14869 Commits

Author SHA1 Message Date
Ad Schellevis
bcd9642dfa VPN: IPsec: Connections - allow @ for [eap]id fields, closes https://github.com/opnsense/core/issues/6277 2023-01-30 14:06:31 +01:00
Franco Fichtner
4b662218aa src: style sweep 2023-01-30 12:50:21 +01:00
kulikov-a
f239c6680f
tooltips (#6280)
add tooltip to fqdn ('Domain') cell
fix buttons tooltips
2023-01-30 10:52:45 +01:00
Stephan de Wit
4ffcd434a2 Unbound: blocklists: always prioritize whitelists over blocklists 2023-01-30 09:45:33 +01:00
Stephan de Wit
a88dfd2ab5 Unbound: match white/blocklist action exactly from Reporting page
This fixes subdomains potentially tagging along from a switch of white/blocklist to its counterpart. e.g.: if both an.facebook.com and facebook.com are on the whitelist, switching facebook.com to the blocklists would also move an.facebook.com.
2023-01-30 08:51:10 +01:00
Ad Schellevis
ed12696f12 Dashboard/CARP widget - incorrect link to carp status page 2023-01-27 17:58:51 +01:00
Ad Schellevis
4ff07568ec IPSec - missing a bracket for https://github.com/opnsense/core/issues/6276 2023-01-27 15:46:18 +01:00
Ad Schellevis
a6c6a29823 IPSec - myid might be optional, could be a fix for https://github.com/opnsense/core/issues/6276 2023-01-27 13:40:22 +01:00
Franco Fichtner
9ddcaabf5f firmware: no more upgrades required 2023-01-27 12:54:43 +01:00
Franco Fichtner
51f97e176e firmware: start phasing out LibreSSL glue
No longer able to select it from the GUI.  CORE_FLAVOUR
still exists but can be removed safely later on.
2023-01-27 12:53:48 +01:00
Franco Fichtner
c8569241cb pkg: move to 23.1 as default 2023-01-27 12:52:39 +01:00
Ad Schellevis
bb623c6033 Reporting: Traffic - bail dns resolve when no resolver is configured. closes https://github.com/opnsense/core/issues/6266 2023-01-26 17:50:51 +01:00
Ad Schellevis
1acb831a93 IPsec - mute enc0 down as well and remove sleep 2023-01-25 17:32:48 +01:00
Ad Schellevis
4ec76cd57a IPsec - mute onestop command 2023-01-25 17:21:20 +01:00
Stephan de Wit
6c29e9535c Unbound: blocklists: add SafeSearch option 2023-01-25 16:57:55 +01:00
Ad Schellevis
b15d17b847 php8 style issues - fix PHP Deprecated: ... Passing null to parameter errors and some undefined array keys 2023-01-25 15:17:05 +01:00
Ad Schellevis
a772579ed9 php8 style issues - fix PHP Deprecated: ... Passing null to parameter errors 2023-01-25 13:45:02 +01:00
Ad Schellevis
7e0fa15982 interfaces: safeguard some shell_exec() callouts in case parameter isn't provided, also omits "Passing null to parameter" messages in debug log 2023-01-25 13:45:02 +01:00
Stephan de Wit
c65dff5f0e SystemStatus: remove unused variable 2023-01-25 13:43:01 +01:00
Stephan de Wit
90d978c5cc SystemStatus: glob() produces a full pathname, use basename instead of str_replace 2023-01-25 13:30:32 +01:00
Ad Schellevis
b6a097c7b4 php8 style issues - fix PHP Deprecated: ... Passing null to parameter errors 2023-01-25 13:24:07 +01:00
Ad Schellevis
2dba52b856 SystemStatus - fix collectStatus() to only return php files in the Status directlry, also prevents php complaining about null references. 2023-01-25 11:33:53 +01:00
Stephan de Wit
d4e613b4c8 Unbound: dnsbl_module: replace boolean values with integer 2023-01-25 10:29:26 +01:00
Ad Schellevis
7675b16191 Services / Unbound - safeguard "rep" and adjust linewrap to 120 chars for some functions. 2023-01-24 21:12:51 +01:00
Ad Schellevis
798e827562 Services: Captive Portal - enforce a database repair if an sqlite3.DatabaseError is triggered during normal operation. 2023-01-24 18:09:55 +01:00
Ad Schellevis
8ee9521376 Services: Captive Portal - for static mac assignments make sure if the ip address actually changed before updating it. 2023-01-24 16:00:59 +01:00
Stephan de Wit
44e9dc25b8 unbound: logger: simplify logic and remove unneccesary log 2023-01-24 09:33:30 +01:00
Franco Fichtner
f95e9ad51a ui: simplify boot log naming 2023-01-24 08:45:29 +01:00
Franco Fichtner
54cd32c49d interfaces: exclude a few cases from PPPoEv6 negotiation
6to4 and 6rd is static, as well as static itself.  Tracking does not
work on a WAN.  This leaves SLAAC and DHCPv6 with SLAAC being more
likely to work mutually exclusive.  Long term for DHCPv6 we need to
do something else like a manual override.
2023-01-23 13:08:34 +01:00
Franco Fichtner
3dd0e7e713 firewall: small grouping tweaks 2023-01-23 12:57:54 +01:00
Stephan de Wit
6da3997f75 Reporting: Unbound: fix overflow style issues 2023-01-23 11:55:49 +01:00
Ad Schellevis
7248a47143 plugins_run: remove logging from lugins_runb as it doesn't really seem to be ading much more than noise (current only user is return_gateways_status()). ref https://forum.opnsense.org/index.php?topic=31560.0 2023-01-23 11:25:29 +01:00
Stephan de Wit
d8ddc0b554 Firewall: groups: add option to prevent grouping in interfaces menu
Closes https://github.com/opnsense/core/issues/6201
2023-01-23 09:05:37 +01:00
Ad Schellevis
296344f6f5 VPN: IPsec: Mobile Clients - missing correct phase 1 to collect "Network List" option. closes https://github.com/opnsense/core/issues/5960 2023-01-22 11:16:09 +01:00
Ad Schellevis
56634f8c94 Firewall: Aliases - safeguard refactor in case someone omits the name from the api call. closes https://github.com/opnsense/core/pull/6254 2023-01-20 19:15:50 +01:00
Ad Schellevis
d8f209420d Interfaces/Other Types/VLAN - outer vlan should be marked "ad", inner is always "q". closes https://github.com/opnsense/core/issues/5893 2023-01-20 18:57:18 +01:00
Franco Fichtner
7fa6fbbc5d system: wording on previous 2023-01-20 14:43:02 +01:00
Stephan de Wit
83faa69d47 unbound: prevent a traceback in syslog on an intended interruptedError 2023-01-20 14:40:25 +01:00
Franco Fichtner
a230326d7f system: prevent removing host routes in edge case; closes #6244 2023-01-20 14:24:46 +01:00
Franco Fichtner
b2d9eb2e36 system: fix undefined var edge case 2023-01-20 14:24:46 +01:00
Stephan de Wit
cb510320fa unbound: fix deadlock by specifying a pidfile to daemon 2023-01-20 12:52:50 +01:00
Franco Fichtner
f60333622a interfaces: for now bring back duality of PPPoEv6 and other types
This doesn't invalidate the PPPoEv6 mode, but it does keep the race
between router files for different types.  In this case e.g. Telekom
ISP will require the IPv6 from PPPoE to be set in order to be able
to do DHCPv6 for whatever reason.

PR: https://forum.opnsense.org/index.php?topic=31955.0
2023-01-20 09:41:05 +01:00
Franco Fichtner
e27234b4cc firmware: almost there 2023-01-19 15:22:10 +01:00
Ad Schellevis
473b106081 VPN/IPsec : php 8 issue, fix : PHP Fatal error: Uncaught TypeError: in_array(): Argument #2 ($haystack) must be of type array, null given in /usr/local/www/vpn_ipsec_phase1.php:997 2023-01-19 13:50:30 +01:00
kulikov-a
b84170819f
fix regression in previous. typo (#6253)
fixes Updates tab behavior after checking for updates
2023-01-19 12:58:54 +01:00
Franco Fichtner
a1569e8938 intrusion detection: suricata_flags defaults to -D #6189
Since we overwrite the flags the daemon mode is not invoked
causing the system boot to hang when suricata starts.
2023-01-19 09:14:36 +01:00
Franco Fichtner
585311cedd system: support tier here in core as well #5983 2023-01-18 15:07:12 +01:00
Franco Fichtner
46965bfb66 intrusion detection: add verbose mode selector for suricata; closes #6189 2023-01-18 14:25:04 +01:00
kulikov-a
fd2be18809
firmware.volt: responsiveness fix (#6210)
make tables responsive (by moving .table-responsive to the parent div)
workaround bootstrap "dropdowns inside responsive table" issue
don't let the buttons fall apart
2023-01-17 10:48:46 +01:00
Franco Fichtner
86e1cb936f system: also add zpool-trim command
Background both commands to avoid spurious timeouts.
We do not process output anyway.

PR: https://forum.opnsense.org/index.php?topic=31143.0
2023-01-16 13:43:16 +01:00