pfSense

dhcp6c no release

Script changes to allow no-release option of dhcp6c. These changes to be
used in conjunction with pfSense/FreeBSD-ports/net/dhcp6c recent change
from PR #231

Add missing include

Restart unbound after clearing logs (Bug #6915)

Merge pull request #3283 from doktornotor/patch-1

Merge pull request #3281 from phil-davis/patch-7

Ensure that the more secure option is used if both user-copy-files and user-copy-files-chroot is granted

Add support for chrooted SCP

Add support for chrooted SCP

validateipaddr enhance flexibility for translation

By using sprintf() we can allow for some language where the label text does not fit at the start of the sentence.

validateipaddr code format

Fix comment

Added a function validateipaddr() use as:
// Validate a network address
// $addr: the address to validate
// $type: IPV4|IPV6|IPV4V6
// $label: the label used by the GUI to display this value. Required to compose an error message
// $err_msg: pointer to the callers error message array so that error messages can be added to it here...

If nothing is enabled that requires xinetd, do not run xinetd. Fixes #6308

Fix to match the pot template.

Nuke outdated hint about scponly install

Correct the descriptions and behavior of the Adaptive Start and Adaptive End settings.

Merge pull request #3236 from PiBa-NL/openvpn_startup_lock

Merge pull request #3276 from phil-davis/patch-10

Merge pull request #3268 from blkeller/apu2-serial-fix

dhcpv6_pd_str_help add default case

When the interface concerned does not yet have its details known (e.g. Track Interface values from upstream have not come yet) then we might as well at least give the caller some reasonable text.
e.g. I was adding V6 Static Mappings on an interface that has "Track Interface" and no IPv6 delegation yet. The error message that tries to tell me the type of input I need to put or the static IP offset had no example at all.

Add PC Engines APU2 to the list of serial-only platforms

The vidconsole needs to be explicitly disabled for PC Engines APU2,
otherwise the comconsole is garbled and mostly unusable during the
boot block and boot loader.

Add specific platform detection for PC Engines APU2

Based detection on $product rather than $hw_model, because $hw_model
returns the name of the AMD SoC, which might be used on other boards.

Encode the auth server list before passing it on the CLI, to avoid issues with special characters that break when interpreted as URL parameters during OpenVPN auth. Fixes #7002

This script is not called directly in a way that requires a shabang, and it interferes with the script output, preventing successful authentication. Fixes #7008

Ensure that mobile IPsec client addresses are added to vpn_networks. Fixes #7005

Comment typos in itemid.inc

Add a gateway state plugin hook.

Pull Request #3093

Revert the workaround now that the pf parsing issue is fixed.

Ticket #6985

Ticket #6472: Add toggle_id

Introduce toggle_id() used to enable/disable associated firewall rules

Simplify logic

Fix comments

$array doesn't need to be a reference here

Update simplepie (RSS Parsing library) to 1.4.3

Fix #6996 using existing variable

Fix #6857

During boot local_sync_acocunts() should be able to access LDAP server
on a non-local network or also resolve LDAP server hostname. To make it
possible move calls to create static routes and start dnsmasq/unbound
to run earlier

Specify IP to set for zoneedit

Populate the HTTP_PROXY_AUTH env var. Ticket #6949

Merge pull request #3259 from phil-davis/disablegatewayactions

Feature #3151 Disable gateway monitoring actions

without disabling gateway monitoring.

This allows the user to continue to monitor the gateway with dpinger, so
they can see how it is performing, but for the system not to take any
real action if the latency/loss exceeds the given limits....

Merge pull request #3130 from omnia-dev/master

Merge pull request #3155 from jxmx/6751_route53

Merge pull request #3193 from PiBa-NL/php_notice_fatal

Merge pull request #3249 from plumbeo/idletime-in-sessiontime

Merge pull request #3254 from doktornotor/patch-1

Merge pull request #3240 from derelict-pf/ldap_starttls

Work around the NPt rule loading issue to load the rules as they were on previous versions. Fixes #6985

Add BIND logging to proper facility (Bug #5524)

Stop the /etc/inc/system.inc patching by dns/pfSense-pkg-bind9 package.

Fix unset glxsb

This bit of upgrade_config code needs a global reference to $config

Stopgap to keep filter reload errors from happening due to NPt rule errors. Ticket #6985

Captive portal: add option to include idle time in total session time

Add an option to choose whether the time spent idle by a user disconnected for exceeding the idle timeout must be included in the total session time sent to the RADIUS server or not.

fix typo from merge

Merge remote-tracking branch 'upstream/master' into 6751_route53

Fix indent

Merge pull request #3145 from skrude61/master

Create a dummy /etc/printcap when starting bsnmpd so it it will not log errors. Fixes #6838

Merge pull request #3246 from overhacked/dhcpd-dyndns-force-hostname

Add missing L2TP from this gateway handling case. Fixes #6980

Fix reversed accounting style

Removed TODO comment

Put DDNS hostname config in the wrong place

It is relevant to the interface, not just the per-static-mapping DDNS config.

Implement ddns-hostname option emission for static hosts in services.inc.

Fix certificate generation for CAs without a serial set on import. Fixes #6952

Add some CA in-use test utility functions. Ticket #6947

Merge pull request #3239 from duiadns/master

Improve input validation on static ARP for DHCP static mapping entries, also prevent the backend from attempting to apply entries with insufficient information stored. Fixes #6969

- added support for duiadns.net ipv4 and ipv6

Disable PAM when using only key-based authentication, otherwise keyboard-interactive fails. Fixes #6963

Merge pull request #3196 from PiBa-NL/authfallbackspeed

Merge pull request #3212 from PiBa-NL/ipsec-mobile-leasecheck

Merge pull request #3223 from filnko/patch-1

Silence kenv calls

Change wireless interface description

Ticket #6770: Create a function to list available wireless interfaces and include model description

Ticket #6770: Update wireless regex to match FreeBSD 11

Revise update_filter_relaod_status() function to append status messages rather than overwrite the file

Remove deprecated code

/var/etc/* has been removed above

Remove config files symlinks from /etc to /var/etc. Fixes #5538

We don't need to remove newsyslog.conf

This should be 'default' rather than 'panic' or some non-panic crashes will land at a debugger prompt rather than rebooting.

Force textdump, it should fix #6943

Add our own ddb.conf

openvpn, startup locking sequence to prevent issues around pid file / process management
fixes: https://redmine.pfsense.org/issues/6940

Revert "Apply the fix for ticket #6589 also into dhcpdv6 config"

Reverted after upgrade dhcpd server to 4.3.5

This reverts commit 20350989db5d66ffb827beaed5ef5738cd62fc9d.

Revert "Set dhcp-cache-threshold to 0 to avoid a bug in dhcpd 4.3.x where it omits client-hostname where the cache threshold is reached. Ticket #6589"

Removed after upgrade dhcpd server to 4.3.5

This reverts commit 318e0383829daac934424879ccfce09395e80025.

Put original match back

Did not mean to remove SSL substring from the check...

Fix nsCertType matching for some certificates (Bug #6877)

See https://redmine.pfsense.org/issues/6877#note-4

Added addrtolower() function to allow IPv6 addresses to be converted to lower case while preserving aliases or other text

add All-Inkl to services.class

add All-Inkl to dyndns.class

Use the ntpd "pool" command for more robust timekeeping. Attempting to automatically determine if we are using a pool, and allow it to be set optionally otherwise. Implements #5985

Add options to console menu reboot selection to reboot into single user mode and to reboot and force a filesystem check. Implements #6639

Merge pull request #3218 from kernelbug/master

Merge pull request #3220 from PiBa-NL/ipsec-routes

Merge pull request #3211 from PiBa-NL/syslogd-logsocket

The IPv6 packets are always blocked.

Ticket #6206

ipsec, apply routes also for IP-aliases with carp parents

Fixed #6893
Null configuration settings are now written as <tag></tag> instead of <tag /> for consistency

2.4.0 is now BETA

Store Dynamic DNS passwords in Base64 to protect special characters. Fixes #6688