BSD Commit Log Search

security/q-feeds-connector - expand include/exclude tag selectors into separate selectors.

dns/ddclient: add force refresh (#5758)

* dns/ddclient: add force refresh

Add a "Force refresh" command to the Accounts grid, per row for enabled
accounts and for the selected rows (native backend only). The cached
state of the requested accounts is cleared in a locked state while the
service is stopped, so the service updates them on startup using the
regular account implementation, even when the detected address equals
the one sent before. Normal polling is unchanged.

The grid is reloaded until the requested accounts show a new update
time, accounts without an update are reported after 30 seconds.

Refs #5757

* dns/ddclient: force refresh, simplify as reviewed

Reset the cached state (-r/--reset-state) and restart the service

    [9 lines not shown]

interfaces: backend call for interfaces_ppps_configure(); closes #9352

gateways: null is not going to be a UUID either

ErrorException: Using null as an array offset is deprecated, use an empty string instead in /usr/local/opnsense/mvc/app/controllers/OPNsense/Routing/Api/SettingsController.php:162
Stack trace:

interfaces: priv-sep script for interface apply the legacy way #9352

Firewall: Migrate Miscellaneous advanced settings (automatic rules)

Firewall: Migrate remaining Miscellaneous advanced settings

Remove the legacy advanced firewall settings page.

Firewall: Migrate NAT advanced settings to new settings page

Firewall: Migrate Multi-WAN advanced settings to new settings page

Firewall: Migrate Schedules advanced settings to new settings page

Firewall: Migrate Bogon advanced settings to new settings page

Firewall: Migrate Logging advanced settings to new settings page

Firewall: Migrate Gateway Monitoring advanced settings to new settings page

interfaces: remove system_routing_configure() #9352

The function is called via $reload hook so adding another
hook makes no sense.  This may have changed since the original
commit below and since we need to priv-sep these calls the
easiest way is to remove it.  ;)

See also: https://github.com/pfsense/pfsense/commit/8e11b23f541d

system: $config is unused in core.inc

interfaces: move legacy apply to /var/lib/php/tmp for #9352

VPN: OpenVPN: Instances - improve keepalive validation, mentioned in https://github.com/opnsense/core/pull/10174

(cherry picked from commit 43dc040cfb0b11784ebbc691ea18f1c006e054cb)

VPN: OpenVPN: Instances - default keepalive to 10 60 in server mode and explain in the help text. closes https://github.com/opnsense/core/pull/10174

(cherry picked from commit 89a74ce83f32b9e01eaf1cbe730345238a19f3da)

Firewall: Aliases - deny invalid port ranges

PR: https://github.com/opnsense/core/issues/10954

(cherry picked from commit d43a1c16d8e1dc1c136cb05e07d8e99db89cd057)
(cherry picked from commit 6dcc04a243d79245fe44569d4492dee31d441c26)

interfaces: remove stale VIP address after update (#10883)

(cherry picked from commit 8148bec9cf8a4899f8beff1e9d8d56942e60d61c)
(cherry picked from commit 1a9e4794a0ece7c3846aec1986fc41470a082327)

monit: log from the first line, reconfigure through the base class

The local reconfigureAction() only started or reloaded monit when the
whole output of "monit -t" was exactly "Control file syntax OK", so the
first Apply on a new install ("New Monit id: ...") and any deprecation
warning left monit stopped or not reloaded while reporting "ok".

Drop it, and checkAction(), in favor of ApiMutableServiceControllerBase.
Move "set log" to the top of monitrc: monit only logs a parse error
after it has parsed "set log", so an invalid control file now leaves
its reason in the monit log, whether rc refused the reload or monit
refused to start.

Fixes https://github.com/opnsense/core/issues/10928

(cherry picked from commit 681a0fd644768dd349f5dd8332437f419b6eea03)

hyperv: fix single page invalidation path

Taken from: https://reviews.freebsd.org/D60380

reporting: unbound: add dnssec status column in details grid (#10940)

Fixes https://github.com/opnsense/core/issues/10704

---------

Co-authored-by: Stephan de Wit <stephan.de.wit at deciso.com>

firewall: less parenthesis for previous

Firewall: Aliases - deny invalid port ranges, closes https://github.com/opnsense/core/issues/10954

VPN: OpenVPN: Instances - improve keepalive validation, mentioned in https://github.com/opnsense/core/pull/10174

textproc/expat2: sync with upstream

Taken from: FreeBSD

www/apache24: sync with upstream

Taken from: FreeBSD

VPN: OpenVPN: Instances - default keepalive to 10 60 in server mode and explain in the help text. closes https://github.com/opnsense/core/pull/10174

src: style sweep