9251 Commits

Author SHA1 Message Date
Franco Fichtner
90ff8defcb reporting: remove unneeded margin 2018-08-04 10:40:17 +02:00
Ad Schellevis
5d3a7cd909 theme, opnsense, take two f5c29c5bf1 2018-08-04 09:54:45 +02:00
Ad Schellevis
1eb1d1defc theme/opnsense, add spacing between content blocks like it was, removed in f5c29c5bf1 2018-08-03 17:59:04 +02:00
Ad Schellevis
4ba0fa679d default config, switch "VLAN Hardware Filtering" to use card's default 2018-08-03 15:29:58 +02:00
Franco Fichtner
7593cc66d2 pkg: depend on surciata-devel for opnsense-devel 2018-08-03 12:16:59 +02:00
Ad Schellevis
61fd53ee7b Captive portal, vouchers, both the voucher server and group can contain spaces, which we need to decode before processing. closes https://github.com/opnsense/core/issues/2597
In theory it should be possible to escape before handling the endpoint, but I can't seem to find out how. in the time being let's make sure we accept the right data
2018-08-03 10:53:14 +02:00
Franco Fichtner
24e0a308ff firmware: whoops, wrong file 2018-08-02 22:09:46 +02:00
Franco Fichtner
32bdc28500 firmware: remove origin.conf fallback 2018-08-02 22:06:17 +02:00
Franco Fichtner
4b461425a5 firmware: revoke 18.1 fingerprint 2018-08-02 22:05:13 +02:00
Franco Fichtner
d993743e72 firmware: update no more 2018-08-02 22:02:43 +02:00
Franco Fichtner
062a016b58 ipsec: add brainpool ec groups
PR: https://forum.opnsense.org/index.php?topic=9308.0
2018-08-02 19:27:55 +02:00
Franco Fichtner
50a49ee6d4 dashboard: stop overflow by fixing table layout #2595 2018-08-01 20:57:30 +02:00
Franco Fichtner
1a915fe80c ui: prevent tokenizer reinit if not visible
Solves the reported issue but may not be the final fix.
May be a tokenizer library issue...

PR: https://github.com/opnsense/plugins/issues/769
2018-08-01 08:20:38 +02:00
Franco Fichtner
ea9a77afd3 system: extend ACL matching a little more
&* and ?* and can be used to match a page like /* now,
which means we can use foobar.php?* to designate optional
GET arguments to the URL to be allowed instead of falsely
matching foobar.php* which could be foobar.phpfoobar/.

It's a constructed issue, but it may help developers to
build complex plugins that use different overlapping
pages for one reason or another.
2018-07-30 23:46:22 +02:00
Ad Schellevis
a0b88452a4 Firewall, disable/enable [nat]rules using check boxes, closes https://github.com/opnsense/core/issues/1587 2018-07-30 21:38:11 +02:00
Ad Schellevis
09a13913ec firewall, add state-policy if-bound, closes https://github.com/opnsense/core/issues/2575 2018-07-29 12:12:06 +02:00
Franco Fichtner
c66f241df7 system: deal with ACL trailing slash wildcards 2018-07-28 19:32:47 +02:00
Franco Fichtner
c383d0ae61 www: trailing slash removal needs these links to change as well 2018-07-28 17:53:51 +02:00
Ad Schellevis
8857213367 IPsec/style, selectpicker in mobile page for https://github.com/opnsense/core/pull/2513 2018-07-28 13:39:52 +02:00
Ad Schellevis
172aa54a14 IDS, fix rule selection (handle per batch sequentially) and some related unintentional side effects, closes https://github.com/opnsense/core/pull/2447 2018-07-28 13:12:03 +02:00
Ad Schellevis
cd0961ae83 Merge branch 'marjohn56-Opnsense-Theme-Update-for-Sidebar' 2018-07-28 10:55:06 +02:00
Ad Schellevis
71a253cd70 Merge branch 'Opnsense-Theme-Update-for-Sidebar' of https://github.com/marjohn56/core into marjohn56-Opnsense-Theme-Update-for-Sidebar 2018-07-28 10:48:24 +02:00
Ad Schellevis
3e12ca7e1c MVC, minor cleanup in ApiMutableServiceControllerBase, trim configd responses 2018-07-28 10:43:49 +02:00
ndejong
68f0559a00 cause data from callback_ok to be passed through (#2580) 2018-07-28 10:11:47 +02:00
Franco Fichtner
d1f7dff991 firewall: cleanups in bindings 2018-07-27 13:04:28 +02:00
Franco Fichtner
82ba1d22c9 system: use shared encrypt() and decrypt() functions #2535 2018-07-27 08:59:58 +02:00
Ad Schellevis
d6d9374b66 configctl, ignore end of stream marker, the normal exit when no data for python should be enough, closes https://github.com/opnsense/core/issues/2568
Initially we had issues with datablocks containing \0, for which we added an end of stream marker. in python this doesn't seem necessary, so better to remove to prevent cpu overload when the connection is lost.
2018-07-26 21:52:47 +02:00
Ad Schellevis
fe0a025d09 mvc/bootgrid, use std_bootgrid_reload in stead of .bootgrid("reload"); closes https://github.com/opnsense/core/issues/2576 2018-07-26 21:29:51 +02:00
Franco Fichtner
7ee9d6ec58 src: whitespace 2018-07-26 19:48:40 +02:00
Franco Fichtner
8e28b78c65 system: better authserver parsing for #2578 2018-07-26 14:53:47 +00:00
Franco Fichtner
d4190f08d6 firmware: almost time for 18.7 2018-07-25 20:03:52 +02:00
Ad Schellevis
2be29a51ff configd, fix idna encode, closes https://github.com/opnsense/core/pull/2492 2018-07-25 17:21:24 +02:00
Ad Schellevis
a79b20c127 IPsec, iremove validation to support for IPv6 over IPv4 tunnel and vise versa. closes https://github.com/opnsense/core/issues/2570 2018-07-24 14:51:20 +02:00
Ad Schellevis
d811c64058 Firewall/alias, while working on https://github.com/opnsense/core/issues/1858 add first 10 alias items when no description is provided in get_alias_description(). closes https://github.com/opnsense/core/issues/2495 2018-07-24 13:22:25 +02:00
Ad Schellevis
c76006cd5e Firewall, rule parsing, disable empty port aliases to avoid rule loading issues, related to https://github.com/opnsense/core/issues/1858 2018-07-23 20:40:56 +02:00
Ad Schellevis
eeb14c29fc Firewall/alias, fix migration code for https://github.com/opnsense/core/issues/1858 caused by https://github.com/opnsense/core/issues/2567, leaving the migration inactive for the time being. 2018-07-23 20:39:18 +02:00
Ad Schellevis
7f0b486dbb Firewall/alias, replace legacy alias usage and move transitional code into model for https://github.com/opnsense/core/issues/1858
This code keeps the legacy aliases functional until switched (migrated) to the new ones, improves isAlias() performance which was in 18.7r2 and removes some code duplication.
2018-07-23 20:31:42 +02:00
Franco Fichtner
4be8af3938 system: EXPLAIN! EXPLAIN! EXPLAIN!
PR: https://twitter.com/platymew/status/1021325814816755712
2018-07-23 16:54:56 +02:00
Ad Schellevis
6b79d5d703 spacing in previous 2018-07-23 15:37:03 +02:00
Ad Schellevis
015ae9f058 Firewall/alias, ditch urltable_ports, url_ports closes https://github.com/opnsense/core/issues/2567 2018-07-23 15:32:53 +02:00
Franco Fichtner
106f369e1c dnsmasq: avoid binding more than 127.0.0.1
PR: https://forum.opnsense.org/index.php?topic=9208.0
2018-07-23 07:23:49 +02:00
Ad Schellevis
119cfac389 add new mvc aliases to legacy_list_aliases() for https://github.com/opnsense/core/issues/1858 2018-07-22 20:02:18 +02:00
Ad Schellevis
df7a9697d7 add new alias location in get_alias_description() for https://github.com/opnsense/core/issues/1858 2018-07-22 19:43:39 +02:00
Franco Fichtner
b8a4173671 interfaces: legacy_getall_interface_addresses() is for extracting...
... usable IP addresses, which tunnels seem to be not.
2018-07-22 14:03:19 +02:00
Franco Fichtner
94adc3d0fb webgui: switch bind behaviour
PR: https://forum.opnsense.org/index.php?topic=9128.0
2018-07-22 13:55:31 +02:00
Franco Fichtner
427e10ed2d interfaces: avoid pulling IPv6 tunnel addresses 2018-07-22 13:55:31 +02:00
Franco Fichtner
8db88f3659 openssh: switch to different interface bind approach 2018-07-22 13:55:31 +02:00
Franco Fichtner
b09363fea5 Revert "change rule "interface address" parsing to use "interface:0" in stead of "interface", for https://github.com/opnsense/core/issues/2457"
This reverts commit 2408d6a1261f61206eab437d1b933d2ecf8fbfca.
2018-07-20 11:58:49 +02:00
Franco Fichtner
188b098110 dnsmasq: always listen on loopback, resolv.conf must know
PR: https://github.com/opnsense/core/issues/2562
2018-07-19 21:38:52 +02:00
Franco Fichtner
5f924d263b src: style...again 2018-07-18 21:13:23 +02:00