pfSense

08/31/2021

06:03 PM Revision 0a70f90a: OpenVPN exit notify & inactive incompatibilities

* Ignore exit notify in problematic cases. Fixes #12102
* Ignore inactive seconds in problematic cases. Fixes #12219
... Jim Pingle

02:09 PM Revision 83314732: Cleanup and improve easyrule. Fixes #12151

Viktor Gurov

09:55 AM Revision e71b27cd: Restart OpenVPN instances on Host and URL type aliases change. Issue #2668

Viktor Gurov

08/30/2021

09:02 PM Revision 4b8d710c: OpenVPN Aliases support. Implements #2668

Viktor Gurov

07:39 PM Revision e7d8f036: Revert "Ticket #12235: pfSense-rc: Save pkg_set_version"

This reverts commit 340c9ab1d1eb1b959dc2292872866bca7e123665. Renato Botelho

07:19 PM Revision 340c9ab1: Ticket #12235: pfSense-rc: Save pkg_set_version

Instead of carry the old file pkg_set_version on pfSense-upgrade, which
is not rebuilt when we change product version... Renato Botelho

06:19 PM Revision 336103c4: Consider GWG in ipsec_force_reload. Fixes #12315

Jim Pingle

02:50 PM Revision 0f2df9bb: Move help redirects to server. Implements #12314

Redirect mappings are already in place on the docs web server. Jim Pingle

08/27/2021

09:53 PM Revision 1394773d: Rename a few missing Netgate devices.

Super Micro XG-1537 -> Super Micro 1537
Super Micro XG-1541 -> Super Micro 1541 Luiz Souza

12:49 PM Revision 2c393b55: Add null check. Fixes #9092

If the value is undefined in config.xml this will be null, not an empty
string. Jim Pingle

08/26/2021

03:38 PM Revision 0ef2ff26: Fix a typo in the Netgate 5100 name.

Luiz Souza

03:21 PM Revision df945787: Rename the Netgate devices.

XG-15xx -> 15xx
SG-5100 -> Netgate-5100 Luiz Souza

01:03 PM Revision fe72327b: Revert "Clean up some messy HTML in the cert/ca display code. Prep for future MVC changes."

This reverts commit 8d4fcd7ac1167894136e337fc619e63fa7200fa0. Jim Pingle

08/24/2021

01:33 PM Revision 7628b091: Increase default RA intervals. Fixes #12280

Jim Pingle

01:24 PM Revision a1eef308: Increase default RA intervals. Fixes #12280

This code path was not included in the original diff. Jim Pingle

01:12 PM Revision 99dfecb7: radvd: Avoid empty AdvDNSSLLifetime (Fixes #12173)

Make sure $raadvdnsslifetime is defined on second foreach Renato Botelho

08/23/2021

08:53 PM Revision bc642d63: Log settings help text update. Implements #12012

* Improve notes about disk usage
* Add more calculations to estimate potential usage
* Improve notes about when to us... Jim Pingle

07:36 PM Revision dd8d9e23: Disable newsyslog compression w/ZFS. Issue #12011

ZFS compresses /var/log by default. If the ZFS dataset /var/log has
compression enabled on the first boot post instal... Jim Pingle

07:34 PM Revision cf5ee828: Update default config.xml empty tags. Fixes #12299

Reduces the difference between the stock config.xml and what is
written after initial changes are made to the config ... Jim Pingle

07:34 PM Revision 6fab2f23: Update default config.xml. Issue #12299

* Update configuration revision value
* Use new default password hash format Jim Pingle

04:20 PM Revision 41a43f7a: Add missing quotes

Renato Botelho

04:19 PM Revision 062a7598: Replace - by _ on repository path

Renato Botelho

03:18 PM Revision b06e79a6: Followup e324755bee, combine sed and add g flag

Renato Botelho

03:10 PM Revision e324755b: poudriere upstream is not supporting dashes in ports tree names.

This is to prevent issues with sets, so we need to respect the change
https://github.com/freebsd/poudriere/issues/897 Brad Davis

01:52 PM Revision 953aba88: Don't wait on manual IPsec actions. Fixes #12298

Use a timeout with swanctl --initiate, and use --force for swanctl
--terminate. This will allow the commands to succe... Jim Pingle

08/20/2021

04:06 PM Revision 583062bf: IPv6 fix for setdefaultgateway(). Issue #12282

Viktor Gurov

02:11 PM Revision 3ff300c6: Change /var/run to tmpfs. Implements #12145

Jim Pingle

02:01 PM Revision f873a4ef: Update IPsec Filter Mode text. Implements #12289

VTI mode also works for transport mode (e.g. GRE), so note that as well. Jim Pingle

05:20 AM Revision 762d3cc9: Increase default IPv6 router advertisement (RA) intervals and lifetime. Fixes #12280

Viktor Gurov

08/19/2021

06:59 PM Revision d566427f: Convert RAM disks to tmpfs. Implements #12145

Jim Pingle

05:14 AM Revision 923399be: Allow to use nested URL alias in URL alias. Fixes #11863

Viktor Gurov

05:05 AM Revision 21088d3f: Port Forward None and Pass associated filter rule copy. Fixes #12272

Viktor Gurov

05:01 AM Revision 653529c3: Do not allow to select PPPoE Server interfaces on the DHCPv6 Server page. Fixes #12277

Viktor Gurov

08/18/2021

08:11 PM Revision cf757a80: Regex cleanup should also kill {}. Fixes #12257

It's not used often (and less in the GUI) and can be a source of
problems with large numbers of repetitions even outs... Jim Pingle

04:17 PM Revision aed495bd: Merge remote-tracking branch 'origin/fix/12279'

Jim Pingle

04:12 PM Revision a38556ff: Use SHA512 to hash user password. Implements #10298

Original commit by Viktor Gurov Jim Pingle

02:44 PM Revision c9285e9f: Fixes #12279

Christian McDonald

01:58 PM Revision 7be7d84e: Ensure Unbound python script exists. Fixes #12274

Check to make sure a referenced python script exsits before attempting
to use it in the Unbound configuration. If the... Jim Pingle

08/17/2021

08:12 PM Revision 4174a828: Fixed #12247 by adding curl_close() call

Steve Beaver

03:29 PM Revision 14b8b150: Add incorrectly generated package rules to status_output. Implements #12269

Viktor Gurov

01:12 PM Revision bca881c4: Correct grep usage where needed. Fixes #12265

Jim Pingle

01:11 PM Revision 8cd3f92f: Regex cleanup change. Fixes #12257

Rather than attempting to cleanup group repetition, just discard the
unwanted pattern. Jim Pingle

12:26 PM Revision e3732f92: Replace unlink() by unlink_if_exists()

Renato Botelho

06:10 AM Revision 136c1462: System Information widget optimization. Issue #12241

Viktor Gurov

06:07 AM Revision 3a0f6f36: Move IPsec Mobile additional configuration attributes to strongswan.conf. Fixes #11447

Viktor G

06:05 AM Revision 4f04c78e: Fix IPsec PH1 with Remote Gateway 0.0.0.0 rules creation. Issue #12262

Viktor Gurov

06:05 AM Revision d57eab57: VLAN/QinQ-only interface mismatch detection. Fixes #12170

Viktor G

08/16/2021

05:42 PM Revision 57a737f1: More route display changes. Fixes #12257

* Move escape_filter_regex() from syslog.inc to util.inc since it will
be used by things other than syslog.
* Add s... Jim Pingle

08/14/2021

05:33 AM Revision c5bda432: Do not delete disabled routes. Fixes #10706

Viktor G

05:33 AM Revision 2e6b2841: Prevent deletion of OpenVPN instances with assigned interfaces. Fixes #12224

Viktor Gurov

05:33 AM Revision 6514012d: Reconfigure stacked IP Aliases on parent CARP VIP changes. Fixes #12227

Viktor Gurov

08/13/2021

05:46 PM Revision 72ea2b69: Change route collection and output. Fixes #12257

All changes are on src/usr/local/www/diag_routes.php
* Change problematic use of sed for an equivalent and safer use... Jim Pingle

01:15 PM Revision ffa913ec: Sanitize WireGuard keys from status_output. Fixes #12256

Viktor Gurov

12:49 PM Revision 0997d828: Display Gateway IPv6 on status_interfaces.php regardless of Gateway IPv4 status. Fixes #12253

Viktor Gurov

12:49 PM Revision 35de5b66: Show received IPv6 DNS servers on status_interfaces.php page. Fixes #12252

Viktor Gurov

12:49 PM Revision 37c677a1: Fix is_hostname() regression. Issue #12245

Viktor Gurov

11:40 AM Revision e7cac368: Properly remove the old VHID on XMLRPC CARP VIP sync. Fixes #12202

Viktor Gurov

11:30 AM Revision 58f744b7: OpenVPN Tunnel network input validation fix. Issue #11999

Viktor Gurov

08:35 AM Revision 36abc2ad: Update convert_friendly_interface_to_friendly_descr() to show IP Alias description. Fixes #11337

Viktor G

08:11 AM Revision d1d8383c: Use client-connect/client-disconnect script for Remote Access (SSL/TLS) server mode. Fixes #12238

Viktor Gurov

08:11 AM Revision 5ed5f14d: Set $retries=10 in resolve_retry() to improve resolution timeout. Fixes #12196

Viktor G

08:10 AM Revision 0f441291: 1:1 NAT rules creation update. Fixes #12168

* Fix 1:1 NAT rule creation when Any is selected for Internal IP
* Fix 1:1 NAT rule creation when Any is selected for... Viktor G

05:46 AM Revision c7599055: Parse ARM 32/64 network boot options on Static DHCP Mapping page. Fixes #12216

Viktor Gurov

05:45 AM Revision 126f555e: Do not create disabled IPsec VTI interfaces. Fixes #12212

Viktor G

05:44 AM Revision fdb9dcc9: Fix disabling IPsec PH1 with PH2 VTI on vpn_ipsec_phase1.php page. Issue #12198

Viktor G

05:43 AM Revision 4192ee44: Show all alias references on delete attempt. Fixes #12177

Viktor G

05:38 AM Revision 96270d7c: Router Advertisements fixes. Issue #12173

* Set AdvDNSSLLifetime value to 3*MaxRtrAdvInterval per RFC 8106
* Provide DNS configuration via radvd checkbox fix Viktor G

05:37 AM Revision d1150a0c: Write CRL files only if certificate authentication is used in IPsec. Fixes #12195

Viktor G

08/11/2021

06:24 PM Revision fa13ece8: Fixed missing $ warning

Steve Beaver

05:32 AM Revision 013cbaaa: Hide pcscd service from the service list if IPsec PKCS11 support is disabled. Todo #11933

Viktor G

05:26 AM Revision 1d7ae980: NTP Server SHA256 authentification support. Implements #12213

Viktor G

05:26 AM Revision 1c334904: Delete OpenVPN related config files for disabled instance. Fixes #12223

Viktor G

05:25 AM Revision 253d6509: Fix ProxyARP/Other VIP network address expansion on Port Forward rules. Issue #12233

Viktor Gurov

05:24 AM Revision 883ea6ab: Increment local port and clear tunnel networks value when restarting the OpenVPN wizard. Fixes #12172

Viktor Gurov

05:18 AM Revision cf40cd17: Support for UEFI HTTP Boot option in DHCP config. Implements #11659

Viktor G

05:16 AM Revision 647cf03a: Wireless Channel/Width Issues fix. Issue #12234

Viktor Gurov

05:09 AM Revision 27bbf370: Do not show Gateway duplicates option for IPsec Mobile. Fixes #12197

Viktor G

05:08 AM Revision 1fe2aa3e: Hide console output on system backup restore. Fixes #11909

Viktor G

05:08 AM Revision e6407b22: Group copy button. Implements #12226

Viktor Gurov

05:07 AM Revision 5db7152e: Do not show help text under each IPsec bypass rules entry. Fixes #12236

Viktor Gurov

05:05 AM Revision f4738ad4: OpenVPN Wizard ncp_enable value fix. Issue #12172

Viktor G

08/10/2021

07:56 PM Revision d0c3ee6a: Snort: Enable COREDUMPS option

(cherry picked from commit 4e7641271c27cf394e6e2bea278098ed6f0e22b7) Renato Botelho

07:56 PM Revision 4e764127: Snort: Enable COREDUMPS option

Renato Botelho

06:37 PM Revision 8d4fcd7a: Clean up some messy HTML in the cert/ca display code. Prep for future MVC changes.

Steve Beaver

04:51 PM Revision c7839f15: Wireless EAP client option fix. Issue #12239

Viktor Gurov

02:01 PM Revision d91c2317: Merge pull request #4535 from luftegrof/bug12174

Renato Botelho

02:00 PM Revision a6296852: Merge pull request #4512 from jvandervyver/master

Renato Botelho

02:00 PM Revision 7f0ad465: Merge pull request #4530 from Alexilmarranen/master

Renato Botelho

02:00 PM Revision 07fbed96: Merge pull request #4534 from Uglymotha/master

Renato Botelho

02:00 PM Revision 16ff593a: Merge pull request #4533 from seyfidin/patch-1

Renato Botelho

08/09/2021

07:12 PM Revision ffcf19c6: Register current pkg_set_version

On pfSense-base post-install script, register current pkg_set_version as
the same of /etc/version Renato Botelho

07:12 PM Revision 1d5cbd11: Set PFSENSE_PKG_SET_VERSION to PRODUCT_VERSION

This is going to be used by pfSense-upgrade port to set pkg_set_version
based on PRODUCT_VERSION Renato Botelho

07:12 PM Revision 6bfe7f67: Allow %%PRODUCT_VERSION%% to be used on make.conf

Renato Botelho

02:15 PM Revision 6c3bfb73: OpenVPN status f/tap+empty tunnel net Fixes #12232

Jim Pingle

08/07/2021

02:41 PM Revision fbf4a07f: Correct syntax. Fixes #12229

Jim Pingle

08/06/2021

03:40 PM Revision 0d3747aa: Improve NTP serial port validation. Fixes #12191

Jim Pingle

08/05/2021

10:05 PM Revision 868c1a67: Init [''system']['acb']

Steve Beaver

06:03 PM Revision 3f818d8a: OpenVPN GUI field adjustments. Implements #12218

* Move description to the top of the page
* For clients and servers, show the ID and corresponding interface name
* S... Jim Pingle

03:45 PM Revision a7705968: IPsec Keep Alive corrections. Fixes #12169

* Checked CARP VIP status if used by P1, if VIP is in BACKUP or INIT
state, it does not attempt to initiate.
* Disabl... Jim Pingle

08/04/2021

09:15 PM Revision 6bdf2d74: Increase the number of logs we are keeping

Brad Davis

08:41 PM Revision 65fc53d1: Remove a trailing \r that prevents s3 rm from working

Brad Davis

07:42 PM Revision 0ef74a74: missing space in function parameters

lufte grof

07:25 PM Revision a70d6132: Use the cached gateways_status in gateway_info_popup() call

lufte grof

07:13 PM Revision f8993f22: Inline presentation instead of print/echo in PHP

lufte grof

05:29 PM Revision dafe25ea: Ensure ACB config section exists

Steve Beaver

05:25 PM Revision 1dd1832f: Install ACB cron job on upgrade

Steve Beaver

05:10 PM Revision b7ab1742: Set the output format to avoid \r on line endings preventing log files from being deleted

Brad Davis

08/03/2021

05:23 PM Revision e4a2bd9b: Fix selector

Steve Beaver

05:12 PM Revision 5ae46c60: Completes #12193. Ready for testing. Revert only this commit to go back to old ACB system.

Steve Beaver

03:20 PM Revision 90574ebd: Delete unsupported backups

Steve Beaver

03:18 PM Revision 0a74e0dd: Prototype cron script to upload ACB backups per #12193

Steve Beaver

03:16 PM Revision 28cb1a27: Fix OpenVPN CA/CRL cleanup. Fixes #12192

Jim Pingle

02:34 PM Revision 4e24b1fb: Validate gpsport. Fixes #12191

(cherry picked from commit bf21f67bbe2d1694ad1ad72728623dded9ace426) Jim Pingle

02:33 PM Revision bf21f67b: Validate gpsport. Fixes #12191

Jim Pingle

08/02/2021

11:04 PM Revision 85ea410d: Bug #12174 - rename gw_table to gw_info

lufte grof

10:58 PM Revision c79b9cfe: Bug #12174 - cache results from gateway_info_popup function

lufte grof

07:53 PM Revision 021ffa03: IPsec identifier type updates. Implements #12044

Correct names to reflect what the actual types are (e.g. Distinguished
name is really FQDN)
Add an explicit "auto" t... Jim Pingle

06:32 PM Revision a3d2c861: Add P2 Keep Alive function. Implements #12169

Works for VTI and Tunnel mode. Checks every 5 minutes if the P2 is connected and
initiates if it doesn't.
Since a fa... Jim Pingle

04:54 PM Revision cbd2aad1: Fix IPsec buttons for Connecting. Fixes #12189

Status page was showing a connect button for tunnels which were already
connecting. It now shows a disconnect button ... Jim Pingle

02:42 PM Revision dd4ea276: Fix title length

ilmarranen alex

12:04 PM Revision b751eaa9: Fix double encoding. Fixes #12186

The values in these arrays are already encoded, no need to do it again. Jim Pingle