pfSense

Remove debugging.

Use the newly introduced functions and simplify function get_direct_network_list.
What does the latest function do actually?

Introduce 2 new functions
find_interface_subnet and get_interface_subnet
similar to their ip ones
find_interface_ip and get_interface_ip
to easy getting this info for dynamic interfaces.

Find correct interface ip for using while generating filter rules.

Update list of altq suppported interfaces with some of our custom internal names wich actually are really ng_iface(4) type.

Change backend part to show friendly interface names on shaper.

Its questionable why this function should be available since it will be called when switching from an HFSC queue with childs to a PRIQ which does not have childs.
Either way make a stub available so the interface does not error out.

This should fix ticket #1835

Obey the dnsallowoverride option even for secondary dns on pppoe interface.

Update release key

Latest version is 5.4, not 5.3.

Correct config path

Unbreak.

Pointy-hat-to-: Seth Mos

Gateway load balancer upgrade code courtesy of billm@

Improve monitor IP lookup

Pick monitor IP from the interface config section

Include more information in the array including a attribute flag.
The attribute is either "system" or the gateway array id.

Correct typo to prevent gateways showing up twice.
Fetch monitor IP for automatic gateways from the interface config section

Only mount for rw during sync function.

As of pf 4.1 keep state is used automatically. Do not keep state
between statically routed subnets.

Show correct password (it's caps sensitive)

Another missed needed conf_mount_rw().

Oops, we need to mount rw before creating home dir.

Hopefully unbreal the user manager on embedded.

See: http://forum.pfsense.org/index.php/topic,12567.0/topicseen.html

Fix non working static route adding for DNS servers.
Needs to move to system_routing_configure?

Refactor ipfw loading.

Remove newline since it breaks the ruleset when its hit.

Require globals.inc

Remove redundant check

Be smarter parsing the command line before passing it into handle_argument_group.
This prevents bogus events being logged when (dis)connecting a cable

Use product_name

Add remove package configuration script to pfSsh.php

Use product_name

Remove unneded check.

Add newline and done

change to keep state

Sync the time on ip change and alert the logs

Add more bootup text

$config needs to be a global

Add new line

Adding missing ;

Uhh, this is not a package any more.

Use files.pfsense.org

Reload filter

Remove sleep

Move openntpd process up higher

Return if booting

Use new sync on boot script

Try to use where possible filter_configure so upcoming event modifications can be easily integrated.

Use existing functions to not duplicate code.

Simplify and return correct information if dhcpd is active.

Add disable dhcp server script

Add script which automatically enables a default firewall rule on wan and
disable block private networks on the wan interface.

Add backtrace in the logs whenever log_error is called and debugging($g["debug"] ) is active.

Call a backtrace and log it if we have a failed interface variable.

• Add interfaces_bring_up()
• Fix log_error (missinge else)
• Remove blank line after ?> that ermal just added

Better check if the knob is defined or has no value.

Reorder the calling.

• Log an error when an ifconfig up command is missing its interface
• Cleanup formatting

Do not attempt to toggle polling on unsupported interfaces.

MFC: after testing confirms working with and without polling

Only attempt starting relayd when the vs array is not empty

Remove quotes

• Use interface_bring_down to not duplicate code
• If we are reconfiguring check bridge/gif/gre interfaces if they need to be reloaded.
• Invalidate array cache to avoid stale information

Fix typo.

Do not spam logs

• Rename link_int_to_bridge_interface to link_interface_to_bridge
• Create two new function link_interface_to_{gif,gre}

Do not parse vlans

Trim and correct var

Correct path to netstat

Mute killall output

• Remove some unused code.
• Correct dhcpd config
  - Allow the dhcp server to run on interfaces even though they are bridged
  - Simplify logic
  - Consitently check through code if a specifc interface is enabled for dhcpd

NOTE: Probably dhcpd might need some custom options textarea to allow more advanced option setup by users.

Unbreak.

Fatal error: Only variables can be passed by reference in /etc/inc/services.inc on line 596

Pointy-hat-to: smos

Do not step on var

Do not toggle polling on vlan interfaces

Correct route lookup

Surpress message when trying to remove alias address

Surpress default route delete message

Surpress kill output.
Do not toggle polling on vlan interfaces

surpress kill output

Lookup route table before attempting a delete

Surpress killall messages

Filter on outgoing too to allow things like keep state on tcp sessions and reply-to to
'work' on ipsec!

Suggedsted-by: billm@

Fix typo.

Make sure to have an interface as a bridge member after reconfiguring.

Change it back to 1 not sure why we should look at the packet after the outer header is added.

Be smarter at finding the smallest mtu.

Fix mtu handling on bridge and lagg interfaces. Reported-by: Seth

Some better checks to avoid errors.

Do some better checking before acting on the bridge.

Add each member to the bridge individually rather than in one single command.

Correct the value. We are interested on the packet after ipsec processing.

Change slightly the order of execution to allow overriding hardcoded defaults.

Disable bpf(4) abilities on enc0 by default its too much overhead to be on by default.
If one wishes to look up the ipsec traffic through tcpdump they can set the sysctl themselves with explanations here:
http://www.freebsd.org/cgi/man.cgi?query=enc&apropos=0&sektion=4&manpath=FreeBSD+8-current&format=html

Correctly pad with 0.

Change enc out sysctl to 0x00

Setup enc sysctl's

Increase snaplen to 256

Do a better job of detecting existing configured gateways

Extra sighup not needed on 7

oops, changed a line in testing, revert

Comment code on why primary pools port is in use - the front end should
probably only show fallback pools with the same port, but that will be
difficult if not impossible to put in place until we have a better AJAX
framework in place.