pfSense

Pad data when adding to refcount reference, to avoid some oddities with how php handles such data. http://forum.pfsense.org/index.php/topic,51188.msg278141.html#msg278141

Supress the error message if the ldap bind doesnt happen

99./8 is not private IP space

Add the new 100.64/10 nat 444 CGN/LSN shared transition space netblock here. Also add it as a private network in the private network block

Merge pull request #192 from phil-davis/master

Validate advanced gateway monitoring settings

Allow dom_title width parameter to be null

This prevents warning messages if called without the width parameter - reported in forum http://forum.pfsense.org/index.php/topic,51822.0.html
The code already handles width being NULL or blank, it just needs to be explicitly defaulted when the parameter is not passed at all.

Put apinger default values into a function

The default advanced apinger parameter values are now returned by function return_apinger_defaults. So they can easily be obtained by any code that cares.

Expand cipher list and remove a cipher that Safari on iOS does not like after recent lighttpd changes. Fixes #2553

Make sure that we process the logic statement correctly, otherwise we might accidentally end up missing dual stacked or tunneled interface gateways

Merge pull request #175 from marcelloc/master

pkg_edit - add show_disable_value option to select_source xml option

include check to avoid function_exist errors

Be more verbose during upgrade to see why nanobsd isn't carrying over the setting as expected.

Fix for this crash report, received after resetting a test system to factory defaults and setting up initila stuff:
i386
8.3-RELEASE-p3
FreeBSD 8.3-RELEASE-p3 #0: Sat Jul 7 21:34:19 EDT 2012 root@FreeBSD_8.3_pfSense_2.1.snaps.pfsense.org:/usr/obj./usr/pfSensesrc/src/sys/pfSense_wrap.8.i386...

Move locale files from /usr/share to /usr/local/share

Add an option to System > Advanced, misc tab to enable loading thermal modules (amdtemp, coretemp)

Fixup serial console settings that get applied to nanobsd. Fixes #2484

Fix system_routing_configure() function so it does not try to add static routes ipv6 subnets to ipv4 gateways or ipv4 subnets to ipv6 gateways while using aliases that includes both ipv4 and ipv6 subnets.

Fix Captive Portal SSL

Merge pull request #167 from ccesario/master

Change field name from lowloss to losslow fixes ticket #2537

Change field name from lowloss to losslow
related in http://redmine.pfsense.org/issues/2537

Merge pull request #165 from r-duran/master

Fix get_staticroutes() function to handle IPv6 subnets properly

Fix get_staticroutes() function to handle IPv6 subnets properly

Make sure one_pass i selected when CP is active

Remove ca reference

Implement certificate chain in Captive Portal

Use Certificate Manager in Captive Portal settings

Do not directly print out a message when checking the interfaces, instead saving the list to use later. Display this list before the interface mismatch message. Fixes #2468 and fixes #2531

Merge pull request #158 from ccesario/master

Change ereg_replace to preg_replace() and ereg() to preg_match() functions

Fix LDAP over IPv6 (works fine, just needed slight adjustment to URI)

Reconfigure OpenVPN on gateway change

Change ereg_replace to preg_replace() function

Change ereg_replace() to preg_replace() function

Change ereg() to preg_match() function

Change ereg() to preg_match() function

Change ereg() to preg_match() function

Change ereg() to preg_match() function

OpenVPN servers can start on carp vips, just not clients.

Comment out adding static routes for gateway monitor IPs because we now bind to the correct Interface with apinger.

If we only have a IPv6 interface we'll use that, otherwise a IPv4 address always has preference. Revisit this for OpenVPN 2.3

Fix: Warning: preg_match(): No ending delimiter '/' found in /etc/inc/gwlb.inc on line 696

Add a small function to notify via remote methods only (smtp/growl). Notify when a dyndns IP changes.

firewall_aliases.php include tabs(ip,port,url) , list aliases sorted, use dom_title funcion to show titles.

Check in code that allows for using a gateway group as the interface on the OpenVPN server page. Only allow IPv4 gateway groups for now. We'll need to add IPv6 suppport here later when we import OpenVPN 2.3.
Unbreak the gateway group function on broken configurations like a missing 3G stick....

Catch libraries from subdirectories of PBI lib dirs too

make sure this grep parameter is quoted

Setup library paths to include /usr/pbi/*/lib as a last resort to make sure things can find libraries. We may eventually replace this with a better method as this can lead to conflicts, but for now it will allow packages to find their proper libraries.

Do not try to start igmpproxy when there's no igmpentries configured.

Add missing global

Restore this code that was accidentally reverted

Make sure to skip "unexpected" RA messages from other interfaces, we don't want those.

Make sure that the limits are included in the normal ruleset, otherwise pf will use the defaults.

Remove null character at end of file

Fix trailing whitespace

A few launch improvements so that configuring the DHCP6 client on the WAN it immediately kicks in.
With the fixed rc.newwanipv6 it should immediately spring to life.
Redmine ticket #2414

Don't fall back to fetching PBIs from FreeBSD, they have none.

Support IPv6 aliases, the frontend already does. Removing does not work yet.
See ticket #2483

Brazilian Portuguese (pt_BR) translations added

Add radvd to Status:Services #2485

Make sure this check is reversed, that way we only pick up the legacy field if the new one isn't set.

Merge pull request #140 from marcelloc/master

fix missing match array on help pages permission

fix missing match on help pages permission

Generalize the Crypto hardware option and add GUI support for AES-NI.

fix permissions check to xml package files and show only menus user has access to

Put configured limits on rules.limits file and load them before loading the ruleset. To avoid any issues with large rulests and options being loaded not first

Fixes #2490. If there is a descr set on the interface keep it and do not disable the iface

Make mac_format aware of cpzone but also friendly to previous code!

Revert "Make mac_format aware of multiple Captiveportal instances"

This reverts commit 54df925b9ea447bdd10f88a886e2ef11d44c3059.

Revert "Make sure mac_format is always defined"

This reverts commit 56f9032170d3130c2066e5eebbe18b96398073ca.

Make sure mac_format is always defined

Merge pull request #137 from bcyrill/patch-4

Fix Captiveportal zone

Make mac_format aware of multiple Captiveportal instances

Update Captiveportal

Added Captiveportal to service status

Merge pull request #134 from bcyrill/patch-1

Removed unused maxproc parameter

Removed unused maxproc parameter

maxprocperip is defined per zone

Merge pull request #131 from marcelloc/master

fix jquery+domtt notices css on all themes

Needs a default case so IPv6 interfaces are resolved to a real interface

fix jquery+domtt notices css on all themes

add <radnsservers> to the list of things that are arrays

for ticket #2361

convert menu alerts/notices to jquery + domtt

Shorter version of the fix to always set the radvd interface.
Redmine ticket #2477

Make sure to fall through if this tag is not set.
Should fix redmine ticket #2477

Make sure we tag all 2.0 gateways as being IPv4, in 2.1 we require this tag to be present for the gateways.
This should prevent duplicate gateway entries for people coming from 2.0 that have dynamic interfaces

Add blackhole to Null routes
Redmine ticket #2471

fix: Call to undefined function error

fix: Call to undefined function ipsec_get_phase1_dst() in /etc/inc/filter.inc on line 3216

If radvd is already running, reload, otherwise start one.
Shut down when there are no prefixes to announce

fix for bug #2469 ("WAN -> LAN -> OPT10")

Add better protection for unknown rapriority

Make sure we still start on older configs where the setting is still called mode, and not ramode.
Add a failsafe for the rapriority

We need to define the default route here, not the advertised prefix.

Correct the syntax, the RemoveRoute needs to end up in route statement

Remove duplicate prefix line

Prevent radvd from telling the clients to remove the route to itself.

Do not send DeprecatePrefix messages for CARP announcements, it causes clients to purge the CARP default route.

Actually do not try to reload everything during bootup since it will be done by bootup code

Bye, bye olsrd back to packages.

Get rid of carpdev, it will never be

Catch up with multiple events sending. Also do not blindly startup check_reload_status check first

Only add openvpn acl script lines if it's a server mode that does user auth