7082 Commits

Author SHA1 Message Date
Franco Fichtner
f082310e39 firewall: add tos/dscp values; closes #1623 2017-05-07 12:32:25 +02:00
Franco Fichtner
4344115cf3 Revert "firewall scrupt, 0x0 is not a valid value, https://github.com/opnsense/core/issues/1623"
This reverts commit 2fa53c9e8541326bba8cb2f9b452d0ed210706ef.

This needs fixing in the kernel instead :)
2017-05-06 20:19:08 +02:00
Ad Schellevis
2fa53c9e85 firewall scrupt, 0x0 is not a valid value, https://github.com/opnsense/core/issues/1623 2017-05-06 10:02:34 +02:00
Ad Schellevis
b16ea82258 vlan/edit add description, closes https://github.com/opnsense/core/issues/1621 2017-05-06 09:56:00 +02:00
Jorge Schrauwen
d3492abdef Allow CNAME overrides for unbound (#1617)
* Allow CNAME overrides for unbound

We allow for CNAME to be used in the host override for unbound.
This closes #1614.

* Make sure the cname field is filled in on edit.
2017-05-05 22:29:30 +02:00
Franco Fichtner
b792c9fb9e rc: fix issues with bogus renewal 2017-05-05 20:49:51 +02:00
Franco Fichtner
c2e0d912f6 dhcp: fix a crash report 2017-05-05 17:47:00 +02:00
Franco Fichtner
457077686e ipsec: enable ca field for hybrid and mutual rsa xauth
PR: https://forum.opnsense.org/index.php?topic=5120.0
2017-05-05 14:49:28 +02:00
Ad Schellevis
5376a0ece5 rework prev 2017-05-05 14:35:31 +02:00
Ad Schellevis
834ccbe0f7 fixup_default_gateway suppress stderr 2017-05-05 12:27:42 +02:00
Ad Schellevis
6009ab939d gwlb, bug in return_gateway_groups_array() leading in always selecting the default gateway. check should have been, this interface is up or none are up. 2017-05-05 11:57:23 +02:00
Ad Schellevis
575c64400d gateway failover, typo in fixup_default_gateway() leading to not switch no gw down 2017-05-05 11:36:10 +02:00
Franco Fichtner
c8ef950cf7 inc: rejoin config.lib.inc and config.inc, fix Erik's copyright
See: https://github.com/pfsense/pfsense/commit/12df7edc
2017-05-05 08:07:01 +02:00
Franco Fichtner
27a92e913d test: phpunit package name changed with version bump 2017-05-05 07:31:34 +02:00
Franco Fichtner
cde9b8f8dd rc: stop depending on config.lib.inc instead of config.inc
Looks like the reason for this file has gone.  We shall merge
the code into config.inc soon.
2017-05-04 22:41:00 +02:00
Ad Schellevis
0280a875ed pconfig_to_address, don't save range when $endport is 0, closes https://github.com/opnsense/core/issues/1611 2017-05-04 20:49:36 +02:00
Ad Schellevis
2d2771acb3 filter, skip well-known ports for ranges, closes https://github.com/opnsense/core/issues/1605 2017-05-04 20:21:31 +02:00
Ad Schellevis
89784b841a filter, alias, don't reload immediately after delete, closes https://github.com/opnsense/core/issues/1601 2017-05-04 19:57:16 +02:00
Ad Schellevis
320cc256aa routes->status, destination not unique. for https://github.com/opnsense/core/issues/1609 2017-05-04 19:45:05 +02:00
Franco Fichtner
bd89a66cdb src: whitespace sweep 2017-05-04 17:09:54 +02:00
Franco Fichtner
3386053709 webgui: clean up after rework 2017-05-04 16:59:51 +02:00
Ad Schellevis
f532215538 fix prev. 2017-05-04 16:30:19 +02:00
Ad Schellevis
cb08677593 webgui, refactor rc.php_ini_setup into standard template, rename webuicompression to compression and split help text 2017-05-04 16:12:53 +02:00
Ad Schellevis
ff690a030f webgui, restart wrong order for generating php.ini 2017-05-04 10:52:13 +02:00
Ad Schellevis
d71fbf0df0 webgui, allow use of output compression for dynamic content. in same cases saves approx. 90% of datatransfer to client, at some cpu cost. default Off 2017-05-04 10:48:41 +02:00
evbevz
7560c61754 Update phpDynDNS.inc
An API exception occured
Error at /usr/local/etc/inc/plugins.inc.d/dyndns/phpDynDNS.inc:92 - Methods with the same name as their class will not be constructors in a future version of PHP; updatedns has a deprecated constructor (errno=8192)
2017-05-03 14:46:43 +02:00
Franco Fichtner
1146fb24c3 interfaces: error is handled, no need for crash report 2017-05-03 14:39:07 +02:00
Franco Fichtner
ecace09a31 firewall: only retry in cron mode 2017-05-03 06:06:52 +02:00
Franco Fichtner
ef1dc387c4 firewall: don't fork bogons update, just retry 5 times and exit
PR: https://forum.opnsense.org/index.php?topic=5099.0
2017-05-03 06:00:20 +02:00
Ad Schellevis
212f51a6e8 filter, framework. add "gateway" implementation. disable the setGateways/setGatewayGroups for now, used as placeholder. 2017-05-02 21:11:20 +02:00
Franco Fichtner
1417414b90 firewall: fix missing cron argument on retry
PR: https://forum.opnsense.org/index.php?topic=5099.0
2017-05-02 18:20:44 +02:00
Ad Schellevis
2abbf0dc43 firewall_nat_edit.php, missing selectpicker refresh 2017-05-02 07:59:46 +02:00
Franco Fichtner
15f4866246 rc: align this even more... 2017-05-02 07:30:01 +02:00
Franco Fichtner
2d42d84355 system: value is ptional so only validate if there #1581 2017-05-02 06:48:53 +02:00
Franco Fichtner
f399f3faa7 rc: tweak previous, better name for rc script 2017-05-02 06:09:22 +02:00
Franco Fichtner
4c01a93510 rc: small tweaks on previous 2017-05-02 05:55:58 +02:00
Ad Schellevis
f5c25d7252 firewall/nat, disable nordr controls. closes https://github.com/opnsense/core/issues/1585 2017-05-01 20:42:31 +02:00
Ad Schellevis
765bfbb4b3 Revert "firewall: do not hide associated rule settings from no-rdr #1585"
This reverts commit 6eda8aec2f0b736461aaa399d7c8da647292c717.
2017-05-01 20:28:56 +02:00
Ad Schellevis
7596738104 CARP, add option "Disable preempt", move preempt to later boot stage. for https://github.com/opnsense/core/issues/1557 2017-05-01 20:25:40 +02:00
Franco Fichtner
6eda8aec2f firewall: do not hide associated rule settings from no-rdr #1585 2017-05-01 13:10:20 +02:00
Franco Fichtner
6d443755f0 system: fix off by one and add validation; closes #1581 2017-05-01 13:01:39 +02:00
Franco Fichtner
852657c789 firewall: support tag/tagged for manual outbound NAT; closes #1586 2017-05-01 12:36:41 +02:00
Ad Schellevis
7a78cc996d Trust, fix autofill CA fields, closes https://github.com/opnsense/core/issues/1575 2017-04-30 15:26:15 +02:00
Franco Fichtner
d79c1acf57 system: fix crash report
If configd doesn't respond the JSON is not available, which we really
need a wrapper for doing this fallback all the time and maybe even
with error reporting inside that returned array.
2017-04-30 15:08:26 +02:00
Ad Schellevis
3abd54ae49 style 2017-04-30 11:58:17 +02:00
Ad Schellevis
cd3a9dff8f is_ipaddrv6() also validates subnets, closes https://github.com/opnsense/core/issues/1579 2017-04-30 11:48:14 +02:00
Ad Schellevis
daa58810fe OpenVPN servers using udp6 or tcp6 fail to start, closes https://github.com/opnsense/core/issues/1576 2017-04-30 11:30:55 +02:00
Franco Fichtner
2b0cb7bed3 mvc: tighten previous 2017-04-29 16:18:14 +02:00
Franco Fichtner
a14da189f8 mvc: try to fix crash report
Seems like years ago when PHP 5.5 had trouble iterating non-
existing arrays PHP 7 introduced a new problem with nodes
that seem to be set but no longer available, yielding:

    PHP Warning:  OPNsense\Base\FieldTypes\InterfaceField::eventPostLoading():
      Node no longer exists in /usr/local/opnsense/mvc/app/models/OPNsense/Base/FieldTypes/InterfaceField.php on line 132

The same thing happened in the acme-client plugin and was
allegedly fixed with the following code.  Even if this doesn't
help it is harmless and we'll see through the crash reporter
soon enough.
2017-04-29 16:03:28 +02:00
Franco Fichtner
d9f19e0752 pkg: depend on OpenVPN 2.4 for the next -devel build
Now that tools can build several versions of the same software, we
can have -devel depend on a different one than the release.  This
helps with prebuilt testing and easier testing for interested parties.

Should your manual upgrade break at the moment, the easiest solution is:

    # make upgrade CORE_OPENVPN=23
2017-04-29 15:40:44 +02:00