pfSense

Fix more typos, I can't code for toffees

Fix the syntax error

Use the information from the wiki about letting lighty listen on v4 and v6 together.
http://redmine.lighttpd.net/projects/lighttpd/wiki/IPv6-Config

Enable IPv6 binding for Lighttpd

check the correct routing table array otherwise we can never change the default route

Merge remote branch 'upstream/master'

Conflicts:
etc/inc/services.inc

Change the dhcpd startup for isc dhcpd server 4.1

Activate code to allow ipsec to work normally.

Ticket #980. Bring CP widget up to date. Also bind lighty for CP to 127.0.0.1 it should not be accessible otherwise.

This enabled finding of a carp vip on the ifconfig stack

Do not attempt to start relayd without entries

Enable both ipv4 and ipv6 forwarding before returning

Default to ipv6 routing on

Make it possible to create a inet6 carp address. This works surprisingly
What doesn't work is removing the previous IPv6 address from a interface. This should be hooked into the edit page

Merge remote branch 'upstream/master'

Make sure that the filter rules for static routes are correctly generated for ipv4 and ipv6

Protect from strange situations on bootup by testing for is_array(). Do not add anymore the 127.0.0.2 route its not needed anymore. Also during bootup bring up all interfaces so the assignment process can deal with them(Possibly should be done in another code flow!).

More VPN log fixes, for consistency. Ticket #912

Fix typo (standart -> standard)

Switch to a unified vpn-linkup and vpn-linkdown.

Fix l2tp interface naming. Fixes #985

Remove debug flag from rtadvd

Fix services.inc dhcp6 configuration, add route advertising deamon config

Use individual linkdown scripts.

Various sync fixes to ensure sections are pushed even if empty, otherwise the last entries of these sections cannot be deleted and have that deletion sync to the secondary.

Merge remote branch 'upstream/master'

Conflicts:
etc/inc/filter.inc

Do not throw warnings on empty dhcpd arrays

Add function for generating ipv6 subnet mask end, hook into ipv4 subnet mask check as well.

Make isvalidpid() know about pidfile the same as the other *pid functions do.(consistency)

Also mention that this allows access to the dashboard.

Fix typo in services_dhcp_configure() for dhcp6 naming

Add icmp6 rules so that stateless autoconfiguration can be used, this also requires that link local addresses work.

Add the rtadvd deamon to advertise the routing. We still need to make a proper config file if we want it to advertise the Carp IP instead of the interface IP
Also added safety guard for empty dhcp configs

Make sure that if either v4 or v6 dhcp servers are enabled that is_dhcp_enabled() will trigger

Update services.inc for configuring isc dhcp server 4.1 with ipv6 subnet support. Much configuration needs validation.
There is no router option support, this needs to be handled by the router advertisement deamon. Perhaps this should be coupled to enabling DHCPv6....

Ooops use meant logic.

Ticket #975. Properly initialize variables to avoid caching issues. Also check an array exists before trying to foreach to avoid errors.

Do some is_array() testing before renaming fields, otherwise empty variables can be accidentally created.

Do not require LDAP search base DN. Requiring this can prevent some valid LDAP configurations from properly authenticating. (See GDD-550841).

Add the ipv6 address and subnet onto the existing ifinfo array until the pfsense module supports it

Allow for creation of a ipv6 tunnel for he.net by creating a gif interface. This is the recommended procedure as advised by he.net
This allows for using ipv6 local and remote addresses, you will need to add a ipv6 default gateway on the routing tab

Switch over the IPv6 functions from IPv6.inc, these are from the PHP PEAR library

If there are no aliases, push an empty aliases array. Fixes #961

Add a note to the DNS Rebinding protection error letting the user know to try by IP address.

Do not show on the queue/limiters list the disabled entries(optimized and cleaner version).

Do not show on the queue/limiters list the disabled entries.

Ticket #943. Call the update procedure directly to not do an unecessary loop.

Make this more strict checking.

Fix the filter.inc rule generation for icmp to prevent a double inet6 in the rule
Add inet6 for user defined rules to ipv6 addresses.

Change the firewall rule generation to look for the ipprotocol tag which defines inet or inet6. This makes sure that we use ipv6 addresses and change to the correct ipv6-icmp tag.

Add l7 rules synchro. Ticket #951

Add a rule so that the bare icmp ipv6 traffic can get out, otherwise the box can not communicate properly on ipv6

tack on the ipv6 information via the old fashioned way until the pfsense module is up to speed

fix filter rule error

remove some debugging from filter inc, show correct ipv6 gateway from function

Be smart and correct; first check for opt*ip and after check for opt* otherwise it will never match the first case!

Mark this entry as an array before treating it as such otherwise php complains.

Check to see if it is not an array first - as per jim-p on IRC.

Add the default ipv4 route and the default ipv6 route, check both routing tables before adding or changing.
set the ipv6 IP address via a mwexec() until the pfsense module is adapted. FIXME.
Add filter rules for ipv6 to let traffic out of the firewall. FilterIflist not cooperating yet.

Allow for configuring a IPv6 address on the interfaces page.
Add code to verify a ipv6 address
Let is_ipaddr() return true on a v4 and v6 address.
Change system gateways edit to fetch the global ipv6 interface ipv6 addresses and subnets
The current ipv6 function might need folding into filter_var() when that catches some documented corner cases....

Fix crl upgrade code.

Add ability to select reason codes for revocation. Reformat CRL edit screen a bit. Ticket #555

Refresh OpenVPN CRL files when a CRL has a cert added/removed. Ticket #555

Add upgrade code for importing CRLs. Ticket #555

Add more CRL functionality. Needs to wait on a new build for further testing.

move dhcpd.conf authoritative; so it's only there once, not once per interface.

Sync CRLs, too.

Correctly call die() in the places needed. Also remove unused global.

Rename 'name' to 'descr' for CA, Certificates, and CRLs, to gain CDATA protection and standardize field names. Ticket #320.

Generalize this function and use it in more places to reduce duplicated code.

Convert fullname field on users to descr, so it gains CDATA protection.

desc to descr in Load Balancer config, so they gain CDATA protection and standardize field names. Ticket #320.

Update field name reference in code, it was changed to descr but this code was missed. (Is this code even needed? Doesn't seem to do anything.)

Change the description field on sysctl tunables to be 'descr' and not 'desc' so they will gain CDATA protection. Ticket #320

ipalias type should be handled in backup_vip_config_section. Remove useless code which copies vip section before call to backup_vip_config_section. Ticket #882

Use proper matching because the command might contain nice in it.

Resolves #957. Correct the code to reflect what its supposed to do.

Bump config.

Do not run anymore the cron job for monitoring check_reload_status since it has a monitoring process that does this through kqueue.

Ticket #927. Increase timeout to gice mpd the time needed to exit gracefully.

Ticket #950. Correctly handle failures while installing packages which might leave stale information behind. Also do not try to startup services twice. Rename uninstall_package_from_name to uninstall_package because the operation on packages is only done through package names.

We want to upgrade all of interfaces/gateways.

Make sure this is an array before entering the foreach loop. Reported at http://forum.pfsense.org/index.php/topic,29118.0.html

Wording fix.

Ticket #942. Try to prevent empty entries and use implode to avoid problems.

Resolves #944. Actually bring down the vlan interface if it existed previously. This is a regression from the ppp dance/requests/whatever.

Add backend code to verify username against cn on login if set by user. Needs GUI code to set the option yet. Ticket #887

revert miniupnpd -d change

Be more verbose with miniupnpd logs. otherwise practically nothing is logged.

Bail out here if a variable isn't an array like it should be.

Hard-coded pfSense to product_name for Growl alert notifications.

Fix text.

Kill apinger with a large axe until the TERM issues can be resolved

Cosmetic change from product_website to product_name

Wording fix.

Fix the "all dynamic gateways are shown as default" problem reported here: http://forum.pfsense.org/index.php/topic,28960.0.html

A non-empty string will evaluate true with == operator.

Add function to convert pfsense slice name to product name.

Use mwexec_bg instead of exec to run a service's start command so PHP doesn't hang in the likely event that it spawns a background process.

Fix racoon.conf generation for localid_type=address. Ticket #936

Avoid generating a dynamic gateway entry in the list if there is already one in the config for the interface.