James Golovich
f98f4e4f1e
Allow DNS resolver to skip entry on EmptyLabel ( #4560 )
...
* Allow DNS resolver to skip entry on EmptyLabel
A name like '.example.com' is not a valid name, but should be handled like a non existant name instead of throwing an exception
2021-08-16 19:10:07 +02:00
Ad Schellevis
cf489d1633
Interfaces - console setup. minor cleanups and fixes for https://github.com/opnsense/core/pull/4499
2021-08-16 18:23:57 +02:00
Simon
41a0a938f8
Add LAGG support to console ( #4499 )
2021-08-16 15:59:03 +02:00
Ad Schellevis
58186f8c4e
Squashed commit of the following:
...
commit 83171f8b1791aae87fc4dacedb6cc921101d8399
Author: Ad Schellevis <ad@opnsense.org>
Date: Fri Aug 13 21:44:49 2021 +0200
whitespace
commit 11990f462eaed9bc9cf2051a377d508a916a3945
Author: Ad Schellevis <ad@opnsense.org>
Date: Fri Aug 13 21:40:24 2021 +0200
OpenVPN - cleanups for https://github.com/opnsense/core/pull/4592
simplify flush tls keys.
commit 74db015f0c9963b53b1d3ea8923e1d89899d04a3
Author: Ad Schellevis <ad@opnsense.org>
Date: Fri Aug 13 21:39:28 2021 +0200
OpenVPN - cleanups for https://github.com/opnsense/core/pull/4592
refactor vpn_openvpn_client.php a bit, fix jquery change events.
commit 48c77d600bd194a65fb996c2e767c3b3bc37f81b
Author: Ad Schellevis <ad@opnsense.org>
Date: Fri Aug 13 21:15:00 2021 +0200
OpenVPN - cleanups for https://github.com/opnsense/core/pull/4592
refactor vpn_openvpn_server.php a bit, fix jquery change events.
commit 58f98abf4bddee349cc59a07266f7d9c1b5914d9
Author: vnxme <46669194+vnxme@users.noreply.github.com>
Date: Wed Feb 10 17:52:31 2021 +0300
OpenVPN: Enhance configuration - TLS-Crypt
Ensure backwards compatibility
commit 25a1c6ebf12971b1337a3ea65e31e61a38505c0f
Author: vnxme <46669194+vnxme@users.noreply.github.com>
Date: Tue Jan 12 12:15:36 2021 +0300
OpenVPN: Enhance configuration - TLS-Crypt
Make available both --tls-auth and --tls-crypt configuration options
2021-08-13 21:50:23 +02:00
Franco Fichtner
14462382dc
interfaces: correct indent in dhclient configuration
2021-08-13 13:27:23 +02:00
Gareth Owen
3ca57fae8b
DHCP: Update DNS with hostname only static entries ( #4689 )
...
DHCP static mappings that have a hostname configured but no IP address,
now update the Outbound DNS entry with the IP assigned from the pool
2021-08-12 16:52:45 +02:00
Nikolay Denev
a31ec3c1ec
Allow to specify port ranges for outgoing NAT. ( #4748 )
...
This allows to specify port ranges for NAT which is a valid pf configuration.
2021-08-12 16:43:33 +02:00
Alexander Shursha
62bebdf335
Translate widget Firewall Log. ( #4965 )
2021-08-12 16:31:42 +02:00
Robin Schneider
93902cc7d5
Traffic: Fix long comment preventing ipfw reload ( #5023 )
...
It seems that comments are limited in ipfw to 80 chars which is not
documented (at least not in the manpage `ipfw(8)`). If users
accidentally use long traffic shaper rule descriptions this limit could
be reached causing updates via the GUI apply button to be silently
ignored which will cause confusion.
`ipfw /usr/local/etc/ipfw.rules` shows the following error:
Line 77: comment too long (max 80 chars)
and exists with edit code 65.
Interestingly, a slice of up to `0:83` still works. As this is
undocumented and the error says max 80 chars I go with something
slightly below this max to account for the whitespace.
2021-08-12 16:29:56 +02:00
ツ
a3be99d8dc
Adding additional memory cache options for squid webproxy ( #5160 )
2021-08-12 16:05:00 +02:00
Franco Fichtner
8904cae0ed
interfaces: finally use -M now that we have a compat shim; closes #4850
2021-08-12 10:51:41 +02:00
Franco Fichtner
68d6d3ad50
system: accept a valid POST request please
2021-08-12 10:28:42 +02:00
Franco Fichtner
8fb15789aa
system: change rss widget feed to forum annoucements
2021-08-12 10:18:02 +02:00
Franco Fichtner
20b1f87d88
interfaces: style sweep
2021-08-11 07:58:10 +02:00
Franco Fichtner
fb133e494f
dhcp: another refactor fail
2021-08-11 07:55:50 +02:00
Ad Schellevis
25e0a639fa
Interfaces / LAGG: improve configurability, closes https://github.com/opnsense/core/issues/5157
...
o add Use flowid and Use strict options
o extend interfaces overview with various lagg properties
o show unassigned interfaces in overview so lagg parents are always visible
o fix collapse event in overview to reference by internal name in stead of description.
2021-08-10 18:36:43 +02:00
Franco Fichtner
6abd2f2ac1
Framework: name and depends targets are no longer needed
...
use -v CORE_NAME and -v CORE_DEPENDS to read them...
2021-08-10 16:50:28 +02:00
Franco Fichtner
2534705523
dhcp: wrong file for IPv6
2021-08-10 11:22:59 +02:00
Franco Fichtner
c48244ecfa
dhcp: lease removal needs a wrapper too
2021-08-10 11:21:34 +02:00
Franco Fichtner
867faa661f
dhcp: unify lease parsing loosely related to #4985
...
While here drop magic in dhcp_clean_leases() and fix
artefacts surfaced by this removal in the leases page.
2021-08-10 11:13:26 +02:00
Ad Schellevis
92ea650888
IPsec: add "automatic" type to trust Strongswan's parser, see discussion in https://github.com/opnsense/core/issues/5155
2021-08-10 10:50:17 +02:00
Ad Schellevis
d5c090b38e
IPsec: remove quoting remark in previous commit ( https://github.com/opnsense/core/issues/5155 )
2021-08-09 15:34:46 +02:00
Ad Schellevis
9963de28c0
IPsec: fix identity quoting for asn1dn and fqdn types. close://github.com/opnsense/core/issues/5155
2021-08-09 15:08:49 +02:00
Franco Fichtner
f03d978bb0
lobby: typo
2021-08-09 09:07:00 +02:00
kulikov-a
3f73088673
rulecache.py: skip empty metadata ( #5148 )
2021-08-08 11:12:48 +02:00
kulikov-a
27fdfe49c3
Aliases progress bar: small suggestions ( #5149 )
...
* alias.volt: change a bit
* pftablecount.py: count all tables from -vvsT
2021-08-08 10:47:17 +02:00
Franco Fichtner
4a919798e2
pkg: fix plist
2021-08-08 08:52:11 +02:00
Ad Schellevis
9b31fad9ed
Squashed commit of the following:
...
commit 9158a0618f7c7943a10fbcdf7b8a4950844d6133
Author: Ad Schellevis <ad@opnsense.org>
Date: Sat Aug 7 22:35:00 2021 +0200
Firewall / aliases - simplify and change https://github.com/opnsense/core/pull/5142 a bit
commit 72ad80b072e11e8ad58a82f59a395c9961eef386
Author: kulikov-a <36099472+kulikov-a@users.noreply.github.com>
Date: Wed Aug 4 23:29:09 2021 +0300
alias.volt: add limits progress bar
commit 6ba824471d9fc6186775dc6bdab815b4d1af0ce9
Author: kulikov-a <36099472+kulikov-a@users.noreply.github.com>
Date: Wed Aug 4 23:09:17 2021 +0300
AliasController.php: add getRecordsAction
commit 76de5668ff1f1225f32bd3abfc76f91c3500d753
Author: kulikov-a <36099472+kulikov-a@users.noreply.github.com>
Date: Wed Aug 4 23:02:23 2021 +0300
pfrecords.py: show tables load stats
commit 9719a8d31fd127a621c1cea219c9cd6c42bd852b
Author: kulikov-a <36099472+kulikov-a@users.noreply.github.com>
Date: Wed Aug 4 23:00:02 2021 +0300
actions_filter.conf: add pfrecords.py action
commit f106c8db128b3cdbdfb4ec79e766b84f120d4510
Author: kulikov-a <36099472+kulikov-a@users.noreply.github.com>
Date: Wed Aug 4 22:40:11 2021 +0300
update_tables.py: send error to syslog, stats file
2021-08-07 22:41:11 +02:00
Franco Fichtner
25b98610da
src: another typo
...
PR: https://forum.opnsense.org/index.php?topic=24262.0
2021-08-06 22:00:04 +02:00
Franco Fichtner
d824e7163b
unbond: fix "terrible" typo
...
PR: https://forum.opnsense.org/index.php?topic=24262.0
2021-08-06 21:42:09 +02:00
Franco Fichtner
0304b783a4
shell: when reloading reload all reachable via rc.freebsd too
...
PR: https://github.com/opnsense/core/issues/5136
2021-08-06 08:10:14 +02:00
Franco Fichtner
9506f4c1c6
firmware: now that we use TEE we should define it #5136
2021-08-05 14:27:30 +02:00
Franco Fichtner
af7543e79b
firmware: visibility issue on #5136
2021-08-05 13:05:23 +02:00
Franco Fichtner
1c895ed435
firmware: also check plugins for up to date core pkg #5136
2021-08-05 10:05:23 +02:00
Franco Fichtner
4ff5fe0365
openvpn: same same but different
2021-08-05 09:58:55 +02:00
Ad Schellevis
98ac4f4d77
OpenVPN - regression in dc6215633a adding "client-config-dir" when server directive isn't set on a /30 tunnel.
2021-08-05 09:55:24 +02:00
Ad Schellevis
5c9341820d
Interface / Diagnostics / Netstat - add tree search and improve layout a bit
2021-08-03 19:04:57 +02:00
Ad Schellevis
f969d857ad
firewall - make sure net.pf.request_maxcount and table-entries are always aligned, related to https://github.com/opnsense/core/issues/5127 as discussed with @fichtner
2021-08-03 18:18:39 +02:00
Franco Fichtner
6799f2e624
src: whitespace sweep
2021-08-03 12:34:27 +02:00
Franco Fichtner
f9f9dd28c1
firmware: remove spurious grep
2021-08-03 12:30:10 +02:00
Franco Fichtner
16a3559747
firmware: replace php with pkg version compare
...
As a small bonus now also corectly check if an upgrade
for opnsense-update is available. If not, we are now
able to ignore the downgrade.
2021-08-03 12:23:54 +02:00
Franco Fichtner
5969d20641
firmware: backend now supports reinstall like opnsense-bootstrap -q
2021-08-03 11:49:20 +02:00
Franco Fichtner
4472a23596
firmware: switch to FreeBSD where appropriate
2021-08-02 21:48:29 +02:00
Ad Schellevis
5c9ac97e17
Javavscript: update jQtree to 1.6.1
2021-08-02 17:31:25 +02:00
Franco Fichtner
e16b1343eb
pkg: fix plist
2021-08-02 12:26:59 +02:00
Ad Schellevis
f886c24f90
Dashboard / widgets - use ifinfo counters instead of pfctl in interface traffic widget. closes https://github.com/opnsense/core/issues/5137
2021-08-02 11:37:54 +02:00
Franco Fichtner
580e6c7cc8
unbound: automatically add do-not-query-localhost: no when needed
...
Hasn't been in the system for quite some time but since we set
forward-addr we likely expect it to allow a query to it.
2021-08-02 10:08:55 +02:00
Franco Fichtner
2fa400beca
unbound: automatically add do-not-query-localhost: no on DoT when needed
2021-08-02 10:08:02 +02:00
Franco Fichtner
eb72ff6d8a
unbound: reject invalid cache data
2021-08-02 09:53:58 +02:00
Franco Fichtner
56af05bb7b
mvc: bring back bind_textdomain_codeset() removed in f3e2f8ea3e; closes #5071
...
PR: https://github.com/opnsense/core/issues/5132
2021-08-02 08:10:24 +02:00