2085 Commits

Author SHA1 Message Date
Franco Fichtner
eacf920fa8 firewall: feedback from @djGrrr 2017-02-13 07:50:41 +01:00
Franco Fichtner
b3bad8d2c9 interfaces: stray tab in previous 2017-02-12 19:44:28 +01:00
djGrrr
07d2354a15 make the ipv4 subnet matching code work like the ipv6 code, fixes bug in subnet matching on tun interfaces 2017-02-12 19:43:46 +01:00
Ad Schellevis
212fd9aa32 (ipsec) add mobike switch, change leftsendcert to always. for https://github.com/opnsense/core/issues/1393 2017-02-11 01:37:48 +01:00
Franco Fichtner
c7ac2083f6 firewall: array_merge() throws off indices 2017-02-12 19:28:04 +01:00
Franco Fichtner
0c09631552 firewall: ints are confusing 2017-02-12 19:12:33 +01:00
Franco Fichtner
69f89b047b firewall: more work on prio matching 2017-02-12 19:08:36 +01:00
djGrrr
b0075a6f21 Add priority settings to advanced firewall rule options (#1392)
* Add priority settings to advanced firewall rule options

* fix all the previous issues with the priority rules patch and add support for the 2 prio setting

* make the advanced options auto expand, even with various priorities set to 0
2017-02-12 18:17:04 +01:00
Franco Fichtner
f6014c36bd vlan: more refactoring 2017-02-12 18:08:51 +01:00
Franco Fichtner
189ae8982d interfaces: small vlan pcp adjustments
Align this some more: legacy_vlan_tag() is used nowhere else,
so it's ok to change the function and clarify the text usage.
2017-02-12 17:32:45 +01:00
djGrrr
f07ab5fa7a add VLAN Priority (PCP) setting to VLAN config (#1394)
* add VLAN Priority (PCP) setting to VLAN config

* use array() instead of [] here

* add a default value for $pcp to legacy_vlan_tag()
2017-02-12 17:15:56 +01:00
Franco Fichtner
46fb701528 pkg: revoke 16.7 finggrprint in -devel 2017-02-12 11:04:04 +01:00
Franco Fichtner
9073176f91 configd: remove alias from config action 2017-02-11 15:34:30 +01:00
Franco Fichtner
bf1e663ade wizard: problematic webgui restart due to chaining it into reload all 2017-02-11 15:20:56 +01:00
Franco Fichtner
4b5c80b9a8 interfaces: fix wlan probe to not yield an empty interface 2017-02-09 22:57:58 +01:00
Franco Fichtner
42d13b904c plugins: allow to search for a plugin withing plugins_scan()
PR: https://github.com/opnsense/core/pull/1388
2017-02-09 09:43:15 +01:00
Ad Schellevis
26c99a9711 (ipsec) add aesgcm, for https://github.com/opnsense/core/issues/1366 2017-02-07 20:13:02 +01:00
Franco Fichtner
c0cb9dbc0b system: set filtertunnel for IPsec to fix TCP teardown 2017-02-03 10:18:17 +01:00
Franco Fichtner
895e30d1bf filter: direction 'any' wasn't respected in floating rule 2017-02-02 17:49:48 +01:00
Ad Schellevis
f12e4e4b2f don't try to enable legacy Xauth and radius at the same time + fix bug with $ph1ent 2017-01-31 21:29:06 +01:00
Franco Fichtner
4f4791c405 src: so this is 17.7.a 2017-01-30 21:35:22 +01:00
Ad Schellevis
78e265796f add radius server selection, move some code. 2017-01-30 21:00:17 +01:00
Ad Schellevis
661f6afd4d Merge branch 'eap-radius/2-try' of https://github.com/GurliGebis/opnsense_core into GurliGebis-eap-radius/2-try 2017-01-30 19:47:45 +01:00
Franco Fichtner
0dc512eea0 system: nobody caught this typo ;( 2017-01-30 18:15:41 +01:00
Ad Schellevis
e77d568e70 same as previous 2017-01-30 12:41:57 +01:00
Ad Schellevis
3a96c1dd5d isset() vs !empty(), when the legacy code stores false.... it eventually translates into a missing entry after save, before save, it's set with false.... 2017-01-30 12:36:16 +01:00
Franco Fichtner
7f230df702 www: fix a crash report in url_safe() 2017-01-30 08:54:18 +01:00
Franco Fichtner
a291ec2441 src: some baby steps with phpstorm inspection 2017-01-26 10:36:41 +01:00
Franco Fichtner
e802122f06 config: fix typo; closes #1349 2017-01-25 09:59:10 +01:00
gurligebis
1ccd615843 ipsec: implement config generation for eap-radius 2017-01-24 21:38:59 +00:00
gurligebis
c1dc943141 ipsec: improved strongswan.conf readability by fixing indenting 2017-01-24 20:48:38 +00:00
Franco Fichtner
15c1e7148a system: be pedantic about output 2017-01-23 18:12:06 +01:00
Franco Fichtner
ed2ded1c04 system: make vt/sc configurable; closes #1343 2017-01-23 18:06:34 +01:00
Ad Schellevis
21be9faf45 replace csrf with phalcon's implementation
PR: https://github.com/opnsense/core/issues/918
2017-01-20 22:05:41 +01:00
Franco Fichtner
9eeca3405b rc: always restore native /var layout on boot 2017-01-19 15:10:05 +01:00
Ad Schellevis
4dbc24ef82 (filter) move bogons, without breaking application logic, for https://github.com/opnsense/core/issues/1331 2017-01-16 09:29:39 +01:00
Franco Fichtner
c5b1ddef72 ddb: /etc/ddb.conf is perfectly fine, always use it 2017-01-15 12:07:39 +01:00
Franco Fichtner
bd188bd895 system: correctly apply /dev/pf flags if loader.conf was missing 2017-01-10 17:15:45 +01:00
Franco Fichtner
397c95f89c interfaces: better safe than sorry 2017-01-09 08:59:09 +01:00
Franco Fichtner
e97c4f1d11 interfaces: fix a crash report 2017-01-09 08:45:31 +01:00
Franco Fichtner
6c6b8f1d29 interfaces: fix a crash report
There could be another error in here with the reported IPv6 issues...
2017-01-09 08:13:08 +01:00
Franco Fichtner
6801b20c06 src: use the opportunity to scrub supurious ";;" spots 2017-01-07 10:46:06 +01:00
Franco Fichtner
fe5eb31a37 firmware: update these numbers
i386 is less storage-intense, but a reasonable amount of
free storage space is recommended in any case.
2017-01-05 15:10:06 +01:00
Franco Fichtner
fadc0ab5ad load balancer (relayd): remove from core 2017-01-03 23:40:46 +01:00
Franco Fichtner
44e4ae85c0 upnp: remove from core 2017-01-03 23:29:13 +01:00
Franco Fichtner
130d52da8f wol: remove from core 2017-01-03 23:21:10 +01:00
Franco Fichtner
c91841afd6 igmp proxy: remove from core 2017-01-03 23:09:19 +01:00
Franco Fichtner
52184b09d3 snmp: remove from core 2017-01-03 22:58:42 +01:00
Franco Fichtner
80eefebf42 pkg: also rc.shutdown hook, better for ACPI shutdown 2017-01-03 17:54:51 +01:00
Franco Fichtner
d14bfe618f bump copyright; happy new year! 2017-01-01 14:39:47 +01:00