13755 Commits

Author SHA1 Message Date
Franco Fichtner
cd3758682c system: the all group disappeared in 2015 via a66c7889c7f
This code wasn't doing anything.
2022-02-22 12:52:01 +01:00
Franco Fichtner
dd4512aa3e system: support qat and multiple selection #5559 2022-02-22 09:14:22 +01:00
Franco Fichtner
db686a857b system: aesni is now a kernel-builtin #5559
Remove modules that are no longer available.
2022-02-22 08:47:09 +01:00
Franco Fichtner
747562d3da make: update parallel-lint to 1.3.2 2022-02-22 08:31:29 +01:00
kulikov-a
4b5a074401
loggin - limit rowCount (#5589) 2022-02-21 19:36:14 +01:00
Franco Fichtner
f64dfb8976 firewall: only ever store nobind for ipalias/carp; closes #5585 2022-02-21 12:21:18 +01:00
Franco Fichtner
5bb73b120b system: no longer default to hw.uart.console use
We have a patch now in src.git that can du EFI MMIO serial detection.
2022-02-21 09:46:30 +01:00
Ad Schellevis
92352ec4fa Reporting: Traffic - use async resolver to reverse lookup addresses. closes https://github.com/opnsense/core/issues/5536 2022-02-20 20:14:46 +01:00
Ad Schellevis
171fd93167 Firewall / Aliases - minor cleanup, removing unused loop parameter 2022-02-20 19:02:49 +01:00
Franco Fichtner
c0467fb54a interfaces: assignments should take OpenVPN into account
So 5f6b380a33 made get_interface_list() work as expected at the
price of losing assignment options on the referenced page due to
historic oversight.  Add a prefix so we can construct the device
name from a partial key value.
2022-02-18 08:57:26 +01:00
Franco Fichtner
2b21a8838a interfaces: $devices already filtered #5540 2022-02-18 08:00:02 +01:00
FloMeyer
e7356fa395
VPN / IPsec - pass protocol when resolving via ipsec_resolve() (#5360)
closes https://github.com/opnsense/core/issues/5359
2022-02-17 20:06:08 +01:00
Ad Schellevis
197f290801 Firewall : Advanced - Add support for syncookies, minor validation issue allowing empty adaptive values (for https://github.com/opnsense/core/issues/5561) 2022-02-15 23:54:37 +01:00
Stephan de Wit
6a2f45af2c unbound: background potentially long-running operation 2022-02-17 15:50:09 +01:00
Franco Fichtner
12128947d7 system: simplify scripting a little 2022-02-17 13:27:10 +01:00
Ad Schellevis
aff6657a3b Reporting / Insight - fill missing data with zero's (0), for https://github.com/opnsense/core/issues/5579 2022-02-15 17:06:11 +01:00
kulikov-a
542dbbba84 logging - squidExtLogFormat : typo (#5580) 2022-02-16 19:51:53 +01:00
Franco Fichtner
481c6f943f interfaces: PATH is not complete in dhclient-script
PR: https://forum.opnsense.org/index.php?topic=26995.0
2022-02-16 16:21:01 +01:00
Franco Fichtner
ea3facd2db system: rework growfs and allow ZFS grow; closes #5576
Enhances scope beyond nano images and can extend all devices of
a ZFS pool but for now we settle for testing a single device pool.
2022-02-16 16:16:17 +01:00
Franco Fichtner
8a2c3d81a3 system: libraries supports pcre.jit since 21.1.1 2022-02-15 14:12:31 +01:00
Franco Fichtner
789b777d46 system: try to boot without kernel message mute relics
They don't seem to work in some cases and aren't used a lot.
2022-02-15 09:48:48 +01:00
kulikov-a
1293d53ec0 change default severity level 2022-02-14 08:51:35 +01:00
Franco Fichtner
b342645e7c dhcp: add missing copyright
File created in 092462dc10d1a4 by Seth Mos in 2012.
2022-02-14 08:48:41 +01:00
Ad Schellevis
edeec7d621 Firewall - Aliases: local file corruption might prevent alias to be loaded. closes https://github.com/opnsense/core/issues/5525 2022-02-13 11:30:45 +01:00
Franco Fichtner
24f100366f interfaces: nothing requires all vips to be regenerated #5540
The side effect from this may be that VIPs disappear from disabled
interfaces which is how it should have been.

Furthermore, remove the configuration of vips from rc.newwanip which
was added for unknown reasons in pfSense a long time ago and got also
copied to rc.newwanipv6 for us during cleanups but never in pfSense.
Especially since we removed find_interface_*() function family we never
risk reading an alias as a primary address and for all intents and
purposes an alias should never appear from an interface except it was
stripped in error by faulty code.  Win-win really.  ;)
2022-02-13 10:50:05 +01:00
René
f2507208fe
sidebar - refresh optimization last fix (#5571) 2022-02-12 13:45:36 +01:00
René
56be8a6c58
sidebar - optimization (#5570)
Removed unnecessary code for better performance
2022-02-12 09:52:28 +01:00
Clement Moulin
8ce4cacd17
dhcpd: Fix implode() call (#5568) 2022-02-11 21:17:39 +01:00
Franco Fichtner
12c9f1a93a interfaces: fix faulty up on GRE alias use
Apparently this never really worked... ;)

    /usr/local/etc/rc.bootup: The command `/sbin/ifconfig '10.0.0.13' up' failed to execute
2022-02-11 11:26:35 +01:00
Franco Fichtner
86571ef5f8 interfaces: look up 'blind' alias use in GRE avoiding guess_interface_from_ip() 2022-02-11 11:07:06 +01:00
Franco Fichtner
4f8ac2f8e4 interfaces: fix comment after discussion 2022-02-11 10:20:28 +01:00
Franco Fichtner
86a991ff91 interfaces: not sure how a vlanif can be empty when $id is set 2022-02-11 10:15:18 +01:00
Franco Fichtner
66d2565ac4 interfaces: always return the array #5540 2022-02-11 09:35:57 +01:00
Franco Fichtner
30fa1c056c interfaces: keep boot order but invoke pre and post device hooks always #5540
OpenVPN was put on the "delayed" ("virtual") list in d090ccc3dceb4
but more out of convenience than common sense.  To make sense of it
now check if the assigned device is provided by the plugin system
except for a bridge which is still having a special role in the code.

The role of bridges is somewhat disputed.  We may be able to set them
up earlier detaching them from the older ordering logic but more tests
need to be done in order to pull it off.
2022-02-11 08:49:45 +01:00
Franco Fichtner
50f1b28c78 firewall: style update 2022-02-10 21:04:44 +01:00
Ad Schellevis
3ccd5dfca1 Firewall : Advanced - Add support for syncookies, closes https://github.com/opnsense/core/issues/5561 2022-02-10 17:58:52 +01:00
René
68e86cca21
sidebar - 2nd submenu view fix (#5556)
fix for 2nd submenu
2022-02-10 14:53:58 +01:00
Franco Fichtner
45f3e96bed interfaces: improve vlan pattern 2022-02-10 12:45:17 +01:00
Franco Fichtner
751e98b48a interfaces: make notes for #5540 2022-02-10 12:21:44 +01:00
Franco Fichtner
cadd96f655 interfaces: small sweep for wireless related to #5540 2022-02-10 10:59:35 +01:00
Franco Fichtner
268bdb8ab2 interfaces: kill creation side effect for bridges #5540
Ironically, brigdes were the only user of the "&" reference trick
removed from LAGG, GIF, GRE and VLAN.
2022-02-10 10:07:57 +01:00
Franco Fichtner
dc0b0e1069 interfaces: clean up lagg configure a bit more 2022-02-10 09:58:51 +01:00
Franco Fichtner
0d74151ed8 interfaces: kill VLAN creation side effect #5540 2022-02-10 09:52:06 +01:00
Franco Fichtner
af59ab65b3 interfaces: parentesis fix 2022-02-10 09:28:29 +01:00
Franco Fichtner
111413c902 interfaces: $realif is no longer used 2022-02-09 20:14:12 +01:00
Franco Fichtner
ce820a275f interfaces: simplify legacy_interface_destroy() use 2022-02-09 20:13:09 +01:00
Franco Fichtner
0afd99a4ab interfaces: boot now produces errors #5540
Between testing and just trying to destroy an interface lies no
performance benefit.
2022-02-09 20:06:45 +01:00
Franco Fichtner
13deb2ce0f interfaces: make the world simpler #5540
Make a few assumtions about complexity:

1. We can stack bridges on top of GREs stacked on top of GIFs.
2. We do not stack any virtual device on itself.
3. VIP handling in GIF/GRE is ok to coalesce if we simply create
   VIPS before we start doing GIF/GRE.  Bridges follow GIFs as before.
5. The reason we create unassigned devices is to assign them via GUI.
6. We do not need to run inline device creation when we assure they
   are already there before we configure.
2022-02-09 09:36:09 +01:00
Franco Fichtner
1c3860ad6c interfaces: unused reference
It's not really faster.
2022-02-09 09:23:04 +01:00
Franco Fichtner
5ce896e367 interfaces: kill LAGG creation side effect #5540 2022-02-09 09:16:33 +01:00