7781 Commits

Author SHA1 Message Date
Franco Fichtner
77bcfefd97 interfaces: allow all IPv6 prefixes from 48 to 64
PR: https://forum.opnsense.org/index.php?topic=7650.0
2018-03-20 06:58:16 +01:00
Ad Schellevis
aedfc6b887 work in progress pluggable backup providers for https://github.com/opnsense/core/pull/2251
Define a basic interface for backup providers and try to move our GoogleDrive backup in the process.
The basic idea is there, now we need to attach this to the current user interface (don't want to rework the legacy backup/restore page now) and move the last pieces for the google backup feature over to this.
Next we should be able to iterate over our providers and request a backup for the ones that are activated.

The responisibilty for what to backup lies within the provider at the moment, to keep things compatible and simple for the caller.
2018-03-19 21:13:17 +01:00
Ad Schellevis
ad29ec2fe6 core/acl, remove check if acl entry starts with page-, seems confusing to register an acl which won't be parsed.... 2018-03-19 18:31:44 +01:00
Michael
2838b562ad
respect mask in queue config 2018-03-19 12:35:30 +01:00
Franco Fichtner
6928d06aad rc: filter_configure_sync does gateway switching...
... so let's do that first and afterwards reload OpenVPN and IPsec.
It's not that problematic, because both variants reload the filter
when they have done something, so we merely spread out the call order
a bit instead of batching a number of filter reload at the end.

PR: https://github.com/opnsense/core/issues/2247
2018-03-19 11:28:12 +01:00
Franco Fichtner
6769bc7d41 firewall: reload schedules 2 minutes early
Frequently users have schedules same as the reload times, so we may
end up missing a closing schedule.  Reload 2 minutes earlier to improve
this behaviour slightly.
2018-03-19 11:16:04 +01:00
Franco Fichtner
ef61b13495 system: reverse reload order for gateway switching on openvpn #2247 2018-03-19 11:13:39 +01:00
Franco Fichtner
d141ea7d60 openvpn: final tweak on wording #2266 2018-03-19 08:33:39 +01:00
Franco Fichtner
e66cff65d7 openvpn: we need both messages on previous... #2266 2018-03-19 07:23:19 +00:00
Franco Fichtner
517e95911e openvpn: correct more errors, auto-fill port and add remote networks in wizard; closes #2266 2018-03-19 07:18:08 +00:00
Franco Fichtner
71a93525d6 openvpn: bootstrap protocol value for port-autoselect #2266
If the default ever changes to TCP, the port generation works as intended.
2018-03-19 07:27:16 +01:00
Franco Fichtner
d7720dcf3e intrusion detection: provide custom.yaml stub #2268 2018-03-18 21:27:31 +00:00
Franco Fichtner
3560810303 openvpn: adapt wizard as well #2266
* Port autoselect doesn't work for TCP
* Could still add remote networks
2018-03-18 19:19:57 +00:00
Franco Fichtner
c51a6916c3 openvpn: tunnel network tweaks, only one needed #2266 2018-03-18 18:28:35 +00:00
Franco Fichtner
01b0534cc6 openvpn: default switch to "any", adds XXX4 variants #2266 2018-03-18 16:11:56 +01:00
Franco Fichtner
86989c2e5c openvpn: remove side-effects, preliminary cleanup for #2266 2018-03-18 10:47:16 +01:00
Franco Fichtner
d59fe96b10 mvc: move it back to where it was initially... 2018-03-18 10:29:36 +01:00
Franco Fichtner
b762fe38b2 mvc: try help without <small/> to align with static pages 2018-03-18 10:24:35 +01:00
Franco Fichtner
b5827a049b interfaces: tweak previous 2018-03-17 17:08:14 +01:00
Franco Fichtner
3b4341286d www: two more 2018-03-17 17:02:14 +01:00
Franco Fichtner
4e70b3acd1 interfaces: spotted error in help texts 2018-03-17 16:38:47 +01:00
Franco Fichtner
2caa7fae6a www: missing bits for previous; closes #2175 2018-03-17 16:19:14 +01:00
NOYB
9d96bdcbc7 Help For - Data For Attribute
Use original element (<div>/<small>) with "data-for" attribute.

The old jquery "for" attribute selectors can be removed once conversion to "data-for" attribute is complete (including plugins).

The old jquery selectors to remove once conversion is complete.
  opnsense_ui.js & head.inc
  $("*[for='" + $(this).attr('id') + "']")....
  $('[for*="help_for"]')....
2018-03-17 16:12:55 +01:00
Franco Fichtner
cb42f0e9d5 services: don't log detected IP all the time, style 2018-03-17 15:58:01 +01:00
Franco Fichtner
e1b303497e system: PTI/IBRS tunables; closes #2264 2018-03-17 15:00:41 +01:00
Ad Schellevis
8c44049298 optional prefix gdrive backups with host and domain name, for https://github.com/opnsense/core/issues/2262 2018-03-16 18:59:44 +01:00
Ad Schellevis
4e979a9bd6 services, move core/system service registration to core.inc for clearity. as discussed with @fichtner 2018-03-16 09:39:42 +01:00
Franco Fichtner
08c830f936 system: last tweak for previous 2018-03-16 08:12:51 +00:00
Franco Fichtner
397d78df9e system: make $keep the default 2018-03-16 08:06:48 +00:00
Franco Fichtner
09f45fbdbf system: rewrite the default route handling
With this, there is consistency in setting the default route
and associated marker file.  Nothing is done before the decision
is final, so we may not end up with a missing route after an
attempt to reconfigure for something that doesn't work anyway.

DHCPv4 and PPP still do this manually, but we will have to route
them through the same logic instead of them manually handling their
routes.  6rd and 6to4 may have a similar issue as well.

While here, swap the system_routing_configure() arguments to
align with the way other configure functions present their
arguments (verbose print flag first).

Gateway monitoring and default switching improvement since 2016.
Push $keep into default handling, it may be useful in general to
avoid spurious switches.  It could also be a default probably.
2018-03-16 07:41:17 +00:00
Ad Schellevis
9ca61d8b3e add service action to sync users and groups for https://github.com/opnsense/core/issues/2151 2018-03-15 21:33:41 +01:00
Ad Schellevis
d4e9da8b72 add syslog to services/diagnostics 2018-03-15 21:16:29 +01:00
Franco Fichtner
b3fb3e1b1d system: found small issue, but...
ended up realising the function is totally whacky from top to
bottom.  Writing default file hints before doing lookups for
said IPs, writing empty fallbacks, missing logging info.

To be continued.
2018-03-14 22:47:47 +00:00
Franco Fichtner
c2c4a24618 system: apply loader tunables, style for apply box #2083 2018-03-14 09:31:30 +00:00
Ad Schellevis
f4313ce368 Revert "IDS, suricata.log isn't in binary format... see https://github.com/opnsense/plugins/issues/606"
This reverts commit dc1cd4da918880a7a9b6036b02911b65128e2d7c.
2018-03-13 18:07:50 +01:00
Ad Schellevis
dc1cd4da91 IDS, suricata.log isn't in binary format... see https://github.com/opnsense/plugins/issues/606 2018-03-13 17:49:30 +01:00
Ad Schellevis
e8846eaf0c openvpn, show last timestamp in openvpn_get_client_status, for https://github.com/opnsense/core/issues/2243 2018-03-13 14:58:40 +01:00
Ad Schellevis
7ff5ec2340 openvpn, parse all states to retrieve most relevant one and some minor cleanups. for https://github.com/opnsense/core/issues/2243 2018-03-13 14:43:01 +01:00
Franco Fichtner
fdf4eccfaa system: cosmetic tweaks for #2083 2018-03-12 20:51:04 +00:00
Franco Fichtner
68cfe2aaf8 system: render tunables in loader.conf; closes #2083 2018-03-12 20:31:12 +00:00
Franco Fichtner
ef451142db interfaces: always allow /127, /128 and /32 static IPs; closes #2213 2018-03-12 21:07:17 +01:00
Franco Fichtner
86aa45633a voucher: tweak simple character set; closes #2257 2018-03-12 18:47:27 +01:00
Ad Schellevis
6b677051d4 bridging, hide already assigned interfaces, closes https://github.com/opnsense/core/issues/2256 2018-03-12 18:45:47 +01:00
Ad Schellevis
7401b27bad mvc / Monit, ditch work-around, closes https://github.com/opnsense/core/issues/2255 2018-03-12 18:23:51 +01:00
Ad Schellevis
117eb47666 MVC, keep track of model that created a field so our model relationfield can reuse the same object for choosing it's options, for https://github.com/opnsense/core/issues/2255 2018-03-12 18:22:21 +01:00
Franco Fichtner
33b3dabab3 interfaces: kill is_jumbo_capable()
Introduced in 2005 to separate good VLAN-capable driver from
the bad ones.  We wonder how relevant this is nowadays.

Breaks at least Xen where the driver fails to pass the host's
VLAN capabilities.

Discussed with: @adschellevis
2018-03-12 17:21:21 +01:00
Franco Fichtner
d823cc7193 firewall: switch back to old NAT auto-outbound behaviour
Use the first address only, ignoring all VIPs.

Discussed with: @adschellevis

PR: https://forum.opnsense.org/index.php?topic=7438.0
2018-03-12 14:36:11 +01:00
Franco Fichtner
9e054ed704 interface: init variable directly 2018-03-12 07:50:27 +00:00
marjohn56
a28b048597 interface: dhcp6c creation breakout 2018-03-12 07:42:27 +00:00
Franco Fichtner
9efc0bf123 interfaces: do not break line 2018-03-12 07:30:37 +00:00