12040 Commits

Author SHA1 Message Date
Franco Fichtner
98dcfcf37a system: hw.usb.no_pf was removed in FreeBSD 10
Also see: https://github.com/freebsd/freebsd/commit/cb8b05054
2020-08-24 15:22:07 +02:00
Franco Fichtner
34ebcf6fb5 firmware: properly report an unsigned repostory
The repository is rejected but an internal error returned.  Let's
make this explicit as it is a configuration error anyway.
2020-08-24 11:44:25 +02:00
gap579137
f9f640ea0a
Updated Project Block Lists Links (#4288) 2020-08-24 09:14:27 +02:00
Franco Fichtner
c56d332f07 reporting: a bit of style in previous
* Init and use $cmd_args before going into the switch
* Use exec_safe() where we return dynamic output
* PSR 12 style
2020-08-24 08:18:56 +02:00
kcaj-burr
2a7a3a97e0
Add Traffic Filter for Private IPv4 Networks (#4279) 2020-08-23 19:14:53 +02:00
Ad Schellevis
5d8302f3c3 IDPS: allow search for status enabled/disabled.
o one constraint, it will only show "applied" status (since apply flushes to disk)

for https://github.com/opnsense/core/issues/4280
2020-08-23 19:08:27 +02:00
Franco Fichtner
2790c0b657 pkg: fix plist 2020-08-23 11:52:16 +02:00
Ad Schellevis
77aa218ba8 firewall -> aliases: bogons not loaded on initial load, due to bogons aliases registered again without file reference. for https://github.com/opnsense/core/issues/4277 2020-08-21 15:54:35 +02:00
Ad Schellevis
89cfc06d8e Lobby: Dashboard - gateway status widget, add gateway status endpoint (api/routes/gateway/status) and refactor widget to use it. closes https://github.com/opnsense/core/issues/4261 2020-08-21 12:36:10 +02:00
Franco Fichtner
7cfa870850 web proxy: move error directory template
Personally I prefer "_" and keeping the suffix here as we can still
grep for extension like so "error_directory.in" since "." in regex
means any character.
2020-08-21 07:30:56 +02:00
Franco Fichtner
10fe321bf3 system: restore damaged bogons files on startup; closes #4277 2020-08-20 16:44:41 +02:00
Ad Schellevis
9090a03261 Proxy: no form-inline on previous for https://github.com/opnsense/core/issues/4278 2020-08-20 11:38:08 +02:00
Ad Schellevis
7b5c5c9b17 Proxy: forgot about build magic replacing ".in", fix targets to cope with that, while there add an apply button as well for clarity. closes https://github.com/opnsense/core/issues/4278 2020-08-20 11:31:19 +02:00
Franco Fichtner
87efd07831 ipsec: style sweep 2020-08-20 06:57:03 +02:00
Ad Schellevis
bc342e1eef Interfaces -> Diagnostics -> Netstat : add listen-queue-sizes in Socket tab 2020-08-19 20:36:06 +02:00
Franco Fichtner
00a4848004 system: remove syslog-ng workaround, all better now 2020-08-19 14:38:32 +02:00
Franco Fichtner
ff797aa668 system: add new-password hint for Chrome on login form
This may prevent Chrome from falsely caching CSRF tokens.  The issue
is really obscure and only happens every once in a while but test-
driving this has made the situation disappear for the moment.
2020-08-19 09:11:57 +02:00
Franco Fichtner
166427da6d system: add REQUESTS_CA_BUNDLE to rc.syshook and rc as well 2020-08-19 09:06:10 +02:00
Franco Fichtner
1fb4d808d6 system: use /etc/ssl/cert.pem consistently 2020-08-19 08:59:46 +02:00
Franco Fichtner
5a76be41db system: fix permission of startup helper 2020-08-19 08:56:02 +02:00
Ad Schellevis
ae36505873 python/env make sure requests library uses system certificate store when being called from cron or configd (set REQUESTS_CA_BUNDLE) 2020-08-18 20:27:22 +02:00
Ad Schellevis
71e1393b73 jinja2: add regex_replace, pull in https://github.com/opnsense/core/pull/4225 using lambda 2020-08-18 18:26:56 +02:00
Franco Fichtner
c9f2094200 system: adjust wording 2020-08-18 17:26:10 +02:00
Franco Fichtner
1c488d823f pkg: fix plist 2020-08-18 17:12:43 +02:00
Ad Schellevis
d0a3bb18c7 syslog-ng: move syshook as per request @fichtner 2020-08-18 16:44:30 +02:00
Franco Fichtner
dea080c695 interfaces: bugs be bugs, time to remove training wheels 2020-08-18 16:25:06 +02:00
Franco Fichtner
83ef9725d5 system: a bit easier to read 2020-08-18 16:21:53 +02:00
Franco Fichtner
de981c90bc pkg: fix plist 2020-08-18 16:21:42 +02:00
Ad Schellevis
863b3cc95b syslog-ng: force restart after boot sequence 2020-08-18 15:59:02 +02:00
Ad Schellevis
3a538fb197 Syslog: rename syslog service description and hide legacy mode when not enabled. ref https://github.com/opnsense/core/issues/4263 2020-08-17 12:07:18 +02:00
Ad Schellevis
80696b3be7 Firewall:aliases prevent pfctl error messages from being suppressed. closes https://github.com/opnsense/core/issues/4266 2020-08-16 10:55:21 +02:00
Ad Schellevis
5a141a79c9 syslog: interpretation difference between legacy (clog) and new style logging when send via syslog, clog files are not split into directories (module_mylog.log vs module/mylog_XXXXXX.log) 2020-08-14 16:53:43 +02:00
Ad Schellevis
f226eecc87 syslog: cleanup unused legacy function 2020-08-14 16:44:46 +02:00
Ad Schellevis
6cb0f29268 flowd_aggregator. better replace line endings when sending traceback to syslog. 2020-08-14 09:50:16 +02:00
Ad Schellevis
26ab28d522 Firewall / aliases: internally reserved keywords, second case in a week, let's make sure we exclude all yacc doesn't like (41ba6e29a8/sbin/pfctl/parse.y (L5482))
closes https://github.com/opnsense/core/issues/4251
2020-08-12 14:45:38 +02:00
Ad Schellevis
8c6df07be7 Proxy: json access log, minor bugfix for https://github.com/opnsense/core/issues/4244
response.body.bytes vs response.bytes, %<st equals the message size
2020-08-12 11:51:40 +02:00
Franco Fichtner
3eed068675 web proxy: help text style 2020-08-12 09:08:32 +02:00
Ad Schellevis
2784956853 syslog-ng: initial startup issues. try to sleep for 0.5 seconds before using syslogs socket. 2020-08-10 22:36:40 +02:00
Ad Schellevis
53c22497ae Proxy: better explain where access log entries are heading when syslog is selected, slightly related to https://github.com/opnsense/core/issues/4244 2020-08-10 18:14:33 +02:00
Ad Schellevis
b9823cd4d1 authgui.inc: wrong jQuery version. closes https://github.com/opnsense/core/issues/4250 2020-08-10 15:30:50 +02:00
Ad Schellevis
8fdb97a2f4 Firewall / aliases. resolve mac addresses at fixed ttl for https://github.com/opnsense/core/issues/4248 2020-08-10 14:23:20 +02:00
Ad Schellevis
c2c424aea2 Firewall / aliases - allow mac addresses for https://github.com/opnsense/core/issues/4248 2020-08-09 18:44:31 +02:00
Ad Schellevis
e7ee753f68 Firewall / alias, log is reserved too. closes https://github.com/opnsense/core/issues/4246 2020-08-09 17:50:15 +02:00
Ad Schellevis
9ec7391446 fix plist 2020-08-09 13:08:11 +02:00
Ad Schellevis
e388020e49 mvc: remove unused sample_input_field 2020-08-09 13:07:32 +02:00
Ad Schellevis
58b672fcab IPsec: simplify previous with legacy_interface_create() 2020-08-07 19:57:23 +02:00
Ad Schellevis
9167000171 IPSec: prevent ipsec vti interface to hit 32768 limit (create numbered, rename and attach afterwards)
@fichtner as promised,  the almost one liner :)
2020-08-07 17:30:38 +02:00
Ad Schellevis
5bd793a8a0 Web proxy: add json output, following Elastic Common Schema (ECS) reference. closes https://github.com/opnsense/core/issues/4244
o Extracts most of the attributes from our extended log format, when X-Request-Event-Id header is set it will be included as event id.
o Added log format for internal ui parsing (extract timestamp)

* https://github.com/elastic/ecs/blob/master/generated/csv/fields.csv
* http://www.squid-cache.org/Doc/config/logformat/

Sponsored by Incenter Technology (https://www.incenter.tech/)
2020-08-07 16:54:07 +02:00
Franco Fichtner
2344a7b40c src: lint and stylsrc: lint and stylee 2020-08-07 13:06:04 +02:00
Franco Fichtner
e22bb69cb6 firmware: ignore man page database regeneration
Looks like on the running system and in the build system the values
are static but obviously going from build to running system the
regenerate causes the checksums to shift.  Not a security issue for
the "man" page databadse so better to hide these files from the
audit to avoid confusion and questions.

PR: https://forum.opnsense.org/index.php?topic=18484.0
2020-08-07 12:51:59 +02:00