7321 Commits

Author SHA1 Message Date
Ad Schellevis
fa0bb4a98c firewall/rule parser, move standard rule parser logic to reader() in Rule class for reuse and rename fetchActualRules() to parseFilterRules() to better reflect it's function.
related to https://github.com/opnsense/core/issues/1326
2017-12-23 13:24:53 +01:00
Ad Schellevis
280781b582 firewall/rule parser, better to switch fetchActualRules() to a generator. 2017-12-23 12:45:17 +01:00
Ad Schellevis
6628d7f495 firewall/portforward, missing ipproto in reflection nat rule. for https://github.com/opnsense/core/issues/1326
pf can guess the ip protocol, but this doesn't appear to be flawless.
2017-12-23 11:34:59 +01:00
Fabian Franz
831bfc711e lighttpd: add mime type for WPAD/PAC 2017-12-23 10:30:12 +01:00
Ad Schellevis
65d08b716c firewall/nat, regression in previous. https://github.com/opnsense/core/issues/1326
Because we can't use :network when interfaces don't have any address configured on filter load, we need to make sure we know which addresses are configured, add relevant ifconfig
data to setInterfaceMapping() in filter.inc.
2017-12-22 21:52:46 +01:00
Ad Schellevis
3b53e1d089 firewall/nat, replace portforward code for https://github.com/opnsense/core/issues/1326 2017-12-22 21:01:24 +01:00
Ad Schellevis
687e71dc3d firewall/nat, regression in forward. https://github.com/opnsense/core/issues/1326 2017-12-22 20:59:53 +01:00
Ad Schellevis
8ed255c696 firewall/nat, work in progress port forwards. Class names may change later on, but functionally this part should be able to render the portforward rules, which will be integrated first before moving the other redirect/nat portions. 2017-12-22 20:12:41 +01:00
Ad Schellevis
6d6ac731c9 firewall/parser add prefix and suffix to parseInterface, https://github.com/opnsense/core/issues/1326 2017-12-22 20:09:19 +01:00
Franco Fichtner
50e53ab4a0 interfaces: reload filter before reloading plugins for connectivity
PR: https://forum.opnsense.org/index.php?topic=4727.0
PR: https://github.com/opnsense/core/issues/1403
2017-12-22 18:18:31 +01:00
Franco Fichtner
4e1c7d4011 network time: ntp breaks the overly overlong lines, fix their parsing
PR: https://github.com/opnsense/core/issues/1764
2017-12-22 07:53:49 +00:00
Franco Fichtner
0ae4af9a7f network time: third server offers IPv6 #1374 2017-12-22 08:31:48 +01:00
Franco Fichtner
97daba95d9 network time: we haz a pool! #1374
While here, time-update-interval does not exist and update the
xml lint pass to pick up the sample file, too.
2017-12-21 18:28:24 +01:00
Franco Fichtner
0284604dda ntpd: fix for valid negative offset; closes #1968 2017-12-21 10:21:29 +01:00
Franco Fichtner
7c66c4f750 wizard: also disable dnsmasq on wizard to avoid clash 2017-12-21 09:44:10 +01:00
Franco Fichtner
85c1e0a82f web proxy: tweak previous
We can't fix reconfigure, but at least we can split up restart
to be an explicit stop start to push 'squid -z -N' into the middle.

PR: https://github.com/opnsense/core/issues/2008
2017-12-21 07:18:45 +00:00
Franco Fichtner
25ca2ad23f web proxy: run setup.sh more often to properly do squid -z
PR: https://github.com/opnsense/core/issues/2008
2017-12-21 07:30:16 +01:00
Ad Schellevis
6ab11f0636 firewall/aliases, template missing check for existence. https://github.com/opnsense/core/issues/1971 2017-12-20 18:26:12 +01:00
Franco Fichtner
5db9141a45 power: finally add that reboot wait dialog
And a few more tweaks in the other spots.
2017-12-20 08:14:16 +00:00
Franco Fichtner
0645d11653 webgui: reload stuff part 1 #1347
Reload the client side.  If we can't connect back, the second
part of this rework will make sure that the system reverts to
its former state and this reload will be able to pick it up.

While here kill the questionable login autocomplete toggle.
2017-12-20 07:33:41 +00:00
Franco Fichtner
83670156ce openvpn: start later alongside IPsec
Matches previous, no apparent reason not to do this.
2017-12-20 00:43:36 +01:00
Franco Fichtner
ed9005ada5 ipsec: move to plugin bootup hook
Eventually, OpenVPN should be loaded alongside IPsec like
we do in newwanip scripts, but that requires some research.
2017-12-20 00:33:49 +01:00
Ad Schellevis
78686814a4 traffix shaper, some small style fixes for https://github.com/opnsense/core/issues/2004 2017-12-19 19:21:33 +01:00
Ad Schellevis
f2a263b74b
Merge pull request #2006 from fabianfrz/ts_show_not
traffic shaper: add a ! for negated fields
2017-12-19 19:12:59 +01:00
Fabian Franz
9e5ea69585 traffic shaper: add a ! for negated fields 2017-12-19 19:05:45 +01:00
Ad Schellevis
980915871c firewall, nat. work in progress for https://github.com/opnsense/core/issues/1326 2017-12-19 18:23:16 +01:00
Ad Schellevis
d3f245b646 firewall, utils (new). add getPortAlias() to figure out the ports within an alias for new style code, needed for https://github.com/opnsense/core/issues/1326 2017-12-19 18:21:50 +01:00
Ad Schellevis
48465e49f0 firewall/rules, move some more parse functions to the base class 2017-12-19 16:52:06 +01:00
Ad Schellevis
f58c2ece05 fix formatting for diag_dump_states.php https://github.com/opnsense/core/issues/2005 2017-12-19 15:09:53 +01:00
Franco Fichtner
426cbba88b pkg: add finterprint for 18.1 2017-12-19 01:33:45 +01:00
Franco Fichtner
3f649be7db firewall: fix typo 2017-12-19 07:06:53 +01:00
Franco Fichtner
d7b3a6ab79 interfaces: fix previous 2017-12-19 06:52:37 +01:00
Franco Fichtner
58184df417 interfaces: adjust messages for new IP 2017-12-19 00:01:18 +01:00
Franco Fichtner
a48167c403 wizard: add unbound to wizard, remove dnssec from default #1962 2017-12-18 21:55:48 +00:00
Ad Schellevis
e8a4fc1b46 ditch filterdns, since we've refactored the aliases in https://github.com/opnsense/core/issues/1971 the only use for this is ipsec, but it's doubtful if it's required. see https://github.com/opnsense/core/issues/2003 2017-12-18 20:44:16 +01:00
Ad Schellevis
82aa698f51 cleanup, rc.newroutedns looks unused now 2017-12-18 19:25:46 +01:00
Ad Schellevis
fa72a9205f firewall/advanced settings, ditch filterdns for https://github.com/opnsense/core/issues/1971 2017-12-18 19:19:09 +01:00
Franco Fichtner
0eb35fe369 plugins: hybrid approach to #1835 migration
Keep old ones, but switch to new.
2017-12-18 18:13:45 +00:00
Franco Fichtner
94a85af77e firmware: increase size to 2MB, text dumps are missing 2017-12-18 18:07:22 +00:00
Franco Fichtner
75931c58c2 firewall: add alias nesting node, reorder fields for clarity; closes #1957 2017-12-18 17:55:34 +00:00
Franco Fichtner
6c184975c3 firewall: GeoIP description; closes #1987 2017-12-18 17:47:36 +00:00
Ad Schellevis
fefa65fb6b system->routes->status, sort "use" and "mtu" numerical. closes https://github.com/opnsense/core/issues/1531 2017-12-17 20:34:36 +01:00
Franco Fichtner
427b9c1220 wizard: good question. the answer is: nope 2017-12-18 08:36:43 +01:00
Franco Fichtner
15355008c9 system: make route model more official by using 1.0.0 2017-12-18 08:20:04 +01:00
Franco Fichtner
54aeeef8ed ntpd: fix file move 2017-12-18 07:55:54 +01:00
Franco Fichtner
0154eccdfd ntpd: add custom options, fix leap second save; closes #1764 2017-12-18 06:40:57 +00:00
Franco Fichtner
4da5d69f64 dnsmasq: cleanups while working on #1764 2017-12-18 06:40:10 +00:00
Franco Fichtner
ebb191d106 system: ugly regression in save_close :D #2000 2017-12-17 19:56:16 +00:00
Franco Fichtner
d33b998e1e system: id != value, tweak label #2000 2017-12-17 20:45:26 +01:00
Ad Schellevis
2d76299e68 add save & close to user edit, closes https://github.com/opnsense/core/issues/2000 2017-12-17 19:15:40 +01:00