13150 Commits

Author SHA1 Message Date
Franco Fichtner
fb133e494f dhcp: another refactor fail 2021-08-11 07:55:50 +02:00
Ad Schellevis
25e0a639fa Interfaces / LAGG: improve configurability, closes https://github.com/opnsense/core/issues/5157
o add Use flowid and Use strict options
o extend interfaces overview with various lagg properties
o show unassigned interfaces in overview so lagg parents are always visible
o fix collapse event in overview to reference by internal name in stead of description.
2021-08-10 18:36:43 +02:00
Franco Fichtner
6abd2f2ac1 Framework: name and depends targets are no longer needed
use -v CORE_NAME and -v CORE_DEPENDS to read them...
2021-08-10 16:50:28 +02:00
Franco Fichtner
2534705523 dhcp: wrong file for IPv6 2021-08-10 11:22:59 +02:00
Franco Fichtner
c48244ecfa dhcp: lease removal needs a wrapper too 2021-08-10 11:21:34 +02:00
Franco Fichtner
867faa661f dhcp: unify lease parsing loosely related to #4985
While here drop magic in dhcp_clean_leases() and fix
artefacts surfaced by this removal in the leases page.
2021-08-10 11:13:26 +02:00
Ad Schellevis
92ea650888 IPsec: add "automatic" type to trust Strongswan's parser, see discussion in https://github.com/opnsense/core/issues/5155 2021-08-10 10:50:17 +02:00
Ad Schellevis
d5c090b38e IPsec: remove quoting remark in previous commit ( https://github.com/opnsense/core/issues/5155 ) 2021-08-09 15:34:46 +02:00
Ad Schellevis
9963de28c0 IPsec: fix identity quoting for asn1dn and fqdn types. close://github.com/opnsense/core/issues/5155 2021-08-09 15:08:49 +02:00
Franco Fichtner
f03d978bb0 lobby: typo 2021-08-09 09:07:00 +02:00
kulikov-a
3f73088673
rulecache.py: skip empty metadata (#5148) 2021-08-08 11:12:48 +02:00
kulikov-a
27fdfe49c3
Aliases progress bar: small suggestions (#5149)
* alias.volt: change a bit
* pftablecount.py: count all tables from -vvsT
2021-08-08 10:47:17 +02:00
Franco Fichtner
4a919798e2 pkg: fix plist 2021-08-08 08:52:11 +02:00
Ad Schellevis
9b31fad9ed Squashed commit of the following:
commit 9158a0618f7c7943a10fbcdf7b8a4950844d6133
Author: Ad Schellevis <ad@opnsense.org>
Date:   Sat Aug 7 22:35:00 2021 +0200

    Firewall / aliases - simplify and change https://github.com/opnsense/core/pull/5142 a bit

commit 72ad80b072e11e8ad58a82f59a395c9961eef386
Author: kulikov-a <36099472+kulikov-a@users.noreply.github.com>
Date:   Wed Aug 4 23:29:09 2021 +0300

    alias.volt: add limits progress bar

commit 6ba824471d9fc6186775dc6bdab815b4d1af0ce9
Author: kulikov-a <36099472+kulikov-a@users.noreply.github.com>
Date:   Wed Aug 4 23:09:17 2021 +0300

    AliasController.php: add getRecordsAction

commit 76de5668ff1f1225f32bd3abfc76f91c3500d753
Author: kulikov-a <36099472+kulikov-a@users.noreply.github.com>
Date:   Wed Aug 4 23:02:23 2021 +0300

    pfrecords.py: show tables load stats

commit 9719a8d31fd127a621c1cea219c9cd6c42bd852b
Author: kulikov-a <36099472+kulikov-a@users.noreply.github.com>
Date:   Wed Aug 4 23:00:02 2021 +0300

    actions_filter.conf: add pfrecords.py action

commit f106c8db128b3cdbdfb4ec79e766b84f120d4510
Author: kulikov-a <36099472+kulikov-a@users.noreply.github.com>
Date:   Wed Aug 4 22:40:11 2021 +0300

    update_tables.py: send error to syslog, stats file
2021-08-07 22:41:11 +02:00
Franco Fichtner
25b98610da src: another typo
PR: https://forum.opnsense.org/index.php?topic=24262.0
2021-08-06 22:00:04 +02:00
Franco Fichtner
d824e7163b unbond: fix "terrible" typo
PR: https://forum.opnsense.org/index.php?topic=24262.0
2021-08-06 21:42:09 +02:00
Franco Fichtner
0304b783a4 shell: when reloading reload all reachable via rc.freebsd too
PR: https://github.com/opnsense/core/issues/5136
2021-08-06 08:10:14 +02:00
Franco Fichtner
9506f4c1c6 firmware: now that we use TEE we should define it #5136 2021-08-05 14:27:30 +02:00
Franco Fichtner
af7543e79b firmware: visibility issue on #5136 2021-08-05 13:05:23 +02:00
Franco Fichtner
1c895ed435 firmware: also check plugins for up to date core pkg #5136 2021-08-05 10:05:23 +02:00
Franco Fichtner
4ff5fe0365 openvpn: same same but different 2021-08-05 09:58:55 +02:00
Ad Schellevis
98ac4f4d77 OpenVPN - regression in dc6215633a adding "client-config-dir" when server directive isn't set on a /30 tunnel. 2021-08-05 09:55:24 +02:00
Ad Schellevis
5c9341820d Interface / Diagnostics / Netstat - add tree search and improve layout a bit 2021-08-03 19:04:57 +02:00
Ad Schellevis
f969d857ad firewall - make sure net.pf.request_maxcount and table-entries are always aligned, related to https://github.com/opnsense/core/issues/5127 as discussed with @fichtner 2021-08-03 18:18:39 +02:00
Franco Fichtner
6799f2e624 src: whitespace sweep 2021-08-03 12:34:27 +02:00
Franco Fichtner
f9f9dd28c1 firmware: remove spurious grep 2021-08-03 12:30:10 +02:00
Franco Fichtner
16a3559747 firmware: replace php with pkg version compare
As a small bonus now also corectly check if an upgrade
for opnsense-update is available.  If not, we are now
able to ignore the downgrade.
2021-08-03 12:23:54 +02:00
Franco Fichtner
5969d20641 firmware: backend now supports reinstall like opnsense-bootstrap -q 2021-08-03 11:49:20 +02:00
Franco Fichtner
4472a23596 firmware: switch to FreeBSD where appropriate 2021-08-02 21:48:29 +02:00
Ad Schellevis
5c9ac97e17 Javavscript: update jQtree to 1.6.1 2021-08-02 17:31:25 +02:00
Franco Fichtner
e16b1343eb pkg: fix plist 2021-08-02 12:26:59 +02:00
Ad Schellevis
f886c24f90 Dashboard / widgets - use ifinfo counters instead of pfctl in interface traffic widget. closes https://github.com/opnsense/core/issues/5137 2021-08-02 11:37:54 +02:00
Franco Fichtner
580e6c7cc8 unbound: automatically add do-not-query-localhost: no when needed
Hasn't been in the system for quite some time but since we set
forward-addr we likely expect it to allow a query to it.
2021-08-02 10:08:55 +02:00
Franco Fichtner
2fa400beca unbound: automatically add do-not-query-localhost: no on DoT when needed 2021-08-02 10:08:02 +02:00
Franco Fichtner
eb72ff6d8a unbound: reject invalid cache data 2021-08-02 09:53:58 +02:00
Franco Fichtner
56af05bb7b mvc: bring back bind_textdomain_codeset() removed in f3e2f8ea3e; closes #5071
PR: https://github.com/opnsense/core/issues/5132
2021-08-02 08:10:24 +02:00
Ad Schellevis
54e14d4ddd unbound - dhcp watcher, support configurable domains per ip range, add required configuration file (configd template)
closes  https://github.com/opnsense/core/issues/5118
2021-08-01 14:59:19 +02:00
Ad Schellevis
b9b6e3eb8d System / Trust - split between generic server use in cert_get_purpose() and id-kp-serverAuth according to rfc3280, for https://github.com/opnsense/core/issues/5128 2021-08-01 11:37:42 +02:00
Franco Fichtner
7165b665eb firmware: sync plugins in console update; closes #5136 2021-08-01 11:27:05 +02:00
Ad Schellevis
ccd00f6875 Firewall / Rules - state options only make sense when there's some sort of state. closes https://github.com/opnsense/core/issues/5133 2021-08-01 10:55:41 +02:00
Ad Schellevis
2909e86088 unbound - dhcp watcher, support configurable domains per ip range, for https://github.com/opnsense/core/issues/5118 2021-07-30 23:01:55 +02:00
Ad Schellevis
41b311ecc2 Revert "Firewall / Aliases - append most likely cause for pfctl error (Invalid argument isn't very explanatory by itself). closes https://github.com/opnsense/core/issues/5127"
This reverts commit 2ea90801290856f453126b1e6d63e66c79a5ca6f.
2021-07-30 18:45:40 +02:00
Ad Schellevis
2ea9080129 Firewall / Aliases - append most likely cause for pfctl error (Invalid argument isn't very explanatory by itself). closes https://github.com/opnsense/core/issues/5127 2021-07-30 17:47:18 +02:00
Franco Fichtner
2b0c2caa44 unbound: support insecure-domain for #5104 2021-07-30 14:38:30 +02:00
Franco Fichtner
00062ae8f8 openvpn: improve the cipher parsing
It had verbose text in it.  Sort better while here.
2021-07-30 13:46:48 +02:00
Franco Fichtner
c5c622fd77 openvpn: untie server-ipv6 from server directive
PR: https://forum.opnsense.org/index.php?topic=24094.0
2021-07-30 13:25:09 +02:00
Franco Fichtner
51e7ba17d5 src: style sweep 2021-07-30 13:00:10 +02:00
Franco Fichtner
1176f829cb openvpn: remove remnamts of tun-ipv6
PR:       https://forum.opnsense.org/index.php?topic=24094.15
See also: https://community.openvpn.net/openvpn/wiki/DeprecatedOptions#Option:--tun-ipv6
2021-07-30 12:52:22 +02:00
Franco Fichtner
60d62437f2 ui: rewor the rework of the subnet selector; closes #5129 2021-07-30 12:33:33 +02:00
Ad Schellevis
be8a6cd514 VPN / OpenVPN / Client Export - return empty list when /api/openvpn/export/accounts/ is called without parameters.
found some of these in the crash reports:  ArgumentCountError: Too few arguments to function OPNsense\OpenVPN\Api\ExportController::accountsAction(), 0 passed and exactly 1 expected in /usr/local/opnsense/mvc/app/controllers/OPNsense/OpenVPN/Api/ExportController.php:204
2021-07-29 13:57:08 +02:00