5957 Commits

Author SHA1 Message Date
Franco Fichtner
9a117cd0ff rc: syshook print improvements 2016-09-21 07:10:08 +02:00
Avi H. D
e6f5a19190 Add CSV capability information to 'SSL no bump sites' form tool tip 2016-09-19 09:56:04 +02:00
Franco Fichtner
5a21a07ab4 interfaces: fix missing help toggle in settings
Reported by: Simon Brunet
2016-09-19 08:56:07 +02:00
Franco Fichtner
d569a8e180 access: allow root disable and prevent to disable own user
PR: https://forum.opnsense.org/index.php?topic=3684
2016-09-19 07:49:35 +02:00
Franco Fichtner
2f5468ae66 firewall: not my day :) 2016-09-18 20:26:33 +02:00
Franco Fichtner
1a2ab2afe5 src: whitespace sweep 2016-09-18 20:14:33 +02:00
Franco Fichtner
d27cdb4351 firewall: and another one 2016-09-18 20:08:26 +02:00
Franco Fichtner
1334374b61 firewall: fix typo 2016-09-18 20:07:22 +02:00
Franco Fichtner
0cd0c89575 firewall: tweak previous changes, '[+]' ASCII art will be confusing
Expand / join the descriptive text and explain floating rules a bit more.
2016-09-18 20:03:28 +02:00
Franco Fichtner
8f243538ad consistent fix for 64f3742fb3 2016-09-18 18:34:02 +02:00
Ad Schellevis
86996d7bf7 (unbound) get_interface_subnet(v6) can return null, ignore network in that case.
Eventually we should move this kind of "get all attached networks" to a single and simple function, which uses legacy_get_interface_addresses() underneath. but there's still too much obscure code in this region to remove it easily
2016-09-18 12:18:48 +02:00
Ad Schellevis
ffbb29e414 (interfaces.inc) move single used find_interface_subnetv6() into get_interface_subnetv6() 2016-09-18 12:13:25 +02:00
Franco Fichtner
4461ea2391 rc: order syshooks by name 2016-09-16 17:09:06 +02:00
Franco Fichtner
4e16a07515 auth: parse for "\0", allow empty password for #998 2016-09-16 16:55:02 +02:00
Franco Fichtner
803af49280 interfaces: defang netgraph attach/detach for #1188
We don't particularly need this code and the utility as netgraph
is always attached on load as long as we don't detach and the
attach per interface is a custom feature that requires a kernel
patch we don't want to keep around for 17.1.

Only thing we need to measure is the performance impact of not
detaching netgraph.  This only pertains to ethernet devices
anyway.

We do, however, keep interface_netgraph_needed() around for
reference as it's harmless by default.
2016-09-16 15:27:30 +02:00
Franco Fichtner
250a1493d8 pkg: it's ok for -devel to pull in the PAM glue now 2016-09-16 09:46:22 +02:00
Franco Fichtner
0cdd609ec6 pkg: omit spurious delete 2016-09-16 09:18:47 +02:00
Ad Schellevis
0be295ac38 (firewall, nati) wrong validation 2016-09-15 19:36:36 +02:00
Ad Schellevis
cdf0573539 (captive portal) also remove unactive zones on CP stop 2016-09-15 15:58:04 +02:00
Ad Schellevis
cc18336d35 (captive portal) when using multiple zones, uninstall the correct zone directories 2016-09-15 15:48:55 +02:00
Ad Schellevis
190ac1064d Merge pull request #1186 from evbevz/ldap-auth-fix
LDAP fix: handle legal boolean return result from searchUsers()
2016-09-15 15:26:04 +02:00
Ad Schellevis
f107116e7d ditch load_mac_manufacturer_table, replace with configd call 2016-09-15 15:21:04 +02:00
Ad Schellevis
5ad7adc60a remove duplicate checks in interfaces.inc 2016-09-15 14:46:33 +02:00
Ad Schellevis
0db74efff4 lets not try to hide issues with a NIC, 11 year old code. 2016-09-15 14:30:40 +02:00
Ad Schellevis
2f86048748 Merge pull request #1187 from opnsense/carp_improvements
Carp improvements
2016-09-15 11:51:16 +02:00
Ad Schellevis
dcd0e06867 small style changes 2016-09-15 11:29:49 +02:00
Ad Schellevis
2c25e3e31c oops, wrong block... 2016-09-15 11:18:44 +02:00
Ad Schellevis
75e7e0e44d cleanup carp_status.php 2016-09-15 11:15:38 +02:00
Ad Schellevis
51aec445ec fix typo 2016-09-15 10:33:13 +02:00
Ad Schellevis
5497ae4e78 revert carp to BSD standards 2016-09-15 10:27:38 +02:00
evbevz
652089dd78 LDAP fix: handle legal boolean return result from searchUsers() 2016-09-15 10:26:38 +03:00
Ad Schellevis
c782d9e813 remove unused link_ip_to_carp_interface in interfaces.inc 2016-09-14 21:30:47 +02:00
Ad Schellevis
5c6a2ef883 remove duplicate code in interfaces.inc 2016-09-14 21:23:50 +02:00
Ad Schellevis
87011debbf (vips) remove odd logic 2016-09-14 21:21:09 +02:00
Ad Schellevis
1ccf6b4527 remove idletimeout requirement for ondemand connections 2016-09-14 20:08:37 +02:00
Ad Schellevis
b56bcf8392 wrap gettext() , closes https://github.com/opnsense/core/issues/1181 2016-09-14 10:29:50 +02:00
Ad Schellevis
ac8eba7d0f another test 2016-09-13 20:28:30 +02:00
Ad Schellevis
bc2765ea86 bring vips down when interface is down, fix carp setup order. 2016-09-12 20:50:52 +02:00
Ad Schellevis
b90babbfd2 add opnsense-auth helper for pam support, https://github.com/opnsense/core/issues/998 2016-09-12 20:38:48 +02:00
Ad Schellevis
7b59e10cf8 (openvpn, auth) remove dead code 2016-09-12 18:36:11 +02:00
Ad Schellevis
9ba2b2f620 (ipsec, xauth) cleanup ipsec.auth-user.php script before moving to pam.
The old script had a lot of unused code in it, either stuff that couldn't be configured from OPNsense or dead code.
2016-09-12 18:16:46 +02:00
Ad Schellevis
f4e6e6f457 add some comments 2016-09-09 21:09:49 +02:00
Ad Schellevis
c7b1e46219 (interfaces/qinq) fix typo's 2016-09-09 18:02:48 +02:00
Ad Schellevis
ed4c923c97 Revert "(ids) style fix", aaa0ddafe1 can cause "Allowed memory size of ... bytes exhausted", better to set a sane default max here.
This reverts commit aaa0ddafe1179cebc68146bdc3c30b8b90c564b8.
2016-09-09 15:16:25 +02:00
Ad Schellevis
cf34abbac4 (firmware) change loader.conf.local generation, as discussed with @fichtner 2016-09-09 09:43:06 +02:00
Ad Schellevis
65653b7c97 missing global in filter.inc 2016-09-08 15:06:12 +02:00
Ad Schellevis
0e158f0b0c (filter.inc) simply check if not empty 2016-09-08 14:05:33 +02:00
Ad Schellevis
6c7224072d missed an enter in the previous commit 2016-09-08 10:48:29 +02:00
Ad Schellevis
af66f0da7c (firmware) add configd "firmware loader" commands to control the contents of /boot/loader.conf.local
plugins can use this call to register new bootup parameters, new commands added:

configctl firmware loader show
configctl firmware loader rm <parameter>
configctl firmware loader edit <parameter> <value>
2016-09-08 10:44:55 +02:00
Ad Schellevis
d3d583ab83 (firewall, nat) change "Redirect target IP" to alias/host selectionbox like the rest. 2016-09-06 21:00:06 +02:00