Ad Schellevis
f12e4e4b2f
don't try to enable legacy Xauth and radius at the same time + fix bug with $ph1ent
2017-01-31 21:29:06 +01:00
Franco Fichtner
4f4791c405
src: so this is 17.7.a
2017-01-30 21:35:22 +01:00
Ad Schellevis
78e265796f
add radius server selection, move some code.
2017-01-30 21:00:17 +01:00
Ad Schellevis
661f6afd4d
Merge branch 'eap-radius/2-try' of https://github.com/GurliGebis/opnsense_core into GurliGebis-eap-radius/2-try
2017-01-30 19:47:45 +01:00
Franco Fichtner
0dc512eea0
system: nobody caught this typo ;(
2017-01-30 18:15:41 +01:00
Ad Schellevis
e77d568e70
same as previous
2017-01-30 12:41:57 +01:00
Ad Schellevis
3a96c1dd5d
isset() vs !empty(), when the legacy code stores false.... it eventually translates into a missing entry after save, before save, it's set with false....
2017-01-30 12:36:16 +01:00
Franco Fichtner
7f230df702
www: fix a crash report in url_safe()
2017-01-30 08:54:18 +01:00
Franco Fichtner
a291ec2441
src: some baby steps with phpstorm inspection
2017-01-26 10:36:41 +01:00
Franco Fichtner
e802122f06
config: fix typo; closes #1349
2017-01-25 09:59:10 +01:00
gurligebis
1ccd615843
ipsec: implement config generation for eap-radius
2017-01-24 21:38:59 +00:00
gurligebis
c1dc943141
ipsec: improved strongswan.conf readability by fixing indenting
2017-01-24 20:48:38 +00:00
Franco Fichtner
15c1e7148a
system: be pedantic about output
2017-01-23 18:12:06 +01:00
Franco Fichtner
ed2ded1c04
system: make vt/sc configurable; closes #1343
2017-01-23 18:06:34 +01:00
Ad Schellevis
21be9faf45
replace csrf with phalcon's implementation
...
PR: https://github.com/opnsense/core/issues/918
2017-01-20 22:05:41 +01:00
Franco Fichtner
9eeca3405b
rc: always restore native /var layout on boot
2017-01-19 15:10:05 +01:00
Ad Schellevis
4dbc24ef82
(filter) move bogons, without breaking application logic, for https://github.com/opnsense/core/issues/1331
2017-01-16 09:29:39 +01:00
Franco Fichtner
c5b1ddef72
ddb: /etc/ddb.conf is perfectly fine, always use it
2017-01-15 12:07:39 +01:00
Franco Fichtner
bd188bd895
system: correctly apply /dev/pf flags if loader.conf was missing
2017-01-10 17:15:45 +01:00
Franco Fichtner
397c95f89c
interfaces: better safe than sorry
2017-01-09 08:59:09 +01:00
Franco Fichtner
e97c4f1d11
interfaces: fix a crash report
2017-01-09 08:45:31 +01:00
Franco Fichtner
6c6b8f1d29
interfaces: fix a crash report
...
There could be another error in here with the reported IPv6 issues...
2017-01-09 08:13:08 +01:00
Franco Fichtner
6801b20c06
src: use the opportunity to scrub supurious ";;" spots
2017-01-07 10:46:06 +01:00
Franco Fichtner
fe5eb31a37
firmware: update these numbers
...
i386 is less storage-intense, but a reasonable amount of
free storage space is recommended in any case.
2017-01-05 15:10:06 +01:00
Franco Fichtner
fadc0ab5ad
load balancer (relayd): remove from core
2017-01-03 23:40:46 +01:00
Franco Fichtner
44e4ae85c0
upnp: remove from core
2017-01-03 23:29:13 +01:00
Franco Fichtner
130d52da8f
wol: remove from core
2017-01-03 23:21:10 +01:00
Franco Fichtner
c91841afd6
igmp proxy: remove from core
2017-01-03 23:09:19 +01:00
Franco Fichtner
52184b09d3
snmp: remove from core
2017-01-03 22:58:42 +01:00
Franco Fichtner
80eefebf42
pkg: also rc.shutdown hook, better for ACPI shutdown
2017-01-03 17:54:51 +01:00
Franco Fichtner
d14bfe618f
bump copyright; happy new year!
2017-01-01 14:39:47 +01:00
Franco Fichtner
54e63dc41f
system: options for IDS and Web Proxy XMLRPC sync; closes #1319
2016-12-31 15:12:32 +01:00
Franco Fichtner
3773faf7bf
wol: fixed plist, but did not add file :D
2016-12-31 15:07:06 +01:00
Franco Fichtner
9fb7a30568
system: more migration of xmlrcp sync settings #1319
2016-12-31 15:04:19 +01:00
Franco Fichtner
2e44a885ca
plugins: xml sync refactor for ipfw features #1319
2016-12-31 14:11:51 +01:00
Ad Schellevis
99dac4ab7e
(webconfigurator) optionally limit ciphers. closes https://github.com/opnsense/core/issues/1301
2016-12-27 17:23:01 +01:00
Franco Fichtner
12882429d1
system: split up Portuguese for upcoming translations
2016-12-21 07:15:49 +01:00
Franco Fichtner
7097b1d016
firewall: consolidate anti-lockout behaviour; closes #1304
...
Assume LAN unless we only have one interface and that is WAN.
If LAN is not there, no problem: the text will either show
WAN if it works or show LAN and do nothing.
We could argue that 1 interface that is not WAN or LAN is
possible and should receive anti-lockout too, but this would
change the previous behaviour too much and is not generally
possible from the GUI or console.
2016-12-20 14:23:51 +01:00
Franco Fichtner
f8959e1a40
rc: oddities with vt(4), keep sc(4) for now
2016-12-20 08:21:38 +01:00
Franco Fichtner
6d46060214
Revert "system: strict serial mode, need to test this"
...
Don't need this, it was a comaptibility test. The gained
flexibility from -D is far more important.
This reverts commit dfb094112e3297911ddbdfa478d3bdc129d22d22.
2016-12-20 08:00:11 +01:00
Franco Fichtner
7792d8ad7f
auth: one more locking vs. no-password issue
2016-12-20 07:02:45 +01:00
Franco Fichtner
23cf4fe10f
auth: when auth is integrated, don't write passwords
...
This finally repairs ssh key login. :)
2016-12-19 23:14:23 +01:00
Ad Schellevis
4ebccaa233
(config) enable aesni in default config, closes https://github.com/opnsense/core/issues/1259
2016-12-19 19:41:36 +01:00
Franco Fichtner
4ac59b3485
auth: one bug down, but I think there's another
2016-12-19 18:59:21 +01:00
Franco Fichtner
7f91fe62b1
src: back out previous, we're further securing PAM
2016-12-19 11:08:08 +01:00
Franco Fichtner
c48cf61f4a
rc: remove translations from console
2016-12-19 07:41:47 +01:00
Franco Fichtner
af1928de6e
inc: remove unused translations in obsolete migration
2016-12-19 07:20:35 +01:00
Franco Fichtner
d3376f7f10
src: webConfigurator -> web GUI
2016-12-19 07:16:08 +01:00
Franco Fichtner
dfb094112e
system: strict serial mode, need to test this
2016-12-18 23:24:17 +01:00
Franco Fichtner
a7f01e99d7
system: "web GUI" is less ambiguous
2016-12-18 23:15:30 +01:00
