BSD Commit Log Search

Firewall: Rules [new]: Only show icmp type when protocol is icmp (#9535)

Add toLowerCase() so the style can be lower case

Firewall: Rules [new]: Only show icmp type when protocol is icmp

dhcrelay: use the new mwexecf() $format support #9325

(cherry picked from commit 8e08845105d8857e950c3be5380b05348afaa5f8)
(cherry picked from commit 18205c7ddff9161f411f9c443fbe0dcddaa5ea3b)

Services: Intrusion Detection - cleanup settings controller, add '$this->modelHandle = null' to base class with invalidateModel() method

(cherry picked from commit af06d7bc55a8b17ee411c72ab1f6aad800493fdc)

system: replace exec() in live banner SSH probe

(cherry picked from commit 301f8d60631bcbcb282c2b1e307677883e91b2cf)
(cherry picked from commit 2bf1eedd589820c19053d55d50b07df8ce7c28af)

system: replace realif with device in gateway code

(cherry picked from commit 543ddbbaeb5258e71f6e1d569b07e115324f90c5)

openvpn: replace exec() in MVC code #9325

(cherry picked from commit 3ef4d20eba957ece68e3ef4a139d54fc20f2ddc0)

OpenVPN: Add support for verify-x509-name options (#8603)

(cherry picked from commit ee08121429eb99903106ee799013b22e3b5b4fef)
(cherry picked from commit 24483116a8218f5130c9fe1181c21651e1a2597c)
(cherry picked from commit 092433dae62be475918f498b101296cb41810d90)

Services: DHCRelay: Configuration - add carp vhid tracking option to relays, closes https://github.com/opnsense/core/pull/8714

(cherry picked from commit 6e7e2a3225c3ad910b9bbfb04a539f25909d1e25)
(cherry picked from commit c4b5a0d17604befe872da2d36dd67536d350d19e)
(cherry picked from commit 901181979e98df98c01d65431dbfdbbeeefcd90e)
(cherry picked from commit 0a921ef677d3b68bfbbe52c1a5d3247fb96a5909)

interfaces: scan pltime/vltime in -L mode for #9521

(cherry picked from commit 2d225e0c23a4190e6192332e677e81f110267af2)

firewall: direct fix from master

openvpn: add AES-256-CBC cipher for legacy compat

(cherry picked from commit 62d0c4e5ef1694e66f852d8e96612bd67a23ab93)

Services: Intrusion Detection - style cleanups for ServiceController.php

(cherry picked from commit 1acd0fe91af4d0ae4d44125e557a7a8dcd1e7f3a)

mvc: use LIBXML_NOBLANKS when loading config files

This avoids edge cases where the tag is not closing or leaving
whitespaces around.

(cherry picked from commit bea89efda756199bacfb65e083bc95fed1cd0a75)

system: use is_int()/array_key_first() in toArray() and fromArray() #9485

PR: https://github.com/opnsense/core/pull/9424

(cherry picked from commit 7ee3b2c516590bae918532ba406960ef2bf426db)
(cherry picked from commit 2eb539d821e3139252f3d7837800c90775f3524a)

mvc: it's time to add asInt()

(cherry picked from commit aedce678d51ba01ca614c83732c5d6877f917904)
(cherry picked from commit 800a641b0fea7a228de2bcc753a81e7f8e2d7308)

firewall: live view: allow column modifications and combine hostname columns

(cherry picked from commit 0ac213bb5fe293a4de69d25ef7fbf965861af0cd)
(cherry picked from commit 63fe135062c5a9852870c7bb3829d789e18a5069)

lang: get translated services from api (#8935)

(cherry picked from commit c41d993dec6236d49e530b5bca7701799d00f277)

Services: Intrusion Detection - style cleanup for volt files

(cherry picked from commit 3b08b775df642f528053b589778e61555eb828f6)

firewall: live view: add bigger table size options and simplify table update (#9518)

(cherry picked from commit 07e0ba8b98a5fa8dc294e7dccf3ed1c8d089e05b)

mvc: yay! finally remove sessionClose()

firewall: reformat copyright header

mvc: actually that's the same namespace so this is better

REPORTING: HEALTH - CPU Temp Graph Y-Axis Label (#8412)

Include CPU temperature graph y-axis label (°C)

(cherry picked from commit e58fb5a6af03190b7b1c6ab61b300742b8d058d7)
(cherry picked from commit f628a56cb3c6aeb8cc3993af7fdbb093b3c0bc71)

dnsmasq: Add DHCP logging flags which can influence log verbosity (#9480)

(cherry picked from commit ffb816b78144977e5e41d2e96d59861187aed71e)

Services: Intrusion Detection - add support for conf.d directory and update our status widget to detect the ones not being shipped by us.

(cherry picked from commit 602e09ba5a971dd2e12e8e4bec5278569166a039)
(cherry picked from commit f1feee181b87897185b508207ecc5fa6810e5031)

Services: Intrusion Detection - increase maintainability of suricata.yaml file.

The initial idea was to use php-yaml, parse/merge defaults and overlay the model options, but this doesn't seem to be very feasible due to the structure of the file.
Next best seems to be to remove all comments and default disabled options to make our options more clear, adding the additional + to inline if statements "{% ... +%}" decreases the chance of accidental breakage.

(cherry picked from commit 69aa1db11b5cbd11a055380ccd343d1e4f077928)

Services: Intrusion Detection - refactor query scripts and deprecate params.py

(cherry picked from commit ebac1338430bb58f2d394e0410cb22ed961fd178)

unbound: clean up marker and size files, closes #9489 (#9491)

* unbound: clean up marker and size files, closes #9489

* unbound: ditch dnsbl_available and bind around self.dnsbl

* unbound: ditch chained comparison

(cherry picked from commit efe726f841cb3952a1b42ea73d828e2dd3c74c25)