11714 Commits

Author SHA1 Message Date
Kacper Why
ec400a0495
dhcpd4: support ignore-client-uids, Fixes opnsense#3673 (#4954) 2021-04-28 16:01:00 +02:00
Ad Schellevis
64e88b3360 Revert "IPSec: quote fqdn, keyid when selected, related to https://github.com/opnsense/core/issues/4860"
This reverts commit 7ac2b966a8c2c9b0dcbded71132223314bec9c99.

https://wiki.strongswan.org/projects/strongswan/wiki/IdentityParsing
2021-04-28 14:06:26 +02:00
Ad Schellevis
7ac2b966a8 IPSec: quote fqdn, keyid when selected, related to https://github.com/opnsense/core/issues/4860 2021-04-28 09:36:05 +02:00
Ad Schellevis
761e55184c IPSec: prepend fqdn when selected, related to https://github.com/opnsense/core/issues/4860 2021-04-28 09:25:04 +02:00
Ad Schellevis
45b697f6db IPsec - typo in auto generated rules. closes https://github.com/opnsense/core/issues/4920 2021-04-26 18:21:49 +02:00
Ad Schellevis
ca67acc9d8 OpenVPN wizard broken, seems like a regression from 71d6d0adeb closes https://github.com/opnsense/core/issues/4943 2021-04-26 08:49:42 +02:00
Franco Fichtner
0dbfddd864 firmware: exclude /etc/csh.cshrc for #4936 2021-04-22 17:16:10 +02:00
Ad Schellevis
2eebd08278 Shell inactivity timeout (for [t]csh). closes https://github.com/opnsense/core/issues/4936 2021-04-22 17:06:50 +02:00
Ad Schellevis
08dcb63b0d XMLRPC / HA sync - remove services from filter_configure_xmlrpc. closes https://github.com/opnsense/core/issues/4771
o add dpinger to routing, missed a spot there
2021-04-22 12:06:05 +02:00
Ad Schellevis
a9a844148d MVC: add uuid in ApiMutableModelControllerBase::validateAndSave() when a node is defined and has one. closes https://github.com/opnsense/core/issues/4904 2021-04-22 11:28:50 +02:00
Ad Schellevis
e2534f5a09 add "keyingtries" to IPsec Phase1 config, closes https://github.com/opnsense/core/issues/4204 2021-04-21 18:26:22 +02:00
Ad Schellevis
cdf328078b add policy based routing support for "dynamic gateway policy" type interfaces. closes https://github.com/opnsense/core/issues/4905
o expose gateway_interface property on gateway so consumers can act upon it
o exclude gateway_interface gateways on automatic "let out anything from firewall host itself (force gw)" rules to avoid side affects
o construct proper route-to statement when address is omitted
o construct proper reply-to statement when address is omitted and a reply-to property is set in the (dynamic) rule
2021-04-21 17:04:44 +02:00
Franco Fichtner
d3bc697309 importer: -p was never documented
It was actually written for the installer migration. \o/
2021-04-21 14:25:33 +02:00
Ad Schellevis
ca21b966a2 audit log: rename webgui to audit for https://github.com/opnsense/core/issues/4925 2021-04-20 10:34:30 +02:00
Ad Schellevis
cfb84fe8e9 Add audit log target and move related syslog messages (https://github.com/opnsense/core/issues/4925)
o add new "audit" log target
o move user auth log entries into the new scope
o send config changes to audit log including message if provided
o add messages in user and group administration
2021-04-19 18:04:35 +02:00
Franco Fichtner
253a888c26 installer: remove fluff 2021-04-19 14:19:04 +02:00
Greelan
19af1dc369
webgui: clarify help text for firewall rules traffic direction (#4848) 2021-04-19 13:51:22 +02:00
Ad Schellevis
65637ce15a phalcon 4, missed another Syslog for https://github.com/opnsense/core/issues/4012 2021-04-18 17:10:23 +02:00
Ad Schellevis
001325988c missed some small spots in https://github.com/opnsense/core/issues/4012
o one syslog unwrapped
o testsuite return class path missing
2021-04-18 17:04:34 +02:00
Franco Fichtner
e70427d9de system: leave an audit comment 2021-04-15 12:24:37 +02:00
Franco Fichtner
8bf56bf837 src: PHP error in Phalcon port
Fatal error: Declaration of OPNsense\Base\ViewTranslator::query($translateKey, array $placeholders = Array): string must be compatible with Phalcon\Translate\Adapter\Gettext::query($index, $placeholders = NULL) in /usr/core/src/opnsense/mvc/app/library/OPNsense/Base/ViewTranslator.php on line 45
2021-04-15 11:46:16 +02:00
Franco Fichtner
3a98ebb22f
Phalcon 4 migration (#4921)
phalcon 4 migration  #4012

o replace Phalcon\Session\Adapter\Files with new Phalcon\Session\Adapter\Stream adapter
o replace router->setUriSource() with handle() parameter
o combining sessions between phalcon and legacy php seems to be a bit problematic, first issue seems to be the legacy csrf check. refactor to use phalcon's method and legacy session
o Fix Phalcon Syslog usage in ControllerRoot (wrap in Logger class)
o session seems to miss standard prefix.
o also Gettext seems to like being wrapped...
o Gettext inheritance
o another handle()
o Volt: handle registerEngines / VoltEngine changes
o volt templates - missing session reference, bootstrap in ControllerBase
o router getRewriteUri() deprecated
o another handle() in index.php
o  Phalcon\Dispatcher::EXCEPTION_* moved to  Phalcon\Dispatcher\Exception::EXCEPTION_*
o changes in filter handling.
o fix plist
o Syslog usage changes
o refactor Validation changes
o FILTER_ALNUM - replaced FILTER_ALPHANUM
2021-04-15 11:36:57 +02:00
Franco Fichtner
cefe1069e4 installer: ok, one more ;) 2021-04-14 20:15:55 +02:00
Ad Schellevis
8d245d6d13 ipsec: fix php warning:
PHP Warning:  min(): Array must contain at least one element in /usr/local/etc/inc/plugins.inc.d/ipsec.inc on line 534
2021-04-14 13:19:59 +02:00
Franco Fichtner
161523247e installer: avoid padding to make this look fresh 2021-04-14 08:55:02 +02:00
Franco Fichtner
f9dd232a39 installer: remove old workaround 2021-04-13 15:01:30 +02:00
Franco Fichtner
55e4e45dac installer: no longer requires this 2021-04-13 14:06:18 +02:00
Franco Fichtner
3f3ebd9687 system: also pick up root user 2021-04-13 14:03:36 +02:00
Franco Fichtner
e8832a22fa rc: another zfs requirement for arm64 2021-04-13 13:34:36 +02:00
Franco Fichtner
95bfea65d0 rc: attempt to create /tmp if it does not exist 2021-04-13 12:07:06 +02:00
Franco Fichtner
a08b8ec72b installer: switch installer package 2021-04-13 09:35:28 +02:00
Franco Fichtner
10ea353bb5 filter: nop bweteen prints 2021-04-12 14:25:13 +02:00
Franco Fichtner
4fcc752721 system: CORE_SERIES is more accurate than CORE_ABI 2021-04-12 08:44:45 +02:00
kulikov-a
f6c0fa88d1
download_blacklists.py: match whole entry (#4915)
-match the entire string to prevent url entries
-add to skip stat if not match
2021-04-11 20:15:39 +02:00
kulikov-a
a76068beec
fw_log.volt: deffer url parsing (#4913) 2021-04-11 11:09:53 +02:00
Franco Fichtner
0f3fcd2b05 firmware: simplify for previous #4906 2021-04-09 14:28:05 +02:00
Franco Fichtner
35217ba0d1 firmware: if upstream package is missing complain; closes #4906
This points to a configuration error that should be resolved one
way or another.
2021-04-09 14:18:26 +02:00
Franco Fichtner
7d7aaa633d firmware: separate error for "forbidden" #4906 2021-04-09 14:06:27 +02:00
Franco Fichtner
61ca8a7b68 pkg: add series and nickname to metadata 2021-04-09 08:56:46 +02:00
Ad Schellevis
a785f71755 Firewall / Log Files / Live - refactor https://github.com/opnsense/core/pull/4902 a bit 2021-04-08 17:13:55 +02:00
Franco Fichtner
6658b92911 system: sort system_sysctl_get() output; closes #4907 2021-04-08 16:43:12 +02:00
Franco Fichtner
26c9ca7d08 rc: reverse list on stop action
Suggested by:	David Mora
PR:		https://github.com/opnsense/core/pull/4891
2021-04-08 16:43:12 +02:00
Franco Fichtner
bdb32652fb firmwre: make this clearer
Ideally, opnsense-update -M should replace this except
that -M is used to gain mirror access from other scripts
as well.  Need to think about it.
2021-04-08 16:43:12 +02:00
Franco Fichtner
aa56b3e45a system: reorder settings to let tunables override all 2021-04-08 16:43:12 +02:00
Ad Schellevis
f538c08065 unbound / blacklists: cleanse domain input. change regex in https://github.com/opnsense/core/issues/4898 per suggestion @kulikov-a 2021-04-08 16:43:12 +02:00
Franco Fichtner
d3063a2017 openvpn: remove OpenSSL engine support #4896 2021-04-08 16:43:12 +02:00
kulikov-a
90a4199e28
dialogTemplate.xml: dialog form 2021-04-06 12:03:18 +03:00
kulikov-a
8e8f87a15d
live view templates model 2021-04-06 11:00:21 +03:00
kulikov-a
903ba88fc7
live view templates model 2021-04-06 10:59:21 +03:00
kulikov-a
614c9fda8f
live view templates gui controller 2021-04-06 10:57:58 +03:00