The IPv6 packets are always blocked.
Ticket #6206
Fixed #6893Null configuration settings are now written as <tag></tag> instead of <tag /> for consistency
2.4.0 is now BETA
Store Dynamic DNS passwords in Base64 to protect special characters. Fixes #6688
So, PHP eats the last '\n' and we need an additional new line...
Fix the generated pf rules.
Correct part of #6779Setting input "step" value to "any" alows hte element to accept decimal (float) values, not just integers.
Do not generate IPv6 rules when IPv6 is disabled.
Consider the IPv6 checksum options when dealing with "Disable hardware checksum offload".
Ticket #5321
Merge pull request #3164 from fredronnv/master
Merge pull request #3176 from stilez/patch-49
Fix the port assigment on SG-4860 or SG-8860.
Enable ALTQ for cxl. Fixes #6830
Convert CloudFlare and GratisDNS dynamic DNS over to split hostname and domain name fields, like Namecheap. Otherwise they could both break with subdomains or international TLDs with many parts. Fixes #6778
OpenBSD removed the pf FAQ page for shaping, so link to the proper page on archive.org since they offer no current equivalent and no other suitable replacement page is immediately available. Fixes #6781
Check if pidfile is valid before try to send signal
Always create a pipe for each allowed MAC or IP
host_ips tables is not supposed to use pipes
80 character lines ftw :)
Just because it was asked nicely :)
dyndns: add header processing in curl
some dyndns implementations rely on the correct HTTP header being set. the information was lost and now fixed.
Merge pull request #3192 from PiBa-NL/xmlrpc-auth
Make sure filterdns is disabled when CP zone is disabled
Fix the ipfw rule to use the table cp_ifaces and not the interface cp_ifaces.
Stop using -y on filterdns call
Rework captive portal to run with stock IPFW (round 1)
- Remove use of IPFW context- Create a rule that will skip to proper rule for each cp zone- Use new PHP module functions wherever is possible
REmove accidental text
Provide conrol on system.php to allow display of hostname on login banner
Added hostname to login page.Option control required
Update the variable with the round() return otherwise it does not has any effect.
Found while testing Ticket #6272.
Fix is_macaddr().
Hexadecimal numbers without the '0' padding are also valid, e.g:
a:b:c:d:e:f
Fix #6828
Until 2.3.x pfSense carried a patch that changed the behavior of 'routechange' command, making it add the route when it fails to change.On 2.4 this patch was removed and will not be added back. This changeadjust PHP code to deal with route add / change and make it work...
xmlrpc, use authentication through the basic auth header instead of extra user/pass parameters
Make setup_serial_port() write config files safely
This function used to replace /boot.conf, /boot/loader.conf and/etc/ttys on every call. Depending of the moment a power failurehappens, any of these files can be blank and it'll break console setupon next boot....
Change safe_write_file $content parameter to accept an array
Make $force_binary parameter optional, default to false
Prevent /etc/ttys to miss essential lines
We do not create /etc/ttys from scratch but we change it on every boot.If original file is corrupted for some reason we can end up with a filemissing essential lines. Added a check to verify if these lines aremissing and add them back in this case
Add extra validations on is_inrange_v46
Verify if addresses are valid IP address before convert them to makenumeric comparison.
While here, adjust indent.
Inspired by: @phil-davis patch at PR #3189
Replace underscore with hyphen in option names
Thanks Jorge
(cherry picked from commit 30786a9d2486d88cb92cbb0ecb10586b39c32c65)
Merge pull request #3186 from phil-davis/unlink_if_exists
Restore accidentally removed block
On dc61252ae the code used to restore dhcp6 leases when platform wasnanobsd was removed, but this code is supposed to run on full installwhen it's configured to use MFS /tmp. Restored it, adjusting indent,and add the correct conditional to run on MFS /tmp...
Merge pull request #3180 from valneacsu/fix_wifi_1st_VAP_params
Make unlink_if_exists return true/false
This allows the caller to do a single "atomic" call to unlink_if_exists.If it returns true, then they know that the file existed and that it hasbeen unlinked successfully.This should help avoid race conditions where multiple code paths try...
Remove commented code
Deprecate nanobsd platform and remove all conditionals that uses it
Retire rc.nanobsd_switch_boot_slice
Define a single value for 'default_config_backup_count'
Remove unused global var 'hidebackupbeforeupgrade'
Remove all calls to conf_mount_r* functions
Retire restart_httpd.php
Retire cdrom platform support
Remove unused global config item 'update_manifest'
Remove hideplatform global config and all uses of it
Remove unused global item 'nopkg_platform'
Retire refcount functions. They are not used anymore
Retire diag_nanobsd.php
Obsolete conf_mount_ro() and conf_mount_rw()
Now that nanobsd is gone these functions are not necessary anymore.Keep them around until all calls are cleaned up
Simplify tcsh prompt and respect default terminal colors
Merge pull request #3156 from stilez/patch-43
Report quantity of files being installed by minimal and diff options.
Also consolidate some unset commands.
(cherry picked from commit 32912ae833a016784cbb4813c45960cefc2d896b)
Support minimal and diff options combo rather than diff superseding minimal (sync both updated and diff files).
Break verbose option in two for showing files and/or constructed command. (--show_files, --show_command)Don't save new commit ID if dry run. (--dry-run)...
Merge pull request #3169 from valneacsu/fix_wifi_channel_change
Merge pull request #3171 from phroggster/patch-2
Merge pull request #3179 from valneacsu/fix_wifi_settings_overwrite
Improve gwlb.inc notification mechanisms
1) Unlink earlier to reduce the chances of any concurrency issues;2) Translate and improve output of available notification;3) While I'm here, fix whitespace and improve PHP syntax.
Adjust parsing of OpenVPN ciphers to new output format. Fixes #6849
Create pkg.conf with ABI settings
Bring up the wifi interface only after setting up all the other arguments. This prevents issues when using VAPs.
Latest nginx requires /var/log/nginx/ to exist, so for users with /var in RAM it needs created.
Merge pull request #3141 from PiBa-NL/xmlrpc_seturl
XMLRPC, xmlrpc_client, add new scheme parameter in setConnectionData(syncip,port,user,pass,schema), for use by packages that sync to custom locations, set public/private on all functions
standardise old code ("or" -> "||")
Only configure wireless MAC address if a spoofed MAC address is set
Use tabs consistently
Fixup ntpd IPv6 restrict clauses.
This should eliminate the following errors from the ntpd log file whenusing IPv6 or dual-stack networks:"syntax error, unexpected T_Mask, expecting T_EOC"
Re-enable executing the wifi mode command first. This fixes channel changing, which broke in d325e90818db2b22fc2562c38493769f217230f2.
Fix static blackhole routes. Bug was introduced in8be135cd114fbc9294ec9dafed2125d0e553956c (February, 2013).
Remove unused arg in get_pkg_info()
The 2nd argument ($info) isn't used in that function, and doesn't seem to be used anywhere else in the codebase.
Fix bug where CARP vip status is incorrent in the interface when morethan one CARP vip is configured for an interface.
Do not obsolete extensions.ini to avoid lots of noise on pkg deinstall scripts
Remove pre/post upgrade scripts
Thise scripts were used on tarball upgrade before pkg(8). Users runningpfSense < 2.3 will need to go to 2.3 first and then to 2.4 so they willnot be necessary anymore
Merge pull request #2782 from fredronnv/master
Use !empty() instead of isset()
Revised service running/stopped icons
Merge branch 'master' of git.pfmechanics.com:pfsense/pfsense
Merge pull request #2975 from NOYB/Services_Status
Merge pull request #3131 from PiBa-NL/20160906-generic-xmlrpc_client
XMLRPC, xmlrpc_client set new Netgate copyright.
Merge pull request #3135 from phil-davis/pdlen
XMLRPC, xmlrpc_client remove extended class and define setConnectionData(.) function instead.
Merge pull request #2616 from k-paulius/patch-pkg-syslog-v2
XMLRPC, xmlrpc_client remove xmlrpc_client.inc from pfSense.obsoletedfiles
Fix #6768 IPv6 static mapping on delegated prefixes
For example, WAN receives a /48 delegated from the upstream (ISP...),e.g. "2001:470:abcd::" pfSense then uses this as a starting point tocalculate the addresses on LAN, OPT1, OPT2 etc where they have been...
Fix up/catch up remote syslog areas. Fixes #6780
More pptp bits
Remove some more dangling PPTP bits.
Revert "Remove unused file browser.php"
This reverts commit 8dee84f4cef55a2f008a319022a762b92e00117e.
XMLRPC, xmlrpc_client simplify construction parameters where possible + cleanup
Move copyright from ESF to Netgate
Remove unused file browser.php
Remove some obsolete code from globals.inc
Fix handling of backup config count. Fixes #6771