3364 Commits

Author SHA1 Message Date
Ad Schellevis
f9d9e09ebb firewall/alias, signal table load errors to the user, it's not very obvious now that the table memory is defined too low. closes https://github.com/opnsense/core/issues/3046 2018-12-14 21:05:34 +01:00
Franco Fichtner
7060d4e633 interfaces: simplify once more 2018-12-13 16:21:32 +01:00
Franco Fichtner
4e8055fed3 system: there's no point globbing... 2018-12-13 10:51:24 +01:00
Franco Fichtner
6dcb9da10f interfaces: simplify nameserver lookup 2018-12-13 10:47:15 +01:00
Michael Steenbeek
b36c30825c Clean up IPsec log levels 2018-12-12 15:23:21 +01:00
Franco Fichtner
5568b35958 interfaces: read and write DUID correctly; closes #3029 2018-12-11 14:07:07 +00:00
Ad Schellevis
8b73d9e73b interfaces, fix configure_interface_hardware when legacy_interface_details() returns an empty array, closes https://github.com/opnsense/core/issues/3035 2018-12-10 22:41:02 +01:00
Ad Schellevis
767550acdd bugfix https://github.com/opnsense/core/pull/3025 2018-12-10 09:44:58 +01:00
Michael Steenbeek
3e836c6087 Add gateway alerts to Monit, for #2919 (#3025) 2018-12-09 20:08:54 +01:00
Franco Fichtner
6b848aba4a interfaces: do not offset DUID by two bytes for now
It's not clear what this actually does.  is_duid() fails.
2018-12-09 07:08:18 +01:00
Franco Fichtner
9984dc96de dhcp: correct function use 2018-12-09 04:45:53 +01:00
Franco Fichtner
061d3bb789 firwall: cleanup 2018-12-09 04:29:22 +01:00
Franco Fichtner
5e8c967176 interfaces: small simplifcation on 6to4 code 2018-12-09 04:18:19 +01:00
Franco Fichtner
0023784905 ipsec: avoid if return, else return 2018-12-08 16:20:46 +01:00
Franco Fichtner
933f935624 inc: kill unused IPv6 defines 2018-12-08 16:15:45 +01:00
Franco Fichtner
3d8fd0088a unbound: restart if already down for #2894 2018-12-08 11:07:35 +01:00
Franco Fichtner
f72797d269 unbound: cleanup 2018-12-07 17:36:04 +01:00
Franco Fichtner
0dbc3cc51e system: remove unused get_dns_servers() #3020 2018-12-07 12:30:51 +00:00
Franco Fichtner
5cf8b4f2e2 unbound: probable fix for #3020 2018-12-07 12:29:58 +00:00
Franco Fichtner
a22c63a67c interfaces: actually, use get_nameservers() for *all* interfaces
It has the added benefit of grabbing the correct servers provided
for all upstream interfaces.

PR: https://github.com/opnsense/core/issues/3020
2018-12-07 12:18:17 +00:00
Ad Schellevis
c5acb417ab configure_interface_hardware(), typo in [r|t]xcsum_ipv6, closes https://github.com/opnsense/core/issues/3021 2018-12-06 20:25:03 +01:00
Ad Schellevis
c3213d4d91 filter/icmpv6, IPv6 FW Rule from WAN IP to ff02 missing, for https://github.com/opnsense/core/issues/3015 2018-12-06 12:45:28 +01:00
Franco Fichtner
d15605dc5b firewall: third try #3015 2018-12-05 15:55:44 +00:00
Franco Fichtner
5865994648 firewall: only true for static setups #3015 2018-12-05 16:49:53 +01:00
Franco Fichtner
89bd032069 firewall: this is weird, automatic reply-to and route-to...
... should honour if a gateway was actually provided.  It worked
or at least was supposed to work in this way before repairing
get_interface_gateway*().

PR: https://github.com/opnsense/core/issues/3015
2018-12-05 16:40:58 +01:00
Michael Steenbeek
aed23a9ecb Clean up ipsec_convert_to_modp() 2018-12-05 16:14:22 +01:00
Franco Fichtner
dc8f8daf4f system: make this explicit... 2018-12-05 08:29:53 +01:00
Franco Fichtner
536543be11 ipsec: already changed vs. stable/18.7, might as well do this 2018-12-05 08:25:42 +01:00
Michael Steenbeek
2a149a054c Replace PEAR_ERROR with return null and delete PEAR.inc (#3006) 2018-12-04 09:53:09 +01:00
Ad Schellevis
e639924c9b Firewall/Alias, performance regression in get_alias_description, take 1: move to our static firewall class 2018-12-03 17:47:01 +01:00
Franco Fichtner
3d8507a5cf firmware: more consolidation 2018-12-03 07:59:20 +01:00
Michael Steenbeek
50e323d8dc Fix many PHPdoc declarations and some functions 2018-11-29 17:48:41 +01:00
Franco Fichtner
410b7d9afc openvpn: reformat 2018-11-29 17:40:56 +01:00
Franco Fichtner
b3c414d58e unbound: small whitespace tweak 2018-11-29 17:31:15 +01:00
Michael Steenbeek
afcae6226a Clean up incorrect/unused variable assignments 2018-11-29 17:29:58 +01:00
Michael Steenbeek
32d36429ff Replace some double quoted strings with single quoted ones 2018-11-29 16:58:15 +01:00
Franco Fichtner
35478a8f94 unbound: restart after VPN is up for #2828 2018-11-28 20:10:51 +01:00
Franco Fichtner
0eb1f10095 firmware: rename "opnsense" version file to "core"
We already have "kernel" and "base" and plugins also follow this
pattern by only registering its name once per devel or release
version.  This kills ambiguity for "opnsense" vs. "opnsense-version"
and makes it more branding friendly.  Suffice to say "core", "kernel"
and "base" are reserved names and also align with tools.git.
2018-11-28 09:30:09 +01:00
Franco Fichtner
9f78f4d98e dhcp: fix ddns IPv6; close #2975 2018-11-27 13:24:28 +01:00
Franco Fichtner
5cf5e5974a dnsmasq: test all options, unify style 2018-11-26 07:26:37 +01:00
Franco Fichtner
c3b07c466a unbound: only use IPv6 when enabled and IPv4 is not preferred; closes #2913
A general disable seems reasonable but the IPv4 prefer does not really
mean we should diable IPv6 here.  In the ticket it was indicated that
Unbound does funky stuff in this scenario so to avoid further violation
of POLA it is disabled as well then.
2018-11-24 15:55:16 +01:00
Franco Fichtner
a4b4db95b3 dnsmasq: add DNSSEC option, several cleanups; closes #2275
* As discussed a long time ago stop mentioning "DNS Forwarder"
* Remove strong tags from Dnsmasq form
* DNSSEC option, off by default
* Some GUI elements flattened
* Advanced button tweaks

Tested using: http://en.conn.internet.nl/connection/
2018-11-24 15:30:19 +01:00
Ad Schellevis
b52e139d34 fix typo 2018-11-24 15:08:24 +01:00
Franco Fichtner
03ef2ff81e system: tiny refactor 2018-11-24 13:20:16 +01:00
Franco Fichtner
0860755e3b firewall: same same, but different
filter_configure_sync() already calls filter_pflog_start().
2018-11-24 13:06:04 +01:00
Franco Fichtner
06151559bd system: top part of default gatway group switching #2279 2018-11-24 12:48:35 +01:00
Michael Steenbeek
4d69429c30 Fix passing SANs to OpenSSL when generating CSRs (#2967) 2018-11-23 17:45:06 +01:00
Franco Fichtner
c99cfaa006 src: more manual cleanups 2018-11-23 14:50:53 +01:00
Michael Steenbeek
7ad3d8dff6 Replace some trivial double quotes with single ones 2018-11-23 14:36:44 +01:00
Michael Steenbeek
19ce1c57a4 Replace uncommon <> notation with != 2018-11-23 14:36:44 +01:00