Ad Schellevis
d3afd68acb
Firewall/rule parsing. add initial SNAT implementation, for https://github.com/opnsense/core/issues/1326
2017-12-26 19:20:24 +01:00
Ad Schellevis
8a0ac7ca25
Firewall/rule parsing, ok, someone thought it was a good idea to use the "network" field in outbound rules as the "address" field in all the other rule types.... not a big fan of duplicating code, but for now it's bett
...
er to keep the address conversion in one spot (which some duplicate code).
All still for https://github.com/opnsense/core/issues/1326
2017-12-26 18:45:24 +01:00
Ad Schellevis
50a0b8c39f
Firewall/rule parsing, improve naming, the 1:1 rules are destination nat rules, outbound will be source nat type. for https://github.com/opnsense/core/issues/1326
2017-12-26 18:10:20 +01:00
Ad Schellevis
b70880e33e
firewall/rule logic, some minor improvements for https://github.com/opnsense/core/issues/1326 , add parseStaticText() and remove duplicates
2017-12-26 18:00:36 +01:00
Franco Fichtner
4f9cbc83eb
web proxy: fix wrong character
2017-12-26 12:49:04 +01:00
Franco Fichtner
6f9c3177e1
mvc: pass form data, copy+paste for others but not quite ;(
2017-12-26 11:28:40 +00:00
Franco Fichtner
369721b818
mvc: rework for extensibility
2017-12-26 12:13:32 +01:00
Franco Fichtner
131dc9a340
mvc: (sub)tabs to partials
2017-12-26 11:56:05 +01:00
Franco Fichtner
8902ddb4c9
mvc: after further feedback...
...
The code for the Service controllers originated from IDS and
Web Proxy, not the Postfix plugin where this was originally
copied from before being turned into a mutabe variant with the
work from the mutable model class.
2017-12-25 22:53:29 +01:00
Franco Fichtner
85abd91c7c
mvc: rename controller internals
2017-12-25 16:38:44 +01:00
Ad Schellevis
f722081b87
interfaces, add "IPv6 Static over parent v4 PPPoE link" for https://github.com/opnsense/core/pull/2017 ditching some side affects from get_real_interface() in the process.
2017-12-25 13:40:48 +01:00
Franco Fichtner
9eac980047
web proxy: cache reconfigure detection for #2008
2017-12-24 23:20:28 +01:00
Franco Fichtner
7f7a96f758
mvc: fix call
2017-12-24 16:30:31 +01:00
Franco Fichtner
426cbdc5a0
mvc: we do not care about the model name
2017-12-24 16:23:41 +01:00
Franco Fichtner
e9e99cb254
mvc: further fixes :)
2017-12-24 16:17:03 +01:00
Franco Fichtner
a77c8535ef
mvc: fix class usage
2017-12-24 16:11:13 +01:00
Franco Fichtner
b83282f267
mvc: add a mutable service controller for easy reuse
2017-12-24 15:57:17 +01:00
Franco Fichtner
a46afb51a0
pkg: fix plist
2017-12-24 12:52:49 +01:00
Franco Fichtner
65b7fb6453
firmware: remove the hotfix backend support, discontinued
2017-12-24 12:52:14 +01:00
Franco Fichtner
db43f38d1c
firmware: allow to upgrade to 18.1.r1
...
Packages are not yet in place, but we need it for testing.
2017-12-24 10:32:19 +01:00
Ad Schellevis
b79ff62b6d
Firewall/nat. implement new rule generation for the sections done sofar. for https://github.com/opnsense/core/issues/1326
...
Moves most rule generation features in our filter, filter_generate_address() is only used in vpn_openvpn_export.php now, so to keep clearity we're going to move this out of the way for now too.
2017-12-23 17:36:03 +01:00
Ad Schellevis
8747cc94b4
Firewall/Nat, add Nat and Npt rule registrations, next step is to ditch the old code in filter.inc for these topics and then we only have to refactor the outbound code and some additional testing.
...
all for https://github.com/opnsense/core/issues/1326
2017-12-23 17:28:34 +01:00
Ad Schellevis
b6f8d5d67a
Firewall/rule parsing, missed a spot in isIpV4() https://github.com/opnsense/core/issues/1326
2017-12-23 16:40:20 +01:00
Ad Schellevis
4aea87fb24
Firewall/forward, check protocol for autogenerated rules. https://github.com/opnsense/core/issues/1326
2017-12-23 16:17:50 +01:00
Ad Schellevis
9479df5c8e
Firewall/rule parsing, some for some autogenerated rules we need to know for which protocol a rule is targeted. for https://github.com/opnsense/core/issues/1326
2017-12-23 16:15:22 +01:00
Ad Schellevis
054d69cd01
Firewall/forward, typo in ForwardRule.php https://github.com/opnsense/core/issues/1326
2017-12-23 15:37:53 +01:00
Franco Fichtner
160820d2df
pkg: fix plist
2017-12-23 15:24:43 +01:00
Ad Schellevis
b291345848
Firewall, rule parsing. move suffix to parameters for parsePlainCurly() , also for https://github.com/opnsense/core/issues/1326
2017-12-23 15:11:49 +01:00
Ad Schellevis
a347623b41
Firewall/forward, missed a spot in last refactor https://github.com/opnsense/core/issues/1326
2017-12-23 14:53:43 +01:00
Ad Schellevis
c77718cb6b
Firewall, portforward. https://github.com/opnsense/core/issues/1326
...
Rename NatRule to ForwardRule, it seems better to split the logic for the different nat types and reuse the functionality in the base class. A portforward is actually a rdr entry combined with nat if relection is enabled, 1-on-1 nat is the exact opposite (nat, optionally combined with rdr). Which would make the parse logic to complicated to read if combined.
2017-12-23 14:13:23 +01:00
Ad Schellevis
bc235a3a69
Firewall/rules parsing, add support for reuse of fieldnames in ruleToText(). for https://github.com/opnsense/core/issues/1326
2017-12-23 13:57:22 +01:00
Ad Schellevis
6337818383
firewall, refactor text output so we can reuse the same logic in other classes as well. moved logic out of __toString() to ruleToText() in Rule class, only small downside is that conversion functions need to be accessible from the Rule() class for this to work, which requires them to be protected in stead of private.
...
related to https://github.com/opnsense/core/issues/1326
2017-12-23 13:45:46 +01:00
Ad Schellevis
fa0bb4a98c
firewall/rule parser, move standard rule parser logic to reader() in Rule class for reuse and rename fetchActualRules() to parseFilterRules() to better reflect it's function.
...
related to https://github.com/opnsense/core/issues/1326
2017-12-23 13:24:53 +01:00
Ad Schellevis
280781b582
firewall/rule parser, better to switch fetchActualRules() to a generator.
2017-12-23 12:45:17 +01:00
Ad Schellevis
6628d7f495
firewall/portforward, missing ipproto in reflection nat rule. for https://github.com/opnsense/core/issues/1326
...
pf can guess the ip protocol, but this doesn't appear to be flawless.
2017-12-23 11:34:59 +01:00
Fabian Franz
831bfc711e
lighttpd: add mime type for WPAD/PAC
2017-12-23 10:30:12 +01:00
Ad Schellevis
65d08b716c
firewall/nat, regression in previous. https://github.com/opnsense/core/issues/1326
...
Because we can't use :network when interfaces don't have any address configured on filter load, we need to make sure we know which addresses are configured, add relevant ifconfig
data to setInterfaceMapping() in filter.inc.
2017-12-22 21:52:46 +01:00
Ad Schellevis
3b53e1d089
firewall/nat, replace portforward code for https://github.com/opnsense/core/issues/1326
2017-12-22 21:01:24 +01:00
Ad Schellevis
687e71dc3d
firewall/nat, regression in forward. https://github.com/opnsense/core/issues/1326
2017-12-22 20:59:53 +01:00
Ad Schellevis
8ed255c696
firewall/nat, work in progress port forwards. Class names may change later on, but functionally this part should be able to render the portforward rules, which will be integrated first before moving the other redirect/nat portions.
2017-12-22 20:12:41 +01:00
Ad Schellevis
6d6ac731c9
firewall/parser add prefix and suffix to parseInterface, https://github.com/opnsense/core/issues/1326
2017-12-22 20:09:19 +01:00
Franco Fichtner
50e53ab4a0
interfaces: reload filter before reloading plugins for connectivity
...
PR: https://forum.opnsense.org/index.php?topic=4727.0
PR: https://github.com/opnsense/core/issues/1403
2017-12-22 18:18:31 +01:00
Franco Fichtner
4e1c7d4011
network time: ntp breaks the overly overlong lines, fix their parsing
...
PR: https://github.com/opnsense/core/issues/1764
2017-12-22 07:53:49 +00:00
Franco Fichtner
0ae4af9a7f
network time: third server offers IPv6 #1374
2017-12-22 08:31:48 +01:00
Franco Fichtner
97daba95d9
network time: we haz a pool! #1374
...
While here, time-update-interval does not exist and update the
xml lint pass to pick up the sample file, too.
2017-12-21 18:28:24 +01:00
Franco Fichtner
0284604dda
ntpd: fix for valid negative offset; closes #1968
2017-12-21 10:21:29 +01:00
Franco Fichtner
7c66c4f750
wizard: also disable dnsmasq on wizard to avoid clash
2017-12-21 09:44:10 +01:00
Franco Fichtner
85c1e0a82f
web proxy: tweak previous
...
We can't fix reconfigure, but at least we can split up restart
to be an explicit stop start to push 'squid -z -N' into the middle.
PR: https://github.com/opnsense/core/issues/2008
2017-12-21 07:18:45 +00:00
Franco Fichtner
25ca2ad23f
web proxy: run setup.sh more often to properly do squid -z
...
PR: https://github.com/opnsense/core/issues/2008
2017-12-21 07:30:16 +01:00
Ad Schellevis
6ab11f0636
firewall/aliases, template missing check for existence. https://github.com/opnsense/core/issues/1971
2017-12-20 18:26:12 +01:00