diff --git a/net/turnserver/Makefile b/net/turnserver/Makefile
index dfe3b1ce6..9fbad5318 100644
--- a/net/turnserver/Makefile
+++ b/net/turnserver/Makefile
@@ -1,5 +1,5 @@
PLUGIN_NAME= turnserver
-PLUGIN_VERSION= 1.0
+PLUGIN_VERSION= 1.1
PLUGIN_COMMENT= The coturn STUN/TURN Server
PLUGIN_DEPENDS= turnserver
PLUGIN_MAINTAINER= opnsense@moov.de
diff --git a/net/turnserver/pkg-descr b/net/turnserver/pkg-descr
index f80121742..b33cc92cb 100644
--- a/net/turnserver/pkg-descr
+++ b/net/turnserver/pkg-descr
@@ -2,3 +2,19 @@ Coturn is a free open source implementation of TURN and STUN Server.
The TURN Server is a VoIP media traffic NAT traversal server and gateway.
WWW: https://github.com/coturn/coturn
+
+1.1
+
+Added:
+* add log page
+
+Changed:
+* hide protocol violating options
+* switch to local syslog logging
+
+Removed:
+* remove old log files
+
+1.0
+
+Initial release
diff --git a/net/turnserver/src/opnsense/mvc/app/controllers/OPNsense/Turnserver/forms/settings.xml b/net/turnserver/src/opnsense/mvc/app/controllers/OPNsense/Turnserver/forms/settings.xml
index 37f6633cb..f16808f18 100644
--- a/net/turnserver/src/opnsense/mvc/app/controllers/OPNsense/Turnserver/forms/settings.xml
+++ b/net/turnserver/src/opnsense/mvc/app/controllers/OPNsense/Turnserver/forms/settings.xml
@@ -116,12 +116,14 @@
turnserver.settings.ChannelLifetimetext
- The lifetime for the channel (in seconds). Default value is 600 secs (10 minutes).
+ The lifetime for the channel in seconds. Default value is 600 seconds (10 minutes). Changing this value violates RFC 5766. Use with care.
+ trueturnserver.settings.PermissionLifetimetext
- The permission lifetime (in seconds). Default value is 300 secs (5 minutes).
+ The permission lifetime in seconds. Default value is 300 seconds (5 minutes). Changing this value violates RFC 5766. Use with care.
+ true
diff --git a/net/turnserver/src/opnsense/mvc/app/models/OPNsense/Turnserver/ACL/ACL.xml b/net/turnserver/src/opnsense/mvc/app/models/OPNsense/Turnserver/ACL/ACL.xml
index dfc800ea5..4e4cb549a 100644
--- a/net/turnserver/src/opnsense/mvc/app/models/OPNsense/Turnserver/ACL/ACL.xml
+++ b/net/turnserver/src/opnsense/mvc/app/models/OPNsense/Turnserver/ACL/ACL.xml
@@ -4,6 +4,8 @@
ui/turnserverapi/turnserver/*
+ ui/diagnostics/log/core/turnserver/*
+ api/diagnostics/log/core/turnserver/*
diff --git a/net/turnserver/src/opnsense/mvc/app/models/OPNsense/Turnserver/Menu/Menu.xml b/net/turnserver/src/opnsense/mvc/app/models/OPNsense/Turnserver/Menu/Menu.xml
index 4134d75c2..a52806dd5 100644
--- a/net/turnserver/src/opnsense/mvc/app/models/OPNsense/Turnserver/Menu/Menu.xml
+++ b/net/turnserver/src/opnsense/mvc/app/models/OPNsense/Turnserver/Menu/Menu.xml
@@ -1,5 +1,8 @@
diff --git a/net/turnserver/src/opnsense/scripts/OPNsense/Turnserver/export_certs.php b/net/turnserver/src/opnsense/scripts/OPNsense/Turnserver/export_certs.php
index 247d301fe..cbacca2b1 100755
--- a/net/turnserver/src/opnsense/scripts/OPNsense/Turnserver/export_certs.php
+++ b/net/turnserver/src/opnsense/scripts/OPNsense/Turnserver/export_certs.php
@@ -59,3 +59,12 @@ if (isset($configObj->OPNsense->turnserver->settings->TlsCertificate) and !empty
}
}
}
+
+# Purge obsolete log files.
+# TODO: Should be removed in plugin version 2.0.
+$log_files = glob('/var/log/turn_*.log');
+foreach ($log_files as $file) {
+ if (is_file($file)) {
+ unlink($file);
+ }
+}
diff --git a/net/turnserver/src/opnsense/service/templates/OPNsense/Syslog/local/turnserver.conf b/net/turnserver/src/opnsense/service/templates/OPNsense/Syslog/local/turnserver.conf
new file mode 100644
index 000000000..a1623cd38
--- /dev/null
+++ b/net/turnserver/src/opnsense/service/templates/OPNsense/Syslog/local/turnserver.conf
@@ -0,0 +1,6 @@
+###################################################################
+# Local syslog-ng configuration filter definition [turnserver].
+###################################################################
+filter f_local_turnserver {
+ program("turnserver");
+};
diff --git a/net/turnserver/src/opnsense/service/templates/OPNsense/Turnserver/turnserver.conf b/net/turnserver/src/opnsense/service/templates/OPNsense/Turnserver/turnserver.conf
index 67c96cbab..f5442f1d9 100644
--- a/net/turnserver/src/opnsense/service/templates/OPNsense/Turnserver/turnserver.conf
+++ b/net/turnserver/src/opnsense/service/templates/OPNsense/Turnserver/turnserver.conf
@@ -50,6 +50,7 @@ channel-lifetime={{ OPNsense.turnserver.settings.ChannelLifetime }}
permission-lifetime={{ OPNsense.turnserver.settings.PermissionLifetime }}
# Defaults
+log-file=syslog
no-cli
no-software-attribute
no-multicast-peers