6377 Commits

Author SHA1 Message Date
Franco Fichtner
ffbbfc9635 acl: prune plugin files for #1037 2016-11-23 21:52:16 +01:00
Franco Fichtner
408790170f acl: more changes for #1037 2016-11-23 21:43:06 +01:00
Franco Fichtner
9205427c8e system: simplify ACL translation for #1037 2016-11-23 21:13:57 +01:00
Franco Fichtner
7526194b47 dnsmasq: reload dhcpleases on reconfigure; closes #1250
Private functions get "_" prefix, easy to spot from elsewhere
if needed.  Yes, someone will try this eventually.  ;)
2016-11-23 18:38:52 +01:00
Franco Fichtner
33c41b1613 unbound: register dhcp domain override for #1250 2016-11-23 18:15:50 +01:00
Franco Fichtner
2ca7253326 dnsmasq: domain override for dynamic dhcp lease registration
PR: https://github.com/opnsense/core/issues/1250
2016-11-23 18:06:30 +01:00
Franco Fichtner
24c8633736 auth: change slashes to dashes, breaking change for 17.1
Discussed with: @adschellevis
2016-11-23 17:16:34 +01:00
Franco Fichtner
7e75cf2631 dnsmasq: further cleanups for dhcpleases handling for #1226
o Respect the 'dnslocalhost' option, which wasn't previously possible
  because dhcpleases clobbered /etc/hosts directly anyway.
o Align the code with how unbound does it: use a private file for
  the hosts generation.
o HUP dnsmasq at the end of the hosts file regeneration.
o `--dhcp-hostsfile' was really really wrong as /etc/hosts is read
  automatically, and the file specified here should have been adhering
  to the dhcp leases format of on `--dhcp-host' argument per line.
2016-11-23 07:47:07 +01:00
Franco Fichtner
1b5c6d1b9a dnsmasq: need to stop dhcpleases; should daemonize on its own 2016-11-23 06:48:59 +01:00
Franco Fichtner
bed2dbd8d8 dnsmasq: one more for #1226 2016-11-22 22:21:45 +01:00
Ad Schellevis
ad0109f60a (plugins) add xmlrpc sync to plugins, closes https://github.com/opnsense/core/issues/1224 2016-11-22 20:56:43 +01:00
Franco Fichtner
a5fc46bd97 dnsmasq: refactor services_dhcpleases_configure() for #1266 2016-11-22 20:10:54 +01:00
Franco Fichtner
8b61365fa6 firmware: show license in packages/plugins; closes #1220 2016-11-22 18:41:53 +01:00
Ad Schellevis
c3e8468518 (proxy) add ftp support again for remote acl download. We switched to python's requests library, which doesn't support ftp. Some people still use ftp though. 2016-11-22 18:29:31 +01:00
Franco Fichtner
ce94277186 dhcp: interface column for leases; closes #860
Getting crowded...
2016-11-22 17:02:45 +01:00
Ad Schellevis
b9392f59b5 (ipsec) fix syslog output, eventually we should switch to the new style loggers, but for now it's better to make sure charondebug is respected.
From the docs:

Starting with version 4.2.9, strongSwan provides a much more flexible configuration of the loggers. Logger configurations in strongswan.conf have a higher priority than charondebug in ipsec.conf: If you define any loggers in strongswan.conf, charondebug does not have any effect at all.
2016-11-22 14:25:29 +01:00
Franco Fichtner
504c947bb7 ipsec: fix service name 2016-11-22 09:50:42 +01:00
Franco Fichtner
3222d5b25c netflow: add service control; closes #1268 2016-11-22 09:14:56 +01:00
Franco Fichtner
4b99ff9f02 wake on lan: acl and menu 2016-11-21 23:14:18 +01:00
Franco Fichtner
d83563faba ntpd: acl and menu 2016-11-21 23:04:43 +01:00
Franco Fichtner
a90efa2892 auth: migrated most entries to ACL.xml; closes #1267 2016-11-21 22:53:44 +01:00
Ad Schellevis
aaa4813103 (firewall) add maximum fragements, closes https://github.com/opnsense/core/issues/1246 2016-11-21 20:20:58 +01:00
Franco Fichtner
9ad060f680 igmp proxy: acl and menu 2016-11-21 18:16:39 +01:00
Franco Fichtner
4763373d51 bsnmpd: acl and menu entries 2016-11-21 18:08:53 +01:00
Franco Fichtner
2bb0f2301b unbound: fix/secure unbound control
Turns out unbound reload flushes cache as well.  Also, unbound-control
may hang when it runs into an "undefined state" (stoping a stopped
service, right), and lastly it wants to chroot after being chrooted
on reload, something that cannot be fixed with using unbound-control.

Keep unbound-control-setup in case somebody finds the facility useful.
2016-11-21 09:04:45 +01:00
Franco Fichtner
d539e535ed ntpd: array() required for new-style functions 2016-11-21 08:02:17 +01:00
Franco Fichtner
4a7ff2456f unbound: simply reload on /etc/hosts change 2016-11-21 07:58:15 +01:00
Franco Fichtner
c8236eec34 firmware: let copyrights reflect reality
Firmware MVC pages were introduced in 2015, since having been worked
on by Deciso and myself.
2016-11-21 07:31:26 +01:00
Franco Fichtner
c8cb224b14 plugins: fix plist 2016-11-21 07:07:36 +01:00
Franco Fichtner
5e1e138ff4 plugin: name by underlying system, not surfacing service
IPFW and PF are used for more than just firewall and shaper, e.g.
NAT, policy routing or shaping, and the plugin framework supports
registering multiple user-facing services per file.
2016-11-21 06:58:18 +01:00
Franco Fichtner
ff0dcc4d22 plugin: correct previous 2016-11-21 00:04:07 +01:00
Franco Fichtner
3b34f51f63 plugins: add firewall reload button, inline service_name_compare() 2016-11-21 00:02:41 +01:00
Franco Fichtner
b30940b5d8 ntpd: fix plist 2016-11-20 23:43:29 +01:00
Franco Fichtner
8a5b32bff8 relayd: called the other 'local' 2016-11-20 23:42:05 +01:00
Franco Fichtner
fd987e639c ntpd: it's a plugin! 2016-11-20 23:36:31 +01:00
Franco Fichtner
4a6a53bc94 services: tweak the wait-for-service dialog 2016-11-20 21:02:40 +01:00
Franco Fichtner
c602a7fd22 services: simplify config writes 2016-11-20 20:44:08 +01:00
Franco Fichtner
e8ccc540d9 firmware: tweak previous 2016-11-20 20:30:27 +01:00
Franco Fichtner
8774b3c668 firmware: add changelog fetch for cron usage 2016-11-20 20:25:48 +01:00
Franco Fichtner
09ea0aa82d firmware: delete_packages is unsupported
pkg can display to-be-deleted packages, but won't resolve these
issues when triggered using "upgrade -n".  Thus, it's pointless
to try to keep this code until a newer pkg release can actually
cope with resolving the full upgrade cycle before upgrading.
2016-11-20 19:27:12 +01:00
Franco Fichtner
34cea24041 firmware: improve the major upgrade dialog 2016-11-20 19:23:05 +01:00
Franco Fichtner
8c25dd18c0 rc: align console menu for new motd 2016-11-20 16:23:34 +01:00
Franco Fichtner
bdb0fac62c dhcp: also hand out domain override in v6 2016-11-20 15:40:26 +01:00
Franco Fichtner
b9820b0966 plugins: simplify names for DNS services again 2016-11-20 14:56:04 +01:00
Franco Fichtner
9991dc6c21 plugins: only execute hook if selected 2016-11-20 14:36:55 +01:00
Franco Fichtner
9dd734b355 relayd: recude diff against stable/16.7 2016-11-20 14:24:41 +01:00
Franco Fichtner
813f4aea73 auth: tone down MOTD 2016-11-20 14:08:27 +01:00
Franco Fichtner
667b7d39ca bsnmpd: use the force, don't want multiple services 2016-11-20 14:05:11 +01:00
Franco Fichtner
30a29f64c1 miniupnpd: correct start/stop, unwinds configure_do() 2016-11-20 13:49:19 +01:00
Franco Fichtner
04ccf983d4 plugins: allow to configure through multiple call sites
This is the glue needed to be entirely plugin-agnostic, it only
needs new hooks for spots we haven't pluginified yet.  The dns
subsystem is another likely candidate in the long run.

Allows to move these plugins away from core: bsnmpd, igmpproxy,
relayd, miniupnpd.  ACL and menu entries pending...
2016-11-20 13:38:13 +01:00