2036 Commits

Author SHA1 Message Date
Ad Schellevis
b3873a8197 (legacy) crashreport, fix some input validation 2015-08-04 13:50:24 +00:00
Ad Schellevis
b5fc573016 (legacy) cleanup vpn_openvpn_server.php and add help buttons (fix for https://github.com/opnsense/core/issues/297) 2015-08-04 13:24:00 +00:00
Ad Schellevis
09d6aacc0f (legacy) backport show all help button behaviour to legacy code 2015-08-04 13:22:16 +00:00
Ad Schellevis
5a893de742 (ui) small javascript fix on help button behaviour 2015-08-04 15:07:21 +02:00
Ad Schellevis
42c4019b96 (legacy) fix uninitialized array element in certs.inc 2015-08-04 12:54:14 +00:00
Ad Schellevis
3007afe379 (legacy) add legacy_html_escape_form_data to legacy helper functions to escape array items recursive 2015-08-04 12:53:15 +00:00
Ad Schellevis
50c05fbc0a (legacy) add showhelp to default header for help icons 2015-08-04 12:52:02 +00:00
Franco Fichtner
f5d8b46ef4 intrusion detection: fix suricata bootup on /var MFS 2015-08-04 13:13:31 +02:00
Franco Fichtner
e8496219a5 src: fix crash reports 2015-08-04 12:16:11 +02:00
Franco Fichtner
3644a72431 openvpn: util.inc is included via guiconfig.inc 2015-08-04 11:42:14 +02:00
Franco Fichtner
0a18a77f33 dashboard: fix via crash reporter 2015-08-04 11:23:34 +02:00
Ad Schellevis
fe1791dec3 (legacy/theme) remove duplicate script files 2015-08-03 19:08:43 +00:00
Ad Schellevis
e45dc7a482 (legacy) first step in transition of /themes/ to /ui/themes/ to glue both new and old components better together.
The old /themes/ directory should eventually be removed when all references are gone.
2015-08-03 14:32:38 +00:00
Ad Schellevis
45713f1d19 (mvc) add theme to new components 2015-08-03 16:03:46 +02:00
Ad Schellevis
f7c69371bc (legacy) some additional uninit vars in firewall_nat_edit.php 2015-08-03 13:19:06 +00:00
Ad Schellevis
65cca54da4 (legacy) small xss fix in system_camanager.php 2015-08-03 13:17:53 +00:00
Michael Burtscher
9a5c232432 added tun0 interface (required for sixxs-aiccu)
This is a temporary solution to allow using sixxs-aiccu service without
manual code change until the aiccu service is correctly included in the
web interface.
2015-08-03 13:06:05 +02:00
Franco Fichtner
7377f85572 prototype: all non-UNIX line breaks :/ 2015-08-03 10:07:03 +02:00
Franco Fichtner
c0bc0c2b71 interfaces: fix lagg vs. flag override settings 2015-08-03 08:59:26 +02:00
Franco Fichtner
43712490fd menu: better style for #295 2015-08-03 07:18:28 +02:00
Chong Cheung
d4e5bdd98f fix menu collapses when select interfaces tab
Services -> DHCP Server
2015-08-01 07:15:47 +08:00
Ad Schellevis
02ca80d843 (mvc) add some basic sanitization to api output 2015-07-31 21:37:22 +02:00
Ad Schellevis
a004fe9ac7 (cron/ids/proxy/trafficshaper) add additional text validation 2015-07-31 20:45:03 +02:00
Ad Schellevis
c7aa31dedd (mvc) add basic validation to CSVListField type 2015-07-31 20:44:04 +02:00
Ad Schellevis
fb2f4c3f5f (legacy) let's try not to overcomplicate that last thing.... 2015-07-31 16:05:09 +00:00
Ad Schellevis
916868f87e (legacy) it feels kind of duplicate, but to avoid too much changes on how it works now let's keep the behavior approx. the same. (part 2) 2015-07-31 15:56:40 +00:00
Ad Schellevis
4755e0cd27 Merge pull request #293 from tomcheung789/master
missing prototype.js in protochart directory
2015-07-31 16:12:54 +02:00
Franco Fichtner
d4adfc301e auth: fix HTTP_REVER checks by reverts for now
This reverts commit 92a5f77ad533ac1770bdcc0a39b8faca7aab8cfd.
This reverts commit 681f654c2f7f8747738cfe115f6399bff56bc319.
2015-07-31 15:06:26 +02:00
Franco Fichtner
27f7022bab src: whitespace sweep 2015-07-31 11:14:33 +02:00
Ad Schellevis
580d93d98f (gdrive backup) catch and log errors and apply code style 2015-07-31 09:09:58 +00:00
Chong Cheung
93b84b9826 missing prototype.js in protochart directory, fix blank chart on the diag_logs_filter_summary page. 2015-07-31 17:09:56 +08:00
Franco Fichtner
6b0ebcae69 src: fix recent crash reports 2015-07-31 09:26:39 +02:00
Ad Schellevis
dfe12a46d7 (proxy) add transparant proxy option to squid including a template for the firewall_nat rules to forward traffic to it 2015-07-30 16:30:21 +00:00
Ad Schellevis
7c806d0432 (legacy) do some cleanups in firewall_nat_edit.php before adding some functionality 2015-07-30 15:57:18 +00:00
Ad Schellevis
81b81a19a2 (menu) add missing firewall_rules_edit.php item 2015-07-30 15:24:58 +00:00
Ad Schellevis
3e4bbfb07c (menu) add missing item 2015-07-30 14:37:14 +00:00
Ad Schellevis
a160f3a2fa (legacy/ldap) allow local users to be created with random password, solves errors in log when linking groups and leaves the possibility open to allow shell login using ldap in a later stage (currently not supported) 2015-07-30 11:44:20 +00:00
Ad Schellevis
15d889805c (rc) add [module]_opnsense_bootup_run tag to rc config to prepare the environment if necessary
for example, if squid needs some directories to exists before initial run after boot, it could set this in /etc/rc.d.conf/squid

squid_opnsense_bootup_run="/usr/local/opnsense/scripts/proxy/setup.sh"

which effectively results in setup.sh being started followed by the normal service squid start

disadvantage of this, both the service template and the rc system needed to be aware of the setup.
advantage, all services which don't need special preperation are configured as they would be on normal FreeBSD
2015-07-30 10:26:46 +00:00
Franco Fichtner
280a00d800 interfaces: correctly unset VLAN acceleration; fixes #252 2015-07-30 11:15:13 +02:00
Franco Fichtner
a62931b44a firmware: `better' fix for IPv6 loopback allow; #271
`block quick' creates a chain-reaction that requires `pass quick' for
loopback traffic, even though we have non-quick loopback pass rules
below.  If `quick' ought to be used, non-quick should be removed
completely, but that is beyond the scope of this fix.

For now, rather pass all IPv6 traffic on the looback device as opposed
to passing all IPv6 traffic with an IPv6 loopback address.
2015-07-30 10:08:06 +02:00
Franco Fichtner
102443a3e7 firewall: fix squid start with IPv6 disabled; fixes #271
While blocking IPv6 in this case is a good start, loopback traffic
from internal to internal should never be blocked as some deamons
like squid use it to probe and/or communicate.
2015-07-30 09:34:14 +02:00
Franco Fichtner
2274e17045 firmware: %v has revision appendend, meh 2015-07-30 06:30:13 +02:00
Franco Fichtner
8edde1ef8b status: fix include in services page 2015-07-30 06:07:14 +02:00
Franco Fichtner
baa961d745 src: whitespace sweep 2015-07-29 23:00:14 +02:00
Franco Fichtner
80270cf220 system: order langauges in GUI 2015-07-29 22:58:07 +02:00
Franco Fichtner
d5cd97a492 pkg: generalise packaging magic; add .in suffix awareness
o Makes live-mounting easier as the package config samples won't
  be clobbered anymore.

o Automatically picks up ".in" files, runs replace and moves them
  to their permanent location.

o Refactored src directory install while at it.
2015-07-29 17:00:13 +02:00
Ad Schellevis
fb55c71944 Merge pull request #288 from chrisch1974/hotfix/ldap
minor LDAP fixes
2015-07-29 16:57:57 +02:00
Ad Schellevis
1127338cf0 (legacy) fix diag_authentication.php to fit the new reality and move getUserGroups in the process 2015-07-29 14:50:25 +00:00
chrisch1974
daf9ba532e ldap: usermanager: disable username and descr field for ldap users 2015-07-29 16:28:43 +02:00
chrisch1974
1e46db3cd6 ldap: fixed a bug on Active Directory where the name attribute isn't handled correctly
ldap: add describtion (full name) during import of a user
2015-07-29 16:20:05 +02:00