Commit Graph

2401 Commits

Author SHA1 Message Date
0c67e9db29 snort-vrt: Update rulesfile (#1835)
Update rulesfile.
2990 does not exist anymore.
29151 works best with suricata 4.1.8 and 5.0.3
2020-05-15 11:19:53 +02:00
Franco Fichtner c6de3851f5 plugins: style sweep 2020-05-13 08:42:51 +02:00
Ad Schellevis faa23ffae9 Syslog-NG: add templates for https://github.com/opnsense/core/issues/4068 2020-05-12 13:55:27 +02:00
vnxme f2db771984 security/tinc: Fix switch mode (#1733)
* security/tinc: Allow empty subnet for switch mode

A Host class with empty self._payload['subnet'] is considered invalid (lines 38-39). Thus, we can remove self._payload['subnet'] = None from __init__() and add a check for existance to config_text().

* security/tinc: Allow empty subnet for switch mode

Set network.subnet.required and host.subnet.required to N, add a required constraint for network.subnet if network.mode is router.

* security/tinc: Trigger configctl on tinc-up

In order to support various dual-stack configs (primary IPv4/v6 assigned by VPN/Tinc and any combination of alias IPv4/v6 assigned by Firewall/VIP) we need to trigger configctl:
- Primary IPv4: /usr/local/opnsense/service/configd_ctl.py interface newip $interface
- Primary IPv6: /usr/local/opnsense/service/configd_ctl.py interface newipv6 $interface

* security/tinc: Destroy tun/tap interface on stop

Destroying tun/tap interface each time Tinc daemon stops/restarts resolves the issue of losing IPv6 network routes (see #3972).

* security/Tinc: Add a missing reference constraint

The network.mode field is now linked to the network.subnet field.

* security/Tinc: Refactor tincd.py
2020-05-12 12:49:01 +02:00
Patrik Kernstock dc7980a3e0 unboundplus: Use 'forward-tls-upstream' config key
While 'forward-ssl-upstream' is indeed an alias/alternative syntax for the '*tls*' option, therefore it's more a cosmetic thing - specially because it's called DNS over TLS. Just to be consistent with terms used.
2020-05-08 15:38:22 +02:00
Johann Richard 930995ba3a Make doc for password more explicit, group options logically (#1765)
It may be obvious to some, but I think there's some value in making it more explicit that the password required here is for the *remote* shadowsocks server. Furthermore, I would suggest moving the password in the form closer to the remove server info.
2020-05-05 07:25:34 +02:00
Franco Fichtner 4c07622fbd dns/unbound-plus: advertise fix 2020-04-29 11:38:33 +02:00
Michael 7178da958b dns/unbound-plus: fix DoT validations (#1803) 2020-04-29 11:37:20 +02:00
Franco Fichtner 6a58d19c49 net/wol: next version 2020-04-22 13:24:29 +02:00
Gauss23 df26283388 wake_on_lan widget: find macs case-insensitive
Find mac addresses case-insensitive. When mac addresses are added, they are saved like the users enters them. If the user used upper-case letters, this results in showing the host offline in the dashboard, although it´s online. Other fix would be to make all mac inputs lowercase while saving.
2020-04-21 08:16:40 +02:00
Franco Fichtner d380ee2df1 net/firewall: version 1.0 2020-04-20 14:37:35 +02:00
Frank Wall 96df5894ad Merge pull request #1790 from prunkster/master
security/acme-client: add support for dnsapi "Euserv.eu"
2020-04-18 00:57:31 +02:00
prunkster 65abab88da security/acme-client: add support for dnsapi "Euserv.eu"
- added option "--insecure"
- increased maximum dns sleep time
2020-04-16 23:10:48 +02:00
Franco Fichtner adb0dcad20 dns/unbound-plus: small change to parse copyright 2020-04-16 14:41:33 +02:00
Franco Fichtner f1b7285b06 net/udpbroadcastrelay: fix permission 2020-04-16 13:03:39 +02:00
Frank Wall 87ef533364 Merge pull request #1783 from fraenki/haproxy_222
net/haproxy: release 2.22
2020-04-16 00:01:37 +02:00
Frank Wall 61391097b3 net/haproxy: bump version 2020-04-16 00:00:58 +02:00
Franco Fichtner b10ffbaceb Framework: small output for directory change 2020-04-15 20:11:02 +02:00
Franco Fichtner f8bd08e12c Framework: deploy same package logic as core.git has now
The idea was to have a shared default.mk between both repositories,
but for the time being this has an issue with the different prefixes
used by core.git and plugins.git, namely CORE_ and PLUGIN_.
2020-04-15 20:02:43 +02:00
Franco Fichtner 83f2841fba net/firewall: bump version after changes 2020-04-15 18:36:32 +02:00
Franco Fichtner 152b6e1ffe net/udpbroadcastrelay: style sweep while here 2020-04-15 14:32:10 +02:00
Franco Fichtner d9c01dbf22 net/udpbroadcastdelay: style sweep, align Makefile 2020-04-15 14:28:19 +02:00
Martin Wasley 55cffd5baf net/udpbroadcastrelay plugin - Initial commit (#1677) 2020-04-15 14:26:11 +02:00
Michael c5f72d30bf dns/unbound-plus: add DoT support (#1777) 2020-04-15 08:08:58 +02:00
Frank Wall ceb08f9334 net/haproxy: fix invalid use of option forwardfor
This resolves another infamous warning during config test:
'option forwardfor' ignored for frontend as it requires HTTP mode
2020-04-14 23:58:41 +02:00