Ad Schellevis
dd80bded16
(plugins, xmlrpc sync) use standard help if none available
2016-11-25 07:55:33 +01:00
Franco Fichtner
5d65669ee0
firmware: tweak wording on the console dialog
2016-11-25 06:41:46 +01:00
Franco Fichtner
28ea1d7390
ldap: the config setting for ldap_scope is 'subtree'
...
This doesn't really matter in the current code as it is the
default and only 'one' makes the implementation change its
scope, but for the sake of consistency let this be fixed.
2016-11-25 06:25:57 +01:00
Ad Schellevis
0f881bc4d0
(ldap) re-enable ldap_scope and legacy auth containers.
2016-11-24 20:56:26 +01:00
Franco Fichtner
364738997f
firmware: getting ready for 17.1-BETA
2016-11-24 18:38:26 +01:00
Franco Fichtner
33d00edd0a
pkg: make building 17.1 a bit easier
...
We're switching to PHP 7.0 (or 7.1 maybe), php-suhosin seems dead,
and maybe someone wants to work on a newer python base.
2016-11-24 18:19:17 +01:00
Franco Fichtner
8e01375337
upnp: fix regression introduced in 16.7.8
...
PR: https://forum.opnsense.org/index.php?topic=3976
2016-11-24 16:54:09 +01:00
Ad Schellevis
caa742ccef
(mvc) overlapping variables leading to scope issues in php7/phalcon volt templates
2016-11-24 11:18:26 +01:00
Franco Fichtner
52bfec334b
rc: less indent for console menu
2016-11-24 08:01:25 +01:00
Franco Fichtner
dd871c8e8b
www: fix a crash report
2016-11-24 07:59:41 +01:00
Franco Fichtner
a674b5e0eb
igmp proxy: tweak names suggested by @fabianfrz
2016-11-24 07:35:03 +01:00
Franco Fichtner
499ce45bd0
web proxy: proper ordering for menu item
2016-11-24 07:33:49 +01:00
Franco Fichtner
ffbbfc9635
acl: prune plugin files for #1037
2016-11-23 21:52:16 +01:00
Franco Fichtner
408790170f
acl: more changes for #1037
2016-11-23 21:43:06 +01:00
Franco Fichtner
9205427c8e
system: simplify ACL translation for #1037
2016-11-23 21:13:57 +01:00
Franco Fichtner
7526194b47
dnsmasq: reload dhcpleases on reconfigure; closes #1250
...
Private functions get "_" prefix, easy to spot from elsewhere
if needed. Yes, someone will try this eventually. ;)
2016-11-23 18:38:52 +01:00
Franco Fichtner
33c41b1613
unbound: register dhcp domain override for #1250
2016-11-23 18:15:50 +01:00
Franco Fichtner
2ca7253326
dnsmasq: domain override for dynamic dhcp lease registration
...
PR: https://github.com/opnsense/core/issues/1250
2016-11-23 18:06:30 +01:00
Franco Fichtner
24c8633736
auth: change slashes to dashes, breaking change for 17.1
...
Discussed with: @adschellevis
2016-11-23 17:16:34 +01:00
Franco Fichtner
7e75cf2631
dnsmasq: further cleanups for dhcpleases handling for #1226
...
o Respect the 'dnslocalhost' option, which wasn't previously possible
because dhcpleases clobbered /etc/hosts directly anyway.
o Align the code with how unbound does it: use a private file for
the hosts generation.
o HUP dnsmasq at the end of the hosts file regeneration.
o `--dhcp-hostsfile' was really really wrong as /etc/hosts is read
automatically, and the file specified here should have been adhering
to the dhcp leases format of on `--dhcp-host' argument per line.
2016-11-23 07:47:07 +01:00
Franco Fichtner
1b5c6d1b9a
dnsmasq: need to stop dhcpleases; should daemonize on its own
2016-11-23 06:48:59 +01:00
Franco Fichtner
bed2dbd8d8
dnsmasq: one more for #1226
2016-11-22 22:21:45 +01:00
Ad Schellevis
ad0109f60a
(plugins) add xmlrpc sync to plugins, closes https://github.com/opnsense/core/issues/1224
2016-11-22 20:56:43 +01:00
Franco Fichtner
a5fc46bd97
dnsmasq: refactor services_dhcpleases_configure() for #1266
2016-11-22 20:10:54 +01:00
Franco Fichtner
8b61365fa6
firmware: show license in packages/plugins; closes #1220
2016-11-22 18:41:53 +01:00
Ad Schellevis
c3e8468518
(proxy) add ftp support again for remote acl download. We switched to python's requests library, which doesn't support ftp. Some people still use ftp though.
2016-11-22 18:29:31 +01:00
Franco Fichtner
ce94277186
dhcp: interface column for leases; closes #860
...
Getting crowded...
2016-11-22 17:02:45 +01:00
Ad Schellevis
b9392f59b5
(ipsec) fix syslog output, eventually we should switch to the new style loggers, but for now it's better to make sure charondebug is respected.
...
From the docs:
Starting with version 4.2.9, strongSwan provides a much more flexible configuration of the loggers. Logger configurations in strongswan.conf have a higher priority than charondebug in ipsec.conf: If you define any loggers in strongswan.conf, charondebug does not have any effect at all.
2016-11-22 14:25:29 +01:00
Franco Fichtner
504c947bb7
ipsec: fix service name
2016-11-22 09:50:42 +01:00
Franco Fichtner
3222d5b25c
netflow: add service control; closes #1268
2016-11-22 09:14:56 +01:00
Franco Fichtner
4b99ff9f02
wake on lan: acl and menu
2016-11-21 23:14:18 +01:00
Franco Fichtner
d83563faba
ntpd: acl and menu
2016-11-21 23:04:43 +01:00
Franco Fichtner
a90efa2892
auth: migrated most entries to ACL.xml; closes #1267
2016-11-21 22:53:44 +01:00
Ad Schellevis
aaa4813103
(firewall) add maximum fragements, closes https://github.com/opnsense/core/issues/1246
2016-11-21 20:20:58 +01:00
Franco Fichtner
9ad060f680
igmp proxy: acl and menu
2016-11-21 18:16:39 +01:00
Franco Fichtner
4763373d51
bsnmpd: acl and menu entries
2016-11-21 18:08:53 +01:00
Franco Fichtner
2bb0f2301b
unbound: fix/secure unbound control
...
Turns out unbound reload flushes cache as well. Also, unbound-control
may hang when it runs into an "undefined state" (stoping a stopped
service, right), and lastly it wants to chroot after being chrooted
on reload, something that cannot be fixed with using unbound-control.
Keep unbound-control-setup in case somebody finds the facility useful.
2016-11-21 09:04:45 +01:00
Franco Fichtner
d539e535ed
ntpd: array() required for new-style functions
2016-11-21 08:02:17 +01:00
Franco Fichtner
4a7ff2456f
unbound: simply reload on /etc/hosts change
2016-11-21 07:58:15 +01:00
Franco Fichtner
c8236eec34
firmware: let copyrights reflect reality
...
Firmware MVC pages were introduced in 2015, since having been worked
on by Deciso and myself.
2016-11-21 07:31:26 +01:00
Franco Fichtner
c8cb224b14
plugins: fix plist
2016-11-21 07:07:36 +01:00
Franco Fichtner
5e1e138ff4
plugin: name by underlying system, not surfacing service
...
IPFW and PF are used for more than just firewall and shaper, e.g.
NAT, policy routing or shaping, and the plugin framework supports
registering multiple user-facing services per file.
2016-11-21 06:58:18 +01:00
Franco Fichtner
ff0dcc4d22
plugin: correct previous
2016-11-21 00:04:07 +01:00
Franco Fichtner
3b34f51f63
plugins: add firewall reload button, inline service_name_compare()
2016-11-21 00:02:41 +01:00
Franco Fichtner
b30940b5d8
ntpd: fix plist
2016-11-20 23:43:29 +01:00
Franco Fichtner
8a5b32bff8
relayd: called the other 'local'
2016-11-20 23:42:05 +01:00
Franco Fichtner
fd987e639c
ntpd: it's a plugin!
2016-11-20 23:36:31 +01:00
Franco Fichtner
4a6a53bc94
services: tweak the wait-for-service dialog
2016-11-20 21:02:40 +01:00
Franco Fichtner
c602a7fd22
services: simplify config writes
2016-11-20 20:44:08 +01:00
Franco Fichtner
e8ccc540d9
firmware: tweak previous
2016-11-20 20:30:27 +01:00