9758 Commits

Author SHA1 Message Date
Franco Fichtner
cae5ec3f69 system: remove apinger, dpinger takes over 2018-11-10 23:42:17 +01:00
Franco Fichtner
06c413fa85 interfaces: small corrections in previous 2018-11-10 22:50:18 +01:00
Franco Fichtner
423871f50b interfaces: remove sole external use of find_interface_subnet()
The funny part being get_interface_subnetv6() already doing what
get_interface_subnet() now does by inheriting the find_interface_subnet()
code.
2018-11-10 21:50:26 +01:00
Franco Fichtner
d25e60b47b interfaces: unused, better get rid of these variants 2018-11-10 21:29:30 +01:00
Franco Fichtner
0aa424b762 interfaces: unify find_interface_*() functions 2018-11-10 21:15:34 +01:00
Ad Schellevis
ea4b494786 work in progress for https://github.com/opnsense/core/issues/2787
- add option : validate_server_cn
- send "auth-user-pass" in PlainOpenVPN when mode is server_user or server_tls_user
2018-11-09 18:16:34 +01:00
MichaelDeciso
4854625f6e Remove GeoIP config from Suricata IDS (#2890) 2018-11-09 15:39:51 +01:00
Franco Fichtner
a83e72acf1 intrusion detection: default syslog level seems to be Error, not Info
So do the sensible thing and use Notice which is what global logging
is currently using in the hopes to a align syslog with eve log.

Completely unsure if this helps though.  The docs don't describe this
and nobody else tinkering with suricata.yaml came up with a solution?

PR: https://forum.opnsense.org/index.php?topic=10140.0
2018-11-09 07:27:52 +01:00
Franco Fichtner
25e8f92932 firewall: typo 2018-11-08 23:46:27 +01:00
Franco Fichtner
b8858226ed firewall: take antilockout to the next level
One function to return interface and ports if that is allowed
and possible somehow.  Aligns logic across all components and
makes future tweaks super easy.
2018-11-08 23:31:36 +01:00
Franco Fichtner
c40b188e8a firewall: simplify this further 2018-11-08 23:11:03 +01:00
Franco Fichtner
ed4bf40bbd firewall: nicer to sort them 2018-11-08 23:00:35 +01:00
Franco Fichtner
10c9612817 firewall: consolidate anti-lockout interface test
Still strange that the firewall code does not care about
noantilockout setting?

PR: https://forum.opnsense.org/index.php?topic=10088.0
2018-11-08 22:54:49 +01:00
MichaelDeciso
461a64a711 README: Fix typo and punctuation (#2888) 2018-11-08 20:52:45 +01:00
Ad Schellevis
08bd6c7177 Firewall/alias, increase resolve() performance, see https://forum.opnsense.org/index.php?topic=10164.msg46639 2018-11-08 13:42:32 +01:00
Alexander Shursha
db94fb410a Fix checking empty string. (#2887) 2018-11-08 11:46:24 +01:00
Ad Schellevis
01f5e6d146 Firewall/alias, don't try to set days+hours when updatefreq is empty... 2018-11-08 11:26:39 +01:00
Ad Schellevis
eb42fac60a Firewall/alias, missed a spot in alias conversion, fix for https://github.com/opnsense/core/issues/2879 2018-11-07 11:26:59 +01:00
Franco Fichtner
09f3f3c933 system: prevent several creative ways to strip read-only privileges 2018-11-07 09:41:20 +01:00
Franco Fichtner
30d807db81 system: prevent related read-only user configuration manipulation 2018-11-07 08:56:35 +01:00
Franco Fichtner
ad59f68531 system: prevent restore of configuration of read-only user
Reported by:  brainrecursion
Submitted by: @adschellevis
2018-11-07 08:54:59 +01:00
Franco Fichtner
0b62f210b6 firewall: anti-lockout should ignore disabled and virtual
PR: https://forum.opnsense.org/index.php?action=post;topic=10088.0
2018-11-06 23:25:45 +01:00
opnsenseuser
aac620919d sidebar - change ".list-group-items:last-child" to "a:last-child"
@fichtner small correction changing ".list-group-items:last-child" to "a:last-child"
2018-11-06 20:16:20 +01:00
Ad Schellevis
b38a76a265 IDS/IPS, prevent duplicate download of same target filename, support overlays. for https://github.com/opnsense/core/issues/2885 2018-11-06 20:05:09 +01:00
Ad Schellevis
416b05afa6 IDS/IPS, use content-disposition, for https://github.com/opnsense/core/issues/2885 2018-11-06 20:04:05 +01:00
Ad Schellevis
167ba9cf88 missing filter reload for port alias types, closes https://github.com/opnsense/core/issues/2883 2018-11-06 08:30:48 +01:00
Franco Fichtner
adabd73f2a mvc: reformat 2018-11-06 04:29:01 +01:00
Franco Fichtner
266ff43db5 system: retain index for link #2870
Spotted by: @adschellevis
2018-11-05 21:31:26 +01:00
Franco Fichtner
8283fd3969 openvpn: style issue 2018-11-05 21:31:26 +01:00
Ad Schellevis
534c918a4e IDS/ruledownload, improve logging a bit. log http return code when download failed 2018-11-05 21:14:52 +01:00
Ad Schellevis
c9a9c283d4 some cleanups for filter rule associations https://github.com/opnsense/core/issues/2879 2018-11-05 16:07:14 +01:00
opnsenseuser
8d38d0c742 sidebar - last entry in a submenu does not close the superordinate submenu (fix)
@fichtner sidebar - last entry in a submenu does not close the superordinate submenu (fix)

now its done !!!!
2018-11-05 11:17:55 +01:00
Franco Fichtner
6aa9857a0c make: add vebose output to `package' target 2018-11-05 07:26:56 +01:00
opnsenseuser
42beaef3aa sidebar - fix for some problems with sticky sub-submenu
Includes cleanups via @fabianfrz
2018-11-04 18:11:01 +01:00
opnsenseuser
b46eaaee5d opnsense theme - sidebar - cut off modification fix
@fichtner opnsense theme - sidebar - cut off modification fix
2018-11-04 18:07:43 +01:00
Franco Fichtner
6a2137eda9 openvpn: more alignment here 2018-11-04 18:04:40 +01:00
Franco Fichtner
a41e739b1a openvpn: spacing 2018-11-04 18:02:08 +01:00
Franco Fichtner
1bd18ccf73 make: plist-check requires WRKDIR 2018-11-04 17:46:51 +01:00
Franco Fichtner
1e7296497f make: style now checks PHP and Python for build test 2018-11-04 16:52:48 +01:00
Ad Schellevis
7967c50d58 MVC/API, add isExternalClient() to base controller type to identify session auth and "other/external" auth types. When external authenticated, don't html escape output before delivery.
For inclusion in 19.1, closes https://github.com/opnsense/core/issues/2672
2018-11-04 16:19:22 +01:00
Franco Fichtner
fea6ef31f8 system: remove old use_mfs_tmpvar workaround
Leave [^_] in place as there used to be use_mfs_var_size
and use_mfs_tmp_size before we migrated to tmpfs.
2018-11-04 13:27:12 +01:00
Juan Manuel Carrillo Moreno
09de2c7ed7 proxy: Fix typo in description message. 2018-11-03 21:21:13 +01:00
Franco Fichtner
1bdbe5b5e4 system: more ldap-totp 2018-11-03 15:33:37 +01:00
Franco Fichtner
fc0fa67c85 system: more ldap-totp usability 2018-11-03 15:19:42 +01:00
Franco Fichtner
aa859b5061 system: small issues with previous 2018-11-03 15:08:08 +01:00
Franco Fichtner
a7a6f392a0 system: ldap-totp can import most likely 2018-11-03 15:05:22 +01:00
Franco Fichtner
436b0a7f02 system: sort user/group list, small tweaks; closes #2870 2018-11-03 14:59:37 +01:00
Franco Fichtner
fbe8ac7de9 mvc: reindent copyright block 2018-11-03 14:36:37 +01:00
Franco Fichtner
bf403ca01c system: whoopsie, opnsense stuff not for non-root shelling :) 2018-11-03 12:49:22 +01:00
Franco Fichtner
20e87d5db3 pkg: time to make package fail on plist error 2018-11-03 12:42:13 +01:00