OPNSense/core 04aab49 — src/opnsense/mvc/app/library/OPNsense/Core Config.php

Config: missing chown in backup call to prevent backend processes leaving unaccessible files for the frontend. closes https://github.com/opnsense/core/pull/10963
DeltaFile
+6-1src/opnsense/mvc/app/library/OPNsense/Core/Config.php
+6-11 files

OPNSense/src 93ae959 — sys/netpfil/pf pf.c

pf: mark non-port packets to require IP checksumming #312

Instead of recomputing on the spot let's try to use this instead.
DeltaFile
+4-1sys/netpfil/pf/pf.c
+4-11 files

OPNSense/ports b9a94a6 — opnsense/netflector Makefile distinfo, opnsense/netflector/files netflector.in

opnsense/netflector: update to 0.16.1
DeltaFile
+12-4opnsense/netflector/files/netflector.in
+7-7opnsense/netflector/distinfo
+3-3opnsense/netflector/Makefile
+22-143 files

OPNSense/plugins 3afd667 — net/netflector/src/etc/inc/plugins.inc.d netflector.inc, net/netflector/src/etc/rc.syshook.d/carp 20-netflector

net/netflector: add initial plugin version (#5697)
DeltaFile
+182-0net/netflector/src/opnsense/mvc/app/controllers/OPNsense/Netflector/forms/dialogEdit.xml
+160-0net/netflector/src/opnsense/mvc/app/models/OPNsense/Netflector/Netflector.xml
+83-0net/netflector/src/etc/inc/plugins.inc.d/netflector.inc
+71-0net/netflector/src/etc/rc.syshook.d/carp/20-netflector
+69-0net/netflector/src/opnsense/mvc/app/views/OPNsense/Netflector/index.volt
+67-0net/netflector/src/opnsense/mvc/app/controllers/OPNsense/Netflector/Api/SettingsController.php
+632-014 files not shown
+1,017-020 files

OPNSense/core 7733d0d — src/opnsense/mvc/app/controllers/OPNsense/Diagnostics/Api InterfaceController.php

system: fix this as well
DeltaFile
+2-2src/opnsense/mvc/app/controllers/OPNsense/Diagnostics/Api/InterfaceController.php
+2-21 files

OPNSense/core 13ec8ea — src/opnsense/scripts/routes del_route.py

system: another typp
DeltaFile
+1-1src/opnsense/scripts/routes/del_route.py
+1-11 files

OPNSense/core d5c7e08 — src/opnsense/mvc/app/controllers/OPNsense/Diagnostics/Api InterfaceController.php

system: fix syntax error
DeltaFile
+1-1src/opnsense/mvc/app/controllers/OPNsense/Diagnostics/Api/InterfaceController.php
+1-11 files

OPNSense/core b8d0daf — src/opnsense/mvc/app/controllers/OPNsense/Diagnostics/Api InterfaceController.php, src/opnsense/mvc/app/views/OPNsense/Diagnostics routes.volt

system: an attempt to simplify the backend call
DeltaFile
+12-30src/opnsense/scripts/routes/del_route.py
+1-5src/opnsense/mvc/app/controllers/OPNsense/Diagnostics/Api/InterfaceController.php
+1-1src/opnsense/service/conf/actions.d/actions_interface.conf
+1-1src/opnsense/mvc/app/views/OPNsense/Diagnostics/routes.volt
+15-374 files

OPNSense/core 8d055c6 — src/opnsense/scripts/routes del_route.py

system: make a note about the weirdness of -n that remains
DeltaFile
+2-1src/opnsense/scripts/routes/del_route.py
+2-11 files

OPNSense/core 2945da0 — src/opnsense/mvc/app/controllers/OPNsense/Diagnostics/Api InterfaceController.php, src/opnsense/mvc/app/views/OPNsense/Diagnostics routes.volt

system: fix the -4/6 family and -n ambiguity as the gateway may also resolve

We still don't really use it since it isn't an IP address but
it also helps narrowing the scope of the deletion lookup.
DeltaFile
+30-14src/opnsense/scripts/routes/del_route.py
+8-3src/opnsense/mvc/app/controllers/OPNsense/Diagnostics/Api/InterfaceController.php
+2-2src/opnsense/service/conf/actions.d/actions_interface.conf
+2-1src/opnsense/mvc/app/views/OPNsense/Diagnostics/routes.volt
+1-1src/www/system_general.php
+43-215 files

OPNSense/core fad0c08 — src/opnsense/mvc/app/controllers/OPNsense/Diagnostics/Api InterfaceController.php, src/opnsense/scripts/routes del_route.py

system: refactor route deletion and use priv-sep in general settings page #9352
DeltaFile
+15-16src/opnsense/scripts/routes/del_route.py
+7-7src/opnsense/mvc/app/controllers/OPNsense/Diagnostics/Api/InterfaceController.php
+4-4src/opnsense/service/conf/actions.d/actions_interface.conf
+1-1src/www/system_general.php
+27-284 files

OPNSense/core f514a4a — src/etc/inc interfaces.inc

interfaces: improve queue build sequence in interfaces_dependencies()

Last puzzle piece from master branch: trhe queue build is reversed
from most specific to least specific which makes much more sense
and allows us even to remove a few checks.

Loopback is now folded into the queue build so no more explicit call.
DeltaFile
+18-14src/etc/inc/interfaces.inc
+18-141 files

OPNSense/core 1f5d467 — src/etc/inc interfaces.inc

interfaces: add a new 'updateip' hook

'newwanip' is misused sometimes and never called in static configurations.
The only consumer is the RFC2136 plugin but maybe that changes in the
future.  The plugin also listens on "bootup" and "local" so simply making
a global event for use at the spots where it exists is enough.

(cherry picked from commit c3100684f8a2a349e7183a2c86ea8f5f4dd1c084)
DeltaFile
+1-2src/etc/inc/interfaces.inc
+1-21 files

OPNSense/core 193f081 — src/etc/inc interfaces.inc

interfaces: backport a small change from master

We are not using this yet, but it makes the diff cleaner.
DeltaFile
+1-1src/etc/inc/interfaces.inc
+1-11 files

OPNSense/core 4e4afa4 — src/opnsense/mvc/app/controllers/OPNsense/Base ApiControllerBase.php, src/opnsense/mvc/app/controllers/OPNsense/Diagnostics/Api LogController.php

diagnostics: disable nginx reverse proxy buffering on configd streams (#10818)

(cherry picked from commit a57f3cc39b35327827d06d5eeca7464b3ed891b8)
(cherry picked from commit 92974f0802a6f2c774c5063982e7d0712e3a1af4)
DeltaFile
+2-0src/opnsense/mvc/app/controllers/OPNsense/Base/ApiControllerBase.php
+0-1src/opnsense/mvc/app/controllers/OPNsense/Diagnostics/Api/LogController.php
+2-12 files

OPNSense/core 92974f0 — src/opnsense/mvc/app/controllers/OPNsense/Diagnostics/Api TrafficController.php LogController.php

mvc: trailing commas are cool so let's keep them
DeltaFile
+1-1src/opnsense/mvc/app/controllers/OPNsense/Diagnostics/Api/TrafficController.php
+1-1src/opnsense/mvc/app/controllers/OPNsense/Diagnostics/Api/LogController.php
+2-22 files

OPNSense/core ca8515b — src/etc/inc filter.lib.inc

Firewall: NAT: Destination NAT - add safety guards for calculated port ranges, closes https://github.com/opnsense/core/pull/10945

Minor cleanup ensuring proper handling of ranges for empty targets.

Reported by: @fa1k3

(cherry picked from commit 9da4d852a768f4c8e9692ad98669f4a0e19a23f2)
DeltaFile
+2-2src/etc/inc/filter.lib.inc
+2-21 files

OPNSense/core 0e094e3 — src/opnsense/mvc/app/models/OPNsense/Base/FieldTypes PortField.php, src/opnsense/mvc/app/models/OPNsense/Firewall/FieldTypes SourceNatRuleField.php

mvc: PortField: always return a string for normalizedPort()

(cherry picked from commit ebed60e24316cad22e37cf71cf9ef10498b99a39)
DeltaFile
+2-2src/opnsense/mvc/app/models/OPNsense/Base/FieldTypes/PortField.php
+1-1src/opnsense/mvc/app/models/OPNsense/Firewall/FieldTypes/SourceNatRuleField.php
+3-32 files

OPNSense/core ebed60e — src/etc/inc filter.lib.inc, src/opnsense/mvc/app/models/OPNsense/Base/FieldTypes PortField.php

mvc: PortField: always return a string for normalizedPort()
DeltaFile
+2-2src/opnsense/mvc/app/models/OPNsense/Base/FieldTypes/PortField.php
+1-1src/opnsense/mvc/app/models/OPNsense/Firewall/FieldTypes/SourceNatRuleField.php
+1-1src/etc/inc/filter.lib.inc
+4-43 files

OPNSense/core 7a1631e — src/etc/inc filter.lib.inc, src/opnsense/mvc/app/library/OPNsense/Firewall ForwardRule.php

Firewall: NAT: Destination NAT - add safety guards for calculated port ranges

PR: https://github.com/opnsense/core/pull/10945

(cherry picked from commit 57bc18fec9953fb9115b667154165dbbb594f6a5)
(cherry picked from commit 0405ed0f2ef92177fcb7af15fbf6822bdd7c293d)
DeltaFile
+5-4src/etc/inc/filter.lib.inc
+3-0src/opnsense/mvc/app/models/OPNsense/Base/FieldTypes/PortField.php
+1-1src/opnsense/mvc/app/library/OPNsense/Firewall/ForwardRule.php
+2-0src/opnsense/mvc/tests/app/models/OPNsense/Base/FieldTypes/PortFieldTest.php
+11-54 files

OPNSense/core 0405ed0 — src/opnsense/mvc/app/models/OPNsense/Base/FieldTypes PortField.php

mvc: do not force strict compare on any
DeltaFile
+1-1src/opnsense/mvc/app/models/OPNsense/Base/FieldTypes/PortField.php
+1-11 files

OPNSense/core d06c569 — src/opnsense/mvc/app/models/OPNsense/Base/FieldTypes PortField.php, src/opnsense/mvc/tests/app/models/OPNsense/Base/FieldTypes PortFieldTest.php

MVC: PortField - keep the first well-known service in the option list (#10947)

(cherry picked from commit a37badb156d4348e72db0a37f447aa7733d3440a)
DeltaFile
+15-0src/opnsense/mvc/tests/app/models/OPNsense/Base/FieldTypes/PortFieldTest.php
+4-3src/opnsense/mvc/app/models/OPNsense/Base/FieldTypes/PortField.php
+19-32 files

OPNSense/core 2db64b9 — src/etc/inc interfaces.inc, src/opnsense/scripts/interfaces ppp-ipv6.php

interfaces: be more conservative with -no_dad #10951

In e0e1401f8739e we're enabling it always which also affects
assigned tunnels such as WireGuard which tend to avoid wanting
DAD so make room for leaving the flag unchanged and change it
everywhere else explicitly per type.

(cherry picked from commit ea58b68b8e32e08573db398e4ed18973cc239a1b)
(cherry picked from commit fa31068e35f12a07944fc202771721a6b2c7d381)
DeltaFile
+11-10src/etc/inc/interfaces.inc
+1-1src/opnsense/scripts/interfaces/ppp-ipv6.php
+12-112 files

OPNSense/core 2527599 — src/opnsense/www/js tabulator.min.js.map tabulator.min.js

bootgrid: upgrade Tabulator to version 6.5.3

(cherry picked from commit cdde38bee141a71733638a645600f68126ce1af7)
DeltaFile
+2-2src/opnsense/www/js/tabulator.min.js
+1-1src/opnsense/www/js/tabulator.min.js.map
+3-32 files

OPNSense/core a9ca4e6 — src/etc/inc plugins.inc, src/sbin pluginctl

plugins: add error returns to plugins_configure()

These are not really errors.  They indicate a possible issue
but should not error.  An unknown hook may be normal given
that the plugin owning the hook is not installed.

We also don't consider hooks to return errors in a meaningful
way as they are meant as machinery to run a reconfiguration
which can register its own errors elsewhere in the system.

But this can give the user running manual queries a useful hint.

(cherry picked from commit fd6e57276b13b2bef40cfbdc22c67ea01231dc0d)
DeltaFile
+5-1src/sbin/pluginctl
+4-0src/etc/inc/plugins.inc
+9-12 files

OPNSense/core e7be3a4 — src/www system_advanced_admin.php

system: tighten language

(cherry picked from commit 6cedecf83cbbca1957cb6b5fa44d1928d37272b0)
(cherry picked from commit 764783832413673600021bc8b8e5e66ae02eaa4c)
DeltaFile
+1-1src/www/system_advanced_admin.php
+1-11 files

OPNSense/core 7647838 — src/www system_advanced_admin.php

system: reword previous
DeltaFile
+1-1src/www/system_advanced_admin.php
+1-11 files

OPNSense/core e18f03b — src/opnsense/www/js opnsense_ui.js

ui: do not add the spinner again when it fails

(cherry picked from commit debc632f121b3b065ba50c92597349067655e2a1)
DeltaFile
+3-3src/opnsense/www/js/opnsense_ui.js
+3-31 files

OPNSense/core 4adc6c3 — src/opnsense/mvc/app/controllers/OPNsense/IPsec/forms dialogChild.xml, src/opnsense/mvc/app/models/OPNsense/IPsec Swanctl.xml

VPN: IPsec: Add replay_window to children (#10938)

* VPN: IPsec: Add replay_window to children

Co-authored-by: Franco Fichtner <franco at opnsense.org>

---------

Co-authored-by: Franco Fichtner <franco at opnsense.org>
(cherry picked from commit 417f7e59ec70682d5c6c7ec07b8a8eb85041dd0d)
DeltaFile
+7-0src/opnsense/mvc/app/controllers/OPNsense/IPsec/forms/dialogChild.xml
+5-0src/opnsense/mvc/app/models/OPNsense/IPsec/Swanctl.xml
+12-02 files

OPNSense/core bed9f78 — src/opnsense/mvc/app/controllers/OPNsense/Base ApiMutableServiceControllerBase.php

mvc: dispatch failed message during reconfiguredAction()

We lose the stop result in start/reload case but it's not
missing critical.

Suggested by: @Monviech

(cherry picked from commit d7d7076afe9b3945441e0c947b29e9eed2fb6fc5)
DeltaFile
+18-12src/opnsense/mvc/app/controllers/OPNsense/Base/ApiMutableServiceControllerBase.php
+18-121 files