8452 Commits

Author SHA1 Message Date
Franco Fichtner
c51a6916c3 openvpn: tunnel network tweaks, only one needed #2266 2018-03-18 18:28:35 +00:00
Franco Fichtner
01b0534cc6 openvpn: default switch to "any", adds XXX4 variants #2266 2018-03-18 16:11:56 +01:00
Franco Fichtner
86989c2e5c openvpn: remove side-effects, preliminary cleanup for #2266 2018-03-18 10:47:16 +01:00
Franco Fichtner
d59fe96b10 mvc: move it back to where it was initially... 2018-03-18 10:29:36 +01:00
Franco Fichtner
b762fe38b2 mvc: try help without <small/> to align with static pages 2018-03-18 10:24:35 +01:00
Franco Fichtner
b5827a049b interfaces: tweak previous 2018-03-17 17:08:14 +01:00
Franco Fichtner
3b4341286d www: two more 2018-03-17 17:02:14 +01:00
Franco Fichtner
4e70b3acd1 interfaces: spotted error in help texts 2018-03-17 16:38:47 +01:00
Franco Fichtner
2caa7fae6a www: missing bits for previous; closes #2175 2018-03-17 16:19:14 +01:00
NOYB
9d96bdcbc7 Help For - Data For Attribute
Use original element (<div>/<small>) with "data-for" attribute.

The old jquery "for" attribute selectors can be removed once conversion to "data-for" attribute is complete (including plugins).

The old jquery selectors to remove once conversion is complete.
  opnsense_ui.js & head.inc
  $("*[for='" + $(this).attr('id') + "']")....
  $('[for*="help_for"]')....
2018-03-17 16:12:55 +01:00
Franco Fichtner
cb42f0e9d5 services: don't log detected IP all the time, style 2018-03-17 15:58:01 +01:00
Franco Fichtner
e1b303497e system: PTI/IBRS tunables; closes #2264 2018-03-17 15:00:41 +01:00
Ad Schellevis
8c44049298 optional prefix gdrive backups with host and domain name, for https://github.com/opnsense/core/issues/2262 2018-03-16 18:59:44 +01:00
Franco Fichtner
6961ad48ba pkg: fix plist 2018-03-16 09:47:00 +01:00
Ad Schellevis
4e979a9bd6 services, move core/system service registration to core.inc for clearity. as discussed with @fichtner 2018-03-16 09:39:42 +01:00
Franco Fichtner
08c830f936 system: last tweak for previous 2018-03-16 08:12:51 +00:00
Franco Fichtner
397d78df9e system: make $keep the default 2018-03-16 08:06:48 +00:00
Franco Fichtner
09f45fbdbf system: rewrite the default route handling
With this, there is consistency in setting the default route
and associated marker file.  Nothing is done before the decision
is final, so we may not end up with a missing route after an
attempt to reconfigure for something that doesn't work anyway.

DHCPv4 and PPP still do this manually, but we will have to route
them through the same logic instead of them manually handling their
routes.  6rd and 6to4 may have a similar issue as well.

While here, swap the system_routing_configure() arguments to
align with the way other configure functions present their
arguments (verbose print flag first).

Gateway monitoring and default switching improvement since 2016.
Push $keep into default handling, it may be useful in general to
avoid spurious switches.  It could also be a default probably.
2018-03-16 07:41:17 +00:00
Ad Schellevis
9ca61d8b3e add service action to sync users and groups for https://github.com/opnsense/core/issues/2151 2018-03-15 21:33:41 +01:00
Ad Schellevis
d4e9da8b72 add syslog to services/diagnostics 2018-03-15 21:16:29 +01:00
Franco Fichtner
b3fb3e1b1d system: found small issue, but...
ended up realising the function is totally whacky from top to
bottom.  Writing default file hints before doing lookups for
said IPs, writing empty fallbacks, missing logging info.

To be continued.
2018-03-14 22:47:47 +00:00
Franco Fichtner
c2c4a24618 system: apply loader tunables, style for apply box #2083 2018-03-14 09:31:30 +00:00
Ad Schellevis
f4313ce368 Revert "IDS, suricata.log isn't in binary format... see https://github.com/opnsense/plugins/issues/606"
This reverts commit dc1cd4da918880a7a9b6036b02911b65128e2d7c.
2018-03-13 18:07:50 +01:00
Ad Schellevis
dc1cd4da91 IDS, suricata.log isn't in binary format... see https://github.com/opnsense/plugins/issues/606 2018-03-13 17:49:30 +01:00
Ad Schellevis
e8846eaf0c openvpn, show last timestamp in openvpn_get_client_status, for https://github.com/opnsense/core/issues/2243 2018-03-13 14:58:40 +01:00
Ad Schellevis
7ff5ec2340 openvpn, parse all states to retrieve most relevant one and some minor cleanups. for https://github.com/opnsense/core/issues/2243 2018-03-13 14:43:01 +01:00
Franco Fichtner
fdf4eccfaa system: cosmetic tweaks for #2083 2018-03-12 20:51:04 +00:00
Franco Fichtner
68cfe2aaf8 system: render tunables in loader.conf; closes #2083 2018-03-12 20:31:12 +00:00
Franco Fichtner
ef451142db interfaces: always allow /127, /128 and /32 static IPs; closes #2213 2018-03-12 21:07:17 +01:00
Franco Fichtner
86aa45633a voucher: tweak simple character set; closes #2257 2018-03-12 18:47:27 +01:00
Ad Schellevis
6b677051d4 bridging, hide already assigned interfaces, closes https://github.com/opnsense/core/issues/2256 2018-03-12 18:45:47 +01:00
Ad Schellevis
7401b27bad mvc / Monit, ditch work-around, closes https://github.com/opnsense/core/issues/2255 2018-03-12 18:23:51 +01:00
Ad Schellevis
117eb47666 MVC, keep track of model that created a field so our model relationfield can reuse the same object for choosing it's options, for https://github.com/opnsense/core/issues/2255 2018-03-12 18:22:21 +01:00
Franco Fichtner
33b3dabab3 interfaces: kill is_jumbo_capable()
Introduced in 2005 to separate good VLAN-capable driver from
the bad ones.  We wonder how relevant this is nowadays.

Breaks at least Xen where the driver fails to pass the host's
VLAN capabilities.

Discussed with: @adschellevis
2018-03-12 17:21:21 +01:00
Franco Fichtner
d823cc7193 firewall: switch back to old NAT auto-outbound behaviour
Use the first address only, ignoring all VIPs.

Discussed with: @adschellevis

PR: https://forum.opnsense.org/index.php?topic=7438.0
2018-03-12 14:36:11 +01:00
Franco Fichtner
9cce0a02fe pkg: this makes more sense, need to push to FreeBSD ports 2018-03-12 11:40:31 +01:00
Franco Fichtner
9e054ed704 interface: init variable directly 2018-03-12 07:50:27 +00:00
marjohn56
a28b048597 interface: dhcp6c creation breakout 2018-03-12 07:42:27 +00:00
Franco Fichtner
9efc0bf123 interfaces: do not break line 2018-03-12 07:30:37 +00:00
Franco Fichtner
95807fac47 interfaces: emit prefix-interface for trackers in advanced DHCPv6
While here, clean up the config write a little bit.
2018-03-12 07:24:46 +00:00
Franco Fichtner
b38317b34f interfaces: more log output streamlining 2018-03-12 06:59:01 +00:00
Ad Schellevis
dc74006c9a implement password policies for local accounts. for https://github.com/opnsense/core/issues/2252
This change consists of two components:

1) enforcing the user to change his or her password every x days, when pwd_changed_at is not set or longer ago then specified only access to the password page is prohibited
2) enforce minimal length or complexity settings depending on selected choices
2018-03-11 18:24:23 +01:00
marjohn56
8fb70ac4b1 interfaces: baby steps for #2234
Improve logging, minor cleanups.
2018-03-11 15:13:43 +00:00
Franco Fichtner
60b3db278f interfaces: revert useless commits
This reverts commit e6dc3265fe76d00aaf250cc7bf5515c1e3d922d4.
This reverts commit e211d1ab2702be8df65e8d1cce1e4589ccd37f5a.
2018-03-11 14:36:16 +00:00
Franco Fichtner
1a22b8822a service: almost entirely migrate monit model 1.0.0 et al. 2018-03-11 11:08:14 +00:00
Franco Fichtner
79500101c6 services: import monit service
Some things to work on:
* post-install should be a migration
* move to system?
* remove old notifications
2018-03-11 11:07:51 +00:00
Franco Fichtner
7cc7a26e60 mvc: small cleanups 2018-03-11 11:07:21 +00:00
Franco Fichtner
b3e2fa36a3 system: logging tweaks
* Allow clearing configd log in clear all
* Neither configd nor lighttpd remote exists

These things will have to wait till syslog-ng is properly integrated.
2018-03-11 10:40:56 +01:00
Franco Fichtner
dd71f72b45 src: style fix 2018-03-11 00:13:02 +01:00
Franco Fichtner
eb7644e953 pkg: fix plist 2018-03-10 16:46:46 +01:00