OPNSense

Recent Commits

• Konstantinos Spartalis(07 Oct 26)

  VPN: IPsec: Deprecate IKEv1 (#10925)

• Ad Schellevis(07 Oct 26)

  Firewall: NAT: Destination NAT - fix "Warning: Undefined variable $port in .."

• Franco Fichtner(07 Oct 26)

  interfaces: remove direct $config access and improve device handover in legacy apply

• Franco Fichtner(07 Oct 26)

  interfaces: remove PPTP support; closes #10973 To ease future migrations from PPP to MVC/API and reduce the config field "localip" misuse we want to phase out PPTP and reduce complexity of the implementation. While L2TP may be still around the PPTP tunneling is very likely not used anymore. A bit of a message to everyone still using this. Only one way to find out.

• Stephan de Wit(07 Oct 26)

  Revert "interfaces: fallback here to prevent php warnings" This reverts commit cda3b2f717fce26add61c147d1da0b0a0812c3eb. these are stored by default now after save

• Stephan de Wit(07 Oct 26)

  interfaces: fallback here to prevent php warnings PHP Warning: Undefined array key "localip" in /usr/local/etc/inc/interfaces.inc on line 1192 PHP Warning: Undefined array key "gateway" in /usr/local/etc/inc/interfaces.inc on line 1196

• Stephan de Wit(07 Oct 26)

  reporting: unbound: capitalize DNSSEC status column header

• Franco Fichtner(06 Oct 26)

  interfaces: backend call for interfaces_ppps_configure(); closes #9352

• Stephan de Wit(06 Oct 26)

  gateways: null is not going to be a UUID either ErrorException: Using null as an array offset is deprecated, use an empty string instead in /usr/local/opnsense/mvc/app/controllers/OPNsense/Routing/Api/SettingsController.php:162 Stack trace:

• Franco Fichtner(06 Oct 26)

  interfaces: priv-sep script for interface apply the legacy way #9352

• Franco Fichtner(06 Oct 26)

  interfaces: remove system_routing_configure() #9352 The function is called via $reload hook so adding another hook makes no sense. This may have changed since the original commit below and since we need to priv-sep these calls the easiest way is to remove it. ;) See also: https://github.com/pfsense/pfsense/commit/8e11b23f541d

• Franco Fichtner(06 Oct 26)

  system: $config is unused in core.inc

• Franco Fichtner(06 Oct 26)

  interfaces: move legacy apply to /var/lib/php/tmp for #9352

• Jorio(06 Oct 26)

  reporting: unbound: add dnssec status column in details grid (#10940) Fixes https://github.com/opnsense/core/issues/10704 --------- Co-authored-by: Stephan de Wit <[email protected]>

• Franco Fichtner(06 Oct 26)

  firewall: less parenthesis for previous

• Ad Schellevis(06 Oct 26)

  Firewall: Aliases - deny invalid port ranges, closes https://github.com/opnsense/core/issues/10954

• Ad Schellevis(06 Oct 26)

  VPN: OpenVPN: Instances - improve keepalive validation, mentioned in https://github.com/opnsense/core/pull/10174

• Ad Schellevis(06 Oct 26)

  VPN: OpenVPN: Instances - default keepalive to 10 60 in server mode and explain in the help text. closes https://github.com/opnsense/core/pull/10174

• Franco Fichtner(06 Oct 26)

  src: style sweep

• Franco Fichtner(06 Oct 26)

  system: refactor route deletion and use priv-sep in general settings page #9352 (#10962)

• Franco Fichtner(06 Oct 26)

  system: make "noroot" the standard option with 27.1 #9352 As discussed internally, we want to aim for this to be the new standard, but we will not migrate any existing setups just yet. This may need more documentation/annotation for components (mostly legacy plugins) where this won't work, but it's a very good start to root these out via user reports.

• ExpRam(06 Oct 26)

  interfaces: remove stale VIP address after update (#10883)

• Franco Fichtner(06 Oct 26)

  mvc: also fix overrides of reconfigureForceRestart() regarding return type

• Ad Schellevis(05 Oct 26)

  Firewall: NAT: Destination NAT - fix destination for no-rdr rules, related to https://github.com/opnsense/core/pull/10945 Reported by: @fa1k3

• Ad Schellevis(05 Oct 26)

  lockout: type safety fix.

• Franco Fichtner(05 Oct 26)

  interfaces: add proper local/remote IP support to PPPoE IPCP; closes #10966 I added the remotenet field specifically so that we can do a remote IP /32 selection for people with HA issues getting the wrong gateway from the ISP.

• IvanTheGeek(01 Oct 26)

  monit: log from the first line, reconfigure through the base class The local reconfigureAction() only started or reloaded monit when the whole output of "monit -t" was exactly "Control file syntax OK", so the first Apply on a new install ("New Monit id: ...") and any deprecation warning left monit stopped or not reloaded while reporting "ok". Drop it, and checkAction(), in favor of ApiMutableServiceControllerBase. Move "set log" to the top of monitrc: monit only logs a parse error after it has parsed "set log", so an invalid control file now leaves its reason in the monit log, whether rc refused the reload or monit refused to start. Fixes https://github.com/opnsense/core/issues/10928

• Ad Schellevis(04 Oct 26)

  Config: missing chown in backup call to prevent backend processes leaving unaccessible files for the frontend. closes https://github.com/opnsense/core/pull/10963

• Franco Fichtner(03 Oct 26)

  mvc: trailing commas are cool so let's keep them

• Franco Fichtner(03 Oct 26)

  mvc: PortField: always return a string for normalizedPort()