Franco Fichtner
feba63b664
interfaes: move magic /tmp/devX_pdinfo handling away from GUI page
...
While here separate between IPv4 and IPv6 reload (again?) and
rename the PINFO variable to PDINFO for consistency.
2020-05-11 04:12:16 +02:00
Franco Fichtner
b62ba73968
src: style sweep
2020-05-10 20:29:39 +02:00
ツ
070521cfcb
Updated Pattern Options for IDS/IPS ( #4104 )
...
Adding:
Aho-Corasick, reduced memory implementation
Aho-Corasick, "Ken Steele" variant
2020-05-10 18:14:59 +02:00
Ad Schellevis
7669c6c56e
logging / reverse setting not used anymore in core, lets drop it now. for https://github.com/opnsense/core/issues/4068
...
There might be a couple of plugins still using the old log viewer, but since the default setting is usually left intact, it should be safe to remove it now.
2020-05-10 00:57:18 +02:00
Ad Schellevis
4196622d53
ditch dump_clog() in system_log.widget.php widget, compatibility for https://github.com/opnsense/core/issues/4068
2020-05-10 00:54:06 +02:00
Ad Schellevis
faf650e7ca
Syslog: optionally disable legacy (clog) logging ( #4101 )
...
* Syslog-NG replacement for legacy syslog local logs:
Part of this commit:
- support both formats in query log, which is used by our log api
- sample local syslog-ng target for configd
for https://github.com/opnsense/core/issues/4068
* syslog: add disable clog toggle + preserve number of log (days) setting when only using syslog-ng. for https://github.com/opnsense/core/issues/4068
* syslog: include local syslog-ng files when clog is disabled. for https://github.com/opnsense/core/issues/4068
* Syslog-NG: change local handling, add relayd file to test the concept.
The local directory contains filters for local targets, which should replace the <plugin>_syslog() construction eventually, everything relevant and not matched is send to system
for https://github.com/opnsense/core/issues/4068
* Syslog-NG: minor update to local template to support module/file format as the query log handler supports it (e.g. /var/log/squid/access/) and add local templates
* Syslog-NG: change flush log actions to support new format, while here make sure "flush all" actuallly flushes all logs (including plugins). for https://github.com/opnsense/core/issues/4068
* Syslog-NG: missing level in system log, for https://github.com/opnsense/core/issues/4068
* fix typo for https://github.com/opnsense/core/issues/4068
* syslog-ng: filter live log support for https://github.com/opnsense/core/issues/4068
* Syslog-NG: replace diag_logs_filter_summary.php for mvc enabled version, using the same log output as live log, for https://github.com/opnsense/core/issues/4068
* Syslog-NG: add log cleanup script to enforce preservelogs setting. for https://github.com/opnsense/core/issues/4068
* Syslog-NG: webuser auth message should use LOG_AUTH facility. for https://github.com/opnsense/core/issues/4068
* Syslog-NG: ditch sshlockout_pf in favour for a small script that locks out ssh/web gui failed attempts for both IPv4 and IPv6. for https://github.com/opnsense/core/issues/4068
* ditch sshlockout_pf dependancy, for https://github.com/opnsense/core/issues/4068
* fix indent in ACL, for https://github.com/opnsense/core/issues/4068
* fix plist
2020-05-10 10:59:14 +02:00
Franco Fichtner
f274499c8b
interfaces: let's get dangerous (again)
2020-05-10 09:12:41 +02:00
Franco Fichtner
bc5405bd54
interfaces: small adjustments, fix debug read
2020-05-10 08:47:32 +02:00
Martin Wasley
798bd7ec1d
Add multiple interfaces to rtsold call ( #4100 )
...
* Add multiple interfaces to rtsold call
fix inccorect pid
* Update interfaces.inc
Change RTSOLD to use -a option and drop interface append
Co-authored-by: Martin Wasley <martin@queens-park.com>
2020-05-10 08:40:00 +02:00
Martin Wasley
39a3a91283
interfaces: Show ISP Assigned PD in status interfaces
...
Uses the new feature within dhcp6c to display the ISPs allocated prefix.
We may be able to use this rather than asking the user to enter the prefix
size in interfaces.
PR: https://github.com/opnsense/core/pull/4099
2020-05-10 08:37:29 +02:00
Martin Wasley
5ed15ca47c
interafces: move settings for dhcp6c to system_advanced_network
...
PR: https://github.com/opnsense/core/pull/4096
2020-05-10 08:25:59 +02:00
Franco Fichtner
d8c8129889
interfaces: refuse to run dhcp6c on unconfigured interfaces
...
LAN trackers use SIGHUP only so this is safe.
2020-05-10 08:08:23 +02:00
Martin Wasley
47f40e1782
interfaces: additions for multiwan dhcp6c part 2
2020-05-09 09:39:36 +02:00
Franco Fichtner
6420b41d8e
interafces: make rtsold_script easier to work on
...
This will be refactored into a script or template
soon enough, but for now we need to allow easier
edits to bring it to the next level.
2020-05-08 15:57:14 +02:00
Franco Fichtner
3d365027ae
captiveportal: safety belts, we require ipfw #4093
2020-05-08 09:44:06 +02:00
Franco Fichtner
2ba1e4ec7f
rc: implement inline variables for skip and defer #4093
...
Future use cases are dhcp6c and unbound...
2020-05-08 09:36:09 +02:00
Franco Fichtner
da620c4ec1
rc: if we use dhcp6c rc script, we don't want it operated here
...
PR: https://github.com/opnsense/core/issues/4093
2020-05-08 08:30:16 +02:00
Ad Schellevis
fe32660338
menu: unescape url, to avoid redirecting to &
2020-05-07 15:58:24 +02:00
Ad Schellevis
adbb91289f
filter: outbound nat, allow src/dst port range. closes https://github.com/opnsense/core/issues/4090
2020-05-07 14:54:46 +02:00
Franco Fichtner
d87ce014d9
interfaces: bring back special IPv6 vars
2020-05-06 16:54:58 +02:00
Franco Fichtner
732e4b3388
interfaces: one rtsold script to rule them all
2020-05-06 16:06:15 +02:00
Franco Fichtner
fbe5a1909e
interfaces: small changes, remove soon to be reinvented flags from GUI
2020-05-06 10:17:52 +02:00
Ad Schellevis
708afdfb96
configd: suppress idna warnings, we already know the contributed idna patches where a bad idea ( https://github.com/opnsense/core/pull/2327 , https://github.com/opnsense/core/pull/3107 )
...
since this is only a warning that it will unmodified content, we may as well silence the message. closes https://github.com/opnsense/core/issues/4086
2020-05-05 15:38:51 +02:00
Ad Schellevis
c44bb60a01
IDS: compress stats.log backups, for https://github.com/opnsense/core/issues/4085
2020-05-05 15:23:58 +02:00
Ad Schellevis
54c42a1f02
filter: another take on "no translation address with matching address family found." ( https://github.com/opnsense/core/issues/2841 ).
...
It seems that our nat/interface targets mis braces, which requires addresses to be available on load.
2020-05-04 15:51:34 +02:00
Ad Schellevis
1f4bf173d1
notice: before fitching notice, let's make sure these messages are actually being forwarded to syslog ( https://github.com/opnsense/core/issues/4018 ). this also eases debugging if you can inspect issues in context of other events.
2020-05-04 15:30:42 +02:00
Franco Fichtner
67e4751fb7
interfaces: style update
2020-05-04 13:07:50 +02:00
Franco Fichtner
9d03fa9c09
interfaces: meant to commit this for @marjohn56
2020-05-04 12:57:38 +02:00
Franco Fichtner
b2618e6091
interfaces: style update via @marjohn56
2020-05-04 12:54:35 +02:00
Franco Fichtner
731922834c
interfaces: detect dhcpv6 "unique" IA-ID and use it
...
In theory, the IA-ID is for tracking matching interface configuration.
The default is 0 but it can be any numeric value...
2020-05-03 19:18:37 +02:00
Martin Wasley
d0fba889a5
Interfaces inc changes for multiwan dhcp6 - Part 1
...
The additions and changes to these files are the first part needed to add multiwan dhcp6.
2020-05-03 18:01:44 +02:00
Ad Schellevis
1b264e8192
MVC: ArrayField sorting, when no sorting is provided return internal structure (unsorted). closes https://github.com/opnsense/core/pull/4072
2020-04-30 13:56:00 +02:00
Franco Fichtner
00c07864f6
filter: change approach, increase automatic limit
2020-04-29 21:15:55 +02:00
Franco Fichtner
8933e787f5
system: set value on the fly, remove nonexistent tunable
2020-04-29 10:03:31 +02:00
Franco Fichtner
10b4bbfe8d
system: figure out which sysctls are writeable
2020-04-29 09:21:56 +02:00
NOYB
25e46b988d
Add sort flag param comment to sortedBy function header. ( #4075 )
2020-04-29 08:33:06 +02:00
Franco Fichtner
4f82e4efa5
system: this new feature is wonky...
2020-04-29 08:18:24 +02:00
Ad Schellevis
0f444e7751
Merge branch 'NOYB-ArrayField_-_Sort_Flags_Parameter_Support'
2020-04-28 15:04:11 +02:00
Ad Schellevis
3731bd1026
MVC: searchBase() change default sorting behavior to natural for https://github.com/opnsense/core/pull/4070
...
* although the impact on most endpoints should be very spectacular in a negative sense, we probably better keep this on master for a couple of versions.
2020-04-28 15:02:15 +02:00
NOYB
b2b33c9e26
ArrayField - Add sort_flags optional parameter support
...
e.g. SORT_NATURAL: 9, 20, 80 rather than 20, 80, 9
Default, SORT_REGULAR, is unchanged.
2020-04-27 22:07:27 -07:00
Ad Schellevis
aef9ada7d1
style sweep https://github.com/opnsense/core/pull/4064
2020-04-26 19:32:41 +02:00
İlteriş Eroğlu
e85557938c
Add AdvLinkMTU to Router Advertisements page ( #4064 )
2020-04-27 11:36:55 +02:00
Ad Schellevis
0d07fae36a
authgui.inc: don't allow login redirects to visit external pages. closes https://github.com/opnsense/core/issues/4061
2020-04-26 15:15:40 +02:00
Franco Fichtner
4bac359e09
system: html_safe() for module outputs
...
PR: https://forum.opnsense.org/index.php?topic=16955.0
2020-04-26 09:48:42 +02:00
Franco Fichtner
3db7e720cd
firewall: avoid greedy match for #4067
2020-04-26 09:39:11 +02:00
Franco Fichtner
2a216f91c7
Framework: small comment on current use for these settings
2020-04-24 09:17:48 +02:00
Franco Fichtner
22b67cc1d9
pkg: ideally we do not need this override anymore
2020-04-24 09:15:10 +02:00
Ad Schellevis
74f235ac4a
Unbound: prevent wilcard domains for this machines primary domain (since you can't forward all and be responsible for a part). mentioned here https://github.com/opnsense/core/issues/4049
2020-04-23 08:28:08 +02:00
Ad Schellevis
600c794fcf
IDPS: disable stats in eve.log to restore 20.1 bevaviour, the current dev version is very load (and we only filter alert entries)
2020-04-21 15:08:56 +02:00
Ad Schellevis
8bfd62c876
interfaces: typo in validation, failed to communicate unassignable targets. closes https://github.com/opnsense/core/issues/4050
2020-04-21 11:09:19 +02:00