system: fix the -4/6 family and -n ambiguity as the gateway may also resolve
We still don't really use it since it isn't an IP address but
it also helps narrowing the scope of the deletion lookup.
interfaces: improve queue build sequence in interfaces_dependencies()
Last puzzle piece from master branch: trhe queue build is reversed
from most specific to least specific which makes much more sense
and allows us even to remove a few checks.
Loopback is now folded into the queue build so no more explicit call.
interfaces: add a new 'updateip' hook
'newwanip' is misused sometimes and never called in static configurations.
The only consumer is the RFC2136 plugin but maybe that changes in the
future. The plugin also listens on "bootup" and "local" so simply making
a global event for use at the spots where it exists is enough.
(cherry picked from commit c3100684f8a2a349e7183a2c86ea8f5f4dd1c084)
interfaces: be more conservative with -no_dad #10951
In e0e1401f8739e we're enabling it always which also affects
assigned tunnels such as WireGuard which tend to avoid wanting
DAD so make room for leaving the flag unchanged and change it
everywhere else explicitly per type.
(cherry picked from commit ea58b68b8e32e08573db398e4ed18973cc239a1b)
(cherry picked from commit fa31068e35f12a07944fc202771721a6b2c7d381)
plugins: add error returns to plugins_configure()
These are not really errors. They indicate a possible issue
but should not error. An unknown hook may be normal given
that the plugin owning the hook is not installed.
We also don't consider hooks to return errors in a meaningful
way as they are meant as machinery to run a reconfiguration
which can register its own errors elsewhere in the system.
But this can give the user running manual queries a useful hint.
(cherry picked from commit fd6e57276b13b2bef40cfbdc22c67ea01231dc0d)
VPN: IPsec: Add replay_window to children (#10938)
* VPN: IPsec: Add replay_window to children
Co-authored-by: Franco Fichtner <franco at opnsense.org>
---------
Co-authored-by: Franco Fichtner <franco at opnsense.org>
(cherry picked from commit 417f7e59ec70682d5c6c7ec07b8a8eb85041dd0d)
mvc: dispatch failed message during reconfiguredAction()
We lose the stop result in start/reload case but it's not
missing critical.
Suggested by: @Monviech
(cherry picked from commit d7d7076afe9b3945441e0c947b29e9eed2fb6fc5)
system: add latency_avg as sanity check for running dpinger; closes #10937
The check was introduced in 0df1c0d so there's no technical background
to take into account. Indeed, latency_avg is probably the reading that
would least likely be 0 in this case.
Suggested by: @mbccd
(cherry picked from commit a2aeeaf554e709c0cb4c72f9d8a053878abe90a3)