- 30 Jul, 2015 11 commits
-
-
Ad Schellevis authored
(proxy) add transparant proxy option to squid including a template for the firewall_nat rules to forward traffic to it
-
Ad Schellevis authored
-
Ad Schellevis authored
-
Ad Schellevis authored
-
Ad Schellevis authored
(legacy/ldap) allow local users to be created with random password, solves errors in log when linking groups and leaves the possibility open to allow shell login using ldap in a later stage (currently not supported)
-
Ad Schellevis authored
for example, if squid needs some directories to exists before initial run after boot, it could set this in /etc/rc.d.conf/squid squid_opnsense_bootup_run="/usr/local/opnsense/scripts/proxy/setup.sh" which effectively results in setup.sh being started followed by the normal service squid start disadvantage of this, both the service template and the rc system needed to be aware of the setup. advantage, all services which don't need special preperation are configured as they would be on normal FreeBSD
-
Franco Fichtner authored
-
Franco Fichtner authored
`block quick' creates a chain-reaction that requires `pass quick' for loopback traffic, even though we have non-quick loopback pass rules below. If `quick' ought to be used, non-quick should be removed completely, but that is beyond the scope of this fix. For now, rather pass all IPv6 traffic on the looback device as opposed to passing all IPv6 traffic with an IPv6 loopback address.
-
Franco Fichtner authored
While blocking IPv6 in this case is a good start, loopback traffic from internal to internal should never be blocked as some deamons like squid use it to probe and/or communicate.
-
Franco Fichtner authored
-
Franco Fichtner authored
-
- 29 Jul, 2015 29 commits
-
-
Franco Fichtner authored
-
Franco Fichtner authored
-
Franco Fichtner authored
-
Franco Fichtner authored
-
Franco Fichtner authored
add fr_FR.po
-
gitmod authored
-
Franco Fichtner authored
-
Franco Fichtner authored
o Makes live-mounting easier as the package config samples won't be clobbered anymore. o Automatically picks up ".in" files, runs replace and moves them to their permanent location. o Refactored src directory install while at it.
-
Ad Schellevis authored
minor LDAP fixes
-
Ad Schellevis authored
-
chrisch1974 authored
-
chrisch1974 authored
ldap: add describtion (full name) during import of a user
-
Ad Schellevis authored
(proxy) add option to ignore subnets from getting into the access log (https://github.com/opnsense/core/issues/287)
-
chrisch1974 authored
-
-
Ad Schellevis authored
-
Franco Fichtner authored
-
Franco Fichtner authored
-
Franco Fichtner authored
-
Franco Fichtner authored
As an added benefit, (default) will now always revert back to the actual default from the sample configuration, which is exactly how it should be.
-
Franco Fichtner authored
-
Franco Fichtner authored
-
Franco Fichtner authored
-
Ad Schellevis authored
-
Ad Schellevis authored
-
Ad Schellevis authored
(ids) add some documentation and reload general settings after download (to show cron after initial download)
-
Ad Schellevis authored
-
chrisch1974 authored
-
chrisch1974 authored
-