41 Commits

Author SHA1 Message Date
Franco Fichtner
97daba95d9 network time: we haz a pool! #1374
While here, time-update-interval does not exist and update the
xml lint pass to pick up the sample file, too.
2017-12-21 18:28:24 +01:00
Franco Fichtner
a48167c403 wizard: add unbound to wizard, remove dnssec from default #1962 2017-12-18 21:55:48 +00:00
Franco Fichtner
045598089d unbound: disable dnssec-stripped; closes #1962 2017-11-28 20:38:38 +01:00
Franco Fichtner
fa347e5712 config: set stick multi wan as default #1874 2017-10-19 18:45:43 +00:00
Franco Fichtner
0cdac75bcb config: make shared forwarding the default for 18.1-BETA 2017-10-10 09:48:53 +02:00
Franco Fichtner
32c4930aa2 system: fastforwarding no longer exists
PR: https://github.com/opnsense/src/issues/27
2017-10-02 08:14:58 +02:00
Franco Fichtner
4594fa6dc6 config: versioning is no longer needed 2017-08-16 09:05:51 +02:00
Franco Fichtner
ecbd90e2ef system: set local + no fallback as default auth mode
softcoding local + local fallback seems weird.
2017-07-28 21:34:53 +02:00
Franco Fichtner
9398670ad2 unbound: use resolver w/ dnssec as default for 17.7 2017-06-07 16:04:47 +02:00
Franco Fichtner
983b11f3e3 interfaces: keep dhcp6 config, seems to have been a typo 2017-05-11 12:24:13 +02:00
Franco Fichtner
50b5de04a1 system: console experiment -- modern settings 2017-02-26 13:24:56 +01:00
Ad Schellevis
4ebccaa233 (config) enable aesni in default config, closes https://github.com/opnsense/core/issues/1259 2016-12-19 19:41:36 +01:00
Franco Fichtner
7f91fe62b1 src: back out previous, we're further securing PAM 2016-12-19 11:08:08 +01:00
Franco Fichtner
3c393d98f3 config: repair installer for 17.1-BETA
The installer user is injected for install media login, but
we authenticate against our database now instead.  This has
larger consequences that require a persistent installer user,
which is not so easy to disable/defang after installation.

Hopefully this is temporary.
2016-12-14 07:57:46 +01:00
pioorg
2a025de404 Improved password hashes.
Replaced crypt($password, '$6$') with password_hash and password_verify in order to produce salted hashes from passwords.
2016-11-28 18:17:15 +01:00
Franco Fichtner
96ffce7cff system: default all admins to shell access; closes #1144 2016-08-19 08:27:01 +02:00
Ad Schellevis
4e662fe436 (config) switch default for offloading features, closes https://github.com/opnsense/core/issues/1092 2016-08-01 08:55:44 +02:00
Franco Fichtner
155fca31cf config: zap long gone remnants 2016-07-27 22:29:22 +02:00
Franco Fichtner
a1ab56bb2c config: make Etc/UTC the new default time zone 2016-07-21 22:06:09 +02:00
Franco Fichtner
40c8dc03e7 dashboard: new defaults for dashboard (2 cols, system info left) 2016-07-01 18:19:07 +02:00
Franco Fichtner
af4ce2d0ae cron: migrate immutable jobs; #911 2016-04-25 20:28:05 +02:00
Franco Fichtner
9ce4fc1d95 cron: bogons already registered/stripped; #911 2016-04-25 18:57:37 +02:00
Franco Fichtner
fd3ac67c69 cron: start removing the immutable cron jobs in the config; #911 2016-04-25 18:54:45 +02:00
Franco Fichtner
3161dece5f configuration: pin down backup count+allow none+simplify GUI 2016-04-11 11:26:56 +02:00
Franco Fichtner
eb53c06567 system: migrate ip version prefer option #832 2016-04-07 22:20:57 +02:00
Franco Fichtner
30cce0138e config: prune dysfunct default settings further
<tag>
      <!-- foo -->
    </tag>

Array tags are saved as text tags instead, clobbering the initial
configuration...
2016-03-03 07:50:23 +01:00
Franco Fichtner
8d7a93c8c5 vpn: if pptp server mode is != off it's on, fix sample config 2016-03-02 21:33:58 +01:00
Franco Fichtner
4ac7d1cfee config: adapt sample widgets 2015-12-29 20:33:26 +01:00
Franco Fichtner
5e5e6c2f27 captive portal: bye bye my love
The captive portal is being replaced!  This hooks up the
new page into the services section while ditching most of
the old code.  There'll be no migration, if you use package
`opnsense-devel' and the captive portal you'll have to switch
to `opnsense' or migrate to the new code.  Beware that the
new captive portal is going to be a huge step forward but
features will trickle in week after week until it is stable
enough to merge it.  Latest release date is going to be 16.1.
2015-10-15 23:48:23 +02:00
Franco Fichtner
2db19bbf0f src: purge unreachable gmirror files
Spotted by: @fabianfrz
2015-10-11 11:32:57 +02:00
Franco Fichtner
20d2427429 config: add one more to previous 2015-09-20 09:40:32 +02:00
Franco Fichtner
ed59098b70 config: strip harmess transformations from sample
o comment blocks filled arrays disappear
o empty array tags disappear
o empty value tags collapse

This only leaves comment blocks in empty tags, which create
whitespace noise, which fucks up the config.xml real bad,
rippling through to the code that deal with is_array, isset
and actual = array() assignments to fix the faulty config.
Will clean this up one by one later.
2015-09-20 09:31:55 +02:00
Franco Fichtner
f763c7cdc7 config: reformat config.xml sample, some additions 2015-09-16 11:53:02 +02:00
Franco Fichtner
a66c7889c7 users: the infamous all group kicks the proverbial bucket
The all group was previously removed from the root account due
to the fact that it won't be applied to new user accounts anymore.
This isn't bad as far as we've seen so we went a bit further,
removing the group altogether.  Nice side effect is that a lot of
conditional code just disappears, so I doubt anyone will have any
hard feelings later.
2015-09-14 18:22:45 +02:00
Franco Fichtner
5ae72f04c2 config: sample file has had garbage for aliases and ipsec since forever :( 2015-08-26 12:15:22 +02:00
Ad Schellevis
9f66d8f30b (config) remove "all" from root user in sample config to keep things consistent 2015-08-13 16:28:38 +00:00
Franco Fichtner
11bb2b9004 system: add defaults for newer sysctls 2015-08-13 17:17:54 +02:00
Franco Fichtner
6c49287a40 system settings: weave in awesome feedback
Submitted by: Curt Dox
2015-07-27 16:01:16 +02:00
Franco Fichtner
04a07da1d9 config.xml: remove obsolete firmware knob 2015-07-24 08:42:00 +02:00
Franco Fichtner
a5c611051a Revert "config: change the factory defaults to use state of the art tech"
This reverts commit 6e1822a271f8275a4e8af7c0d81b2fe090d18f53.
Not such a good idea as discussed with Ad.
2015-07-24 08:41:39 +02:00
Franco Fichtner
20f6c70ba0 pkg: pick up sample files automatically 2015-07-16 13:51:57 +02:00