pfSense

Fix the 2nd grow command, add space
Ticket #1758

Ok, let's try not to corrupt the RRD files on upgrade. Leave the RRA arc
hives for the 720 minutes average at 1000.
Then run a rrdtool resize command to grow the RRA by 1000 and 2000 for the 60 and 720 average respectively.
Attempts to further fix ticket #1758

Do not pass the ldap port separately, but add it to the LDAP URL. PHP's ldap_connect() ignores the passed port parameter if the first parameter is a URL instead of a hostname.

Shorten the NEGATE rule label as these are too long

Add the OOM memory restructuring fix from Ticket #1758 into mainline for nanoBSD upgrades.

Remove the old direct_networks table which is not used throughout the filter code. Instead we now create a negate_networks table which contains both vpns, directly connected networks (static routes) which should never be tagged for policy routing which breaks traffic....

Add no nat/rdr rules for carp protocol so people do not screw their setups.

Move the old databases to the backup folder in conf
Fixes ticket #1758

Restore the RRD backup before attempting a migration as this bites the nanobsd users.
We immediately backup the new databases to a new rrd.tgz file. The old database will be moved to /root
Fix for ticket #1758

fix typo (Bug 1944)

fix typo. redmine #1941

Fixes issue with l2tp interfaces and altq

Add curly braces to fix code logic. See http://forum.pfsense.org/index.php/topic,40953.msg215068.html#msg215068

Allow multiple PBI packages in one tag space separated

Include certs.inc before calling lookup_ca in auth.inc. Fixes #1927

Add full path to ssl files and silence warning

Use curl instead of dig

Add some timeouts

Add fetching of Root name servers hints file to setup

Add global for chroot environment

Remove extra word config

Ensure unbound is owner of ssl files

Use the correct path for Unbound SSL keys

Use the correct config variable for config

Update root anchor for DNSSEC validation

function shuffling and add missing ;

Write out Unbound configuration file

Update comments and to do

Add Unbound read function for /etc/hosts

Swop dns xml tag for unbound

Make space for Unbound custom options

Handle domain overrides and adjust config order

Add Unbound statistics

Add include fore remote control and change files .conf extension

Add static host entries to separate file and include in main config

Merge branch 'master' of github.com:bsdperimeter/pfsense

Various Unbound functions for configuration

Use the new daemon for status->queues until a proper chart javascript library is availble

Merge branch 'master' of github.com:bsdperimeter/pfsense

add ability to get root hints file

Create symlinks for packages config files into the PBI directory

Fix pbi_info path

Remove line forgotten last commit

Start for various Unbound functions

Change the way syslogd is killed/restarted a bit. Fixes log related pages hanging when logs are reset (or saving syslog settings)

Add missing s

Move hostapd to its own log and tab, so it stops spamming the system log.

Add Unbound chroot directory path

Exclude relayd from main system log, it's really spammy, and is already in relayd.log

Add some missing ;'s.

Show session detail in Virtual Server status

remove symlinks for PBI binaries

remove PBI even when packages depends on only one PBI package

Create symlinks for bin and sbin directories on /usr/local/ after installing a PBI

Try to send the xmlrpc errors to the system log

Check that we have user password otherwise strange things happen if tehre is nothing stored in the config

Correctly check if it is a valid object or not

Combine is_subnet to check for both v4 and v6 subnets

Add is_subnetv6 for checking of IPv6 subnets

Add relayd to Status > Services and widget. Add capability to kill when restarting instead of a simple reload. Implements #1913

install/remove packages using PBI

Fixup relayd to handle DNS load balancing as well as standard TCP load balancing.

Add global to hide download tab

Add option to not restore config.xml

Add option to perform full backup prior to upgrade. First commit of 2011 pfSense hackathon!

Unbreak the firewall rules, I accidentally reset the variable.

Correct behaviour of switching from console from any ppp type device to other type. This has been broken since new ppp code.

Show friendly interface names

Add support for multiple radius server to be used during authentication

Remove duplicated occurence during merging

Remove references to undeclared table

Add the multi instance CP to master branch. This allows to define CP with different properties on different interfaces.

Match pftop page exatly with privilege, there is no other page that glob would catch. Fixes #1845

Add proper validation to the services_rtadvd_configure() to only pick up the IPv6 nameservers if any
Ticket #1836

Also add the new RDNSS fields to the rtadvd config for prefix delegation cases.

Now that our rtadvd binary supports RDNSS we can tack the search domain and DNS servers onto the stack.
Ticket #1836

Encapsulate in curlies for safety

Unbreak system_routing_configure();

Only add the Interface scope on link local addresses

Add a / for the prefix length value. As suggested on
http://forum.pfsense.org/index.php/topic,40377.msg209028.html#msg209028

Only do cookie check if the form has already been posted. The cookie check is not accurate for the first page load after a browser has been opened, has to be at least one refresh/post first.

Unlink the failed downloaded file if present. Since it might contain harmful and not expected content

Check/set array for $config['staticroutes']['route'] as well, fixes deleting of the last static route not syncing to secondary unit.

Add a find_interface_ipv6_ll() to find the link local address of a interface.
Use this link local address for the apinger srcip otherwise we might try using the DHCP6 /128 address which will fail.
We need to extend apinger or any replacement thereoff to understand the %{$realif} scope suffix for link local addresses so that these are always correct. This is important since link local gateway addresses are a normal thing and FreeBSD will complain otherwise.

fix unknown-clients on DHCPv6

Fix system_routing_configure() so that that it also passes the interface scope with the IPv6 address on route changes. This is required for link local gateways to work.

Remove stray print_r debugging from the dhcp6 client function

If a user's browser does not support cookies, print an error on the login form telling them so.

Conflicts:

etc/inc/authgui.inc

Further fix up the DHCPv6 client support, launch rtsol to figure out our gateway and add this into the interface router file in /tmp.
This will then be picked up by the rest of the system. My testlab happens to block ping showing it down but should otherwise work.

Do not send reconfigure events in the rc.newwanipv6 until we figure out a way to not step on the v4 configure too.
Correct some variable names

Revert "Make the webConfigurator lockout rule to catch even edp protocol so that xmlrpc bruteforce is caught as well."

This reverts commit 8a4f3015e44007dad22a6e1821f678293cf703a4.

Make the webConfigurator lockout rule to catch even edp protocol so that xmlrpc bruteforce is caught as well.

Fix several issues in pppoe code and remove duplicated code.

Fixup OpenVPN status a bit to properly handle SSL servers using a /30 (no server directive) and also be a little more verbose about what is happening, if we can tell.

Disable the rtsol command for now until we have a proper script to handle this.

Correct the path to rtsol

Accept router advertisments for DHCP6 WAN interfaces. Also launch a rtsol process.

Fixes #1666. Check if the interface needs to be added to a bridge during rc.newwanip as well.

renable IPv6 rc.newwanipv6 but comment out reconfigure($if) until we track down how to best handle this.
Dhclient does not pass the interface as a argument which makes this really hard.

Unbreak the services.inc Ticket #1663