9639 Commits

Author SHA1 Message Date
Franco Fichtner
be0cdeb690 rc: improvements in FreeBSD startup scripting; closes #2569
* Use rcorder to correctly order the startup sequence, which
  will avoid further workarounds in plugins.
* Defer the execution of /etc/rc.d/ipfw due to bug #2569,
  while also removing the previous non-functional workaround.
2018-10-22 08:48:36 +00:00
Franco Fichtner
389b9d4839 firmware: use named arguments in check script 2018-10-22 09:06:03 +02:00
Franco Fichtner
d6405e9472 interfaces: simplify for #2822 2018-10-21 17:37:24 +02:00
Franco Fichtner
fc3ec19877 interfaces: try not to leak the wrong DNS servers to clients #2822 2018-10-21 17:25:50 +02:00
Franco Fichtner
020454f32e system: syslog-ng version changes 2018-10-19 09:56:36 +00:00
Franco Fichtner
8f6c2bc881 src: whitespace and style sweep 2018-10-19 07:03:39 +00:00
zvs44
c73c4c5f96 Added a connect action in order to allow a user through the portal without actual authentication (#2823) 2018-10-19 08:58:14 +02:00
Ad Schellevis
1ddbb3bdbb Auth/LDAP, always add user DN to getLastAuthProperties() and optionally extend with properties available for the user, which might help ease debugging 2018-10-18 08:18:51 +02:00
Ad Schellevis
91fac36390 don't move lines before coffee.... 2018-10-18 08:12:57 +02:00
Ad Schellevis
7a675d9b85 Revert "final tweak on config.xml issue"
This reverts commit 53c92f52f28e476ebb4a9594dc4f3b861a56dc1b.
2018-10-18 08:10:36 +02:00
Ad Schellevis
53c92f52f2 final tweak on config.xml issue 2018-10-18 08:04:05 +02:00
Ad Schellevis
e5b4f4ea78 rework previous 2018-10-17 22:56:49 +02:00
Ad Schellevis
236ce426a2 Config.php, fix https://github.com/opnsense/core/commit/2d360a391b
when isArraySequential() input is empty or a single item using key "0", return true to mimic the privious behaviour
2018-10-17 22:48:59 +02:00
Franco Fichtner
2d5d392bc2 unbound: set up a full chroot including local log socket #2791 2018-10-17 17:23:45 +00:00
Ad Schellevis
e720c570d9 on link down, don't try to remove carp addresses, for https://github.com/opnsense/core/issues/2780 2018-10-17 18:53:39 +02:00
Franco Fichtner
e99ae7ad17 ipsec: bring back service widget lost via 504c947bb7e9 in 2016
PR: https://github.com/opnsense/docs/pull/54
2018-10-16 22:08:58 +02:00
Ad Schellevis
4012d98de2 OpenVPN export, work in progress for https://github.com/opnsense/core/issues/2787
* add ui logic for certificate selection
* add local_port
* extend model, which should be used to remember the previous selection and conveniently adds form validation features
* add validatePresetsAction() and storePresetsAction() which can be used to store and validate presets, used in downloadAction() action to persist choices
* gather needed data to generate client config in downloadAction(), todo: add certificate content
2018-10-16 20:44:34 +02:00
Franco Fichtner
bbbdef2b51 pkg: new stuff! 2018-10-15 18:29:12 +02:00
Ad Schellevis
ba645c25a6 OpenVPN export, work in progress for https://github.com/opnsense/core/issues/2787
* Add factory class to request export template types
* Add some test code to show/hide options depending on supported functions
* Use our normal form type to construct the UI
* Use stored ip/hostname when available or determine target based on ip address, the previous hostname resolution type will be replaced.
* List configured templates using /api/openvpn/export/templates/
2018-10-15 18:22:13 +02:00
Ad Schellevis
9f675d4078 mvc/forms, accept style keyword on all input types, needed when working on https://github.com/opnsense/core/issues/2787 2018-10-15 17:57:27 +02:00
Franco Fichtner
63283145ba pkg: fix plist 2018-10-15 17:07:20 +02:00
Ad Schellevis
a3cb1a0c59 system: add configd call to return json structured interface data using legacy_interfaces_details(), while working on https://github.com/opnsense/core/issues/2787 missed something to return configured addresses.
No need to duplicate legacy_interfaces_details.

adds:
```
configctl interface list ifconfig
```
2018-10-15 13:02:50 +02:00
Franco Fichtner
51071f88de firmware: ignore kernel/base when argument was given 2018-10-15 08:14:07 +02:00
Franco Fichtner
b4969b49ca firmware: refactor mtree tests slightly 2018-10-14 19:20:27 +02:00
Franco Fichtner
b7d7d16622 firmware: improve mtree handling further 2018-10-14 17:14:10 +02:00
Fabian Franz BSc
67c679299f www/squid: fix pac template (#2806) 2018-10-14 16:35:09 +02:00
Ad Schellevis
9aeb91cced Restore area - line break is missing, closes https://github.com/opnsense/core/pull/2813 2018-10-14 12:19:59 +02:00
Ad Schellevis
54f4ec89bb OpenVPN linkup/down scripts, add IPv6 + ifconfig_local ipv4 route, for https://github.com/opnsense/core/issues/2799 2018-10-14 12:11:53 +02:00
Franco Fichtner
724f41dadb Revert "border between <a>´s are missing"
This reverts commit d60b154b0ccd25aafd861b57e4898227b03da286.
The normal theme menu does not use separators so the sidebar
shouldn't use them as well.  Noticed this morning with a fresh
pot of coffee.
2018-10-14 12:10:05 +02:00
Franco Fichtner
62f9073b8d firmware: small tweaks for future flexibility
Most of this will only be relevant for 19.1 where we shall have
an "enforcement" of mtree files through the sets so that this
check can audit our whole system for issues... :)
2018-10-14 12:02:58 +02:00
Franco Fichtner
e65fef947d firmware: rename security audit script for clarity 2018-10-14 11:57:18 +02:00
Franco Fichtner
e7bd9d3a74 firmware: wrong audit ;) 2018-10-14 11:46:17 +02:00
Franco Fichtner
ffe4910513 firmware: first part of mtree verification
PR: https://github.com/opnsense/update/issues/37
2018-10-14 11:39:36 +02:00
Ad Schellevis
58eaa62599 OpenVPN linkup, add remote address as route when set, for https://github.com/opnsense/core/issues/2799 2018-10-13 21:15:36 +02:00
Ad Schellevis
fe21186e05 Firewall/live log, replace color styles with classes, for https://github.com/opnsense/plugins/issues/912 2018-10-13 16:50:11 +02:00
Ad Schellevis
f2b30558ac IDS/IPS, abuse.ch fingerprint ruleset for suricata 4.1.x using tls_cert_fingerprint keyword for better performance.
keep on master while still on suricata 4.0.x
2018-10-13 11:15:56 +02:00
opnsenseuser
d60b154b0c border between <a>´s are missing
I noticed that the separation of the individual <a> links is missing. Now it is up to you to say if we should install it again or not. if you do not want it please just delete this pr. have added two screenshots as a comparison. Thank you, best regards, René
2018-10-13 09:09:25 +02:00
Ad Schellevis
dcbd0366a1 Revert "IDS, replace tls.fingerprint with tls_fingerprint for better performance in custom rules"
This reverts commit a00e646ca2899a078db6c332a582ecfeffa54e16.
2018-10-12 22:18:53 +02:00
MichaelDeciso
f30c54420d Use single guillemets for previous/next page (#2802)
Currently, pagination uses double guillemets for first/last page and lower than/greater than signs for previous next (like so: `« < 1 2 3 > »`). Change this to use single guillemets, for visual consistency (like so: `« ‹ 1 2 3 › »`).
2018-10-11 09:28:44 +02:00
Franco Fichtner
e8c38e6710 ui: cleanups in previous 2018-10-11 09:06:50 +02:00
René
482492b8b1 sidebar optimization (#2784) 2018-10-11 09:03:26 +02:00
Ad Schellevis
82cc7171f0 Merge branch 'mimugmail-pie' 2018-10-11 08:55:31 +02:00
Ad Schellevis
bf34881348 replace validation message for https://github.com/opnsense/core/pull/2794 2018-10-11 08:54:56 +02:00
Franco Fichtner
4389fdad77 unbound: fix a lie, remove bold markup while at it; closes #2805 2018-10-11 08:54:36 +02:00
Ad Schellevis
7b1e838109 Merge branch 'pie' of https://github.com/mimugmail/core into mimugmail-pie 2018-10-11 08:36:39 +02:00
Ad Schellevis
239e89fd5f missed a spot in https://github.com/opnsense/core/issues/2670 leading to basemodel to being able to find iterateItems(), previous functionality used a specialized property which was passed using __get() 2018-10-11 08:28:53 +02:00
Michael
d1bbe29c6a
fix contraint msg and indents 2018-10-11 08:19:32 +02:00
opnsenseuser
b27a62b7f5 ui: sidebar shadow fix; closes #2801
shadow fix for div.collapse.in > div.collapse.in
2018-10-10 22:24:58 +02:00
Ad Schellevis
06ad789c29 OpenVPN client export, add list accounts (certificates) and associated users endpoint for https://github.com/opnsense/core/issues/2787
The legacy code populated a list of users and certificates, where the user only seems to be used to prefix some content and filter on server type, it seems more obvious to just export related certs for the requested server and show which users it connects to.
2018-10-10 18:43:13 +02:00
Ad Schellevis
3a5874309e Firewall, live log. Don't cleanup visible records when limit isn't reached. Without this fix it's difficult to keep track on logs which change often. 2018-10-10 11:53:03 +02:00