pfSense

Static IPv6 /128 routes fix. Issue #11594

WireGuard default TCP MSS clampling. Issue #11600

Unmount var and tmp ZFS on boot. Fixes #11617

DHCP6 interfaces bootup fix. Issue #11633

XMLRPC no section fix. Issue #11638

Correct source IP for IPsec on 6RD/6to4 interfaces. Fixes #11643

Fix handling of renewing cert w/o SAN. Fixes #11652

Use correct parameters when adding WG IPv6 tunnel addr. Fixes #11618

Report full product version, including -pN

Revise firewall_nat_edit for MVC

Correct rsort_log_filename() behavior. Fixes #11639

Revise firewall_nat.php for MVC

Fix typo

Add missing break

route_get() optimization. Fixes #11475

Set correct DHCP failover peer IP on XMLRPC sync. Fixes #11519

IPsec Mobile users swanctl.conf fix. Issue #11564

IPsec peer ID Any fix. Issue #11555

Cisco AVPair parse {clientip}. Fixes #11561

Restart unbound on interface recover. Fixes #11547

IPsec VTI interfaces bootup fix. Issue #11537

WPA Enterprise PAP inner method support. Issue #2400

Merge pull request #4504 from bashkarev/master

Update services.inc

Corrects the error in the dynamic DNS widget
warning: array_combine(): both parameters should have an equal number of elements in /usr/local/www/widgets/widgets/dyn_dns_status.widget.php on line 151

Fixed bug parsing netmask cisco acl

Basic fiurewall_NAT MVC conversion

Correct location and config for Strict CRLs in IPsec. Fixes #11526

Improve CA/Self-Signed serial handling. Fixes #11514

Try parsing four digit years in cert timestamps. Fixes #11504

Improve handling of broken/invalid certs. Fixes #11489

On save return virtual IP id

Merge pull request #4501 from mschiegl/patch-1

Use set_curlproxy() function for cURL proxy configuration. Issue #11476

IPsec Mobile EAP-RADIUS additional configuration fix. Issue #11447

Put OpenVPN route-nopull option after custom options. Fixes #11448

WireGuard interface friendly description. Fixes #11437

Allow to use OpenVPN provided DNS servers. Implements #11140

WPA Enterprise (PEAP/TLS/TTLS) client mode. Feature #2400

Fix a typo.

No functional changes.

Merge pull request #4500 from bitscher/master

Merge pull request #4487 from znerol-forks/feature/master/radvd-linklocal-vip

Don't add empty pools line. Fixes #11488

Fix child SA name generation. Fixes #11487

Fix openssl digest algorithm param in openvpn.inc

At least in OpenSSL 1.1.1i-freebsd, used by pfsense 2.5, there is no longer a "list-message-digest-algorithms" parameter. It has been replaced by "list -digest-algorithms".
The old parameter results in an error 'Invalid command 'list-message-digest-algorithms'; type "help" for a list' and may even cause an endless loop on startup/migration.

Fixed #5685 - Renaming alias does not update firewall rules containg that alias

Fixed #11464 by adding proxy configuration to web service calls

Merge branch 'master' into master

Add getVIPs() function for MVC

Revised firewall_virtual_ip_edit for MVC

firewall_virtual_ip refactored fro MVC

Fix filename in copyright message

Refactored system_advanced_misc for MVC

Non local gateways fix. Issue #11433

Delete static routes on gateway down. Fixes #11296

Remove unused L2TP VPN directory. Fixes #11299

Unbound ip6.arpa local-zone type. Fixes #11403

Set correct TCP MSS for IPv6. Fixes #11409

Allow to use host portion of IPv6 in firewall rules. Feature #6626

L2TP VPN MTU option. Feature #11406

Xen console support. Feature #11402

Display negotiated cipher on Status / OpenVPN page. Implements #7077

Mythic-Beasts.com DynDNS provider support. Implements #7842

RADIUS Advanced parameters. Feature #11211

Do not prefix FQDN IPsec IDs with @. Fixes #11442

Check that DHCP has gateway in interface_has_gateway(). Fixes #5135

Randomize ACB cron minutes. Implements #10811

RADVD set AdvRDNSSLifetime. Fixes #11105

Down disabled interfaces on boot. Fixes #11091

Update comments

Provide system_advanced_firewall.inc

Revised system_advanced_notificaions for MVC

Merged system_advanced_network for MVC

remove obsolete system_advanced.inc

Fix hnaltqenable setting

Split system_admin.inc into separate files per tab

Fix custom XMLRPC port for Captive Portal. Fixes #11425

Completed networking section, subject to testing

Add IPv6 support for Gandi LiveDNS dynamic DNS handler

• Simplify the use of the LiveDNS API by using another API call that
  handles both creating and updating for a given name and record type
  instead of the former two step operation that was fetching the whole...

Add input_errors to returned array

Revised system_advanced_notifications for MVC

Fix WireGuard add/next name behavior. Fixes #11407

• No need to set index when creating a new entry
• WireGuard interface name label was assuming array index=wg if name
  which was incorrect

Handle case where copyright file is downloaded but has a size of zero

Add option to set IPsec filtering mode. Implements #11395

User can choose between filtering enc (tunnel+VTI) or filtering on
assigned VTI interface tabs (VTI only, drops all tunnel mode traffic).
See https://redmine.pfsense.org/issues/11395 for details.

Fix Microsoft's idea of an apostropphe

Increment requested copyright version

Revise copyright modal to accommodate larger content

Use Netgate domain for bogons. Issue NG 5446

Detect Plus by product label

Rename Factory -> Plus

This file moved, remove old copy. Fixes #11389

Revert "Refactor system_advanced_misc for MVC"

This reverts commit c33b0ab6c2fcd4c9786d1b5e7903c01fa1fafa7d.

Refactor system_advanced_misc for MVC

Typo

Add registered trdemark symbol where appropriate

Nested alias checking fix. Issue #11372

Return correct Track IPv6 address if >1 VIP on interface. Issue #5999

It's time to move to 2.6.0-DEVELOPMENT

Remove what I suspect is a debug leftover

OpenVPN rmdir fix. Issue #11254

Style fixes