Ad Schellevis
b877610296
HASync- add dashboard widgets, closes https://github.com/opnsense/core/issues/3482
2019-06-20 17:39:32 +02:00
Ad Schellevis
9dcacab209
services_dhcp.php, ddnsdomainprimary validation (looks like a typo)
2019-06-20 17:22:37 +02:00
Ad Schellevis
9bf07564b7
services_dhcpv6.php, validation issue in ddnsdomainprimary https://github.com/opnsense/core/issues/3546
2019-06-20 17:17:07 +02:00
Ad Schellevis
c5c6bb1601
services_dhcpv6.php, fix typo in validation message , ref https://github.com/opnsense/core/issues/3546
2019-06-20 17:14:24 +02:00
Ad Schellevis
ebcd30c971
auth.inc local_sync_accounts(), missing -g in groupdel. for https://github.com/opnsense/core/issues/3519
2019-06-20 16:35:30 +02:00
Ad Schellevis
cdaa275fff
Proxy, add support tab with reset button, which clears all stored cache data and restarts squid. Since a squid stop can take long and consistency isn't very important on files bound to be deleted, its faster to killall -9. closes https://github.com/opnsense/core/issues/3545
2019-06-20 13:03:48 +02:00
Franco Fichtner
b62b34fe64
interfaces: fix "OR hostname" validation message after latest change
...
Some style updates while here.
2019-06-19 08:08:28 +02:00
Alexander Shursha
d4cf429ba6
Only IP-address allowed in PPTP gateway. ( #3499 )
2019-06-18 19:07:20 +01:00
Robin Schneider
f2769fe099
Sort interface groups in GUI to match firewall rule order ( #3537 )
...
This now makes it easy and predictable to add interfaces to multiple
groups.
Before this change, the interfaces_groups GUI was sorted by the
order that interface groups were added. However, this was not the order
that the actual pf rules would then be generated making it unpredictable
when adding interfaces to multiple groups.
The filter_rules_sort function already took care of the actual pf rule
order.
I also took care of only marking the filter subsystem dirty when needed.
I tested this patch quite a bit on 19.1.8. When updating, users only
need to make one change to the interface groups to have them sorted in
the GUI.
I hope I did not miss anything because this patch is against master. In
it’s current state, the patch can be directly applied to 19.1.x or
master.
2019-06-18 16:46:04 +01:00
Ad Schellevis
464495b58e
Proxy, access log over syslog. This is at the moment the best I can think of, since we can't combine clog and plain log it's better to make the choices explicit in our code.
...
Access log over syslog will write to /var/log/squid.log, where the normal plain log would write to /var/log/squid/access.log
For https://github.com/opnsense/core/issues/3454
2019-06-18 11:47:06 +02:00
Ad Schellevis
1a86b31f76
Syslog-NG, sort programs by name in destination field
2019-06-18 10:54:00 +02:00
Ad Schellevis
18be8214d9
MVC, JsonKeyValueStoreField type, add SortByValue option to influence sorting order.
2019-06-18 10:48:36 +02:00
Ad Schellevis
b62de24aea
IDPS, duplicate eve logging section when syslog_eve is checked to support eve logging over syslog. Requires current syslog-ng work in master to be functional. closes https://github.com/opnsense/core/issues/3401
2019-06-17 20:09:06 +02:00
Ad Schellevis
25df4f28ba
Syslog-NG destination setup ( #3539 )
...
Syslog-NG add user customizable target destinations using our standard model grid.
* registers on all source feeds (s_all)
* adds udp(4|6), tcp(4|6) transport options.
* use persist-name() to avoid collisions
* basic filters (program, level, facility)
* statistics grid for debugging and traceability
2019-06-17 16:56:45 +01:00
Ad Schellevis
7770075f09
Syslog-NG, service reload not funcitonal, use syslog-ng-ctl instead (or restart when valid pid not found)
2019-06-17 14:06:36 +02:00
Ad Schellevis
dd01423e91
Syslog-NG, restart both syslog daemons on service restarts to avoid communication issues. Since both services (syslog-ng, syslog) have their own status its good to show them separately, for proper functionality they should however be treated as one.
...
Add a stop action to prevent service stop from only stopping the service named "syslog".
2019-06-17 13:36:17 +02:00
Ad Schellevis
6b92b81702
Trust, import csr. move csr_info and csr_info_json commands to post to prevent sending large / possible illegal blobs of data in uri. closes https://github.com/opnsense/core/issues/3538
2019-06-17 08:53:05 +02:00
Ad Schellevis
5722394b18
Syslog, add "configctl syslog list applications" action to output registered applications in json format
2019-06-14 17:47:57 +02:00
Ad Schellevis
0e8d1fb39e
Alias. import alias reference issue, we need to make sure our newly imported items are considered valid options as well. closes https://github.com/opnsense/core/issues/3522
2019-06-14 17:21:50 +02:00
Ad Schellevis
4e1112edc9
IDSP, alert screen action sometimes not visible due to selectpicker init. https://github.com/opnsense/core/issues/1976 ?
2019-06-13 17:36:45 +02:00
Ad Schellevis
b0eeccb784
syslog, work in progress. add helper function to hook in configd to list registered applications so we can easily use these values in our mvc forms.
2019-06-10 20:28:54 +02:00
Ad Schellevis
274ec3556e
syslog, move core syslog facilities (applications in our case) to core plugin
2019-06-10 20:26:04 +02:00
Ad Schellevis
3b2c9aecdc
syslog, remove remote keywords in _syslog() plugins, moved to syslog-ng template
2019-06-10 20:23:48 +02:00
Ad Schellevis
f32816d53a
IDPS, show sid in alert view. closes https://github.com/opnsense/core/issues/3527
2019-06-10 14:46:09 +02:00
Franco Fichtner
85a7fcdf7c
system: this isn't entirely true, but helps differentiate vs. "local syslog"
2019-06-09 18:49:05 +02:00
Ad Schellevis
41fcaf2436
move to syslog-ng ( #3524 )
...
Integrate syslog-ng into core system without removing current circular log functionality, the basic idea here is to keep syslogd to write circular log files which will turn into a consumer of syslog-ng messages.
New sources, which will register automatically in s_all, are defined in /usr/local/opnsense/service/templates/OPNsense/Syslog/sources/. Plugins can write additional sources here (such as log sockets).
Legacy remote log targets are collected in syslog-ng-legacy-remote.conf, which should mimic the previous syslogd targets.
2019-06-09 16:28:50 +01:00
Ad Schellevis
d57aa5e4c8
IDPS, minor usability improvements.
...
* in download tab add enable selected with filter options
* when using bulk actions, obey filter results (filter -> select all -> action, should apply on visible items)
* move button actions to tab events, preventing accidental event removal
2019-06-07 18:18:28 +02:00
Ad Schellevis
1b09b47ff1
IDPS, Allow changing Suricata rule actions in bulk and some minor cleanups. closes https://github.com/opnsense/core/issues/3514
2019-06-07 16:20:09 +02:00
Ad Schellevis
34e942ad16
firewall_rules_edit.php, gateway validation issue (trying to validate groups). closes https://github.com/opnsense/core/issues/3511
2019-06-07 14:54:52 +02:00
Ad Schellevis
3af744e03d
IDPS, when toggling rules, keep current action. closes https://github.com/opnsense/core/issues/3513
2019-06-07 14:42:31 +02:00
Franco Fichtner
e9f2862bd7
interfaces: background configd reconfigure; closes #2267
2019-06-07 11:15:43 +02:00
Franco Fichtner
55641d204d
interfaces: actually just create the OpenVPN if needed
2019-06-05 11:45:21 +02:00
Franco Fichtner
2de53c3fa6
openvpn: guard doesn't make a lot of sense here
2019-06-05 11:11:13 +02:00
Franco Fichtner
ea04d268ec
firmware: don't trust pkg now or in the future with `-q'
2019-06-05 08:33:20 +02:00
Franco Fichtner
f55ad273b7
pkg: move to Python 3.7
2019-06-03 07:59:55 +02:00
Ad Schellevis
459da410eb
update copyright in previous while here.
2019-06-02 10:51:50 +02:00
Ad Schellevis
40bd0c5dc8
dhcpd leases watcher, file rotation issue. closes https://github.com/opnsense/core/issues/3478
2019-06-02 10:43:37 +02:00
Ad Schellevis
06acf28ae5
IDPS, missing header id in alerts tab resulting in wrong count for bootgrid, closes https://github.com/opnsense/core/pull/3367
2019-06-01 09:41:52 +02:00
Ad Schellevis
a79bb94cb7
dhcpdv4, better explain the relation between the gateway setting and the configured gateways. This question popups now and then. closes https://github.com/opnsense/core/issues/3509
2019-05-31 15:05:48 +02:00
Ad Schellevis
a714c22060
configd/templates add support for helpers.glob() to enable template traversal, which is practical when trying to merge several files into the same output.
...
required for https://github.com/opnsense/core/issues/3505
2019-05-31 14:41:59 +02:00
Ad Schellevis
a21baa1d85
openvpn server, add live-search to some longer lists.
2019-05-28 12:08:24 +02:00
Ad Schellevis
7a143c8557
OpenVPN export, hide p12 password when not applicable. closes https://github.com/opnsense/core/issues/3500
2019-05-27 11:41:15 +02:00
Ad Schellevis
8bb3f1f38c
OpenVPN export, support cryptoapicert to load certificates from the windows certificate system store, for https://github.com/opnsense/core/issues/3500
2019-05-26 14:47:45 +02:00
Ad Schellevis
e8dbda338f
rework previous
2019-05-24 15:04:15 +02:00
Ad Schellevis
54551b03ee
Proxy, minor regression in authentication. contraints are always checked now, which should only apply for local. related to https://github.com/opnsense/core/issues/3250
2019-05-24 15:02:56 +02:00
Franco Fichtner
4482cb1d6c
interfaces: code review, flip logic
2019-05-24 07:56:58 +02:00
Franco Fichtner
5184400115
firewall: change this back #3497
2019-05-23 08:30:32 +02:00
Franco Fichtner
7218726f59
system: style update
2019-05-22 07:06:35 +02:00
Ad Schellevis
fb4a9bedaa
dhcp/leases, forgot to replace from-to with address range min, max. for https://github.com/opnsense/core/issues/3487
2019-05-21 20:34:31 +02:00
Ad Schellevis
446caa9941
dhcp/leases, simplify interface lookup and make it more consistent. should fix https://github.com/opnsense/core/issues/3487
2019-05-21 20:21:50 +02:00