pfSense

On every ip change renew the hosts file

Enforce the checking of booting up for linkup events

modified radius function to release the pineno

modified radius function to release the pinene if the client is not authenticated properly, and modified function captiveportal_get_next_dn_ruleno to initially takes the value 2000 for the first pipeno.

Include both dyndns and rfc2136 hosts in referer check

Include RFC2136 hosts in DNS rebinding checks.

Add option to RFC2136 to find/use the public IP if the interface IP is private. (Off by default)

Add cached IP support to RFC2136, add GUI button to force update for single host.

Correct variable used to delete symlinks and files delete from CP filemanager. Reported-by: http://forum.pfsense.org/index.php/topic,64016.0/topicseen.html. While here reduce some uneeded extra operations

Repect global conf_path

Merge pull request #686 from Klaws--/master

Added previously missing class selectors cs1-cs7 plus VA (voice-admit), plus the TOS values which still work with DSCP

Added previously missing class selectors cs1-cs7 plus VA (voice-admit), plus the TOS values which still work with DSCP

Definitely requires my patches to the kernel patches to work (dscp.RELENG_*.diff). OTOH, it is currently broken anyway, so wahtever happens, it cannot get more broken. ;-)...

Fix the RRD RRA’s to collect the correct amount of data for the Previous Period view for each resolution.

Applied when RRD's are created.

RRA:AVERAGE:0.5:1:1200 = 20 hours of 1 minute data
RRA:AVERAGE:0.5:5:720 = 2.5 days of 5 minute data...

Add a checkbox that can be used to request only a IPv6 prefix without a IPv6 address. Some ISPs DHCP6 servers will fail the request if both are requested and only a Prefix is allowed.

Conflicts:

usr/local/www/interfaces.php

Merge pull request #671 from wrboyce/master

allow defining dhcp static mappings using dhcp-client-identifier

Merge branch 'Advanced_DHCP_Client_Options' of https://github.com/N0YB/pfsense into N0YB-Advanced_DHCP_Client_Options

Conflicts:
usr/local/www/interfaces.php

Handle comma-separated list arg to rc.openvpn

The argument passed to rc.openvpn can be a comma-separated list of gateways - not just 1 gateway. Enhance the code to loop and process each gateway.

Be a lot more verbose in the logs during package reinstallation.

If the script_name is blank, try another method to locate what our filename is so we don't log an empty script name.

DynDns Euro Dns Provider

Add Dyn Dns Euro Dns Provider

Update services.inc

Turn on AdvManagedFlag and AdvOtherConfigFlag for both 'managed' and 'assist' ramodes.

Add option and code to sync Auth servers with XMLRPC.

Add AAAA support to RFC2136 updates. Based on http://forum.pfsense.org/index.php/topic,50164.msg269138.html#msg269138

Fix #2887, based on NAT states that will be killed, also kill firewall states for same source and destination

Correct the comments describing the error with correct values

Use the name of the interface (lan, opt1, etc) rather than a loop-derived number for the DHCP failover peer name. This should be more accurate in cases where DHCP changes for interfaces happen out of order on CARP clusters, or when somehow an interface's configuration exists on one but not the other.

Add an option to force IPsec to reload on failover, which is needed in some cases for IPsec to fail from one interface to another. Ticket #2896

Add a brief description about bandwidth vs bursting.

Add a field to allow rejecting DHCP leases from a specific upstream DHCP server.

A better fix for conditionally including burst.

Burst of 0 is also valid

Only add burst if a burst is defined

No need for this block of code, it will always have flags by this point if they are needed.

Ensure that we only add a state type on pass, and that we only add flags to a TCP reject rule if they were not added previously. Fixes #3050

Fix #3049, set $config as global to it can be read

Allow user to set interval between attempts to resolve hostnames configured on aliases

Include the burst size in the limiter. Submitted-by: http://forum.pfsense.org/index.php/topic,62470.0.html

Add warning comment about missing IPv6 implementation

Add used binary

Remove referenced binary not used anymore

Remove unused code and spurious alert

Use file_put_contents for simplicity and readbility

• Use when needed the family for get_real_interface
• During dhcp setup use -n for cp to avoid coping uselessly

Use family parameter for v6 to get correct interface

Remove useless variable and also correct some style

Do not do the same tricks here that are done on get_real_interface but just call the function directly

Get interface from inet6 domain

Use trim rather than str_replace. Also no need to sleep anymore since dhcp will configure first the interface

Remove unreferenced binaries. correct some formatting and also to make function clear to track correct the curly placement

Provide full path to route binary

Provide full path to route binary

Don't flip the IPv6 allow setting just because people are upgrading. Just upgrading versions shouldn't change this behavior. As much as most of us would like people to start deploying IPv6, the vast majority aren't going to be immediately post-upgrade, and changing this can change the firewall policy behavior by allowing v6 that previously wasn't allowed. Upgrades should never change the firewall behavior like that. At the time it was done, everyone using the 2.1 code base was using it for IPv6, so of course it tripped up quite a few people.

allow defining dhcp static mappings using dhcp-client-identifier

TCP flags are valid on any type of rule, don't skip them on block or reject rules

Split actual SMTP send into its own function.

Add the ability to disable Growl or SMTP notifications but keep their settings intact. Remove automatic test messages on save. Add individual test buttons for Growl and SMTP that work even if the service(s) are disabled.

Actually try to get the real interface for v6 family to correctly get stf(virtual) interfaces

Correct the command for setting the 6rd gw

Wait 1 second before starting the other dhcp6c since pkill does not wait for the process to exit

Do better checks and do not include an interface that will be skipped to the known ifaces

Allow localhost IP Alias VIPs to sync, too

Add the 6rd gateway information

Remove extra parenthesis

Also consider 0.0.0.0/0 here since it fails on is_subnet() but is a valid/special config. Fixes #3016

Merge pull request #666 from chrostek/master

Fix for CURL options (Custom DynDNS)

Correction on last commit (CURL options)

My last commit only worked on "Save & Force Update" but not on a
reconnect. Fixed that

vpn.inc calls functions from ipsec.inc but doesn't actually include it in all cases where it's needed.

Added CURL options to Custom DynDNS

Added the options for CURLOPT_IPRESOLVE and CURLOPT_SSL_VERIFYPEER in
the webinterface for custom DynDNS

Don't use invalid or IPv6 DNS servers when crafting DHCP DDNS Zones. Fixes #3015

Update dyndns.class

Fix Tabs

Update dyndns.class

Remove unneeded test variable.

Update dyndns.class

Minor Style Change

Update dyndns.class add CloudFlare

Add CloudFlare Support to dyndns.class

Update Services.inc add Cloudflare DYNDNS

Add Cloudflare to the list of DYNDNS services

Merge pull request #646 from marcelloc/master

Add dynamic category tabs for better listing all available packages

Merge pull request #628 from technical50/master

WebGUI Auto Codeset and Language Dynamics & pfSense.pot updates

Merge pull request #655 from jean-m-cyr/master

Simplify shaper.inc for ipv6

Fixes #2979

. Change max value for traffic and packets graphs to 20GigE
. Bump config version to 9.6
. Write a config upgrade function to tune current rrd files to the new
max value

Update dyndns.class

To remove a curl_setopt line that is unused for "dnsomatic", and to allow for all characters to be used in the username and password fields.

Do not hide IPV6 setting when system->advanced->network->allowipv6 is false

Fixes #3001, Check the protocol of the webgui to determine if https is being used for custom ports.

Fix whitespace

Fixes to get routes + dns working:

. Simplify code using new parameter of get_staticroutes()
. Check for subnets instead of ip addrs
. Avoid touch filterdns when we are just updating dns

Add extra param, off by default, to make get_staticroutes() return hostnames too

Last element is always empty, be sure we drop it

Use filterdns to update static routes using hostnames

Split system_routing_configure() and teach it to deal with hostnames

Add rc.newroutedns to change routes when hosts changes

Make add_hostname_to_watch return ips it's adding to later use

Fix whitespace and indent

Simplify logic

Don't add zones multiple times if it can be avoided.

Partial revert of 5b431a20dea since the introduced parameter is not working as expected

fixup gitsync for 2.1/2.2

master is now 2.2-ALPHA

bump to RC

Unbreak Dynamic DNS updates from DHCP, ISC changed the config layout to require zone declarations, and the ddns-update-style directive only works globally.

Add dynamic category tabs for better listing all available packages

Remove unecessary if

Merge pull request #644 from jean-m-cyr/master

Allow IPV6 bandwidth limiter mask

Widget Firewall Logs Fields

In the Firewall Log Widget view time field is of more use than source port and protocol.
Add time field and remove source port and protocol fields.
Fields: Action, Time, Interface, Source IP, Destination IP & Port