6173 Commits

Author SHA1 Message Date
Franco Fichtner
bd6c048d45 relayd: use plugin hooks 2016-11-05 19:01:56 +01:00
Franco Fichtner
8986792ddd rc: remove fallthrough for commands from menu 2016-11-05 13:45:29 +01:00
Ad Schellevis
24ef3b5bbc (filter) move ipv6 interface rules, loopback, fw output rules, and fix antispool order (wasn't on top) 2016-11-04 18:49:26 +01:00
Ad Schellevis
ff0a9af09b (filter) move ipv4 interface rules 2016-11-04 08:54:44 +01:00
Ad Schellevis
a438e42112 (filter) add flags to FilterRule 2016-11-03 20:38:49 +01:00
Franco Fichtner
9ff5277b0d Merge pull request #1249 from speed47/master
rc: fix an infinite loop on tty close
2016-11-03 20:34:46 +01:00
Ad Schellevis
8e3d1763ef (filter) move DHCPv6 client rules 2016-11-03 16:51:25 +01:00
Ad Schellevis
0b4131752a (filter) move antispoof out of the way 2016-11-03 15:08:25 +01:00
Stéphane Lesimple
a11850cc45 rc: fix an infinite loop on tty close
if the tty is closed while the script is running,
it would previously go in an infinite loop trying
to read from and write to the now-defunct tty.

fixes: https://github.com/opnsense/core/issues/1240
2016-11-03 12:51:18 +01:00
Ad Schellevis
15a1895124 (filter) add keyword allowopts 2016-11-01 21:20:14 +01:00
Ad Schellevis
b68cd07418 (filter) add getInterfaceMapping() to Firewall->Plugin, fix setInterfaceMapping() 2016-11-01 21:12:18 +01:00
Ad Schellevis
237c652e4f (filter) move block bogons and private nets 2016-11-01 21:11:46 +01:00
Ad Schellevis
f0769ab18c (filter) use plain interface mapping in stead of legacy filter_generate_optcfg_array(), there's quite some magic in there which we want to cleanup eventually 2016-11-01 19:46:19 +01:00
Ad Schellevis
c060216286 (filter) move lockout rules 2016-11-01 13:28:07 +01:00
Ad Schellevis
3e9f734470 (filter) add maximum size option to parsePlain 2016-11-01 13:26:38 +01:00
Ad Schellevis
7bc5bf4d1f (filter) move some more static rules 2016-10-31 21:38:54 +01:00
Ad Schellevis
5319b8e53b (filter) move out some more static rules 2016-10-31 19:03:07 +01:00
Ad Schellevis
700e351477 (filter) reverse inet46 handling 2016-10-31 10:54:47 +01:00
Ad Schellevis
89c55e1b24 (filter) refactor inet46 to single rule and add some more tags 2016-10-31 10:21:58 +01:00
Ad Schellevis
b9c8e159d8 (filter) move "Default deny rules" to new method 2016-10-30 20:00:03 +01:00
Ad Schellevis
20e4dfa438 (filter) extend registerFilterRule() with state options 2016-10-30 19:59:03 +01:00
Franco Fichtner
8f194f4bb5 mvc: Macro 'base_dialog_header' is already defined on PHP 7.0 2016-10-30 18:53:42 +01:00
Franco Fichtner
745b186bc2 plist: fix previous 2016-10-30 15:04:42 +01:00
Ad Schellevis
fd12c6682a (filter) more refactoring, as discussed with @fichtner move core rules out of plugin scope 2016-10-30 12:34:11 +01:00
Franco Fichtner
2c2192d70d rc: explicitly use `-p' , it should be set but can't go wrong here
PR: https://github.com/opnsense/core/issues/1077
2016-10-29 10:19:26 +02:00
Franco Fichtner
a89858db9d firmware: improve GUI responses; closes #1009 2016-10-29 09:36:48 +02:00
Franco Fichtner
569bc3fdbb rc: tweak previous a little 2016-10-29 08:30:23 +02:00
Franco Fichtner
e6e85ce70c rc: finally deal with message of the day
Content follows, for now just use the sweet template Framework
to get this party started.

We're using "motd.in" so allow replacement during package builds.
2016-10-29 08:23:19 +02:00
Franco Fichtner
8d11de1be9 miniupnpd: forgot syntax for a second there 2016-10-29 00:59:06 +02:00
Franco Fichtner
89cd7224b0 plist: fix previous 2016-10-29 00:47:27 +02:00
Franco Fichtner
850cd7a5fa miniupnpd: merge inc files, minor tweaks on the code
Since we have pluggable anchors, this is ready to move to
plugins to shink down the base system a bit.
2016-10-29 00:43:48 +02:00
Franco Fichtner
d01b729630 inc: apply random style fixes 2016-10-29 00:08:00 +02:00
Ad Schellevis
3085e4d18f (plugins / firewall) first steps in moving static firewall rules to plugin registrations.
Te idea is simple, start parsing rules in a uniform way, so we're eventually able to display and alter all auto generated rules.
Because of the large set of legacy code rules, we're going to migrate step by step, leaving the current setup intact.
2016-10-28 20:14:29 +02:00
Ad Schellevis
0755bdac78 (filter.inc) move anchor, pre requirement for wrapping rule plugin 2016-10-28 20:00:22 +02:00
Franco Fichtner
477fba1122 src: switch template reload to new slash notation; #1238 2016-10-28 08:41:42 +02:00
Franco Fichtner
53f44c89c7 rc: split out netgraph modules into own loader chunk 2016-10-27 10:38:04 +02:00
Franco Fichtner
df2fbeb22e rc: make individual chunks a bit more apparent in loader.conf 2016-10-27 10:10:29 +02:00
Franco Fichtner
765b22f1be system: only append, less intrusive and last match wins 2016-10-27 10:05:17 +02:00
Franco Fichtner
7094a5cd3b rc: the trusty rc.opnsense couldn't cope with subdirs 2016-10-26 19:54:14 +02:00
Franco Fichtner
528866c5d0 proxy: rc.conf.d subdir for squid, only way to merge configs 2016-10-26 19:34:30 +02:00
Franco Fichtner
243681049f system: don't run async auth templates 2016-10-26 15:42:15 +02:00
Franco Fichtner
a4b9c0298b configd: small improvements loosely related to #1238
o Don't look for templates in manufacturer directory
o Allow to use "/" component separator, it's safe
o Hook up the "template list" command
2016-10-26 15:26:27 +02:00
Franco Fichtner
35122576f4 proxy: allow alt auth framework config file
We fall back to the local authentication if not found.

PR: https://github.com/opnsense/plugins/issues/43
2016-10-26 08:23:14 +02:00
Franco Fichtner
2d450939a0 system: consolidate previous
* system_console_configure() is really system_login_configure()+
* make a template for sudoers config setting
* move auth template generation to single spot
2016-10-26 07:17:58 +02:00
Ad Schellevis
cacfdd058d (filter) work in progress filter refactoring 2016-10-25 20:52:25 +02:00
Ad Schellevis
f88eabc00b (pam) switch to pam, with the option to disable our pam helper and switch back to unix mode... for https://github.com/opnsense/core/issues/998 2016-10-25 20:36:55 +02:00
Ad Schellevis
089a3f07d6 fix for https://github.com/opnsense/core/issues/1196 2016-10-25 19:51:39 +02:00
Franco Fichtner
6aac623b99 pkg: cross-build needs explicit CORE_ARCH 2016-10-25 08:34:38 +02:00
Franco Fichtner
8185e2007b pkg: exclude missing packages on armv6 2016-10-24 17:13:50 +02:00
Franco Fichtner
9a279ae5a6 pkg: fix plist 2016-10-24 17:13:39 +02:00