net-mgmt/nrpe: allow hostnames in allowed_hosts (#5305)
* net-mgmt/nrpe: allow hostnames in allowed_hosts
* net-mgmt/nrpe: use HostnameField instead of CSVListField for allowed_hosts
Switch allowed_hosts from CSVListField to HostnameField with IpAllowed,
per review feedback on PR #5305 — CSVListField shouldn't be used anymore.
* Update General.xml
Updated Version to 0.0.2
* Update Makefile
Updated Plugin Version
* Update pkg-descr
[4 lines not shown]
net/ndp-proxy-go: version 1.4 (#5586)
* net/ndp-proxy-go: Add static-prefix and static-router flags
* net/ndp-proxy-go: Fix status not showing stopped service
* net/ndp-proxy-go: Bump version to 1.4
pf: Add missing PF_TS_CNT Netlink attribute
There is no parser entry for PF_TS_CNT, therefore PF_TS_REFCNT
is written starting at pfrts_cnt, causing the refcount
to be wrongly shown in the "Addresses:" section of print_tstats().
Issue: https://github.com/opnsense/src/issues/300
configd: further restrict configd actions to root and wwwonly for more sensitive actions (stopping services, reading certain data, ..) that won't be scheduled anyway and should have no other consumers.
addition to https://github.com/opnsense/core/commit/a313cbd5bdcfc3c9d4a55704fcdb8bbcf7182069
In the long run we might consider swapping the defaults, but since the chance of regressions is rather larger and most callouts aren't that problematic anyway, opt for explicit elevated rights for now.
Firewall: NAT: Destination NAT - fix missing "well-known" in local-port, closes https://github.com/opnsense/core/issues/10612
While here, also suppress a php warning for an non-existing entry.
Firewall: Rules and NAT: Group invalid rules to the end of the ruleset. These rules are skipped by PF processing because they do not have a valid interface. (#10550)
---------
Co-authored-by: Stephan de Wit <stephan.de.wit at deciso.com>
system: add hidden services so they can be operated by pluginctl -s #9352
For now that's kernel and powerd. Eventually these workarounds will
go away anyway.
