BSD Commit Log Search

src: style, plist and syntax fixes

Services: Kea: DHCPv4: allow sending any DHCP option as raw hex or string payload (#9958)

This uses csv-false to force kea to send option data as hexadecimal value, instead of enforcing types on them.

This means theoretically you can now send any byte coded option out, meaning the user can construct whatever value they need. This also means encapsulated options like 43 can be sent in the format any vendor might require, as binary that is.

There is also another possibility, a very specific format of data can automatically convert strings into hex (bytes), kea handles this conversion internally. "data": "'convert this text to binary'"

firmware: repeat the update after pkg reinstall

It appears that the package manager lost a number of tricks
over the years so now we add more manual labor to do what
we expect of it.

Review comments @fichtner

Captive portal: IPv6 support (#9745)

This commit adds IPv6 support for Captive Portal by introducing a new "roaming" option, which is enabled by default. Roaming allows the synchronization of additional IPv4/IPv6 client address aliases, aggregating their accounting through ipfw and managing their state in the pf table. For IPv6, hostwatch is required to be enabled to prevent performance issues during client roaming IP synchronization. Furthermore, IPv6 can only work properly if a hostname is provided in the zone and proper AAAA records have been synthesized for the local DNS server - for a default setup, this requires the DNS64 option in Unbound to be set.

Co-authored-by: Alex Goodkind <alex at goodkind.io>

captive portal: trim IPv6 address fetch logic in zone template, remove pf state kill, backend listening op IPv4 only so adjust AccessController logic

Add missing newlines

Add missing newlines

Forgot adding the option form to reservations as well

Allow choosing between string and hex to leverage auto conversion of strings to binary built into KEA

Services: Network Time: PPS - remove stale symlink when pps is disabled, closes https://github.com/opnsense/core/pull/9969

Typo in ValidationMessage

kea: Concept to allow sending any DHCP option as raw hex value to avoid the scaling issues of a fully type based approach

bootgrid: require selection to be enabled for delete-selected

Logically, multiSelect should be enabled here as well, but leave this
out for now as it may be too wide.

VPN: IPsec: Security Association Database: apply the same as https://github.com/opnsense/core/commit/9c950fcc3ccc396e943b31908a6ea3a182b1d4b2. Missing datakey mapping here as well

dashboard: firewall: add semantic groups coloring option (#9907)

* firewall.js should keep coloring after reload, use sematic groups block = red

* fixes for review, hash simplification, color palette, action matching

* action is string, include interface, add default color

* Use color schema for chart colors, vary by shades

* fix blocks

* make color schema configurable for widet, defaults to contrast uses Classic10

* changed from select_multi to select, contrast mode matches the old behavior

* use options.colorscheme, fix color cycling bug

* Update src/opnsense/www/js/widgets/Firewall.js

    [13 lines not shown]

firewall: flip-flip rule GUI labels for #9947

firewall: fix regression in 8554581eac so alias content summary is shown (#9929)

The "description" is a summary so change the underlying
code accordingly to avoid future misinterpretations.

PR: https://forum.opnsense.org/index.php?topic=51246.0
(cherry picked from commit d908345d1ae54ed733d497543944abae6dac4052)

VPN: IPsec: Security Policy Database - delete selected not backed by actual logic, closes https://github.com/opnsense/core/issues/9937

(cherry picked from commit 9c950fcc3ccc396e943b31908a6ea3a182b1d4b2)

backend: apparently r'' is a better fix for SyntaxWarning

Sometimes we even use it.

PR: https://forum.opnsense.org/index.php?topic=51175.0
(cherry picked from commit fa9e2177473c5b2b5711165c526696f1793a0781)

interfaces: fix static neighbor apply button (#9934)

Fixes: #9932
(cherry picked from commit 72ab5e36fde40afa8c0fb0894565da445fcb4e57)

this css does nothing anymore

trim this slightly

network time: Friday challenges as always

check isPost() and update help description

network time: adjust previous

network time: pool.ntp.org servers must have sticky ispool behaviour

setValues() to BaseSetField, simplify reflector mapper

switch to BaseSetField for AliasReflector

remove AliasRefCount.php as well