pfSense

Move firmware update text format to globals.inc

• Convert schedules to pf(4).
  This allows to schedule the whole feature of the rules like queues/limiters/gateways/blocks/allows/etc...
• Whitespace cleaning on filter.inc
• Move schedule backend logic from pfsense-utils.inc to filter.inc and prefix with filter_....

Add hideplatform directive useful for rebranding

Modify IPsec code to allow for transport mode. All existing configurations are
marked as tunnel for backwards compatibility. There are problems with the spd
read code which Will likely choke on transport entries. We can fix this later.

Modify captive portal to use centralized user management. The user manager has
been modified to include an account expiration option to support this service.

Correct the configuration file IPsec certificate upgrade process.

Remove all global decalarations regarding pptp/pppoe/l2tp they are no more needed.

L2TP improvements.

fix fend URL

Unbreak package management URL!

Pointyhat-to: ?

Add lagg(4) to the list of drivers supporting vlan!

catch up to RELENG_1_2

Format has changed for quality, traffic and packets. Remove these files. They will be recreated

Latest version is 5.4, not 5.3.

Show correct password (it's caps sensitive)

Add factory_shipped_username

Add factory_shipped_password

Add services_dhcp_server_enable which allows the DHCP server to be turned
off easily.

Latest config is 5.3

Modify all the default configuration files to ensure the versions match.
While in globals.inc, remove the easyrsa path and do some whitespace
cleanup.

Add rum wireless interface that is supported now in 7.x

http://forum.pfsense.org/index.php/topic,10581.0.html

Rework most of the OpenVPN support. The interfaces have been updated to
not use the pkg system and the configuration has been migrated to an
openvpn prefix. The centralized user and certificate manager is now used
to support the openvpn configurations. Most of the files removed in this...

Update latest config!

Rewrite the pfsense privilege system with the following goals in mind ...

1) Redefine page privileges to not use static urls
2) Accurate generation of privilege definitions from source
3) Merging the user and group privileges into a single set
4) Allow any privilege to be added to users or groups w/ inheritance...

Update list of hardware that supports vlan natively.

Rewrite portions of the user manager to ensure data is properly synced to
the system password and group databases. This is to provide better support
for centralized user management when local account administration is
preferred.

I also took this opportunity to do some housekeeping. A lot of funtions...

• Merge multiple PPPoE/PPTP interfaces from RELENG_1_MULTI_ANYTHING
• Much improved rule generation speed
• Many bug fixing in general of the interface handling

NOTE: this is only half part of the changes the other half will come after

Overhaul IPsec related code. Shared functions have been consolidated into
a new file named /etc/ipsec.inc. Tunnel definitions have been split into
phase1 and phase2. This allows any number of phase2 definitions to be
created for a single phase1 definition. Several facets of configuration...

Bring in relayd to perform server load balancing
Move gateway load balancing code into gwlb.inc - still uses slbd

TODO: vs and pool status screens are currently broken...and wouldn't work
with the gateway pools anyway, ultimately, the gateway pools need...

Latest configuration version is 4.5, not 4.4.

Add manifests option (Default Auto Update URLS)

Just because elvis is dead, does not mean our auto updating system
needs to be. Bring it back from the dead and make it match the
new world order. Add a custom URL firmware update page which will
have snapshot support shortly.

Add vge to vlan supported nics. Verified by darkx via irc.

Move easyrsapath to globals

Bump config version to 4.4

Bump version to 4.2

Changing minimum number of interfaces to 1 while we're working on the single interface code. cvssync overwriting my change is driving me nuts. :)

We can discuss at a later date, closer to a release version, whether we want this to be 1 or 2.

Single interface support...

Unbreak packages.

s/WAN/wan/

Define the WAN interface name.

• Move minimum nic requirement information to globals.inc
• Move minimum ram requirement information to globals.inc

add vr(4) VLAN support

Ticket #1561

Use list of VLAN long frame and native capable interfaces from globals.inc, and remove duplicate (and incomplete) list in interfaces.inc. Update list in globals.inc.

Transfer (C) of pfSense to BSD Perimeter LLC.

Add product_copyright re-branding support
Add product_copyright_years re-branding support
Add product_website re-branding support
Add product_email re-branding support

Work sponsored-by: Centipede Networks

Bump global config version to 4.1 for releng_1

Remove trailing space / cr

Upgrade to config.xml sysctl's. Bump configuration version to 3.1.

Backport usermanager code from HEAD so I can get it in the snaps and
start testing it properly
There's still some CSS/HTML fixes needed but the code seems to work

Kill trailing space

• Bump config version to 2.8
• Automatically install a IPSEC pass rule for unsuspecting users

Bump configuration version to 2.8

• bump config version. latest version is 2.6

PF doesn't know what "congestion" TOS flag is

• Move lighty upload to a definable globals.inc value upload_path
• Use new upload_path for firmware updates

This in combination with 128 megabyte embedded images should fix the dreaded upgrade problem for the embedded platform.

We're in 2006 now, toto

MFC
Shaper fixes from BillM

Don't hard code dhcpd path

Backout last commit, it was already present.

Don't duplicate path.

Add element paths

Ticket #818

Move gui globals to guiconfig.inc

OpenVPN cleanups by mposch@gmail.com

Add vlan_native_supp and vlan_long_frame

Add captive portal element goo

Treat NDIS drivers as wireless cards

Add awi and wlan

Doh' ! an already exists. remove 2nd.

Remove trailing space

Add device an (Aironet)

Add iwi as a supported wireless interface

Move gateway to interfaces->wan

Shaper config moved
config file version bump

1.10 -> 2.0

config fix for those bit by bug #393
This will remove all empty (or otherwise bogus) <tunnel> entries from the config file

Bump config version to 1.9

Remove trailing spaec

• Add ral, ural and wai wireless interfaces
• Add PPPoE server information globals

move IP TOS and TCP FLAGS to globals.inc now that filter_reconfigure
might be run outside of the gui

Merge in virtual IP code
This changeset does the following:
merges proxy arp and carp setup menus
removes proxy arp menu from left side
upgrades config file from 1.7 to 1.8
moves existing carp virtual IP and proxy arp config to new <virtualip> tag...

remove trailing space

Upon updating from configuration version 1.6 -> 1.7, whipe the traffic shaper configuration to avoid loading the old non supported configuration.

Ticket #216

ok: billm

• Remove unneeded globals.
• versioncheck -> xmlrpc

Note that these values can be overriden in config.xml

Add wireless_regex

We're now using xmlrpc.php for version checking.

Remove unnecessary http:// from checkversion.

Add global variables for firmware version checking.

Add $Id$ tag

Mount read-write on bootup and read-only at end.

Dont forget the ,

Add embeddedbootupslice global variable

we're at config version 1.6, not 1.5

Add pkg_config_base_url and pkg_config_filename (needed for /usr/local/www/system_advanced.php, among other things).

Stub in changes that will allow for custom firmware URLs

Move default gateway out of wan config to system config (leave in gui though)
Remove scheduler config from interfaces
Bump config file version to 1.5

revert pptp server back to 16 addresses until we can deterimine why the out of resources (tuning) message appeared for Joerg.

Add pkg_config_location to globals.

Woops its /25

Bump PPTP clients up to 128. Oddly running at 64 still used less ram than on 4.X.

Bump PPTP vpn client count to 64 and the subnet to 26