6206 Commits

Author SHA1 Message Date
Franco Fichtner
bbe9e070cb intrusion detection: finish up after #1129
This reverts commit 25d8428cb6b6d8d0f22e49d70ef6f7ce49b14a3c and adds
normal enabled/disable indicators.  POST is all weird today, but so
far this looks good.
2017-03-01 08:06:57 +01:00
Franco Fichtner
1bf82da319 rc: advise a reboot if not in boot mode 2017-03-01 07:00:38 +01:00
Franco Fichtner
3ebbdfd994 rc: command line arg mode for importer 2017-03-01 06:55:57 +01:00
Franco Fichtner
16adc594c6 rc: starting importer directly needs no timeout 2017-03-01 06:40:12 +01:00
Franco Fichtner
fedfd0a4a8 rc: recursion is bad ;) 2017-03-01 06:38:00 +01:00
Franco Fichtner
c4ec7689e8 rc: allow use of importer anytime, add conveniance aliases 2017-03-01 06:30:32 +01:00
Franco Fichtner
d1d200b6b4 rc: small installer/importer tweaks 2017-02-28 19:11:04 +01:00
Ad Schellevis
bed87f3d27 (mvc) send post requests as json body, url encoding isn't always typesafe 2017-02-28 17:02:00 +01:00
Ad Schellevis
29e3bb3e6f (mvc) csrf protection, not very likely to hit in normal situations, but when using legacy free applications, there might not be a csrf token leading to a denial of all requests. 2017-02-28 14:26:10 +01:00
Ad Schellevis
b08d26db14 (filter) force kill of filterdns, filterdns doesn't always listen properly to TERM, causing endless waits 2017-02-28 10:37:40 +01:00
Ad Schellevis
8d00e48857 (filter/aliases) allow port alias nesting, closes https://github.com/opnsense/core/issues/1436 2017-02-28 09:08:01 +01:00
Franco Fichtner
2981b6637f captive portal: fixup "permanent" arp entry parse #1344 2017-02-28 09:06:06 +01:00
Ad Schellevis
3151c87eec CP, refactor arp list, closes https://github.com/opnsense/core/issues/1344 2017-02-28 08:52:24 +01:00
Ad Schellevis
e51bc802f4 openvpn client, double escaped user/passs. closes https://github.com/opnsense/core/issues/1370 2017-02-27 21:26:08 +01:00
Ad Schellevis
a481668fea (proxy) add a notice to inform the user about the need to download the list. closes https://github.com/opnsense/core/issues/1432 2017-02-27 20:19:10 +01:00
Ian Matyssik
8cdd61f0be Add ruleset-optimization for better performance 2017-02-27 22:10:07 +09:00
Ad Schellevis
ebdf0a8f1c Merge pull request #1427 from phpb-com/filterinc_cleanup
Further clean-up of generated firewall rules.
2017-02-27 11:44:12 +00:00
Ad Schellevis
543df477ce api, missing check for existing method. 2017-02-27 10:25:08 +01:00
Franco Fichtner
b7f438d5bf rc: mute importer install media touch 2017-02-27 10:16:45 +01:00
Franco Fichtner
cd5b018866 rc: avoid unnecessary errors #1372 2017-02-27 09:34:53 +01:00
Franco Fichtner
ce32fb747b rc: move importer to very early spot, add timeout #1372 2017-02-27 09:15:35 +01:00
Ian Matyssik
e839ef2c3a Simplify route-to rules from the firewall, probably can be cleaned even more 2017-02-27 09:12:51 +09:00
Ian Matyssik
25eeb7c9b2 Remove filter_generate_network_aliases since it is not used anywhere and redundant with internal (<if>)/(<if>:network) directives 2017-02-27 09:12:51 +09:00
Franco Fichtner
21b84ed2a8 rc: openssl.cnf is a sample file now via upstream 2017-02-26 23:20:36 +01:00
Franco Fichtner
53bfd845c0 rc: did not mean to revert this 2017-02-26 19:52:27 +01:00
Franco Fichtner
40122799b2 rc: print tweaks for importer 2017-02-26 19:50:28 +01:00
Franco Fichtner
dac39c534a rc: bring back the early installer as optional importer
This sort of reverts commit 5f319ade89f413b3181efab6b7932108e6635ec7.
2017-02-26 19:45:01 +01:00
Franco Fichtner
974ff9420d rc: add importer script exported from bsdinstaller 2017-02-26 19:45:01 +01:00
Ad Schellevis
0829a34cef align max username length, ref 4036f87375/sys/sys/param.h (L103) 2017-02-26 17:20:44 +01:00
Franco Fichtner
2cf06c647e system: default is the default 2017-02-26 17:14:37 +01:00
Franco Fichtner
5f319ade89 installer: kill the early installer, it needs a qualified tty hint 2017-02-26 16:59:19 +01:00
Franco Fichtner
50b5de04a1 system: console experiment -- modern settings 2017-02-26 13:24:56 +01:00
Franco Fichtner
cbea88de68 system: retain spacing on previous 2017-02-26 10:55:55 +01:00
Ian Matyssik
c37e82a909 Fix a203c69 to prevent matching interfaces with 'ip' in the end of the end. Thanks to @fichtner and @fabianfrz for helping with regex (#1430) 2017-02-26 10:49:51 +01:00
Franco Fichtner
4f83c6d328 firmware: consisten style 2017-02-26 10:47:14 +01:00
Ad Schellevis
1678cc93c3 crond, forward stdout to null, closes https://github.com/opnsense/core/issues/1426 2017-02-26 10:46:21 +01:00
Franco Fichtner
9dd1dd8ede rc: another crash report 2017-02-26 10:25:23 +01:00
Franco Fichtner
517c2cc9cc firewall: wait for filterdns to exit to avoid races
The restart was moved just below the stop now, which could cause
potential issues.  Need to be careful now...
2017-02-26 09:27:21 +01:00
Ad Schellevis
a203c69954 filter, cleanup some more, https://github.com/opnsense/core/pull/1419 2017-02-25 17:06:18 +01:00
Ad Schellevis
ac28bc57dc Merge pull request #1419 from phpb-com/pfrules_cleanup
Clean-up how interface address/network rules are generated.
2017-02-25 15:40:12 +00:00
Ad Schellevis
bcb17cdc48 firmware, add mirror 2017-02-25 16:25:46 +01:00
Ian Matyssik
d0b0ca28c2 Add modulate state as an option for state tracking 2017-02-24 14:59:23 +09:00
Ian Matyssik
cccec5ab84 remove filter_address_add_vips_subnets and references to it, since it is no loger needed with (<if>) and (<if>:network) syntax 2017-02-24 14:58:49 +09:00
Ian Matyssik
669efa5fb5 Cleanup of PF rule generation and fix for missing rules for group interface network 2017-02-24 14:58:49 +09:00
Ad Schellevis
7410822082 (ldap) disable anonymous binds 2017-02-23 23:30:06 +01:00
Ad Schellevis
77f3cfa87e (filter) force a reload of filterdns when filter reloads, closes https://github.com/opnsense/core/issues/1396 2017-02-23 20:37:21 +01:00
Franco Fichtner
e20efe33b0 layout: add boolean value, submitted by @fbrendel 2017-02-23 10:30:16 +01:00
Ad Schellevis
09959a9575 redo range fix, thanks to @phpb-com 2017-02-22 18:36:54 +01:00
Ad Schellevis
679dd0b846 (systemhealth) prevent div by zero, for https://github.com/opnsense/core/issues/1421 2017-02-22 18:10:32 +01:00
Franco Fichtner
bdd1be3962 plugins: not going away anytime soon
If we want to be pluggable, simply delete contents of
/usr/local/etc/inc/plugins.inc.d/ and be done with it.
2017-02-22 15:49:22 +01:00