BSD Commit Log Search

Firewall: Rules: add banner if no rules defined (#10396)

(cherry picked from commit 84ae8875d439fa8a2ae402e89ecf811eeee9fd31)

Firewall: Rules [new]: Always show automatic and legacy rules, and a few more UI tweaks (#10355)

(cherry picked from commit 18533b4c60c27253f8c2ebbdfd9bc11d6450da1d)
(cherry picked from commit 6402be8a5420f26192474f01af552b6617421513)
(cherry picked from commit 446ef1aef945029c4bd7b90b6bfd318abcfceb00)

VPN: OpenVPN: Instances - require at least 1 for vpnid field, same as auto-number should use. closes https://github.com/opnsense/core/issues/10394

(cherry picked from commit b243971aed52c6106881f6142765930e220e1dac)

bootgrid: allow column selection exclusions

(cherry picked from commit 3507ecffc4ad7ae30932a189c89d5646d7b0be5e)

Services: Intrusion Detection: Administration - fix regression in https://github.com/opnsense/core/commit/9271d08bf3ff3eedfa069c2d0b6c5c6f428ccfe4, closes https://github.com/opnsense/core/issues/10393

It looks like the action buttons lost their bindings, this commit restores the function, although it removes the batch function which previously splitted the set in parts.
Usually the size of the url shouldn't be that much of an issue.

(cherry picked from commit 932f2747e945ab382cc3d2274d4ae524f25b2369)

mvc: simplify assorted option values to reduce duplication

(cherry picked from commit 251559ed6a1e7bc066fd0c52c88d0995c0acba9b)
(cherry picked from commit ac55f108c51b24f2a192d72d56621d53cf73882c)
(cherry picked from commit 3f78821cb0f91eacdfa0531c986b86b1d7780517)
(cherry picked from commit 336ac4ebc55721c2ceda9d0a1814ad2ef4b8e3c9)
(cherry picked from commit 672ebf5aec4d20e57639b96b751646c1127982d6)
(cherry picked from commit 7484d4ba6b9d44ff13d808e85fa6619432975793)
(cherry picked from commit 5629b0023bcc90dbf706a7149ff4ab685124de47)
(cherry picked from commit 72403e4ace1ccbe0ff14eb14e6663a8bbef8ade0)

mvc: fix a few stale imports via linter

(cherry picked from commit 99697111d694fdc470fcd3375b0019d3d1743e94)

firmware: retain ordering in update servers

This only pertains to the connectivity audit changes from
26.1.8.  Treat the server from opnsense-update -M as the
primary one by not sorting the result.

PR: https://forum.opnsense.org/index.php?topic=52025.0
(cherry picked from commit 74e76cbeafbb91e0bd5a6c2acbbf47959a9f436a)

firmware: stop buffering in sed

Since cmd_output was made the generic filter for subscriptions
the update log showed signs of excessive buffering.  This brings
it back to where it was and also improves the old read case.

(cherry picked from commit 5de581cd4416d6c068270994981db726045e88be)

hostwatch: pin warning banner to enabled flag (#10368)

PR: https://github.com/opnsense/core/issues/10196

(cherry picked from commit 0bd0defaa8059f07c43c870edd30647e8956052f)
(cherry picked from commit f7989c073b1d9ae3aec9c45a7215634fb8d22859)

system: use "pluginctl -c" consistently

(cherry picked from commit 892ad5c89e2067ed9d288d60333b6e943d106f68)

system: remove banner on inline reload if applicable

(cherry picked from commit d0f954ff3988e8855591da48cafe00aabe40d5a9)

dashboard: explicitly compact on layout shift if there's no predefined layout

(cherry picked from commit beff8270858221fc38f6136165ae2482856f59c2)

firmware: allow "local" business mirror subscription

While here remove the allow_custom softcoding which was always
enabled anyday.

(cherry picked from commit 6e57f1920c0e30ae65c178eda809b495a963fdd0)

mvc:Javascript - setFormData : allow passing of data- atributes for select items, this for example offers the option to use data-icon on selectpickers. for https://github.com/opnsense/core/issues/9945

(cherry picked from commit 2a4aa5c5b63fcb9552b2bdbb7d19747eb11526f9)

system: routing: changed disable option to enable (#10027)

(cherry picked from commit 3acfb5f2a7d58bdd21f7d5f23e285235853c04d4)
(cherry picked from commit a6da34447c487f89229251675de03f6ee13e8bb1)

mvc: Fix idassoc.php converting already decimal stored prefix_id via hexdec(), add unit test for idassoc.php (#10389)

---------

Co-authored-by: Franco Fichtner <franco at opnsense.org>
(cherry picked from commit b0e8dfcc54ee5f4e9eb1f8a2591fd92f28d1197b)

ui: style fixes

(cherry picked from commit 303f5b4e146ac5378556eb884b29c4b78b0b5a39)
(cherry picked from commit 8e1be409fcfbce09f63557140b194d4a2515c923)

Firewall: NAT: apply same bucket logic as filter_rule.volt

It's the same logic with slight adjustments as the NAT pages don't
require interface/group selection.

Ref: https://github.com/opnsense/core/commit/6402be8a5420f26192474f01af552b6617421513

dashboard: update result on default restore

(cherry picked from commit 20ce28677a86ba80832ba4251297df14dbf45743)

backend: plugins.inc is hardwired via config.inc

(cherry picked from commit 1e4ffcbc0f49ec0254efd3f05d0a47b264a9a31d)

rc: move system_powerd_configure() to bootup plugin hook

(cherry picked from commit 5364cac1c7bc6bc8ab27c5f693e306f6f3c03d99)

interfaces: parse ifconfig output despite exit error in legacy_interfaces_details()

Move stderr to /dev/null and always read stdout.  It improves intermittent
issues with ifconfig that will return data but "fail" with a non-zero return
code.

PR: https://github.com/opnsense/src/issues/284
Suggested by: @e-alfred

(cherry picked from commit 4223124d27dba496136266ea86f81fa12d298075)

make: improve import linter for edge cases

(cherry picked from commit 2571f8c181f5687f7806a882ee0eb5abd7db3397)

git: less ignore for our pkg files

This has been a problem for a decade.  Time to make this easier.

(cherry picked from commit b5c737b5fbb1f93a50d68dfc901797c1cfa701de)

VPN: OpenVPN: Exporter: Fix that linked user do not show, skip lazy loading the model because we require the commonname volatile field (#10406)

(cherry picked from commit d1435981b6547d29b6776a149fa3091baa6df2ae)

firmware: 26.7 fingerprint was a copy of 26.1 so fix that now

VPN: OpenVPN: Exporter: Fix that linked user do not show, skip lazy loading the model because we require the commonname volatile field (#10406)

VPN: OpenVPN: Exporter: Fix that linked user do not show, skip lazy loading the model because we require the commonname volatile field

firmware: disable these "new" repositories