pfSense

Fix updating renamed aliases with multiple entries

Previous behavior only checked single-entry aliases. This change allows
calling update_alias_names_upon_change() with a spearator to loop
through the alias and update all entries.

Remove the pppoe reset cron job when the interface is disabled or with if_pppoe

Fix the last commit.

Pointy hat to: loos

(cherry picked from commit 55b33420d65aa7d47d4469a96f315fb271021967)

Fix the ppp uptime with if_pppoe.

Based on a patch from Stevew.

(cherry picked from commit 240965405915259e2d724c8add11fd76dd34db18)

Refactor filter_rules_compare()

Improve readability and avoid code duplication.

Add a sequence number to each rule during rule sort. Fix #16076

The 'for' loop first checks if the rule at that iteration exists and
breaks if not. When the rules array contains a gap, the 'for' loop breaks
early and potentially misses additional rules that need to be sorted. Fix...

Handle a null return from pfSense_get_ifaddrs()

- Update the usage of get_interface_addresses() to handle a null return
- Update the usage of get_interface_mac() to handle an empty string
- Remove unused argument from interface_qinq2_configure()

Do not use the lua script on armv7, it is not supported.

Fixes the warnings at boot.

Bump up the year in the Copyright notice.

Add config upgrade support for new system aliases

Send picture widget image inline. Fixes #15767

Remove deprecated function use of xml_parser_free()

As of PHP 8.0.0, the function has no effect and is no longer needed.

process_alias_urltable(): create RAM_Disk_Store if needed. Fixes #15830

Several rcscripts using /cf/conf/RAM_Disk_Store will test and create this
directory if needed, however the process_alias_urltable() function invoked by
saveAlias() does not do this before attempting to write an archive to that...

Merge pull request #4704 from GChuf/removePragmaHeader

Remove unnecessary config_init_path() calls

Remove deprecated pragma header. Implement #15781

This removes adding pragma header which is now deprecated. Cache control is used instead.

Introduce function to detect and resolve conflicting aliase names

Expose system aliases to the GUI. Implement #1979

Clean up diffs

Move to CURLINFO_RESPONSE_CODE

As of cURL 7.10.8, CURLINFO_HTTP_CODE is a legacy alias of
CURLINFO_RESPONSE_CODE.

Introduce explicit config file read/write functions

URL encode HTTP_PROXY username and password. Fix #15565

Also enclose the fields with CDATA in config

Default to an empty array for functions expecting a countable value

Do this for foreach() and count().

Update all direct config access with accessor functions

Fix PHP linter issues

Fix an radvd service status edge case. Fixes #14936

Fix FW log multiple instance bug. Fixes #15339

Move the mdiff function into pfsense-utils.inc and also rename it so its
purpose is more clear.

Ensure loader.conf.lua is referenced. Fixes #15288

Fix some SFP module info fields. Fixes #15112

Text format changed slightly in ifconfig, so regex patterns had to be
changed to match

Consolidate is_url_hostname_resolvable() into resolve_address()

is_url_hostname_resolvable() used gethostbyname() which only
supports getting IPv4 records. This change makes resolve_address()
more flexible by accepting URLs and consumes the timeout code
from is_url_hostname_resolvable().

Update the years in the Copyright notice.

Update misleading function names. Fix #11566

Generate a system alias for PPPoE clients. Fix #14885

Remove outddated DHCPv6 test. Fixes #14884

Use the interface name for the reserved system alias suffix. Fix #14866

Introduce Kea DHCP

Align pfSense and OS locale names. Fixes #13776

Automatically configure the state hash tables size. Implement #14750

Intel Speed Shift support. Implements #14047

GUI controls only appear on hardware that supports Speed Shift.

Option to require if select before showing fw rules. Implements #13124

Originally submitted in PR 4582 by Chrisc-c-c at GitHub

Support specialnets in outbound NAT source/destination. Implement #3288
Also, show an asterisk in place of 'Any' for the source,
and avoid generating oNAT rules with invalid aliases.

Extend alias and VIP checks to outbound NAT

Add safety belts around memory size checks. Fixes #14648

• Add safety checks when fetching the memory size
• Also ensure the state table size is sane if the memory check fails

Use pf macros for <interface> subnets. Fix #6799
This changes the behavior of '<if> subnet' in generated firewall/NAT
rules. The previous behavior expands '<if> subnet' to a list of subnets
in PHP then generates filter rules with that list. Instead, create a pf...

Read pkg plugins more carefully. Fixes #14474

Disable CARP until services have started and before shutdown/reboot. Fixes #2218

CARP has historically been enabled as part of interface bringup and sync setup
fairly early in rc.bootup. This change intentionally shuts down CARP from
interface bringup all the way until services have been started to ensure that a...

Fix radvd service check. Fixes #14136

Add safety belts to PPP historical uptime calculation. Fixes #14117

Fix PHP errors from empty DHCP configs. Fixes #13983

Update copyright years to include 2023

Rector direct global g accesses

Fix regression in URL alias parsing. Fixes #13685

Spelling fixes. Fix #13357

• Incorrect input validation for `dhcp6c` `keyinfo expire` `forever` keyword in `interfaces.inc`.
• Incorrect input validation for associated rule's `Source Port` in `firewall_rules_edit.php`.
• Incorrect `voucher*.` file lock reference in `status_captiveportal_voucher_rolls.php`....

While here, reduce a few differences with Plus.

Update the loader.conf filter list.

This remove the duplicate entries for the settings added by pfSense.

Sync with the current Plus defaults.

Fix setting EFI boot console type. Issue #13080

For some reason the EFI loader is forcing boot_serial=YES when it is not
set in the loader configuration. To work around this, we must set it to
NO explicitly. The loader menu displays the wrong type still but it...

Fix primary console handling for EFI. Fixes #13080

Tested and working for both BIOS and EFI systems.

Use certificate trust store when verifying alias URLs. Fix #13367

Clean up warnings and errors in pfsense-utils.inc. #13446

• Remove a number of unreferenced variables
• Fix type of output capture variables for exec() calls from string to array
• WakeOnLan() * Fix type warnings calling socket_last_error for a false value socket...

Replace direct $config accesses in pfsense-utils.inc. #13446

Some direct accesses remain due their tight coupling to the management of the
configuration as a whole or are deferred due to their complexity:

• update_alias_names_upon_change()
• reload_interfaces_sync()...

Correct required param after optional param syntax errors

Skip URL tables with invalid names. Fixes #13425

Omit VIPs from interface address selection. Fixes #11545

Add function get_interface_addresses() which wraps around pfSense_get_ifaddrs() and
filters VIPs before selecting an interface v4 and v6 address.

Replace all use of pfSense_get_interface_addresses() with get_interface_addresses()

Convert IPv6 with IPv4 mapping to hex on prefix merge. Fixes #12440

Status Interfaces SPF details fix. Feature #8861

Show SFP module details on status_interfaces.php. Implements #8861

Do not remove net.link.ifqmaxlen from /boot/loader.conf.local. Fixes #12862

Update Static Route and OpenVPN alias name when the alias is renamed. Fixes #12727

Update the Copyright year of the files owned by Rubicon/Netgate.

Mute kernel messages on dummynet and thermal hardware modules load. Fixes #12454

Do not check subnet overlapping on 6RD interfaces. Fixes #12371

Remove unused function from pfsense-utils.inc. Todo #12406

Rename the Netgate devices.

XG-15xx -> 15xx
SG-5100 -> Netgate-5100

Allow to use nested URL alias in URL alias. Fixes #11863

Display Gateway IPv6 on status_interfaces.php regardless of Gateway IPv4 status. Fixes #12253

Set net.link.ifqmaxlen

This removes the need for a kernel patch which overrules IFQ_MAXLEN.

Always apply IPsec changes on HA secondary. Fixes #12075

Remove duplicate comconsole_port from loader.conf. Fixes #11653

Use set_curlproxy() function for cURL proxy configuration. Issue #11476

Xen console support. Feature #11402

Mute console before load crypto modules

Update the Copyright year.

A subsequent commit will deal with .po's.

Add product_label global variable

Introduce product_label global variable, by default with same value of
product_name. The idea is to make it easier for rebranded products to
change the name on all visual texts while internal structures are
preserved.

While here, remove deprecated $g['platform'] and also replace places...

Remove use of deprecated $g['platform']

Create poesX interfaces for PPPoE server. Issue #11034

Fix #10997: Retire m0n0wall config compatibility

Nested alias IDN fix. Issue #10968

Disable "Hardware Checksum Offloading" if ena(4) is detected. Implements #10723

Merge pull request #4385 from vktg/nohwchksumvm

System DNS Server changes. Implements #10931

There are significant changes here, but ultimately should be a smooth
transition. See https://redmine.pfsense.org/issues/10931 for more
details.

Disable "Hardware Checksum Offloading" if VTNET is detected. Implements #10723

Handle net.pf.request_maxcount via sysctl. Fixes #10861

Toggle VLAN_HWTSO when TSO is toggled in the GUI. Fixes #10836

Improved ACB config update by requiring only a single visit to the system

Correct CRON functionality and move to pfsense-utils.inc

'hw.usb.no_pf' is deprecated now.

Fix the repeated entries in loader.conf.

Ticket: #9647

Fix #9647.

Instead of forcing the defaults in the OS driver (introducing yet another
change), set the default to enable ALTQ support for hnX NICs in loader.conf.

Ticket: #9647

Do not perform RADIUS accounting/prune operations when node is in backup mode
Implement Redmine #97

Show default Adaptive Start/End values. Issue #7362