pfSense

Set FCGI_CHILDREN to 0 since it does not make sense php to manage itself when lighttpd is doing so. This makes it possible to recover from 550-Internal... error.

Merge pull request #64 from phil-davis/master

Bug #2284: rc.newwanip handle case when gifs config is null

Use better is_array test to check if there are any gifs in the config.

Don't put an extra space here or later tests will fail to match this as a pass rule. Part of #2293

Update etc/rc.newwanip

Enable the NTP server fields for our DHCP6 server.

Include this file to make sure that rc.newwanipv6 actually works.

Ermal says the new openntpd binary fixes this instead -- Revert "Start ntpd in the background since we don't need to care about its return data. Speeds up GUI with broken DNS."

This reverts commit 89d291ec25c12ed5744c63679270d1a13b5c6b3a.

Start ntpd in the background since we don't need to care about its return data. Speeds up GUI with broken DNS.

Rather make use of grep -c than all these pipes

Adjust the ordering so that our modules load properly.
The order appears to be important in which we load the modules

Looking at pw code : chars are invalid in a comment fieldgit diff! Replace those to just space

An empty file is created so that the table is availblke for rules refrencing it so mark it as successful.

Prevent ruleset breaking from grep putting garbage on urltable files and as a result creating unparsable files breaking rulesets

Simplify this code a little and make it easily extendible.

check for presense of file before trying to exec it

Do not wipe logs on reboot on full install

Fix wich roll to write

Use the latest functions from pfSense module for bridge

Use the latest functions from pfSense module for getting interface list

Remove the DHCP6 service enable check, it's not valid for configuring router advertisements.

fix bridge typos

Only run if this is an array

Be more intelligent when managing OpenVPN client connections bound to CARP VIPs. If the interface is in BACKUP status, do not start the client. Add a section to rc.carpmaster and rc.carpbackup to trigger this start/stop.
If an OpenVPN client is active on both the master and backup system, they will cause conflicting connections to the server. Servers do not care as they only accept, not initiate.

Correct send_multiple_events to conform with new check_reload_status behaviour

Add the ability to disable static routes without deleting them

Correctly match ntpd syslog messages

Remove obsolete files after gitsync

Allow specifying the branch name after the repository URL for gitsync command-line arguments and remove an unnecessary use of the backtick operator.

Show lagg protocol and member interfaces on Status > Interfaces. Implements #2242

Adding multi-language support to WebGUI

Ticket #2205 - Add prefork setting

Fix gen_subnetv6_max(), used to display the end of available range in dhcp server ipv6

Turn off suhosin in hunt for #2214

Crank up debug logging to help gear up for #2214

Fix comment, unbreak interfaces.inc

Always configure a link local address when configuring a carp with a IPv6 address.

Ticket #1917: fix typos, fix domain-search for dhcpv6

Write out a default router file for the srd interface

Adding gateway support for 6rd support, does not add route yet.
Adds to ticket #2117

Add 6rd backend code support, adds rules for proto 41 traffic for 6rd on WAN so that the tunnel works.
Adds to ticket #2117

Ticket #1917 - DHCP server support for multiple domains in search list

While we're at it, allow hostnames for syslog servers, since that is also valid.

Allow users to enter a port number when adding a remote syslog server.

Make the reboot time estimate a little more realisitic.

Missed removing the function from here as well

No need for extra function and touching of file, just set the value and use grep from XML to determine to beep or not

Option to disable startup/shutdown sounds

Fixing existing DynDNS force-update feature. Redmine bug #2228

For nat reflection inetd rules, udp/dgram requires wait, instead of nowait/0. Might help with UDP reflection.

only skip adding default gateway if OLSR is actually enabled, and log why you're skipping it, otherwise it's tons of "fun" to dig in and figure out what's going on.

Use PHP's built-in RFC 2822 date format, rather than trying to make our own.

Ticket #2205 - Add input validation, keep same logic as 2.0.1 and abore for default values

Ticket #2205 - Main logic for relayd global settings screen, still need to add stuff (input validation, etc) before closing ticket

Don't let an empty subnet into racoon.conf, it can cause parse errors. Ticket #2201

Fix reference to PPTP secondary RADIUS server shared secret.
See http://forum.pfsense.org/index.php/topic,46103.0/topicseen.html

Correct checking if a gif is part of bridge so that it actually works correctly adding a gif after having created it on bootup

Resolves #2052. Remove duplicate rule

Make sure to pass the string, not the array

Perform actual 128 bit operations to make sure we get the math right.

Another try to eliminate the warning 'PHP Warning: Cannot modify header information - headers already sent by (output started at /etc/inc/authgui.inc:201) in /usr/local/www/guiconfig.inc on line 47'

Revert "Check if a session already exists to avoid errors issued by php on sesion_start being called on existing session"

This reverts commit 9b2de7e2a6afab31e1a62ac8d54435975a22a9a7.

Check if a session already exists to avoid errors issued by php on sesion_start being called on existing session

Fixes #2082. Actually just correct the log to display the correct information

Fixes #2082. Correct checking of existing session to take into consideration when possible/needed the mac address

Fixes #1999. Upgrade bvoucher config as well during CP upgrade to multi-instance

Since the CARP interface name changed to vip, devd needs to follow that change as well.

Add nat rule if the target is in a subnet handled by a static route whose gateway is in the interface's subnet. Ticket #2163

Add static route subnets if their gateway is within the source subnet for the nat rule. Ticket #2163

Use the specific IP for NAT IP in filter_generate_reflection_nat to prevent a condition with multiple subnets on the same interface where replies get sent to the wrong IP.

correct branches in gitsync

Rename function and use variable

Add builder binary

Support for configuring the configuring Unbound service

PPTP upgrade needs to declare $config a global.

If the old bindlan option is there, assume the lan interface for binding.

Change SNMP binding option to work on any eligible interface/VIP. Fixes #2158

Also write out the rules that caused the problem to ease troubleshooting.

Add code that expresses the default gateway calculated from the broker address.
The stf adapter was correctly setup from the WAN IPv4 address apparently
Adds to ticket #2117

Add more backend code to calculate the 6RD broker IPv6 address from the IPv4 broker address.
Adds to ticket #2117

Only do foreach on the p2's if it's actually an array.

Fix exec bit

Add a small script to disable APM on ATA drives if they claim to support it. Leaving this on will kill drives long-term, especially laptop drives, by generating excessive Load Cycles.
The APM bit set will persist until the drive is power cycled, so it's necessary to run on each boot to be sure.

Be smarter about how to split a Namecheap hostname into host/domain. Fixes #2144

Include admin user in bootup account sync

Fix LZO setting for Upgraded OpenVPN (was turning compression on even if old config had it disabled.)

Make sure we stop the configure if the device does not have a public address
Ticket #2117

Add backend 6RD support. We don't have the required patch yet for our stf driver.
Needs hooks into our gateway code to handle the default gateway since the stf interface does use router solicitations
Adds to ticket #2117

Fix upgrade code for 1.2.3 with assigned OpenVPN interface.

Don't ignore when multiple OpenVPN DNS, NTP, WINS, etc servers were specified in 1.2.3 when upgrading. 1.2.3 separated by ;, 2.x uses separate vars.

Safer for 1.2.3 upgrades to assume OpenVPN interface == any, since 1.2.3 didn't have a way to bind to an interface. Otherwise people accepting connections on opt interfaces on 1.2.3 will break on upgrade until the proper interface is selected in the GUI

Remove rtsol debugging output

Comment out debug print for cert verification

Check to see if the pid file exists before trying to kill anyprocess

Be more careful when creating and removing a user, to only alter a user if it really matches the passwd entry. Fixes #2066
pw usershow likes to ignore what you want even with -n and if the user is numeric and doesn't exist, it fetches by uid. Can cause major problems if you try to remove a numeric user.

making small fixes on jQuery code

Only add these lines if there is both an IP address and CIDR. Fixes #1882

Ticket #2114. Remove define_syslog_variables since its deprecated and probably not needed

Bump upload size to 128mb, the firmware updates (at least for now while testing) are a bit too large for the old value.

Unbreak a number of explode() replacements which required preg_split()