pfSense

<peer> => <peers>

Outlines config.xml => wireguard config files utility

OpenVPN genkey secret command fix. Issue #11249

Static DHCP mappings DDNS tabs fix. Issue #10224

DHCPD ARPA zone trailing dot. Fixes #11224

Fixed #5454 require => require_once

Keep makewhatis while pkg post-install is not fixed

IPsec P1/P2 expiration and replacement refresh. Implements #11219

Identify minnowboard with BIOS 1.0

Intel has changed MBT identification

Obtained from: https://github.com/pfsense/pfsense/pull/4495

Merge pull request #4493 from bmhughes/add-watchfrr-to-routing-log

Update the Copyright year.

A subsequent commit will deal with .po's.

Improve handling of SMTP send errors. Fixes #11063

Add watchfrr to routing log

Fix diag_dump_states.inc filename. Fixes #11197

Merge pull request #4489 from lepurt/master

Merge pull request #4492 from Augustin-FL/patch-1

Correct DPD syntax and values. Fixes #11196

IPsec P2 life_time changes. May help with issue #10176

• We currently only set life_time which isn't ideal
• Swanctl format wants rekey_time set, defaults to 1h (3600)
• Many users set P2 lifetime to 3600
• With rekey_time and life_time equal, rand_time is 0, so both always...

Correct IPsec secrets section ID type handling. Fixes #11193

Revise JSON data format when generating a list of states

Moved diag_dump_states logic to an include file for clarity

Revise diag_arp.php moving control lgic to an include file

Avoid flooding the logs

Domeneshop DynDNS correct return code check. Fixes #11146

Secondary DDNS server entry for static DHCP mappings. Issue #10224

Namecheap DDNS error code fix. Issue #5308

Allow wildcard DNS record of type A in DynDNS client for DNS provider Gandi. Ticket #11159.

Add product_label global variable

Introduce product_label global variable, by default with same value of
product_name. The idea is to make it easier for rebranded products to
change the name on all visual texts while internal structures are
preserved.

While here, remove deprecated $g['platform'] and also replace places...

Remove unused variable

Remove use of deprecated $g['platform']

Remove (harmless) double / in file path

Fixed #11144 by verifying correct generation of userkey

Do not run rc.newwanip if received DHCP address has not changed. Fixes #11142

Pass correct parameter to create a new VXLAN interface.

Bridge prio/cost saving fix. Issue #11122

SLAAC on parent IPv4 interface fixes. Issue #9324

DHCP6 VLAN with Track VLAN interfaces boot fix. Issue #3965

Use first interface with IP as fallback for NAS-IP-Address. Fixes #11109

Use idn_to_ascii() only for host type aliases. Fixes #11106

Ticket #9270: Make sure parameters are UTF-8

As described on ticket, for some reason we still don't know, when
pfSense_kill_states() is called with subnet as parameter (n.n.n.n/n) it
makes changes on $_POST content that can lead system to unpredictable
results....

IPsec PH2 proposals order fix. Issue #11078

Run dhcp6c enabled interfaces after track interfaces is UP. Fixes #3965

Run rc.newwanipv6 on dhcp6c REQUEST reason. Issue #9634

Do not bind unbound to disabled/nocarrier interfaces. Fixes #11087

Dynamic IPv6 DNS servers fix. Feature #10931

VXLAN restart on newwanip event. Bug #10960

Hide poesX-Y from interface list. Issue #11034

Ticket #6028: Fix path to rules.debug.old

Ticket #6028: Persist last valid set of rules

Save the last version of a valid set of rules under /cf/conf to make it
to persist on reboot. This allow it to be loaded when, for some reason,
current ruleset is invalid.

Create poesX interfaces for PPPoE server. Issue #11034

No-IP DynDNS provider API update. Implements #6638

Backup extra data fixes. Issue #11050

Catch up with the pfSense-module-0.69 which renamed the interface create function.

Remove old nss_ldap.conf if it exists before symlinking. Fixes #8698

Merge pull request #4326 from vktg/voucherviaurl

Merge pull request #4486 from apollo13/patch-2

Allow to submit voucher via URL. Implements #1984

Fixed #11062 by adding support for fingerprint specification

Do not restart L2TP VPN server when deleting user. Fixes #11059

Unbound custom TLS port fix. Issue #11051

Add a warning when write_config() is called without description

Fix #204: Add messages to all write_config() calls

Add a comment about CARP in generated rules

1. Snort package
   block log quick from <snort2c> to any tracker 1000000109 label "Block snort2c hosts"
   block log quick from any to <snort2c> tracker 1000000110 label "Block snort2c hosts"...

OpenVPN compression settings improvements. Issue #11020

• Hide compression options when compression is not allowed
• Omit compression options from the OpenVPN configuration when
  compression is not allowed

Fix display of OpenVPN data cipher when NCP is disabled. Issue #10919

OpenVPN Data Cipher changes. Fixes #10919

• Change handling of data ciphers so they work properly for TLS and
  shared key
• Move some duplicate code to a function
• Improve display of data ciphers in the OpenVPN server list
• Other misc improvements to OpenVPN server and client list to bring...

Merge pull request #4484 from emes/he-net-tunnelbroker-update-api

LDAP shell authentication. Implements #8698

interfaces_vlan_configure_mtu(): Style fixes

Set child interfaces MTU fix. Issue #11035

Auto add static routes for PPP interfaces. Fixes #10407

VXLAN bootup fix. Issue #10960

OpenVPN data cipher negotiation updates. Fixes #10919

• Rename "NCP Algorithms" to "Data Encryption Algorithms" to reflect the change in OpenVPN (frontend and backend, e.g. "ncp-ciphers" changes to "data_ciphers")
• Change "Encryption Algorithm" to "Fallback Data Encryption Algorithm" and move it below "Data Encryption Algorithms"...

OpenVPN compression options update. Issue #11020

• Add new "Allow Compression" option for OpenVPN 2.5.0. Defaults to asymmetric
  (Decompress incoming packets, do not compress outgoing packets) for a more
  secure and smooth transition to disabling compression entirely....

Remove OpenVPN tun server IPv4 tunnel network requirement. Issue #11020

No longer required on OpenVPN 2.5.0

Style fixes

Remove redundant isset() check

Do not unset() variables that were never defined

Simplify logic

Style fixes

mwexec() 2nd parameter default value is false. Remove it from caller

Change client endpoint update API for he.net tunnelbroker dynamic dns

Track Interface / PD improvements. Issue #5999

Different interface name for L2TP VPN. Fixes #11006

CBQ borrow option input validation. Issue #7915

Merge pull request #4483 from emes/he-net-tunnelbroker-ipfix

Traffic shaper wizard fix. Issue #10998

Set correct cat command path. Fixes #11032

IPv6 Port Forward 6RD/6to4 interface support. Feature #10984

Allow shell users to enable history. Implements #11029

Ticket #10955: Fix "default" case

Make a string check to cover "default" gateway

HE.net Tunnelbroker dynamic dns not supplying ip address parameter

Ticket #8136: Make sure dpinger is configured

Improve solution applied in 37194aa24e calling setup_gateways_monitor()
instead of running rc.newwanipv6

Ticket #8136: Reconfigure dpinger when IPv6 reconnects

When SLAAC interface is disconnected and reconnected, rc.newwanipv6 is
never executed because dhcp6c is the only trigger for that. Add a
workaround on rc.linkup to force it to run in these cases so dpinger is...

Disable accept_rtadv flag when remove IPv6 from interface

Revert "Remove non captive-portal logs from Local4 syslog facility."

This reverts commit 6960993dc53c559619fe3f8d8ea903e7730b4fa6.

Revert "Adjust some missing ident on syslog"

This reverts commit 12719a87e3ba77f5459938a4cfec7f007bbe0c4a.

Revert "Add rtsold logs to dhcpd.log"

This reverts commit c37ea049dcc8ea490278fe4414847012300c4e96.

Remove line commented out in 2015

Remove dhcp6c without RA script when not used