Franco Fichtner
ee4496702d
openvpn: bring instances into server field
...
While here condense the input a little and show the default
port in case it was left empty.
PR: https://forum.opnsense.org/index.php?topic=35337.0
2023-08-14 12:11:22 +02:00
Franco Fichtner
0a4eacfb6a
openvpn: add tun-mtu/fragment/mssfix combo for CSOs #6703
2023-08-14 11:33:37 +02:00
Ad Schellevis
d5c6cc24d3
Interfaces: Virtual IPs: Status - prevent IPv6 mismatches when using compressed format. closes https://github.com/opnsense/core/issues/6742
2023-08-14 09:29:53 +02:00
Franco Fichtner
a7c1facc09
src: style sweep
2023-08-11 09:01:36 +02:00
Ad Schellevis
0ab0bf3095
VPN: IPsec: Pre-Shared Keys - add colon to supported characterlist for id fields. closes https://github.com/opnsense/core/issues/6727
2023-08-10 19:58:27 +02:00
Ad Schellevis
8f51311423
VPN: OpenVPN: Instances - properly map user groups for authentication to align with legacy code. closes https://github.com/opnsense/core/issues/6732
2023-08-10 16:26:09 +02:00
Ad Schellevis
aa81bbdace
Monit - update model version
2023-08-10 14:34:36 +02:00
Stephan de Wit
80e4bec768
dhcpd: staticmap output does not contain device names
2023-08-10 14:34:04 +02:00
Stephan de Wit
5c3235872a
dhcpd: missing strtoupper()
2023-08-10 14:19:36 +02:00
Stephan de Wit
69ca6343b9
dhcpd6: UI: interfaces and IPs should also clip properly
2023-08-10 14:15:53 +02:00
Stephan de Wit
7c7e508497
dhcpd6: refactor LeasesController
...
like the ipv4 refactor, mapping an IP to an interface
is now done using ifconfig. For ipv6, the chances of an
interface being missed using only NDP and configuration
data are pretty high. This is largely due to most
setups not having a static IP configured, but are instead
set to track an interface with DHCP functionality enabled
under the hood by default. NDP data is also ephemeral by
nature
2023-08-10 14:07:47 +02:00
Stephan de Wit
39c4f05183
dhcp: leftover debug
2023-08-10 13:40:37 +02:00
Stephan de Wit
7870064a62
dhcp: refactor LeasesController
...
hopefully the last bit, this will drop parsing the config
for configured dhcp interfaces and will instead match
it on the output of ifconfig. While this would normally not
cause issues for ipv4, this is mostly done to be symmetrical
with the upcoming ipv6 leases change, where it is much more
likely for interfaces to be missed.
2023-08-10 13:29:17 +02:00
Franco Fichtner
93f8b70cbd
system: sometimes dpinger starts without a socket
...
Which isn't ideal, because then we cannot get any more readings until
it is being restarted.
2023-08-10 12:53:23 +02:00
Franco Fichtner
77ac3f5c93
system: assume first status as 'down' to get initial alert #6728
...
In some scenarios this is needed to recover the system correctly,
e.g. when the default gateway selected during boot is not actually
plugged in.
2023-08-10 12:15:12 +02:00
Franco Fichtner
3844bc5014
system: previous was more correct, adjust dashboard too
2023-08-10 11:10:39 +02:00
Stephan de Wit
329ca62612
dhcpv4: prevent reverse lookups during arp fetch
2023-08-10 10:49:59 +02:00
Franco Fichtner
4ecbd9240d
system: ok so we report up status for non-dpinger gateways here..
2023-08-10 10:39:46 +02:00
Michael
f8572a1274
Update Monit.xml ( #6731 )
2023-08-10 10:31:29 +02:00
Franco Fichtner
457f6bedf5
system: switch to config-data, not runtime data #6728
...
While here clean up excessive rewrites of data we already have filled.
2023-08-10 10:12:23 +02:00
Franco Fichtner
1e74ff3b3d
system: shorten previous then
2023-08-10 08:31:37 +02:00
Franco Fichtner
8967be64c5
system: remove unneeded changes as well
2023-08-10 08:25:42 +02:00
Franco Fichtner
cf61c3d1e9
system: fixup
2023-08-10 08:22:57 +02:00
Franco Fichtner
26ddbd1e75
system: ironically enough gatewaysIndexedByName(true) is unreliable
...
We get all the gateways, but there is and override which moves the
gateway into disabled state even though we need to know about the
configured state alone, not runtime state. Use the service info
instead.
2023-08-10 08:20:56 +02:00
Franco Fichtner
15d993af50
system: run watcher as soon as a gateway is configured for monitoring #6728
2023-08-10 08:05:00 +02:00
Ad Schellevis
605042ada8
VPN: OpenVPN - fix seperator for redirect-gateway attribute in Instances and CSO. closes https://github.com/opnsense/core/issues/6726
2023-08-09 17:09:34 +02:00
Franco Fichtner
13389c823e
interface: fix special device name chars used in shell variables
2023-08-09 13:24:25 +02:00
Allan Que
ad097da1be
ntpd: fix 'Soliciting pool server'
...
From ntp.conf man page:
if you want to use servers from a pool directive and also want to use nopeer by
default, you'll want a restrict source ... line as well that does not include
the nopeer directive.
2023-08-09 06:42:30 +02:00
Stephan de Wit
f09d4e40f5
dhcpv6: missing string cast
2023-08-08 15:21:08 +02:00
Stephan de Wit
b842980bb4
dhcp: typo
2023-08-08 14:46:49 +02:00
Stephan de Wit
cab341129a
dhcpv6: fix previous
2023-08-08 14:38:20 +02:00
Stephan de Wit
410049d5f5
dhcpv4/6: account for null values for static leases
2023-08-08 13:27:59 +02:00
Ad Schellevis
43aa7761c4
Firewall: NAT: Port Forward - do not clone 'associated-rule-id', closes https://github.com/opnsense/core/issues/6723
2023-08-08 13:15:58 +02:00
Stephan de Wit
a88fae84f6
dhcpv4/6: break on words to improve date positioning
2023-08-08 13:03:20 +02:00
Stephan de Wit
c605175d85
dhcpv4/6: UI tweaks to improve readability of leases pages
2023-08-08 12:59:23 +02:00
Stephan de Wit
a2b9144233
dhcpv6: fix lease status/interface
2023-08-08 11:43:07 +02:00
Franco Fichtner
9fcbafaf68
openvpn: fix previous
...
Execute both commands regardless of their return value.
2023-08-08 10:33:13 +02:00
Ad Schellevis
9dc2f01f27
VPN: OpenVPN: Instances - remove arbitrary upper bounds on some integer values. closes https://github.com/opnsense/core/issues/6720
2023-08-07 18:18:46 +02:00
ツ
54311721bc
Update ET-Open to match Suricata 7.0 ( #6685 )
2023-08-07 13:13:40 +02:00
Ad Schellevis
8de0986673
Services: Unbound DNS: Overrides / Domain - fix regression in a556df4a85. ref https://github.com/opnsense/core/issues/5798#issuecomment-1666870236
2023-08-06 16:55:27 +02:00
Ad Schellevis
fd6c824a5b
Firewall: Shaper - add "ipv6-icmp" to protocol list, closes https://github.com/opnsense/core/issues/6714
2023-08-06 16:41:29 +02:00
Ad Schellevis
48462b4dfd
VPN: OpenVPN: Client Export - typo in legacy export. ref https://forum.opnsense.org/index.php?topic=35229.msg170912
2023-08-06 13:50:07 +02:00
Ad Schellevis
049fca58fe
VPN: OpenVPN: Instances - fix race condition when using CRL's in new OpenVPN instances, on configure, pass event to pluginctl to flush the requested crl's. closes https://github.com/opnsense/core/issues/6710
2023-08-04 16:58:25 +02:00
Ad Schellevis
73282df56d
VPN: OpenVPN: Client Specific Overrides - nothing to "apply" here, settings change on login. remove alert-info panel on change
2023-08-04 16:12:32 +02:00
Ad Schellevis
01ba18970a
VPN: OpenVPN: Client Export - push auth "digest" into export config, for https://github.com/opnsense/core/issues/6708
2023-08-04 15:21:05 +02:00
jeremiah-rs
993585c564
Update opnsense.xml
...
Updated LeaseWeb and NYC BUG mirrors to use HTTPS
2023-08-04 08:43:08 +02:00
Franco Fichtner
7333f37ed0
firewall: don't need this failsafe for one caller
2023-08-03 16:32:21 +02:00
Franco Fichtner
8a216d6a77
dhcp: fix validation for static entry requirement; closes #6252
...
IPs and host names can be duplicated just fine.
2023-08-03 11:25:27 +02:00
Franco Fichtner
ae2b9e3e5e
interfaces: only include interfaces.inc
...
It's debatable but in general *.lib.inc is side-effect-free code
for the library at hand and not to be grabbed by outside scripts
directly. The library will include the needed file anyway.
2023-08-02 15:26:33 +02:00
Franco Fichtner
d610ab7811
unbound: properly translate selectpicker title
2023-08-02 09:50:38 +02:00