pfSense

Add a field to allow rejecting DHCP leases from a specific upstream DHCP server.

A better fix for conditionally including burst.

Burst of 0 is also valid

Only add burst if a burst is defined

No need for this block of code, it will always have flags by this point if they are needed.

Ensure that we only add a state type on pass, and that we only add flags to a TCP reject rule if they were not added previously. Fixes #3050

Fix #3049, set $config as global to it can be read

Allow user to set interval between attempts to resolve hostnames configured on aliases

Include the burst size in the limiter. Submitted-by: http://forum.pfsense.org/index.php/topic,62470.0.html

Add warning comment about missing IPv6 implementation

Add used binary

Remove referenced binary not used anymore

Remove unused code and spurious alert

Use file_put_contents for simplicity and readbility

• Use when needed the family for get_real_interface
• During dhcp setup use -n for cp to avoid coping uselessly

Use family parameter for v6 to get correct interface

Remove useless variable and also correct some style

Do not do the same tricks here that are done on get_real_interface but just call the function directly

Get interface from inet6 domain

Use trim rather than str_replace. Also no need to sleep anymore since dhcp will configure first the interface

Remove unreferenced binaries. correct some formatting and also to make function clear to track correct the curly placement

Provide full path to route binary

Provide full path to route binary

Don't flip the IPv6 allow setting just because people are upgrading. Just upgrading versions shouldn't change this behavior. As much as most of us would like people to start deploying IPv6, the vast majority aren't going to be immediately post-upgrade, and changing this can change the firewall policy behavior by allowing v6 that previously wasn't allowed. Upgrades should never change the firewall behavior like that. At the time it was done, everyone using the 2.1 code base was using it for IPv6, so of course it tripped up quite a few people.

TCP flags are valid on any type of rule, don't skip them on block or reject rules

Split actual SMTP send into its own function.

Add the ability to disable Growl or SMTP notifications but keep their settings intact. Remove automatic test messages on save. Add individual test buttons for Growl and SMTP that work even if the service(s) are disabled.

Actually try to get the real interface for v6 family to correctly get stf(virtual) interfaces

Correct the command for setting the 6rd gw

Wait 1 second before starting the other dhcp6c since pkill does not wait for the process to exit

Do better checks and do not include an interface that will be skipped to the known ifaces

Allow localhost IP Alias VIPs to sync, too

Add the 6rd gateway information

Remove extra parenthesis

Also consider 0.0.0.0/0 here since it fails on is_subnet() but is a valid/special config. Fixes #3016

Merge pull request #666 from chrostek/master

Fix for CURL options (Custom DynDNS)

Correction on last commit (CURL options)

My last commit only worked on "Save & Force Update" but not on a
reconnect. Fixed that

vpn.inc calls functions from ipsec.inc but doesn't actually include it in all cases where it's needed.

Added CURL options to Custom DynDNS

Added the options for CURLOPT_IPRESOLVE and CURLOPT_SSL_VERIFYPEER in
the webinterface for custom DynDNS

Don't use invalid or IPv6 DNS servers when crafting DHCP DDNS Zones. Fixes #3015

Update dyndns.class

Fix Tabs

Update dyndns.class

Remove unneeded test variable.

Update dyndns.class

Minor Style Change

Update dyndns.class add CloudFlare

Add CloudFlare Support to dyndns.class

Update Services.inc add Cloudflare DYNDNS

Add Cloudflare to the list of DYNDNS services

Merge pull request #646 from marcelloc/master

Add dynamic category tabs for better listing all available packages

Merge pull request #628 from technical50/master

WebGUI Auto Codeset and Language Dynamics & pfSense.pot updates

Merge pull request #655 from jean-m-cyr/master

Simplify shaper.inc for ipv6

Fixes #2979

. Change max value for traffic and packets graphs to 20GigE
. Bump config version to 9.6
. Write a config upgrade function to tune current rrd files to the new
max value

Update dyndns.class

To remove a curl_setopt line that is unused for "dnsomatic", and to allow for all characters to be used in the username and password fields.

Do not hide IPV6 setting when system->advanced->network->allowipv6 is false

Fixes #3001, Check the protocol of the webgui to determine if https is being used for custom ports.

Fix whitespace

Fixes to get routes + dns working:

. Simplify code using new parameter of get_staticroutes()
. Check for subnets instead of ip addrs
. Avoid touch filterdns when we are just updating dns

Add extra param, off by default, to make get_staticroutes() return hostnames too

Last element is always empty, be sure we drop it

Use filterdns to update static routes using hostnames

Split system_routing_configure() and teach it to deal with hostnames

Add rc.newroutedns to change routes when hosts changes

Make add_hostname_to_watch return ips it's adding to later use

Fix whitespace and indent

Simplify logic

Don't add zones multiple times if it can be avoided.

Partial revert of 5b431a20dea since the introduced parameter is not working as expected

fixup gitsync for 2.1/2.2

master is now 2.2-ALPHA

bump to RC

Unbreak Dynamic DNS updates from DHCP, ISC changed the config layout to require zone declarations, and the ddns-update-style directive only works globally.

Add dynamic category tabs for better listing all available packages

Remove unecessary if

Merge pull request #644 from jean-m-cyr/master

Allow IPV6 bandwidth limiter mask

Widget Firewall Logs Fields

In the Firewall Log Widget view time field is of more use than source port and protocol.
Add time field and remove source port and protocol fields.
Fields: Action, Time, Interface, Source IP, Destination IP & Port

Allow IPV6 bandwidth limiter mask

remove auto-added allow pfsync rule

This didn't fix anything, made another syntax error. Revert "Seems to be missing a semicolon here."

This reverts commit 47a24491e2ea07a19d360d29325c1780652026a4.

Make sure there's a space here to prevent accidentally breaking the syntax.

Seems to be missing a semicolon here.

dnsmasq conf won't allow some custom args

User can't specify or customise some dnsmasq args in custom_options (dns-forward-max, cache-size, etc) because they are hard coded in services_dnsmasq_configure().

Merge pull request #635 from jean-m-cyr/master

Bandwidth limiter - Disable and blank mask bits input field when mask type is 'none'.

Fix indent and whitespace

Fix indent and whitespace

Fix comment to reflect what function current returns

Merge pull request #1 from pfsense/master

test

Teach Net_IPv6:compress to handle a compressed address as input

IPv6 OpenVPN TAP mode typo

Bandwidth Limiter - Disable and blank mask bits input field when mask type is 'none'.

OpenVPN w/ IPv6 fails to set ifconfig-ipv6 value in conf #2991

Allow explicit mask specification in bandwidth limiter

Allow explicit mask specification in bandwidth limiter. This backwards
compatible and implements ermal suggestions.

Prevent errors from flowing up to the clients workspace and preventing functionality

Revert "Fix alias expand for hostnames, it should fix #2941"

Working on a better fix

This reverts commit 0d59cc942f2ee225eccdb375e25f58a6f04fa9c4.

Include Codeset and turkish language

include codeset and turkish language for next snapshots

Fix alias expand for hostnames, it should fix #2941

Revert "Add Turkish to the list of available languages, fixes #2986"

Will be done again for 2.2

This reverts commit 705950edbc09270fccbec0c5d8dd99b004704c6e.

Replace all linklocal checks by is_linklocal()

Create is_linklocal() to validate ll addresses

Shuffle some more logs around to more appropriate places.

Nuke interface_track6_dhcp6_configure()

This function does 2 unecessary things:

. Remove the IP address from interface set as Track, what is wrong and
should be done by dhcp6c
. Set a fixed IP when track6-interface is SLAAC, what never happens
since it's impossible to track a SLAAC interface

Send filterdns logs to the resolver log.

Add Turkish to the list of available languages, fixes #2986

After some discussions it is better to make this a tunable and allow its value change from administrator.