Ad Schellevis
bcd9642dfa
VPN: IPsec: Connections - allow @ for [eap]id fields, closes https://github.com/opnsense/core/issues/6277
2023-01-30 14:06:31 +01:00
Franco Fichtner
4b662218aa
src: style sweep
2023-01-30 12:50:21 +01:00
kulikov-a
f239c6680f
tooltips ( #6280 )
...
add tooltip to fqdn ('Domain') cell
fix buttons tooltips
2023-01-30 10:52:45 +01:00
Stephan de Wit
4ffcd434a2
Unbound: blocklists: always prioritize whitelists over blocklists
2023-01-30 09:45:33 +01:00
Stephan de Wit
a88dfd2ab5
Unbound: match white/blocklist action exactly from Reporting page
...
This fixes subdomains potentially tagging along from a switch of white/blocklist to its counterpart. e.g.: if both an.facebook.com and facebook.com are on the whitelist, switching facebook.com to the blocklists would also move an.facebook.com.
2023-01-30 08:51:10 +01:00
Ad Schellevis
ed12696f12
Dashboard/CARP widget - incorrect link to carp status page
2023-01-27 17:58:51 +01:00
Ad Schellevis
4ff07568ec
IPSec - missing a bracket for https://github.com/opnsense/core/issues/6276
2023-01-27 15:46:18 +01:00
Ad Schellevis
a6c6a29823
IPSec - myid might be optional, could be a fix for https://github.com/opnsense/core/issues/6276
2023-01-27 13:40:22 +01:00
Franco Fichtner
9ddcaabf5f
firmware: no more upgrades required
2023-01-27 12:54:43 +01:00
Franco Fichtner
51f97e176e
firmware: start phasing out LibreSSL glue
...
No longer able to select it from the GUI. CORE_FLAVOUR
still exists but can be removed safely later on.
2023-01-27 12:53:48 +01:00
Franco Fichtner
c8569241cb
pkg: move to 23.1 as default
2023-01-27 12:52:39 +01:00
Ad Schellevis
bb623c6033
Reporting: Traffic - bail dns resolve when no resolver is configured. closes https://github.com/opnsense/core/issues/6266
2023-01-26 17:50:51 +01:00
Ad Schellevis
1acb831a93
IPsec - mute enc0 down as well and remove sleep
2023-01-25 17:32:48 +01:00
Ad Schellevis
4ec76cd57a
IPsec - mute onestop command
2023-01-25 17:21:20 +01:00
Stephan de Wit
6c29e9535c
Unbound: blocklists: add SafeSearch option
2023-01-25 16:57:55 +01:00
Ad Schellevis
b15d17b847
php8 style issues - fix PHP Deprecated: ... Passing null to parameter errors and some undefined array keys
2023-01-25 15:17:05 +01:00
Ad Schellevis
a772579ed9
php8 style issues - fix PHP Deprecated: ... Passing null to parameter errors
2023-01-25 13:45:02 +01:00
Ad Schellevis
7e0fa15982
interfaces: safeguard some shell_exec() callouts in case parameter isn't provided, also omits "Passing null to parameter" messages in debug log
2023-01-25 13:45:02 +01:00
Stephan de Wit
c65dff5f0e
SystemStatus: remove unused variable
2023-01-25 13:43:01 +01:00
Stephan de Wit
90d978c5cc
SystemStatus: glob() produces a full pathname, use basename instead of str_replace
2023-01-25 13:30:32 +01:00
Ad Schellevis
b6a097c7b4
php8 style issues - fix PHP Deprecated: ... Passing null to parameter errors
2023-01-25 13:24:07 +01:00
Ad Schellevis
2dba52b856
SystemStatus - fix collectStatus() to only return php files in the Status directlry, also prevents php complaining about null references.
2023-01-25 11:33:53 +01:00
Stephan de Wit
d4e613b4c8
Unbound: dnsbl_module: replace boolean values with integer
2023-01-25 10:29:26 +01:00
Ad Schellevis
7675b16191
Services / Unbound - safeguard "rep" and adjust linewrap to 120 chars for some functions.
2023-01-24 21:12:51 +01:00
Ad Schellevis
798e827562
Services: Captive Portal - enforce a database repair if an sqlite3.DatabaseError is triggered during normal operation.
2023-01-24 18:09:55 +01:00
Ad Schellevis
8ee9521376
Services: Captive Portal - for static mac assignments make sure if the ip address actually changed before updating it.
2023-01-24 16:00:59 +01:00
Stephan de Wit
44e9dc25b8
unbound: logger: simplify logic and remove unneccesary log
2023-01-24 09:33:30 +01:00
Franco Fichtner
f95e9ad51a
ui: simplify boot log naming
2023-01-24 08:45:29 +01:00
Franco Fichtner
54cd32c49d
interfaces: exclude a few cases from PPPoEv6 negotiation
...
6to4 and 6rd is static, as well as static itself. Tracking does not
work on a WAN. This leaves SLAAC and DHCPv6 with SLAAC being more
likely to work mutually exclusive. Long term for DHCPv6 we need to
do something else like a manual override.
2023-01-23 13:08:34 +01:00
Franco Fichtner
3dd0e7e713
firewall: small grouping tweaks
2023-01-23 12:57:54 +01:00
Stephan de Wit
6da3997f75
Reporting: Unbound: fix overflow style issues
2023-01-23 11:55:49 +01:00
Ad Schellevis
7248a47143
plugins_run: remove logging from lugins_runb as it doesn't really seem to be ading much more than noise (current only user is return_gateways_status()). ref https://forum.opnsense.org/index.php?topic=31560.0
2023-01-23 11:25:29 +01:00
Stephan de Wit
d8ddc0b554
Firewall: groups: add option to prevent grouping in interfaces menu
...
Closes https://github.com/opnsense/core/issues/6201
2023-01-23 09:05:37 +01:00
Ad Schellevis
296344f6f5
VPN: IPsec: Mobile Clients - missing correct phase 1 to collect "Network List" option. closes https://github.com/opnsense/core/issues/5960
2023-01-22 11:16:09 +01:00
Ad Schellevis
56634f8c94
Firewall: Aliases - safeguard refactor in case someone omits the name from the api call. closes https://github.com/opnsense/core/pull/6254
2023-01-20 19:15:50 +01:00
Ad Schellevis
d8f209420d
Interfaces/Other Types/VLAN - outer vlan should be marked "ad", inner is always "q". closes https://github.com/opnsense/core/issues/5893
2023-01-20 18:57:18 +01:00
Franco Fichtner
7fa6fbbc5d
system: wording on previous
2023-01-20 14:43:02 +01:00
Stephan de Wit
83faa69d47
unbound: prevent a traceback in syslog on an intended interruptedError
2023-01-20 14:40:25 +01:00
Franco Fichtner
a230326d7f
system: prevent removing host routes in edge case; closes #6244
2023-01-20 14:24:46 +01:00
Franco Fichtner
b2d9eb2e36
system: fix undefined var edge case
2023-01-20 14:24:46 +01:00
Stephan de Wit
cb510320fa
unbound: fix deadlock by specifying a pidfile to daemon
2023-01-20 12:52:50 +01:00
Franco Fichtner
f60333622a
interfaces: for now bring back duality of PPPoEv6 and other types
...
This doesn't invalidate the PPPoEv6 mode, but it does keep the race
between router files for different types. In this case e.g. Telekom
ISP will require the IPv6 from PPPoE to be set in order to be able
to do DHCPv6 for whatever reason.
PR: https://forum.opnsense.org/index.php?topic=31955.0
2023-01-20 09:41:05 +01:00
Franco Fichtner
e27234b4cc
firmware: almost there
2023-01-19 15:22:10 +01:00
Ad Schellevis
473b106081
VPN/IPsec : php 8 issue, fix : PHP Fatal error: Uncaught TypeError: in_array(): Argument #2 ($haystack) must be of type array, null given in /usr/local/www/vpn_ipsec_phase1.php:997
2023-01-19 13:50:30 +01:00
kulikov-a
b84170819f
fix regression in previous. typo ( #6253 )
...
fixes Updates tab behavior after checking for updates
2023-01-19 12:58:54 +01:00
Franco Fichtner
a1569e8938
intrusion detection: suricata_flags defaults to -D #6189
...
Since we overwrite the flags the daemon mode is not invoked
causing the system boot to hang when suricata starts.
2023-01-19 09:14:36 +01:00
Franco Fichtner
585311cedd
system: support tier here in core as well #5983
2023-01-18 15:07:12 +01:00
Franco Fichtner
46965bfb66
intrusion detection: add verbose mode selector for suricata; closes #6189
2023-01-18 14:25:04 +01:00
kulikov-a
fd2be18809
firmware.volt: responsiveness fix ( #6210 )
...
make tables responsive (by moving .table-responsive to the parent div)
workaround bootstrap "dropdowns inside responsive table" issue
don't let the buttons fall apart
2023-01-17 10:48:46 +01:00
Franco Fichtner
86e1cb936f
system: also add zpool-trim command
...
Background both commands to avoid spurious timeouts.
We do not process output anyway.
PR: https://forum.opnsense.org/index.php?topic=31143.0
2023-01-16 13:43:16 +01:00