lucaspalomodevelop/core
1
0
Fork 0
mirror of https://github.com/lucaspalomodevelop/core.git synced 2026-03-15 09:04:39 +00:00
Code Issues Packages Projects Releases Wiki Activity
9,182 Commits 1 Branch 0 Tags
Commit Graph

9182 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Ad Schellevis
c0d37accc5 NTPD/GPS, typo in SiRF selection 2018-07-17 14:42:13 +02:00
Ad Schellevis
1ddfad34c1 oops, ditch old return type 2018-07-17 09:31:39 +02:00
Ad Schellevis
939f53eff2 Firewall, exclude virtual ipv6 interfaces and change getInterfaceMapping() to generator type in the process 2018-07-17 09:23:20 +02:00
Franco Fichtner
2bf1200df8 firewall: cosmetic issue in bogons rule label 2018-07-17 09:18:17 +02:00
Ad Schellevis
46324ab7c7 Firewall, rework previous 2018-07-17 09:13:20 +02:00
Ad Schellevis
c0fcc2c38d Firewall, bogons & privates, add ipprotocol to allow _stf interfaces to choose, for https://github.com/opnsense/core/issues/2546 2018-07-17 08:58:00 +02:00
Franco Fichtner
50fb5bcb0c system: second part for #2535 2018-07-17 08:52:45 +02:00
Franco Fichtner
922c341974 firewall: copy description, and block priv/bogons #2546 2018-07-17 07:13:34 +02:00
Franco Fichtner
9747e1f328 firewall: like this better 2018-07-16 20:55:33 +02:00
Franco Fichtner
6227bb9220 firewall: actually use wan_stf, we need a hint from NtpRule #2546 2018-07-16 19:05:39 +02:00
Franco Fichtner
471149fac8 system: small cleanup for unused variables 2018-07-16 18:44:30 +02:00
Ad Schellevis
87c7d90857 Firewall/alias, fix is_alias() compatibility for https://github.com/opnsense/core/issues/1858 2018-07-16 18:29:05 +02:00
Ad Schellevis
14652b4fb1 openvpn export, move alias_expand() into single use-case, will be refactored later 2018-07-16 17:36:32 +02:00
Ad Schellevis
a02ad4cb00 Firewall, regression in forward reflection. 
It looks like parseRdrRules() yields too many rdr rules, since it adds all reflection interfaces including the ones which don't serve the protocol of the interface.
Logically we should check if the selected interface has an address configured for the protocol at hand, like we seemed to have done for the nat rule following when nat reflection is enabled.

There might be some edge cases where we don't automatically render rules now, in cases where the interface doesn't have an address configured, but there's always an option to add forward rules manually.
 2018-07-16 16:47:26 +02:00
Ad Schellevis
f12a931cac Firewall/reflection, while working on https://github.com/opnsense/core/issues/2546 it seems that reflection rules are generated on IPv4 for IPv6 only interfaces, we should check before yielding new records. 
ForwardRule likely has a similar issue
 2018-07-16 10:29:27 +02:00
Ad Schellevis
445ffd1f79 Firewall, IPv6/stf, generate _stf interface and link to parent while parsing rules, for https://github.com/opnsense/core/issues/2546 
The general idea here is to make it explicit that _stf generated another interface for IPv6 traffic, so we can use this knowledge when parsing rules easily.
 2018-07-16 10:27:06 +02:00
Ad Schellevis
ac35e91dee IDS, cleanup previously installed rules, which are known in the configuration but don't exist anymore in the definitions (uninstalled). Manually installed rules will remain untouched by this change. closes https://github.com/opnsense/core/pull/2448 2018-07-15 21:36:13 +02:00
Ad Schellevis
5d09ffdec1 phpdoc in previous 2018-07-15 20:51:43 +02:00
Ad Schellevis
3650787ae4 Firewall/alias, refactor alias usage when changing its name, for https://github.com/opnsense/core/issues/1858 2018-07-15 20:45:46 +02:00
Franco Fichtner
ea10cdb815 web proxy: guard resp/req ACL #2449 2018-07-15 20:31:47 +02:00
Franco Fichtner
d8c6c21f11 system: restart syslog if needed; closes #1130 2018-07-15 20:19:34 +02:00
Franco Fichtner
b36a3906e4 web proxy: allow to not use resp or req URL; closes #2449 2018-07-15 20:12:25 +02:00
Franco Fichtner
aa69410e65 unbound: update to latest root hints; closes #2147 
We call the file ".min." so that our whitespace sweep does not
clean up whitespaces to retain the original checksum so that
the file can always be verified.
 2018-07-15 20:05:49 +02:00
Franco Fichtner
6bbfcf4b02 system: allow USB-based serial ports; closes #2026 2018-07-15 19:47:43 +02:00
Franco Fichtner
086d372e7e firmware: hide upgrade banner when update is done; closes #2514 2018-07-15 14:17:20 +02:00
Franco Fichtner
4cc324c862 system: make netflow labels clearer; closes #2197 2018-07-15 14:08:41 +02:00
Franco Fichtner
46438e696b firmware: reboot hint only if download is possible; closes #2547 2018-07-15 14:00:27 +02:00
Franco Fichtner
a7f87559ca system: write version to make sure we can catch incompatibilities #2535 2018-07-15 12:42:19 +02:00
Franco Fichtner
e66358562a unbound: fix date in previous 2018-07-15 12:21:46 +02:00
Franco Fichtner
94b2df5517 system: enc/dec for backups is done in MD5... 
and breaks when using OpenSSL 1.1.

Also start the header block for new crypt settings.  It's a bit
unfortunate that the MVC backup factory doesn't handle the
headers... now we have to add them in any case to make all
interoperable.

PR: https://github.com/opnsense/core/issues/2535
 2018-07-15 12:20:17 +02:00
Fabian Franz BSc
15534011f0 Nextcloud password: allow to set a separeate pw and allow no encryption (#2545) 2018-07-15 11:27:04 +02:00
Franco Fichtner
fdc52df6d5 src: style sweep 2018-07-14 18:04:49 +00:00
Daniil Baturin
7c833ea3d6 Add a special case for /31 networks to openvpn_get_interface_ip() (another instance of #2529). 2018-07-14 19:50:59 +02:00
Ad Schellevis
15fa1eb0d4 plist 2018-07-14 17:13:26 +02:00
Ad Schellevis
9a5d641943 Firewall/alias, validate before removal for https://github.com/opnsense/core/issues/1858 
Raise an exception when the alias seems to be used and avoid removal, keep behaviour like it was in the legacy code for now.
Eventually it would be better to replace all alias usage for uuids, but that would be too tricky to implement at once.
 2018-07-14 17:06:50 +02:00
Ad Schellevis
8bc7c10d59 MVC, errorhandling, in some cases it's way easier to just raise an exception when an action may not be executed. 
If you raise an exception now, it's always called an "API exception".

This commit adds a "UserException" type which lets the developer set a title for the message and passes this to the endpoint.
 2018-07-14 16:46:40 +02:00
Franco Fichtner
91ed6de294 dhcp: remvoe excess whitespace 2018-07-14 14:13:13 +02:00
Franco Fichtner
063a425f27 firewall: IPv6 does not have network address restrictions; closes #2543 2018-07-14 10:49:19 +00:00
Franco Fichtner
e1b8871961 firewall: typo in previous 2018-07-14 12:03:11 +02:00
Franco Fichtner
80b9a81681 firewall: make NPTv6 aware of 6rd and 6to4; closes #2538 2018-07-14 10:00:29 +00:00
Franco Fichtner
3b8c5da4e2 rc: stf... stf everywhere 2018-07-14 11:32:43 +02:00
Franco Fichtner
cc2902e4dd interfaces: 6rd validation and avoid assignment #1501 2018-07-14 09:11:42 +00:00
Franco Fichtner
893e9cf0f4 dashboard: add a 6 columns option 
5 doesn't work because bootstrap works on layouts based
on 12, so we can only have 1, 2, 3, 4, 6, 12...
 2018-07-14 08:41:23 +00:00
Franco Fichtner
24f1d05c77 openvpn: p2p_tls is also used by client so treat all of it accordingly 
PR: https://forum.opnsense.org/index.php?topic=9133.0
 2018-07-12 11:45:27 +02:00
Franco Fichtner
69fef9cb9e openvpn: translate validated field names while at it #2536 2018-07-12 08:36:26 +02:00
Franco Fichtner
399d719ede openvpn: avoid accepting /32 "networks" where hosts are not allowed #2536 
192.168.1.1/32 is not accepted, but 192.168.1.0/32 was.
 2018-07-12 08:21:54 +02:00
Franco Fichtner
5a9d6773df firewall: whitespace alignments in new alias page 2018-07-12 08:04:00 +02:00
Ad Schellevis
aa215fcbdb Firewall/alias, ignore namelookup when no nameservers are configured 
https://forum.opnsense.org/index.php?topic=9103.0
 2018-07-12 07:03:09 +02:00
Franco Fichtner
a7846bdaba system: use priv-sep for remote backup 2018-07-11 14:24:34 +00:00
Franco Fichtner
9ca729b2c1 system: remote backup via cron 
PR: https://forum.opnsense.org/index.php?topic=5763.0
 2018-07-11 16:20:19 +02:00