12630 Commits

Author SHA1 Message Date
Stephan de Wit
b5b9a2eaa0 firewall: categories improvements (#4790) 2021-03-14 12:44:44 +01:00
kulikov-a
d3622fde9b LDAP.php: one more error handler (#4793) 2021-03-14 12:44:44 +01:00
kulikov-a
50986b3c9d traffic_graphs.widget: start when widgets is visible (#4801) 2021-03-14 12:44:44 +01:00
Franco Fichtner
6629978afd system: another html_safe here for good measure #4795 2021-03-14 12:44:44 +01:00
Franco Fichtner
1952de16f6 system: small tweaks for #4795 2021-03-14 12:44:44 +01:00
Ad Schellevis
21d6a5b386 Netflow aggregator: skip invalid record, another one for https://github.com/opnsense/core/issues/4796 2021-03-14 12:44:44 +01:00
Ad Schellevis
a8a7174c49 Netflow aggregator: skip invalid record, closes https://github.com/opnsense/core/issues/4796 2021-03-14 12:44:44 +01:00
Ad Schellevis
534c6d62f9 Bugfix dashboard widget headers, partly revert and explain f67e242eaa. closes https://github.com/opnsense/core/issues/4795 2021-03-14 12:44:44 +01:00
Franco Fichtner
e2fbc878f0 interafces: $realif is required #4792 2021-03-14 12:44:43 +01:00
Ad Schellevis
dd19f2a976 HA Sync (xmlrpc) copy paste issue in 25959a45a9 , leading to wrong caption. 2021-03-14 12:44:43 +01:00
Ad Schellevis
5a66dec5e1 Services / Intrusion detection: add new Abuse.ch feed ThreatFox to detect indicators of compromise 2021-03-14 12:44:43 +01:00
Robin Schneider
fcb6eaa9de Use HTTPS everywhere (mechanical edit using util from https-everywhere) (#4534) 2021-03-14 12:44:43 +01:00
kulikov-a
93fc88741a index.php: strip scripts from widgets before move (#4752) 2021-03-14 12:44:43 +01:00
Franco Fichtner
70059dc6b5 firmware: small issue with lost init of pipe #4500 2021-03-14 12:44:43 +01:00
Ad Schellevis
0d94d0aefb System / Routes / Status: remove entries directly connected to an interface, rework last commit for https://github.com/opnsense/core/issues/4721 2021-03-14 12:44:43 +01:00
Ad Schellevis
5126fe1658 System / Routes / Status: remove entries directly connected to an interface for https://github.com/opnsense/core/issues/4721 2021-03-14 12:44:43 +01:00
Franco Fichtner
4fbcd919c4 src: style and whitespace sweep 2021-03-14 12:44:43 +01:00
kulikov-a
618d2dd75c Alias.php: typo? (#4786) 2021-03-14 12:44:43 +01:00
Ad Schellevis
73030fb528 Auth/LDAP: minor tweak for https://github.com/opnsense/core/pull/4784, only log message when there is one. 2021-03-14 12:44:43 +01:00
kulikov-a
8ec2c22cac LDAP minor fixes (#4784)
Improve error handling in ldap authentication
2021-03-14 12:44:43 +01:00
Ad Schellevis
bf3877b834 HA Sync: unify sync sections and remove legacy blocks from system_hasync.php 2021-03-14 12:44:43 +01:00
Franco Fichtner
38f7f864be pkg: fix plist 2021-03-14 12:44:43 +01:00
Ad Schellevis
05f6abb4a0 Firewall / Shaper: the current number of allowed source / destination addresses is limited to a couple of addresses. in order to match larger lists one need to use tables in order for ipfw to process them.
This commit replaces all rule source / destinations where more than one address is being targetted with a tablename like __rule__{uuid}__[source,destination] a support tool after load flushes the selected addresses into the table (which is automatically created by the ruleset). closes https://github.com/opnsense/core/issues/4756
2021-03-14 12:44:43 +01:00
kulikov-a
73020d6928 firewall_rules.php: Icon color after toggle fix (#4773) 2021-03-14 12:44:43 +01:00
Ad Schellevis
aa0d4fdf20 interfaces: newwanip, clear states when address changes. for https://github.com/opnsense/core/pull/4726 2021-03-14 12:44:43 +01:00
Ad Schellevis
8193c60424 IPSec / roadwarriors: do not pin reqid's in case of mobile connections to avoid traffic being forwarded to the wrong end. closes https://github.com/opnsense/core/issues/4757 2021-03-14 12:44:43 +01:00
Franco Fichtner
84a241c30a system: better logic for -h and -D #4231 2021-03-14 12:44:43 +01:00
Franco Fichtner
6a4b89b497 interfaces: immediately enable SLAAC during IPv6 initiation
This improves PPPoE responsivenes for IPv6 acquire using
SLAAC on the "IPv4 interface".  Tests ok according to an
user and the impact on existing setups is low.

PR: https://forum.opnsense.org/index.php?topic=21506.0
2021-03-14 12:44:43 +01:00
Franco Fichtner
1bafebe861 interfaces: make this easier to read 2021-03-14 12:44:43 +01:00
Ad Schellevis
1cbee54644 MVC: align layouts of select_multiple and dropdown types 2021-03-14 12:44:43 +01:00
Ad Schellevis
395fa73cf7 HA Sync: extend rc.filter_synchronize with capabilities to reconfigure the backup node (template flush + service reload) for https://github.com/opnsense/core/issues/4604
to offer the ability to schedule a new configd action "system ha_reconfigure_backup":

configctl system ha_reconfigure_backup
2021-03-14 12:44:43 +01:00
Gareth Owen
43b207ed5c Use lists when building RR records
Update according to code review request
2021-02-28 12:15:00 -05:00
Gareth Owen
a3d5cbcc7a unbound: Fix PTR records for DHCP endpoints
* Add PTR records for DHCP endpoints in the correct format
* Delete PTR records when A records are deleted
* Use bulk add/remove requests to unbound-control to improve performance

Fixes #4597
2021-02-27 17:06:23 -05:00
kulikov-a
71d6d0adeb
system_certmanager: take extensions out of a DN (#4761) 2021-02-27 13:49:20 +01:00
kulikov-a
8953d038e5
rulecache.py: make manual rule status boolean (#4758) 2021-02-26 14:02:38 +01:00
Ad Schellevis
2696e42d3a Service / Intrusion Detection / Policies: type error in 'enabled' field (bool vs str), closes https://github.com/opnsense/core/issues/4753 2021-02-25 20:02:59 +01:00
Franco Fichtner
90ad674928 interfaces: also needs #4576 2021-02-26 02:56:19 +01:00
Franco Fichtner
a980771d7f interfaces: experiment for #4576 2021-02-26 02:51:23 +01:00
Franco Fichtner
e345b965cc interfaces: looks like a typo
Probably dead code but better to align it.  Some style on the side.
2021-02-26 02:22:36 +01:00
Franco Fichtner
70f856bf2f firmware: emit api version string, second major iteration already #4500 2021-02-25 13:59:35 +01:00
Franco Fichtner
db29e02ecb dhcpd: unify loop, improve leases page #4642 2021-02-25 13:40:50 +01:00
Ad Schellevis
43b50ed086 Netflow: prevent crash when attributes missing, closes https://github.com/opnsense/core/issues/4751 2021-02-25 12:08:46 +01:00
Franco Fichtner
e73db9c7ae dhcp: remove interface key #4642
At first the idea was to pass it, but especially since this only
passes one entry as noted by @maurice-w it is probably better to
ditch it.  :)
2021-02-24 20:00:34 +01:00
Franco Fichtner
f67e242eaa www: fix $$ weirdness loosely related to typo in #4702 2021-02-24 16:23:02 +01:00
Franco Fichtner
63978a60c8 interfaces: better primary address detection; closes #4702 2021-02-24 16:19:09 +01:00
Ad Schellevis
8b9764fa86 Lobby / Dashboard / Traffic Graph: prevent duplicate traffic pollers mangling with the graphs. 2021-02-24 11:28:57 +01:00
Martin Wasley
4e9144f885
Correct help text for Range (#4738) 2021-02-24 10:08:45 +01:00
Franco Fichtner
d0822b0067 dhcpd: move staticmap preparation to parent #4642
Move all the duplication out of Unbound/Dnsmasq code and just
iterate over the results there.
2021-02-24 09:54:15 +01:00
Ad Schellevis
277ffb6ac5 Reporting / Traffic: change api output to combined in/out per row and change user interface to handle new format. closes https://github.com/opnsense/core/issues/4724 2021-02-23 16:21:25 +01:00
Ad Schellevis
bcb7c26897 User management: performance enhancement for local_sync_accounts() should improve boot time when a lot of users are involved, also improves xmlrpc sync and some other actions calling a sync. 2021-02-23 14:46:21 +01:00