7921 Commits

Author SHA1 Message Date
Ad Schellevis
b2a2fbdf6e as discussed with @fichtner, add invalidateCache() to acl and menu system 2017-12-15 19:34:35 +01:00
Franco Fichtner
a5d91a7e9b firmware: changes for kernel/base set visibility #1992 2017-12-16 18:26:01 +00:00
Franco Fichtner
086b91c04a firewall: move anti-lockout rule to advanced settings #1347 2017-12-16 13:28:58 +00:00
Franco Fichtner
6ab6267087 webgui: move settings around a bit #1347
Anti-lockout really has both SSH and web GUI as its targets,
which is a bit weird here.  Maybe we ought to split the options,
but for now move it a bit close to SSH.  A separate option makes
no sense at this point.  Maybe this is more of an advanced firewall
option?
2017-12-16 09:20:37 +00:00
Franco Fichtner
16448992ba firewall: minor style adjustment 2017-12-16 09:09:22 +00:00
Franco Fichtner
4ba98f8d55 webgui: minor indent fix #1347 2017-12-16 09:06:57 +00:00
Franco Fichtner
b98c3c71b0 ntpd: show full remote and style fix #1997 2017-12-16 08:56:03 +00:00
Franco Fichtner
e6c51e203a webgui: fix http redirect for interface bind #1347 2017-12-16 08:48:01 +00:00
Franco Fichtner
4450de5f53 reporting: better fix for previous 2017-12-16 09:27:40 +01:00
Franco Fichtner
4fb9c58de3 reporting: fix a crash report, something has changed...
... with autovivification in PHP 7.1.
2017-12-15 19:50:11 +01:00
Franco Fichtner
9c52a5004f firewall: fix plist 2017-12-15 17:52:03 +00:00
Ad Schellevis
9e1256b969 firewall/plugin, move parseBool() to abstract Rule for reuse. https://github.com/opnsense/core/issues/1326 2017-12-15 18:07:11 +01:00
Ad Schellevis
ad1744ce24 firewall/nat, we need to take baby steps here to unravel the original intent of the rules and to make sure they will fit our framework. https://github.com/opnsense/core/issues/1326 2017-12-15 17:34:40 +01:00
Ad Schellevis
a5a4cde245 firewall, plugin. move parseIsComment to abstract class for reuse 2017-12-15 16:36:15 +01:00
Ad Schellevis
59d9f79a79 firewall/plugin, move standard rule logic to abstract base class, make some room for https://github.com/opnsense/core/issues/1326 2017-12-15 15:47:38 +01:00
Ad Schellevis
9fd46aacce util.inc, dead code sweep 2017-12-15 15:09:13 +01:00
Ad Schellevis
54e06bee9c system/settings/general, simplify theme selection and ditch return_dir_as_array(), also prevents files in the theme directory to show up as selection options 2017-12-15 15:02:31 +01:00
Ad Schellevis
06a28ff2e4 util.inc, dead code detection 2017-12-15 14:20:08 +01:00
Ad Schellevis
5536325b4e ntp_status.widget.php, dead code detection 2017-12-15 14:19:44 +01:00
Ad Schellevis
26bbf42252 interfaces.inc, dead code detection 2017-12-15 14:19:02 +01:00
Ad Schellevis
14ea5dc575 ACL, better to increase the ttl a bit for our acl cache, when things change due to package installs, the new situation will be persisted automatically. https://github.com/opnsense/core/issues/1988 2017-12-15 13:24:08 +01:00
Franco Fichtner
493b3113ab network time: move private script to plugin location
/usr/local/sbin should be reserved for real command line commands.
2017-12-15 12:46:22 +01:00
Franco Fichtner
3acdb13917 openvpn: restore sanity in this wizard system; closes #1644 2017-12-15 10:04:17 +00:00
Ad Schellevis
2b2276b48d openvpn, missing breaks in switch statements, closes https://github.com/opnsense/core/issues/1996 2017-12-15 09:57:32 +01:00
Franco Fichtner
988096f991 wizard: remove "die" in favour of a graceful input validation / resubmit
Mostly prompted by the problem that mistyping the admin password
makes the form go boom.  We cannot rely on the browser.  While here
reformat and add copyright as various improvements have been made
here ever since 2015.
2017-12-15 08:29:44 +00:00
Franco Fichtner
f2ffe3f8ee ipsec: superficial style sweep 2017-12-15 07:31:15 +00:00
Franco Fichtner
16be17f050 ntpd: style sweep 2017-12-15 07:25:52 +00:00
Franco Fichtner
ee981fdbda openssh: style sweep 2017-12-15 07:22:17 +00:00
Franco Fichtner
4ecb723ca4 openvpn: style fixes et al 2017-12-15 07:21:07 +00:00
Franco Fichtner
176068736f pf: style sweep 2017-12-15 06:50:08 +00:00
Franco Fichtner
84e312c3c0 webgui: style sweep 2017-12-15 06:47:52 +00:00
Franco Fichtner
b6bec12cc6 dnsmasq: style sweep 2017-12-15 06:38:52 +00:00
Franco Fichtner
4969503a57 mvc: style sweep 2017-12-15 06:37:15 +00:00
Franco Fichtner
a325ce8487 make: add plugins.inc.d to style and style-fix targets
The code has been pruned, time to give it a finishing touch.
2017-12-15 06:36:35 +00:00
Franco Fichtner
03c0aab94b LICENSE: regenerate from source code...
This drops two years from the license, because a 2003-2009 copyright
was dropped due to an obsolete file delete in 0d87601789 and no other
copyright lines in those years for Manuel.

Hello Jim and trolls, this can be normal so save your rants.  ;)
2017-12-15 00:17:16 +01:00
Franco Fichtner
16c65c0cc6 firmware: add frontend and middleware glue #1992 2017-12-14 23:04:13 +00:00
Franco Fichtner
a7132dec51 firmware: add backend support for health check #1992 2017-12-14 22:40:28 +00:00
Franco Fichtner
0e858edc39 firmware: strip arch from kerne/base display; closes #1992 2017-12-14 22:25:58 +00:00
Franco Fichtner
0d87601789 firewall: drop "normal view"; closes #1917
Drop diag_logs_filter.php and move the filter_log.inc remnants
into diag_logs_filter_summary.php for an easy drop later on.

There will be more tweaks to the live log filter just to make
it more flexible for cross-reference searches, but as previously
discussed it's strong enough to replace all the fancy input
filters from the "normal view".
2017-12-14 22:10:08 +00:00
Franco Fichtner
9c59763fa5 firewall: change default live log lines to 25
This is no a lot, but it fits the screen so nothing is misses.

Discussed with: @adschellevis
2017-12-14 21:54:05 +00:00
Ad Schellevis
b5d52b8a75 menu, align caching to new ACL cache option. 2017-12-14 21:59:57 +01:00
Franco Fichtner
7620fcbff3 webgui: string interface bind et al #1347 2017-12-14 18:42:15 +00:00
Franco Fichtner
67c11c9b7a make: use raw GUI reload during upgrade
We can observe the reload status this way.
2017-12-14 17:21:40 +00:00
Franco Fichtner
937379d16a interfaces: sure, why shouldn't this happen, it's PHP after all 2017-12-14 15:15:47 +00:00
Franco Fichtner
efb7013ae5 csrf: do not embed id twice
In fact, it is unused so this should work.  Needs peer review.

PR: https://forum.opnsense.org/index.php?topic=6631.0
2017-12-14 07:09:08 +00:00
Franco Fichtner
ac6a1ef8c8 captive portal: mount /dev in chroot to unbreak lighttpd 1.4.48
PR: https://github.com/opnsense/core/issues/1990
2017-12-13 10:43:17 +00:00
Franco Fichtner
15b8490fa2 webgui: add mod_openssl here too 2017-12-12 23:30:22 +01:00
Ad Schellevis
c202aee904 ipsec, upgrade vici lib to 5.5.3. https://github.com/opnsense/core/issues/1981 2017-12-12 20:24:22 +01:00
Ad Schellevis
651cbdaae3 IDS/IPS, sync port-groups to default template, remove some spaces. closes https://github.com/opnsense/core/issues/1991 2017-12-12 16:29:30 +01:00
Ad Schellevis
202451ca6f Captiveportal, fix warning " Warning: please add "mod_openssl" to server.modules list in lighttpd.conf. A future release of lighttpd 1.4.x *will not* automatically load mod_openssl and lighttpd *will not* use SSL/TLS where your lighttpd.conf contains ssl.* directives" 2017-12-12 13:18:53 +01:00