lucaspalomodevelop/core
1
0
Fork 0
mirror of https://github.com/lucaspalomodevelop/core.git synced 2026-03-15 00:54:41 +00:00
Code Issues Packages Projects Releases Wiki Activity
13,164 Commits 1 Branch 0 Tags
Commit Graph

1034 Commits

Author SHA1 Message Date
James Golovich
f98f4e4f1e
Allow DNS resolver to skip entry on EmptyLabel (#4560) 
* Allow DNS resolver to skip entry on EmptyLabel

A name like '.example.com' is not a valid name, but should be handled like a non existant name instead of throwing an exception
 2021-08-16 19:10:07 +02:00
kulikov-a
3f73088673
rulecache.py: skip empty metadata (#5148) 2021-08-08 11:12:48 +02:00
kulikov-a
27fdfe49c3
Aliases progress bar: small suggestions (#5149) 
* alias.volt: change a bit
* pftablecount.py: count all tables from -vvsT
 2021-08-08 10:47:17 +02:00
Ad Schellevis
9b31fad9ed Squashed commit of the following: 
commit 9158a0618f7c7943a10fbcdf7b8a4950844d6133
Author: Ad Schellevis <ad@opnsense.org>
Date:   Sat Aug 7 22:35:00 2021 +0200

    Firewall / aliases - simplify and change https://github.com/opnsense/core/pull/5142 a bit

commit 72ad80b072e11e8ad58a82f59a395c9961eef386
Author: kulikov-a <36099472+kulikov-a@users.noreply.github.com>
Date:   Wed Aug 4 23:29:09 2021 +0300

    alias.volt: add limits progress bar

commit 6ba824471d9fc6186775dc6bdab815b4d1af0ce9
Author: kulikov-a <36099472+kulikov-a@users.noreply.github.com>
Date:   Wed Aug 4 23:09:17 2021 +0300

    AliasController.php: add getRecordsAction

commit 76de5668ff1f1225f32bd3abfc76f91c3500d753
Author: kulikov-a <36099472+kulikov-a@users.noreply.github.com>
Date:   Wed Aug 4 23:02:23 2021 +0300

    pfrecords.py: show tables load stats

commit 9719a8d31fd127a621c1cea219c9cd6c42bd852b
Author: kulikov-a <36099472+kulikov-a@users.noreply.github.com>
Date:   Wed Aug 4 23:00:02 2021 +0300

    actions_filter.conf: add pfrecords.py action

commit f106c8db128b3cdbdfb4ec79e766b84f120d4510
Author: kulikov-a <36099472+kulikov-a@users.noreply.github.com>
Date:   Wed Aug 4 22:40:11 2021 +0300

    update_tables.py: send error to syslog, stats file
 2021-08-07 22:41:11 +02:00
Franco Fichtner
9506f4c1c6 firmware: now that we use TEE we should define it #5136 2021-08-05 14:27:30 +02:00
Franco Fichtner
af7543e79b firmware: visibility issue on #5136 2021-08-05 13:05:23 +02:00
Franco Fichtner
1c895ed435 firmware: also check plugins for up to date core pkg #5136 2021-08-05 10:05:23 +02:00
Franco Fichtner
f9f9dd28c1 firmware: remove spurious grep 2021-08-03 12:30:10 +02:00
Franco Fichtner
16a3559747 firmware: replace php with pkg version compare 
As a small bonus now also corectly check if an upgrade
for opnsense-update is available.  If not, we are now
able to ignore the downgrade.
 2021-08-03 12:23:54 +02:00
Franco Fichtner
5969d20641 firmware: backend now supports reinstall like opnsense-bootstrap -q 2021-08-03 11:49:20 +02:00
Franco Fichtner
4472a23596 firmware: switch to FreeBSD where appropriate 2021-08-02 21:48:29 +02:00
Franco Fichtner
eb72ff6d8a unbound: reject invalid cache data 2021-08-02 09:53:58 +02:00
Franco Fichtner
7165b665eb firmware: sync plugins in console update; closes #5136 2021-08-01 11:27:05 +02:00
Ad Schellevis
2909e86088 unbound - dhcp watcher, support configurable domains per ip range, for https://github.com/opnsense/core/issues/5118 2021-07-30 23:01:55 +02:00
Ad Schellevis
41b311ecc2 Revert "Firewall / Aliases - append most likely cause for pfctl error (Invalid argument isn't very explanatory by itself). closes https://github.com/opnsense/core/issues/5127" 
This reverts commit 2ea90801290856f453126b1e6d63e66c79a5ca6f.
 2021-07-30 18:45:40 +02:00
Ad Schellevis
2ea9080129 Firewall / Aliases - append most likely cause for pfctl error (Invalid argument isn't very explanatory by itself). closes https://github.com/opnsense/core/issues/5127 2021-07-30 17:47:18 +02:00
Franco Fichtner
4ae1555e07 firewall: change "proto" to "protonum" to avoid ambiguity 2021-07-23 09:02:22 +02:00
Franco Fichtner
538e2f04c2 firewall: update filterlog reader slightly 
CARP in IPv4 and IPv6 uses the IP header's "ttl" or "hoplimit" so
that we use the same name for reading it to avoid duplication.
The values are the same in any case.

Change "flowlabel" to "flow" to avoid confusion with "label".

Change IP "version" to "ipversion" and consolidate CARP "version(2)"
into "version".
 2021-07-23 08:14:36 +02:00
Franco Fichtner
1aeb520631 firewall: parse ridentifier as rid if != '0' #5016 2021-07-22 17:34:02 +02:00
Franco Fichtner
5e860053e1 firmware: mask subscription in GUI output 2021-07-22 10:16:04 +02:00
Ad Schellevis
be90cf00a6 Firewall / Diagnostics / States, Sessions - fix some minor glitches. 
o mark unsortable columns
o fix type validations (avg=* isn't an int).
o better to return an empty structure than [], avoid JS errors in the frontend
 2021-07-21 18:49:10 +02:00
Ad Schellevis
e4aa3e4f5e Firewall / Diagnostics - time to kill legacy diag_system_pftop.php and replace it with "Sessions", which offers insights into the top sessions on the firewall related to rules and network segments. 2021-07-20 21:53:33 +02:00
Franco Fichtner
72e6ca2fee unbound: more refactoring, less pages, blacklist -> blocklist 
PR: https://github.com/opnsense/core/issues/4327
 2021-07-20 11:00:00 +02:00
Franco Fichtner
dac9a74479 interfaces: if it looks like SLAAC get rid of it 
PR: http://forum.opnsense.org/index.php?topic=8985.0
 2021-07-20 09:27:54 +02:00
Franco Fichtner
83cd07eda4 firmware: add version/date header here as well 2021-07-14 09:22:46 +02:00
Franco Fichtner
b1241aeb74 shell: fix IPv4 /31 assignment 
PR: https://forum.opnsense.org/index.php?topic=23878.0
 2021-07-13 13:56:44 +02:00
Franco Fichtner
11b5fe6e9c interfaces: deprecate SLAAC addresses on linkdown; closes #4929 2021-07-13 12:45:05 +02:00
Franco Fichtner
e8d7876d21 unbound: add 'unbound check' target for advanced options #4327 2021-07-13 12:27:14 +02:00
Franco Fichtner
4a1bc9f8b5 unbound: allow to retain cache; closes #2750 2021-07-13 11:21:01 +02:00
Franco Fichtner
09f510fba2 unbound: fix /var MFS dilemma for DNSBL after boot; closes #4938 
o Create a persistent directory to feed the unbound includes
o Move runtime data to /tmp directory

After reboot we use the old persistent list still available.

I am not sure if it's clear enough that the blacklists cannot
auto-update and therefore require a cron job or manual update
from the respective GUI page ("apply" essentially is "download
and apply").
 2021-07-09 13:57:07 +02:00
Franco Fichtner
28fa452a47 firmware: fix comment on previous 2021-06-29 14:42:43 +02:00
Franco Fichtner
38578176e4 firmware: comment on compexity avoidance in shell menu 
Fix plist while here.
 2021-06-29 14:39:14 +02:00
kulikov-a
97643a3edb
read_log.py: set label for obsolete rule in log (#5075) 2021-06-27 13:34:32 +02:00
Franco Fichtner
35aa9bf568 interfaces: back out this change until we have feedback #4929 2021-06-23 11:41:51 +02:00
Ad Schellevis
caed6e2504 Firewall: Diagnostics: States Dump - refactor to MVC. 
o a rudimentary column sort
 2021-06-22 11:19:39 +02:00
Ad Schellevis
43b7f1eb7f Firewall: Diagnostics: States Dump - refactor to MVC. 
o fix minor regression duplicating records (only flush on last content line)
o add link to firewall / rules page
 2021-06-21 19:37:27 +02:00
Ad Schellevis
63bdff8cf3 Firewall: Diagnostics: States Dump - refactor to MVC. 
o add api endpoint and ui to kill states using filter (kill by host or network as well)
o show ruleids in service control spot to filter states for a specific (auto-generated) rule
o support passing a ruleid to the ui page to limit selection, e.g. /ui/diagnostics/firewall/states#d0953c4424f27d5249027086b4599999
 2021-06-21 18:27:21 +02:00
Franco Fichtner
512b83463b pkg: fix plist and lint 2021-06-21 15:22:36 +02:00
Ad Schellevis
d9aa894fdb Firewall: Diagnostics: States Dump - refactor to MVC. 
o move state manipulation functions into separate lib, so we can reuse the same logic to kill all in selection (pfctl -k [ipv6_address] doesn't seem to be functional)
 2021-06-21 14:53:47 +02:00
Ad Schellevis
2e5bafbfa9 Firewall: Diagnostics: States Dump - refactor to MVC. 
o improve filter, when an address or network is offered, match using ipaddress.ip_network().overlaps()
 2021-06-21 14:38:15 +02:00
Franco Fichtner
74633f4cd2 interfaces: fix lint pass 2021-06-21 05:15:02 +02:00
Ad Schellevis
36f4b24869 Firewall: Diagnostics: States Dump - refactor to MVC. 
o push query commands to backend process (list_states.py)
o add configd action to kill by state id and assign delete action to it.
o query rule descriptions to ease browsing

some small todo's left:

o the old page supported dropping states for a network, which might be practical to have in s separate tab sheet in the new layout
o support filtering by explicit rule_id and use it as an optional entry point so the firewall edit page can link to the states.
 2021-06-18 19:05:00 +02:00
Franco Fichtner
f7d7fd6362 interfaces: flush IPv6 addresses on PPP interfaces #4929 2021-06-18 10:08:05 +02:00
Franco Fichtner
9dc9c4e864 firmware: add backend glue to support install probing of plugins #5037 
Allows to list dependencies as well.  Remove the JSON return, best to
use something as follows now:

    # configctl firmware probe && configctl firmware product
 2021-06-17 10:32:53 +02:00
Franco Fichtner
17dff05294 firewall: close gap in diff between stable and master 2021-06-15 07:14:58 +02:00
Ad Schellevis
aea1cbd15a Firewall / Diagnostics / States Dump : extend filter options for future rewrite of states view. (refactor limit, add offset and query on label/rule_id) 2021-06-02 06:14:18 +02:00
Ad Schellevis
4c845540ac Firewall / Diagnostics / States Dump : add verbose fields to states output, first step in refactoring the states dump. 2021-06-01 12:18:03 +02:00
Franco Fichtner
a759338381 firmware: push automatic flags to firmware for #5025 2021-05-31 14:49:27 +02:00
Ad Schellevis
5eacbb06f1 firewall: let live log use the provided rule label instead of guessing it, closes https://github.com/opnsense/core/issues/5014 2021-05-27 15:47:37 +02:00
Ad Schellevis
4f126c758c Firewall - aliases: move dynamic ipv6 handling (https://github.com/opnsense/core/issues/4923) to a separate branch. 2021-05-26 18:18:26 +02:00