pfSense

Add skip white space. To avoid erroring out on accidental blank space.

Merge commit 'mainline/master'

Prevent empty tags of creating <tag></tag> entries but instead just create them as <tag/> to be consistent. This fixes some empty arrays problems on the code.

Add page for configuration of wireless clone interfaces.

Adding newer xmlreader code to it's own file so that it can be turned and off until remaining bugs are fixed

Add pfSense_BUILDER_BINARIES: and pfSense_MODULE: additions

Seems we need even CDATA handling since it is used through packages.

If it is supposed to be an array then make sure it has the array type. This fixes wireless configuration problems at least.

Test if we actually succeeded in opening the requested xml file and log an error in bad cases to avoid strange errors.

Micro speedup improvements on the parser.

Change the parser to xmlreader instead of the current parser. This brings speed improvements and reduces some of the errors of the previous parser.

Revert "Rename cvssync to gitsync"

This reverts commit 62b035ce5f41c8342f0eea0b78e5878ff467e525.

Rename cvssync to gitsync

Port voucher login ability on CaptivePortal from M0n0Wall.

Various locking fixes are done with the import and this means that as of now pfSense has a better performin/behaving CP than m0n0wall.

Bring in support for QinQ. At this time it is limited to only 2 levels.

• Introduce interface groups. For now they are availble only on Firewall:Rules section maybe it would be usable to have tham on nat too.
• Some fixes and cleanup.

Add GIT array type rrddatafile

Unbreak igmpproxy by making known to the parser that we have IGMP too now.

This patch adds the initial support for layer7 protocol inspection gui.

Make it possible for pakages to insert additional tabbed pages into an
existing tab group. This requires that each page in the tab group call
add_package_tabs() with the tab group name before display_top_tabs() so
pages can be inserted. While far from optimal, this system is really a...

Correct a typo that could cause problems for openvpn if a client specific
override existed. A space was omitted in the listtags array which was
causing the openvpn-csc tag to be merged with the following field.

Bring in relay options for inbound load balancer
More work pending, this seems to generate proper configs
needs much more testing though

Rework most of the OpenVPN support. The interfaces have been updated to
not use the pkg system and the configuration has been migrated to an
openvpn prefix. The centralized user and certificate manager is now used
to support the openvpn configurations. Most of the files removed in this...

Implement a certificate authority and certificate webui that can be used
to centrally manage this data. There are no consumers at this time. This
interface allow for the following ...

Certificate Authority Manager:
- List certificates authorities
- Import existing certificate authority...

Rename the bridge knob to bridged so that the upgrade code works correctly and we play by the rules of the parser.

• The ability to create your own monitors (tcp, http, https, send/expect)
• A new way of displaying 'standard tables' - MainTable class
• monitor_type array type

Add an interface to manage external authentication servers. The two types
supported currently are LDAP and Radius.

knob for lagg.

Teach parser about bridge knob.

Rewrite portions of the user manager to ensure data is properly synced to
the system password and group databases. This is to provide better support
for centralized user management when local account administration is
preferred.

I also took this opportunity to do some housekeeping. A lot of funtions...

Add the new knobs to the parser

• Merge multiple PPPoE/PPTP interfaces from RELENG_1_MULTI_ANYTHING
• Much improved rule generation speed
• Many bug fixing in general of the interface handling

NOTE: this is only half part of the changes the other half will come after

Overhaul IPsec related code. Shared functions have been consolidated into
a new file named /etc/ipsec.inc. Tunnel definitions have been split into
phase1 and phase2. This allows any number of phase2 definitions to be
created for a single phase1 definition. Several facets of configuration...

Don't forget that gateway_group is also a array

Add missing ppp array item.

Add prelimenary Routing page.
Allow multiple gateways on one (static) interface

Improve the load balancing pool edit screen.

Submitted-by: Chris Daniel

Remove trailing space / cr

Add NTP server field to dhcp config.
From: Alexander Schaber

Widget base. Note: changes to widgets are not saved yet.

When we iterate through the backup cache we call out to parse the configuration file.

This can be fatal if the xml contents is corrupted and the process will die out. Instead of dieing, return -1 and let the process continue since we have further logic to detect these issues and restore a previous configuration, etc.

Kill trailing space

s/timepart/timerange

Since we already have a "time" field convert the time day "time" to "timepart"

Make <time> an array so it can appear multiple times

Back out last commit, we are going to use <schedule>

Allow multiple timeday entries (set as an array)

Firewall Schedule GUI! ... and there was much rejoicing.

Allow priv to appear multiple times so that a person can downgrade from the pile of SHIT we call -HEAD.

MFC 13823
freenas package makes disk and mount arrays

This one adds support for custom array types for the functions dump_xml_config* .

Submitted-by: DanielS

Allow packages to define array variables.

Submitted-by: DanielH

Add group to the array field so that importing recent m0n0wall configurations do not go boom.

Add pages to the array field so that importing recent m0n0wall configurations do not go boom.

MFC 9544

Add elements to the array types

Ticket #793

Remove trailing newline

Back out yesterdays changes

Add depends_on_package to arrays

Add depends_on_package to arrays list

Add aliasurl to array list. This will prevent developers working on head from preventing their firewall from booting when testing RELENG_1

If a value is marked as "false" simply do not write its contents out.

This will fix 71 occurances of true : false in the code w/o having
to touch each case. And frankly, a item should not be in the xml
unless its set.

Add back pipe array item. We will need this when users upgrade from m0n0wall to avoid getting a PIPE is not a array error

Treat earlyshellcmd as an xml array

• Add interface_array to config.xml array list
• Clarify comment that this list is a array list

Ooops...need a space there

Add <file> listtag.

Move pool -> lbpool

Add virtual_server tag

Add load balancer tags

alphabetize listtags

Merge in virtual IP code
This changeset does the following:
merges proxy arp and carp setup menus
removes proxy arp menu from left side
upgrades config file from 1.7 to 1.8
moves existing carp virtual IP and proxy arp config to new <virtualip> tag...

remove trailing space

Add comments

Stop duplicating work - use listtags() and listtags_pkg() instead of creating the list
twice (once for xmlparse, once for xmldump).

pipe no longer exists and hasn't for some time

Treat cacert as a list when we write XML files as well

add cacert to xml array

Add dump_xml_config() and dump_xml_config_pkg() to handle both sets of listtags.

Whoops, don't forget to remove restore_listtags.

• Move the old parse_xml_config() function to parse_xml_config_raw(). This function no longer sets its own listtags.
• Add parse_xml_config() and parse_xml_config_pkg(), which both set the listtags to their proper values before parsing.

Add function to restore global listtags.

Initial commit of dnsmasq domain overrides

Submitted-to-m0n0wall-dev-by: Joe Suhre

The patch adds the ability to make use of dnsmasq's --server=/domain/auth_server ARG in
order to force queries for domain to a specific dns server rather then
doing a full recursive query

Add needed lisstag for menu items.

$parsed -> $parsedcfg

reported-by: billm

Make xmlrpc.inc cleaner. This needs to be followed up by a cleanup and integration of xmlparse_pkg.inc.

Add $Id$ tag

Add lowthroughtput items to magic shaper

Add iptos support

add config which is needed by pfstat.xml

add row as an array item

• Add pkg.php which will parse the package xml file and present an interface (see http://www.pfsense.com/screens/pkg.JPG )
• Correct behavior of pkg_mgr.php when multiple packages are included
• Other minor cleanups

Add tem field as array xml markers

Initial revision