20861 Commits
Author SHA1 Message Date
Franco Fichtner 212185a8be interfaces: for igb vlans it seems they are always up even if the parent is down
PR: https://forum.opnsense.org/index.php?topic=52824.0
2026-10-11 12:05:45 +02:00
Ad Schellevis 5de9cc0dcc System: Routes: Configuration - concurrency fix and small cleanups for https://github.com/opnsense/core/issues/10569
If we want to allow a single network being routed through multiple next hops, we should alter our cleanup to use the actual gateway instead of always dropping the destination network.
This change only uniforms how we collect that information from the ui and implements proper locking, the logic itself (drop network when altered or removed) isn't changed yet.
2026-10-10 18:34:27 +02:00
Ad Schellevis 93af50075e FileObject: remove +e where used as its always appended nowadays (https://github.com/opnsense/core/commit/55204f9d77b9cb74f314edd5f4b778bbb1aaccf3)
Just a precaution, if for some reason, php in a future version would crash on receiving the same modifier twice, it feels safer to not having it.
2026-10-10 18:02:33 +02:00
Franco Fichtner f681fc26b3 interfaces: defaults for "configurable" and "spoofmac" are ensured in plugins_devices() 2026-10-10 10:34:00 +02:00
Ad Schellevis 0bcd1e0ef0 Interfaces: Assignments - add some missing constraints as discussed in https://github.com/opnsense/core/issues/10996 2026-10-10 10:04:15 +02:00
Ad Schellevis bf468af18e installer: forcefully set uid to 0 for installer user
cc @fichtner
2026-10-10 09:41:25 +02:00
Franco Fichtner 180f245170 interfaces: small follow-up regarding 'none' use #10996 2026-10-10 09:24:51 +02:00
Franco Fichtner e57c746ed0 interfaces: only store "dhcp6_norequest_dns" in DHCPv6 mode 2026-10-10 08:40:00 +02:00
Franco Fichtner 099b68a449 interfaces: do not render "none" to configuration #10996 2026-10-10 08:31:36 +02:00
Franco Fichtner 7bbd7a3c4a Revert "mvc: UidField: allow reuse of UID 0 for system scope users"
This reverts commit 649bcb2186.
There is a bug in the old and new behaviour, but without a proper
test case this will not fix easily.  stable/26.7 doesn't use this
yet so it's sane to hotfix.

PR: https://github.com/opnsense/core/issues/10992
2026-10-09 19:43:59 +02:00
Stephan de Wit e113cd729c ui: sync expanded state for selected submenus
Noticed while reviewing https://github.com/opnsense/core/pull/10942

This will prevent two submenus being open at the same time regardless
of depth, which seemed to happen particularly on second-level submenus.

This will cause more shifting around, but this consistency is already
applied on the first-level submenu.

The alternative is to allow multiple second-level submenus open
at the same time and only close when switching top-level sections.
2026-10-09 15:29:05 +02:00
Franco Fichtner 2c04169a64 interfaces: better wording
Complaint via: @Monviech
2026-10-09 15:24:49 +02:00
Franco Fichtner 53f03f4e18 interfaces: em does not work as expected, use px 2026-10-09 13:47:58 +02:00
Franco Fichtner 494b0e6c90 interfaces: tweak grid size in assignments 2026-10-09 13:12:55 +02:00
Franco Fichtner 3e63c1cbf8 interfaces: remove the PPP uptime option
Was modified in 4d495ea6cc, f129c4682b et al. to a state where
the option could still be enabled but never read.  The /conf bound historic
log is still filled but nothing reads it.  Let's retire it for 27.1.

One other goal here is to reduce the incoming impact of a MVC/API rewrite.

Discussed with: @swhite2
2026-10-09 13:06:43 +02:00
Franco Fichtner 5aaddb855c interfaces: fix previous 2026-10-09 12:59:19 +02:00
Franco Fichtner 6c6540b233 interfaces: provide better optgroup labels to DeviceField 2026-10-09 12:55:19 +02:00
Franco Fichtner c29bf7f70a interfaces: PPPoEv6 only works with PPPoE device
This was matching all PPP devices which was wrong.
2026-10-09 11:17:10 +02:00
Franco Fichtner abc4c69ce8 interafces: PPPoE supports all IPv6 types
Only IPv4 prohibits use of 'staticv4' and 'dhcp'.  In theory
even these could work but we don't want to push our luck.
2026-10-09 11:08:16 +02:00
Franco Fichtner 28aa52f4e8 interfaces: missed interface designation on configd call 2026-10-09 10:51:49 +02:00
Franco Fichtner e02448173f interfaces: defer PPP to after bootup #10936
This is intended to fix bootup related issues with PPPoE, e.g. where it
retriggers DHCPv6 too many times.  Essentially it's the same as deferring
the newwanip scripts, but one level below since mpd5 is much more allergic
to link state changes.

This also disables the CARP handling on bootup, but does not address
the backup starting up as well as the master.  Essentially this is what
reconfigure_ppp.php is meant for.
2026-10-09 10:23:48 +02:00
Franco Fichtner d2ad94b38b interfaces: introduce interfaces_device_wait() for PPP use 2026-10-09 10:01:11 +02:00
Stephan de Wit 2c3ac5d692 bootgrid: sync columnselect-input state with (un)setColumns 2026-10-09 09:37:04 +02:00
Franco Fichtner 7b9beb8194 Revert "interfaces: the PPP uptime option no longer exists"
This reverts commit b4cca4ef5a.

Meh: apparently all of this works but is never read.
2026-10-09 09:35:31 +02:00
Franco Fichtner b4cca4ef5a interfaces: the PPP uptime option no longer exists
Was removed in 4d495ea6cc, f129c4682b et al.
2026-10-09 09:30:18 +02:00
Franco Fichtner 3384e551f3 interfaces: wait for parent up as well
This needs more work but for now just do what we already do
while wating for the PPP device to come up: wait for the parent
as well as some drivers may take the parent down for multiple
seconds.

Ideally dialing should be deferred to after bootup which we're
already working on... 30 seconds total delay for non-functional
situation is already a lot.

PR: https://forum.opnsense.org/index.php?topic=52824.0
2026-10-09 09:19:38 +02:00
Ad Schellevis eae12d7a34 System: Gateways - previous fix for https://github.com/opnsense/core/issues/10978 didn't work for groups, inspecting the code again does seem to prefer https://github.com/opnsense/core/pull/10982 anyway. 2026-10-09 09:02:09 +02:00
Ad Schellevis c353e1a231 System: Gateways - reverted logic in previous, which should complete https://github.com/opnsense/core/issues/10978 2026-10-09 07:41:19 +02:00
Franco Fichtner 16dfcafee7 interfaces: set promisc mode to advanced 2026-10-08 20:31:47 +02:00
Ad Schellevis a0e544cfb8 System: Gateways - fix protocol selection for dynamic interfaces without ipprotocol set and make sure policy based routing rules can use these for both protocols. closes https://github.com/opnsense/core/issues/10978
When using "Dynamic gateway policy" on an interface, a route-to rule will omit the (unknown) address.
This logically means both protocols could be served by the same gateway entry.
2026-10-08 20:26:26 +02:00
Ad Schellevis 6553188c27 Firewall: Diagnostics: Aliases - array_search() should check for boolean false, closes https://github.com/opnsense/core/issues/10981 2026-10-08 15:41:59 +02:00
Konstantinos Spartalis 8837a247fc VPN: IPsec: Deprecate IKEv1 (#10925) 2026-10-07 16:05:03 +02:00
Ad Schellevis 86cae77e4e Firewall: NAT: Destination NAT - fix "Warning: Undefined variable $port in .." 2026-10-07 14:52:23 +02:00
Franco Fichtner 2cf8272b54 interfaces: remove direct $config access and improve device handover in legacy apply 2026-10-07 14:16:33 +02:00
Franco Fichtner b89172f346 interfaces: remove PPTP support; closes #10973
To ease future migrations from PPP to MVC/API and reduce the
config field "localip" misuse we want to phase out PPTP and
reduce complexity of the implementation.

While L2TP may be still around the PPTP tunneling is very likely
not used anymore.  A bit of a message to everyone still using this.
Only one way to find out.
2026-10-07 13:56:34 +02:00
Stephan de Wit 403435e687 Revert "interfaces: fallback here to prevent php warnings"
This reverts commit cda3b2f717.

these are stored by default now after save
2026-10-07 11:12:28 +02:00
Stephan de Wit cda3b2f717 interfaces: fallback here to prevent php warnings
PHP Warning:  Undefined array key "localip" in /usr/local/etc/inc/interfaces.inc on line 1192
PHP Warning:  Undefined array key "gateway" in /usr/local/etc/inc/interfaces.inc on line 1196
2026-10-07 11:06:04 +02:00
Stephan de Wit 384bd74f60 reporting: unbound: capitalize DNSSEC status column header 2026-10-07 09:07:27 +02:00
Franco Fichtner 1177021c22 interfaces: backend call for interfaces_ppps_configure(); closes #9352 2026-10-06 15:29:45 +02:00
Stephan de Wit d7cc8e1c0f gateways: null is not going to be a UUID either
ErrorException: Using null as an array offset is deprecated, use an empty string instead in /usr/local/opnsense/mvc/app/controllers/OPNsense/Routing/Api/SettingsController.php:162
Stack trace:
2026-10-06 15:11:16 +02:00
Franco Fichtner dfc07590e9 interfaces: priv-sep script for interface apply the legacy way #9352 2026-10-06 14:57:48 +02:00
Franco Fichtner 530ee0cee0 interfaces: remove system_routing_configure() #9352
The function is called via $reload hook so adding another
hook makes no sense.  This may have changed since the original
commit below and since we need to priv-sep these calls the
easiest way is to remove it.  ;)

See also: https://github.com/pfsense/pfsense/commit/8e11b23f541d
2026-10-06 14:35:31 +02:00
Franco Fichtner f76beb8ff0 system: $config is unused in core.inc 2026-10-06 14:23:30 +02:00
Franco Fichtner 1f96bd4f6f interfaces: move legacy apply to /var/lib/php/tmp for #9352 2026-10-06 14:20:03 +02:00
JorioandStephan de Wit c6318dfbbd reporting: unbound: add dnssec status column in details grid (#10940)
Fixes https://github.com/opnsense/core/issues/10704

---------

Co-authored-by: Stephan de Wit <[email protected]>
2026-10-06 13:36:26 +02:00
Franco Fichtner 6dcc04a243 firewall: less parenthesis for previous 2026-10-06 13:07:07 +02:00
Ad Schellevis d43a1c16d8 Firewall: Aliases - deny invalid port ranges, closes https://github.com/opnsense/core/issues/10954 2026-10-06 10:26:30 +02:00
Ad Schellevis 43dc040cfb VPN: OpenVPN: Instances - improve keepalive validation, mentioned in https://github.com/opnsense/core/pull/10174 2026-10-06 09:54:49 +02:00
Ad Schellevis 89a74ce83f VPN: OpenVPN: Instances - default keepalive to 10 60 in server mode and explain in the help text. closes https://github.com/opnsense/core/pull/10174 2026-10-06 09:42:38 +02:00
Franco Fichtner 1a9e4794a0 src: style sweep 2026-10-06 09:09:56 +02:00