6411 Commits

Author SHA1 Message Date
Franco Fichtner
fbfb00191b system: refactor previous for single kldload spot 2016-11-28 09:34:47 +01:00
Franco Fichtner
af8e12f550 system: another logic fail :) 2016-11-28 09:30:27 +01:00
Franco Fichtner
6b0b2569cd system: make sure vital kernel modules are loaded and refactor
This partially reverts commit 8ecaf5f9102e329f6163ddc16f84647040d53485.
2016-11-28 09:21:17 +01:00
Franco Fichtner
7e4c3cf76e system: logic error on previous 2016-11-28 07:12:26 +01:00
Franco Fichtner
d28b79a90d system: improve writing etc/ttys even more to disable virtual 2016-11-28 07:08:20 +01:00
Ad Schellevis
1b442b8e48 (proxy, remote acl's) add option to disable cert validation, closes https://github.com/opnsense/core/issues/1271 2016-11-27 15:11:10 +01:00
Franco Fichtner
9bc6342fa5 system: disable tty completely 2016-11-26 13:39:21 +01:00
Franco Fichtner
6b19b43646 system: typo in previous 2016-11-26 13:33:25 +01:00
Franco Fichtner
a7fbf99b62 system: disable all boot loader output for nullconsole usage 2016-11-26 13:31:53 +01:00
Franco Fichtner
85e6220415 system: deprecate 'enableserial' and refactor a bit
We don't need the flag anymore, it must be set through primary or
secondary console explicitly.
2016-11-26 13:09:32 +01:00
Ad Schellevis
2601843ed2 Merge pull request #1278 from fabianfrz/validation_message
add validation message
2016-11-26 11:09:00 +01:00
Fabian Franz
fc1a15dfb3 add validation message 2016-11-26 10:47:15 +01:00
Ad Schellevis
fc39bb33b3 (captive portal) don't try to generate invalid vouchers, closes https://github.com/opnsense/core/issues/1253
Let's keep this simple for now, just don't leave the dialog as long as the input isn't valid yet....
2016-11-26 09:57:34 +01:00
Franco Fichtner
8e78fd702a system: write boot.config later, when the auto-detect has been done 2016-11-26 09:34:10 +01:00
Franco Fichtner
d5969056ca system: always write consoles, figure out when serial is on 2016-11-26 09:16:49 +01:00
Franco Fichtner
f00d4309c5 system: add nullconsole setting
PR: https://forum.opnsense.org/index.php?topic=3972
2016-11-26 09:11:11 +01:00
Franco Fichtner
9e5aa0c76a filter: fix typo in previous
PR: https://forum.opnsense.org/index.php?topic=3979.0
2016-11-25 17:08:43 +01:00
Ad Schellevis
a257070187 (proxy) some small performance improvements 2016-11-25 16:59:20 +01:00
Franco Fichtner
621d703a67 openvpn: provide all local routes to export
PR: https://github.com/opnsense/core/issues/1275
2016-11-25 16:45:20 +01:00
Franco Fichtner
df469d3268 dashboard: do not arbitrarily split descriptions in services
PR: https://github.com/opnsense/core/issues/1277
2016-11-25 16:31:38 +01:00
Franco Fichtner
0ec8569296 radvd: fix two regressions from 16.7.9
o Mark interface used in case of interface tracking
o Don't inject local DNS server when there is no IP

PR: https://github.com/opnsense/core/issues/1273
2016-11-25 12:23:40 +01:00
Franco Fichtner
5cc1515bfd firmware: add audit feature, @jschellevis will like this... 2016-11-25 08:27:18 +01:00
Ad Schellevis
dd80bded16 (plugins, xmlrpc sync) use standard help if none available 2016-11-25 07:55:33 +01:00
Franco Fichtner
5d65669ee0 firmware: tweak wording on the console dialog 2016-11-25 06:41:46 +01:00
Franco Fichtner
28ea1d7390 ldap: the config setting for ldap_scope is 'subtree'
This doesn't really matter in the current code as it is the
default and only 'one' makes the implementation change its
scope, but for the sake of consistency let this be fixed.
2016-11-25 06:25:57 +01:00
Ad Schellevis
0f881bc4d0 (ldap) re-enable ldap_scope and legacy auth containers. 2016-11-24 20:56:26 +01:00
Franco Fichtner
364738997f firmware: getting ready for 17.1-BETA 2016-11-24 18:38:26 +01:00
Franco Fichtner
33d00edd0a pkg: make building 17.1 a bit easier
We're switching to PHP 7.0 (or 7.1 maybe), php-suhosin seems dead,
and maybe someone wants to work on a newer python base.
2016-11-24 18:19:17 +01:00
Franco Fichtner
8e01375337 upnp: fix regression introduced in 16.7.8
PR: https://forum.opnsense.org/index.php?topic=3976
2016-11-24 16:54:09 +01:00
Ad Schellevis
caa742ccef (mvc) overlapping variables leading to scope issues in php7/phalcon volt templates 2016-11-24 11:18:26 +01:00
Franco Fichtner
52bfec334b rc: less indent for console menu 2016-11-24 08:01:25 +01:00
Franco Fichtner
dd871c8e8b www: fix a crash report 2016-11-24 07:59:41 +01:00
Franco Fichtner
a674b5e0eb igmp proxy: tweak names suggested by @fabianfrz 2016-11-24 07:35:03 +01:00
Franco Fichtner
499ce45bd0 web proxy: proper ordering for menu item 2016-11-24 07:33:49 +01:00
Franco Fichtner
ffbbfc9635 acl: prune plugin files for #1037 2016-11-23 21:52:16 +01:00
Franco Fichtner
408790170f acl: more changes for #1037 2016-11-23 21:43:06 +01:00
Franco Fichtner
9205427c8e system: simplify ACL translation for #1037 2016-11-23 21:13:57 +01:00
Franco Fichtner
7526194b47 dnsmasq: reload dhcpleases on reconfigure; closes #1250
Private functions get "_" prefix, easy to spot from elsewhere
if needed.  Yes, someone will try this eventually.  ;)
2016-11-23 18:38:52 +01:00
Franco Fichtner
33c41b1613 unbound: register dhcp domain override for #1250 2016-11-23 18:15:50 +01:00
Franco Fichtner
2ca7253326 dnsmasq: domain override for dynamic dhcp lease registration
PR: https://github.com/opnsense/core/issues/1250
2016-11-23 18:06:30 +01:00
Franco Fichtner
24c8633736 auth: change slashes to dashes, breaking change for 17.1
Discussed with: @adschellevis
2016-11-23 17:16:34 +01:00
Franco Fichtner
7e75cf2631 dnsmasq: further cleanups for dhcpleases handling for #1226
o Respect the 'dnslocalhost' option, which wasn't previously possible
  because dhcpleases clobbered /etc/hosts directly anyway.
o Align the code with how unbound does it: use a private file for
  the hosts generation.
o HUP dnsmasq at the end of the hosts file regeneration.
o `--dhcp-hostsfile' was really really wrong as /etc/hosts is read
  automatically, and the file specified here should have been adhering
  to the dhcp leases format of on `--dhcp-host' argument per line.
2016-11-23 07:47:07 +01:00
Franco Fichtner
1b5c6d1b9a dnsmasq: need to stop dhcpleases; should daemonize on its own 2016-11-23 06:48:59 +01:00
Franco Fichtner
bed2dbd8d8 dnsmasq: one more for #1226 2016-11-22 22:21:45 +01:00
Ad Schellevis
ad0109f60a (plugins) add xmlrpc sync to plugins, closes https://github.com/opnsense/core/issues/1224 2016-11-22 20:56:43 +01:00
Franco Fichtner
a5fc46bd97 dnsmasq: refactor services_dhcpleases_configure() for #1266 2016-11-22 20:10:54 +01:00
Franco Fichtner
8b61365fa6 firmware: show license in packages/plugins; closes #1220 2016-11-22 18:41:53 +01:00
Ad Schellevis
c3e8468518 (proxy) add ftp support again for remote acl download. We switched to python's requests library, which doesn't support ftp. Some people still use ftp though. 2016-11-22 18:29:31 +01:00
Franco Fichtner
ce94277186 dhcp: interface column for leases; closes #860
Getting crowded...
2016-11-22 17:02:45 +01:00
Ad Schellevis
b9392f59b5 (ipsec) fix syslog output, eventually we should switch to the new style loggers, but for now it's better to make sure charondebug is respected.
From the docs:

Starting with version 4.2.9, strongSwan provides a much more flexible configuration of the loggers. Logger configurations in strongswan.conf have a higher priority than charondebug in ipsec.conf: If you define any loggers in strongswan.conf, charondebug does not have any effect at all.
2016-11-22 14:25:29 +01:00