pfSense

Relocate newsyslog cron install task. Fixes #9730

Don't add .log to filename twice. Issue #8350

Change logging to plain text, deprecate clog. Issue #8350

Fix copyright message years to reflect BSDP -> ESF -> Netgate

bump config
Implement redmine #5644

Fix #8821: Deprecate Growl Notifications

Growl appears to be abandoned upstream. No updates in ~5 years, and few if
any users on pfSense

Deprecate the built-in relayd Load Balancer. Closes #9386

It is not available on FreeBSD 12 with OpenSSL 1.1.x.

Users can migrate to the HAProxy package.

Remove unnecessary expiretable cron jobs for ssh/gui lockout. Issue #9223

Update copyright notices to 2019. Happy New Year

Ensure IPsec P1 entries have a 'protocol' value. Fixes #9207

Fix #9121: Initialize arrays to prevent PHP 7 errors

Skip empty IPsec P1 during upgrade to 17.5. Fixes #9083

ssh settings upgrade fixes

ssh settings alignment. Fixes #8974

Remove redundant settings stored in the wrong place
Store all ssh settings in the same place
Initialize this array before use

Fix a PHP error when upgrading gateways

Fix #7694: Replace sshlockout_pf by sshguard

Upgrade config : Move captiveportal authentication to use user manager

FEC LAGG is deprecated, remove from GUI and change on upgrade. Fixes #8734

Create cron array if it doesn't exist on upgrade.

(cherry picked from commit aabd093849d61eacdf7bdcb584c812638b3732a0)

Integrate ACB into core. Add config migration.

routing, add option 'automatic' for gateway selection, and allow manual ordering of gateways

Make GUI/config values for gateway groups match what the backend code expects. Fixes #8586

Improve default gateway upgrade code. Ticket #8504

Gateways, allow for configuring a gatewaygroup as the default gateway.
-Avoid changing routes by just visiting a webgui page.
-Avoid change some unneeded events when nothing changed.

Captive portal: add option to choose whether to use the bandwidth limits retrieved from RADIUS or not

Automatically upgrade config to preserve old RADIUS bandwidth limits behaviour on existing installations.

Fix #8417

- Changed default value for Maximum Table Entries to 400000 in order to
make bogonsv6 to work
- Added code to upgrade config and set default value on systems where
it's not defined
- Changed default config to match new default and version 18.0...

Bump up the XML config version.

Revise picture widget to store image on file system, not in XML config

Add a placeholder for a factory update.

Correct variable reference for IGMP proxy enable in upgrade code. Fixes #8356

igmp, Add option to disable the igmp service

Fix #7469

• Rename local_sync_accounts() to local_reset_accounts() and keep it
  only being used /etc/rc.bootup
• Reimplement local_sync_accounts() receiving a list of users and
  groups to be added and/or deleted
• Remove call to filter_configure xmlrpc method from...

Fix config version # arrising from merging older PR

Merge pull request #3711 from PiBa-NL/20170427-ipsec-multiple-P1-algo

upgrade_config.inc: Remove all restore_rrd() calls

Commit 0869605131ba3e5d7e502af7a799e54f27d2e7f6 removed the
restore_rrd() function. To avoid errors when restoring older configs
remove all callers to it.

Bug: https://redmine.pfsense.org/issues/8231
Signed-off-by: Alistair Francis <alistair@alistair23.me>

Fix foreach error on hosts that have no dyndns entries.

Update the Copyright notice for pfSense.

Delete keytype field from config, remove unnecessary file cleanup.

Remove old dnssec-keygen style files during upgrade

ipsec, allow configuration of multiple ike phase1 encryption ciphers (algo/bits/hash/dh)
this is useful for mobile users that need to connect with different operating systems. This way there is no need to find a single commonly supported weaker cipher.

Fix #7981: Convert PPP ports interface names to new VLAN notation using dots

Fix the QinQ support.

Bring the QinQ support to the VLAN dotted format.

To avoid breaks third party software (such as dhcpd), we silently ignore the interfaces with names bigger than the maximum size in FreeBSD.

Ticket #7942

Change the VLAN inteface names to use the 'dotted' format of FreeBSD, which is shorter and helps to keep the interface name smaller than the limit (16).

This fixes the 4 digit VLAN issues when the NIC name is 6 bytes long.

Ticket #294

Bump config revision, fix comment. Ticket #7809

Setup upgrade code for wireless interfaces to the new format needed for 2.4, and switch rc.bootup so the config upgrade happens before a mismatch test, otherwise we can't fix this type of situation. Fixes #7809

Fix indent/space

Add a function to be called every time convert_config() runs

Unset workaround used to set cronjob on 2.3.x

Add a protection to prevent ending up with duplicate crontab entry

Make sure pkg metadata is updated at least once daily. It will be used to speedup GUI parts related to pkg update

Revise upgrade script to insert support widget at the top of column 2
Add old support widget to obsolete files list

Update config version

Fix upgrade 166 to 167 script

Force the support widget to show when a user upgrades to this version

Fix OpenVPN Auth Digest Algorithm selection so it does not use duplicate/alias names in the list, and fix existing entries on upgrade so they use the actual digest name and not an alias.

Merge pull request #3556 from doktornotor/patch-3

Add upgrade code to work around broken shaper rules from old wizard code. Ticket #7434

Refactor get_configured_interface_list remove unused parameter

Upgrade widget settings for multiple copies of widgets

Upgrade code to convert old Traffic Graphs Widget settings

Add GUI components for loading cryptodev as a module, and upgrade code so users have it on upgrade since it was in-kernel before. Fixes #5976
Having both aesni and cryptodev loaded at the same time appears to only negatively impact performance, no gains, so at the moment there is no need to load them at the same time.

Fix net.inet.ip.random_id tunable description (Bug #6087)

Add a parameter to install_cron_job to stop it from performing its own write_config. Adjust base system calls to match. Ticket #7146

Packages may still need the old behavior but need tested individually. Once all function calls are confirmed to work without the write, the write_config parameter and call can be removed from this function for good.

RAM Disk Management - Config Upgrade

Update OpenVPN protocol preferences to match the new behavior of OpenVPN 2.4. Fixes #7062

Fix unset glxsb

This bit of upgrade_config code needs a global reference to $config

Store Dynamic DNS passwords in Base64 to protect special characters. Fixes #6688

Convert CloudFlare and GratisDNS dynamic DNS over to split hostname and domain name fields, like Namecheap. Otherwise they could both break with subdomains or international TLDs with many parts. Fixes #6778

Deprecate nanobsd platform and remove all conditionals that uses it

Remove all calls to conf_mount_r* functions

Move copyright from ESF to Netgate

Remove references to glxsb as it is not relevant to current supported platforms. Fixes #6755

Code style and comments

No functional change - just making style consistent

Move to Apache License 2.0

Review license / copyright on all files (1st round)

Add upgrade code to clean up the old GRE/GIF flags that are no longer used. Ticket #6586 and Ticket #6587

Always use require_once

The usage of require() and require_once() throughout the system is
inconsistent, and "bugs" come up now and then when the order of
"requires" is a bit different and some require() happens after the
include file is already included/required....

Tweak upgrade - Remove unused code and document changes better

This will ensure a smooth upgrade for those running config 15.4 to any next version.

Revert "Add config upgrade code to update package names. Ticket #6118"

This reverts commit 297ace668e4a4ffbf1fb1581e7c765e2ed158e29.

Update L7 config upgrade code removal. Only file notice if it was actually in use, otherwise it just confuses people.

Add config upgrade code to update package names. Ticket #6118

Don't foreach unless it's an array. Ticket #6142

Similar thing to https://github.com/pfsense/pfsense/commit/13dab3538fe8b6c1688142c89a017520ad0aaac6 should be done here in upgrade_130_to_131()

Add config upgrade code for CARP IPs on gateway groups, GRE and gif. Ticket #6222

Don't foreach unless it's an array. Ticket #6142

Update VIPs CARP parent on upgrade. Ticket #6164

Periodic RRD & DHCP Leases RAM Disk Backup

Remove these cron jobs on full install if not using ramdisk.

Add checks in case there are dpinger param problems

in 2.3 installations that were upgraded from 2.2.* when the apinger to
dpinger params conversion code in upgrade_130_to_131() was not so good.

Fix #6142 validate and adjust dpinger params on upgrade

1) The previous "down" value was being converted to msec and put into
"loss_interval". It should go into "time_period".
2) loss_interval must always be at least latencyhigh - make it so if
latencyhigh is big....

Correct OpenVPN upgrade code for topology subnet.

Includes - Remove Personalizations

Remove "you" personalizations.

Bring back rainterface, add config upgrade to convert to new _vip format. Ticket #6043

fix style

Rather than renaming groups with spaces, mark their scope as remote. Ticket #6012

Add brackets for clarity

Add some extra brackets for clarity, rather than relying on the operator
precedence rules. IMHO this makes it more readable, and no need for the
reader to wonder if anything might go wrong with the operator
precedence.

Set the ALTQ root queue bandwidth.

Whenever possible set it to 1Gb, if the sum of child queues if higher than 1Gb, set it the correct value so we do not break any existing setup.

Ticket #5721

If there was a group with a space, delete all the user-defined groups before hitting local_sync_accounts so pw doesn't get hung up. Ticket #6012

Save changes to config in 148 config upgrade. Ticket #6012

Ensure replacement group name is unique

Fixed #6012
Config upgrade function replaces space with underscore in group names

Add the upgrade code for OpenBGPd and Quagga OSPF packages.

Ticket #5884