BSD Commit Log Search

System: Routes: Configuration - group ECMP routes and signal the user when mode is disabled, closes https://github.com/opnsense/core/issues/10569

System: Snapshots - always enforce note directory to be owned by "wwwonly:wheel" as configured to prevent notes created by the ui in root mode not being readable when switching to wwwonly.

(cherry picked from commit f81d527a436e5376cbac112ac444a5e54b7fdc93)

system: let the user know that strict security is best served with a reboot

(cherry picked from commit fab7648251ffcde9cc51ef80e1b1d77304f9bf68)

system: let the user know that strict security is best served with a reboot

System: Snapshots - always enforce note directory to be owned by "wwwonly:wheel" as configured to prevent notes created by the ui in root mode not being readable when switching to wwwonly.

Revert "System: Snapshots - always enforce notes to be owned by wwwonly to prevent notes created by the ui in root mode not being readable when switching to wwwonly."

This reverts commit b2fb2b63f479c8879d9a54fefabe310712cefd70.

System: Snapshots - always enforce notes to be owned by wwwonly to prevent notes created by the ui in root mode not being readable when switching to wwwonly.

syslog: suppress local by default, add suppress option for remotes (#11107)

Use suricata optimized ids ruleset for urlhaus (#11105)

syslog: suppress local by default, add suppress option for remotes

System: Routes: Status - refactor configd call "interface routes list" to use libxo and add additional fields needed for ECMP, for https://github.com/opnsense/core/issues/10569

Change view to show child entries for duplicate destinations using _children property (which tabulator can use)

System: Configuration: Wizard - refactor configd call "interface routes list" to use libxo and add additional fields needed for ECMP, for https://github.com/opnsense/core/issues/10569

Services: Monit - escape password double quotes with their hex interpretation

PR: https://github.com/opnsense/core/issues/11051

(cherry picked from commit d2b191ab08fa5284d984a2250698581064e8fa55)
(cherry picked from commit 7c90023df8688b3f61eb0ef8b6d6114763e22d35)
(cherry picked from commit ba30f977058562f6c9a74cde89ea04c77354b3fb)

src: style sweep

monit: allow spaces in password

Use is rare but not unthinkable

Scripts: class import can also use "implements"

(cherry picked from commit 4d7866af71283145932f4fbff2ae4d3d9dda9a71)

Scripts: class import can also use "implements"

System: Configuration: Wizard - add "net.route.multipath" (ECMP) option for https://github.com/opnsense/core/issues/10569

simplify and update UI

system: style fix

(cherry picked from commit 2d6c4707fc1dc12d32f58d3000e4cb7cfd022b67)

system: style fix

System: Routes: Configuration - bold StaticRoute class into legacy code and plugins  for  https://github.com/opnsense/core/issues/10569 (#11104)

As a first step, it's easiest to refactor system_routing_configure() to use our new class and leave the callers alone.
We should likely double check the callers at some point too, but impact is easier to assess when the number of changes is slightly more limited.

With this change in place, you could now configure mulitple paths for the same destination.

ipsec: refactor sessions page and retain phase 1 grid selection on tunnel start/stop

(cherry picked from commit 783e1f15ec9e45fe11f7874cd281086599e4fdd6)

rc: handle /conf/snapshots here as well

for strict security mode, preventing an exception when adding a snapshot.

(cherry picked from commit 7058f5fc65e1e1175b1ad75f1a4495e0e90cbe7b)

firewall: Add batched log commands to multi enable/disable logging for rules (#11035)

(cherry picked from commit 6fa1b5d9b080b8a715f26db2f7e65a24de50f60f)

mvc: whitespace

(cherry picked from commit 87d91c2e6d6df811c04f40aa7f6119f30cf9df27)

firewall: Increment the sequence when cloning a rule, Ref: https://github.com/opnsense/core/issues/10530

(cherry picked from commit b1034efade9acfaedee95bc3e32990d21216abf0)

firewall: support moving multiple rules in selection order (#11008)

Unify move-before handling in FilterBaseController so filter and NAT
controllers share the same validation and sequence allocation logic.

Accept up to 50 (current step count) comma-separated rule UUIDs, preserve their selection
order using consecutive sequence values, and only shift following rules
when the existing gap is insufficient. Keep filter moves within their
priority group.

Update the firewall rule grids to submit all selected UUIDs and display
their selection order. Add opt-in selection-order indicators and dynamic
command tooltips to UIBootgrid so the move action reflects the current
selection.

(cherry picked from commit c977efe76fa1ad5a0dd360d4c24839f6e9d08f4c)

firewall: Remove advanced markers in SNAT and DNAT that were leftovers from the legacy GUIs logic

(cherry picked from commit cf8f078de523944d1b3c354ab84278ccb91345e1)

suricata: add config locking during rule updates (#11101)

(cherry picked from commit 0eda48b05bcb7073921a9895fcc73280d2d30eef)