3936 Commits

Author SHA1 Message Date
Franco Fichtner
feba63b664 interfaes: move magic /tmp/devX_pdinfo handling away from GUI page
While here separate between IPv4 and IPv6 reload (again?) and
rename the PINFO variable to PDINFO for consistency.
2020-05-11 04:12:16 +02:00
Franco Fichtner
b62ba73968 src: style sweep 2020-05-10 20:29:39 +02:00
Ad Schellevis
faf650e7ca
Syslog: optionally disable legacy (clog) logging (#4101)
* Syslog-NG replacement for legacy syslog local logs:

Part of this commit:

- support both formats in query log, which is used by our log api
- sample local syslog-ng target for configd

for https://github.com/opnsense/core/issues/4068

* syslog: add disable clog toggle + preserve number of log (days) setting when only using syslog-ng. for https://github.com/opnsense/core/issues/4068

* syslog: include local syslog-ng files when clog is disabled. for https://github.com/opnsense/core/issues/4068

* Syslog-NG: change local handling, add relayd file to test the concept.

The local directory contains filters for local targets, which should replace the <plugin>_syslog() construction eventually, everything relevant and not matched is send to system

for https://github.com/opnsense/core/issues/4068

* Syslog-NG: minor update to local template to support module/file format as the query log handler supports it (e.g. /var/log/squid/access/) and add local templates

* Syslog-NG: change flush log actions to support new format, while here make sure "flush all" actuallly flushes all logs (including plugins). for https://github.com/opnsense/core/issues/4068

* Syslog-NG: missing level in system log, for https://github.com/opnsense/core/issues/4068

* fix typo for https://github.com/opnsense/core/issues/4068

* syslog-ng: filter live log support for https://github.com/opnsense/core/issues/4068

* Syslog-NG: replace diag_logs_filter_summary.php for mvc enabled version, using the same log output as live log, for https://github.com/opnsense/core/issues/4068

* Syslog-NG: add log cleanup script to enforce preservelogs setting. for https://github.com/opnsense/core/issues/4068

* Syslog-NG: webuser auth message should use LOG_AUTH facility. for https://github.com/opnsense/core/issues/4068

* Syslog-NG: ditch sshlockout_pf in favour for a small script that locks out ssh/web gui failed attempts for both IPv4 and IPv6. for https://github.com/opnsense/core/issues/4068

* ditch sshlockout_pf dependancy, for https://github.com/opnsense/core/issues/4068

* fix indent in ACL, for https://github.com/opnsense/core/issues/4068

* fix plist
2020-05-10 10:59:14 +02:00
Franco Fichtner
f274499c8b interfaces: let's get dangerous (again) 2020-05-10 09:12:41 +02:00
Franco Fichtner
bc5405bd54 interfaces: small adjustments, fix debug read 2020-05-10 08:47:32 +02:00
Martin Wasley
798bd7ec1d
Add multiple interfaces to rtsold call (#4100)
* Add multiple interfaces to rtsold call
fix inccorect pid

* Update interfaces.inc

Change RTSOLD to use -a option and drop interface append

Co-authored-by: Martin Wasley <martin@queens-park.com>
2020-05-10 08:40:00 +02:00
Martin Wasley
39a3a91283 interfaces: Show ISP Assigned PD in status interfaces
Uses the new feature within dhcp6c to display the ISPs allocated prefix.
We may be able to use this rather than asking the user to enter the prefix
size in interfaces.

PR: https://github.com/opnsense/core/pull/4099
2020-05-10 08:37:29 +02:00
Franco Fichtner
d8c8129889 interfaces: refuse to run dhcp6c on unconfigured interfaces
LAN trackers use SIGHUP only so this is safe.
2020-05-10 08:08:23 +02:00
Martin Wasley
47f40e1782 interfaces: additions for multiwan dhcp6c part 2 2020-05-09 09:39:36 +02:00
Franco Fichtner
6420b41d8e interafces: make rtsold_script easier to work on
This will be refactored into a script or template
soon enough, but for now we need to allow easier
edits to bring it to the next level.
2020-05-08 15:57:14 +02:00
Franco Fichtner
3d365027ae captiveportal: safety belts, we require ipfw #4093 2020-05-08 09:44:06 +02:00
Franco Fichtner
2ba1e4ec7f rc: implement inline variables for skip and defer #4093
Future use cases are dhcp6c and unbound...
2020-05-08 09:36:09 +02:00
Franco Fichtner
da620c4ec1 rc: if we use dhcp6c rc script, we don't want it operated here
PR: https://github.com/opnsense/core/issues/4093
2020-05-08 08:30:16 +02:00
Franco Fichtner
d87ce014d9 interfaces: bring back special IPv6 vars 2020-05-06 16:54:58 +02:00
Franco Fichtner
732e4b3388 interfaces: one rtsold script to rule them all 2020-05-06 16:06:15 +02:00
Franco Fichtner
fbe5a1909e interfaces: small changes, remove soon to be reinvented flags from GUI 2020-05-06 10:17:52 +02:00
Ad Schellevis
1f4bf173d1 notice: before fitching notice, let's make sure these messages are actually being forwarded to syslog (https://github.com/opnsense/core/issues/4018). this also eases debugging if you can inspect issues in context of other events. 2020-05-04 15:30:42 +02:00
Franco Fichtner
67e4751fb7 interfaces: style update 2020-05-04 13:07:50 +02:00
Franco Fichtner
9d03fa9c09 interfaces: meant to commit this for @marjohn56 2020-05-04 12:57:38 +02:00
Franco Fichtner
b2618e6091 interfaces: style update via @marjohn56 2020-05-04 12:54:35 +02:00
Franco Fichtner
731922834c interfaces: detect dhcpv6 "unique" IA-ID and use it
In theory, the IA-ID is for tracking matching interface configuration.
The default is 0 but it can be any numeric value...
2020-05-03 19:18:37 +02:00
Martin Wasley
d0fba889a5 Interfaces inc changes for multiwan dhcp6 - Part 1
The additions and changes to these files are the first part needed to add multiwan dhcp6.
2020-05-03 18:01:44 +02:00
Franco Fichtner
00c07864f6 filter: change approach, increase automatic limit 2020-04-29 21:15:55 +02:00
Franco Fichtner
8933e787f5 system: set value on the fly, remove nonexistent tunable 2020-04-29 10:03:31 +02:00
Franco Fichtner
10b4bbfe8d system: figure out which sysctls are writeable 2020-04-29 09:21:56 +02:00
Franco Fichtner
4f82e4efa5 system: this new feature is wonky... 2020-04-29 08:18:24 +02:00
Ad Schellevis
aef9ada7d1 style sweep https://github.com/opnsense/core/pull/4064 2020-04-26 19:32:41 +02:00
İlteriş Eroğlu
e85557938c
Add AdvLinkMTU to Router Advertisements page (#4064) 2020-04-27 11:36:55 +02:00
Ad Schellevis
0d07fae36a authgui.inc: don't allow login redirects to visit external pages. closes https://github.com/opnsense/core/issues/4061 2020-04-26 15:15:40 +02:00
Ad Schellevis
3b3577f1f5 plugins_devices: vxlan and loopback devices are configurable, for https://github.com/opnsense/core/issues/4050 2020-04-21 11:05:12 +02:00
Maurice
144272ffbb
Unbound: add DNS64 support (#3943) 2020-04-21 08:20:21 +02:00
Franco Fichtner
2c3da19953 dpinger: sort and add missing comma 2020-04-19 12:25:12 +02:00
Franco Fichtner
15737656ed src: style sweeep and sync 2020-04-19 12:17:31 +02:00
Ad Schellevis
ab04204151 dpinger: add data length option, while there simplify logic to remove duplicate logic. closes https://github.com/opnsense/core/issues/4047 2020-04-18 19:26:46 +02:00
Franco Fichtner
40ed63239d rc: sync ttys file, slightly overdue as onifexists is supported by 11.2 2020-04-13 13:10:29 +02:00
Franco Fichtner
a6f0def554 rc: this failed, make some noise and pause a bit for the future 2020-04-13 12:47:06 +02:00
Franco Fichtner
2efdcf51fc rc: missing user on 12.1 2020-04-13 12:25:18 +02:00
Franco Fichtner
9904a1da4c interfaces: make rc.newwanipv6 more clever...
... since b8a3c3dd3f6c can mimic the behaviour of get_interface_ipv6()
we can now call interfaces_primary_address6() instead of the less
educated find_interface_ipv6*() equivalents.

Probably quite some people with WAN aliases run into this issue where
renewal doesn't work because rc.newwanipv6 latches on to the VIP instead
of the primary address.
2020-04-11 11:25:03 +02:00
Ad Schellevis
b5e507f7c7 IPv6 essential icmpv6, fix previous for https://github.com/opnsense/core/issues/4028 mixed up addresses as noted by @fichtner 2020-04-07 20:08:06 +02:00
Ad Schellevis
25630084d0 IPv6 essential icmpv6 allow :: for https://github.com/opnsense/core/issues/4028
RFC 4861 Neighbor Discovery in IPv6 has cases where the source address is unspecified ("::")
i.e. Par 4.1 Router Solicitation Message Format
2020-04-07 16:04:55 +02:00
Franco Fichtner
df73492c72 interfaces: typo 2020-04-06 13:34:39 +02:00
Franco Fichtner
e35692fe66 system: Dutch out, Norwegian in 2020-04-03 10:53:23 +02:00
Franco Fichtner
b8a3c3dd3f interfaces: adapt logic employed by get_interface_ipv6()
If we do not specifically list a prefix ignore global
addresses even if we get one for free.  The GUI has been
indicating the same thing for quite some time now.
2020-04-01 09:20:29 +02:00
Franco Fichtner
a4c6003bc2 Revert "use freebsd built in growfs script (#3810)"
Breaks our default Nano image growfs, the only use case we have.

This reverts commit 7fe5fe52dcc948d8988f995905efeab8d96af144.
This reverts commit 16efb9aa348124b1d5d9755f40c67df8124698ba.
2020-03-30 12:17:22 +02:00
Ad Schellevis
8b5a54e030 OpenVPN server: multihome when selecting any interface + udp. closes https://github.com/opnsense/core/issues/4004 2020-03-27 15:49:01 +01:00
Franco Fichtner
2bcfd124b8 interfaces: stop radvd from crashing 2020-03-24 08:59:11 +01:00
Franco Fichtner
6b9865876a src: PSR12 style sweep 2020-03-18 07:43:01 +01:00
Ad Schellevis
e559644fb7 unbound: wrap unbound startup + preparation into unbound_start.sh and move startup to background configd task 2020-03-17 16:16:49 +01:00
Ad Schellevis
1219969e83 fix previous 2020-03-17 14:03:25 +01:00
Ad Schellevis
0ea36d1a21 syslog: fix cda4e3561f
- sleep() expects an int, use usleep instead to wait 0.1 seconds
- bail if waiting longer than 5 seconds
2020-03-17 13:04:42 +01:00