OPNSense/core 7b9aaf9src/opnsense/scripts/filter/lib/alias __init__.py

Firewall: Aliases - do not support nesting in geoip aliases to prevent overlapping countries with existing alias contents, closes https://github.com/opnsense/core/issues/9482
DeltaFile
+11-2src/opnsense/scripts/filter/lib/alias/__init__.py
+11-21 files

OPNSense/core 59b04a6src/opnsense/mvc/app/library/OPNsense/Base UIModelGrid.php

mvc:model - default sort order ignore in fetchBindRequest() when sort is an ampty array (which is tabulators default now). spotted while working on https://github.com/opnsense/core/issues/8401

(cherry picked from commit 7d2d9682dc984241bc0591539f801ef19d84261a)
DeltaFile
+1-1src/opnsense/mvc/app/library/OPNsense/Base/UIModelGrid.php
+1-11 files

OPNSense/core 97f0543src/opnsense/mvc/app/controllers/OPNsense/Core/Api FirmwareController.php

firmware: replace one execution call with Shell class in controller
DeltaFile
+2-1src/opnsense/mvc/app/controllers/OPNsense/Core/Api/FirmwareController.php
+2-11 files

OPNSense/core 676bbbesrc/opnsense/mvc/app/controllers/OPNsense/Core/Api BackupController.php

system: replace history diff exec with shell_safe #9325

(cherry picked from commit c9559bcc9f173194fc3a6ea4c4559992c20bdeac)
DeltaFile
+2-2src/opnsense/mvc/app/controllers/OPNsense/Core/Api/BackupController.php
+2-21 files

OPNSense/core df29635src/etc/inc config.inc

backend: minor shell execution changes and readability
DeltaFile
+5-18src/etc/inc/config.inc
+5-181 files

OPNSense/core faf8553src/opnsense/mvc/app/library/OPNsense/Backup Base.php

system: replace exec() in config encrypt/decrypt #9325

Although these are very safe the calls are much more portable now
and this was also the last exec() in the MVC code.  Plus, Shell
class was already being used elsewhere here.

(cherry picked from commit ae4bac8bada187005dfd0cd186b891ffb02ffdfb)
DeltaFile
+23-26src/opnsense/mvc/app/library/OPNsense/Backup/Base.php
+23-261 files

OPNSense/core 1bc4bdesrc/opnsense/mvc/app/controllers/OPNsense/Unbound/Api SettingsController.php

Services: Unbound DNS: Overrides - missing lock in  del_host_override action.

(cherry picked from commit 0f3daf70e4a5eaf848dace40eb2f5bdabb2ef296)
DeltaFile
+1-0src/opnsense/mvc/app/controllers/OPNsense/Unbound/Api/SettingsController.php
+1-01 files

OPNSense/core 1898772src/opnsense/mvc/app/controllers/OPNsense/IPsec/Api ConnectionsController.php, src/opnsense/mvc/app/models/OPNsense/IPsec Swanctl.php

VPN: IPsec: Connections - prevent model caching when refering items within the same model

PR: https://github.com/opnsense/core/issues/9459

(cherry picked from commit cf5b944d63a6853fa5d0d2736db154fd6f2ca5f4)
(cherry picked from commit b5cfa1a0b4423cc7c77dc2b4e64de6320fc7b5b2)
(cherry picked from commit 27beef43a5047c52a0993ef367762b1a625d7b09)
DeltaFile
+3-0src/opnsense/mvc/app/models/OPNsense/IPsec/Swanctl.php
+1-1src/opnsense/mvc/app/controllers/OPNsense/IPsec/Api/ConnectionsController.php
+4-12 files

OPNSense/core 27beef4src/opnsense/mvc/app/models/OPNsense/IPsec Swanctl.xml

VPN: IPsec: Connections - fix regression in https://github.com/opnsense/core/commit/b5cfa1a0b4423cc7c77dc
DeltaFile
+1-1src/opnsense/mvc/app/models/OPNsense/IPsec/Swanctl.xml
+1-11 files

OPNSense/core 3d586c6. plist, src/etc/rc.syshook.d/backup 20-duid

system: no longer back up DUID but add some compat glue to importer

(cherry picked from commit 4988b0390dd383fc394c008fff75b76848a5868a)
(cherry picked from commit 88f8ed0ee631f078897b924232c0c2a6f3c7616d)
(cherry picked from commit bc1a33057879119842b02e46705c798e549d346d)
DeltaFile
+0-16src/etc/rc.syshook.d/backup/20-duid
+14-2src/sbin/opnsense-importer
+0-1plist
+14-193 files

OPNSense/core bf08bb2. plist

pkg: fix plist
DeltaFile
+1-0plist
+1-01 files

OPNSense/core 05feeffsrc/etc/inc/plugins.inc.d dhcpd.inc core.inc

isc-dhcp: move syslog definitions to plugin file

(cherry picked from commit c76fda51b7183a3c6d5305b40960323e0df3080a)
DeltaFile
+5-0src/etc/inc/plugins.inc.d/dhcpd.inc
+0-1src/etc/inc/plugins.inc.d/core.inc
+5-12 files

OPNSense/core 4112651src/etc/inc filter.inc

firewall: run filterlog directly after rules apply and remove promiscous mode

PR: #9449

(cherry picked from commit c6eaefc1e26550085b09abf1cca73fdc8f76db13)
(cherry picked from commit 7b1528a823822ab692b6bc2748c71d4fc727870f)
DeltaFile
+7-10src/etc/inc/filter.inc
+7-101 files

OPNSense/core 2e275a2src/etc/inc/plugins.inc.d dpinger.inc

system: gateway monitor Shell class use et al
DeltaFile
+25-13src/etc/inc/plugins.inc.d/dpinger.inc
+25-131 files

OPNSense/core 99e5767src/etc/inc filter.lib.inc

firewall: tiny bit of code style in this file

(cherry picked from commit 7fc5d13e9e33b34bfba408e8d8edba581aef3507)
DeltaFile
+7-3src/etc/inc/filter.lib.inc
+7-31 files

OPNSense/core 586946esrc/etc/inc filter.lib.inc

firewall: for better IPv6 PMTU let timex+paramprob through

(cherry picked from commit 7824ce5d8bf6b6e033b14911630e865ed6062500)
DeltaFile
+1-1src/etc/inc/filter.lib.inc
+1-11 files

OPNSense/core 5bcfc25src/opnsense/mvc/app/views/OPNsense/Dnsmasq leases.volt

dnsmasq: Replace inline onclick handlers with proper DOM event binding in leases grid (#9415)

(cherry picked from commit 566d264a5becfafffbb0c5da6e3bdf658940af0c)
DeltaFile
+12-7src/opnsense/mvc/app/views/OPNsense/Dnsmasq/leases.volt
+12-71 files

OPNSense/core 5eb0839src/opnsense/mvc/app/views/OPNsense/IPsec tunnels.volt

ipsec: minor Shell class replacement
DeltaFile
+1-1src/opnsense/mvc/app/views/OPNsense/IPsec/tunnels.volt
+1-11 files

OPNSense/core 0d68df5src/opnsense/mvc/app/views/OPNsense/IPsec sessions.volt

VPN: IPsec: Sessions: Fix missing commands translation (#9453)

(cherry picked from commit 274c9651efd3ada8c896633cad17231de40795c0)
DeltaFile
+1-1src/opnsense/mvc/app/views/OPNsense/IPsec/sessions.volt
+1-11 files

OPNSense/core a65e427src/opnsense/mvc/app/models/OPNsense/Firewall Alias.php Alias.xml, src/opnsense/mvc/app/views/OPNsense/Firewall alias.volt

Firewall: Aliases - allow setting a custom auth http header (#8688)

(cherry picked from commit 7cfa3242a657caf595b571db80129f24d63f5a7c)
DeltaFile
+13-0src/opnsense/mvc/app/models/OPNsense/Firewall/Alias.php
+4-0src/opnsense/mvc/app/views/OPNsense/Firewall/alias.volt
+2-0src/opnsense/scripts/filter/lib/alias/uri.py
+1-0src/opnsense/mvc/app/models/OPNsense/Firewall/Alias.xml
+20-04 files

OPNSense/core 76d9f0asrc/opnsense/mvc/app/library/OPNsense/Core Config.php

Config - ditch isArraySequential() in favor of the new array_is_list() introduced in PHP 8.1. closes https://github.com/opnsense/core/pull/9424

This impacts $config usage in legacy code, a before and after comparison of the $config output shows no difference on a larger config file.
As mentioned by @swhite2, the performance of the internal check is much better than the one we're replacing now.

closes https://github.com/opnsense/core/pull/9424

(cherry picked from commit 7ee3b2c516590bae918532ba406960ef2bf426db)
DeltaFile
+2-12src/opnsense/mvc/app/library/OPNsense/Core/Config.php
+2-121 files

OPNSense/core 28fcf8asrc/opnsense/scripts/firmware latest.php product.php, src/opnsense/scripts/firmware/repos OPNsense.php

firmware: Shell class replacements in scripting
DeltaFile
+8-5src/opnsense/scripts/firmware/repos/OPNsense.php
+1-1src/opnsense/scripts/firmware/latest.php
+1-1src/opnsense/scripts/firmware/product.php
+10-73 files

OPNSense/core 379d8c8. plist, src/opnsense/www/js jquery.bootgrid.js opnsense_bootgrid_plugin.js

bootgrid: cleanup old files

(cherry picked from commit 63830c78c38af26016c713b69a572277af385e1e)
DeltaFile
+0-2,241src/opnsense/www/js/jquery.bootgrid.js
+0-625src/opnsense/www/js/opnsense_bootgrid_plugin.js
+0-21src/opnsense/www/js/jquery.bootgrid.LICENSE
+0-3plist
+0-2,8904 files

OPNSense/core e5126dbsrc/opnsense/mvc/app/library/OPNsense/System/Status UnboundBlocklistStatus.php, src/opnsense/scripts/unbound-dnsbl/lib dnsbl.py

unbound: notify user if a blocklist reset is required

This isn't perfect, as it can potentially take a while
for unbound to notice the change, keeping the notification
around longer than necessary. Additionally, this should be
a banner as well, but the banner isn't clickable in the current
state and the banner scope should ideally be separated from the
notification scope. To be continued.

(cherry picked from commit 41f9b3250ffd510287190f4e6ad9d6af4f7184d3)
DeltaFile
+53-0src/opnsense/mvc/app/library/OPNsense/System/Status/UnboundBlocklistStatus.php
+5-0src/opnsense/scripts/unbound-dnsbl/lib/dnsbl.py
+58-02 files

OPNSense/core 6e59015. plist, src/opnsense/mvc/app/controllers/OPNsense/Ntpd StatusController.php

network time: status: refactor to MVC (#9361)

(cherry picked from commit 02fa9e41da4c336763f781ecb70e25b569e69fab)
(cherry picked from commit 7ddd0d7fa87f7511985a0343823d4d8c317039c3)
(cherry picked from commit d331c85fbfa013816ec33463da5b6b6b7ee5e17e)
(cherry picked from commit 085cecd4ec20f231d69a1343488309875e0f9527)
(cherry picked from commit 2efedd0208af285160ba46a07861d40e56d86de8)
DeltaFile
+0-287src/www/status_ntpd.php
+176-0src/opnsense/scripts/ntpd/ntpd_status.php
+157-0src/opnsense/mvc/app/views/OPNsense/Ntpd/status.volt
+122-0src/opnsense/mvc/app/controllers/OPNsense/Ntpd/Api/ServiceController.php
+43-0src/opnsense/mvc/app/controllers/OPNsense/Ntpd/StatusController.php
+5-1plist
+503-2884 files not shown
+513-29110 files

OPNSense/core a46d4fcsrc/opnsense/service/conf/actions.d actions_unbound.conf

unbound: reconfigure if marker file present (https://github.com/opnsense/core/issues/9461)

(cherry picked from commit 5fa8831bec6bdcb6e68838525aaa81c2abcd1c86)
DeltaFile
+1-1src/opnsense/service/conf/actions.d/actions_unbound.conf
+1-11 files

OPNSense/core 7a03bb2src/opnsense/www/js opnsense_status.js opnsense_ui.js

system: re-fetch notification status after default apply button is done #9461

Tested with the /var/unbound/data/dnsbl_format_warning marker file it
looks like the open-on-second-update is code that was never triggered
and shouldn't open on fetching new status.

(cherry picked from commit bab1c812bf6b35e11ef4e393c9dc75e5a5b6b3c3)
DeltaFile
+17-21src/opnsense/www/js/opnsense_status.js
+2-0src/opnsense/www/js/opnsense_ui.js
+19-212 files

OPNSense/core 47f4230src/opnsense/scripts/unbound-dnsbl/lib dnsbl.py

unbound: prevent caching of blocklist entries (https://github.com/opnsense/core/issues/9474)

(cherry picked from commit ad1be4ea4baef2741cc72fcfa4e7ec2d90987961)
DeltaFile
+4-3src/opnsense/scripts/unbound-dnsbl/lib/dnsbl.py
+4-31 files

OPNSense/core 4c474bc. plist, src/opnsense/mvc/app/library/OPNsense/System/Status IDSOverrideStatus.php

Services: Intrusion Detection - remove custom.yaml, deprecated by new conf.d location. To be released in 26.1. closes https://github.com/opnsense/core/issues/9432
DeltaFile
+2-5src/opnsense/mvc/app/library/OPNsense/System/Status/IDSOverrideStatus.php
+2-2src/opnsense/service/templates/OPNsense/IDS/suricata.yaml
+0-3src/opnsense/service/templates/OPNsense/IDS/custom.yaml.sample
+0-1plist
+0-1src/opnsense/service/templates/OPNsense/IDS/+TARGETS
+4-125 files

OPNSense/core d4c4a65src/opnsense/mvc/app/controllers/OPNsense/Firewall/Api FilterController.php

Update src/opnsense/mvc/app/controllers/OPNsense/Firewall/Api/FilterController.php

Co-authored-by: Franco Fichtner <franco at opnsense.org>
DeltaFile
+1-1src/opnsense/mvc/app/controllers/OPNsense/Firewall/Api/FilterController.php
+1-11 files