pfSense

Add support for multiple DHCP pools within the interface's subnet, and allow most of the settings for the main range to be set specific inside the pool. (e.g. it allows setting different gateways and DNS for different pools). Still needs improved input validation to prevent overlapping ranges/pools.

add <radnsservers> to the list of things that are arrays

for ticket #2361

allow null to be passed as 2nd arg to parse_config_xml*

in which case entire config is returned

fix 'XML error: no Array object found!' errors

Merge branch 'master' into inc

Conflicts:
etc/inc/captiveportal.inc
etc/inc/config.console.inc
etc/inc/config.lib.inc
etc/inc/easyrule.inc
etc/inc/filter.inc
etc/inc/ipsec.inc
etc/inc/pkg-utils.inc
etc/inc/shaper.inc...

Make allowedhostname an array.

Add the npt tag which is used by the IPv6 tree to the 2.0 mainline tree.
This prevents a config blowup when a ipv6 config loads on 2.0.

Also CDATA protect the detail field. Fixes #1168

Merge remote branch 'mainline/master' into inc

Conflicts:
etc/inc/auth.inc
etc/inc/config.lib.inc
etc/inc/filter.inc
etc/inc/gwlb.inc
etc/inc/interfaces.inc
etc/inc/pfsense-utils.inc
etc/inc/pkg-utils.inc...

Print file name when logging an xml error.

Check for pfsense root object name in config.xml as a fallback if the configured name is not found.

Remove trailing carriage return

Fix quotes to use %N$X on gettext calls

Merge remote branch 'mainline/master' into inc

Conflicts:
etc/inc/filter.inc
etc/inc/pkg-utils.inc
etc/inc/service-utils.inc
etc/inc/system.inc
etc/inc/vpn.inc

Make possible to run multiple instances of pppoe server. Not yet switched to mpd4.

Fix gettext calls with printf to permit change strings order

Merge remote branch 'mainline/master' into inc

Conflicts:
etc/inc/captiveportal.inc

Add crl as a listtag

Implement gettext() calls on xmlparse.inc

Do not call die while parsing package xml files. Instead return an empty array. This should avoid packages not uninstalling.

Remove trailing newline

Adding build_port_path

Separate regdomain.xml parsing back to a separate file, so it can be used when xmlreader.inc is used instead of xmlparse.inc

Ticket #612. Correctly show the number of users as 0 on a group with no users. Also handle the case of empty arrays on the xmlparser.

Do not aritificially add spaces around values on CDATA fields. Tested-by: Jim

Encode/decode special characters with htmlentities/html_entity_decode combo to make the parser not bail on special characters.

Make list the same. Remove whitespace at the end so it does not get interpreted as special tag.

Fix parsign of packages xml.

Ticket #434. Do not die when parsing config since we know how to recover. Only die during packages.

Restore attribute support, but with some extra checks in the function that uses it.

Needs a little more testing; revert attribute support in xmlparse.inc for now.

This reverts commit 2843a3ec5d4a160646e496f3922266415151902a.

Add optional support for reading attributes to xmlparse.inc and move regdomain.xml parsing from regdomain.inc to xmlparse.inc.

Add skip white space. To avoid erroring out on accidental blank space.

Merge commit 'mainline/master'

Prevent empty tags of creating <tag></tag> entries but instead just create them as <tag/> to be consistent. This fixes some empty arrays problems on the code.

Add page for configuration of wireless clone interfaces.

Adding newer xmlreader code to it's own file so that it can be turned and off until remaining bugs are fixed

Add pfSense_BUILDER_BINARIES: and pfSense_MODULE: additions

Seems we need even CDATA handling since it is used through packages.

If it is supposed to be an array then make sure it has the array type. This fixes wireless configuration problems at least.

Test if we actually succeeded in opening the requested xml file and log an error in bad cases to avoid strange errors.

Micro speedup improvements on the parser.

Change the parser to xmlreader instead of the current parser. This brings speed improvements and reduces some of the errors of the previous parser.

Revert "Rename cvssync to gitsync"

This reverts commit 62b035ce5f41c8342f0eea0b78e5878ff467e525.

Rename cvssync to gitsync

Port voucher login ability on CaptivePortal from M0n0Wall.

Various locking fixes are done with the import and this means that as of now pfSense has a better performin/behaving CP than m0n0wall.

Bring in support for QinQ. At this time it is limited to only 2 levels.

• Introduce interface groups. For now they are availble only on Firewall:Rules section maybe it would be usable to have tham on nat too.
• Some fixes and cleanup.

Add GIT array type rrddatafile

Unbreak igmpproxy by making known to the parser that we have IGMP too now.

This patch adds the initial support for layer7 protocol inspection gui.

Make it possible for pakages to insert additional tabbed pages into an
existing tab group. This requires that each page in the tab group call
add_package_tabs() with the tab group name before display_top_tabs() so
pages can be inserted. While far from optimal, this system is really a...

Correct a typo that could cause problems for openvpn if a client specific
override existed. A space was omitted in the listtags array which was
causing the openvpn-csc tag to be merged with the following field.

Bring in relay options for inbound load balancer
More work pending, this seems to generate proper configs
needs much more testing though

Rework most of the OpenVPN support. The interfaces have been updated to
not use the pkg system and the configuration has been migrated to an
openvpn prefix. The centralized user and certificate manager is now used
to support the openvpn configurations. Most of the files removed in this...

Implement a certificate authority and certificate webui that can be used
to centrally manage this data. There are no consumers at this time. This
interface allow for the following ...

Certificate Authority Manager:
- List certificates authorities
- Import existing certificate authority...

Rename the bridge knob to bridged so that the upgrade code works correctly and we play by the rules of the parser.

• The ability to create your own monitors (tcp, http, https, send/expect)
• A new way of displaying 'standard tables' - MainTable class
• monitor_type array type

Add an interface to manage external authentication servers. The two types
supported currently are LDAP and Radius.

knob for lagg.

Teach parser about bridge knob.

Rewrite portions of the user manager to ensure data is properly synced to
the system password and group databases. This is to provide better support
for centralized user management when local account administration is
preferred.

I also took this opportunity to do some housekeeping. A lot of funtions...

Add the new knobs to the parser

• Merge multiple PPPoE/PPTP interfaces from RELENG_1_MULTI_ANYTHING
• Much improved rule generation speed
• Many bug fixing in general of the interface handling

NOTE: this is only half part of the changes the other half will come after

Overhaul IPsec related code. Shared functions have been consolidated into
a new file named /etc/ipsec.inc. Tunnel definitions have been split into
phase1 and phase2. This allows any number of phase2 definitions to be
created for a single phase1 definition. Several facets of configuration...

Don't forget that gateway_group is also a array

Add missing ppp array item.

Add prelimenary Routing page.
Allow multiple gateways on one (static) interface

Improve the load balancing pool edit screen.

Submitted-by: Chris Daniel

Remove trailing space / cr

Add NTP server field to dhcp config.
From: Alexander Schaber

Widget base. Note: changes to widgets are not saved yet.

When we iterate through the backup cache we call out to parse the configuration file.

This can be fatal if the xml contents is corrupted and the process will die out. Instead of dieing, return -1 and let the process continue since we have further logic to detect these issues and restore a previous configuration, etc.

Kill trailing space

s/timepart/timerange

Since we already have a "time" field convert the time day "time" to "timepart"

Make <time> an array so it can appear multiple times

Back out last commit, we are going to use <schedule>

Allow multiple timeday entries (set as an array)

Firewall Schedule GUI! ... and there was much rejoicing.

Allow priv to appear multiple times so that a person can downgrade from the pile of SHIT we call -HEAD.

MFC 13823
freenas package makes disk and mount arrays

This one adds support for custom array types for the functions dump_xml_config* .

Submitted-by: DanielS

Allow packages to define array variables.

Submitted-by: DanielH

Add group to the array field so that importing recent m0n0wall configurations do not go boom.

Add pages to the array field so that importing recent m0n0wall configurations do not go boom.

MFC 9544

Add elements to the array types

Ticket #793

Remove trailing newline

Back out yesterdays changes

Add depends_on_package to arrays

Add depends_on_package to arrays list

Add aliasurl to array list. This will prevent developers working on head from preventing their firewall from booting when testing RELENG_1

If a value is marked as "false" simply do not write its contents out.

This will fix 71 occurances of true : false in the code w/o having
to touch each case. And frankly, a item should not be in the xml
unless its set.

Add back pipe array item. We will need this when users upgrade from m0n0wall to avoid getting a PIPE is not a array error

Treat earlyshellcmd as an xml array

• Add interface_array to config.xml array list
• Clarify comment that this list is a array list

Ooops...need a space there

Add <file> listtag.

Move pool -> lbpool