Ad Schellevis
b0eeccb784
syslog, work in progress. add helper function to hook in configd to list registered applications so we can easily use these values in our mvc forms.
2019-06-10 20:28:54 +02:00
Ad Schellevis
274ec3556e
syslog, move core syslog facilities (applications in our case) to core plugin
2019-06-10 20:26:04 +02:00
Ad Schellevis
3b2c9aecdc
syslog, remove remote keywords in _syslog() plugins, moved to syslog-ng template
2019-06-10 20:23:48 +02:00
Ad Schellevis
f32816d53a
IDPS, show sid in alert view. closes https://github.com/opnsense/core/issues/3527
2019-06-10 14:46:09 +02:00
Franco Fichtner
85a7fcdf7c
system: this isn't entirely true, but helps differentiate vs. "local syslog"
2019-06-09 18:49:05 +02:00
Ad Schellevis
3c13d7a2b2
plist
2019-06-09 17:31:24 +02:00
Ad Schellevis
41fcaf2436
move to syslog-ng ( #3524 )
...
Integrate syslog-ng into core system without removing current circular log functionality, the basic idea here is to keep syslogd to write circular log files which will turn into a consumer of syslog-ng messages.
New sources, which will register automatically in s_all, are defined in /usr/local/opnsense/service/templates/OPNsense/Syslog/sources/. Plugins can write additional sources here (such as log sockets).
Legacy remote log targets are collected in syslog-ng-legacy-remote.conf, which should mimic the previous syslogd targets.
2019-06-09 16:28:50 +01:00
Ad Schellevis
d57aa5e4c8
IDPS, minor usability improvements.
...
* in download tab add enable selected with filter options
* when using bulk actions, obey filter results (filter -> select all -> action, should apply on visible items)
* move button actions to tab events, preventing accidental event removal
2019-06-07 18:18:28 +02:00
Ad Schellevis
1b09b47ff1
IDPS, Allow changing Suricata rule actions in bulk and some minor cleanups. closes https://github.com/opnsense/core/issues/3514
2019-06-07 16:20:09 +02:00
Ad Schellevis
34e942ad16
firewall_rules_edit.php, gateway validation issue (trying to validate groups). closes https://github.com/opnsense/core/issues/3511
2019-06-07 14:54:52 +02:00
Ad Schellevis
3af744e03d
IDPS, when toggling rules, keep current action. closes https://github.com/opnsense/core/issues/3513
2019-06-07 14:42:31 +02:00
Franco Fichtner
e9f2862bd7
interfaces: background configd reconfigure; closes #2267
2019-06-07 11:15:43 +02:00
Franco Fichtner
55641d204d
interfaces: actually just create the OpenVPN if needed
2019-06-05 11:45:21 +02:00
Franco Fichtner
2de53c3fa6
openvpn: guard doesn't make a lot of sense here
2019-06-05 11:11:13 +02:00
Franco Fichtner
ea04d268ec
firmware: don't trust pkg now or in the future with `-q'
2019-06-05 08:33:20 +02:00
Franco Fichtner
f55ad273b7
pkg: move to Python 3.7
2019-06-03 07:59:55 +02:00
Ad Schellevis
459da410eb
update copyright in previous while here.
2019-06-02 10:51:50 +02:00
Ad Schellevis
40bd0c5dc8
dhcpd leases watcher, file rotation issue. closes https://github.com/opnsense/core/issues/3478
2019-06-02 10:43:37 +02:00
Ad Schellevis
06acf28ae5
IDPS, missing header id in alerts tab resulting in wrong count for bootgrid, closes https://github.com/opnsense/core/pull/3367
2019-06-01 09:41:52 +02:00
Ad Schellevis
a79bb94cb7
dhcpdv4, better explain the relation between the gateway setting and the configured gateways. This question popups now and then. closes https://github.com/opnsense/core/issues/3509
2019-05-31 15:05:48 +02:00
Ad Schellevis
a714c22060
configd/templates add support for helpers.glob() to enable template traversal, which is practical when trying to merge several files into the same output.
...
required for https://github.com/opnsense/core/issues/3505
2019-05-31 14:41:59 +02:00
Ad Schellevis
a21baa1d85
openvpn server, add live-search to some longer lists.
2019-05-28 12:08:24 +02:00
Ad Schellevis
7a143c8557
OpenVPN export, hide p12 password when not applicable. closes https://github.com/opnsense/core/issues/3500
2019-05-27 11:41:15 +02:00
Ad Schellevis
8bb3f1f38c
OpenVPN export, support cryptoapicert to load certificates from the windows certificate system store, for https://github.com/opnsense/core/issues/3500
2019-05-26 14:47:45 +02:00
Ad Schellevis
e8dbda338f
rework previous
2019-05-24 15:04:15 +02:00
Ad Schellevis
54551b03ee
Proxy, minor regression in authentication. contraints are always checked now, which should only apply for local. related to https://github.com/opnsense/core/issues/3250
2019-05-24 15:02:56 +02:00
Franco Fichtner
4482cb1d6c
interfaces: code review, flip logic
2019-05-24 07:56:58 +02:00
Franco Fichtner
5d83d8612c
pkg: since CORE_PYTHON2 goes away make 3 the CORE_PYTHON default
2019-05-23 08:57:38 +02:00
Franco Fichtner
5184400115
firewall: change this back #3497
2019-05-23 08:30:32 +02:00
Franco Fichtner
7218726f59
system: style update
2019-05-22 07:06:35 +02:00
Ad Schellevis
fb4a9bedaa
dhcp/leases, forgot to replace from-to with address range min, max. for https://github.com/opnsense/core/issues/3487
2019-05-21 20:34:31 +02:00
Ad Schellevis
446caa9941
dhcp/leases, simplify interface lookup and make it more consistent. should fix https://github.com/opnsense/core/issues/3487
2019-05-21 20:21:50 +02:00
Ad Schellevis
9b63e33621
Merge branch 'clystron-dhcp_failover_params'
2019-05-21 19:58:01 +02:00
Ad Schellevis
7a15556bad
minor cleanups for https://github.com/opnsense/core/pull/3484 and handle 0 values.
2019-05-21 19:57:30 +02:00
Ad Schellevis
f886e4d439
Merge branch 'dhcp_failover_params' of https://github.com/clystron/core into clystron-dhcp_failover_params
2019-05-21 19:42:51 +02:00
Franco Fichtner
8b22eebb9c
pkg: move python dep to 3
2019-05-21 09:04:26 +02:00
Franco Fichtner
f772b4ef9a
system: reduce diff vs. stable
2019-05-21 09:01:53 +02:00
Franco Fichtner
255e9b76b4
system: add pluginctl -s support
...
For legacy components route -s option through plugins_services()
to get a list of services that can be controlled like the GUI
controls. E.g.:
# pluginctl dhcpd [start|stop|restart]
PR: https://forum.opnsense.org/index.php?topic=12781.0
2019-05-20 21:05:10 +02:00
Ad Schellevis
10108b0615
captiveportal, use "onestop" to stop captiveportal, when there's no zone configured "stop" would be skipped since the service is disabled. issue seems to be introduced in 0299224578
2019-05-20 16:36:34 +02:00
Franco Fichtner
4175a45f4b
system: fix netflow lib permission
2019-05-20 13:24:38 +02:00
Thomas Jensen
283d62a007
Add homelab.no repository
2019-05-20 13:00:08 +02:00
Ad Schellevis
f086f8c48d
flowd aggregate, minor bug in commit counter, leading to single row commits after row # 100k
2019-05-20 11:42:00 +02:00
Ad Schellevis
03c75f71be
system: address CVE-2019-11816 privlege escalation bugs
...
Reported by: Arnaud Cordier
2019-05-19 09:39:18 +02:00
Ad Schellevis
28ed5741f4
netflow, make sure get_timeserie_data() returns string type objects in stead of bytes, to prevent 17e4e9c0fc (commitcomment-33587137)
...
we might find some other small type interpretation differences, but the bumpiest seems to be gone now.
2019-05-18 09:23:25 +02:00
Ad Schellevis
2bdc74b8a1
netflow, switch dump_log.py script to python3
2019-05-18 09:22:29 +02:00
Ad Schellevis
3d1617b2bd
netflow, minor type issue, parameter received as bytes in get_timeseries.py
2019-05-17 16:50:32 +02:00
Ad Schellevis
918e4671ea
netflow, fix rc script for flowd_aggregate
2019-05-17 16:42:19 +02:00
Ad Schellevis
31982e2872
netflow, migrate flowd aggregator to python 3
2019-05-17 16:41:08 +02:00
Northguy
0b40897fd3
Fix dhcp leases help text ( #3488 )
2019-05-17 15:26:25 +02:00
Ad Schellevis
17e4e9c0fc
netflow, aggregator replace flowd with our new implementation
2019-05-16 18:32:55 +02:00