Franco Fichtner
eccf93e2fd
firewall: put the validation back lost in the refactor; closes #6383
...
We may have to extend to SLAAC as well, but let's see how this works
in practice first.
2024-01-12 12:27:09 +01:00
Franco Fichtner
cfc2c709e4
LICENSE: sync
2024-01-12 11:16:46 +01:00
Franco Fichtner
a4213fc4d8
src: style sweep
2024-01-11 15:48:08 +01:00
Stephan de Wit
8846037d93
MVC: Add IPPortField type ( #7134 )
...
Useful for Netflow and plugins. Tests included.
2024-01-11 15:41:40 +01:00
Franco Fichtner
587375aaed
unbound: move back to upgrade hook which requires the old duckdb version only found there
2024-01-11 15:28:58 +01:00
Ad Schellevis
13408c8206
Reporting: Unbound DNS - move duckdb export functionality to helper and always dump before system shutdown to be able to ship duckdb library upgrades on minor releases in the future.
...
In an attempt to keep the database clean and hopefully error prone, the logger will export/import now every ~24 hours. As these operations are rather quick it should help to minimize the footprint as well (duckdb files keep growing after deletes).
closes https://github.com/opnsense/core/issues/7049
2024-01-11 15:05:41 +01:00
Stephan de Wit
340b314f57
MVC: migrate CSVListField types to more sensible fields where possible ( #7118 )
...
Extend the MacAddressField as a list type for usage in Captive Portal. Also set MaskPerItem to "Y" on Netflow destinations for now.
2024-01-11 13:08:15 +01:00
Franco Fichtner
57312292ee
firewall: remove last "pfplugin" use #6390
2024-01-11 10:19:48 +01:00
Franco Fichtner
2cfe2fdc1c
firmware: allow os-squid install during major upgrade; closes #7030
2024-01-11 10:15:06 +01:00
Franco Fichtner
713809efeb
firewall: src sweep
2024-01-11 10:14:49 +01:00
Franco Fichtner
0803a233d0
firewall: fix a warning and integrate menu nicer #6383
2024-01-11 09:37:51 +01:00
Franco Fichtner
6ab8f8cf2d
firewall: patch in missing sync sections #6383
2024-01-11 09:27:56 +01:00
Franco Fichtner
b121118fc1
system: mark new tunables as required
2024-01-10 11:53:09 +01:00
Ad Schellevis
d766ae211c
System: Settings: Tunables - change zfs transcation group defaults. (timeout from 5 --> 90 seconds, dirty data sync percentage from 20 --> 5)
...
Usually firewalls are not processing a lot of disk write operations, in which case a forced every 5 second flush will lead to quite some wear on the underlying storage device (usually a solid state one these days).
Roughly 20GB per day is being written when using the upstream defaults and without much actual load. To compensate a bit for the reduction of forced syncs, we lower the threshold on the dirty data.
2024-01-10 11:36:02 +01:00
Franco Fichtner
b339f21817
filter: remove pfplugin use from below backend #6390
2024-01-09 16:25:31 +01:00
Franco Fichtner
f78549137a
mvc: style sweep
2024-01-09 16:15:17 +01:00
Ad Schellevis
4d8c9d1c4f
MVC: ditch phalcon's syslog implementation for a simple wrapper of our own. for https://github.com/opnsense/core/issues/6389
2024-01-09 14:23:01 +01:00
Ad Schellevis
84e43caf2d
MVC - add a field type for descriptions and uniform description uses in core modules.
2024-01-08 16:24:25 +01:00
Ad Schellevis
135a663e33
Firewall: NAT: NPTv6 - allow ip addresses without subnet and fix migration. for https://github.com/opnsense/core/issues/6390
2024-01-08 10:01:23 +01:00
Franco Fichtner
dfc834dabb
src: style sweep and plist fix
2024-01-07 21:03:04 +01:00
Franco Fichtner
490efb1e97
firewall: merge pfplugin.inc into pf.inc
2024-01-07 20:51:27 +01:00
Ad Schellevis
8591377778
Firewall: NAT: NPTv6 - add MVC migration and cleanup old legacy pages.
2024-01-07 18:29:00 +01:00
Ad Schellevis
8e299d3efe
import net/os-firewall from plugins ( https://github.com/opnsense/core/issues/6390 )
2024-01-07 16:56:35 +01:00
Ad Schellevis
3daff54655
Services: Intrusion Detection: Policy - show rule origin in rule adjustments grid. As we need to fetch all rule labels in order to link them and the number of installed rules may be quite large (>100k) we need a small work-around here to prevent other model callers from always having to wait for [msg, source] being populated.
...
closes https://github.com/opnsense/core/issues/7121
2024-01-07 16:22:17 +01:00
Ad Schellevis
e385b1cd3e
VPN: WireGuard: Settings - ad unique constrain on pubkey fields in model. closes https://github.com/opnsense/core/issues/7110
2024-01-07 11:46:27 +01:00
Ad Schellevis
b5008a9cbf
VPN: WireGuard: Settings - API cleanup for 24.1 [2]
2024-01-07 11:43:20 +01:00
Ad Schellevis
4dacd81ab0
VPN: WireGuard: Settings - API cleanup for 24.1
2024-01-07 11:32:41 +01:00
Ad Schellevis
7b599680bc
VPN: WireGuard: Settings - add button to generate a pre-shared key (wg genpsk). closes https://github.com/opnsense/plugins/issues/3164
2024-01-07 11:27:28 +01:00
Stephan de Wit
a40e6ae0a6
MVC: remove Phalcon migration glue ( #7117 )
...
* MVC: remove phalcon migration glue
* fix plist
* remove commented out autoloader code
2024-01-05 18:29:05 +01:00
Franco Fichtner
ac61446b21
pkg: fix plist
2024-01-05 14:50:37 +01:00
Franco Fichtner
001f5e2a9a
firmware: add upgrade hint for first RC
2024-01-05 14:00:54 +01:00
Franco Fichtner
a933d2b0a8
firmware: add fingerprint for 24.1
2024-01-05 13:59:44 +01:00
Ad Schellevis
43a1743749
VPN: OpenVPN: Instances - (optional) ocsp check, fix "pass" criteria, result should be good and verified. ( https://github.com/opnsense/core/pull/7082 , https://github.com/opnsense/core/issues/7114 )
2024-01-04 21:11:51 +01:00
Ad Schellevis
57f0175a94
System: Trust: Revocation - add ocsp index.txt file download, needed for demonstration purposes ( https://github.com/opnsense/core/issues/7114 ), minor bugfix in previous
2024-01-04 20:19:01 +01:00
Ad Schellevis
043a3dd756
VPN: OpenVPN: Instances - (optional) ocsp check, make sure to flush our CA when ocsp is enabled and improve logging ( https://github.com/opnsense/core/pull/7082 , https://github.com/opnsense/core/issues/7114 )
2024-01-04 19:30:25 +01:00
Ad Schellevis
da5b772ba1
System: Trust: Revocation - add ocsp index.txt file download, needed for demonstration purposes ( https://github.com/opnsense/core/issues/7114 )
2024-01-04 17:22:25 +01:00
Ad Schellevis
d0e43f829d
System: Trust: Revocation - show CA and CRL name and hide new CRL option when one or more CRL's are found. for https://github.com/opnsense/core/issues/7015
2024-01-04 16:15:39 +01:00
Ad Schellevis
92f282b295
mvc/bootgrid - show tooltip when grid td content doesn't fit and remove similar functionality from Reporting: Unbound DNS to avoid duplication.
2024-01-04 16:01:31 +01:00
Ad Schellevis
eed630092c
configctl - regression in 42fd27df77 , ignoring -q
2024-01-04 11:39:31 +01:00
Franco Fichtner
763d2fd4dd
ui: fix the missing dialog padding in some modals
...
It appears that dialogRef.getModalBody() is one of our
ancient modal implementations and a simple 'message' does
the trick.
2024-01-04 10:47:25 +01:00
Franco Fichtner
f1ae49b803
unbound: update root hints; closes #7115
2024-01-04 08:56:25 +01:00
Franco Fichtner
a345bb14fe
system: prep trad. Chinese for upcoming release
2024-01-04 08:49:51 +01:00
Franco Fichtner
fac978204d
mvc: more minor copyright style
...
One of these days I'll write that automated style tool...
2024-01-04 08:13:05 +01:00
Franco Fichtner
aab1e8be68
mvc: copyright header style
2024-01-04 08:00:14 +01:00
Ad Schellevis
318a1ae322
VPN: OpenVPN: Instances - add (optional) ocsp check ( https://github.com/opnsense/core/pull/7082 , https://github.com/opnsense/core/issues/7114 )
...
* initial implementation, needs some testing.
2024-01-03 21:54:49 +01:00
Franco Fichtner
9980b717e5
LICENSE: sync
2024-01-03 14:45:41 +01:00
Franco Fichtner
fed77572a6
dhcp: clean up dpulicated domain-name-servers option; closes #6751
2024-01-03 12:59:15 +01:00
Franco Fichtner
29db6b9ff4
ui: patch all the other spots
2024-01-03 12:06:50 +01:00
Shane Lord
27dcad8403
ui: include meta tags for standalone/full-screen on Android & iOS ( #6696 )
...
Add meta tags for Android and iOS to allow the WebUI to run in fullscreen/standalone mode on mobile browsers.
2024-01-03 12:03:24 +01:00
doktornotor
44d9a11bb8
Add word break in interface_statistics.widget.php ( #7106 )
...
* Add word break in interface_statistics.widget.php
* Add word break to interface descriptions as well
2024-01-03 11:04:01 +01:00
