Franco Fichtner
d141ea7d60
openvpn: final tweak on wording #2266
2018-03-19 08:33:39 +01:00
Franco Fichtner
e66cff65d7
openvpn: we need both messages on previous... #2266
2018-03-19 07:23:19 +00:00
Franco Fichtner
517e95911e
openvpn: correct more errors, auto-fill port and add remote networks in wizard; closes #2266
2018-03-19 07:18:08 +00:00
Franco Fichtner
71a93525d6
openvpn: bootstrap protocol value for port-autoselect #2266
...
If the default ever changes to TCP, the port generation works as intended.
2018-03-19 07:27:16 +01:00
Franco Fichtner
d7720dcf3e
intrusion detection: provide custom.yaml stub #2268
2018-03-18 21:27:31 +00:00
Franco Fichtner
3560810303
openvpn: adapt wizard as well #2266
...
* Port autoselect doesn't work for TCP
* Could still add remote networks
2018-03-18 19:19:57 +00:00
Franco Fichtner
c51a6916c3
openvpn: tunnel network tweaks, only one needed #2266
2018-03-18 18:28:35 +00:00
Franco Fichtner
01b0534cc6
openvpn: default switch to "any", adds XXX4 variants #2266
2018-03-18 16:11:56 +01:00
Franco Fichtner
86989c2e5c
openvpn: remove side-effects, preliminary cleanup for #2266
2018-03-18 10:47:16 +01:00
Franco Fichtner
d59fe96b10
mvc: move it back to where it was initially...
2018-03-18 10:29:36 +01:00
Franco Fichtner
b762fe38b2
mvc: try help without <small/> to align with static pages
2018-03-18 10:24:35 +01:00
Franco Fichtner
b5827a049b
interfaces: tweak previous
2018-03-17 17:08:14 +01:00
Franco Fichtner
3b4341286d
www: two more
2018-03-17 17:02:14 +01:00
Franco Fichtner
4e70b3acd1
interfaces: spotted error in help texts
2018-03-17 16:38:47 +01:00
Franco Fichtner
2caa7fae6a
www: missing bits for previous; closes #2175
2018-03-17 16:19:14 +01:00
NOYB
9d96bdcbc7
Help For - Data For Attribute
...
Use original element (<div>/<small>) with "data-for" attribute.
The old jquery "for" attribute selectors can be removed once conversion to "data-for" attribute is complete (including plugins).
The old jquery selectors to remove once conversion is complete.
opnsense_ui.js & head.inc
$("*[for='" + $(this).attr('id') + "']")....
$('[for*="help_for"]')....
2018-03-17 16:12:55 +01:00
Franco Fichtner
cb42f0e9d5
services: don't log detected IP all the time, style
2018-03-17 15:58:01 +01:00
Franco Fichtner
e1b303497e
system: PTI/IBRS tunables; closes #2264
2018-03-17 15:00:41 +01:00
Ad Schellevis
8c44049298
optional prefix gdrive backups with host and domain name, for https://github.com/opnsense/core/issues/2262
2018-03-16 18:59:44 +01:00
Franco Fichtner
6961ad48ba
pkg: fix plist
2018-03-16 09:47:00 +01:00
Ad Schellevis
4e979a9bd6
services, move core/system service registration to core.inc for clearity. as discussed with @fichtner
2018-03-16 09:39:42 +01:00
Franco Fichtner
08c830f936
system: last tweak for previous
2018-03-16 08:12:51 +00:00
Franco Fichtner
397d78df9e
system: make $keep the default
2018-03-16 08:06:48 +00:00
Franco Fichtner
09f45fbdbf
system: rewrite the default route handling
...
With this, there is consistency in setting the default route
and associated marker file. Nothing is done before the decision
is final, so we may not end up with a missing route after an
attempt to reconfigure for something that doesn't work anyway.
DHCPv4 and PPP still do this manually, but we will have to route
them through the same logic instead of them manually handling their
routes. 6rd and 6to4 may have a similar issue as well.
While here, swap the system_routing_configure() arguments to
align with the way other configure functions present their
arguments (verbose print flag first).
Gateway monitoring and default switching improvement since 2016.
Push $keep into default handling, it may be useful in general to
avoid spurious switches. It could also be a default probably.
2018-03-16 07:41:17 +00:00
Ad Schellevis
9ca61d8b3e
add service action to sync users and groups for https://github.com/opnsense/core/issues/2151
2018-03-15 21:33:41 +01:00
Ad Schellevis
d4e9da8b72
add syslog to services/diagnostics
2018-03-15 21:16:29 +01:00
Franco Fichtner
b3fb3e1b1d
system: found small issue, but...
...
ended up realising the function is totally whacky from top to
bottom. Writing default file hints before doing lookups for
said IPs, writing empty fallbacks, missing logging info.
To be continued.
2018-03-14 22:47:47 +00:00
Franco Fichtner
c2c4a24618
system: apply loader tunables, style for apply box #2083
2018-03-14 09:31:30 +00:00
Ad Schellevis
f4313ce368
Revert "IDS, suricata.log isn't in binary format... see https://github.com/opnsense/plugins/issues/606 "
...
This reverts commit dc1cd4da918880a7a9b6036b02911b65128e2d7c.
2018-03-13 18:07:50 +01:00
Ad Schellevis
dc1cd4da91
IDS, suricata.log isn't in binary format... see https://github.com/opnsense/plugins/issues/606
2018-03-13 17:49:30 +01:00
Ad Schellevis
e8846eaf0c
openvpn, show last timestamp in openvpn_get_client_status, for https://github.com/opnsense/core/issues/2243
2018-03-13 14:58:40 +01:00
Ad Schellevis
7ff5ec2340
openvpn, parse all states to retrieve most relevant one and some minor cleanups. for https://github.com/opnsense/core/issues/2243
2018-03-13 14:43:01 +01:00
Franco Fichtner
fdf4eccfaa
system: cosmetic tweaks for #2083
2018-03-12 20:51:04 +00:00
Franco Fichtner
68cfe2aaf8
system: render tunables in loader.conf; closes #2083
2018-03-12 20:31:12 +00:00
Franco Fichtner
ef451142db
interfaces: always allow /127, /128 and /32 static IPs; closes #2213
2018-03-12 21:07:17 +01:00
Franco Fichtner
86aa45633a
voucher: tweak simple character set; closes #2257
2018-03-12 18:47:27 +01:00
Ad Schellevis
6b677051d4
bridging, hide already assigned interfaces, closes https://github.com/opnsense/core/issues/2256
2018-03-12 18:45:47 +01:00
Ad Schellevis
7401b27bad
mvc / Monit, ditch work-around, closes https://github.com/opnsense/core/issues/2255
2018-03-12 18:23:51 +01:00
Ad Schellevis
117eb47666
MVC, keep track of model that created a field so our model relationfield can reuse the same object for choosing it's options, for https://github.com/opnsense/core/issues/2255
2018-03-12 18:22:21 +01:00
Franco Fichtner
33b3dabab3
interfaces: kill is_jumbo_capable()
...
Introduced in 2005 to separate good VLAN-capable driver from
the bad ones. We wonder how relevant this is nowadays.
Breaks at least Xen where the driver fails to pass the host's
VLAN capabilities.
Discussed with: @adschellevis
2018-03-12 17:21:21 +01:00
Franco Fichtner
d823cc7193
firewall: switch back to old NAT auto-outbound behaviour
...
Use the first address only, ignoring all VIPs.
Discussed with: @adschellevis
PR: https://forum.opnsense.org/index.php?topic=7438.0
2018-03-12 14:36:11 +01:00
Franco Fichtner
9cce0a02fe
pkg: this makes more sense, need to push to FreeBSD ports
2018-03-12 11:40:31 +01:00
Franco Fichtner
9e054ed704
interface: init variable directly
2018-03-12 07:50:27 +00:00
marjohn56
a28b048597
interface: dhcp6c creation breakout
2018-03-12 07:42:27 +00:00
Franco Fichtner
9efc0bf123
interfaces: do not break line
2018-03-12 07:30:37 +00:00
Franco Fichtner
95807fac47
interfaces: emit prefix-interface for trackers in advanced DHCPv6
...
While here, clean up the config write a little bit.
2018-03-12 07:24:46 +00:00
Franco Fichtner
b38317b34f
interfaces: more log output streamlining
2018-03-12 06:59:01 +00:00
Ad Schellevis
dc74006c9a
implement password policies for local accounts. for https://github.com/opnsense/core/issues/2252
...
This change consists of two components:
1) enforcing the user to change his or her password every x days, when pwd_changed_at is not set or longer ago then specified only access to the password page is prohibited
2) enforce minimal length or complexity settings depending on selected choices
2018-03-11 18:24:23 +01:00
marjohn56
8fb70ac4b1
interfaces: baby steps for #2234
...
Improve logging, minor cleanups.
2018-03-11 15:13:43 +00:00
Franco Fichtner
60b3db278f
interfaces: revert useless commits
...
This reverts commit e6dc3265fe76d00aaf250cc7bf5515c1e3d922d4.
This reverts commit e211d1ab2702be8df65e8d1cce1e4589ccd37f5a.
2018-03-11 14:36:16 +00:00
