Ad Schellevis
e8dbda338f
rework previous
2019-05-24 15:04:15 +02:00
Ad Schellevis
54551b03ee
Proxy, minor regression in authentication. contraints are always checked now, which should only apply for local. related to https://github.com/opnsense/core/issues/3250
2019-05-24 15:02:56 +02:00
Franco Fichtner
4482cb1d6c
interfaces: code review, flip logic
2019-05-24 07:56:58 +02:00
Franco Fichtner
5d83d8612c
pkg: since CORE_PYTHON2 goes away make 3 the CORE_PYTHON default
2019-05-23 08:57:38 +02:00
Franco Fichtner
5184400115
firewall: change this back #3497
2019-05-23 08:30:32 +02:00
Franco Fichtner
7218726f59
system: style update
2019-05-22 07:06:35 +02:00
Ad Schellevis
fb4a9bedaa
dhcp/leases, forgot to replace from-to with address range min, max. for https://github.com/opnsense/core/issues/3487
2019-05-21 20:34:31 +02:00
Ad Schellevis
446caa9941
dhcp/leases, simplify interface lookup and make it more consistent. should fix https://github.com/opnsense/core/issues/3487
2019-05-21 20:21:50 +02:00
Ad Schellevis
9b63e33621
Merge branch 'clystron-dhcp_failover_params'
2019-05-21 19:58:01 +02:00
Ad Schellevis
7a15556bad
minor cleanups for https://github.com/opnsense/core/pull/3484 and handle 0 values.
2019-05-21 19:57:30 +02:00
Ad Schellevis
f886e4d439
Merge branch 'dhcp_failover_params' of https://github.com/clystron/core into clystron-dhcp_failover_params
2019-05-21 19:42:51 +02:00
Franco Fichtner
8b22eebb9c
pkg: move python dep to 3
2019-05-21 09:04:26 +02:00
Franco Fichtner
f772b4ef9a
system: reduce diff vs. stable
2019-05-21 09:01:53 +02:00
Franco Fichtner
255e9b76b4
system: add pluginctl -s support
...
For legacy components route -s option through plugins_services()
to get a list of services that can be controlled like the GUI
controls. E.g.:
# pluginctl dhcpd [start|stop|restart]
PR: https://forum.opnsense.org/index.php?topic=12781.0
2019-05-20 21:05:10 +02:00
Ad Schellevis
10108b0615
captiveportal, use "onestop" to stop captiveportal, when there's no zone configured "stop" would be skipped since the service is disabled. issue seems to be introduced in 0299224578
2019-05-20 16:36:34 +02:00
Franco Fichtner
4175a45f4b
system: fix netflow lib permission
2019-05-20 13:24:38 +02:00
Thomas Jensen
283d62a007
Add homelab.no repository
2019-05-20 13:00:08 +02:00
Ad Schellevis
f086f8c48d
flowd aggregate, minor bug in commit counter, leading to single row commits after row # 100k
2019-05-20 11:42:00 +02:00
Ad Schellevis
03c75f71be
system: address CVE-2019-11816 privlege escalation bugs
...
Reported by: Arnaud Cordier
2019-05-19 09:39:18 +02:00
Ad Schellevis
28ed5741f4
netflow, make sure get_timeserie_data() returns string type objects in stead of bytes, to prevent 17e4e9c0fc (commitcomment-33587137)
...
we might find some other small type interpretation differences, but the bumpiest seems to be gone now.
2019-05-18 09:23:25 +02:00
Ad Schellevis
2bdc74b8a1
netflow, switch dump_log.py script to python3
2019-05-18 09:22:29 +02:00
Ad Schellevis
3d1617b2bd
netflow, minor type issue, parameter received as bytes in get_timeseries.py
2019-05-17 16:50:32 +02:00
Ad Schellevis
918e4671ea
netflow, fix rc script for flowd_aggregate
2019-05-17 16:42:19 +02:00
Ad Schellevis
31982e2872
netflow, migrate flowd aggregator to python 3
2019-05-17 16:41:08 +02:00
Northguy
0b40897fd3
Fix dhcp leases help text ( #3488 )
2019-05-17 15:26:25 +02:00
Ad Schellevis
17e4e9c0fc
netflow, aggregator replace flowd with our new implementation
2019-05-16 18:32:55 +02:00
Ad Schellevis
8aecf38f2e
netflow, log parser. for backwards compatibility add copy of recv_sec field in recv
2019-05-16 18:29:16 +02:00
Franco Fichtner
6cd82973ec
ipsec: always reset to defaults; closes #3486
2019-05-16 18:11:43 +02:00
Ad Schellevis
5eef7248a8
netflow, flow log parser improvements
...
- faster / cleaner ipv4 conversion
- ipv6 conversion in compressed format, which equals flowd previous output
- unpack source and dest ports
2019-05-16 16:20:34 +02:00
Ad Schellevis
0bdbdf7d21
netflow, improve log parser performance, cache some calculations.
...
In theory we could probably increase performance even more by limitting the number of calls to struct.unpack, but this will make it more difficult to read.
This version is about 30% faster then the original C version shipped with flowd.
Some more testing todo, but preliminary results look good.
2019-05-16 13:54:24 +02:00
Ad Schellevis
93f7cff3d8
netflow, flowparser.py performance improvement in parsing ipv4/ipv6 addresses.
2019-05-15 22:01:27 +02:00
wolfgangp
8226709938
added failover_split parameter, there is still an issue with proper
...
handling of 0 as non-default
added hint to failover_peer help that the leases-file will be deleted on
change
2019-05-15 13:08:48 +02:00
Franco Fichtner
4ad677b521
pkg: fix plist
2019-05-15 08:35:32 +02:00
Ad Schellevis
a99d1ecf8e
netflow, minor type issue in previous
2019-05-14 22:08:52 +02:00
Ad Schellevis
7e55ef5218
netflow, work in progress pure python replacement to parse /var/log/flowd.log files
2019-05-14 22:06:53 +02:00
Franco Fichtner
aa9c83571f
dashboard: use cache_safe() for last unprotected logo instance
...
Placement is debatable here, but for the sake of consistency
do it like all the other spots already do. It's cool.
2019-05-14 08:52:55 +02:00
Franco Fichtner
28f87839f2
make: LOCALBASE should be used
2019-05-14 07:24:59 +02:00
Franco Fichtner
c3aa7013ae
pkg: remove unused file
2019-05-13 20:32:48 +02:00
Ad Schellevis
1dfc0e250a
CaptivePortal, convert scripts from python 2 --> 3
2019-05-13 19:29:06 +02:00
Ad Schellevis
64186cca48
python3, minor compatibility fix in sqlite3_helper.py
2019-05-13 18:43:27 +02:00
Ad Schellevis
2ee18896f2
CaptivePortal, remove unused listARPtable.py script
2019-05-13 18:42:56 +02:00
Ad Schellevis
a06ad6a5d0
netflow, convert parts that don't depend on flowd to python 3
2019-05-13 15:48:33 +02:00
Ad Schellevis
645fdcffd6
proxy, remote access control convert to python 3
2019-05-13 15:30:12 +02:00
Franco Fichtner
0766615b89
system: use our symlink in configd interpreter
2019-05-13 14:24:39 +02:00
Ad Schellevis
df63625418
list ssl ciphers script, python 2 -> 3 conversion
2019-05-13 14:10:01 +02:00
Ad Schellevis
bb2d31ed20
configd, module doesn't need to know interpreter, cleanup.
2019-05-13 14:06:05 +02:00
Ad Schellevis
e41aa9a74b
status interfaces, list_interrupts.py convert python 2 -> 3
2019-05-13 14:03:18 +02:00
Ad Schellevis
71cdb25d96
Routing/status, python 2-->3 conversion
2019-05-13 13:57:32 +02:00
Ad Schellevis
a4a70fdfbc
python 2->3 ipsec scripts
2019-05-13 13:42:35 +02:00
Ad Schellevis
ad7d6df09c
unbound:dhcp helper. convert to python3, fix startup read known addresses in the process.
...
It seems that unbound_known_addresses() wasn't working, since output_stream was ignored. only init with /dev/null when None.
2019-05-13 13:27:23 +02:00