BSD Commit Log Search

unbound: move this up

isc-dhcp: interalize interfaces_staticarp_configure(); closes #9476

Instead of making the interface code pluggable, push the code that
causes the persistent side effect to the ISC DHCP plugin which then
gets to fix the stuck static ARP flag after disable/deinstall and a
reboot.  The situation isn't ideal, but much better than before.

firewall: not taking any chances with isset() then via @adschellevis

unbound: style

firewall: make missing interface floating too in FilterRuleField

unbound: overview: fix quick allow/blocklist actions

The quick fix here is to block & allow on every defined policy. Ideally
one should be able to select a policy where an entry should apply
to in the case of a block action, and map back to the policy in case
of an allow action. The latter isn't possible in the current construct
yet as it needs a slight adjustment to the data format.

mvc: a bit more of asInt() and friends

backend: use mwexecf(m) where possible

firewall: safe execution changes in rules reloading code

firewall: tweak previous a bit more

firewall: this looks a little better

dhcp/kea: Add lease commands, tabulator GroupBy, URL hashes (#9409)

(cherry picked from commit cc2fa5ff1f30167a06a2500effb0f22a1cb41202)
(cherry picked from commit b6b61f9e94dccf6a5308fbb99cc0c930953e300a)
(cherry picked from commit 6d1ff4c975f8468dacd0c8416c09b0e8ba49a0d0)

firewall: live log: revert static property, persistence is disabled for this grid

ref: https://forum.opnsense.org/index.php?topic=49874.0
(cherry picked from commit c11efa62bda8af907ff4b6877727b4c100334560)

firewall: live view: restructure DOM layout to reduce wasted space. Closes https://github.com/opnsense/core/issues/9416

(cherry picked from commit d698b4e5ad41b30c5b89e2cdd842b6889543178f)

mvc: typ typo

shell: rewite timeout() using safe execution functions

This now works like opnsense-importer does it except for the print
which still counts here instead of showing a character per second.
Instead of returning the character we return the error if a key was
pressed, i.e. reversed to signal that timeout() was an actual timeout
or interrupted.

Firewall: Aliases - do not support nesting in geoip aliases to prevent overlapping countries with existing alias contents, closes https://github.com/opnsense/core/issues/9482

(cherry picked from commit 7b9aaf9f5dd6f747f1eaafefa5ba1bd5bd6549c3)

Firewall: Aliases - do not support nesting in geoip aliases to prevent overlapping countries with existing alias contents, closes https://github.com/opnsense/core/issues/9482

mvc:model - default sort order ignore in fetchBindRequest() when sort is an ampty array (which is tabulators default now). spotted while working on https://github.com/opnsense/core/issues/8401

(cherry picked from commit 7d2d9682dc984241bc0591539f801ef19d84261a)

firmware: replace one execution call with Shell class in controller

system: replace history diff exec with shell_safe #9325

(cherry picked from commit c9559bcc9f173194fc3a6ea4c4559992c20bdeac)

backend: minor shell execution changes and readability

system: replace exec() in config encrypt/decrypt #9325

Although these are very safe the calls are much more portable now
and this was also the last exec() in the MVC code.  Plus, Shell
class was already being used elsewhere here.

(cherry picked from commit ae4bac8bada187005dfd0cd186b891ffb02ffdfb)

Services: Unbound DNS: Overrides - missing lock in  del_host_override action.

(cherry picked from commit 0f3daf70e4a5eaf848dace40eb2f5bdabb2ef296)

VPN: IPsec: Connections - prevent model caching when refering items within the same model

PR: https://github.com/opnsense/core/issues/9459

(cherry picked from commit cf5b944d63a6853fa5d0d2736db154fd6f2ca5f4)
(cherry picked from commit b5cfa1a0b4423cc7c77dc2b4e64de6320fc7b5b2)
(cherry picked from commit 27beef43a5047c52a0993ef367762b1a625d7b09)

VPN: IPsec: Connections - fix regression in https://github.com/opnsense/core/commit/b5cfa1a0b4423cc7c77dc

system: no longer back up DUID but add some compat glue to importer

(cherry picked from commit 4988b0390dd383fc394c008fff75b76848a5868a)
(cherry picked from commit 88f8ed0ee631f078897b924232c0c2a6f3c7616d)
(cherry picked from commit bc1a33057879119842b02e46705c798e549d346d)

pkg: fix plist

isc-dhcp: move syslog definitions to plugin file

(cherry picked from commit c76fda51b7183a3c6d5305b40960323e0df3080a)

firewall: run filterlog directly after rules apply and remove promiscous mode

PR: #9449

(cherry picked from commit c6eaefc1e26550085b09abf1cca73fdc8f76db13)
(cherry picked from commit 7b1528a823822ab692b6bc2748c71d4fc727870f)