6567 Commits

Author SHA1 Message Date
Franco Fichtner
c687c9bb36 system: fix crash report in previous 2016-12-28 13:39:16 +01:00
Franco Fichtner
deda19dc61 system: tweak wording on previous 2016-12-28 13:32:09 +01:00
Franco Fichtner
0caeb312c0 pkg: fix plist 2016-12-28 13:22:22 +01:00
Franco Fichtner
1d694b2f29 pkg: for the moment "openvpn23" is the right package
FreeBSD added OpenVPN 2.4, but we're not ready yet.
2016-12-28 13:20:41 +01:00
Franco Fichtner
384b751515 scripts: fix line breaks in csv 2016-12-28 10:26:32 +01:00
Ad Schellevis
c726dc39cf (proxy) fix subnet computation using netaddr.IPNetwork, closes https://github.com/opnsense/core/issues/1309 2016-12-27 18:13:19 +01:00
Ad Schellevis
15657d8749 (configd) add netaddr.IPNetwork to template helpers, for https://github.com/opnsense/core/issues/1309 2016-12-27 18:10:57 +01:00
Ad Schellevis
99dac4ab7e (webconfigurator) optionally limit ciphers. closes https://github.com/opnsense/core/issues/1301 2016-12-27 17:23:01 +01:00
Ad Schellevis
5f7fa5900d (IDS) fix previous 2016-12-27 12:21:50 +01:00
Ad Schellevis
565fd72bba (ids) add support for inline configuration settings (subscription based url's for example), add basic auth support.
Example supported format:

<?xml version="1.0"?>
<ruleset>
    <location url="https://www.snort.org/rules/snortrules-snapshot-2990.tar.gz?oinkcode=%%snort.oinkcode%%" prefix="Snort"/>
    <files>
        <file description="blacklist" url="inline::rules/blacklist.rules">snort.blacklist.rules</file>
    </files>
    <properties>
        <property name="snort.oinkcode" default=""/>
    </properties>
</ruleset>

---
Registers the setting "snort.oinkcode" which is used to construct the download url.
This commit doesn't include definitions for new content, in case someone wants to create a definition file, it should be easy now :)
2016-12-27 12:08:54 +01:00
Franco Fichtner
cb051070a1 pkg: add release switch formerly handled by tools.git 2016-12-24 14:56:34 +01:00
Franco Fichtner
12882429d1 system: split up Portuguese for upcoming translations 2016-12-21 07:15:49 +01:00
Franco Fichtner
041681bae2 system: extend sudo usage for no password mode 2016-12-21 00:17:50 +01:00
Franco Fichtner
17117f5b9b configd: fix wildcard_pos usage 2016-12-21 00:13:45 +01:00
Franco Fichtner
e33a4ed298 firewall: remove comment that is now false 2016-12-20 22:42:04 +01:00
Franco Fichtner
31e16746fe firewall: how many times is this hardcoded? :) 2016-12-20 22:39:24 +01:00
Ad Schellevis
78af555666 (IDS) hook loading of general settings on tab events 2016-12-20 21:19:42 +01:00
Ad Schellevis
646f9838d0 (ids) move installable rules to separate tab, make room for additional settings 2016-12-20 20:08:27 +01:00
Franco Fichtner
ddca91c131 firewall: fix previous again 2016-12-20 15:17:40 +01:00
Franco Fichtner
d70e4b2652 firewall: glitch in previous 2016-12-20 15:06:46 +01:00
Franco Fichtner
7097b1d016 firewall: consolidate anti-lockout behaviour; closes #1304
Assume LAN unless we only have one interface and that is WAN.
If LAN is not there, no problem: the text will either show
WAN if it works or show LAN and do nothing.

We could argue that 1 interface that is not WAN or LAN is
possible and should receive anti-lockout too, but this would
change the previous behaviour too much and is not generally
possible from the GUI or console.
2016-12-20 14:23:51 +01:00
Ad Schellevis
6e260ef580 (mvc) fix mangled dropdown boxes on some inputs, reset all form_input_tr items to avoid further strangeness.. 2016-12-20 12:56:13 +01:00
Franco Fichtner
f8959e1a40 rc: oddities with vt(4), keep sc(4) for now 2016-12-20 08:21:38 +01:00
Franco Fichtner
6d46060214 Revert "system: strict serial mode, need to test this"
Don't need this, it was a comaptibility test.  The gained
flexibility from -D is far more important.

This reverts commit dfb094112e3297911ddbdfa478d3bdc129d22d22.
2016-12-20 08:00:11 +01:00
Franco Fichtner
7792d8ad7f auth: one more locking vs. no-password issue 2016-12-20 07:02:45 +01:00
Franco Fichtner
23cf4fe10f auth: when auth is integrated, don't write passwords
This finally repairs ssh key login.  :)
2016-12-19 23:14:23 +01:00
Ad Schellevis
da024c5dfe (ids) work in progress, extend metadata templates with user input (subscription codes, etc) 2016-12-19 21:49:30 +01:00
Ad Schellevis
7294202195 (ids) change download buffering 2016-12-19 21:48:04 +01:00
Ad Schellevis
d938708963 (resolver+forwarder) enhance port check, for https://github.com/opnsense/core/issues/1213 2016-12-19 19:55:22 +01:00
Ad Schellevis
4ebccaa233 (config) enable aesni in default config, closes https://github.com/opnsense/core/issues/1259 2016-12-19 19:41:36 +01:00
Franco Fichtner
4ac59b3485 auth: one bug down, but I think there's another 2016-12-19 18:59:21 +01:00
Ad Schellevis
74b0ed0002 (UIModelGrid) return all selected items for list types 2016-12-19 17:45:54 +01:00
Franco Fichtner
7f91fe62b1 src: back out previous, we're further securing PAM 2016-12-19 11:08:08 +01:00
Ad Schellevis
b5eda23e80 (volt, macro usage) revert macro change, it looks like this really was a bug in PHP7/Phalcon, looks solved now. closes https://github.com/opnsense/core/issues/1245 2016-12-19 11:05:41 +01:00
Franco Fichtner
c48cf61f4a rc: remove translations from console 2016-12-19 07:41:47 +01:00
Franco Fichtner
af1928de6e inc: remove unused translations in obsolete migration 2016-12-19 07:20:35 +01:00
Franco Fichtner
d3376f7f10 src: webConfigurator -> web GUI 2016-12-19 07:16:08 +01:00
Franco Fichtner
dfb094112e system: strict serial mode, need to test this 2016-12-18 23:24:17 +01:00
Franco Fichtner
a7f01e99d7 system: "web GUI" is less ambiguous 2016-12-18 23:15:30 +01:00
Franco Fichtner
8837b322a4 rc: reload GUI first to make sure it's executed 2016-12-18 23:12:45 +01:00
Franco Fichtner
24b73afc79 rc: missing require for previous 2016-12-18 23:01:52 +01:00
Franco Fichtner
b542ddf754 rc: switch web GUI reload for reload all, some cleanups 2016-12-18 22:58:07 +01:00
Franco Fichtner
81e205f75e rc: move restore to "initial" section 2016-12-18 22:52:58 +01:00
Franco Fichtner
ce36ff28c4 rc: missing requires for previous 2016-12-18 22:48:01 +01:00
Franco Fichtner
d147e4b8df rc: reload_all like a christmas tree 2016-12-18 22:44:45 +01:00
Franco Fichtner
61567c81c0 rc: light up configure_firmware output 2016-12-18 22:44:13 +01:00
Franco Fichtner
762837685a rc: chain local_sync_accounts() into system_login_configure() 2016-12-18 22:43:26 +01:00
Franco Fichtner
98ffa9fe3a pkg: fix plist 2016-12-18 22:18:43 +01:00
Ad Schellevis
68de8c0225 (pam) switch normal console to pam, because we lock accounts locally now, console login should be switched at the same time 2016-12-18 18:10:42 +01:00
Ad Schellevis
643d2eef83 (auth/installer) force unlocked account, so pam can use standard pam_unix.so 2016-12-18 17:57:22 +01:00