6853 Commits

Author SHA1 Message Date
Franco Fichtner
910ee16389 web proxy: while here, also move the squid auth script 2017-03-11 18:51:43 +01:00
Franco Fichtner
180d611a2b ipsec: move/merge into plugins 2017-03-11 18:45:07 +01:00
Franco Fichtner
9b694b705d start to hide IPsec and OpenVPN for pluginification 2017-03-11 17:51:54 +01:00
Franco Fichtner
2058b1cf56 system: fix CRL certificate count; closes #1458 2017-03-11 17:12:17 +01:00
Franco Fichtner
069019c8ec unbound: typo in previous 2017-03-11 17:00:24 +01:00
Franco Fichtner
cdaa7affdf unbound: add serve-expired option #1405 2017-03-11 16:56:16 +01:00
Franco Fichtner
6e57f407a7 dns: do not store empty recordtype #1457 2017-03-10 14:17:21 +01:00
Franco Fichtner
2acd4595cc dns: small follow-up for #1457 2017-03-10 14:09:43 +01:00
Elias Werberich
fb7c4617e2 RFC2136 RecordType Option (#1457) 2017-03-10 13:58:18 +01:00
Franco Fichtner
73b1d444ee interfaces: small simplification for #1455 2017-03-10 09:19:53 +01:00
Ad Schellevis
1dabd53dce (plugins, interfaces) add ifgroup type, filter in interfaces_groups_edit.php. for https://github.com/opnsense/core/issues/1455 2017-03-10 09:06:37 +01:00
Ad Schellevis
f6d83a94e5 (interface groups) allow virtual interfaces, for https://github.com/opnsense/core/issues/1455 2017-03-09 21:48:26 +01:00
Ad Schellevis
4169afd16e (gwlb.inc) ipprotocol should be stored in gateway_item 2017-03-07 21:30:29 +01:00
Ad Schellevis
4f58e7f897 (gwlb.inc) more cleanups 2017-03-07 21:11:42 +01:00
Ad Schellevis
aa1221ae18 (gwlb.inc) same here, as $ifname for ipv6 is also unique 2017-03-07 20:50:06 +01:00
Ad Schellevis
a5d9897c1e (gwlb.inc) more cleanups, $ifname == $gateway_item['friendlyiface'] looks kind of impossible here, $ifname is unique and not in $gateway_item yet... 2017-03-07 20:43:23 +01:00
Ad Schellevis
79a6df22ad (gwlb.inc) remove some unreachable code in return_gateways_array() 2017-03-07 20:38:07 +01:00
Franco Fichtner
dc1ebe5bad firewall: remove spurious migration for removed setting 2017-03-07 09:05:05 +01:00
Franco Fichtner
e29f1b4038 firewall: add pool options to redirection target in port forward; closes #1423 2017-03-05 20:57:18 +01:00
Franco Fichtner
76a2a1f34e firewall: subnets are valid redirection targets, even 0.0.0.0/0 #1423 2017-03-05 20:39:41 +01:00
Franco Fichtner
87dfc1f126 firewall: add tag/tagged to port forwarding for #1423
It's a bit funny that the help text indicates we can use tag/tagged with
NAT rules as well, because this was never implemented although it really
works.
2017-03-05 20:09:27 +01:00
Franco Fichtner
2e386fe059 pkg: fix plist 2017-03-05 19:29:11 +01:00
Ad Schellevis
63e8101ea7 (firewall) empty means "in"... confusing ;) https://github.com/opnsense/core/blob/17.1.2/src/etc/inc/filter.inc#L2314-L2315 2017-03-05 19:18:06 +01:00
Ad Schellevis
58b4488069 (firewall) add port/address parsing to FilterRule(), should be backwards compatible with current config settings 2017-03-05 19:05:10 +01:00
Ad Schellevis
3e47ec946a (firewall) add new Util class containing often used (static) helpers. 2017-03-05 19:03:38 +01:00
Ad Schellevis
00dfec8ada (filter) filter_generate_port, why all this trickery?? it's either a valid port range or it's not. not need to overreact.
It's better to replace this now, the new style code won't include this "magic".
2017-03-05 19:01:11 +01:00
Ad Schellevis
7f76c06c27 (filter) cleanup, $network_name = $rule[$target]['network'] ... 2017-03-05 17:39:34 +01:00
Franco Fichtner
e134f0e4f3 rc: trap CTRL-C for importer, exit gracefully for resuming boot 2017-03-05 16:06:15 +01:00
Franco Fichtner
83b873d4eb firmware: add new mirror courtsey of http://dmcnet.net/ 2017-03-05 15:16:04 +01:00
Ad Schellevis
51d2acf44e (filter) extend new style FilterRule, adds icmptype, tag, tagged 2017-03-05 14:29:32 +01:00
Ad Schellevis
fc6ad65277 (filter) remove unused parameter divert 2017-03-05 13:53:16 +01:00
Ad Schellevis
9ce93f8266 (filter) remove unused parameter schedlabel 2017-03-05 13:50:54 +01:00
Ad Schellevis
f93dba2adb Merge pull request #1444 from fabianfrz/adjust_footer
translation fix and fix copyright year
2017-03-05 10:56:29 +00:00
Ad Schellevis
71d76a4df2 Merge pull request #1445 from fabianfrz/fix_firewall_log_widget
fix firewall widget:
2017-03-05 10:48:21 +00:00
Ad Schellevis
587e657302 (filter) because referential integrity isn't guaranteed, we need to check for existence of the interface. edge-case of https://github.com/opnsense/core/pull/1419 2017-03-05 11:43:18 +01:00
Fabian Franz
e1110efacd fix firewall widget:
IF -> Interface ("If" can be wrongly translated to a conditional ->
using interface will fix this)
Unlock the cell width: This will prevent Firefox to write over the cell
range.
2017-03-05 11:39:27 +01:00
Fabian Franz
5ae13aaf87 translation fix and fix copyright year 2017-03-04 21:06:36 +01:00
Ad Schellevis
1974000cec (ui) add style property to form headers 2017-03-04 13:52:27 +01:00
Ad Schellevis
bd50b24ab3 (ui) fix bootgrid show order when editing data, first fill form, then show data, makes binding to events easier. 2017-03-04 13:21:49 +01:00
Franco Fichtner
2d03d19668 util: better order for previous 2017-03-04 09:59:20 +01:00
Franco Fichtner
b8c9eb4711 util: dear future reader, don't try to kill init this way
The chances that this gets fed a garbage value has potential to
be close to 1, but we are quite fond of our little init so if this
is needed do it the manual way (as it is already done, at least
for HUP).
2017-03-03 21:02:22 +01:00
Franco Fichtner
844d6b506a interfaces: try to wait for dhclient exit, take 1
PR: https://forum.opnsense.org/index.php?topic=4682.0
2017-03-03 20:47:06 +01:00
Fabian Franz
f0f65fc9ad enable tls certificate checks for some services (#1422)
* enable tls certificate checks for some services

* more dynamic dns security

* additional security

* GratisDNS works -> enable TLS verify
* OVH works -> enable TLS verify
* citynetwork works -> enable
* HE.net Tunnelbroker works -> enable
2017-03-03 19:25:02 +01:00
Franco Fichtner
052745d3b6 rc: create dirname directory by @QuentinC for #1437 2017-03-03 06:11:18 +01:00
Franco Fichtner
d2be8ec913 firewall: don't provide crash report for diagnostic file 2017-03-02 22:22:56 +01:00
Franco Fichtner
261af80c4a rc: add captiveportal backup to importer #1437 2017-03-02 20:15:49 +01:00
Franco Fichtner
156f8d445f system: add captive portal session backup #1437 2017-03-02 20:14:31 +01:00
Franco Fichtner
83b5aae6c3 pkg: second half of previous 2017-03-02 07:02:25 +01:00
Franco Fichtner
72e462453a pkg: split @shadow and @sample syntax, slight differences
Can't guarantee this is the final state, but opnsense-bootstrap
stopping over lingering repository information without the finger-
prints in place is not very helpful either.

Now we have a working copy of the file we need, it is already
reconfigured after install and it now also reverts FreeBSD.conf
back to its required state--which is off--to prevent problems.
2017-03-02 06:55:28 +01:00
Ad Schellevis
39628cd7f3 ui, add debug message for saveFormToEndpoint() error dialog 2017-03-01 19:11:18 +01:00