pfSense

Fix #204: Add messages to all write_config() calls

OpenVPN compression settings improvements. Issue #11020

• Hide compression options when compression is not allowed
• Omit compression options from the OpenVPN configuration when
  compression is not allowed

Fix display of OpenVPN data cipher when NCP is disabled. Issue #10919

OpenVPN Data Cipher changes. Fixes #10919

• Change handling of data ciphers so they work properly for TLS and
  shared key
• Move some duplicate code to a function
• Improve display of data ciphers in the OpenVPN server list
• Other misc improvements to OpenVPN server and client list to bring...

Merge pull request #4484 from emes/he-net-tunnelbroker-update-api

LDAP shell authentication. Implements #8698

interfaces_vlan_configure_mtu(): Style fixes

Set child interfaces MTU fix. Issue #11035

Auto add static routes for PPP interfaces. Fixes #10407

VXLAN bootup fix. Issue #10960

OpenVPN data cipher negotiation updates. Fixes #10919

• Rename "NCP Algorithms" to "Data Encryption Algorithms" to reflect the change in OpenVPN (frontend and backend, e.g. "ncp-ciphers" changes to "data_ciphers")
• Change "Encryption Algorithm" to "Fallback Data Encryption Algorithm" and move it below "Data Encryption Algorithms"...

OpenVPN compression options update. Issue #11020

• Add new "Allow Compression" option for OpenVPN 2.5.0. Defaults to asymmetric
  (Decompress incoming packets, do not compress outgoing packets) for a more
  secure and smooth transition to disabling compression entirely....

Remove OpenVPN tun server IPv4 tunnel network requirement. Issue #11020

No longer required on OpenVPN 2.5.0

Style fixes

Remove redundant isset() check

Do not unset() variables that were never defined

Simplify logic

Style fixes

mwexec() 2nd parameter default value is false. Remove it from caller

Change client endpoint update API for he.net tunnelbroker dynamic dns

Track Interface / PD improvements. Issue #5999

Different interface name for L2TP VPN. Fixes #11006

CBQ borrow option input validation. Issue #7915

Merge pull request #4483 from emes/he-net-tunnelbroker-ipfix

Traffic shaper wizard fix. Issue #10998

Set correct cat command path. Fixes #11032

IPv6 Port Forward 6RD/6to4 interface support. Feature #10984

Ticket #10955: Fix "default" case

Make a string check to cover "default" gateway

HE.net Tunnelbroker dynamic dns not supplying ip address parameter

Disable accept_rtadv flag when remove IPv6 from interface

Revert "Remove non captive-portal logs from Local4 syslog facility."

This reverts commit 6960993dc53c559619fe3f8d8ea903e7730b4fa6.

Revert "Adjust some missing ident on syslog"

This reverts commit 12719a87e3ba77f5459938a4cfec7f007bbe0c4a.

Revert "Add rtsold logs to dhcpd.log"

This reverts commit c37ea049dcc8ea490278fe4414847012300c4e96.

Remove line commented out in 2015

Remove dhcp6c without RA script when not used

Fix #11005: Allow to request PD with no track ifs

Allow DHCP6 to solicit PD even when no interfaces are tracking

Check correct value and fix regression introduced by 9eae3005e1200319a14d6ebafe92c52885bf1cfd

Revert "Fix monitor address on correct variable"

This reverts commit 9eae3005e1200319a14d6ebafe92c52885bf1cfd.

Revert "Revert "Request PD even if no interfaces are set to track6 (Bug #4544)""

This reverts commit 51d1aca9859f980ca53f606c9f3696e7b9901125.

Revert "Request PD even if no interfaces are set to track6 (Bug #4544)"

This reverts commit b0837cebf9836c4cdd5873b3e463f1afb8403811.

Add rtsold logs to dhcpd.log

Revert "Do not set IA-PD if there is no interface set to track it"

This reverts commit a31ccbef87003ce9967dda894391eab2364491da.

Adjust some missing ident on syslog

Do not set IA-PD if there is no interface set to track it

Fix monitor address on correct variable

Revert "Prevent possible race condition, fixes #9450"

This reverts commit 5affb137561c74bb5559f0706c86c28a85b14557.

Revert "Fix #9450"

This reverts commit 0de6758e2893e4390acfa0b55e31b1dece231618.

Fix #8870

When it's not possible to check if a new version is available for any
reason, show a proper message instead of keep using cached information

Clear OpenVPN clients DNS entries fix. Issue #11002

Allow to register OpenVPN Remote Access (User Auth) client in DNS Resolver. Implements #10999

Save OMAPI settings in dhcpd.conf. Issue #10270

Nested queues input validatin fix. Issue #10998

Fix #10997: Retire m0n0wall config compatibility

Remove leftover RRD code for SpamD

IPv6 Port Forward alias fix. Issue #10984

CBQ queue prio check fix. Issue #1353

Merge pull request #4482 from cpick/cloudflare-token-query-zone

Return correct Track IPv6 address. Fixes #5999

Allow to select virtual interfaces in CLI interface assignment. Fixes #10947

Default queue bw scale in Mbit/s. Feature #10988

1:1 NAT fix dual-stack. Fixes #10986

Do not create queue RRD if there are no queues. Fixes #6277

Port Forward IPv6. Implements #10984

Force NTP peers DNS resolution protocol. Implements #10322

Support omitting Cloudflare Zone ID for dynamic DNS

In May, Cloudflare
[improved their API](https://community.cloudflare.com/t/bug-zone-detail-by-name-requires-zone-list-permission/128042/14)
so that a token scoped to a particular zone now has permission to...

Fix #9450

Change default value for clear_alarm to true so cache file is used only
once. We can't be sure the value on cache will remain the same even if
the status of gateway doesn't change.

Replace unlink() by unlink_if_exists()

Merge pull request #4481 from wurzelpanzer/master

VLAN MTU extra fix. Issue #9154

UDP/Other protocols state timeout. Implements #1635

Nested alias IDN fix. Issue #10968

Style fixes

Add missing parameter to get_dpinger_status() call

Prevent possible race condition, fixes #9450

Instead of calling get_dpinger_status() again in the code handling dpinger
alarms, save the original alarm status in rc.gateway_alarm to a file, then
read the status from the file.

Minor text fix. Issue #10546

No need to log the PID, it's added to the logs anyways.

Add gateway substatus. Fixes #10546

Update return_gateways_status to return a substatus as well as the existing status.

status changed to be one of online or down.
substatus can be one of none, down, highloss, highlatency, loss, latency, or force_down
...

VLAN MTU improvements. Issue #9154

Fix #10680: Rewrite cache system in interfaces.inc

Change it to not invalidate cache when not needed. Makes boot much faster
when we have many VLANs

Fix #10589: Skip disabling staticarp on boot

Also implemented is a simplification of code to handle static ARP entries.

Merge pull request #4478 from vktg/ddnsstatic

easyDNS IPv6 DynDNS support

This adds support for IPv6 records to easyDNS DynDNS.

https://redmine.pfsense.org/issues/10972

NTP server authentication. Issue #8794

Merge pull request #4479 from vktg/xmlrpcdhcpfix

route_get() improments. Fixes #10955

Create key and zone section for static DHCP mappings. Issue #10224

rtsold: run script if MANAGED bit set

Delay configuring vxlans at boot

Configure VXLAN interfaces after the parent interfaces are configured. Add them to the delayed list with GRE and GIF.

Merge pull request #4467 from vktg/gwlbfix

Merge pull request #4464 from vktg/ovpnipsecsameradiusparser

Style fixes

Fix #10898

Fix vxlan interfaces configuration at boot

Fixed #9855
by preventing form submission on second and subsequent clicks

Load balancing when one gateway has a weight of 1 and another gateway has a weight >1. Fixes #6025

Remove unnecessary parameter from filter_rule_tracker()

Fix #6030

Use a range of tracker ids for anti-lockout, bogons and rfc1918 rules so
any rule has a unique identifier

Same RADIUS ACL parser for IPsec/OpenVPN. Implements #10469

LDAP group search fix. Issue #10942

Merge pull request #4273 from vktg/ovpn6avpair

Merge pull request #4461 from vktg/enanochecksum

Disable "Hardware Checksum Offloading" if ena(4) is detected. Implements #10723