Franco Fichtner
bd6c048d45
relayd: use plugin hooks
2016-11-05 19:01:56 +01:00
Franco Fichtner
8986792ddd
rc: remove fallthrough for commands from menu
2016-11-05 13:45:29 +01:00
Ad Schellevis
24ef3b5bbc
(filter) move ipv6 interface rules, loopback, fw output rules, and fix antispool order (wasn't on top)
2016-11-04 18:49:26 +01:00
Ad Schellevis
ff0a9af09b
(filter) move ipv4 interface rules
2016-11-04 08:54:44 +01:00
Ad Schellevis
a438e42112
(filter) add flags to FilterRule
2016-11-03 20:38:49 +01:00
Franco Fichtner
9ff5277b0d
Merge pull request #1249 from speed47/master
...
rc: fix an infinite loop on tty close
2016-11-03 20:34:46 +01:00
Ad Schellevis
8e3d1763ef
(filter) move DHCPv6 client rules
2016-11-03 16:51:25 +01:00
Ad Schellevis
0b4131752a
(filter) move antispoof out of the way
2016-11-03 15:08:25 +01:00
Stéphane Lesimple
a11850cc45
rc: fix an infinite loop on tty close
...
if the tty is closed while the script is running,
it would previously go in an infinite loop trying
to read from and write to the now-defunct tty.
fixes: https://github.com/opnsense/core/issues/1240
2016-11-03 12:51:18 +01:00
Ad Schellevis
15a1895124
(filter) add keyword allowopts
2016-11-01 21:20:14 +01:00
Ad Schellevis
b68cd07418
(filter) add getInterfaceMapping() to Firewall->Plugin, fix setInterfaceMapping()
2016-11-01 21:12:18 +01:00
Ad Schellevis
237c652e4f
(filter) move block bogons and private nets
2016-11-01 21:11:46 +01:00
Ad Schellevis
f0769ab18c
(filter) use plain interface mapping in stead of legacy filter_generate_optcfg_array(), there's quite some magic in there which we want to cleanup eventually
2016-11-01 19:46:19 +01:00
Ad Schellevis
c060216286
(filter) move lockout rules
2016-11-01 13:28:07 +01:00
Ad Schellevis
3e9f734470
(filter) add maximum size option to parsePlain
2016-11-01 13:26:38 +01:00
Ad Schellevis
7bc5bf4d1f
(filter) move some more static rules
2016-10-31 21:38:54 +01:00
Ad Schellevis
5319b8e53b
(filter) move out some more static rules
2016-10-31 19:03:07 +01:00
Ad Schellevis
700e351477
(filter) reverse inet46 handling
2016-10-31 10:54:47 +01:00
Ad Schellevis
89c55e1b24
(filter) refactor inet46 to single rule and add some more tags
2016-10-31 10:21:58 +01:00
Ad Schellevis
b9c8e159d8
(filter) move "Default deny rules" to new method
2016-10-30 20:00:03 +01:00
Ad Schellevis
20e4dfa438
(filter) extend registerFilterRule() with state options
2016-10-30 19:59:03 +01:00
Franco Fichtner
8f194f4bb5
mvc: Macro 'base_dialog_header' is already defined on PHP 7.0
2016-10-30 18:53:42 +01:00
Franco Fichtner
745b186bc2
plist: fix previous
2016-10-30 15:04:42 +01:00
Ad Schellevis
fd12c6682a
(filter) more refactoring, as discussed with @fichtner move core rules out of plugin scope
2016-10-30 12:34:11 +01:00
Franco Fichtner
2c2192d70d
rc: explicitly use `-p' , it should be set but can't go wrong here
...
PR: https://github.com/opnsense/core/issues/1077
2016-10-29 10:19:26 +02:00
Franco Fichtner
a89858db9d
firmware: improve GUI responses; closes #1009
2016-10-29 09:36:48 +02:00
Franco Fichtner
569bc3fdbb
rc: tweak previous a little
2016-10-29 08:30:23 +02:00
Franco Fichtner
e6e85ce70c
rc: finally deal with message of the day
...
Content follows, for now just use the sweet template Framework
to get this party started.
We're using "motd.in" so allow replacement during package builds.
2016-10-29 08:23:19 +02:00
Franco Fichtner
8d11de1be9
miniupnpd: forgot syntax for a second there
2016-10-29 00:59:06 +02:00
Franco Fichtner
89cd7224b0
plist: fix previous
2016-10-29 00:47:27 +02:00
Franco Fichtner
850cd7a5fa
miniupnpd: merge inc files, minor tweaks on the code
...
Since we have pluggable anchors, this is ready to move to
plugins to shink down the base system a bit.
2016-10-29 00:43:48 +02:00
Franco Fichtner
d01b729630
inc: apply random style fixes
2016-10-29 00:08:00 +02:00
Ad Schellevis
3085e4d18f
(plugins / firewall) first steps in moving static firewall rules to plugin registrations.
...
Te idea is simple, start parsing rules in a uniform way, so we're eventually able to display and alter all auto generated rules.
Because of the large set of legacy code rules, we're going to migrate step by step, leaving the current setup intact.
2016-10-28 20:14:29 +02:00
Ad Schellevis
0755bdac78
(filter.inc) move anchor, pre requirement for wrapping rule plugin
2016-10-28 20:00:22 +02:00
Franco Fichtner
477fba1122
src: switch template reload to new slash notation; #1238
2016-10-28 08:41:42 +02:00
Franco Fichtner
53f44c89c7
rc: split out netgraph modules into own loader chunk
2016-10-27 10:38:04 +02:00
Franco Fichtner
df2fbeb22e
rc: make individual chunks a bit more apparent in loader.conf
2016-10-27 10:10:29 +02:00
Franco Fichtner
765b22f1be
system: only append, less intrusive and last match wins
2016-10-27 10:05:17 +02:00
Franco Fichtner
7094a5cd3b
rc: the trusty rc.opnsense couldn't cope with subdirs
2016-10-26 19:54:14 +02:00
Franco Fichtner
528866c5d0
proxy: rc.conf.d subdir for squid, only way to merge configs
2016-10-26 19:34:30 +02:00
Franco Fichtner
243681049f
system: don't run async auth templates
2016-10-26 15:42:15 +02:00
Franco Fichtner
a4b9c0298b
configd: small improvements loosely related to #1238
...
o Don't look for templates in manufacturer directory
o Allow to use "/" component separator, it's safe
o Hook up the "template list" command
2016-10-26 15:26:27 +02:00
Franco Fichtner
35122576f4
proxy: allow alt auth framework config file
...
We fall back to the local authentication if not found.
PR: https://github.com/opnsense/plugins/issues/43
2016-10-26 08:23:14 +02:00
Franco Fichtner
2d450939a0
system: consolidate previous
...
* system_console_configure() is really system_login_configure()+
* make a template for sudoers config setting
* move auth template generation to single spot
2016-10-26 07:17:58 +02:00
Ad Schellevis
cacfdd058d
(filter) work in progress filter refactoring
2016-10-25 20:52:25 +02:00
Ad Schellevis
f88eabc00b
(pam) switch to pam, with the option to disable our pam helper and switch back to unix mode... for https://github.com/opnsense/core/issues/998
2016-10-25 20:36:55 +02:00
Ad Schellevis
089a3f07d6
fix for https://github.com/opnsense/core/issues/1196
2016-10-25 19:51:39 +02:00
Franco Fichtner
6aac623b99
pkg: cross-build needs explicit CORE_ARCH
2016-10-25 08:34:38 +02:00
Franco Fichtner
8185e2007b
pkg: exclude missing packages on armv6
2016-10-24 17:13:50 +02:00
Franco Fichtner
9a279ae5a6
pkg: fix plist
2016-10-24 17:13:39 +02:00