pfSense

Suppress errors when opening router file. Fixes #11314

Attempt to use peer wg address if possible for gateway. Implements #11300

Refine Unbound auto ACL generation. Implements #11309

Rework WireGuard tonatsubnets/unbound ACL entries. Fixes #11304

Init var before use. Fixes #11307

Allowe peer port < 512

Allowe listen port < 512

Use correct default MTU for WireGuard. Fixes #11291

Add WireGuard to easyrule

Exclude wg(4) from auto outbound NAT. Fixes #11289

Assume default WG port if empty. Fixes #11286

Revert "Add wg to ALTQ list. Implements #11280"

Unstable. See #11285

This reverts commit 4a49b0d9b182c76f658201124c43278a65542c98.

Fix WireGuard case

Ticket #5186: Enable Wireguard firewall rules tab

Add wg to ALTQ list. Implements #11280

Show WireGuard interface description during assignment. Issue #11277

WireGuard assignment/disable behavior improvements. NG 5518

• Do not allow a WireGuard instance to be removed while assigned
• Do not allow a WireGuard instance to be disabled while assigned
• Destroy the WireGuard interface when disabled

Add ^wg to list of interface mimatch types

Add OS routes using WireGuard Peer AllowedIPs. Part of NG 5437

Remove WireGuard peernwks field which is not needed. Part of NG 5437

Fix some bad WireGuard capitalization

Automatic WireGuard interface gateways. Part of NG 5437

Retire VXLAN support

VXLAN support is not enterprise ready and after internal discussion we
decided we are not able to support it. We are committed to release
features only when they are ready.

Change XML listtag entry for peer to wgpeer for issue #5186

Fix copyright notices

Remove commented out code

Spell WireGuard properly

Add igc to ALTQ list. Issue NG 5185

Preserve wireguard address after interface assign

Improve code readability

Fixed #5486 by making peer endpoint and port optional

Added new Wireguard config fields peernwks and peerwgaddr per #5437

wg: Configure static routes

When configuring a wg tunnel, update static routes associated with that
interface

Update copyright year

Ticket #5186: Re-create config files during boot

Ticket #5186: Implement is_wg_enabled()

Ticket #5186: Fix comment

#5186 - Revised peer configuration to use 'wgpeer' rather than 'peer'

wg: Do not check assigned interface (Ticket #5186)

When saving changes on wireguard, do not check address conflict on
interface assigned to that tunnel, otherwise, it will not allow user to
save any modification

wg: Use a more generic function to detect IP address

wg: Remove extra spaces

wg: isset() just before is_array() is redundant

wg: unlink_if_exists() can deal with glob matches

wg: Style fixes

wg: Fix gettext() calls

wg: Simplify logic

Fix Wireguard tunnel save with zero peers

Completed revision of wg config edit fors

Added allowed ip validation

#5186 fixed validation issues as requested

#5186 - Provide 'generate PSK' butoon. Some fixes to validation

#5186 Added keepalive units, clarified Address text, added incremented port placeholder, minor validation changes

Added user input validation for Wireguard config. Marked certain values as required

Add the tunnel address to WG interface.

Wireguard support is now functional.

Fix the wireguard configuration file, start tunnels at boot.

Add the Endpoint port, fix the configuration permissions.

Remove the WG tunnel when a tunnel is removed.

Added support for wireguard pre-shared keys

Optionally generate keys in JSON

Added ability to generate a new public/private key pair for hte interface. Public key is displayed on the tunnel edit form

Fixes the saving of peers settings in GUI.

The previous commits had a few mistakes which were fixed in here.

Fixes the WG configuration path and creation.

The GUI is now working as expected to add, edit and save the WG tunnel entries.

Rename the Wireguard peers entries in configuration XML to 'peer'.

'peer' is already properly handled by the XML routines as a list entry, which
is not the case of 'peers'.

This fixes the saving of peers settings in GUI.

Fix the file name in header.

Remove the mention from m0n0wall, this code was created for pfSense.

Moved wg.inc to proper location

Removed peer file. No longer needed

Revised tunnel table, added firewall key display, added key generation code

Add tunnel name (wg?) to tunnel so that tunnels can be deleted without renumbering the remaining tunnels

Completed tunnel delete logic

Completed new tunnel functionality when no tunnels exist in hte config

Completed config file update

Prototyped main wireguard UI page

Accommodate PersistentKeepalive and PresharedKey peer options

<peer> => <peers>

Outlines config.xml => wireguard config files utility

OpenVPN genkey secret command fix. Issue #11249

Static DHCP mappings DDNS tabs fix. Issue #10224

DHCPD ARPA zone trailing dot. Fixes #11224

IPsec P1/P2 expiration and replacement refresh. Implements #11219

Identify minnowboard with BIOS 1.0

Intel has changed MBT identification

Obtained from: https://github.com/pfsense/pfsense/pull/4495

Merge pull request #4493 from bmhughes/add-watchfrr-to-routing-log

Update the Copyright year.

A subsequent commit will deal with .po's.

Improve handling of SMTP send errors. Fixes #11063

Add watchfrr to routing log

Fix diag_dump_states.inc filename. Fixes #11197

Merge pull request #4489 from lepurt/master

Merge pull request #4492 from Augustin-FL/patch-1

Correct DPD syntax and values. Fixes #11196

IPsec P2 life_time changes. May help with issue #10176

• We currently only set life_time which isn't ideal
• Swanctl format wants rekey_time set, defaults to 1h (3600)
• Many users set P2 lifetime to 3600
• With rekey_time and life_time equal, rand_time is 0, so both always...

Correct IPsec secrets section ID type handling. Fixes #11193

Revise JSON data format when generating a list of states

Moved diag_dump_states logic to an include file for clarity

Revise diag_arp.php moving control lgic to an include file

Avoid flooding the logs

Domeneshop DynDNS correct return code check. Fixes #11146

Secondary DDNS server entry for static DHCP mappings. Issue #10224

Namecheap DDNS error code fix. Issue #5308

Allow wildcard DNS record of type A in DynDNS client for DNS provider Gandi. Ticket #11159.

Add product_label global variable

Introduce product_label global variable, by default with same value of
product_name. The idea is to make it easier for rebranded products to
change the name on all visual texts while internal structures are
preserved.

While here, remove deprecated $g['platform'] and also replace places...

Remove use of deprecated $g['platform']

Remove (harmless) double / in file path

Fixed #11144 by verifying correct generation of userkey

Pass correct parameter to create a new VXLAN interface.