BSD Commit Log Search

Firewall: Aliases - add Expire option to external aliases to automatically cleanup tables via cron, closes https://github.com/opnsense/core/issues/8831

As expiretable was already used for predefined sshlockout and virusprot tables, we moved the option to the model and made sure the internal ones have their settings in the model as well.
For simplicity, we flush the tables that need to be expired to cron, using either a 15 minute or 1 minute interval, depending on timing.

pfctl offers the same functionality as expiretable now, so lets drop the latter for simplicity.

ipsec: tooltip trigger not necessary anymore since 699b690

dnsmasq: Fix DomainIPField, allow IP address to be emptied

dnsmasq: Fix missing condition in ipset validation (#8907)

dnsmasq: Fix missing condition in ipset validation

security/stunnel Add LDAP and NNTP to supported STARTTLS protocols (#4788)

ui: fix last page pagination values on non-ajax grids

ui: add missing statusMapping functionality for new bootgrid

automation/filter: Use fetch_options for category selectpicker, simplify the reconfigureActInProgress logic

Merge remote-tracking branch 'origin/master' into automation-improve-grid-reload-behavior

System: Firmware: Plugins - Add checkbox to show tier3 and development plugins, which are now hidden by default.

* minor style cleanups in the controller array() vs []
* Change tier handling in the controller, only trust tiers from OPNsense, set Zenarmors plugins to fixed tier 2
* Change -devel packages to tier "DEV"

automation/filter: Filter out empty category names (#8905)

automation/filter: Filter out empty category names

monit: style issue in model

mvc: add isList() to BaseSetField for testing #8897

mvc: allow PortOptional=Y for IPPortField

PR: https://github.com/opnsense/plugins/pull/4698
PR: https://github.com/opnsense/plugins/pull/4445

mvc: convert CSVListField to use BaseSetField #8897

Add a mask validation test while at it.

mvc: new base class for separator/list based fields #8897

mvc: allow PortOptional=Y for IPPortField

PR: https://github.com/opnsense/plugins/pull/4698
PR: https://github.com/opnsense/plugins/pull/4445

mvc: add isList() to BaseSetField for testing #8897

mvc: add isList() to BaseSetField for testing #8897

Merge pull request #4755 from fraenki/acme_4_10

security/acme-client: release 4.10

www: bring os-squid and os-OPNProxy to tier 3

security/acme-client: assorted logging enhancements

mvc: convert CSVListField to use BaseSetField #8897

Add a mask validation test while at it.

mvc: new base class for separator/list based fields #8897

system: replace getCurrentValue() in PrivController

system: switch away from using getCurrentValue() in UserController

pf: align sanity checks for pfrw_free

pf: backport changes around the following commit #242

 commit 49f39043a02d6011c1907e1b07eb034652a1269c
 Author: phessler <phessler at openbsd.org>
 Date:   Fri Apr 28 14:08:34 2023 +0000

    Relax the "pass all" rule so all forms of neighbor advertisements are allowed
    in either direction.

    This more closely matches the IPv4 ARP behaviour.

    From sashan@
    discussed with kn@ deraadt@