10453 Commits

Author SHA1 Message Date
Ad Schellevis
be93dfcabb Merge branch 'reorder-log-settings' of https://github.com/MichaelDeciso/core into MichaelDeciso-reorder-log-settings 2019-03-01 15:06:13 +01:00
Ad Schellevis
3d07a9eb77 minor cleanups, closes https://github.com/opnsense/core/pull/3112 2019-03-01 14:55:36 +01:00
Ad Schellevis
5fae3bcb7c shaper, fix https://github.com/opnsense/core/pull/3213 template 2019-03-01 14:22:09 +01:00
Ad Schellevis
86a5013c15 Merge branch 'fbrendel-monit_validations' 2019-03-01 10:45:57 +01:00
Ad Schellevis
5bde17012d Monit, minor cleanups and fixes for https://github.com/opnsense/core/pull/3155 2019-03-01 10:45:23 +01:00
Ad Schellevis
1849a3b61d Merge branch 'monit_validations' of https://github.com/fbrendel/core into fbrendel-monit_validations 2019-03-01 10:25:55 +01:00
Franco Fichtner
81438578db unbound: add alias support for #3260
Break the rules of the Dnsmasq implementation while at it:

An alias can consist of a host and/or domain and/or description.
At least a host name or a domain need to be set, the rest will be
taken from the original entry.

Missing GUI parts in the override section...
2019-03-01 08:55:50 +01:00
Ad Schellevis
2babeae771 firewall: logging for NAT rules, within the possibilities of what pf has to offer.... closes https://github.com/opnsense/core/issues/3033 2019-02-28 21:26:36 +01:00
Ad Schellevis
b214b89e20 HAsync, prevent sloppy apply behaviour in various places due to configuring the backup device and point the user to our status page.
- since the apply never has been complete, the current situations either results in user not knowning where their waiting for  (an openvpn client for example) or users assuming all is in sync (which isn't the case)
- move restart filter action to existing sync page

closes https://github.com/opnsense/core/issues/3165
2019-02-28 18:32:17 +01:00
Ad Schellevis
b82e54fb2f whitespace 2019-02-28 16:38:54 +01:00
Ad Schellevis
e7d04751c9 OpenVPN server, validate certificate type, closes https://github.com/opnsense/core/issues/3045 2019-02-28 16:36:40 +01:00
Ad Schellevis
6fe924c1f7 revert 7504bd00a2 since phalcon-3.4.2 fixes the earlier scope issues, closes https://github.com/opnsense/core/issues/3026 2019-02-28 16:17:44 +01:00
Ad Schellevis
21f1580348 IPsec, switch to PAM, closes https://github.com/opnsense/core/issues/3265 2019-02-28 15:32:03 +01:00
Michael Steenbeek
15ac90d94d Remote logging: move 'enable' to the top 2019-02-28 10:43:31 +01:00
Ad Schellevis
02fd4f4c7f Web proxy, switch to PAM, closes https://github.com/opnsense/core/issues/3261 2019-02-28 09:57:54 +01:00
Franco Fichtner
38919ec895 firmware: be more careful about parsing; closes #3254 2019-02-27 19:13:14 +01:00
Franco Fichtner
65a60c9d34 system: rename binary, rename service 2019-02-27 17:30:08 +01:00
Franco Fichtner
bece7dc2df pkg: fix plist 2019-02-27 13:13:55 +01:00
Ad Schellevis
e4285e97fb Revert "System->Settings->Miscellaneous : add "Reset usb on boot" option"
This reverts commit 6dd8bbe14b1068d462654be46102a6f7f239c3c1.
2019-02-27 12:21:14 +01:00
Ad Schellevis
f5dade45cc Revert ""Reset usb on boot" add sleep, since we can't seem to detect the initial usb detection is still active...."
This reverts commit a0fb31c652386ef6d4f161950bf8a79c87035624.
2019-02-27 12:21:10 +01:00
Ad Schellevis
464996af84 Authentication framework, catch login, su, sudo pam services
- add aliases() to IService, so one service can be used for multiple pam services, eases implementation (pam has an include statement for this purpose)
- move logging to AuthenticationFactory->authenticate() and communicate more about choices taken, eases debugging
- remove OpnsenseAuthTest, Sshd, implemented by System

for https://github.com/opnsense/core/issues/3242
2019-02-27 11:20:29 +01:00
Ad Schellevis
d9eb9cb29a ACL::hasPrivilege() overlapping variable, related to https://github.com/opnsense/core/issues/3242 2019-02-27 10:41:37 +01:00
Ad Schellevis
538b74ca63 escaping, b24e7acf3f (commitcomment-32490347) 2019-02-27 09:00:48 +01:00
Franco Fichtner
69ff2fa8ad system: move opnsense-auth to libexec
... but keep a symlink for backwards compatibility
2019-02-27 01:26:15 +01:00
Franco Fichtner
64e74ce75b mvc: more close / cancel, translation 2019-02-27 00:53:05 +01:00
Franco Fichtner
66e6efccd8 firewall: alias close button is really cancel 2019-02-27 00:47:15 +01:00
Franco Fichtner
8724ba878d mvc: simplify save button label 2019-02-27 00:44:40 +01:00
Franco Fichtner
42e901ce6d src: another style sweep 2019-02-26 23:57:29 +01:00
Franco Fichtner
46de0646c9 src: style fix 2019-02-26 23:53:14 +01:00
Ad Schellevis
a953a756d9 Merge branch 'mimugmail-master' 2019-02-26 20:58:47 +01:00
Ad Schellevis
ae38c01d5d Merge branch 'master' of https://github.com/mimugmail/core into mimugmail-master 2019-02-26 20:55:19 +01:00
Ad Schellevis
80d94767a7 firewall_schedule_edit.php, escape issues 2019-02-26 20:16:00 +01:00
Ad Schellevis
b24e7acf3f legacy_html_escape_form_data() add ENT_QUOTES to avoid certain escaping issues 2019-02-26 19:58:42 +01:00
Ad Schellevis
30931e5d6d Gateways/edit, escape issue which doesn't seem to add any value anymore 2019-02-26 19:46:54 +01:00
Ad Schellevis
560a6cb79e MVC/field types, add sorting for list types. closes https://github.com/opnsense/core/issues/3251
We should refactor some code later, but there's no rush. issue in https://github.com/opnsense/core/issues/3252
2019-02-26 11:26:05 +01:00
Ad Schellevis
8170be76e6 squid + pam, for https://github.com/opnsense/core/issues/3242 2019-02-25 20:44:34 +01:00
Franco Fichtner
ef17620814 pkg: fix plist 2019-02-25 20:38:28 +01:00
Ad Schellevis
a0fb31c652 "Reset usb on boot" add sleep, since we can't seem to detect the initial usb detection is still active....
Sample errors while booting:
--------------------------------------------------------------------------------
usbd_setup_device_desc: getting device descriptor at addr X failed, USB_ERR_IOERROR
usbd_req_re_enumerate: addr=X, set address failed! (USB_ERR_IOERROR, ignored)
2019-02-25 18:38:53 +01:00
Ad Schellevis
6dd8bbe14b System->Settings->Miscellaneous : add "Reset usb on boot" option
While testing 4g modems, it seems that initial device detection isn't flawless leading to USB_ERR_IOERROR failures and non functional modems.
Most likely cause of these issues seems to be that some devices need a bit of time between powering the bus and performing registration.

This option adds an early boot script, which optionally performs a usbconfig reset on boot.
2019-02-25 16:49:25 +01:00
Ad Schellevis
dc7db7084b configd, python 2 --> 3, simplify search for program path 2019-02-25 10:14:14 +01:00
Franco Fichtner
5335692fb8 pkg: fix plist 2019-02-25 10:08:17 +01:00
Ad Schellevis
22261d6614 configd, python 2 --> 3, type comparison issue (bytes, str) disabling our previous end of line fix 2019-02-25 10:05:19 +01:00
Ad Schellevis
ddca8d4350 web proxy, move pam to template 2019-02-25 09:55:41 +01:00
Franco Fichtner
7a6ccaf029 web proxy: simplify to avoid confusion 2019-02-25 08:41:58 +01:00
Franco Fichtner
8f9a89e643 interfaces: fix permission 2019-02-25 08:28:06 +01:00
Franco Fichtner
75c3100ba7 interfaces: move mpd.script to scripts dir
mpd5 is started with -d /var/etc so it expects mpd.script to be there.
Some small simplifications along the way.
2019-02-25 08:23:50 +01:00
Franco Fichtner
cfc95122f2 interfaces: move ppp-related scripts to proper location
sbin/ is for console-bound binaries.
2019-02-25 08:23:50 +01:00
Franco Fichtner
38be942639 firmware: move duty to return the correct name/id to opnsense-version
To be fixed there eventually without a stale note attached.
2019-02-25 08:16:21 +01:00
Franco Fichtner
63ed46dcea system: small cleanups in session file handling 2019-02-25 07:06:05 +01:00
Franco Fichtner
96683647f5 openvpn: try to "solve" get_failover_interface() issues
This seems to be a cosmetic cleanup.  get_failover_interface()
is used incorrectly but then merely seems to be used to look
up IPv4 connectivity to make a "smart" decision about resync
duties.

A few annoying and disabled line removals while here.
2019-02-25 05:42:21 +01:00