pfSense

Add safety belts around memory size checks. Fixes #14648

• Add safety checks when fetching the memory size
• Also ensure the state table size is sane if the memory check fails

Use pf macros for <interface> subnets. Fix #6799
This changes the behavior of '<if> subnet' in generated firewall/NAT
rules. The previous behavior expands '<if> subnet' to a list of subnets
in PHP then generates filter rules with that list. Instead, create a pf...

Read pkg plugins more carefully. Fixes #14474

Disable CARP until services have started and before shutdown/reboot. Fixes #2218

CARP has historically been enabled as part of interface bringup and sync setup
fairly early in rc.bootup. This change intentionally shuts down CARP from
interface bringup all the way until services have been started to ensure that a...

Fix radvd service check. Fixes #14136

Add safety belts to PPP historical uptime calculation. Fixes #14117

Fix PHP errors from empty DHCP configs. Fixes #13983

Update copyright years to include 2023

Rector direct global g accesses

Fix regression in URL alias parsing. Fixes #13685

Spelling fixes. Fix #13357

• Incorrect input validation for `dhcp6c` `keyinfo expire` `forever` keyword in `interfaces.inc`.
• Incorrect input validation for associated rule's `Source Port` in `firewall_rules_edit.php`.
• Incorrect `voucher*.` file lock reference in `status_captiveportal_voucher_rolls.php`....

While here, reduce a few differences with Plus.

Update the loader.conf filter list.

This remove the duplicate entries for the settings added by pfSense.

Sync with the current Plus defaults.

Fix setting EFI boot console type. Issue #13080

For some reason the EFI loader is forcing boot_serial=YES when it is not
set in the loader configuration. To work around this, we must set it to
NO explicitly. The loader menu displays the wrong type still but it...

Fix primary console handling for EFI. Fixes #13080

Tested and working for both BIOS and EFI systems.

Use certificate trust store when verifying alias URLs. Fix #13367

Clean up warnings and errors in pfsense-utils.inc. #13446

• Remove a number of unreferenced variables
• Fix type of output capture variables for exec() calls from string to array
• WakeOnLan() * Fix type warnings calling socket_last_error for a false value socket...

Replace direct $config accesses in pfsense-utils.inc. #13446

Some direct accesses remain due their tight coupling to the management of the
configuration as a whole or are deferred due to their complexity:

• update_alias_names_upon_change()
• reload_interfaces_sync()...

Correct required param after optional param syntax errors

Skip URL tables with invalid names. Fixes #13425

Omit VIPs from interface address selection. Fixes #11545

Add function get_interface_addresses() which wraps around pfSense_get_ifaddrs() and
filters VIPs before selecting an interface v4 and v6 address.

Replace all use of pfSense_get_interface_addresses() with get_interface_addresses()

Convert IPv6 with IPv4 mapping to hex on prefix merge. Fixes #12440

Status Interfaces SPF details fix. Feature #8861

Show SFP module details on status_interfaces.php. Implements #8861

Do not remove net.link.ifqmaxlen from /boot/loader.conf.local. Fixes #12862

Update Static Route and OpenVPN alias name when the alias is renamed. Fixes #12727

Update the Copyright year of the files owned by Rubicon/Netgate.

Mute kernel messages on dummynet and thermal hardware modules load. Fixes #12454

Do not check subnet overlapping on 6RD interfaces. Fixes #12371

Remove unused function from pfsense-utils.inc. Todo #12406

Rename the Netgate devices.

XG-15xx -> 15xx
SG-5100 -> Netgate-5100

Allow to use nested URL alias in URL alias. Fixes #11863

Display Gateway IPv6 on status_interfaces.php regardless of Gateway IPv4 status. Fixes #12253

Set net.link.ifqmaxlen

This removes the need for a kernel patch which overrules IFQ_MAXLEN.

Always apply IPsec changes on HA secondary. Fixes #12075

Remove duplicate comconsole_port from loader.conf. Fixes #11653

Use set_curlproxy() function for cURL proxy configuration. Issue #11476

Xen console support. Feature #11402

Mute console before load crypto modules

Update the Copyright year.

A subsequent commit will deal with .po's.

Add product_label global variable

Introduce product_label global variable, by default with same value of
product_name. The idea is to make it easier for rebranded products to
change the name on all visual texts while internal structures are
preserved.

While here, remove deprecated $g['platform'] and also replace places...

Remove use of deprecated $g['platform']

Create poesX interfaces for PPPoE server. Issue #11034

Fix #10997: Retire m0n0wall config compatibility

Nested alias IDN fix. Issue #10968

Disable "Hardware Checksum Offloading" if ena(4) is detected. Implements #10723

Merge pull request #4385 from vktg/nohwchksumvm

System DNS Server changes. Implements #10931

There are significant changes here, but ultimately should be a smooth
transition. See https://redmine.pfsense.org/issues/10931 for more
details.

Disable "Hardware Checksum Offloading" if VTNET is detected. Implements #10723

Handle net.pf.request_maxcount via sysctl. Fixes #10861

Toggle VLAN_HWTSO when TSO is toggled in the GUI. Fixes #10836

Improved ACB config update by requiring only a single visit to the system

Correct CRON functionality and move to pfsense-utils.inc

'hw.usb.no_pf' is deprecated now.

Fix the repeated entries in loader.conf.

Ticket: #9647

Fix #9647.

Instead of forcing the defaults in the OS driver (introducing yet another
change), set the default to enable ALTQ support for hnX NICs in loader.conf.

Ticket: #9647

Do not perform RADIUS accounting/prune operations when node is in backup mode
Implement Redmine #97

Show default Adaptive Start/End values. Issue #7362

Add the default values of the TCP and UDP Timeouts on the WebUI. Issue #7362

Merge pull request #4170 from emmtbot/r8987-webgui-dns

URL/URL Table alias with IDN hostnames. Issue #10321

post-review additional sanity checking of parse_url output #8987

post-review changes to URL parsing and conditional style #8987

RAM Disk robustness improvements. Fixes NG 3173

• Prevents RAM disk from being partially enabled and left in a broken
  state if the RAM disks cannot be created
• Prevents RAM disks from potentially overcommitting free kernel memory,
  which FreeBSD now prevents, but could result in errors....

Avoid very slow GUI loads when ews.netgate.com can't be resolved #8987

Merge pull request #4151 from vktg/urltablefeature

switch to resolve_host_addresses() func

urltable can return >1 IPs

This is 2020. Issue #9245

Use central download function

Reduce duplicated/inconsistent code by using the new download function.

Add central file download function for use throughout the GUI.

Fix #9716: Enable Italian translation

Update a couple of Chinese locale codes

Fix copyright message years to reflect BSDP -> ESF -> Netgate

Merge pull request #3998 from NanoCaiordo/patch-is_fqdn

Fix the spamming of warnings about ttyv0 not being available on ARM64 devices.

While here, use a more meaningful name for the function.

Add net.pf.request_maxcount to loader.conf

On FreeBSD 12 and newer pf uses this sysctl to define maximum number of
items supported by its allocations. Make sure it's always present in
/boot/loader.conf and set it to the same value of config item for
system -> maximumtableentries

Ticket #9308: Sort country codes

Ticket #9308: Implement get_cert_country_codes() to get the list of country codes to be used by CAs and Certs

Make get_countr_code() parameter default to 'ALL'

Update copyright notices to 2019. Happy New Year

Merge branch 'master' into patch-is_fqdn

Add Korean to the list of available languages

Fix #9121: Initialize arrays to prevent PHP 7 errors

Make MBT prefer video console. Fixes #9094

Avoids foot-shooting by restoring a config with serial enabled.

Use EFI console when needed. Fixes #8978

$str to $fqdn

Compatibility requested

Properly detect valid trailing dots

Count dots, detect a trailing one and remove it for counting. Must have at least 2 dots.

Improved domain validation

Prevent a reference error w/o rules in the config. Fixes #8993

Fix #8911: Keep configured pkg repository when restoring config

Fix an obvious mistake.

Reported by: stevew
Ticket: #8906
Pointy-hat to: loos

Always pass the $local variabled to load_loader_conf(), it makes the code easier to read.

Sync the know variables with factory.

Filter properly the know variables in loader.conf.

The know variables should be used as prefix not as literals.

Fix some integer assumptions with calculate_ipv6_delegation_length()

add getarraybyref() utility function for general use (used also to avoid php7 'Cannot create references to/from string offsets' messages)

Validation for GUI custom settings. Fixes #8726

Add validation for customizable GUI setting fields and test submitted
values before allowing them to be stored.
Also ensure that dashboardcolumns is an integer before using it in the
GUI.

Fixes #8661 PHP7 illegal string offset