lucaspalomodevelop/core
1
0
Fork 0
mirror of https://github.com/lucaspalomodevelop/core.git synced 2026-03-14 08:34:39 +00:00
Code Issues Packages Projects Releases Wiki Activity
12,293 Commits 1 Branch 0 Tags
Commit Graph

11286 Commits

Author SHA1 Message Date
Franco Fichtner
ecec55ca0c captive portal: no longer needed 2021-01-05 15:52:02 +01:00
Franco Fichtner
8c91019880 system: ok, extra mile on previous 2021-01-05 15:45:59 +01:00
Franco Fichtner
f8844af85d system: unify code to extract issuer/subject 
The code was adding an extra ", " at the end.
 2021-01-05 15:31:33 +01:00
Franco Fichtner
444b8f405e system: TLS compatibility in custom cipher option for now 2021-01-05 15:01:12 +01:00
Ad Schellevis
d9891b1ff9 filter/aliases: minor regression in maintaining target alias file (/var/db/aliastables/%s.txt). when it's either changed, expired or simply not there, it should dump the contents before loading it with pfctl 2021-01-05 14:52:44 +01:00
Franco Fichtner
f29c0b9728 system: pick up recommendations from #4533 
Since the new default is TLS 1.2 only use the upstream recommended
list and fall back to TLS 1.1 and above for less secure ciphers if
the user specificed them manually.

We could support TLS 1.3 now but that seems to be an exclusive option
without a fallback.
 2021-01-05 13:46:30 +01:00
Franco Fichtner
a90ecbab5f system: generate a better self-signed certificate 2021-01-05 13:29:56 +01:00
Franco Fichtner
cf609e2e6a src: small style update 2021-01-05 09:12:02 +01:00
Franco Fichtner
9e2f42abb8 src: style sweep 2021-01-05 08:38:10 +01:00
Franco Fichtner
683f452295 firmware: add fingerprint for 21.1 2021-01-04 14:49:16 +01:00
Franco Fichtner
7216e3a241 system: allow self-signed renew for web GUI; closes #4567 
The command to issue a reset is:

  # configctl webgui restart renew
 2021-01-04 11:28:30 +01:00
Franco Fichtner
e609494b59 system: adjust lifetime to new recommendation 2021-01-04 11:03:33 +01:00
Franco Fichtner
f187c63502 openvpn: adjust lifetime to new recommendation 2021-01-04 11:03:09 +01:00
Franco Fichtner
4e0fdb516a firewall: add type 128 to outgoing IPv6 essentials #4565 2021-01-03 21:39:52 +01:00
Franco Fichtner
7fda1670ce interfaces: l2tp/pptp cleanup; closes #2707 
The interfaces are created by mpd5 daemon during configuration.
We do not seem to have more than one issue here: IPv6 disable
is too soon but that is easily fixed.  Device creation moves
on ok and there is no apparent error in functionality with or
without it.

While here fix the link when a $pppid is set and properly protect
the redirect url.  Previously empty() was too strict and it ignored
$pppid of zero.

Also remove spurious "IP Address" help text from PPP device
configuration.
 2021-01-03 20:45:58 +01:00
Franco Fichtner
6b407b51dd openvpn: fix typo in wizard redirect 2021-01-03 20:42:35 +01:00
Ad Schellevis
f3e6a227e5 filter: refactor filter_rules_legacy while fixing antispoof issues on bridge interfaces. closes https://github.com/opnsense/core/issues/4564 2021-01-03 14:18:13 +01:00
Lorenzo Milesi
074ccb9a15
Nextcloud backup: allow subdir (#4077) 2021-01-02 10:53:03 +01:00
Franco Fichtner
a69351722c firmware: proper path to pkg-static 2021-01-01 20:04:25 +01:00
Ad Schellevis
06b1804a3d firewall rules, type in for for https://github.com/opnsense/core/issues/4493 closes https://github.com/opnsense/core/issues/4562 2020-12-31 17:31:16 +01:00
Franco Fichtner
921b7c69f0 firmware: emulate -s for core package 2021-01-01 10:15:27 +01:00
Ad Schellevis
7331b2717b Firewall / live log - add manual refresh button. closes https://github.com/opnsense/core/issues/4550 2020-12-26 16:03:58 +01:00
Ad Schellevis
aa8a6ea717 Reporting / traffic: bugfixes and improvements to "top talkers" tab. while here add cumulative numbers, although the numbers will never be very accurate, it's not worse than it was when using rate in the previous version. 2020-12-26 13:21:33 +01:00
Ad Schellevis
4186f2bbe5 Reporting / traffic: add "top talkers" tab which shows the current (and max) bandwith usage per ip address sorted by total (in+out). 
some people seem to miss the numbers, since the top host graph uses the same information over time, it wouldn't hurt to add a tab containting the raw numbers for the selected interfaces.
The current version doesn't limit the number of results, we might need to add a limit at some point in time, depending on how many results iftop samples.

general remarks:

o total amount of traffic is not being displayed, although we could count the "cumulative" from iftop, the numbers would always be flawed (since sampled with an interval)
o no reverse lookups, maybe for a future version, let's first see if this helps.
o hosts not seen for 120 seconds will automatically be removed from the list (fixed ttl)
 2020-12-25 15:14:13 +01:00
kulikov-a
b4104cf0a3
QueryFilter.php: allow underscore in filter string (#4548) 2020-12-24 16:06:02 +01:00
Ad Schellevis
6c1b8a993e DHCPDv4: hostname validation should include domain, missed interface domain. ref https://github.com/opnsense/core/issues/4544 2020-12-23 15:00:56 +01:00
Ad Schellevis
51c04e7abf DHCPDv4: hostname validation should include domain. closes https://github.com/opnsense/core/issues/4544 2020-12-23 14:33:24 +01:00
Ad Schellevis
e686331888 Firewall:aliases - incorrect validation message for network type, addresses and hostnames are not allowed, only networks. 2020-12-22 09:44:38 +01:00
Franco Fichtner
2053a24600 src: more EOD/EOF usage with missing newline 
Not fatal but better to fix style now.
 2020-12-21 21:20:33 +01:00
Ad Schellevis
28fef1f4e9 xmlrpc: when debug output is enabled, show number of bytes received. 2020-12-21 19:37:10 +01:00
Ad Schellevis
1adefd7440 DNSmasq: use domain override for static hosts, closes https://github.com/opnsense/core/pull/4539 2020-12-21 11:21:55 +01:00
Ad Schellevis
8644af058c HAsync(xmlrpc) : cleanup rc.filter_synchronize and expose "debug" parameter to output exchanged data. 
/usr/local/etc/rc.filter_synchronize debug

ref https://github.com/opnsense/core/issues/4533
 2020-12-21 11:06:24 +01:00
Ad Schellevis
24b0d9122a Reporting/Traffic: safeguard localstorage for https://github.com/opnsense/core/issues/4512 2020-12-21 09:22:47 +01:00
Franco Fichtner
31dee2dfcc xmlrpc: err, what, send EOL for #4533 2020-12-20 21:14:59 +01:00
Ad Schellevis
43d4a64350 Reporting/Traffic: persist interface selection using localStorage. closes https://github.com/opnsense/core/issues/4512 2020-12-20 19:35:28 +01:00
Franco Fichtner
93f5a9622b system: lighttpd mod_compress -> mod_deflate migration 2020-12-20 10:55:14 +01:00
Franco Fichtner
adcade2fed system: tell lighttpd >= 1.4.56 to disable TLS on HTTP 2020-12-18 10:57:30 +01:00
Ad Schellevis
03f71e97e9 MVC:Config make sure isArraySequential() is only true on array input (move previous check). closes https://github.com/opnsense/core/issues/4530 2020-12-17 18:04:43 +01:00
Franco Fichtner
d6f32818b9 firmware: add version output to audit logs; closes #4375 2020-12-17 10:57:35 +01:00
Ad Schellevis
8d8bcb7e94 gateways: dpinger. ignore disabled gateways in monitor services. 2020-12-16 12:17:42 +01:00
garlic17
496c2ef24f
Display remote host in IPsec Status Overview (#4234) 
Add a new 'Remote Host' column to the IPsec status overview page.
 2020-12-16 12:04:28 +01:00
Ad Schellevis
5509fabfa3 gateways: dpinger. choose a better bind candidate for IPv4. 
when an interface offers multiple addresses, we should at least try to bind to the address which can access the gateway, for example an interface with the following addresses configured:

10.0.1.1/24
10.0.2.1/24
10.0.3.1/24

and a gateway configured on 10.0.2.100 should try to bind on 10.0.2.1. when we can't find a candidate, fall back to the first. closes https://github.com/opnsense/core/pull/4221
 2020-12-16 11:56:46 +01:00
Ad Schellevis
2ee04640a7 interfaces: non functional (minor) style fix 2020-12-16 11:23:19 +01:00
Ad Schellevis
dfa4f6d4b1 widgets: spacing for https://github.com/opnsense/core/pull/4108 2020-12-16 11:03:43 +01:00
Ad Schellevis
0a8806f59b Merge branch 'Add-port-to-filter-log-widget' of https://github.com/marjohn56/core into marjohn56-Add-port-to-filter-log-widget 2020-12-16 10:58:39 +01:00
Franco Fichtner
b515105e12 firmware: -d will for install, but we just want to check 2020-12-16 10:20:21 +01:00
Ad Schellevis
18862d4409 ACL: minor fix for performance improvement in https://github.com/opnsense/core/issues/4508, when groups contain non existing users we should discard the uid found, 2020-12-14 21:25:42 +01:00
Gabriel Mazzocato
80dc51e541
Fix DUID - LL description in Settings | Interfaces (#4521) 2020-12-14 10:57:07 +01:00
Franco Fichtner
b206ad8443 firmware: fix some issues with missing repository on server 2020-12-13 11:40:13 +01:00
Ad Schellevis
9cab5ee982 ACL: performance improvement loading user and group rights. 
o cache user id's so we don't have to traverse the config again
o limit the number of (string) type casts, since on larger quantities they really do cost time...

closes https://github.com/opnsense/core/issues/4508
 2020-12-11 22:08:02 +01:00