pfSense

Captive Portal ipfw->pf transition. Todo #13100

USB NIC handling improvements. Fixes #12606 #9393

Allow auto prefix with manual prefix-length in NPT. Implements #13070

Reject multiple IPv6 compressions. Fixes #13069

Having :: in an IPv6 address more than once is not valid, even if it
expands to an unambiguous result.

Clear aliases,filter,shaper and natconf flags on filter_configure(). Fixes #12678

Delete static default route if default gateway is NONE. Fixes #12536 #11692

Initialize $cmp with an empty array. Fixes #12749

Display interface interrupts. Fixes #12735

Update the Copyright year of the files owned by Rubicon/Netgate.

SNMP IPv6 support. Implements #12325

Regex cleanup should also kill {}. Fixes #12257

It's not used often (and less in the GUI) and can be a source of
problems with large numbers of repetitions even outside of grouped
expressions.

Regex cleanup change. Fixes #12257

Rather than attempting to cleanup group repetition, just discard the
unwanted pattern.

VLAN/QinQ-only interface mismatch detection. Fixes #12170

More route display changes. Fixes #12257

• Move escape_filter_regex() from syslog.inc to util.inc since it will
  be used by things other than syslog.
• Add some basic regex sanity and consistency check functions
• Cleanup diag_routes.php route filter before use...

Fix is_hostname() regression. Issue #12245

Set $retries=10 in resolve_retry() to improve resolution timeout. Fixes #12196

Portal Redir URL scheme check. Fixes #11843

• Add support to is_URL() to check that the scheme only matches HTTP or
  HTTPS
• Use the new is_URL() feature in Captive Portal redirect URL tests

Fixes Redmine #12111

Skip empty URLTable (Ports) aliases. Fixes #4893

Changes requested

- if formatting
- removing temporary variable

Cisco-AVPair + Framed-IP-Address: correcting clientip

Workaround to substitute Framed-IP-Address value in Cisco-AVPair ACL's where {clientip} is used

Merge pull request #4522 from fl0l0u/patch-1

Interpret numeric-only addresses as invalid in is_hostname(). Fixes #12000

Cisco-AVPair ACL rule: port range operator change

Previous operator ( `><` ) prevented inserting port range with min/max port.
Ex.
`ip:inacl#1=permit tcp host {clientip} host 1.1.1.1 range 10000 65535`
produced the following invalid rule:
`pass in quick on ovpns1 inet proto tcp from 192.168.1.2 to 1.1.1.1 port 9999 >< 65536`

Correctly change default IPv6 route MTU if both IPv4/IPv6 gateways are configured on interface. Fixes #11855

Merge branch 'viktor/pfSense-nat11ipsecfix'

1:1 NAT IPsec/OpenVPN/L2TP/PPPoE and interface groups input validation fix. Issue #11751

IPv4 link-local (169.254.x.x) gateway fix. Issue #11806

Fix missing ';'

Move protocol setup outside of foreach. It only needs to happen once

Revise resolve_retry timing/action to avoid long delays in ipsec status results

OpenVPN Cisco AVPair {clientipv6} template. Implements #11596

route_add_or_change() add linklocal gateway scope. Fixes #11713

Remove WireGuard support

Out of an abundance of caution while we investigate the claims about
WireGuard in public, we need to remove it from pfSense Plus and CE in
order to shield customers from potential risk.

Reject IPv4-mapped IPv6 addresses on Mobile IPsec DNS server input validation. Fixes #11446

Supress route no found error. Issue #11475

route_del() optimization. Issue #11475

Static IPv6 /128 routes fix. Issue #11594

Revise firewall_nat_edit for MVC

route_get() optimization. Fixes #11475

Cisco AVPair parse {clientip}. Fixes #11561

Fixed bug parsing netmask cisco acl

Non local gateways fix. Issue #11433

Style fixes

Refine Unbound auto ACL generation. Implements #11309

Add ^wg to list of interface mimatch types

Retire VXLAN support

VXLAN support is not enterprise ready and after internal discussion we
decided we are not able to support it. We are committed to release
features only when they are ready.

Update the Copyright year.

A subsequent commit will deal with .po's.

Hide poesX-Y from interface list. Issue #11034

Create poesX interfaces for PPPoE server. Issue #11034

Different interface name for L2TP VPN. Fixes #11006

Ticket #10955: Fix "default" case

Make a string check to cover "default" gateway

Allow to select virtual interfaces in CLI interface assignment. Fixes #10947

Nested alias IDN fix. Issue #10968

route_get() improments. Fixes #10955

Merge pull request #4464 from vktg/ovpnipsecsameradiusparser

Fix #10898

Fix vxlan interfaces configuration at boot

Same RADIUS ACL parser for IPsec/OpenVPN. Implements #10469

Fix #10925: Check if $rtable is empty

Rework route functions

- Created route_table() that returns an array containing all items from
route table. It uses --libxo to get a json object
- Created route_get() that return an array with route items to desired
target
- Created route_get_default() to get current default route for inet or...

Style: break long line

Merge pull request #4421 from vktg/vxlangui

VXLAN configuration WebGUI. Feature #6240

Fix some illegal string offset errors. Issue #10659

Move build_vip_list() function to util.inc. Fix var ambiguity

is_subnet() RFC4291 par 2.2.2 format support. Fixes #10694

Do not show stf(6RD/6to4) interface as parent physical. Issue #10626

is_proccess_running empty proc fix. Issue #10540

Merge pull request #4262 from vktg/lagginfo

Style fixes

Merge pull request #4141 from vktg/set6routesmtu

Show LAGG Members info. Issue #9187

DHCP Domain trailing dot validation. Issue #8054

Suppress dns_get_record() errors. Issue #9405

Merge pull request #4165 from vktg/resolve46

Merge pull request #4181 from vktg/iftopstatus

Add iftop support to status_graph.php. Issue #3334

IPsec IPv6 dynamic FQDN Remote Gateways, resolve_retry() IPv6 support. Issue #9405

set correct MTU for static and default IPv6 routes. Issue #6868

This is 2020. Issue #9245

Fix #7304: Add OMAPI to the DHCP Server settings

Supports setting a port and setting or generating a key. Service is
enabled when settings are defined. Validation logic added on save to
verify port is valid and not in use as well as that a key is defined or...

Image upload validation improvements. Fixes #9804

• Make functions for validating images against a pre-defined list of
  approved types
• Change the picture widget to use these functions
• Add validation for uploaded Captive Portal logo/background images

Fix copyright message years to reflect BSDP -> ESF -> Netgate

Move dhcpd_date_adjust_gmt() to util.inc

Move array_remove_duplicate() to util.inc

Test modules path before scanning. Fixes #9400

Generate hints for the kernel loader.

Update copyright notices to 2019. Happy New Year

Fix #9121: Initialize arrays to prevent PHP 7 errors

Merge pull request #3987 from PiBa-NL/20180920-apinger-wait-for-terminate

Show nvme controllers in SMART list. Fixes #9042

Revert "Show nvme devices in SMART disk list. Fixes #9042"

This reverts commit bdb6021f79f222b2c7d732436800e96cb34ea973.

Show nvme devices in SMART disk list. Fixes #9042

gateway monitoring, wait for apinger to terminate or remove its pid file when restarting it.

outbound-nat, make sure rules generated with outbound-nat rules are valid also on interfaces with mixed ipv4/ipv6 address environments

Fix PHP7 array issue in array_merge_recursive_unique()

Please welcome routed IPsec using if_ipsec VTI interfaces. Implements #8544

To use, create a P1/P2 and set P2 to VTI using local/remote network as tunnel endpoint addresses, then assign the interface (enable, but IP type = none), and use like any other interface for routing.

Merge pull request #3781 from PiBa-NL/20170712-defaultgateway-group

Validate if $array is an array

Gateways, allow for configuring a gatewaygroup as the default gateway.
-Avoid changing routes by just visiting a webgui page.
-Avoid change some unneeded events when nothing changed.