02-24 09:54:15 +01:00
Ad Schellevis
277ffb6ac5 Reporting / Traffic: change api output to combined in/out per row and change user interface to handle new format. closes https://github.com/opnsense/core/issues/4724 2021-02-23 16:21:25 +01:00
Ad Schellevis
bcb7c26897 User management: performance enhancement for local_sync_accounts() should improve boot time when a lot of users are involved, also improves xmlrpc sync and some other actions calling a sync. 2021-02-23 14:46:21 +01:00
Franco Fichtner
6368a2bb6d firmware: that wasn't complete but now it is #4718 2021-02-23 09:10:43 +01:00
Ad Schellevis
8bb823880e Services / DHCPv4 / Relay : fix non-existing array 2021-02-22 22:47:25 +01:00
Gareth Owen
d344d0a773
Unbound: Fix bad dereference when DHCP lease expires (#4742)
Move deletion of dhcp cache info when the lease expires to after the
last reference to the cache information.

Fixes #4741
2021-02-23 08:53:41 +01:00
Franco Fichtner
a4ae9b3918 firmware: use launcher trick for these as well; closes #4718
So we get a message that the system is doing something else instead
of no message at all.
2021-02-23 08:49:12 +01:00
Franco Fichtner
2d382bf870 firmware: changelogs are pulled from check scripts
Like with text output earlier the update feature is not used
from the GUI and brings little to the table.  Separate API
endpoint is better for these types of actions if the need should
ever arise.
2021-02-23 08:46:43 +01:00
Franco Fichtner
b25727a11b dnsmasq|unbound: align the code, also fix Dnsmasq #4642 2021-02-22 14:56:36 +01:00
Franco Fichtner
9fa54201a7 interfaces: drop return introduced in 31282787df 2021-02-22 14:55:38 +01:00
Franco Fichtner
140f4ea03e unbound: speed up and safeguards for #4642 2021-02-22 14:30:27 +01:00
Franco Fichtner
a3bfcc2729 system: this looks better although not problematic 2021-02-22 14:23:59 +01:00
Martin Wasley
be12dd889f Correct the omission of the prefix when a dynamic interface v6 dhcpdv6 address is set as a static entry. The result is that only the suffix /64 gets added to the unbound host entries. This patch should sort that so a full address is created for unbound.
use existing call

update
2021-02-22 13:06:43 +01:00
Martin Wasley
4e3c6aa59b Correct dhcp6c.conf issue on pppoe link down
Moved v6 reconfigure to before v4.
2021-02-22 12:00:53 +01:00
Franco Fichtner
48c9b3b403 system: adapt lighttpd ssl.privkey approach #4728
While we need to hide the key we do not have to chmod the
certificate or the chain.  ;)
2021-02-22 09:22:31 +01:00
Ad Schellevis
13c4f8eab6 Reporting / Traffic: aggregate iftop results for https://github.com/opnsense/core/issues/4724
This is more or less a proof of concept, we probably best change the api endpoint data as well to push in/out in the same record so we can also ship the details underneath for those interested.
2021-02-21 13:23:13 +01:00
Gareth Owen
1b530ff38f
Unbound: Handle DHCP client expiring and returning (#4727)
Cleanup local data cache when a DHCP endpoint expires, so that it is
kept in sync with dynamic changes.  This ensures that if an expired DHCP
endpoint returns and is assigned the same IP address the local cache is
correct and doesn't block the entry being dynamically re-added to Unbound.

Also don't cache the blacklist entries, which aren't needed to manage
the DHCP DNS entries. There can easily be 1M+ blacklist entries, so
ignoring these improves startup speed and reduces memory footprint

Fixes #4714
2021-02-21 11:42:11 +01:00
Ad Schellevis
dd2231ee54 Interfaces / Diagnostics / arp,ndp table: slow manufacturer lookups, likely after upgrading netaddr to 0.8.0. for https://github.com/opnsense/core/issues/4666 2021-02-20 00:43:04 +01:00
Ad Schellevis
88e463c913 Netflow: prevent crash when interface number is missing. for https://github.com/opnsense/plugins/issues/2241 2021-02-19 23:16:50 +01:00
Franco Fichtner
889e24c965 firwarme: abstract LOCKFILE away
Now we only deal with LOCKFILE in the firmware scripts folder.
2021-02-19 13:20:48 +01:00
Franco Fichtner
99944f462e firmware: hide LOCKFILE behind small read script
One old bit of compat glue can kick the bucket as well.
2021-02-19 11:52:20 +01:00
Franco Fichtner
38b0e8ff6c firmware: get rid of old naming convention; closes #4718 2021-02-19 11:43:03 +01:00
Franco Fichtner
eb6cbc0164 firmware: single spot for update/upgrade code #4718 2021-02-19 11:29:38 +01:00
Franco Fichtner
dc883ebbba firmware: moving ahead with opnsense-update change for 21.1.2 2021-02-19 11:05:06 +01:00
Ad Schellevis
aa167350b2 System / Routes / Status: missing inet in route delete. closes https://github.com/opnsense/core/issues/4721 2021-02-19 09:44:01 +01:00
Franco Fichtner
89dbf25c35 openpn: break in default case 2021-02-18 20:14:39 +01:00
Franco Fichtner
4c9aa8492b firmware: remove frontend magic and implement validation #4500 2021-02-18 15:35:02 +01:00
Ad Schellevis
5c7d3251ac Interfaces / Overview: handle disabled interfaces. closes https://github.com/opnsense/core/issues/4719 2021-02-18 14:21:45 +01:00
Franco Fichtner
508a5fee04 firmware: settings validation messages to GUI #4500 2021-02-18 13:29:39 +01:00
Franco Fichtner
8c2ea1f344 firmware: for core that works, for crypto it does not
Since the fetch blocks some time and is not completely reliable
it doesn't really matter if we have it or not.

While here remove a bit of cruft.
2021-02-18 10:24:04 +01:00
Franco Fichtner
b2472f3c5e system: visibility for problematic LUA scripts #4717 2021-02-18 09:47:28 +01:00
Franco Fichtner
c05c0411cb firmware: small refactor for neatness 2021-02-18 09:02:52 +01:00
Ad Schellevis
ee002053da VPN / IPsec: calculatation error in 8b62109a61 , start at 31,127 to make sure both points can actually reach eachother. for https://github.com/opnsense/core/issues/4700 2021-02-17 19:46:37 +01:00
kulikov-a
819131b866
fw_log.volt: show with 'or' and empty filter (#4716) 2021-02-18 08:38:57 +01:00
Franco Fichtner
56f237a8d4 openvpn: better translations leaving command line args out of it 2021-02-18 08:28:15 +01:00
Franco Fichtner
23883ea879 system: fix syntax error 2021-02-18 08:09:32 +01:00
Christian Brueffer
a9185cc4dd
Make StartTLS work when retrieving LDAP authentication containers. (#4713)
Make StartTLS work when retrieving LDAP authentication containers.
The code did not set the LDAP connection properties as configured.
2021-02-17 17:47:20 +01:00
Ad Schellevis
8b62109a61 VPN / IPSec: calculate netmask for provided tunnel addresses when using VTI.
For IPv4 this should be backwards compatible with the previous code, since the netmask isn't really used to determine if the other end is reachable (it seems so at least), for ipv6 some consumers a valid netmask
seems to be required in order to function properly (frr). Since ipv6 doesn't seem to support setting a netmask in combination with a destination address and the other end apparantly doesn't really care, we just set an address with a mask in case it's an ipv6 tunnel.

for https://github.com/opnsense/core/issues/4700
2021-02-17 17:33:41 +01:00
Franco Fichtner
386e122339 firmware: fix action label 2021-02-17 15:42:47 +01:00