lucaspalomodevelop/core
1
0
Fork 0
mirror of https://github.com/lucaspalomodevelop/core.git synced 2026-03-16 01:24:38 +00:00
Code Issues Packages Projects Releases Wiki Activity
13,544 Commits 1 Branch 0 Tags
Commit Graph

13544 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Franco Fichtner
a7ad2845a1 mvc: translate screen reader labels where we can 2022-01-05 07:54:38 +01:00
Franco Fichtner
a5f1e2c7c4 system: default to 1000 for net.inet6.ip6.intr_queue_maxlen 
We do the same for IPv4.  While here enforce these sysctls
instead of relying on the existence of tunables.
 2022-01-04 17:22:21 +01:00
Franco Fichtner
208be46ce2 pkg: happy new year! 2022-01-03 11:21:26 +01:00
Franco Fichtner
f7ebd85268 system: add Polish, degrade Italian 2022-01-03 10:53:18 +01:00
Franco Fichtner
98a049a904 src: translation style issues 2022-01-03 10:29:56 +01:00
Ad Schellevis
dd1776030c IPSec - change default ciphers and hash algoritms to more secure variants and add a note about unsecure options. closes https://github.com/opnsense/core/issues/5450 2021-12-31 20:13:34 +01:00
Ad Schellevis
a5dfeb476a mvc: Add <hint> support for text fields, pull in and reformat https://github.com/opnsense/core/pull/5442 2021-12-31 16:01:13 +01:00
kulikov-a
36e12e1d7d
Firewall: Log Files: Live View - simplify previous (#5444) 
since config data is always html-safe  html() method can be used directly
 2021-12-31 13:38:45 +01:00
Ad Schellevis
ce0186236c Firewall: Log Files: Live View - fix escape, closes https://github.com/opnsense/core/issues/5432 
escape info popup fields as well
 2021-12-31 10:23:42 +01:00
Ad Schellevis
5da7349a12 Firewall: Log Files: Live View - fix escape, closes https://github.com/opnsense/core/issues/5432 
unescape label texts before flusing to td element.
 2021-12-31 09:31:38 +01:00
Franco Fichtner
6439c039d5 src: whitespace sweep 2021-12-29 12:54:16 +01:00
kulikov-a
d7a1d9fa75
MVC - initFormAdvancedUI: universal stripes adjustment (#5435) 2021-12-28 14:55:30 +01:00
Franco Fichtner
d6494ab06e src: whitespace sweep 2021-12-28 11:15:49 +01:00
vnxme
aa20ccba4c
Firewall/Scrub: Display interface descriptions (#5433) 2021-12-28 09:07:41 +01:00
Christian Tramnitz
de3a021dd9 fix strict-order 
Currently, when configured, "strict-order" adds the necessary "strict-order" argument. However, the hardcoded "all-servers" arguments overrides this, making "strict-order" pointless.

With this change, "all-servers" and "strict-order" are mutually exclusive.
 2021-12-27 07:32:50 +01:00
Christian Tramnitz
b2bca01f9c fix copy-and-paste error in help div 2021-12-27 07:31:53 +01:00
kulikov-a
cece0d28de
MVC - handleFormValidation : improve item match (#5428) 2021-12-26 19:29:14 +01:00
Bryce Verdier
26df508f07
Services / Intrusion detection - downloader.py style fixes (#5413) 2021-12-23 19:41:05 +01:00
kulikov-a
2aeaca5ad2
Firewall/Live View: skip rid for nat (#5424) 2021-12-22 20:29:48 +01:00
Franco Fichtner
f83209cae3 captive portal: use -f when deleting files that may not be there 
Originally looked into

    Starting API dispatcher
    2021-12-22 11:03:56: (configfile.c.426) Warning: mod_auth should be listed in server.modules before dynamic backends such as mod_cgi
    2021-12-22 11:03:56: (configfile.c.426) Warning: mod_auth should be listed in server.modules before dynamic backends such as mod_fastcgi

but it looks like this is a false positive since we don't have mod_auth in there.
 2021-12-22 11:04:22 +01:00
Andrew
a719e43ae3
util: add support for terabytes, and petabytes to format_bytes (#5405) 
This formatted number is used by the Interface Statistics widget,
and makes the columns go wider than necessary when going above a
terabyte of data. Add petabytes for good measure.
 2021-12-22 08:00:02 +01:00
Franco Fichtner
eb786c95e8 firmware: although unlikely just patch this in then 2021-12-22 07:57:57 +01:00
Andrew
234fa8ba95
firmware/status: Update to support terabytes (#5417) 2021-12-22 07:56:27 +01:00
Ad Schellevis
94ed9756c9 fix plist 2021-12-21 19:02:30 +01:00
Ad Schellevis
834ef3b2e2 Monit - move logging to own log target. closes https://github.com/opnsense/core/issues/5422 2021-12-21 17:54:35 +01:00
Ad Schellevis
c281f1e573 Firewall / Alias - remove global $aliastable reference and use our shared \OPNsense\Firewall\Util::isAlias() instead. closes https://github.com/opnsense/core/issues/5423 
Although a direct table lookup will be faster than using a lookup in isAlias(), it's likely not problematic to have a slightly slower lookup using is_alias(), but if performance is of the essence at some point we can easily cache results in isAlias() to reach the same target.
 2021-12-21 16:59:24 +01:00
Franco Fichtner
e4d5478662 pkg: avoid upgrades if already done, use VERSIONBIN 2021-12-21 12:07:37 +01:00
Franco Fichtner
20cee8237b system: add backend handler for log rotation 
... and use it in usual spot as well as on boot to ensure that
latest.log files always exist (hello /var MFS).  This makes
opnsense-log happier.
 2021-12-21 09:17:26 +01:00
Franco Fichtner
9b8024ea85 system: do not mess with mount points in /var for /var MFS 2021-12-20 13:29:09 +01:00
Northguy
894e86c624
Patch traffic shaper texts (#5420) 2021-12-19 19:31:57 +01:00
kulikov-a
784ebd8d27
Logs: quick severity filter with "Warning" default (#5370) 2021-12-19 15:59:05 +01:00
Ad Schellevis
a984542d37 Firewall / Aliases - log resolve errors (ref https://forum.opnsense.org/index.php?topic=26034) 2021-12-17 19:48:03 +01:00
Ad Schellevis
7629c9aa87 Firewall: Diagnostics: States - handle IPv6 NAT, closes https://github.com/opnsense/core/pull/5414 2021-12-17 19:10:22 +01:00
Franco Fichtner
ea2349af06 firmware: apparently /etc/motd is gone on FreeBSD 13 
Long live /var/run/motd then...
 2021-12-17 10:13:42 +01:00
Franco Fichtner
353468a261 system: default to both IPv4 and IPv6 redirects to disable 
Done for hardening as done in b424a2f9b3b7 plus now IPv6 can
leverage ip6_tryforward() with the new default.
 2021-12-16 16:56:55 +01:00
Franco Fichtner
876604b392 pkg: fix plist 2021-12-16 15:23:04 +01:00
Ad Schellevis
9008f98a6a Interfaces / LTE - remove more or less dead cruft the 3gstats collects in some rare cases. 
Although there probably are a couple of Huawei modems which do report status info as advertised in the script, there are also a lot who don't and maybe deadlocked when pulling for data on a "random" port.
For now we should remove this, if at some point in the future a sensible method would be supported to poll status in a more "vendor independent" manor, we can always revise.
 2021-12-16 15:08:08 +01:00
Franco Fichtner
1eb25c2490 system: do not clobber mount points 
In case of ZFS a move doesn't really work.  Remove links only
and move the directory contents over.
 2021-12-16 10:51:14 +01:00
Franco Fichtner
50d3f5e738 system: mostly adjust -z mode to give size and identifier from ZFS pools 2021-12-15 08:42:54 +01:00
Franco Fichtner
d7e6dbde38 system: df -t zfs returns duplicated tmpfs entries; closes #5344 
When not using -t the list is correct and since we have -T make
sure we filter for the ones we asked for before.  -a seems like
a good fit here too.
 2021-12-14 22:19:48 +01:00
Franco Fichtner
1977e3539f Revert "firmware: work around FreeBSD 13 faulty validation" 
This reverts commit d7d69895cd8672379a634488fb116e1a0bbbeaa6.
Was properly solved in stable/22.1.
 2021-12-14 11:58:36 +01:00
Franco Fichtner
250ecd5bc4 system: opnsense-importer -m mode 
Was in need of something like this to gain access to a ZFS pool without
having to run a command sequence from the top of my head.

Comes in pretty handy when being included from a recovery install stick.
 2021-12-14 09:34:00 +01:00
Ad Schellevis
67910fbfea Services: Intrusion Detection - rule downloads : gently log when connectivity issues appear. 2021-12-10 17:23:37 +01:00
Franco Fichtner
d7d69895cd firmware: work around FreeBSD 13 faulty validation 
ping6: -4 and -6 cannot be used simultaneously

No, that's not how argument parsing works...
 2021-12-10 12:46:40 +01:00
Franco Fichtner
7767a6db9e firmware: for quick troubleshooting support -O like opnsense-update 2021-12-10 12:28:27 +01:00
Franco Fichtner
f122316ba5 firmware: next beta coming up 2021-12-10 10:29:37 +01:00
Ad Schellevis
03f7dbc431 VPN / OpenVPN / Connection Status - kill by common name when address doesn't seem to be possible. closes https://github.com/opnsense/core/issues/5038 2021-12-09 19:09:33 +01:00
Franco Fichtner
602d5c5912 firmware: be more chill about missing product_check and always return product info #5394 2021-12-09 09:47:24 +01:00
Franco Fichtner
7a68bab085 firmware: deleting the file under configd execution and copy...; closes #5396 
... leaves us with permission 640 even though we have copied a
644 file.  Removing the unlink() makes this work without a
chmod but the unlink is there for the fact that /etc/ssl/cert.pem
used to be a symlink and could clobber the actual file linked
which was the original package provided.

Might be an umask issue, but better leave it where it is.
 2021-12-08 14:33:14 +01:00
Franco Fichtner
5b42f2229f firmware: just for consistency 2021-12-08 08:48:06 +01:00