7054 Commits

Author SHA1 Message Date
Franco Fichtner
ef1dc387c4 firewall: don't fork bogons update, just retry 5 times and exit
PR: https://forum.opnsense.org/index.php?topic=5099.0
2017-05-03 06:00:20 +02:00
Ad Schellevis
212f51a6e8 filter, framework. add "gateway" implementation. disable the setGateways/setGatewayGroups for now, used as placeholder. 2017-05-02 21:11:20 +02:00
Franco Fichtner
1417414b90 firewall: fix missing cron argument on retry
PR: https://forum.opnsense.org/index.php?topic=5099.0
2017-05-02 18:20:44 +02:00
Ad Schellevis
2abbf0dc43 firewall_nat_edit.php, missing selectpicker refresh 2017-05-02 07:59:46 +02:00
Franco Fichtner
15f4866246 rc: align this even more... 2017-05-02 07:30:01 +02:00
Franco Fichtner
2d42d84355 system: value is ptional so only validate if there #1581 2017-05-02 06:48:53 +02:00
Franco Fichtner
f399f3faa7 rc: tweak previous, better name for rc script 2017-05-02 06:09:22 +02:00
Franco Fichtner
4c01a93510 rc: small tweaks on previous 2017-05-02 05:55:58 +02:00
Ad Schellevis
f5c25d7252 firewall/nat, disable nordr controls. closes https://github.com/opnsense/core/issues/1585 2017-05-01 20:42:31 +02:00
Ad Schellevis
765bfbb4b3 Revert "firewall: do not hide associated rule settings from no-rdr #1585"
This reverts commit 6eda8aec2f0b736461aaa399d7c8da647292c717.
2017-05-01 20:28:56 +02:00
Ad Schellevis
7596738104 CARP, add option "Disable preempt", move preempt to later boot stage. for https://github.com/opnsense/core/issues/1557 2017-05-01 20:25:40 +02:00
Franco Fichtner
6eda8aec2f firewall: do not hide associated rule settings from no-rdr #1585 2017-05-01 13:10:20 +02:00
Franco Fichtner
6d443755f0 system: fix off by one and add validation; closes #1581 2017-05-01 13:01:39 +02:00
Franco Fichtner
852657c789 firewall: support tag/tagged for manual outbound NAT; closes #1586 2017-05-01 12:36:41 +02:00
Ad Schellevis
7a78cc996d Trust, fix autofill CA fields, closes https://github.com/opnsense/core/issues/1575 2017-04-30 15:26:15 +02:00
Franco Fichtner
d79c1acf57 system: fix crash report
If configd doesn't respond the JSON is not available, which we really
need a wrapper for doing this fallback all the time and maybe even
with error reporting inside that returned array.
2017-04-30 15:08:26 +02:00
Ad Schellevis
3abd54ae49 style 2017-04-30 11:58:17 +02:00
Ad Schellevis
cd3a9dff8f is_ipaddrv6() also validates subnets, closes https://github.com/opnsense/core/issues/1579 2017-04-30 11:48:14 +02:00
Ad Schellevis
daa58810fe OpenVPN servers using udp6 or tcp6 fail to start, closes https://github.com/opnsense/core/issues/1576 2017-04-30 11:30:55 +02:00
Franco Fichtner
2b0cb7bed3 mvc: tighten previous 2017-04-29 16:18:14 +02:00
Franco Fichtner
a14da189f8 mvc: try to fix crash report
Seems like years ago when PHP 5.5 had trouble iterating non-
existing arrays PHP 7 introduced a new problem with nodes
that seem to be set but no longer available, yielding:

    PHP Warning:  OPNsense\Base\FieldTypes\InterfaceField::eventPostLoading():
      Node no longer exists in /usr/local/opnsense/mvc/app/models/OPNsense/Base/FieldTypes/InterfaceField.php on line 132

The same thing happened in the acme-client plugin and was
allegedly fixed with the following code.  Even if this doesn't
help it is harmless and we'll see through the crash reporter
soon enough.
2017-04-29 16:03:28 +02:00
Franco Fichtner
d9f19e0752 pkg: depend on OpenVPN 2.4 for the next -devel build
Now that tools can build several versions of the same software, we
can have -devel depend on a different one than the release.  This
helps with prebuilt testing and easier testing for interested parties.

Should your manual upgrade break at the moment, the easiest solution is:

    # make upgrade CORE_OPENVPN=23
2017-04-29 15:40:44 +02:00
Franco Fichtner
96318bd970 plugins: split vpn/newwanip configures 2017-04-29 15:25:25 +02:00
Ad Schellevis
025021b867 dhcpd, add interface-mtu option, for https://github.com/opnsense/core/issues/1565 2017-04-29 13:17:39 +02:00
Ad Schellevis
8e0583e993 dhcp server / static leases, issue with loading settings into form. closes https://github.com/opnsense/core/issues/1568 2017-04-29 12:23:01 +02:00
Franco Fichtner
1626ab87dc firmware: add plugin list if plugins are installed; closes #1563 2017-04-28 21:03:47 +02:00
Franco Fichtner
ae677059d1 filter: exclude IPv6 extension headers 2017-04-27 22:51:23 +02:00
Ad Schellevis
84c9cd6b3e Merge pull request #1535 from johannrichard/captive-autocorrect-fix
Fix autocomplete, autocapitalize and autocorrect in Captive Portal login form
2017-04-27 14:40:54 +01:00
Ad Schellevis
38d8b76180 Merge pull request #1560 from evbevz/squid_auth_reorder
squid.conf: reorder pre-auth plugins and local auth settings
2017-04-27 14:39:18 +01:00
Ad Schellevis
85e843f2c5 Revert "menu, replace "str_replace(array(".", "*","?", "@"), array("\.", ".*","\?", "\@"....) for preg_quote, as suggested by @fabianfrz"
This reverts commit 6658611069ae38e00b072c62c0dda3ea19b2586b.
2017-04-27 12:11:13 +02:00
Ad Schellevis
6658611069 menu, replace "str_replace(array(".", "*","?", "@"), array("\.", ".*","\?", "\@"....) for preg_quote, as suggested by @fabianfrz 2017-04-27 10:51:14 +02:00
Ad Schellevis
be9a278784 menu system, escape @ to avoid "preg_match(): Unknown modifier" on mailto: url 2017-04-26 20:14:54 +02:00
Franco Fichtner
99a3caf36b interfaces: when there are no interfaces to assign...
... the save button can still be useful.
2017-04-26 19:20:28 +02:00
Franco Fichtner
75a63aba38 webgui: replace spurious softcoding 2017-04-26 18:12:09 +02:00
Franco Fichtner
3ccff62219 pkg: fix plist, business as usual 2017-04-26 18:02:04 +02:00
Franco Fichtner
7b43870f49 system: move the webgui to the plugin system 2017-04-26 17:56:13 +02:00
Franco Fichtner
8c6c1f5ec5 system: change time zone first via @evbevz #1551 2017-04-26 16:58:02 +02:00
Franco Fichtner
6b13ff1dfe Revert "Force restart radvd on TZ change; closes #1551"
This reverts commit 36af267de333a970bedffe54766c8e1aa99b5911.
Looks like dhcp restart already does this by default now...
2017-04-26 16:42:43 +02:00
evbevz
36af267de3 Force restart radvd on TZ change; closes #1551 2017-04-26 16:36:55 +02:00
Franco Fichtner
829e0aa268 services: always restart radvd on configure for #1551 2017-04-26 16:33:08 +02:00
Franco Fichtner
de1e979f21 rc: this looks suspicious, align with IPv6 2017-04-26 08:37:12 +02:00
Franco Fichtner
97fb7d1190 openvpn: slightly tweak previous 2017-04-26 08:36:35 +02:00
evbevz
07c268425d squid.conf: reorder pre-auth plugins and local auth settings 2017-04-26 08:57:58 +03:00
theq86
2a2222a7a4 Removed unnecessary semicolon
This semicolon is not needed but seems also not to break the config.
2017-04-26 05:42:13 +02:00
Franco Fichtner
8ca337c96a rc: raise memory limit by 50%, some crash reports trigger this 2017-04-25 19:04:17 +02:00
Franco Fichtner
f7e92bebae system: crash report, sometimes even Etc/UTC is gone
In those cases the next firmware update with a base set helps, or
running this manually:

    # opnsense-update -fb
2017-04-25 18:24:07 +02:00
Franco Fichtner
6c0ef526da rc: newwanip scripts have been subject to extensive bitrot
Essentially, the scripts do the same thing, which means we can
start to align the two, maybe even merge them if we are lucky.  ;)
2017-04-25 07:50:57 +02:00
Franco Fichtner
3dca538671 mvc: translations should be single-quotes
We don't want to run variable replacement, it doesn't work for
static translations at all.
2017-04-24 16:40:03 +02:00
Franco Fichtner
a56ade1ec9 pkg: allow to change the openvpn package 2017-04-24 10:43:36 +02:00
Franco Fichtner
ca09d5a03c Revert "firmware: pkg can also change options, make sure this is caught"
This reverts commit cd379a8f102b4883f5c809352b7f600f36d86413.

Looks like this isn't entirely correct: as long as the packages is
not upgraded we can see normal package upgrades alongside pkg reinstall.
Maybe this is new since 1.10?  In any case, yay for less code.
2017-04-23 11:54:39 +02:00