pfSense

If there was a group with a space, delete all the user-defined groups before hitting local_sync_accounts so pw doesn't get hung up. Ticket #6012

Merge pull request #2766 from jlduran/nginx-ssl-parameter-on-listen-directive

Check whether group exists using GID rather than name. Users can change the name, but not the GID. Check return code of pw for whether group exists. Ticket #6013

Save changes to config in 148 config upgrade. Ticket #6012

Ensure replacement group name is unique

Cleanup nginx configuration file

- Fix indentations
- Use the `ssl` parameter of the `listen` directive [1]
- Change the rewrite rule to use the recommended syntax [2]

[1]: http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl
[2]: http://nginx.org/en/docs/http/converting_rewrite_rules.html

Fixed #6012
Config upgrade function replaces space with underscore in group names

fix rrd error on boot

Seems to be a copy/paste error remain from when i initially created the dhcpd rrd thingy. Just noticed this now ;)

Mar 17 22:33:34 php-cgi rc.bootup: The command '/usr/bin/nice -n20 /usr/local/bin/rrdtool update /var/db/rrd/opt3-dhcpd.rrd N:U:U:U:U:U:U:U:U' returned exit code '1', the output was 'ERROR: /var/db/rrd/opt3-dhcpd.rrd: found extra data on update argument: U:U:U:U:U'

FIlebrowser package moved to vendor direcroty

Update file_exists check to full path as done in other files

Fix CSS paths missed by 9d1be24ef72c0c27fe7a297bf79ec5e4f552a390

remove extra slash

point css files to the new location

Remove workaround introduced in a2febf9a0. It reduces download timeout to 10s and break update from 2.2 to 2.3

Add an option to define extra env vars to pkg_call() and pkg_exec()

Use product name rather than smbios here.

Disable TLSv1.0 for web GUI's nginx instance. Ticket #5984

Don't try to put the file contents in place if file is empty. Ticket #5982

Merge RCC add, 1540 name fix, from 2_2 branch.

Respect globals_override.inc

More icon/button inconsistencies. Ticket #5965

log dhcpleases and dhcpleases6 to dhcpd.log. Ticket #5968

HTML Compliance - Login Form

Error: Duplicate attribute class.
<div class=alert alert-warning class=hidden id=no_cookies>Your browser must support cookies to login.</div>
Consolidate multiple class attributes.

Error: Attribute autocorrect not allowed on element input at this point....

When listing the network interfaces, print the link state and not the administrative state.

If you are assigning interfaces, remove the existing configuration from old interfaces if any.

This fixes the need for a reboot after changing interface assignment in console.

Remove duplicated text/javascript

After recreating the VLAN interface, run interface_configure on it if it's assigned and enabled. Ticket #5951

Update nginx gzip_types. Remove text/html since it's redundant, and add a few others. Particularly useful, json, since status_monitoring.php uses it. Reduces load time on slow connections to about 1/4th of what it is without gzip on json. Ticket #5498

Always set ignore_acquire_ts = yes. No need for that in any of our use cases, and it fixes problems like Ticket #4719.

Merge pull request #2703 from phil-davis/patch-2

Adjust default parameters to match changes in dpinger

pkg-utils typo in comment

Move NTP access restrictions to their own tab and add the ability to craft custom restrictions for arbitrary networks. Fixes #4463

Revert "Always send a -HUP to dhcp6c in interfaces_track6_configure for DHCP6 WAN types. Doing so isn't any more disruptive than what it's already doing, and that ensures track6 interfaces don't lose their IPv6 IPs. Ticket #5945"

This reverts commit 471b81f8f7b0a5fe22019aed955e5374e3411dbf.

Detect binary packages installed but not registered in the system and do it during boot

Add an option to get_pkg_info() that makes it do not try to update metadata

Remove get_pkg_id, last calls to it was removed

Remove Status -> RRD Graphs in favor of Status -> Monitoring. Ticket #5498

Remove the code block to "fake" DHCPv6 server, now that it's unnecessary. Ticket #3029
also ref: https://forum.pfsense.org/index.php?topic=107537.msg600111#msg600111

Always send a -HUP to dhcp6c in interfaces_track6_configure for DHCP6 WAN types. Doing so isn't any more disruptive than what it's already doing, and that ensures track6 interfaces don't lose their IPv6 IPs. Ticket #5945

Read xml files from /usr/local/share/pfSense/menu and load menu entries

Add function to return the physical interface(s) for a given parent. related to Ticket #5081

Only specify auth-user-pass for TLS mode. Ticket #5941

Merge pull request #2693 from NOYB/Diagnostics_/_Tables_-_URL_Table_Aliases

Fix unbound.inc so zero value for *_num_tcp is honored

In the Unbound documentation, it is noted that setting "outgoing-num-tcp" to "0" disables TCP queries. In testing I noticed that although I could select & save a value of "0" in the Unbound Advanced Config, the actual value written to /var/unbound/unbound.conf was still the default "10". Apparently in PHP, a value of "0" still tests "false" for !empty(). Changing the test to isset() seems to fix the issue.

Diagnostics / Tables - URL Table Aliases

Handle URL table aliases similar to bogons tables. Suppress record remove buttons.
Update (download) only the selected URL table alias instead of all of them.
Retain full line comments in downloaded URL table files so we can view and use them....

ICMPv6 Firewall Log Display - Fixes 5933

ICMPv6 logging was not being displayed in firewall log.

Fix OpenVPN ifconfig. Ticket #5930

Makes interface_bring_down() remove all the CARP and IP aliases from interface.

Ticket #5913

It is not necessary check for CARP interfaces.

Fix a typo.

Add the upgrade code for OpenBGPd and Quagga OSPF packages.

Ticket #5884

Correct ALTQ interface test for ix interfaces, fixes #5923

Make link_interface_to_vips() also return the IP aliases on the specified vhid.

Fix indent

Use high level functions

Initialize variables correctly

1) gmirror.inc: there are two calls to exec(), those calls expect the 2nd parameter to be an array, this commit initializes the variables correctly. 2) system.php: variable dnslist is used as an array without prior type initialization. This is one of the causes for apparent PR #2680 problems (which led to its reversal). Note: After this commit is merged PR #2680 may be safely reapplied for more tough code.

Merge branch 'master' of github.com:dennypage/pfsense

• 'master' of github.com:dennypage/pfsense:
  Add stddev information to the quality graphs.
  Update config version to trigger upgrade of rrd files
  Add standard deviation to quality rrd files

Fixes the handling of MTU with VLANs and PPPoE.

Ticket #5857

Makes get_real_interface() work with VLAN too.

This makes get_parent_interface() safe to use with VLANs.

Write_Config Function Notes Update

Add write_config_only input arg to write_config function notes.

Skip configuring dhcpdv6 when the interface doesn't have a valid subnet (like track6 where PD hasn't been obtained). Ticket #3029

Only enable DHCPv6 server for track6 interfaces where it's enabled. Ticket #3029

Allow disabling of radvd with track6 interfaces. Ticket #3029

Add config upgrade code to enable and configure DHCPv6 server and radvd where track6 is in use, as they were automatically configured previously. Add same config to default config.xml to retain existing behavior there. Ticket #3029

replaced original copyright message from 2005 / Espen Johansen

Merge branch 'master' of https://github.com/pfsense/pfsense

Don't trigger an interface mismatch for lagg interfaces, they may not exist at time of config restore. Ticket #5892

Validate URL table ports aliases exist before using them in a rule. Ticket #5845

Merge branch 'master' of https://github.com/pfsense/pfsense

Renamed exec.php and edit.php

Fix Dashboard privilege edge case and show full Help menu to users with the Help privilege. Fixes #5909

Fix #3029

Teach system_hosts_generate() to deal with PD length != 64

Ticket #3029

Fix DHCPv6 GUI to work with PD length != 64

Ticket #3029

Teach services_dhcpdv6_configure() to deal with PD length != 64

Ticket #3029

Teach merge_ipv6_delegated_prefix() to deal with other PD sizes

Ticket #3029

Import patch from @Robert-Nelson to enable DHCPv6 Server/RA to
interfaces configured to track DHCP-PD

This patch only works for PD with length 64

Internationalize etc inc uvx

Add support for splitting ipsec.conf conn entries for IKEv2. Ticket #4704

Merge pull request #2667 from phil-davis/patch-1

Merge pull request #2665 from NewEraCracker/simplify-code

Merge pull request #2668 from phil-davis/gtetc2

Internationalize etc inc i through s

pkg-utils update_status text typo

Quote the 1st parameter (constant name) when calling define()

Merge pull request #2661 from phil-davis/patch-1

use get_interface_ip functions rather than find_ since the former handles VIPs, gateway groups, etc. correctly. Ticket #4858

Add IP to dyndns error log, remove often wrong explanation.

Replace deprecated link_carp function, fix sprintf. Ticket #4858

Need $config here. No need to check count() as it'll always evaluate to true where is_array does. Ticket #4312

Fix hardcoded pfSense on login page

I guess this hard-coded mention of pfSense should use the value from $g ?

Change ISO image filename to remove "LiveCD" from its name, and clean up associated references to LiveCD. Ticket #5895

Set bridgeif for new bridge creation.

Simplify logic increasing value direct in hexa, PHP is smart to do it right. Spotteb by @loos-br

Merge pull request #2660 from phil-davis/gtetc1

Internationalize etc inc a-i files

Fix printf(printf())

This looked odd having nested calls to printf()
Should it actually log_error()?

Fix #4675

Following bugs and improvements on DHCPv6 DDNS area, obtained from
PR #1638 from @Robert-Nelson:

- Use correct domain (ddnsdomain) instead of (domain)
- The option "deny client-updates" wasn't being set so forward entries
weren't being added. Allow user to chose between allow, deny or ignore...

Implement get_v6_ptr_zones()

This function takes an IPv6 subnet and return an array containing all
DNS PTR zones

Sync RCC detection with RELENG_2_2