pfSense

WireGuard interface friendly description. Fixes #11437

Allow to use OpenVPN provided DNS servers. Implements #11140

WPA Enterprise (PEAP/TLS/TTLS) client mode. Feature #2400

Fix a typo.

No functional changes.

Merge pull request #4500 from bitscher/master

Merge pull request #4487 from znerol-forks/feature/master/radvd-linklocal-vip

Don't add empty pools line. Fixes #11488

Fix child SA name generation. Fixes #11487

Fixed #5685 - Renaming alias does not update firewall rules containg that alias

Fixed #11464 by adding proxy configuration to web service calls

Merge branch 'master' into master

Add getVIPs() function for MVC

Revised firewall_virtual_ip_edit for MVC

firewall_virtual_ip refactored fro MVC

Fix filename in copyright message

Refactored system_advanced_misc for MVC

Non local gateways fix. Issue #11433

Delete static routes on gateway down. Fixes #11296

Remove unused L2TP VPN directory. Fixes #11299

Unbound ip6.arpa local-zone type. Fixes #11403

Set correct TCP MSS for IPv6. Fixes #11409

Allow to use host portion of IPv6 in firewall rules. Feature #6626

L2TP VPN MTU option. Feature #11406

Xen console support. Feature #11402

Display negotiated cipher on Status / OpenVPN page. Implements #7077

Mythic-Beasts.com DynDNS provider support. Implements #7842

RADIUS Advanced parameters. Feature #11211

Do not prefix FQDN IPsec IDs with @. Fixes #11442

Check that DHCP has gateway in interface_has_gateway(). Fixes #5135

Randomize ACB cron minutes. Implements #10811

RADVD set AdvRDNSSLifetime. Fixes #11105

Down disabled interfaces on boot. Fixes #11091

Update comments

Provide system_advanced_firewall.inc

Revised system_advanced_notificaions for MVC

Merged system_advanced_network for MVC

remove obsolete system_advanced.inc

Fix hnaltqenable setting

Split system_admin.inc into separate files per tab

Completed networking section, subject to testing

Add IPv6 support for Gandi LiveDNS dynamic DNS handler

• Simplify the use of the LiveDNS API by using another API call that
  handles both creating and updating for a given name and record type
  instead of the former two step operation that was fetching the whole...

Add input_errors to returned array

Revised system_advanced_notifications for MVC

Fix WireGuard add/next name behavior. Fixes #11407

• No need to set index when creating a new entry
• WireGuard interface name label was assuming array index=wg if name
  which was incorrect

Handle case where copyright file is downloaded but has a size of zero

Add option to set IPsec filtering mode. Implements #11395

User can choose between filtering enc (tunnel+VTI) or filtering on
assigned VTI interface tabs (VTI only, drops all tunnel mode traffic).
See https://redmine.pfsense.org/issues/11395 for details.

Fix Microsoft's idea of an apostropphe

Increment requested copyright version

Revise copyright modal to accommodate larger content

Detect Plus by product label

Rename Factory -> Plus

Revert "Refactor system_advanced_misc for MVC"

This reverts commit c33b0ab6c2fcd4c9786d1b5e7903c01fa1fafa7d.

Refactor system_advanced_misc for MVC

Typo

Add registered trdemark symbol where appropriate

Nested alias checking fix. Issue #11372

Return correct Track IPv6 address if >1 VIP on interface. Issue #5999

Remove what I suspect is a debug leftover

OpenVPN rmdir fix. Issue #11254

Style fixes

Captive Portal custom logo fix. Issue #11360

Refactored system_advanced_* pages for MVC

Issue #11340
Hide WireGuard interfaces on DHCP/DHCPv6 Relay pages,
Hide mediaopt field for WireGuard interfaces on interfaces.php page

Add brackets around IPv6 endpoint address. Issue #11338

Gateway Group Policy rule creation fix. Issue #11298

Delete all OpenVPN related files on instance deletion. Issue #11254

Mute console before load crypto modules

Fix WireGuard interface name assignment. Fixes #11323

Only set the name when it's empty/unset (e.g. when first created),
automatically determine the next available wg interface number.

WireGuard: Always derive public key. Issue #11322

If the user enters a different private key, using the supplied public
key would lead to a mismatch. So always derive the public key when saving.

WireGuard: Make pubkey read only, populate automatically. Fixes #11322

While here, add a link to copy the public key to the clipboard.

Improve WireGuard port validation. Fixes #11311

Suppress errors when opening router file. Fixes #11314

Attempt to use peer wg address if possible for gateway. Implements #11300

Refine Unbound auto ACL generation. Implements #11309

Rework WireGuard tonatsubnets/unbound ACL entries. Fixes #11304

Init var before use. Fixes #11307

Allowe peer port < 512

Allowe listen port < 512

Use correct default MTU for WireGuard. Fixes #11291

Add WireGuard to easyrule

Exclude wg(4) from auto outbound NAT. Fixes #11289

Assume default WG port if empty. Fixes #11286

Revert "Add wg to ALTQ list. Implements #11280"

Unstable. See #11285

This reverts commit 4a49b0d9b182c76f658201124c43278a65542c98.

Fix WireGuard case

Ticket #5186: Enable Wireguard firewall rules tab

Add wg to ALTQ list. Implements #11280

Show WireGuard interface description during assignment. Issue #11277

WireGuard assignment/disable behavior improvements. NG 5518

• Do not allow a WireGuard instance to be removed while assigned
• Do not allow a WireGuard instance to be disabled while assigned
• Destroy the WireGuard interface when disabled

Add ^wg to list of interface mimatch types

Add OS routes using WireGuard Peer AllowedIPs. Part of NG 5437

Remove WireGuard peernwks field which is not needed. Part of NG 5437

Fix some bad WireGuard capitalization

Automatic WireGuard interface gateways. Part of NG 5437

Retire VXLAN support

VXLAN support is not enterprise ready and after internal discussion we
decided we are not able to support it. We are committed to release
features only when they are ready.

Change XML listtag entry for peer to wgpeer for issue #5186

Fix copyright notices

Remove commented out code

Spell WireGuard properly

Add igc to ALTQ list. Issue NG 5185

Preserve wireguard address after interface assign