pfSense

Resolver has no option for remote syslog, remove wrong copy/paste that was adding it when apinger was enabled

Merge pull request #1118 from phil-davis/patch-3

Merge pull request #1120 from phil-davis/patch-5

Fix PBI installation when target lies on different directorie

fix typo

This doesn't need via-env

Make sure that the DNS Forwarder/Resolver is actually capable of accepting queries on localhost before using it as a DNS server.

Missed pbi_prefix here

Fix PBI symlink creation and deletion under /usr/local following .pbiopt files, also drop setup_library_paths() since it's not necessary anymore

Make sure /usr/local/etc/rc.d exists

On 2.2-ALPHA (i386)built on Mon Apr 21 13:01:11 CDT 2014 (for example) there was /usr/local/etc but not /usr/local/etc/rc.d - when I tried to install bandwidthd, that called write_rcfile() which failed because /usr/local/etc/rc.d did not already exist....

Merge pull request #1116 from PiBa-NL/interface_has_gateway-ipv4_gif_gre

Merge pull request #1115 from PiBa-NL/reply-to_IPv6gateway

Load if_stf module when needed

Cut paste bug fix in Remote Syslog DHCP events

apinger is repeated here from the code above, but it should be dhcp.
Forum https://forum.pfsense.org/index.php?topic=73734.0
Selecting to remote syslog "Gateway Monitor events" would also switch on "DHCP service events" unintentionally.

add gre and gif checks for for IPv4 function interface_has_gateway($friendly), like they are already for IPv6

check gateway for IPv6 also for reply-to rules.

Be smarter at using kenv

Unload the ZFS module if its not in use to not consume uselss memory

support symlinked RC scripts from PBI packages

GC unused code and do not set this to 0 for now since it is not anymore relevant

Fix susbstr-substr typo

I just got this error again on 14 Apr 2014 2.2 snapshot. I can see the fix in 2.1 branch. I could have sworn it got fixed in Master also, but I can't see it. So here is the fix for Master.

Correct the sense of the check to allow openvpn to work

Correct auth-user-pass-verify to include parameters properly so openvpn can start

Fixup update URL

Use the FreeBSD script for ldconfig to catch all libs

Avoid warnings later on if no config for layer7 exists

Get rid of embedded platform. Its time to GC this

Start using filterlog

Switch over to filterlog sooner than later

Unset also here

Do not allow upgrade_101_to_102 to exit early

This upgrade step does both Captive Portal stuff and OpenVPN stuff. So do not return early just because there is no Captive Portal config.
Both Captive Portal and OpenVPN tests changed to be positive tests, to make sure that everything is checked/tested and there is no chance to return early.

console, reload firewall rules after enabling SSH

Get real interface when dhcrelay uses default GW

If the DHCP Relay server is not on any local subnet, and not on any subnet that has an internal static route, but is somewhere that no specific route is known, then this code finds the default gateway and uses that in the DHCP relay "-i" parameter. The current code gets just the interface name (like "wan", "opt1"). But DHCP Relay command needs to be fed the actual device name "vr0", "vr1" etc....

Merge pull request #1072 from marcelloc/patch-3

tls-verify requires quotes around the command to be executed. Ticket #3596

Nowdays there is no real difference between the kernels apart the ZFS support. So do not keep a distinction anymore

fixing typo for GIF tunnels to work over IPv6

the call of get_interface_gatewayv6() in the creation of a GIF tunnel over IPv6 leads to a "Fatal error: Call to undefined function get_interface_gatewayv6() in /etc/inc/interfaces.inc on line 934". changeing the function call to get_interface_gateway_v6() fixed it for me on my local system.

Also add similar checks on rc.newwanipv6 as in the v4 version

Forgot to remove the problematic part from previous OpenVPN loop fix commit

Take care of the loops reported for OpenVPN in tap mode. Also fixes the problems of tap disappearing from bridge if its a member.

fix git path calls and CODIR

it may need some checks/fixes on pkg-utils.inc as git downloads but not installs.

After manual pbi install of git, "pfSsh.php playback gitsync master" works fine with this fix.

Correct typo on function name that has slipped unnoticed. Reported-by: https://forum.pfsense.org/index.php?topic=74688.0

Merge pull request #1055 from ExolonDX/branch_master_10

Make extra sure that we do not start multiple instances of dhcpleases if, for example, the PID is stale/invalid and there is still a running instance.

Put the fix to be more generic to prevent any other leak possible in the long run. Fixes #3062

Update captiveportal.inc

Release unused pipeno when client is already authenticated.

Bug #3062

Indentation

Indentation

Dont check for 'checked' but rather if it is just set

Tidy up "functions.inc"

Escape single quotes for TABLE and HREF
Updated closing TR tag

Make rc.php_ini_setup ready for php 5.5

Tidy up "functions.inc"

Remove unnecessary semi-colon.

Remove TRIM_set and TRIM_unset support. This method isn't very elegant and isn't necessary in the long run. It's better handled in the installer stage and not after the fact.

Merge pull request #1041 from PiBa-NL/carp_maintenance_2.2

carp, provide a way to 'permanently' set carp to 'maintenance mode' (advskew 254) persisting a reboot

carp, provide a way to 'permanently' set carp to 'maintenance mode' (advskew 254) persisting a reboot
Option to set CARP interfaces to 'maintenance mode', persisting through a reboot so the primary machines stays as backup/inactive.
This is required when there are some problems (possibly with the hardware) and the primary machine needs to be booted and checked again before becoming 'master'. Currently it will take back the master state during reboot even though there might still be problems or some re-configuring to do....

Add privileges

Reflect the service name when starting it

Add localhost as always allowed and ensure to include the access lists

Write out the access list correctly

Configure acls for local networks and ensure listening interfaces are correctly set

Add missing new line

Correct reference

Ensure TXT support on host descriptions actually works

Remove even unused pamd.conf

Remove utterly old libmap.conf file

Update disktab to FreeBSD 10

Remove cvsup file from pfSense tree

Another remenant from old days

Remove remenants of pccardd from FreeBSD 5

Update protocols file as well

Remove unused files

Do not use the version_kernel ad version_base files since they are not relevant anyway

Use proper variable name for the interface

Correct check that was broken even before to actually make the ieee8021x enable from proper setting. Reported-by: https://forum.pfsense.org/index.php?topic=74013.0

Log everything when selected to do so

Correct the generation of antifpoof rules with tracker. Also honor the log directive. While here remove a duplicate antispoof declaration further down

Give each rule hardcoded on the ruleset a tracker so log entries give up proper results there

Make this a global so no errors occur

send crash reports via HTTPS

Change default charset on pages to utf-8

Merge pull request #1031 from ayvis/master-br-patch

replaced uppercase html tags with lowercase

Merge pull request #1035 from packetwerk/rc_permissions

fix permissions on two rc scripts

fix permissions on two rc scripts

Fixes #3543, correct the typo in spelling

While here escape the passed valuye to avoid problems with input

Somehow these got changed to /usr/local/sbin/ipfw instead of /sbin/ipfw

Make this more usable by putting a delimiter in there

Fix this for master

Also configure log levels any time the daemon is restarted.

Try to put the connection name in the logs for easy identification

Fix deletion of ipfw rules and pipes for passthru mac, it fixes #3538

Fix file name for domain overrides and ensure trust anchor is referencing the correct file.

Use the correct xml tag to check against

Only display config title if option is enabled

Rather put forwarding for DNS servers into the configuration file

Ensure if port is configured it is then used

Add privileges for accessing DNS Resolver

Use array_flip even for the package parsers

Add require_once where needed to avoid redeclaration from nested includes

Configure first the vhid and than pass the vhid when configuring the carp this makes the ip assigned to carp as well