Franco Fichtner
bbe9e070cb
intrusion detection: finish up after #1129
...
This reverts commit 25d8428cb6b6d8d0f22e49d70ef6f7ce49b14a3c and adds
normal enabled/disable indicators. POST is all weird today, but so
far this looks good.
2017-03-01 08:06:57 +01:00
Franco Fichtner
1bf82da319
rc: advise a reboot if not in boot mode
2017-03-01 07:00:38 +01:00
Franco Fichtner
3ebbdfd994
rc: command line arg mode for importer
2017-03-01 06:55:57 +01:00
Franco Fichtner
16adc594c6
rc: starting importer directly needs no timeout
2017-03-01 06:40:12 +01:00
Franco Fichtner
fedfd0a4a8
rc: recursion is bad ;)
2017-03-01 06:38:00 +01:00
Franco Fichtner
c4ec7689e8
rc: allow use of importer anytime, add conveniance aliases
2017-03-01 06:30:32 +01:00
Franco Fichtner
d1d200b6b4
rc: small installer/importer tweaks
2017-02-28 19:11:04 +01:00
Ad Schellevis
bed87f3d27
(mvc) send post requests as json body, url encoding isn't always typesafe
2017-02-28 17:02:00 +01:00
Ad Schellevis
29e3bb3e6f
(mvc) csrf protection, not very likely to hit in normal situations, but when using legacy free applications, there might not be a csrf token leading to a denial of all requests.
2017-02-28 14:26:10 +01:00
Ad Schellevis
b08d26db14
(filter) force kill of filterdns, filterdns doesn't always listen properly to TERM, causing endless waits
2017-02-28 10:37:40 +01:00
Ad Schellevis
8d00e48857
(filter/aliases) allow port alias nesting, closes https://github.com/opnsense/core/issues/1436
2017-02-28 09:08:01 +01:00
Franco Fichtner
2981b6637f
captive portal: fixup "permanent" arp entry parse #1344
2017-02-28 09:06:06 +01:00
Ad Schellevis
3151c87eec
CP, refactor arp list, closes https://github.com/opnsense/core/issues/1344
2017-02-28 08:52:24 +01:00
Ad Schellevis
e51bc802f4
openvpn client, double escaped user/passs. closes https://github.com/opnsense/core/issues/1370
2017-02-27 21:26:08 +01:00
Ad Schellevis
a481668fea
(proxy) add a notice to inform the user about the need to download the list. closes https://github.com/opnsense/core/issues/1432
2017-02-27 20:19:10 +01:00
Ian Matyssik
8cdd61f0be
Add ruleset-optimization for better performance
2017-02-27 22:10:07 +09:00
Ad Schellevis
ebdf0a8f1c
Merge pull request #1427 from phpb-com/filterinc_cleanup
...
Further clean-up of generated firewall rules.
2017-02-27 11:44:12 +00:00
Ad Schellevis
543df477ce
api, missing check for existing method.
2017-02-27 10:25:08 +01:00
Franco Fichtner
b7f438d5bf
rc: mute importer install media touch
2017-02-27 10:16:45 +01:00
Franco Fichtner
cd5b018866
rc: avoid unnecessary errors #1372
2017-02-27 09:34:53 +01:00
Franco Fichtner
ce32fb747b
rc: move importer to very early spot, add timeout #1372
2017-02-27 09:15:35 +01:00
Ian Matyssik
e839ef2c3a
Simplify route-to rules from the firewall, probably can be cleaned even more
2017-02-27 09:12:51 +09:00
Ian Matyssik
25eeb7c9b2
Remove filter_generate_network_aliases since it is not used anywhere and redundant with internal (<if>)/(<if>:network) directives
2017-02-27 09:12:51 +09:00
Franco Fichtner
21b84ed2a8
rc: openssl.cnf is a sample file now via upstream
2017-02-26 23:20:36 +01:00
Franco Fichtner
53bfd845c0
rc: did not mean to revert this
2017-02-26 19:52:27 +01:00
Franco Fichtner
40122799b2
rc: print tweaks for importer
2017-02-26 19:50:28 +01:00
Franco Fichtner
dac39c534a
rc: bring back the early installer as optional importer
...
This sort of reverts commit 5f319ade89f413b3181efab6b7932108e6635ec7.
2017-02-26 19:45:01 +01:00
Franco Fichtner
974ff9420d
rc: add importer script exported from bsdinstaller
2017-02-26 19:45:01 +01:00
Ad Schellevis
0829a34cef
align max username length, ref 4036f87375/sys/sys/param.h (L103)
2017-02-26 17:20:44 +01:00
Franco Fichtner
2cf06c647e
system: default is the default
2017-02-26 17:14:37 +01:00
Franco Fichtner
5f319ade89
installer: kill the early installer, it needs a qualified tty hint
2017-02-26 16:59:19 +01:00
Franco Fichtner
50b5de04a1
system: console experiment -- modern settings
2017-02-26 13:24:56 +01:00
Franco Fichtner
cbea88de68
system: retain spacing on previous
2017-02-26 10:55:55 +01:00
Ian Matyssik
c37e82a909
Fix a203c69 to prevent matching interfaces with 'ip' in the end of the end. Thanks to @fichtner and @fabianfrz for helping with regex ( #1430 )
2017-02-26 10:49:51 +01:00
Franco Fichtner
4f83c6d328
firmware: consisten style
2017-02-26 10:47:14 +01:00
Ad Schellevis
1678cc93c3
crond, forward stdout to null, closes https://github.com/opnsense/core/issues/1426
2017-02-26 10:46:21 +01:00
Franco Fichtner
9dd1dd8ede
rc: another crash report
2017-02-26 10:25:23 +01:00
Franco Fichtner
517c2cc9cc
firewall: wait for filterdns to exit to avoid races
...
The restart was moved just below the stop now, which could cause
potential issues. Need to be careful now...
2017-02-26 09:27:21 +01:00
Ad Schellevis
a203c69954
filter, cleanup some more, https://github.com/opnsense/core/pull/1419
2017-02-25 17:06:18 +01:00
Ad Schellevis
ac28bc57dc
Merge pull request #1419 from phpb-com/pfrules_cleanup
...
Clean-up how interface address/network rules are generated.
2017-02-25 15:40:12 +00:00
Ad Schellevis
bcb17cdc48
firmware, add mirror
2017-02-25 16:25:46 +01:00
Ian Matyssik
d0b0ca28c2
Add modulate state as an option for state tracking
2017-02-24 14:59:23 +09:00
Ian Matyssik
cccec5ab84
remove filter_address_add_vips_subnets and references to it, since it is no loger needed with (<if>) and (<if>:network) syntax
2017-02-24 14:58:49 +09:00
Ian Matyssik
669efa5fb5
Cleanup of PF rule generation and fix for missing rules for group interface network
2017-02-24 14:58:49 +09:00
Ad Schellevis
7410822082
(ldap) disable anonymous binds
2017-02-23 23:30:06 +01:00
Ad Schellevis
77f3cfa87e
(filter) force a reload of filterdns when filter reloads, closes https://github.com/opnsense/core/issues/1396
2017-02-23 20:37:21 +01:00
Franco Fichtner
e20efe33b0
layout: add boolean value, submitted by @fbrendel
2017-02-23 10:30:16 +01:00
Ad Schellevis
09959a9575
redo range fix, thanks to @phpb-com
2017-02-22 18:36:54 +01:00
Ad Schellevis
679dd0b846
(systemhealth) prevent div by zero, for https://github.com/opnsense/core/issues/1421
2017-02-22 18:10:32 +01:00
Franco Fichtner
bdd1be3962
plugins: not going away anytime soon
...
If we want to be pluggable, simply delete contents of
/usr/local/etc/inc/plugins.inc.d/ and be done with it.
2017-02-22 15:49:22 +01:00