BSD Commit Log Search

system: add pluginctl -m and -v to save on typing #9213

intrusion detection: update model style

mvc: sweep no 2

(cherry picked from commit ffe7bfa6511d01b427344571d42a13893dc6df36)

mvc: disable Dnsmasq/Unbound template generation; closes #8888

Fix Unbound mounting code paths while here.

(cherry picked from commit 03ce2dd69778c50a1cd9bd69cc07518311665c99)
(cherry picked from commit 9e8039f7e012b5d2d0bd1616377b606bb3b90d6b)
(cherry picked from commit 81cd51c91983951df6092ea9b044789f81104848)

unbound: add support for TXT records in host overrides (#9188)

* unbound: add support for TXT records in host overrides

* Update src/etc/inc/plugins.inc.d/unbound.inc

Co-authored-by: Franco Fichtner <franco at opnsense.org>

---------

Co-authored-by: Franco Fichtner <franco at opnsense.org>
(cherry picked from commit e6ce9e7789926207c50ecdcab9bcc73979c70d6c)

mvc: add datetime-local to field types (needed for BE 25.10)

(cherry picked from commit cafca2eaf5c4a64e84814cec8b1d7cec85e69125)

Firewall: Diagnostics: Aliases - slighly improve alias parsing performance

For large lists (~1m records), parsing pfctl is rather expensive. We can save some time using two different tactics.

1. start parsing the pfctl content while executing, which is done by readline() on Popen()
2. prefer string compare before split, as split is rather expensive and we only want the content in parts when not '0', we can ease handling with faster string compares

In my local test this saves rougly 33% of the execution time.

(cherry picked from commit ccfe01f36e3e5613226a1813b103327100b9a0d6)

Power: Power Off - add configd action to GUI options

(cherry picked from commit 171f34f645efa9f835b08dfbb32af64f812fa2f2)
(cherry picked from commit a7aedf1f5056da22cbbfedc01c723e5d546b0be2)
(cherry picked from commit 7b51b61395d6d0cc72892c26b1c7e360ecc43d02)

mvc: fix a few configd(p)Run() fallback invokes for #9127

(cherry picked from commit a7c0c93c396e34fd48b8d1393d39657fd5e716e7)

KEA DHCPv4: honor client specific reservation domain name option (#9186)

* KEA DHCPv4: honor client specific reservation domain name option

Register in DNS with the client specific reservation domain name when specified.

Unbound requires reload.

* Update src/opnsense/mvc/app/controllers/OPNsense/Kea/forms/dialogReservation4.xml

Co-authored-by: Franco Fichtner <franco at lastsummer.de>

* Update src/opnsense/mvc/app/controllers/OPNsense/Kea/forms/dialogSubnet4.xml

Co-authored-by: Franco Fichtner <franco at lastsummer.de>

---------

Co-authored-by: Franco Fichtner <franco at lastsummer.de>
(cherry picked from commit 5b91238349ee0e1c01900f84bf5008c9f93c47be)

legacy: legacy_html_escape_form_data() not escaping keys only data elements.

reported by: Alex Williams from Pellera Technologies

(cherry picked from commit 9b4b22cb6c0efd80aa521f4c4ddec9294d2b6922)

make: add tag glue

(cherry picked from commit f1c48f46990bee2f73012c3effe88c8ddc9c69e7)

firewall: treat "skip" as a string to avoid syntax error #9211

(cherry picked from commit 79c6142803f5f92d10d647a4a26aaead3fb0bd02)

firewall: treat "skip" as a string to avoid syntax error #9211

captive portal: remove dir-listing.activate, because mod_dirlisting is not loaded

Seems to have been the case for a while now.  We never loaded it manually
and we surely do not need it.

legacy: legacy_html_escape_form_data() not escaping keys only data elements.

reported by: Alex Williams from Pellera Technologies

Kea: expose lease expiration settings to the gui (#9120)

mvc: disable Dnsmasq/Unbound template generation; closes #8888

There are two things to consider:

1. Stopping does not alter the templates because the (re)start
   code is in charge of doing the templates, which is not called
   when a service is disabled.

2. That actually led to an Unbound bug on stop where the file
   system is unmounted, but that should only happen when the
   service is disabled.  This runs into issue 1. again, but it's
   better to leave the system mounted until the backend kicks
   in again unmounting it anyway.

dnsmasq: should have removed that ;)

mvc: roll back MVC changes, double down using invokeLegacyConfigure()

mvc: disable Dnsmasq/Unbound template generation; closes #8888

There are two things to consider:

1. Stopping does not alter the templates because the (re)start
   code is in charge of doing the templates, which is not called
   when a service is disabled.

2. That actually lead to an Unbound bug on stop where the file
   system is unmounted, but that should only happen when the
   service is disabled.  This runs into issue 1. again, but it's
   better to leave the system mounted until the backend kicks
   in again unmounting it anyway.

system: make reboot more consistent as well

system: consistent description for halt job

"Power off" is used mostly in our project and halting is the action before
powering off so use a clear wording that is also reflected elsewhere.

Power: Power Off - add configd action to scheduled options. (BE 25.10)

mvc: add datetime-local to field types (needed for BE 25.10)

dnsmasq: mute stop error for already being stopped; closes #9197

unbound: fix unmount in case of disable

mvc: proposal for https://github.com/opnsense/core/issues/9199

unbound: add support for TXT records in host overrides (#9188)

* unbound: add support for TXT records in host overrides

* Update src/etc/inc/plugins.inc.d/unbound.inc

Co-authored-by: Franco Fichtner <franco at opnsense.org>

---------

Co-authored-by: Franco Fichtner <franco at opnsense.org>

KEA DHCPv4: honor client specific reservation domain name option (#9186)

* KEA DHCPv4: honor client specific reservation domain name option

Register in DNS with the client specific reservation domain name when specified.

Unbound requires reload.

* Update src/opnsense/mvc/app/controllers/OPNsense/Kea/forms/dialogReservation4.xml

Co-authored-by: Franco Fichtner <franco at lastsummer.de>

* Update src/opnsense/mvc/app/controllers/OPNsense/Kea/forms/dialogSubnet4.xml

Co-authored-by: Franco Fichtner <franco at lastsummer.de>

---------

Co-authored-by: Franco Fichtner <franco at lastsummer.de>