pfSense

Skip URL tables with invalid names. Fixes #13425

captiveportal: fix comment

Restore the correct comment, as pointed out by "Fole Systems" in
https://redmine.pfsense.org/issues/13323#change-62565

Correct omission of ipv6 addresses in get_interface_addresses. #11545

The original v6 translation wrapping from pfSense_get_ifaddrs() output to that
of pfSense_get_interface_addresses had some confusion around array keys that is
resolved in this commit.

Add two missing '\n' to pkg.conf.

This file is quickly overwritten by the (correct) version written by
pfSense-upgrade, this makes this failure hard to see.

Get radius nas ip from correct variable. Fix #13356

Ensure we apply policy routing on whitelisted captive portal MAC addresses

We cannot simply 'pass in quick' for the _patthru tagged packets,
because that means we don't process any subsequent policy routing (or
other user) rules.

We want the _passthru tagged (i.e. whitelisted by MAC address) packets...

Filter reload at end of rc.newwanip. Fixes #13228

Don't force DNS to use 4/6 here. Fixes #13318

It's not trying to force communication with a
specific address family DNS server.

get_interface_addresses: Silence array_filter warnings

Remove incorrectly restored code. Fixes #13308

Omit VIPs from interface address selection. Fixes #11545

Add function get_interface_addresses() which wraps around pfSense_get_ifaddrs() and
filters VIPs before selecting an interface v4 and v6 address.

Replace all use of pfSense_get_interface_addresses() with get_interface_addresses()

Set CP pipeno consistently when null. Fixes #13265

dhcp6 range check/tracked prefix. Fixes #12527

Always use rstold script header. Fixes #13238

Change Captive Portal anchors order and remove tagged option from L2 rules.

Do not duplicate Captive Portal passthru rule if HTTPS login is enabled

Reload Captive Portal rules on nomacfilter or per-user bandwidth change. Fixes #13216

Check CP rules tag on all steps. Fixes #13215

Get all nested anchors when drilling. Fixes #13142

captiveportal: Add both https/http rules for cps with https. Fixes #13212

Alter captiveportal_zone_portalports to return an array of alias/port pairs
rather than a single pair. If https is enabled on the cp zone, then both https
and http sets are returned....

Remount ZFS datasets after configuring RAM disks to ensure they are used. For #13182

Fix RAM disk handling in pfSense-rc on ZFS

Improvements to ramdisk functions for improved handling on ZFS

PKG_DBDIR/CACHEDIR should be accessed at /var/db/pkg and /var/cache/pkg in all cases

Revert "Fixes RAM disk handling on ZFS (support boot environments)"

This reverts commit e6b47d6812b1a46738c75a8991cd1393b200d7ef

Fixes RAM disk handling on ZFS (support boot environments)

Revert "Fix RAM disk support for ZFS layout changes related to BEs. Fixes #13182"

This reverts commit b9097e4cfe3fcbdec86a00a5a470d93d05ea8102

Captive Portal pipes reserve fix. Fixes #13204

Generate floating rules with "any" interface. Fix #13203

Fix RAM disk support for ZFS layout changes related to BEs. Fixes #13182

Captive Portal hostname pipes delete fix. Issue #13193

captiveportal: Only apply per-user default bw to pipes for user auth. Fixes #13192

captiveportal_pipe_configure() was unaware of the context of the pipes it was
creating (user auth vs. allowed mac/ip/host), and always applied the default
pipe bandwidths in the absence of form specified values. This change allows the...

captiveportal: Correct errors in passthru mac deletion. Fixes #13192

Correct identifier mismatches in captiveportal_passthrumac_delete_entry()
($hostent vs $mac)

Correct and rename captiveportal_get_dn_passthru_ruleno() to
captiveportal_get_dn_passthru_pipes. This function was called to retrieve a...

Revert "Destroy deleted/disabled IPsec SA. Fixes #13102"

This appears to be causing a pileup of swanctl processes on systems with
a significant number of disabled tunnels.

This reverts commit d90552c59e51fb13c712b6a96a51ca2462424156.

Remove orphaned ram disk backup script

Fix pf rule for 'any' proto. Fixes #4259

Close earlier to avoid overlap. Fixes 12870

Gather the information we need from curl and close the handle earlier
rather than passing around the handle unnecessarily. This avoids
creating multiple overlapping curl requests that don't share a handle.

Fix rule label order and optimize. Fixes #13155

• Changes rule label order so the user label is first when present
• Clean up related redundant/suboptimal code along the way

captiveportal_ether_delete_entry() anchors/pipes delete fix. Issue #13169

DSCP usage optimization. Fixes #13178

mkdir before restoring extra data. Fixes #13157

check_dnsavailable() improvement. Fixes #13162

Print correct pkg name. Fixes #13163

pfSense: Fix missing global decl in captiveportal_get_last_activity. Fixes #13147

Captive Portal per user bandwidths fix. Issue #13150

Cleanup PPPoE VIPs on interface down to fix IP address order. Issue #11629

pfanchordrill Captive Portal anchors support. Fixes #13142

Captive Portal host remove fix. Issue #13146

ssh-keygen check improvements. Fixes #13139

Add default value to $ipv6type argument of restart_interface_services(). Fixes #13134

Cleanup PPPoE VIPs to fix IP address order. Issue #11629

Remove topology keyword from openvpn_cc file. Fixes #13133

OpenVPN status improvements. Implements #13129

• Clean up and improve client/p2p state interpretation
• Output OpenVPN instance interface names
• Improve formatting of service status and control icons

Revert "Revert "Remove the leftover pfSense-installer repo if it exists""

This reverts commit ae40f82dc7bdc2cbef8a22ee682ec97e5a69fbd8.

Bring this back in now the build puts the file in /tmp and cleans up
after itself properly

Use dnctl(8) to control limiter rules. Feature #12579

Allow to assign L2TP VPN server interface. Issue #13099

VPN restart on Gateway options change. Issue #13076

Revert "Remove the leftover pfSense-installer repo if it exists"

This reverts commit 2f5b8f48de1875c128e05267b0f7d59075c781c4.

This breaks the build since it removes the file too early

Remove the leftover pfSense-installer repo if it exists

Merge pull request #4579 from luckman212/store-dnsmasq-opts-as-base64

Merge pull request #4578 from luckman212/warning-for-recursive-sshd-disable

Restart DNS Resolver after OpenVPN config save. Fixes #13117

Suppress php warning when using unlink. Fixes #13112

pfSense: Correct typo in buffer_rules_load 'labels' -> 'label' - R12977

pfSense: Get rule descs for syslog.inc via pfSense_get_pf_rules() - Regression #12977

Correct CP status function call. Fixes #13123

Correct CP status function call. Fixes #13122

Improve OpenVPN "tls-client"/"pull". Fixes #13116

"tls-client" and "client" are redundant, so only use "tls-client" and
"pull". Omit "pull" in cases where it is known to be incompatible.

pfSense: Utilize pf captiveportal funcs from php-pfSense - Feature #12945

Use mpd embedded bandwidth control to reconnect. Fixes #13092

store dnsmasq custom_options as base64

Destroy deleted/disabled IPsec SA. Fixes #13102

Captive Portal remove unused ipfw code. Todo #13100

Captive Portal ipfw->pf transition. Todo #13100

add warning for menu option 14 when it might kill your connection

Fix error handling in pfanchordrill. Fixes #13106

USB NIC handling improvements. Fixes #12606 #9393

Update config 215 to 216 fix. Issue #13097

LDAP authentication extended query fix. Issue #13093

Add no noretry to PPPoE mpd configuration. Fixes #13092

Fix typo. Issue #13076

Slow rule generation regression. Fix #13049

Port forward NAT rules with Any protocol. Implements #4259

Restart L2TP VPN on interface change. Fixes #13082

Reconfigure stacked IP Aliases on XMLRPC sync and Virtual IP change only. Fixes #12961

ddb.conf: log registers

When we crash also log the register values. They may contain useful
hints for debugging (especially if the unstripped build artefacts are
still available), and take up very little space in the textdump.

Reload IPsec and OpenVPN on gateway IP or force_down option change. Issue #13076

NPT manual prefix fix. Issue #13070

Restart L2TP VPN on interface IP change. Fixes #13066

Restart dpinger on boot if IPsec PH1 remote gateway is FQDN and PH2 mode is VTI. Fixes #12763

Allow auto prefix with manual prefix-length in NPT. Implements #13070

Do not restart IPv4 OpenVPN on IPv6 gateway events and vice versa. Fixes #13061

Reject multiple IPv6 compressions. Fixes #13069

Having :: in an IPv6 address more than once is not valid, even if it
expands to an unambiguous result.

Do not restart IPv4 IPsec on IPv6 gateway events and vice versa. Issue #3132

WebGUI option for IPsec <dns-interval> option. Feature #13057

Skip IPsec VTI interface if remote FQDN gateway is not resolved. Issue #12763

Reload filter on OpenVPN instance delete. Fixes #13055

Restart services on interface configuration changes. Todo #12619

Do not create negate rules if <negate_networks> is empty. Fixes #13049

IPSec IKEv2 Mobile INTERNAL_DNS_DOMAIN (value 25) attribute. Fixes #12975