14312 Commits

Author SHA1 Message Date
Franco Fichtner
d8bc23ef15 system: click to edit should start edit mode ;) 2022-08-11 16:17:36 +02:00
Franco Fichtner
b3bbc38921 system: "passwordarea" support for backup values
PR: https://github.com/opnsense/plugins/issues/3070
2022-08-11 16:08:58 +02:00
Franco Fichtner
4bc0871c99 unbound: reduce code size a little #5944 2022-08-11 15:25:29 +02:00
Maurice Walker
98410aeede Unbound: add AAAA-only mode to config
Allows removing all A records from responses.
2022-08-11 15:08:12 +02:00
Maurice Walker
9fc7823dd6 Unbound: add AAAA-only mode to UI 2022-08-11 15:08:12 +02:00
Patrick M. Hausen
68894e989d dhcp: improve UI for disabling of DNS advertisments; closes #5923 2022-08-11 14:54:18 +02:00
Franco Fichtner
e6d53a4f8e interfaces: employ gre trick here for gif as well
Also try to pin 128 bit net to use that immediately as the
configuration is already correct.
2022-08-11 14:29:19 +02:00
Franco Fichtner
6043b5b125 interfaces: make rc.newwanip the same as "dns reload"... #5933
... a.k.a. rc.resolv_conf_generate.  While here protect more
code with the IP change guard and clear the IP address if the
address lookup came up empty.
2022-08-11 13:53:04 +02:00
Franco Fichtner
d9609ec86a rc: move log message #5933 2022-08-11 13:31:13 +02:00
Franco Fichtner
475cb8ec7f interfaces: deal with problematic <wireless/> handling #5939
The wireless code "integration" is horrible even by moderate standards
in our code base.  In the future the best way would be to ditch all of
it and rebuild (parts) required by users.
2022-08-11 11:16:40 +02:00
Franco Fichtner
fd8ae82e95 system: defer status fetch a little
Try to not update immediately as page is still
rendering/filling up contents therein.

It makes the status indicator color change more
visible to the eye.
2022-08-11 09:36:10 +02:00
Franco Fichtner
b6b444ad16 dhcp: two warnings 2022-08-11 09:35:01 +02:00
Franco Fichtner
5fd1f962b3 dhcp: for better config structure 2022-08-11 09:34:29 +02:00
Franco Fichtner
4f21af48ef dhcp: cleanups 2022-08-11 08:55:41 +02:00
Franco Fichtner
85373c724d dhcp: pushed wrong servers to zone definition #5942 2022-08-11 08:55:41 +02:00
Ad Schellevis
6f11b9c3e4 firewall: extend pool options support (https://github.com/opnsense/core/issues/5934)
Even though we're currently not able to offer other options than round-robin as pfctl seems to prevent that, it might still be a good idea to make the current options explicit and leave room for future enhancements.

This commits adds poolopts to gateway groups and explains options. If users want to mix sticky and non-sticky, this will be possible with this change. Other options (random, source-hash, ..) unfortunately not.
2022-08-03 11:55:35 +02:00
Franco Fichtner
47bff6840d system: console wireless assignment mismatch
Some code tries to do this on the fly but newer code does not
(and should not).

PR: https://forum.opnsense.org/index.php?topic=29559.0
2022-08-09 13:09:20 +02:00
Franco Fichtner
0b29f71cb1 interfaces: merge INFOREQ|REQUEST handling #5862
PDINFO should not be set and therefore only gets cleared.
2022-08-08 14:43:28 +02:00
Maurice Walker
f2c844e170
SLAAC WAN: add support for requesting DNS info via stateless DHCPv6 (#5937)
* Merge SLAAC interface dhcp6c config

Stateless DHCPv6 config for SLAAC WANs was generated, but not merged into dhcp6c.conf file.

* Add support for stateless DHCPv6 to dhcp6c script

Script had no code for processing stateless DHCPv6 replies (required for SLAAC without RDNSS / DNSSL).

* dhcp6c script, pass all search domains to ifctl

Only the first domain was used, all others were disregarded.
2022-08-08 14:41:42 +02:00
Franco Fichtner
e688d3b6fa firmware: revoke 22.1 fingerprint 2022-08-08 11:17:38 +02:00
Franco Fichtner
f8fdc8deac src: style sweep 2022-08-08 10:47:56 +02:00
Ad Schellevis
a8697dd4ea System Status: add "pre-wrap" to keep long content inside the message box 2022-08-01 18:07:26 +02:00
Ad Schellevis
edcc29ab5c filter - cleanup some php8 warnings 2022-08-01 16:56:28 +02:00
Franco Fichtner
8f8449ebe8 firewall: stick-address only in effect with pool option and multiple routers
PR: https://forum.opnsense.org/index.php?topic=29458.0
2022-08-05 13:22:19 +02:00
Franco Fichtner
e5006e9e44 interfaces: bring routes back after reconfiguring IPv6 connectivity
PR: https://forum.opnsense.org/index.php?topic=29698.0
2022-08-05 11:00:05 +02:00
Franco Fichtner
d68d50caeb system: cosmetic newline at end of CRL text 2022-08-05 09:57:09 +02:00
Ad Schellevis
c903218cd8 authgui.inc -- remove old cruft, nohttpreferercheck is handled in check_security_http_referer_enforcement() which already bails via session_auth() 2022-08-01 06:21:39 +02:00
Franco Fichtner
d19cd6cdbf interfaces: get_interface_mac() not returning cached MAC result
Looks like this went unnoticed since 22.1.2.

PR: https://forum.opnsense.org/index.php?topic=29691.0
2022-08-04 23:39:46 +02:00
Franco Fichtner
83c1ce1b6f interfaces: fix warning 2022-08-04 22:39:39 +02:00
Franco Fichtner
d69ff4a16a interfaces: figure out point-to-point or subnet setup
PR: https://forum.opnsense.org/index.php?topic=29654.0
2022-08-04 22:25:56 +02:00
Franco Fichtner
e1e8abc03e rc: 750 for root fixup; closes #5475 2022-08-04 10:09:30 +02:00
Franco Fichtner
537857a059
system: change UX for new notices (#5922)
o Switch to shared circle with coloring
o Switch success circle to muted
o Switch dialog color to primary
o Switch dialog close button to plain
o Add a couple of translations
o Add muted circle to page load
o Refine error level for crash reports
o Rearrange dismiss and error presentation, inline circle indicator
o Add age/timestamp to statuses
2022-08-04 09:26:49 +02:00
Franco Fichtner
92cd0745e1 firewall: undefined key warning 2022-08-04 09:17:59 +02:00
Franco Fichtner
889420b652 interfaces: style update on GIF/GRE code
If we want to extend the feature here make room so we
don't have to deal with a single string concatenation.

Also disabled IPv6 inside GIF IPv4 tunnel.

PR: https://forum.opnsense.org/index.php?topic=29654.0
2022-08-04 08:53:14 +02:00
Franco Fichtner
9c6e5f0cfb dhcp: fix undefined key warnings 2022-08-04 08:51:54 +02:00
Franco Fichtner
abffe29b21 unbound: fix two undefined key warnings 2022-08-04 08:51:19 +02:00
Franco Fichtner
111a2560fb interfaces: GIF/GRE IPv6 remote defaults to 128
It would probably make sense to tighten validation as well, but for
this we first need to decide how we are going to implement the mode
where prefixlen is set to the actual value given and remote address
being omitted (see PR).

PR: https://forum.opnsense.org/index.php?topic=29654.0
2022-08-04 08:14:48 +02:00
Franco Fichtner
e76f15c357 system: refactor logic and populate hosts file a bit more
Already noticed that "ipsec" devices were throwing wrenches into
the engine here so try to match exactly on the pseudo-interface
names given by the GUI.
2022-08-03 09:06:20 +02:00
Franco Fichtner
1e2f93dc3e src: style sweep 2022-08-02 16:08:40 +02:00
Franco Fichtner
b504bc8763 dhcp: extend search list pull from DHCPv6 and refactor #5919 2022-08-02 12:31:56 +02:00
Patrick M. Hausen
b319b1284f core/radvd - do not advertise DNS domain when DNS advertisments are disabled 2022-08-02 12:12:40 +02:00
Stephan de Wit
966e54011e
unbound: do not start DHCP watcher immediately after daemonizing unbound (#5920) 2022-08-02 10:33:59 +02:00
Franco Fichtner
bb4743a732 interfaces: stop DHCP from calling rc.newwanip when no changes are being done
This is a partial revert of 797c1864194 which has good intentions but rc.newwanip(v6)
isn't equipped with being called a lot of times yet.  We want to improve this for 23.1.
2022-08-02 09:04:12 +02:00
Stephan
2918f0e24e trust: use proper CRL id-ce-cRLReasons extension keyword 'unspecified' 2022-08-02 08:39:55 +02:00
Franco Fichtner
7aaa6a263b system: do not reload unbound/dnsmasq "hosts" by default
Number of people noted spurious restarts of Unbound and this seems
to be the cause.  However, the real cause of hammering rc.newwanip
is in 797c18641944 and to avoid other side effects like the GIF/GRE
stuff we should consider reverting part of it.
2022-08-02 08:22:26 +02:00
Franco Fichtner
8974c4661a dhcp: fix undefined key warning 2022-08-01 13:52:23 +02:00
Franco Fichtner
f9ea49ae31 interfaces: manual cache invalidate for previous
Purge the file on all known dynamic spots that run a deconfigure
of some sort.  We probably need something for a forced reload as
well but for now let's see if this works in general.
2022-08-01 13:45:18 +02:00
Franco Fichtner
97e7a93b7c interfaces: disable reload with same IPv6
rtsold resolvconf handing forces a lot of reloads now, something
also seen in rc.newwanip -- let's go the extra mile and lock the
cache IP in place until we do a full reconfigure.

We may have to build some sort of "expire" feature for the cached
IP since between forced reconnects we will want to reload again
anyway.  But not sure where that is as rc.linkup is unreliable as
it has been messing with this before.
2022-08-01 12:29:44 +02:00
Franco Fichtner
507ee2768f unbound: argument unused 2022-08-01 12:21:11 +02:00
Franco Fichtner
af959da8b6 rc: use new _setup and repair missing setup.sh in Monit check #5917
Also see: https://github.com/opnsense/src/commit/3edcfbc578f
2022-08-01 11:15:32 +02:00