9017 Commits

Author SHA1 Message Date
Franco Fichtner
fdfd65c4bf interfaces: typo #2458 2018-06-25 15:58:37 +00:00
Franco Fichtner
f15d106e51 interfaces: give first-time hint to ajax #2458 2018-06-25 15:55:39 +00:00
Franco Fichtner
0408e32f87 interfaces: add fargw knob, last bits of UX; closes #2458 2018-06-25 15:34:14 +00:00
Franco Fichtner
79b632565b interfaces: more tweaks #2458 2018-06-25 07:27:50 +00:00
Franco Fichtner
7d439db55a interfaces: ordering, labels #2458 2018-06-25 07:16:39 +00:00
Franco Fichtner
1982779e72 interfaces: more wording tweaks for #2458 2018-06-25 09:11:24 +02:00
Franco Fichtner
bd46d9c09a interfaces: IPv6 static gateway for #2458 2018-06-25 09:07:07 +02:00
Franco Fichtner
8fb5059022 system: fix sentence 2018-06-25 08:37:48 +02:00
Franco Fichtner
e8bc3e6ce0 firewall: no need to schedule if scheduled rule is disabled 2018-06-25 06:27:42 +00:00
Franco Fichtner
e13de05e92 firewall: gyphicons gone; closes #2440 2018-06-25 06:24:10 +00:00
Franco Fichtner
088ad6af39 firewall: glyphicon rework #2440 2018-06-25 05:47:54 +00:00
Franco Fichtner
4d27c9b385 firewall: npt and small fix in 1to1 #2440 2018-06-23 19:42:24 +00:00
Franco Fichtner
a29c516a87 firewall: one-to-one glyphicon removal #2440 2018-06-23 19:29:54 +00:00
Ad Schellevis
9ad5d9620b obey session_timeout parameter in mvc code, ref https://github.com/opnsense/core/issues/2177 2018-06-23 18:16:17 +02:00
Franco Fichtner
819dc79b8a system: we cannot set session timeout to "0" anymore #2177 2018-06-23 17:36:02 +02:00
Franco Fichtner
6a6e77c3d3 system: cleanup related to #2177 2018-06-23 17:28:01 +02:00
Franco Fichtner
a386ccc2f2 interfaces: experiment with descriptions #2458 2018-06-23 16:26:44 +02:00
Franco Fichtner
313c3b148a interfaces: keep current selection if not muti-wan #2458 2018-06-23 16:18:05 +02:00
Franco Fichtner
eb96f3c297 interfaces: start to improve #2458 2018-06-23 16:11:21 +02:00
Franco Fichtner
d346577092 unbound: read internal subnets from ifconfig; closes #2472 2018-06-23 12:24:42 +00:00
Franco Fichtner
90e5274b54 interfaces: small style update 2018-06-23 12:24:07 +00:00
Franco Fichtner
e3658979f5 unbound: small tweak in previous 2018-06-23 12:57:04 +02:00
DJFelix
5c6adbcdb8 Unbound - extend access-control feature (#2474)
add support for "deny_non_local" and "refuse_non_local" ACLs

see: 2c84c28a22
2018-06-23 12:55:58 +02:00
Franco Fichtner
299144a0be unbound: style in ACL page 2018-06-23 12:54:22 +02:00
Franco Fichtner
66b6bd3d28 unbound: kill ancient and unused code 2018-06-23 12:48:02 +02:00
Franco Fichtner
3b7c0bca06 interfaces: move radvd restart from IPv4 to IPv6 change #2394 2018-06-22 08:37:41 +02:00
Franco Fichtner
f518f709af pkg: migrate from origin.conf to OPNsense.conf
Using the project name in the file makes work flow less confusing,
especially since we have a FreeBSD.conf right next to it.

PR: https://github.com/opnsense/update/issues/35
2018-06-21 15:36:05 +02:00
Franco Fichtner
faaafb136c rc: suppress message of service not enabled 2018-06-20 15:48:26 +02:00
Franco Fichtner
4e75cfdf51 widget: fix another typo reported via translation project 2018-06-20 12:54:38 +02:00
Franco Fichtner
ef7b6375b8 firewall: fix a typo via translation project 2018-06-20 12:50:41 +02:00
Franco Fichtner
d59775fabc firewall: fix typo in shaper reported via translation project 2018-06-20 12:48:23 +02:00
Franco Fichtner
b0d739a60f openvpn: tabs vs. spaces 2018-06-19 08:12:59 +02:00
Justin Coffman
246bd932c6 Further KU/EKU fixes. (#2465)
The matching KUs for EKU "TLS Web Server Authentication" are Digital Signature AND
(Key Encipherment OR Key Agreement). Added for compatibility with externally-generated
certificates.
2018-06-19 08:08:03 +02:00
Franco Fichtner
18422bd9fc system: tweak previous 2018-06-19 06:06:01 +00:00
Franco Fichtner
79bf33a1ca system: better dhparam support including RFC 7919 2018-06-19 07:51:29 +02:00
Justin Coffman
1f8fc1295b Added 3072-bit RSA key length options. (#2466)
This conforms to current recommendations and best practices for a
128-bit security margin.

2048 is still the minimum recommended, but 2048-bit RSA only aligns to a
112-bit security margin, roughly analogous to 3DES. AES-128, the
minimum recommended cipher, requires a 3072-bit RSA key and a 256-bit digest
(SHA256) to provide an equivalent security level in all cryptographic
components.
2018-06-19 07:04:04 +02:00
Franco Fichtner
ccee4c9927 system: provide default for user language
Sometimes users are confused why their user's language does not
change when edited under System: Settings: General.  Even during
password change a language is forced so we can avoid it by giving
an empty default which will keep the language tied to the system.
2018-06-18 09:59:46 +02:00
Franco Fichtner
6c6b3e107e webgui: load mod_setenv for new config parameter 2018-06-18 07:34:04 +02:00
Franco Fichtner
2a1da92b54 system: small tweaks, this state is ok 2018-06-17 21:40:25 +02:00
Franco Fichtner
043ad6e0db system: mock default file for low level selection 2018-06-17 21:33:39 +02:00
Franco Fichtner
a20aacb4ae system: custom dh parameter creation for #2466 2018-06-17 21:20:43 +02:00
Franco Fichtner
f4e7d2dc2a ui: tiny indent issue in default volt 2018-06-17 20:52:31 +02:00
Franco Fichtner
3a518cf680 src: style sweep et al 2018-06-17 18:45:51 +00:00
Franco Fichtner
e64f0d0b51 firmware: test for sample file, not target
PR: https://github.com/opnsense/update/issues/35
2018-06-17 18:20:30 +00:00
Franco Fichtner
1f522b2ed6 system: prepare origin.conf -> OPNsense.conf move
PR: https://github.com/opnsense/update/issues/35
2018-06-16 18:34:40 +02:00
Franco Fichtner
893940e532 pkg: sync 2018-06-15 15:34:27 +02:00
Ad Schellevis
d6ddb13535 ditch the old tokenizer https://github.com/opnsense/core/issues/2227 2018-06-15 15:28:41 +02:00
Ad Schellevis
925bdcd38b Tokenize2 has the same issue with blur as https://github.com/opnsense/core/issues/1689, hook tab to blur event 2018-06-15 15:18:03 +02:00
Franco Fichtner
b92654ca08 reporting: adjust buttons in previous 2018-06-15 11:00:03 +02:00
Ad Schellevis
8f060d4a7a Netflow/insight and the endless UFS instability... in some cases sqlite can't figure out database inconsistencies by itself. In these cases it is practical to force a repair (rebuild) of the underlaying files manually.
This commit adds an option in reporting_settings.php to request a dump/import from https://github.com/opnsense/core/blob/18.1.9/src/opnsense/site-python/sqlite3_helper.py#L69
2018-06-15 10:31:00 +02:00