BSD Commit Log Search

open in new tab

Firewall: Group: change link to new firewall rules

firewall: legacy rules pages move to plugin #9947

pkg: bootstrap 26.7 stable branch

Firewall: Group: Prevent deletion if a group is referenced in new NAT/Firewall rules (#10496)

Firewall: Group: Prevent deletion if a group is referenced in new NAT/Firewall rules

system: dashboard widget does not know about patch release syntax

PR: https://forum.opnsense.org/index.php?topic=52294.0

Firewall: NAT: When cloning a rule, always set a sequence at the end of the ruleset (#10494)

Also add this to snatrules

Add missing param to description

Firewall: NAT: When cloning a rule, always set a sequence at the end of the ruleset

firewall: minor cleanup pass over old outbound registration code et al

Firewall: NAT: When cloning a rule, always set a sequence at the end of the ruleset

logging: archive and rotate. fix two issues, $link being defined after use and $log_subject not taking subfolders into account (leading to overlaps and likely faulty cleanups)

dnsmasq: simplify previous

Just checking that Unbound watcher doesn't have the same defect;
unify the behaviour by resetting at the beginning of the loop
instead of at the end.

dnsmasq: possible use before define in dnsmasq_watcher.py

noticed in https://github.com/opnsense/core/issues/10492

openvpn: further fix validation for auth token secret and static key

PR: https://forum.opnsense.org/index.php?topic=52272.0

(cherry picked from commit 3796738ab929b6707c193d4324802cb2fe07c155)
(cherry picked from commit a6302140a97c5c811316494e0438b944d609ceda)

fbsd 15.1 regression - fix stricter validation in pf leading to "route-to, reply-to and dup-to are not supported on block rules..."

openvpn: same for auth token secret

PR: https://forum.opnsense.org/index.php?topic=52272.0

VPN: OpenVPN: Instances -  forgot a spot in 803b2fa6855a8ef1431209edc7e257e7a7681d4e m cryptv2 uses base64

configd/templates - allow "strict" mode +TARGETS using the ! keyword.

Example line:
!at.cron:/etc/cron.d/at

In which case the target won't be generated when multiple modules are being flushed out (such as template_ctl.py \* being used on boot)

While here, also deprecate codecs (python warning)

for https://github.com/opnsense/plugins/pull/5521

firmware: support for patch release matching

(cherry picked from commit c997621e316ebe9936b99ca3d0c15cbc62cc2b16)

VPN: OpenVPN: Instances - partially revert https://github.com/opnsense/core/commit/6c3be9a11699879fe50aea1c30e50de5864601d7 and add a specific regex constraint for static keys (alphanum, line endings, minus signs and hashes)

closes https://github.com/opnsense/core/issues/10483

(cherry picked from commit 803b2fa6855a8ef1431209edc7e257e7a7681d4e)

VPN: OpenVPN: Client Export - php85 issue "Using null as an array offset is deprecated"

VPN: OpenVPN: Instances - partially revert https://github.com/opnsense/core/commit/6c3be9a11699879fe50aea1c30e50de5864601d7 and add a specific regex constraint for static keys (alphanum, line endings, minus signs and hashes)

closes https://github.com/opnsense/core/issues/10483

config.xml.sample - fix default to use mvc firewall rules.

uuid's are omitted intentionally as the initial migration will generate a unique one automatically.

firmware: support for patch release matching

pkg: fix plist

php85 - some minor issues foud while testing firewall rules migration

Interfaces: Assignments - minor usability improvements.

* show "hint" when editing an interface without a description
* add lock toggle and set to locked by default.
* show identifier by default in grid and edit dialog

as discussed in https://github.com/opnsense/core/pull/10476