17828 Commits

Author SHA1 Message Date
Franco Fichtner
a08b79edbc firmware: switch to 25.7 development mode 2025-01-29 07:41:40 +01:00
Franco Fichtner
ce194034bb firmware: almost there 2025-01-28 08:39:36 +01:00
Stephan de Wit
c9a3a84127 unbound: reporting: update chartjs references 2025-01-27 11:20:55 +01:00
Franco Fichtner
e6ef56170e firmware: fix "r" abbreviation vs. version_compare(); closes #8244 2025-01-27 11:16:32 +01:00
Ad Schellevis
03a8812a3b Firewall: Aliases - add "URL Table in JSON format (IPs)" type which parses json payloads and extracts addresses, closes https://github.com/opnsense/core/issues/8107
While here, also fix a minor issue in https://github.com/opnsense/core/pull/8238 to calculate a proper alias has value when auth properties are specified.
2025-01-26 16:34:11 +01:00
Ben Smithurst
3654b42210
fix undefined array key warnings (#8243) 2025-01-24 10:59:50 +01:00
Ad Schellevis
6765a6b25b firewall: anti-lockout and "allow access to DHCP failover" automatic rules fix, closes https://github.com/opnsense/core/issues/8242 2025-01-24 10:23:15 +01:00
Stephan de Wit
8d26447e82
aliases: add optional authorization for URL type aliases (#8238)
* aliases: add optional authorization for URL type aliases

* aliases: missing break statement

* aliases: update helptext and link to proper id

* aliases: merge token and password fields and shorten code

* Firewall: Aliases - minor modifications for https://github.com/opnsense/core/pull/8238

o re-add selectpicker, title on select killed the default bevaior
o change token to password as the default use-case is username+password, bearer is less common / functional

* aliases: validation should be adjusted as such

---------

Co-authored-by: Ad Schellevis <ad@opnsense.org>
2025-01-24 09:12:10 +01:00
Stephan de Wit
9900d91cd5 system: weird spot in status update handling 2025-01-23 17:00:17 +01:00
Stephan de Wit
b7ba53634b suricata: policy: policy content dropdown missing data-container 2025-01-23 15:04:33 +01:00
Stephan de Wit
7c3048ecfa firewall: automation: typo in filter rule dialog 2025-01-23 14:59:37 +01:00
Stephan de Wit
f37256980e system: fix plist 2025-01-23 14:57:27 +01:00
Ad Schellevis
18fc1f0797 Services: Monit - flag overwrites when they exist (https://docs.opnsense.org/manual/monit.html#advanced-configurations) 2025-01-23 14:43:26 +01:00
Ad Schellevis
526d747db7 VPN: OpenVPN: Instances - add validation "A disabled renegotiation time requires a token lifetime.". closes https://github.com/opnsense/core/pull/8203 2025-01-23 14:06:09 +01:00
Ad Schellevis
e43bca743b Services: Unbound DNS - flag overwrites when they exists (https://docs.opnsense.org/manual/unbound.html#advanced-configurations) 2025-01-23 13:38:52 +01:00
Ad Schellevis
e4b6ec183b Firewall: NAT: Port Forward - fix unassociated rule, closes https://github.com/opnsense/core/pull/8198
It's probably still best to prevent editing associated rules as we can not guarantee settings stick, for unassociated rules, we should be able to edit them.
Fixes missing type in the process here (on firewall rules).
2025-01-23 11:23:21 +01:00
Monviech
a05c23133d
firewall/nat: Add missing columns in one-to-one nat bootgrid (#8237)
Fixes: https://github.com/opnsense/core/issues/8235
2025-01-23 11:11:57 +01:00
Franco Fichtner
7335db7fb1 installer: one more tweak for powering down 2025-01-23 10:42:46 +01:00
Ad Schellevis
9b40922f1d Services: Intrusion Detection: Policy - cleanse metadata for brackets, closes https://github.com/opnsense/core/issues/8232 2025-01-22 18:50:17 +01:00
Stephan de Wit
23fd657f08 theme: compile sass for a6b0a8593f 2025-01-22 14:40:43 +01:00
Stephan de Wit
d752050a11 system: adjust CSS for ChartJS v4
maintainAspectRatio has changed to respect the container height.
This has introduced issues as is described in the issue linked in
this commit. Since some of the chart containers rely on maintainAspectRatio
being set to false, setting the aspect-ratio in CSS there will cause
those charts to ignore this setting, causing infinite scaling. These
containers are excluded from the workaround using
canvas-container-noaspectratio. Since these charts do not change
in height, they are not subject to the same degree of responsiveness.

While here, using a chart with an overflowable widget seems unnecessary
and is causing visual artifacts. Eventually we want to split up the
"expansion" logic to their own widgets or configurable setting anyway.
2025-01-22 14:40:43 +01:00
Stephan de Wit
343ba9ada3 traffic: account for ChartJS v4 upgrade here as well 2025-01-22 14:40:43 +01:00
Stephan de Wit
43e6bdb205 system: upgrade ChartJS to v4
A couple of notes:

- the streaming plugin is not officially supported with ChartJS v4. Instead, a fork
has been used (https://socket.dev/npm/package/@robloche/chartjs-plugin-streaming/overview/3.1.0).
This fork required a oneline-fix which has as of yet not been applied to the
minified or regular .js file, only to the .esm.js file
(see https://socket.dev/npm/package/@robloche/chartjs-plugin-streaming/diff/3.1.0).
- Only the .umd.js version of ChartJSv4 seems to work out of the box.
- The colorschemes plugin is also a fork (https://github.com/MaximBelov/chartjs-plugin-colorschemes)
- adapter-moment works out of the box.
- This commit has not been thoroughly tested across all usages of ChartJS in the UI.
- The responsive resizing nature of canvas elements using ChartJS don't seem to work
anymore when expanding a widget.
2025-01-22 14:40:43 +01:00
Ad Schellevis
5d596601d4 VPN: IPsec - add banner message when using custom configuration files. closes https://github.com/opnsense/core/issues/8093 2025-01-22 12:00:51 +01:00
Franco Fichtner
2bb0301fa3 src: style sweep 2025-01-22 11:12:36 +01:00
Ad Schellevis
4f12007431 Services: Unbound DNS: Blocklist - cleanup available blocklists and add https://github.com/hagezi/dns-blocklists
closes https://github.com/opnsense/core/issues/8224

Deprecated (but can still be downloaded for compatibility reasons):

* NoCoin List
* All Porn List
* PornTop1M List
* Simple Ad List
* Simple Tracker List
* WindowsSpyBlocker (*)
2025-01-22 10:54:49 +01:00
Stephan de Wit
788680a780 system: mute disk space status in case of live install media 2025-01-22 10:06:03 +01:00
Stephan de Wit
cfdd274979 system: optimize system status collection
- split up the logic into class collection and status collection
so that out of scope objects don't need to check their status.
- with the previous, status dismissal doesn't need a status check
either anymore
- remove the UI delay from head.inc as well
- scale up the disk space status thresholds a bit for systems with
lower assigned disk space
- non-persistent status objects without a location had their
pointer-events removed, making it non-dismissable
2025-01-22 09:55:51 +01:00
Franco Fichtner
dcc457b580 LICENSE: sync 2025-01-22 08:05:20 +01:00
Ad Schellevis
5a9a551425 login/www: prioritize index page and prevent redirection to a /api page on login, closes https://github.com/opnsense/core/pull/8222 2025-01-21 20:43:24 +01:00
Ad Schellevis
ed7a90194c Firewall: Rules - add experimental inline shaper support 2025-01-21 19:52:50 +01:00
John Fieber
c375cc5050
mvc: fix NetworkValidator for IPv4-mapped addresses with netmask (#8228)
The NetworkValidator fails on IPv4-mapped addresses[1], for example ::ffff:198.51.100.0/120.  Inferring IPv4 from the presence of a period (.) fails as these IPv6 address forms contain periods. Inferring IPv6 from the presence of a colon (:) should be more robust.

1. https://www.rfc-editor.org/rfc/rfc4291#section-2.2
2025-01-21 19:45:15 +01:00
Franco Fichtner
c38dbab3d2 installer: seems to be the other way around 2025-01-21 18:50:31 +01:00
Franco Fichtner
814e983052 system: fix 'installer' user's use of $force_password
While here simplify the unlock code and correct the comment.
2025-01-21 17:05:20 +01:00
Franco Fichtner
c8871daa07 installer: allow halting after install
PR: https://github.com/opnsense/installer/issues/20
2025-01-21 15:49:07 +01:00
Franco Fichtner
60f297f5a6 plugins: turning binary data into JSON may fail globally
By ignoring invalid UTF-8 we can get the bulk of the data.  It's
not likely we are ever going to get unencoded binary data through
JSON, especially in pluginctl.

PR: https://forum.opnsense.org/index.php?topic=45194.0
2025-01-21 13:33:28 +01:00
Franco Fichtner
2862db60b3 src: style 2025-01-21 11:41:05 +01:00
Ad Schellevis
e14cb5c415 webui: increase max header size (max-request-field-size), closes https://github.com/opnsense/core/issues/8230 2025-01-21 11:32:03 +01:00
Franco Fichtner
0e8d2c5589 firmware: upgrade hint also 2025-01-21 11:30:08 +01:00
Ad Schellevis
0b2195b0bd theme: compile sass for d3466788f0 2025-01-21 08:31:35 +01:00
Ad Schellevis
6cd26612f7 filter:bogons - remove duplicate table definition and make sure bogonsv6 always exists, closes https://github.com/opnsense/core/issues/8212
In the long run, we should consider moving the bogons alias functionality to our standard table update, perhaps by implementing a "file" type to link a local file.
For now just remove the duplication and make sure bogonsv6 always exists, even when its empty.
2025-01-20 21:22:46 +01:00
Franco Fichtner
14bdcc9d3d unbound: fixup permission on copy; closes #8133 2025-01-17 21:09:07 +01:00
Franco Fichtner
0e2043c92b system: oops #8221 2025-01-17 20:50:45 +01:00
Stephan de Wit
d09cb928a3 system: remove status delay
With the introduction of the banners, the delay has become
a bit of a nuisance due to shifting elements
2025-01-17 15:49:51 +01:00
Stephan de Wit
49f1b0d0b3 users: remove unused client certificate field for now
There's no model property backing it so this is probably a leftover
from the implementation.
2025-01-17 13:57:34 +01:00
Stephan de Wit
8a8d411f77 system: adjust ACL for system status accordingly for previous 2025-01-17 11:32:22 +01:00
Stephan de Wit
1b2abc89c1 system: handle privileges for notifications 2025-01-17 11:25:02 +01:00
Franco Fichtner
6d75f5d0c7 mvc: allow to reset StoreB64Field values #8221 2025-01-17 10:42:06 +01:00
Franco Fichtner
d85bf8c0d8 system: configdpRun() needs to be used #8221
In the group case that is a refactor, in the user case that
is a bugfix because the argument was not passed...
2025-01-17 10:34:09 +01:00
Franco Fichtner
672c3da6e6 system: more of the same, logic repair #8221 2025-01-17 10:15:25 +01:00