Ad Schellevis
f9d9e09ebb
firewall/alias, signal table load errors to the user, it's not very obvious now that the table memory is defined too low. closes https://github.com/opnsense/core/issues/3046
2018-12-14 21:05:34 +01:00
Franco Fichtner
7060d4e633
interfaces: simplify once more
2018-12-13 16:21:32 +01:00
Franco Fichtner
4e8055fed3
system: there's no point globbing...
2018-12-13 10:51:24 +01:00
Franco Fichtner
6dcb9da10f
interfaces: simplify nameserver lookup
2018-12-13 10:47:15 +01:00
Michael Steenbeek
b36c30825c
Clean up IPsec log levels
2018-12-12 15:23:21 +01:00
Franco Fichtner
5568b35958
interfaces: read and write DUID correctly; closes #3029
2018-12-11 14:07:07 +00:00
Ad Schellevis
8b73d9e73b
interfaces, fix configure_interface_hardware when legacy_interface_details() returns an empty array, closes https://github.com/opnsense/core/issues/3035
2018-12-10 22:41:02 +01:00
Ad Schellevis
767550acdd
bugfix https://github.com/opnsense/core/pull/3025
2018-12-10 09:44:58 +01:00
Michael Steenbeek
3e836c6087
Add gateway alerts to Monit, for #2919 ( #3025 )
2018-12-09 20:08:54 +01:00
Franco Fichtner
6b848aba4a
interfaces: do not offset DUID by two bytes for now
...
It's not clear what this actually does. is_duid() fails.
2018-12-09 07:08:18 +01:00
Franco Fichtner
9984dc96de
dhcp: correct function use
2018-12-09 04:45:53 +01:00
Franco Fichtner
061d3bb789
firwall: cleanup
2018-12-09 04:29:22 +01:00
Franco Fichtner
5e8c967176
interfaces: small simplifcation on 6to4 code
2018-12-09 04:18:19 +01:00
Franco Fichtner
0023784905
ipsec: avoid if return, else return
2018-12-08 16:20:46 +01:00
Franco Fichtner
933f935624
inc: kill unused IPv6 defines
2018-12-08 16:15:45 +01:00
Franco Fichtner
3d8fd0088a
unbound: restart if already down for #2894
2018-12-08 11:07:35 +01:00
Franco Fichtner
f72797d269
unbound: cleanup
2018-12-07 17:36:04 +01:00
Franco Fichtner
0dbc3cc51e
system: remove unused get_dns_servers() #3020
2018-12-07 12:30:51 +00:00
Franco Fichtner
5cf8b4f2e2
unbound: probable fix for #3020
2018-12-07 12:29:58 +00:00
Franco Fichtner
a22c63a67c
interfaces: actually, use get_nameservers() for *all* interfaces
...
It has the added benefit of grabbing the correct servers provided
for all upstream interfaces.
PR: https://github.com/opnsense/core/issues/3020
2018-12-07 12:18:17 +00:00
Ad Schellevis
c5acb417ab
configure_interface_hardware(), typo in [r|t]xcsum_ipv6, closes https://github.com/opnsense/core/issues/3021
2018-12-06 20:25:03 +01:00
Ad Schellevis
c3213d4d91
filter/icmpv6, IPv6 FW Rule from WAN IP to ff02 missing, for https://github.com/opnsense/core/issues/3015
2018-12-06 12:45:28 +01:00
Franco Fichtner
d15605dc5b
firewall: third try #3015
2018-12-05 15:55:44 +00:00
Franco Fichtner
5865994648
firewall: only true for static setups #3015
2018-12-05 16:49:53 +01:00
Franco Fichtner
89bd032069
firewall: this is weird, automatic reply-to and route-to...
...
... should honour if a gateway was actually provided. It worked
or at least was supposed to work in this way before repairing
get_interface_gateway*().
PR: https://github.com/opnsense/core/issues/3015
2018-12-05 16:40:58 +01:00
Michael Steenbeek
aed23a9ecb
Clean up ipsec_convert_to_modp()
2018-12-05 16:14:22 +01:00
Franco Fichtner
dc8f8daf4f
system: make this explicit...
2018-12-05 08:29:53 +01:00
Franco Fichtner
536543be11
ipsec: already changed vs. stable/18.7, might as well do this
2018-12-05 08:25:42 +01:00
Michael Steenbeek
2a149a054c
Replace PEAR_ERROR with return null and delete PEAR.inc ( #3006 )
2018-12-04 09:53:09 +01:00
Ad Schellevis
e639924c9b
Firewall/Alias, performance regression in get_alias_description, take 1: move to our static firewall class
2018-12-03 17:47:01 +01:00
Franco Fichtner
3d8507a5cf
firmware: more consolidation
2018-12-03 07:59:20 +01:00
Michael Steenbeek
50e323d8dc
Fix many PHPdoc declarations and some functions
2018-11-29 17:48:41 +01:00
Franco Fichtner
410b7d9afc
openvpn: reformat
2018-11-29 17:40:56 +01:00
Franco Fichtner
b3c414d58e
unbound: small whitespace tweak
2018-11-29 17:31:15 +01:00
Michael Steenbeek
afcae6226a
Clean up incorrect/unused variable assignments
2018-11-29 17:29:58 +01:00
Michael Steenbeek
32d36429ff
Replace some double quoted strings with single quoted ones
2018-11-29 16:58:15 +01:00
Franco Fichtner
35478a8f94
unbound: restart after VPN is up for #2828
2018-11-28 20:10:51 +01:00
Franco Fichtner
0eb1f10095
firmware: rename "opnsense" version file to "core"
...
We already have "kernel" and "base" and plugins also follow this
pattern by only registering its name once per devel or release
version. This kills ambiguity for "opnsense" vs. "opnsense-version"
and makes it more branding friendly. Suffice to say "core", "kernel"
and "base" are reserved names and also align with tools.git.
2018-11-28 09:30:09 +01:00
Franco Fichtner
9f78f4d98e
dhcp: fix ddns IPv6; close #2975
2018-11-27 13:24:28 +01:00
Franco Fichtner
5cf5e5974a
dnsmasq: test all options, unify style
2018-11-26 07:26:37 +01:00
Franco Fichtner
c3b07c466a
unbound: only use IPv6 when enabled and IPv4 is not preferred; closes #2913
...
A general disable seems reasonable but the IPv4 prefer does not really
mean we should diable IPv6 here. In the ticket it was indicated that
Unbound does funky stuff in this scenario so to avoid further violation
of POLA it is disabled as well then.
2018-11-24 15:55:16 +01:00
Franco Fichtner
a4b4db95b3
dnsmasq: add DNSSEC option, several cleanups; closes #2275
...
* As discussed a long time ago stop mentioning "DNS Forwarder"
* Remove strong tags from Dnsmasq form
* DNSSEC option, off by default
* Some GUI elements flattened
* Advanced button tweaks
Tested using: http://en.conn.internet.nl/connection/
2018-11-24 15:30:19 +01:00
Ad Schellevis
b52e139d34
fix typo
2018-11-24 15:08:24 +01:00
Franco Fichtner
03ef2ff81e
system: tiny refactor
2018-11-24 13:20:16 +01:00
Franco Fichtner
0860755e3b
firewall: same same, but different
...
filter_configure_sync() already calls filter_pflog_start().
2018-11-24 13:06:04 +01:00
Franco Fichtner
06151559bd
system: top part of default gatway group switching #2279
2018-11-24 12:48:35 +01:00
Michael Steenbeek
4d69429c30
Fix passing SANs to OpenSSL when generating CSRs ( #2967 )
2018-11-23 17:45:06 +01:00
Franco Fichtner
c99cfaa006
src: more manual cleanups
2018-11-23 14:50:53 +01:00
Michael Steenbeek
7ad3d8dff6
Replace some trivial double quotes with single ones
2018-11-23 14:36:44 +01:00
Michael Steenbeek
19ce1c57a4
Replace uncommon <> notation with !=
2018-11-23 14:36:44 +01:00