11106 Commits

Author SHA1 Message Date
Ad Schellevis
c0fe5ceff4 IPv6 Router Advertisements, add advanced options, closes https://github.com/opnsense/core/issues/3366 2019-06-21 12:13:17 +02:00
Ad Schellevis
658e3d0092 Netflow, WAN|Egress interfaces should be in All / Listening interfaces list. for https://github.com/opnsense/core/issues/3547 2019-06-21 10:56:30 +02:00
Franco Fichtner
bc34ae18af reporting: small tweak on help label 2019-06-21 10:13:21 +02:00
Ad Schellevis
95e70f37e9 Netflow, minor addendum https://github.com/opnsense/core/issues/2197, in order for netflow to listen, all interfaces should be accounted for. 2019-06-21 09:41:42 +02:00
Ad Schellevis
58c3e6ccd9 Auth/ldap, use authentication factory for user import, might fix https://github.com/opnsense/core/issues/3445 2019-06-20 18:33:38 +02:00
Ad Schellevis
5ff6dd228c style fix, missing brackets 2019-06-20 18:18:01 +02:00
Ad Schellevis
b877610296 HASync- add dashboard widgets, closes https://github.com/opnsense/core/issues/3482 2019-06-20 17:39:32 +02:00
Ad Schellevis
9dcacab209 services_dhcp.php, ddnsdomainprimary validation (looks like a typo) 2019-06-20 17:22:37 +02:00
Ad Schellevis
9bf07564b7 services_dhcpv6.php, validation issue in ddnsdomainprimary https://github.com/opnsense/core/issues/3546 2019-06-20 17:17:07 +02:00
Ad Schellevis
c5c6bb1601 services_dhcpv6.php, fix typo in validation message , ref https://github.com/opnsense/core/issues/3546 2019-06-20 17:14:24 +02:00
Ad Schellevis
ebcd30c971 auth.inc local_sync_accounts(), missing -g in groupdel. for https://github.com/opnsense/core/issues/3519 2019-06-20 16:35:30 +02:00
Ad Schellevis
cdaa275fff Proxy, add support tab with reset button, which clears all stored cache data and restarts squid. Since a squid stop can take long and consistency isn't very important on files bound to be deleted, its faster to killall -9. closes https://github.com/opnsense/core/issues/3545 2019-06-20 13:03:48 +02:00
Franco Fichtner
b62b34fe64 interfaces: fix "OR hostname" validation message after latest change
Some style updates while here.
2019-06-19 08:08:28 +02:00
Alexander Shursha
d4cf429ba6 Only IP-address allowed in PPTP gateway. (#3499) 2019-06-18 19:07:20 +01:00
Robin Schneider
f2769fe099 Sort interface groups in GUI to match firewall rule order (#3537)
This now makes it easy and predictable to add interfaces to multiple
groups.

Before this change, the interfaces_groups GUI was sorted by the
order that interface groups were added. However, this was not the order
that the actual pf rules would then be generated making it unpredictable
when adding interfaces to multiple groups.

The filter_rules_sort function already took care of the actual pf rule
order.

I also took care of only marking the filter subsystem dirty when needed.
I tested this patch quite a bit on 19.1.8. When updating, users only
need to make one change to the interface groups to have them sorted in
the GUI.

I hope I did not miss anything because this patch is against master. In
it’s current state, the patch can be directly applied to 19.1.x or
master.
2019-06-18 16:46:04 +01:00
Ad Schellevis
464495b58e Proxy, access log over syslog. This is at the moment the best I can think of, since we can't combine clog and plain log it's better to make the choices explicit in our code.
Access log over syslog will write to /var/log/squid.log, where the normal plain log would write to /var/log/squid/access.log

For https://github.com/opnsense/core/issues/3454
2019-06-18 11:47:06 +02:00
Ad Schellevis
1a86b31f76 Syslog-NG, sort programs by name in destination field 2019-06-18 10:54:00 +02:00
Ad Schellevis
18be8214d9 MVC, JsonKeyValueStoreField type, add SortByValue option to influence sorting order. 2019-06-18 10:48:36 +02:00
Franco Fichtner
dbdfc7217a pkg: fix plist 2019-06-17 20:31:31 +02:00
Ad Schellevis
b62de24aea IDPS, duplicate eve logging section when syslog_eve is checked to support eve logging over syslog. Requires current syslog-ng work in master to be functional. closes https://github.com/opnsense/core/issues/3401 2019-06-17 20:09:06 +02:00
Ad Schellevis
25df4f28ba
Syslog-NG destination setup (#3539)
Syslog-NG add user customizable target destinations using our standard model grid.

* registers on all source feeds (s_all)
* adds udp(4|6), tcp(4|6) transport options.
* use persist-name() to avoid collisions
* basic filters (program, level, facility)
* statistics grid for debugging and traceability
2019-06-17 16:56:45 +01:00
Ad Schellevis
7770075f09 Syslog-NG, service reload not funcitonal, use syslog-ng-ctl instead (or restart when valid pid not found) 2019-06-17 14:06:36 +02:00
Ad Schellevis
dd01423e91 Syslog-NG, restart both syslog daemons on service restarts to avoid communication issues. Since both services (syslog-ng, syslog) have their own status its good to show them separately, for proper functionality they should however be treated as one.
Add a stop action to prevent service stop from only stopping the service named "syslog".
2019-06-17 13:36:17 +02:00
Ad Schellevis
6b92b81702 Trust, import csr. move csr_info and csr_info_json commands to post to prevent sending large / possible illegal blobs of data in uri. closes https://github.com/opnsense/core/issues/3538 2019-06-17 08:53:05 +02:00
Ad Schellevis
5722394b18 Syslog, add "configctl syslog list applications" action to output registered applications in json format 2019-06-14 17:47:57 +02:00
Ad Schellevis
0e8d1fb39e Alias. import alias reference issue, we need to make sure our newly imported items are considered valid options as well. closes https://github.com/opnsense/core/issues/3522 2019-06-14 17:21:50 +02:00
Ad Schellevis
4e1112edc9 IDSP, alert screen action sometimes not visible due to selectpicker init. https://github.com/opnsense/core/issues/1976 ? 2019-06-13 17:36:45 +02:00
Franco Fichtner
3aa89a9bc2 CONTRIBUTING: small updates and label explanations 2019-06-13 16:59:11 +02:00
Ad Schellevis
b0eeccb784 syslog, work in progress. add helper function to hook in configd to list registered applications so we can easily use these values in our mvc forms. 2019-06-10 20:28:54 +02:00
Ad Schellevis
274ec3556e syslog, move core syslog facilities (applications in our case) to core plugin 2019-06-10 20:26:04 +02:00
Ad Schellevis
3b2c9aecdc syslog, remove remote keywords in _syslog() plugins, moved to syslog-ng template 2019-06-10 20:23:48 +02:00
Ad Schellevis
f32816d53a IDPS, show sid in alert view. closes https://github.com/opnsense/core/issues/3527 2019-06-10 14:46:09 +02:00
Franco Fichtner
85a7fcdf7c system: this isn't entirely true, but helps differentiate vs. "local syslog" 2019-06-09 18:49:05 +02:00
Ad Schellevis
3c13d7a2b2 plist 2019-06-09 17:31:24 +02:00
Ad Schellevis
41fcaf2436
move to syslog-ng (#3524)
Integrate syslog-ng into core system without removing current circular log functionality, the basic idea here is to keep syslogd to write circular log files which will turn into a consumer of syslog-ng messages. 

New sources, which will register automatically in s_all, are defined in /usr/local/opnsense/service/templates/OPNsense/Syslog/sources/. Plugins can write additional sources here (such as log sockets).

Legacy remote log targets are collected in syslog-ng-legacy-remote.conf, which should mimic the previous syslogd targets.
2019-06-09 16:28:50 +01:00
Ad Schellevis
d57aa5e4c8 IDPS, minor usability improvements.
* in download tab add enable selected with filter options
* when using bulk actions, obey filter results (filter -> select all -> action, should apply on visible items)
* move button actions to tab events, preventing accidental event removal
2019-06-07 18:18:28 +02:00
Ad Schellevis
1b09b47ff1 IDPS, Allow changing Suricata rule actions in bulk and some minor cleanups. closes https://github.com/opnsense/core/issues/3514 2019-06-07 16:20:09 +02:00
Ad Schellevis
34e942ad16 firewall_rules_edit.php, gateway validation issue (trying to validate groups). closes https://github.com/opnsense/core/issues/3511 2019-06-07 14:54:52 +02:00
Ad Schellevis
3af744e03d IDPS, when toggling rules, keep current action. closes https://github.com/opnsense/core/issues/3513 2019-06-07 14:42:31 +02:00
Franco Fichtner
e9f2862bd7 interfaces: background configd reconfigure; closes #2267 2019-06-07 11:15:43 +02:00
Franco Fichtner
55641d204d interfaces: actually just create the OpenVPN if needed 2019-06-05 11:45:21 +02:00
Franco Fichtner
2de53c3fa6 openvpn: guard doesn't make a lot of sense here 2019-06-05 11:11:13 +02:00
Franco Fichtner
ea04d268ec firmware: don't trust pkg now or in the future with `-q' 2019-06-05 08:33:20 +02:00
Franco Fichtner
f55ad273b7 pkg: move to Python 3.7 2019-06-03 07:59:55 +02:00
Ad Schellevis
459da410eb update copyright in previous while here. 2019-06-02 10:51:50 +02:00
Ad Schellevis
40bd0c5dc8 dhcpd leases watcher, file rotation issue. closes https://github.com/opnsense/core/issues/3478 2019-06-02 10:43:37 +02:00
Ad Schellevis
06acf28ae5 IDPS, missing header id in alerts tab resulting in wrong count for bootgrid, closes https://github.com/opnsense/core/pull/3367 2019-06-01 09:41:52 +02:00
Ad Schellevis
a79bb94cb7 dhcpdv4, better explain the relation between the gateway setting and the configured gateways. This question popups now and then. closes https://github.com/opnsense/core/issues/3509 2019-05-31 15:05:48 +02:00
Ad Schellevis
a714c22060 configd/templates add support for helpers.glob() to enable template traversal, which is practical when trying to merge several files into the same output.
required for https://github.com/opnsense/core/issues/3505
2019-05-31 14:41:59 +02:00
Ad Schellevis
a21baa1d85 openvpn server, add live-search to some longer lists. 2019-05-28 12:08:24 +02:00