pfSense

Replace some direct config accesses in util.inc. Fixes #13640

Prevent array/config_get_path() from overriding 0 values

Change the semantics of array_get_path() and config_get_path() so that only
empty strings at a path are overridden by $default if non-null, so that
legitimate 0 values set in the config are not overridden as empty() returns true...

Fix array_get_path() not returning $default for null-like values. #13446

In array_get_path(), a $default provided that is not null is intended to invoke
alternate behavior where if the path exists and is empty, $default should be
returned. This requires not identical compare as opposed to a not equal compare,...

Make *_get_path() return $default for empty values. Issue #13446.

When $default is non-null and the path resolves to an empty element, return
$default instead of the value. This allows callers to intentionally ignore empty
values by specifying $default and simplifies the expressions needed to determine...

Update external http links

Fix array/config path functions to handle key 0 correctly. Issue #13446

Make array/config path funcs handle empty path elements. #13446

Introduce array_init_path, refactor init_config_arr, and fix potential race. For #13446

Avoid creating empty ciscoavpair rules files. Fix #13243

Replace all direct $config accesses in util.inc. #13446

Make array/config_set_path() create intermediary paths

Restore scope to address sent to Net_IPv6::compress now that it is fixed

Add config/array_del_path helper function and associated test

In get_ll_scope(), remove intermediate $scope variable

Fix unused and undefined variable warnings in util.inc

Fix multilevel array access outside config in util.inc

• Add generic array get/set path and path_exists functions to util.inc
• Wrap these more generic versions with the confg_* equivalents

Fix text_to_compressed_ipv6() to omit %ifname from v6 addresses

Prior to this, v6 addresses would be considered by Net_IPv6::compress() to have
an ipv4 part consisting of all text from the address from the final colon
separator, and try to treat it as such. This is now problematic in php 8 as when...

Add missing require of interfaces.inc to util.inc

Use dnctl(8) to control limiter rules. Feature #12579

Allow to assign L2TP VPN server interface. Issue #13099

Captive Portal ipfw->pf transition. Todo #13100

USB NIC handling improvements. Fixes #12606 #9393

Allow auto prefix with manual prefix-length in NPT. Implements #13070

Reject multiple IPv6 compressions. Fixes #13069

Having :: in an IPv6 address more than once is not valid, even if it
expands to an unambiguous result.

Clear aliases,filter,shaper and natconf flags on filter_configure(). Fixes #12678

Delete static default route if default gateway is NONE. Fixes #12536 #11692

Initialize $cmp with an empty array. Fixes #12749

Display interface interrupts. Fixes #12735

Update the Copyright year of the files owned by Rubicon/Netgate.

SNMP IPv6 support. Implements #12325

Regex cleanup should also kill {}. Fixes #12257

It's not used often (and less in the GUI) and can be a source of
problems with large numbers of repetitions even outside of grouped
expressions.

Regex cleanup change. Fixes #12257

Rather than attempting to cleanup group repetition, just discard the
unwanted pattern.

VLAN/QinQ-only interface mismatch detection. Fixes #12170

More route display changes. Fixes #12257

• Move escape_filter_regex() from syslog.inc to util.inc since it will
  be used by things other than syslog.
• Add some basic regex sanity and consistency check functions
• Cleanup diag_routes.php route filter before use...

Fix is_hostname() regression. Issue #12245

Set $retries=10 in resolve_retry() to improve resolution timeout. Fixes #12196

Portal Redir URL scheme check. Fixes #11843

• Add support to is_URL() to check that the scheme only matches HTTP or
  HTTPS
• Use the new is_URL() feature in Captive Portal redirect URL tests

Fixes Redmine #12111

Skip empty URLTable (Ports) aliases. Fixes #4893

Changes requested

- if formatting
- removing temporary variable

Cisco-AVPair + Framed-IP-Address: correcting clientip

Workaround to substitute Framed-IP-Address value in Cisco-AVPair ACL's where {clientip} is used

Merge pull request #4522 from fl0l0u/patch-1

Interpret numeric-only addresses as invalid in is_hostname(). Fixes #12000

Cisco-AVPair ACL rule: port range operator change

Previous operator ( `><` ) prevented inserting port range with min/max port.
Ex.
`ip:inacl#1=permit tcp host {clientip} host 1.1.1.1 range 10000 65535`
produced the following invalid rule:
`pass in quick on ovpns1 inet proto tcp from 192.168.1.2 to 1.1.1.1 port 9999 >< 65536`

Correctly change default IPv6 route MTU if both IPv4/IPv6 gateways are configured on interface. Fixes #11855

Merge branch 'viktor/pfSense-nat11ipsecfix'

1:1 NAT IPsec/OpenVPN/L2TP/PPPoE and interface groups input validation fix. Issue #11751

IPv4 link-local (169.254.x.x) gateway fix. Issue #11806

Fix missing ';'

Move protocol setup outside of foreach. It only needs to happen once

Revise resolve_retry timing/action to avoid long delays in ipsec status results

OpenVPN Cisco AVPair {clientipv6} template. Implements #11596

route_add_or_change() add linklocal gateway scope. Fixes #11713

Remove WireGuard support

Out of an abundance of caution while we investigate the claims about
WireGuard in public, we need to remove it from pfSense Plus and CE in
order to shield customers from potential risk.

Reject IPv4-mapped IPv6 addresses on Mobile IPsec DNS server input validation. Fixes #11446

Supress route no found error. Issue #11475

route_del() optimization. Issue #11475

Static IPv6 /128 routes fix. Issue #11594

Revise firewall_nat_edit for MVC

route_get() optimization. Fixes #11475

Cisco AVPair parse {clientip}. Fixes #11561

Fixed bug parsing netmask cisco acl

Non local gateways fix. Issue #11433

Style fixes

Refine Unbound auto ACL generation. Implements #11309

Add ^wg to list of interface mimatch types

Retire VXLAN support

VXLAN support is not enterprise ready and after internal discussion we
decided we are not able to support it. We are committed to release
features only when they are ready.

Update the Copyright year.

A subsequent commit will deal with .po's.

Hide poesX-Y from interface list. Issue #11034

Create poesX interfaces for PPPoE server. Issue #11034

Different interface name for L2TP VPN. Fixes #11006

Ticket #10955: Fix "default" case

Make a string check to cover "default" gateway

Allow to select virtual interfaces in CLI interface assignment. Fixes #10947

Nested alias IDN fix. Issue #10968

route_get() improments. Fixes #10955

Merge pull request #4464 from vktg/ovpnipsecsameradiusparser

Fix #10898

Fix vxlan interfaces configuration at boot

Same RADIUS ACL parser for IPsec/OpenVPN. Implements #10469

Fix #10925: Check if $rtable is empty

Rework route functions

- Created route_table() that returns an array containing all items from
route table. It uses --libxo to get a json object
- Created route_get() that return an array with route items to desired
target
- Created route_get_default() to get current default route for inet or...

Style: break long line

Merge pull request #4421 from vktg/vxlangui

VXLAN configuration WebGUI. Feature #6240

Fix some illegal string offset errors. Issue #10659

Move build_vip_list() function to util.inc. Fix var ambiguity

is_subnet() RFC4291 par 2.2.2 format support. Fixes #10694

Do not show stf(6RD/6to4) interface as parent physical. Issue #10626

is_proccess_running empty proc fix. Issue #10540

Merge pull request #4262 from vktg/lagginfo

Style fixes

Merge pull request #4141 from vktg/set6routesmtu

Show LAGG Members info. Issue #9187

DHCP Domain trailing dot validation. Issue #8054

Suppress dns_get_record() errors. Issue #9405

Merge pull request #4165 from vktg/resolve46

Merge pull request #4181 from vktg/iftopstatus

Add iftop support to status_graph.php. Issue #3334

IPsec IPv6 dynamic FQDN Remote Gateways, resolve_retry() IPv6 support. Issue #9405

set correct MTU for static and default IPv6 routes. Issue #6868

This is 2020. Issue #9245