368 Commits

Author SHA1 Message Date
Franco Fichtner
cde9b8f8dd rc: stop depending on config.lib.inc instead of config.inc
Looks like the reason for this file has gone.  We shall merge
the code into config.inc soon.
2017-05-04 22:41:00 +02:00
Ad Schellevis
84c9cd6b3e Merge pull request #1535 from johannrichard/captive-autocorrect-fix
Fix autocomplete, autocapitalize and autocorrect in Captive Portal login form
2017-04-27 14:40:54 +01:00
Franco Fichtner
5e53c764cd firmware: show downgrades in update list as well 2017-04-23 11:36:38 +02:00
Ad Schellevis
02cdb61a62 refacor unboundctlwrapper to python, closes https://github.com/opnsense/core/issues/1505 2017-04-22 15:37:59 +02:00
Johann Richard
6404281c37 Fix autocomplete, autocapitalize and autocorrect
New iOS versions doe autocapitalisation, autocrrection and/or autocomplete. All three can be annoying when entering always changing usernames with sometimes lower-case first characters, as in the Captive Portal Vouchers usernames. 

This should fix the behaviour and make the portal more graceful towards iOS devices.
2017-04-10 12:07:37 +02:00
Ad Schellevis
07f5033bff add configd command for "dhcpd list leases" for https://github.com/opnsense/core/pull/1472 2017-04-04 20:34:10 +02:00
Ad Schellevis
5f17abb3fa (ids) fix for https://github.com/opnsense/core/issues/1516 2017-04-02 19:42:16 +02:00
Ad Schellevis
e52e251e5e (proxy) decode content when downloading ACL, closes https://github.com/opnsense/core/issues/1510 2017-03-30 06:56:59 +02:00
Franco Fichtner
1f8e73ba9c src: whitespace sweep 2017-03-26 21:41:27 +02:00
Fabian Franz
1ada56947a unbound debugging (#1504) 2017-03-25 17:01:36 +01:00
Franco Fichtner
2981b6637f captive portal: fixup "permanent" arp entry parse #1344 2017-02-28 09:06:06 +01:00
Ad Schellevis
3151c87eec CP, refactor arp list, closes https://github.com/opnsense/core/issues/1344 2017-02-28 08:52:24 +01:00
Franco Fichtner
99c71c85c9 firmware: plugin detection via configd 2017-02-17 09:03:10 +01:00
Franco Fichtner
75048a5ab9 firmware: run autoremove on minor operations
Bring back parts of f9e71141 in order to do an autoremove on
minor operations.  We still don't want the cleanup, but at
least since we have migrated to the vital flag we can be
sure that our GUI is not being purged.
2017-02-08 09:37:45 +01:00
Franco Fichtner
384b751515 scripts: fix line breaks in csv 2016-12-28 10:26:32 +01:00
Ad Schellevis
99dac4ab7e (webconfigurator) optionally limit ciphers. closes https://github.com/opnsense/core/issues/1301 2016-12-27 17:23:01 +01:00
Ad Schellevis
565fd72bba (ids) add support for inline configuration settings (subscription based url's for example), add basic auth support.
Example supported format:

<?xml version="1.0"?>
<ruleset>
    <location url="https://www.snort.org/rules/snortrules-snapshot-2990.tar.gz?oinkcode=%%snort.oinkcode%%" prefix="Snort"/>
    <files>
        <file description="blacklist" url="inline::rules/blacklist.rules">snort.blacklist.rules</file>
    </files>
    <properties>
        <property name="snort.oinkcode" default=""/>
    </properties>
</ruleset>

---
Registers the setting "snort.oinkcode" which is used to construct the download url.
This commit doesn't include definitions for new content, in case someone wants to create a definition file, it should be easy now :)
2016-12-27 12:08:54 +01:00
Ad Schellevis
da024c5dfe (ids) work in progress, extend metadata templates with user input (subscription codes, etc) 2016-12-19 21:49:30 +01:00
Ad Schellevis
7294202195 (ids) change download buffering 2016-12-19 21:48:04 +01:00
Ad Schellevis
feb11e59a8 (list_arp.py) only parse lease sections https://forum.opnsense.org/index.php?topic=4086.0 2016-12-14 03:05:15 +01:00
Ad Schellevis
1dbaaca2b6 (proxy, acl download) minor performance improvments + python3 compatibility additions 2016-12-13 10:29:20 +01:00
Franco Fichtner
3df938602c firmware: pkg will receive a license query fix soon :) 2016-12-12 07:21:12 +01:00
Franco Fichtner
101fc8449d templates: remove files in the way of directories
Way better fix for the squid file transition.  Does not require
a manual restart anymore.
2016-12-10 19:27:47 +01:00
Franco Fichtner
0a972db96d firmware: fix style in audit print 2016-11-30 08:24:33 +01:00
Ad Schellevis
1b442b8e48 (proxy, remote acl's) add option to disable cert validation, closes https://github.com/opnsense/core/issues/1271 2016-11-27 15:11:10 +01:00
Ad Schellevis
a257070187 (proxy) some small performance improvements 2016-11-25 16:59:20 +01:00
Franco Fichtner
5cc1515bfd firmware: add audit feature, @jschellevis will like this... 2016-11-25 08:27:18 +01:00
Franco Fichtner
8b61365fa6 firmware: show license in packages/plugins; closes #1220 2016-11-22 18:41:53 +01:00
Ad Schellevis
c3e8468518 (proxy) add ftp support again for remote acl download. We switched to python's requests library, which doesn't support ftp. Some people still use ftp though. 2016-11-22 18:29:31 +01:00
Franco Fichtner
76986c0a3e firmware: display latest changelog if found 2016-11-18 08:15:54 +01:00
Ad Schellevis
ec92f844e8 (IDS) change et-open ruleset 2016-11-13 20:23:09 +01:00
Franco Fichtner
b0daaef49a firmware: tabs melikes, zap spaces 2016-11-11 19:28:52 +01:00
Franco Fichtner
3486cd2ab8 captive portal: lower timeout, but really increase it
(it's complicated)
2016-11-11 19:23:32 +01:00
Franco Fichtner
61fc13b316 firmware: add changelogs tab, pull in index through info action #341 2016-11-11 08:36:33 +01:00
Ad Schellevis
a8bcef6bac crashreport, increase sqlite busy timeout 2016-11-10 21:14:03 +01:00
Franco Fichtner
9a25315258 firmware: we are on a clock 2016-11-10 20:54:05 +01:00
Franco Fichtner
16800add1d firmware: fixes for changelog fetch 2016-11-10 20:46:29 +01:00
Franco Fichtner
897b2c96eb rc: add changelog fetch script for #341 2016-11-10 20:27:22 +01:00
Franco Fichtner
528866c5d0 proxy: rc.conf.d subdir for squid, only way to merge configs 2016-10-26 19:34:30 +02:00
Ad Schellevis
f864511762 (proxy) add basic auth support for remote ACL's, replace urllib2 with requests. 2016-10-17 22:13:37 +02:00
Ad Schellevis
58ca02846b (IDS) extend support for compressed files with "inline::" keyword to be able to download parts of an archive (required to download snort rules).
Change processing order to always stream data to tempfiles first, so we can reuse downloaded files (an archive scan isn't very expensive)
2016-10-16 19:26:55 +02:00
Ad Schellevis
fe81d2e887 (IDS) add support for compressed rule files, unpack *.rules into defined target filename 2016-10-16 16:54:05 +02:00
Franco Fichtner
b08d58270e src/opnsense: apply style here too 2016-09-25 10:03:21 +02:00
Ad Schellevis
f107116e7d ditch load_mac_manufacturer_table, replace with configd call 2016-09-15 15:21:04 +02:00
Ad Schellevis
cf34abbac4 (firmware) change loader.conf.local generation, as discussed with @fichtner 2016-09-09 09:43:06 +02:00
Ad Schellevis
6c7224072d missed an enter in the previous commit 2016-09-08 10:48:29 +02:00
Ad Schellevis
af66f0da7c (firmware) add configd "firmware loader" commands to control the contents of /boot/loader.conf.local
plugins can use this call to register new bootup parameters, new commands added:

configctl firmware loader show
configctl firmware loader rm <parameter>
configctl firmware loader edit <parameter> <value>
2016-09-08 10:44:55 +02:00
Ad Schellevis
5ec2101ac2 (insight) check database integrity before start, repair if broken 2016-08-07 16:10:19 +02:00
Franco Fichtner
4be8343259 src: switch robots meta to nofollow, noindex; closes #1089 2016-07-30 21:17:27 +02:00
Franco Fichtner
23930a8506 src: remove source maps and add sweep target; closes #1074 2016-07-27 08:27:35 +02:00