13066 Commits

Author SHA1 Message Date
Franco Fichtner
b6b444ad16 dhcp: two warnings 2022-08-11 09:35:01 +02:00
Franco Fichtner
5fd1f962b3 dhcp: for better config structure 2022-08-11 09:34:29 +02:00
Franco Fichtner
4f21af48ef dhcp: cleanups 2022-08-11 08:55:41 +02:00
Franco Fichtner
85373c724d dhcp: pushed wrong servers to zone definition #5942 2022-08-11 08:55:41 +02:00
Ad Schellevis
6f11b9c3e4 firewall: extend pool options support (https://github.com/opnsense/core/issues/5934)
Even though we're currently not able to offer other options than round-robin as pfctl seems to prevent that, it might still be a good idea to make the current options explicit and leave room for future enhancements.

This commits adds poolopts to gateway groups and explains options. If users want to mix sticky and non-sticky, this will be possible with this change. Other options (random, source-hash, ..) unfortunately not.
2022-08-03 11:55:35 +02:00
Franco Fichtner
47bff6840d system: console wireless assignment mismatch
Some code tries to do this on the fly but newer code does not
(and should not).

PR: https://forum.opnsense.org/index.php?topic=29559.0
2022-08-09 13:09:20 +02:00
Franco Fichtner
0b29f71cb1 interfaces: merge INFOREQ|REQUEST handling #5862
PDINFO should not be set and therefore only gets cleared.
2022-08-08 14:43:28 +02:00
Maurice Walker
f2c844e170
SLAAC WAN: add support for requesting DNS info via stateless DHCPv6 (#5937)
* Merge SLAAC interface dhcp6c config

Stateless DHCPv6 config for SLAAC WANs was generated, but not merged into dhcp6c.conf file.

* Add support for stateless DHCPv6 to dhcp6c script

Script had no code for processing stateless DHCPv6 replies (required for SLAAC without RDNSS / DNSSL).

* dhcp6c script, pass all search domains to ifctl

Only the first domain was used, all others were disregarded.
2022-08-08 14:41:42 +02:00
Franco Fichtner
e688d3b6fa firmware: revoke 22.1 fingerprint 2022-08-08 11:17:38 +02:00
Franco Fichtner
f8fdc8deac src: style sweep 2022-08-08 10:47:56 +02:00
Ad Schellevis
a8697dd4ea System Status: add "pre-wrap" to keep long content inside the message box 2022-08-01 18:07:26 +02:00
Ad Schellevis
edcc29ab5c filter - cleanup some php8 warnings 2022-08-01 16:56:28 +02:00
Franco Fichtner
8f8449ebe8 firewall: stick-address only in effect with pool option and multiple routers
PR: https://forum.opnsense.org/index.php?topic=29458.0
2022-08-05 13:22:19 +02:00
Franco Fichtner
e5006e9e44 interfaces: bring routes back after reconfiguring IPv6 connectivity
PR: https://forum.opnsense.org/index.php?topic=29698.0
2022-08-05 11:00:05 +02:00
Franco Fichtner
d68d50caeb system: cosmetic newline at end of CRL text 2022-08-05 09:57:09 +02:00
Ad Schellevis
c903218cd8 authgui.inc -- remove old cruft, nohttpreferercheck is handled in check_security_http_referer_enforcement() which already bails via session_auth() 2022-08-01 06:21:39 +02:00
Franco Fichtner
d19cd6cdbf interfaces: get_interface_mac() not returning cached MAC result
Looks like this went unnoticed since 22.1.2.

PR: https://forum.opnsense.org/index.php?topic=29691.0
2022-08-04 23:39:46 +02:00
Franco Fichtner
83c1ce1b6f interfaces: fix warning 2022-08-04 22:39:39 +02:00
Franco Fichtner
d69ff4a16a interfaces: figure out point-to-point or subnet setup
PR: https://forum.opnsense.org/index.php?topic=29654.0
2022-08-04 22:25:56 +02:00
Franco Fichtner
e1e8abc03e rc: 750 for root fixup; closes #5475 2022-08-04 10:09:30 +02:00
Franco Fichtner
537857a059
system: change UX for new notices (#5922)
o Switch to shared circle with coloring
o Switch success circle to muted
o Switch dialog color to primary
o Switch dialog close button to plain
o Add a couple of translations
o Add muted circle to page load
o Refine error level for crash reports
o Rearrange dismiss and error presentation, inline circle indicator
o Add age/timestamp to statuses
2022-08-04 09:26:49 +02:00
Franco Fichtner
92cd0745e1 firewall: undefined key warning 2022-08-04 09:17:59 +02:00
Franco Fichtner
889420b652 interfaces: style update on GIF/GRE code
If we want to extend the feature here make room so we
don't have to deal with a single string concatenation.

Also disabled IPv6 inside GIF IPv4 tunnel.

PR: https://forum.opnsense.org/index.php?topic=29654.0
2022-08-04 08:53:14 +02:00
Franco Fichtner
9c6e5f0cfb dhcp: fix undefined key warnings 2022-08-04 08:51:54 +02:00
Franco Fichtner
abffe29b21 unbound: fix two undefined key warnings 2022-08-04 08:51:19 +02:00
Franco Fichtner
111a2560fb interfaces: GIF/GRE IPv6 remote defaults to 128
It would probably make sense to tighten validation as well, but for
this we first need to decide how we are going to implement the mode
where prefixlen is set to the actual value given and remote address
being omitted (see PR).

PR: https://forum.opnsense.org/index.php?topic=29654.0
2022-08-04 08:14:48 +02:00
Franco Fichtner
e76f15c357 system: refactor logic and populate hosts file a bit more
Already noticed that "ipsec" devices were throwing wrenches into
the engine here so try to match exactly on the pseudo-interface
names given by the GUI.
2022-08-03 09:06:20 +02:00
Franco Fichtner
1e2f93dc3e src: style sweep 2022-08-02 16:08:40 +02:00
Franco Fichtner
b504bc8763 dhcp: extend search list pull from DHCPv6 and refactor #5919 2022-08-02 12:31:56 +02:00
Patrick M. Hausen
b319b1284f core/radvd - do not advertise DNS domain when DNS advertisments are disabled 2022-08-02 12:12:40 +02:00
Stephan de Wit
966e54011e
unbound: do not start DHCP watcher immediately after daemonizing unbound (#5920) 2022-08-02 10:33:59 +02:00
Franco Fichtner
bb4743a732 interfaces: stop DHCP from calling rc.newwanip when no changes are being done
This is a partial revert of 797c1864194 which has good intentions but rc.newwanip(v6)
isn't equipped with being called a lot of times yet.  We want to improve this for 23.1.
2022-08-02 09:04:12 +02:00
Stephan
2918f0e24e trust: use proper CRL id-ce-cRLReasons extension keyword 'unspecified' 2022-08-02 08:39:55 +02:00
Franco Fichtner
7aaa6a263b system: do not reload unbound/dnsmasq "hosts" by default
Number of people noted spurious restarts of Unbound and this seems
to be the cause.  However, the real cause of hammering rc.newwanip
is in 797c18641944 and to avoid other side effects like the GIF/GRE
stuff we should consider reverting part of it.
2022-08-02 08:22:26 +02:00
Franco Fichtner
8974c4661a dhcp: fix undefined key warning 2022-08-01 13:52:23 +02:00
Franco Fichtner
f9ea49ae31 interfaces: manual cache invalidate for previous
Purge the file on all known dynamic spots that run a deconfigure
of some sort.  We probably need something for a forced reload as
well but for now let's see if this works in general.
2022-08-01 13:45:18 +02:00
Franco Fichtner
97e7a93b7c interfaces: disable reload with same IPv6
rtsold resolvconf handing forces a lot of reloads now, something
also seen in rc.newwanip -- let's go the extra mile and lock the
cache IP in place until we do a full reconfigure.

We may have to build some sort of "expire" feature for the cached
IP since between forced reconnects we will want to reload again
anyway.  But not sure where that is as rc.linkup is unreliable as
it has been messing with this before.
2022-08-01 12:29:44 +02:00
Franco Fichtner
507ee2768f unbound: argument unused 2022-08-01 12:21:11 +02:00
Franco Fichtner
af959da8b6 rc: use new _setup and repair missing setup.sh in Monit check #5917
Also see: https://github.com/opnsense/src/commit/3edcfbc578f
2022-08-01 11:15:32 +02:00
Franco Fichtner
fe52702a8b firewall: wrong reply"-to" for previous 2022-08-01 10:14:10 +02:00
Franco Fichtner
eebc1674a2 firewall: fix permission of script 2022-08-01 09:55:08 +02:00
Franco Fichtner
520b1b1b9c rc: hardware setup.sh to _precmd #5917 2022-08-01 09:54:22 +02:00
Franco Fichtner
aa2bc6599e rc: remove _var_mfs remants #5917 2022-08-01 09:43:55 +02:00
Ad Schellevis
b6f95cdea4 Firewall: Aliases - add BGP ASN type. https://github.com/opnsense/core/issues/5913 2022-07-30 02:26:38 +02:00
Franco Fichtner
b5bda2bda4 firewall: also exclude reply-to and route-to
PR: https://forum.opnsense.org/index.php?topic=29554.0
2022-07-31 13:08:16 +02:00
Ad Schellevis
c21cafa924 config events, fix side affect of 3b7453ca2b. 2022-07-29 16:11:04 +02:00
Franco Fichtner
86ebdc291e interfaces: more issues with PHP 8 and uptime display #5910 2022-07-29 09:49:58 +02:00
Franco Fichtner
2412d574f3 firewall: reduce impact of link-local inject to FilterRule on matching interface; closes #5907
Now we know why pf(4) does not want to fix this.  ;)
2022-07-29 08:16:55 +02:00
Franco Fichtner
ef0d238ba1 interfaces: typo in script invoke 2022-07-28 21:09:04 +02:00
Ad Schellevis
2d4163d764 VPN: IPsec: Tunnel Settings - Phase 1: Allow to set rightca in mobile ipsec P1 with EAP-TLS (https://github.com/opnsense/core/pull/5906)
o show rightca option
o add empty to ca selection list for backwardds compatibility.

ref https://docs.strongswan.org/docs/5.9/interop/windowsUserServerConf.html
    https://docs.strongswan.org/docs/5.9/plugins/eap-tls.html
2022-07-27 16:17:49 +02:00