6822 Commits

Author SHA1 Message Date
Ad Schellevis
9ce93f8266 (filter) remove unused parameter schedlabel 2017-03-05 13:50:54 +01:00
Ad Schellevis
f93dba2adb Merge pull request #1444 from fabianfrz/adjust_footer
translation fix and fix copyright year
2017-03-05 10:56:29 +00:00
Ad Schellevis
71d76a4df2 Merge pull request #1445 from fabianfrz/fix_firewall_log_widget
fix firewall widget:
2017-03-05 10:48:21 +00:00
Ad Schellevis
587e657302 (filter) because referential integrity isn't guaranteed, we need to check for existence of the interface. edge-case of https://github.com/opnsense/core/pull/1419 2017-03-05 11:43:18 +01:00
Fabian Franz
e1110efacd fix firewall widget:
IF -> Interface ("If" can be wrongly translated to a conditional ->
using interface will fix this)
Unlock the cell width: This will prevent Firefox to write over the cell
range.
2017-03-05 11:39:27 +01:00
Fabian Franz
5ae13aaf87 translation fix and fix copyright year 2017-03-04 21:06:36 +01:00
Ad Schellevis
1974000cec (ui) add style property to form headers 2017-03-04 13:52:27 +01:00
Ad Schellevis
bd50b24ab3 (ui) fix bootgrid show order when editing data, first fill form, then show data, makes binding to events easier. 2017-03-04 13:21:49 +01:00
Franco Fichtner
2d03d19668 util: better order for previous 2017-03-04 09:59:20 +01:00
Franco Fichtner
b8c9eb4711 util: dear future reader, don't try to kill init this way
The chances that this gets fed a garbage value has potential to
be close to 1, but we are quite fond of our little init so if this
is needed do it the manual way (as it is already done, at least
for HUP).
2017-03-03 21:02:22 +01:00
Franco Fichtner
844d6b506a interfaces: try to wait for dhclient exit, take 1
PR: https://forum.opnsense.org/index.php?topic=4682.0
2017-03-03 20:47:06 +01:00
Fabian Franz
f0f65fc9ad enable tls certificate checks for some services (#1422)
* enable tls certificate checks for some services

* more dynamic dns security

* additional security

* GratisDNS works -> enable TLS verify
* OVH works -> enable TLS verify
* citynetwork works -> enable
* HE.net Tunnelbroker works -> enable
2017-03-03 19:25:02 +01:00
Franco Fichtner
052745d3b6 rc: create dirname directory by @QuentinC for #1437 2017-03-03 06:11:18 +01:00
Franco Fichtner
d2be8ec913 firewall: don't provide crash report for diagnostic file 2017-03-02 22:22:56 +01:00
Franco Fichtner
261af80c4a rc: add captiveportal backup to importer #1437 2017-03-02 20:15:49 +01:00
Franco Fichtner
156f8d445f system: add captive portal session backup #1437 2017-03-02 20:14:31 +01:00
Franco Fichtner
83b5aae6c3 pkg: second half of previous 2017-03-02 07:02:25 +01:00
Franco Fichtner
72e462453a pkg: split @shadow and @sample syntax, slight differences
Can't guarantee this is the final state, but opnsense-bootstrap
stopping over lingering repository information without the finger-
prints in place is not very helpful either.

Now we have a working copy of the file we need, it is already
reconfigured after install and it now also reverts FreeBSD.conf
back to its required state--which is off--to prevent problems.
2017-03-02 06:55:28 +01:00
Ad Schellevis
39628cd7f3 ui, add debug message for saveFormToEndpoint() error dialog 2017-03-01 19:11:18 +01:00
Franco Fichtner
0d6a833628 mvc: use internal class/field representation on API error
Before:

[OPNsense.IDS.IDS.general.ips] value should be a boolean (0,1)

After:

[OPNsense\IDS\IDS:general.ips] value should be a boolean (0,1)
2017-03-01 12:23:54 +01:00
Franco Fichtner
49df410698 pkg: fix plist 2017-03-01 12:23:45 +01:00
Ad Schellevis
d93cbc6e0c ui, upgrade jquery 1.12.0 to 1.12.4, eventually we might considering upgrading to a newer major version, but lets make sure we're using the latest 1.12 version first 2017-03-01 12:05:28 +01:00
Ad Schellevis
f54260277a mvc, oops, when sending 0 as boolean, we mean "0".... https://github.com/opnsense/core/issues/1442 2017-03-01 12:03:05 +01:00
Franco Fichtner
4cfead2dae rc: circle back to reboot, it properly blocks the tty 2017-03-01 09:42:39 +01:00
Franco Fichtner
177010dd59 intrusion detection: tweak previous 2017-03-01 09:20:55 +01:00
Franco Fichtner
bbe9e070cb intrusion detection: finish up after #1129
This reverts commit 25d8428cb6b6d8d0f22e49d70ef6f7ce49b14a3c and adds
normal enabled/disable indicators.  POST is all weird today, but so
far this looks good.
2017-03-01 08:06:57 +01:00
Franco Fichtner
1bf82da319 rc: advise a reboot if not in boot mode 2017-03-01 07:00:38 +01:00
Franco Fichtner
3ebbdfd994 rc: command line arg mode for importer 2017-03-01 06:55:57 +01:00
Franco Fichtner
16adc594c6 rc: starting importer directly needs no timeout 2017-03-01 06:40:12 +01:00
Franco Fichtner
fedfd0a4a8 rc: recursion is bad ;) 2017-03-01 06:38:00 +01:00
Franco Fichtner
c4ec7689e8 rc: allow use of importer anytime, add conveniance aliases 2017-03-01 06:30:32 +01:00
Franco Fichtner
d1d200b6b4 rc: small installer/importer tweaks 2017-02-28 19:11:04 +01:00
Ad Schellevis
bed87f3d27 (mvc) send post requests as json body, url encoding isn't always typesafe 2017-02-28 17:02:00 +01:00
Ad Schellevis
29e3bb3e6f (mvc) csrf protection, not very likely to hit in normal situations, but when using legacy free applications, there might not be a csrf token leading to a denial of all requests. 2017-02-28 14:26:10 +01:00
Ad Schellevis
b08d26db14 (filter) force kill of filterdns, filterdns doesn't always listen properly to TERM, causing endless waits 2017-02-28 10:37:40 +01:00
Ad Schellevis
8d00e48857 (filter/aliases) allow port alias nesting, closes https://github.com/opnsense/core/issues/1436 2017-02-28 09:08:01 +01:00
Franco Fichtner
2981b6637f captive portal: fixup "permanent" arp entry parse #1344 2017-02-28 09:06:06 +01:00
Ad Schellevis
3151c87eec CP, refactor arp list, closes https://github.com/opnsense/core/issues/1344 2017-02-28 08:52:24 +01:00
Ad Schellevis
e51bc802f4 openvpn client, double escaped user/passs. closes https://github.com/opnsense/core/issues/1370 2017-02-27 21:26:08 +01:00
Ad Schellevis
a481668fea (proxy) add a notice to inform the user about the need to download the list. closes https://github.com/opnsense/core/issues/1432 2017-02-27 20:19:10 +01:00
Ad Schellevis
5d383f1e87 Merge pull request #1428 from phpb-com/rules_optimization
Add ruleset-optimization option in firewall settings.
2017-02-27 13:14:47 +00:00
Ian Matyssik
8cdd61f0be Add ruleset-optimization for better performance 2017-02-27 22:10:07 +09:00
Ad Schellevis
ebdf0a8f1c Merge pull request #1427 from phpb-com/filterinc_cleanup
Further clean-up of generated firewall rules.
2017-02-27 11:44:12 +00:00
Ad Schellevis
543df477ce api, missing check for existing method. 2017-02-27 10:25:08 +01:00
Franco Fichtner
b7f438d5bf rc: mute importer install media touch 2017-02-27 10:16:45 +01:00
Franco Fichtner
cd5b018866 rc: avoid unnecessary errors #1372 2017-02-27 09:34:53 +01:00
Franco Fichtner
ce32fb747b rc: move importer to very early spot, add timeout #1372 2017-02-27 09:15:35 +01:00
Ian Matyssik
e839ef2c3a Simplify route-to rules from the firewall, probably can be cleaned even more 2017-02-27 09:12:51 +09:00
Ian Matyssik
25eeb7c9b2 Remove filter_generate_network_aliases since it is not used anywhere and redundant with internal (<if>)/(<if>:network) directives 2017-02-27 09:12:51 +09:00
Franco Fichtner
21b84ed2a8 rc: openssl.cnf is a sample file now via upstream 2017-02-26 23:20:36 +01:00