BSD Commit Log Search

Firewall: NAT: NPTv6 - add MVC migration and cleanup old legacy pages.

firewall: redirect interface seelctor for #6158

(cherry picked from commit 600b5bf84ec405c69faea23c3157c38f39796870)
(cherry picked from commit cd3fa5a26812905f66a62498cafe2d84c9e83b6c)

firewall: redirect interface seelctor for #6158

firwall: POC for #6158

firewall: binat never supported redirect target alias #6158

There were error(s) loading the rules: /tmp/rules.debug:109: invalid use
of table <__lan_network> as the redirect address of a binat rule - The line
in question reads [109]: binat on igb1 inet6 from ff00:: -> $__lan_network

That also means aliases are useless here and we need to have an interface
selector anyway.

Also pconfig_to_addr() doesn't store /128 which may cause an error in the
prefix translation at the moment.

firwall: POC for #6158

core/css - upgrade bootstrap-select to v1.13.18, remove the version number from the css file as well (needs changes in the plugins as well).

(cherry picked from commit dd9854f111c3a801f2db5e14c2fbfdc9b36f3785)
(cherry picked from commit 6fbe6ca189495343112b1bb78f4947c898822273)
(cherry picked from commit 445a81d73ba1026b2e445c87183afdd34f271ca9)
(cherry picked from commit fd2e872e0fd2c28ddc527877980ed7110928293b)
(cherry picked from commit 020cac564bb01150514274dfde0163092bda9203)
(cherry picked from commit ac0dc0ff89df099d8d74f2f2cbaf9f4de6762dc7)
(cherry picked from commit 99fcbaf93345b8c08bd60a67c9aa9014c3fbf89c)
(cherry picked from commit 8b378cd4e7ae7f3075d8945dcdaf29dff6047657)
(cherry picked from commit 10458747e244c5b4c758cbdeaf90bf4b724664c7)

firewall: fix bootstrap-select update fallout

data-width="auto" use is probably still broken in a few places
but better fix these per user report.

ui: unify dropdown width

Fix a nasty scroll bar bug with alias proto selector, style
and adjust all manual widths accordingly.  For a strange reason
the text inputs are 2px shorter in the base forms than the modals
and the static pages so adjust the width to 346 in that case.

firewall: allow external dynamic address in NPT #5284

(cherry picked from commit 32c783ca32048b2f03076cd9f8722be0c28d2879)
(cherry picked from commit b7a9d0b41f14d0d6880706c6d8b0970c98bedd4b)
(cherry picked from commit f7e64baa5c540ef1ccae01d017768f585ec492bf)
(cherry picked from commit 17ec3264a4f0a86c49d031cb320febce9c051c0f)

firewall: allow external dynamic address in NPT #5284

Merge branch 'master' into system_status

firewall: allow NPT logging; closes #5228

We will be adding NPT logging support because the infrastructure
already supports it.  1:1 is a bit harder to deal with so hands
off for now and see how this works out.

src: more cleanups on static pages

Merge tag '21.1.6' into stable/21.4

stable release

src: more cleanups on static pages

NPTv6 configuration clean-up (#4894)

* NPTv6 rule edit clean-up
Internal and external prefix length must be the same. Remove dstmask input and use srcmsk for source and destination.
"Invert" doesn't work for NPTv6. Remove.
Rephrase text to avoid confusion and match terminology used in firewall_nat_npt.php (Internal / External vs. Source / Destination).
* NPTv6 rule overview style fix
Uppercase for consistency.

(cherry picked from commit 0b9a77806902ca28f4c4080fb62d4e7f2c5643b2)

Merge branch 'master' into enhance-openvpn-config-tlscrypt

NPTv6 configuration clean-up (#4894)

* NPTv6 rule edit clean-up
Internal and external prefix length must be the same. Remove dstmask input and use srcmsk for source and destination.
"Invert" doesn't work for NPTv6. Remove.
Rephrase text to avoid confusion and match terminology used in firewall_nat_npt.php (Internal / External vs. Source / Destination).
* NPTv6 rule overview style fix
Uppercase for consistency.

firewall / categories: minor regression, when returning fromt POST type isn't guaranteed.

(cherry picked from commit bf42e6efce1b240fd3c2a18409a3a19fad33e53e)

Firewall / categories: fix missing POST arrays, closes https://github.com/opnsense/core/issues/4655

(cherry picked from commit 34698ef09c781919aa151ed72a31804d7a0d9819)

Firewall / categories: fix missing POST arrays, closes https://github.com/opnsense/core/issues/4655

firewall / categories: minor regression, when returning fromt POST type isn't guaranteed.

Firewall / NAT: support category filters #4587

Move the categories into a separate module to be used in other firewall
sections as well and refactor the current legacy pages for outbound nat
rules and port forwards to include categories. In a future version there's
also a wish to support multiple category tags on a single rule, in which
case we would replace the current type ahead input for the same tokeniser
used in other components.

Sponsored by: Modirum (https://www.modirum.com/)

(cherry picked from commit 9550a9072aa03593842381001f9ff4ac560eddc9)
(cherry picked from commit 416fc37ee96f75a600f6ca5fc777bbf7ec6cafcc)
(cherry picked from commit 224dfb0a36d6e35a31efa9ce5b11ffab78106c53)
(cherry picked from commit 3b1c3eb3d322ae878d399e08b02f3b2d61c2a77a)
(cherry picked from commit fab8222aea3b11515491b988399ceb8f549b9e2c)
(cherry picked from commit bdc443096370efd38e5833eb11858d6dcdb16e5d)
(cherry picked from commit b00902e46cf3aea889e245d1ce0dfede62203dbc)
(cherry picked from commit 5d173f52cf302bae33ef8ebe80bc62c2c2e55ca0)

    [8 lines not shown]

Firewall: add model for categories. work in progress for https://github.com/opnsense/core/issues/4587

Add category option in all nat pages, condense layout while ther so the pages are more consistent with the firewall rules

Next steps:

- reformat category selection a bit so it's more clear results are filtered and maybe count the number of items per catagory for clarity.
- add category ui to manage the model

fix some gettext() + html_safe, discussed https://github.com/opnsense/core/commit/c4c7f8d732a9e3e7ab4bef8573379cf5721ae9d8

(cherry picked from commit 4a8e737ced67ebb89368f92086c8a4ea282a1468)

fix some gettext() + html_safe, discussed https://github.com/opnsense/core/commit/c4c7f8d732a9e3e7ab4bef8573379cf5721ae9d8

www: fixes from master

Remove nonexistant CSS properties

The table attributes 'cellspacing' and 'cellpadding' were moved inside the style attribute via a script. However, they are not valid CSS properties, so browsers should (and do) ignore them.
This commit removes them. The 'table' class, set on most tables, should take care of proper formatting anyway.

src: remove trailing dot workaround by removing trailing dots

(cherry picked from commit 574bd308be8a54fc43bd2b815c8d34a79df2080d)