13907 Commits

Author SHA1 Message Date
Ad Schellevis
ff11cde38e Services / Unbound - fix domain override ip validation as it may contain a port number using the following format x.x.x.x@53 cc @swhite2
When migration failed into 22.1.5, this patch in combination with `/usr/local/opnsense/mvc/script/run_migrations.php` should fix migration issues. No new model version is needed as
the previous version wasn't able to migrate in this case. closes https://github.com/opnsense/core/issues/5693
2022-04-09 08:50:38 +02:00
Vlad Glagolev
4d8468434c
System -> HA-> Settings : Typo fix (#5689) 2022-04-09 08:15:54 +02:00
Franco Fichtner
4485895274 dhcp: allow custom configuration from directories; closes #5313 2022-04-08 14:23:48 +02:00
Franco Fichtner
1b7ab40ce4 dhcp: support ipxe; closes #5385
Suggested by: @alex-s-team
2022-04-08 13:55:56 +02:00
Franco Fichtner
09e68888b4 firewall: make sure people realise default deny also means state violation 2022-04-08 11:50:45 +02:00
Franco Fichtner
80ba04f721 dhcp: reload action for cron; closes #5410
Change the structure a little to support reloading either all
dhcp-related services or only a certain address family through
optional parameter: "inet" for IPv4 and "inet6" for IPv6.

The issue with the original proposal was that although dhcpd6
was restarted we also need to restart radvd since it is affected
by the same bug #4691 and still seems to be happening in the wild
in FreeBSD 13.

While here expand to full path of pluginctl in an unrelated file.
2022-04-07 16:22:38 +02:00
Franco Fichtner
8ea40560df system: use protect -i here for future-proof setup
Still needs a base system fix but will be included shortly.
2022-04-07 14:55:36 +02:00
Franco Fichtner
61def877f2 system: protect syslog daemon from OOM kill
SSHD does something similar.  Obtained via IRC.
2022-04-07 12:02:51 +02:00
Franco Fichtner
2414ed3955 src: fix typo and sync LICENSE 2022-04-06 09:23:00 +02:00
Ad Schellevis
816d3972c8 Services / Captiveportal - prevent cleansing password field, closes https://github.com/opnsense/core/issues/5678 2022-04-05 22:30:54 +02:00
Franco Fichtner
6ef03ba7e4 interfaces: comment on previous, add TODO 2022-04-06 07:58:14 +02:00
Franco Fichtner
6d1d52b3db pkg: add glue to change phalcon version
Switch to version 5:

    make upgrade CORE_PHALCON=

Version 4 is used by default on PHP 7.4 and only version 5 can be
used with PHP 8.0.
2022-04-06 07:55:31 +02:00
Franco Fichtner
629cede204 firmware: fix this check like the other one 2022-04-05 14:41:31 +02:00
Franco Fichtner
248664c816 system: protect -n test with quotes, shell style while at it 2022-04-05 10:05:01 +02:00
Ad Schellevis
e0f9acc76a Reporting -> Health -> System -> CPU Temp - add temperature sources to rrd collection. closes https://github.com/opnsense/core/issues/5601
Always prefer cpu temp as before, when not available consider the folowing options

o hw.acpi.thermal.tz0.temperature --> ACPI temp
o hw.temperature.CPU --> apparantly used for arm devices.
2022-04-05 09:57:43 +02:00
Franco Fichtner
3d5c8433e7 unbound: fix permissions 2022-04-05 09:33:36 +02:00
Franco Fichtner
e91330f9ff interfaces: VLAN UX to consider 2022-04-05 08:42:14 +02:00
Franco Fichtner
c64b0363ae interfaces: exclude existing VLANs and load from model instead 2022-04-05 08:42:14 +02:00
Franco Fichtner
0aa6a10a21 make: compare hash as well on "upgrade"
Helps with development and git commit --amend.
2022-04-05 07:45:22 +02:00
Franco Fichtner
d1d2e7e75e interfaces: tweak wording and mark nonexistent as "no carrier" 2022-04-04 21:31:24 +02:00
Ad Schellevis
6e6a0a280c Bootgrid - omit total entries for log grids. 2022-04-04 20:11:04 +02:00
Ad Schellevis
6e4789f225 Interfaces: Other Types: VLAN - add not yet applied vlan's in model field. 2022-04-04 19:50:36 +02:00
Franco Fichtner
d9eeb5d066 src: whitespace sweep 2022-04-04 20:39:38 +02:00
Franco Fichtner
8a3887da9c interfaces: throw error on nonexistent assignment 2022-04-04 20:32:56 +02:00
Stephan de Wit
ebdf49363e
unbound: clean up references to legacy code, use mvc instead. also minor style fix (#5663) 2022-04-04 15:37:23 +02:00
Franco Fichtner
c0fdff1427 pkg: phalcon 5 test as well 2022-04-04 15:02:22 +02:00
Franco Fichtner
c3ae8435b7 pkg: dependency glue for PHP 8
json/openssl extensions moved to core package php80
2022-04-04 13:30:58 +02:00
Stephan de Wit
e9c8f59c6e unbound forwarding: be even more explicit about DoT usage 2022-04-04 12:51:24 +02:00
Franco Fichtner
b34ba9a61f interfaces: optional prefix tracking for WAN #5630 2022-04-04 09:12:50 +02:00
Franco Fichtner
5595e73f60 Revert "IPSec - VTI, ignore tunnel devices if local or remote endpoint can't be found."
This reverts commit 38efe9d9d69c837498240a4f696aa60751a4627b.

Back out this code not released so far.  We can solve this in a better
way now with the device-based plugin approach added in 22.1.3.
2022-04-04 07:55:24 +02:00
Franco Fichtner
5ae1244fb3 pkg: fix plist 2022-04-03 20:46:12 +02:00
Ad Schellevis
20dbc6c6b1 Interfaces: Other Types: VLAN - Exclude POINTOPOINT interface types, closes https://github.com/opnsense/core/issues/5603 2022-04-02 02:57:49 +02:00
Ad Schellevis
ad9b7b1f40
Firewall / Aliases - various usability and visibility improvements (#5668)
Firewall / Aliases - various usability and visibility improvements

o change /api/firewall/alias/listNetworkAliases endpoint to return name and address
o add alias description as subtext in network group dropdown
o exclude row buttons for internal aliases
o support nesting of external aliases
o attach statistics to external aliases (like bogons and new interface network types)
o add preprocess in alias to handle non gui defined types
o network aliases will flush :network into the table
o aliases which aren't managed via configured settings will be fetched for nesting
o gather pf tables which aren't generated into filter_tables.conf as being external so the new imported static_aliases are usable without the need to import the settings in the template language
o initial work to support interface networks, register internal types and flush to alias template
o support imported static aliases using json definitions and move core aliases in there
2022-04-03 16:25:08 +02:00
Ad Schellevis
627c922845 Backup - pass filename to openssl [en|de]crypt. smaller version of https://github.com/opnsense/core/pull/5661 2022-04-01 19:55:05 +02:00
Bo Frederiksen
e01b6501d0
Added the correct content-type for the dashboard plugins feed. (#5666) 2022-04-02 15:16:15 +02:00
Ad Schellevis
5aaa603d4c Revert "System: Configuration: Backups - Don't leak backup password to ps (#5661)"
This reverts commit 78de5b796c29b0d686ee2c33a510056680ef7248.
2022-04-01 18:57:00 +02:00
oittaa
78de5b796c
System: Configuration: Backups - Don't leak backup password to ps (#5661)
* Don't leak backup password to `ps`

* Encrypted is base64 encoded, decrypted plain text
2022-04-01 11:20:00 +02:00
Stephan de Wit
e802567b70 unbound: be more explicit about forwarding behaviour and fix typo 2022-03-31 16:23:53 +02:00
Franco Fichtner
01913bf712 interfaces: for symmetry with PPPoE do not reload WAN when address disappears
See also: https://forum.opnsense.org/index.php?topic=27657.0
2022-03-31 08:55:24 +02:00
Franco Fichtner
7583ce52a9 interfaces: proper logic in adv/custom/basic modes #5332
Clarify the logic: custom first (cannot enable tracking extension
due to unknown contents -- could be scanned but not for today),
advaned settings with NA request unset, or basic with prefixonly
mode set.
2022-03-31 08:41:37 +02:00
Franco Fichtner
ca2f7b0ffa interfaces: DHCPv6 advanced has a different flag to disable NA #5332 2022-03-31 08:19:15 +02:00
Franco Fichtner
26a1b126c0 mvc: flipflip years to make more sense of moved functionality
Noticed on diff with stable/22.1.
2022-03-30 10:21:47 +02:00
Franco Fichtner
135d42fb7c src: style sweep 2022-03-30 10:01:52 +02:00
oittaa
5fd93bde41
Use random_bytes() from PHP 7.0+ and simplify the voucher generation (#5659)
* Use random_bytes() from PHP 7.0+
* Simplify voucher generation
2022-03-30 09:44:01 +02:00
oittaa
ec5f6877f5
Security : Use password_verify() (#5660) 2022-03-30 08:27:56 +02:00
Franco Fichtner
8e444c3b32 dhcp: give a hint on why an interface was ignored in radvd
PR: https://forum.opnsense.org/index.php?topic=26700.0
2022-03-29 13:16:39 +02:00
Franco Fichtner
4b6fa9e556 interfaces: different patch for ifctl use
Router file created by PPPoE as well?

PR: https://forum.opnsense.org/index.php?topic=27657.15
2022-03-29 10:15:39 +02:00
Franco Fichtner
aa64571116 system: more comments on get_nameservers() 2022-03-29 09:19:12 +02:00
Franco Fichtner
64fb551caa interfaces: add context to assignment label
Really not much to talk about at length.
2022-03-28 16:53:31 +02:00
Franco Fichtner
383561b6f1 system: simplify previous a bit
We can set gateway to null as it is ignored when setting host
route.  Also adhere to logic for interface selection in both
DNS modes, but only exclude from configuration list for dynamic
ones.

For the time being we don't need static/dymanic annotation
as the system doesn't care by design and we don't filter it
anywhere else.  Might be something for the status page, but
that's a larger change to level expectations vs. dyamic
connectivity properties.

A couple of style issues here and there as well.
2022-03-28 11:59:31 +02:00