pfSense

Add upgrade code to clean up the old GRE/GIF flags that are no longer used. Ticket #6586 and Ticket #6587

Align GIF link options with those currently supported by the base OS. Ticket #6587

Remove GRE link flag options from GUI/backend. Keep link1 as it was also used to add an explicit static route, though the GUI previous GUI option name wasn't related to that at all. Updated GUI description to match reality. Ticket #6586

Merge pull request #3032 from NewEraCracker/patch-pppoe-rules

Properly follow style guidelines.

Include ignored DHCP server(s) config option even when advanced DHCP config is enabled

Remove workaround for Ticket #4754 in 2.4 since 32 bit is dead.

Add config option for AdvDefaultLifetime, clean up descriptions on other. Ticket #6533

Add configuration for Min and MaxRtrAdvInterval. Ticket #6533

Merge pull request #3037 from NOYB/Check_IP_Services

Exclude non-qualified hostnames from hosts file. Ticket #6064

Omit non-qualified hostnames from unbound's local-data. Ticket #6064

Call filter_configure in rc.linkup. Ticket #6297

Verify a valid IPv6 subnet is going to be used before including in radvd's config. Ticket #6581

Missing closing quote

Create /var/run/dmesg.boot symlink for vm-bhyve (Feature #6573)

See https://redmine.pfsense.org/issues/6573

Add missing -R parameter to pkg call

Use .0 at the end of first major version

Leave an empty file for URL Table aliases that return an empty file, and include it in the ruleset regardless so it doesn't generate any filter errors. Ticket #6181

Protect get_dir from causing PHP errors

https://forum.pfsense.org/index.php?topic=114570.0

spdns.de renamed to spdyn.de

Forgot to update the select description and values

spdns.de renamed to spdyn.de

The service renamed there addresses

Check IP Services

Configurable check IP services.
Used by Dynamic DNS services to check IP addresses.
Configure as many check IP services as desired. The first (highest in the list) that is enabled will be used as the default.
A future possibility could be to add an option to the Dynamic DNS entires to use a specific check IP service....

Fix firewall rules for PPPoE server

1) PPPoE Clients are located within 'Remote Address Range' (sa) and not Server Address (ip), see lines 1194 and 1195. 2) Interfaces for floating rules were not being correctly added due to a bug on interface detection caused by PPPoE differences....

Merge pull request #2764 from NewEraCracker/redmine-6011

Merge pull request #3031 from NOYB/GitSync_Diff_Only_Option

GitSync Diff Only Option

Diff Option
--diff
SSD Friendlier
Same as default but only copies files that are different, instead of every thing even though identical.

Verbose Option
--verbose
Display constructed command.
In combination with the --diff option, display the array of different and missing files....

Merge pull request #2994 from stilez/patch-31

Merge pull request #3018 from phil-davis/usersettings

Merge pull request #3029 from phil-davis/IPv6colons

Add playback files for disabling and enabling CARP maintenance mode. Ticket #6560

Handle more invalid IPv6 formats

Merge pull request #2934 from k-paulius/patch-14

Merge pull request #2944 from stilez/patch-23

Merge pull request #3000 from stilez/patch-32

Merge pull request #3024 from phil-davis/include_once

Shorten gwifip if whole socket path exceeds 100 chars

dpinger stopps with an error when the socketname exceeds over
(around) 100 characters. The dpinger will not start and not deliver
monitoring results to the WebUI.

These long socket names can get created when using link-local addresses...

Use a different delimiter for dpinger socket names

Currently underscores are used to seperate gwifip, monitorip, etc, but
underscors are also used in vlan subinterfaces like em0_vlan10 and
therefore can't be used because the interface scope is appended to IPv6...

Set pipe_slot_limit to the maximum configured qlimit value. Move the set_sysctl out if the block where it only gets run if dummynet isn't already loaded. Ticket #6553

Clean up limiter text. Remove old commented out bit.

Fix matching of chars in IPv6 address segments

The existing regex here is wrong, it matches 0 or more of the hex digits but then there can be other rubbish in the string, in fact anything at all! It matches "az", "z", "qwerty" and so on. So the "return false" inside this "if" never happens....

Update include() to include_once()

For safety, use include_once() when including various "side" files.
There are a couple of instances of include("guiconfig,inc") that I
changes to use require_once() to be consistent with everywhere else.
The remaining cases of include() are just (hundreds of) head.inc and...

Merge pull request #3022 from phil-davis/require_once

Run generate-privdefs.php to update priv.defs.inc

Always use require_once

The usage of require() and require_once() throughout the system is
inconsistent, and "bugs" come up now and then when the order of
"requires" is a bit different and some require() happens after the
include file is already included/required....

bring back subnetv4_expand function used by pfblockerng

Merge pull request #3013 from dennypage/master

Include interface scope on IPv6 static routes to link local gateway IPs. Ticket #6506

Revert "adding privileges and separating DNS Resolver overrides from general settings"

This reverts commit fc76a1e390c8ce9579df31457c74d1d0e572b78d.

Move /etc/ascii-art to /usr/local/share/pfSense

Remove unused mtree file

Make base package to populate /etc/platform

Move iso_3166-1_list_en.xml to /usr/local/share/pfSense

Create /home on rc if it's necessary, then remove home/.empty file from git repo

Move athctrl.sh to /usr/local/sbin

Feature #6388 custom GUI preference settings per user

Merge pull request #3010 from NOYB/Remove_Duplicate_ListTags_Entry

Merge pull request #3006 from stilez/patch-33

Merge pull request #3001 from NewEraCracker/patch-pppoe-mpd

Merge pull request #2988 from stilez/patch-28

Merge pull request #2982 from stilez/patch-26

Merge pull request #2942 from stilez/patch-22

Merge pull request #2906 from Chrisc-c-c/Fix-QinQ-Interfaces

Allow IGMP Proxy logging verbosity to be selected via system log settings (PR 2901)

Merge pull request #2891 from gottaloveit/dns-overrides-privs

Merge pull request #2783 from jlduran/harden-sshd_config

Only call interfaces_vips_configure once if it's needed, rather than doing the same thing over and over for every VIP on an interface. Ticket #6515

Fix style

require_once auth.inc in vpn.inc since it uses functions from there, though normal use of the system won't require that, those who run certain things manually/custom may require it

Only omit aggressive line from ipsec.conf where IKEv2. Ticket #6513

Create openssl.cnf symlink during boot

Set kern.corefile, fixes #6510

Teach rc script to copy custom_logos over default one

Add include of functions.inc for declaration of gettext

Remove duplicate listtags() entry 'member'.

Remove subnet_expand()

Function isn't used in main or packages repo, and in any case would need a complete rewrite to handle IPv6.

Fix bad escapeshellarg logic on mpd execution

With this change single-quotes are applied in correct places

Fix Redmine #6011

This will add linklocal fallback where no IPv6 is otherwise configured to allow login using this IPs

One more escapeshellarg for auth.inc on 2.4. Ticket #6475

Use escapeshellarg on shell calls in auth.inc. Ticket #6475

Merge pull request #2997 from phil-davis/resetwebgui

Implement pkg_valid_name()

Rename item #12 in console menu

The console menu item #12 ("pfSense/$product developer shell") has a pointless title that doesn't help users much. It also actively obscures from router admins the useful tools it contains which is a negative side-effect....

Add resetwebgui to developer shell

This might be helpful to people if they have set the theme to something
that they are having trouble displaying, reading... or enabled some
widget that is not good or...
It allows them to get back to a known-working dashboard state, from...

This needs a newline

Get modulus keysize

Useful utility function when it's necessary to verify that existing keys meets current practices

Set keepalive_timeout 0 where captive portal in use, and update otherwise to nginx's current default of 75. Ticket #6421

Rename /etc/rc(.shutdown) -> /etc/pfSense-rc(.shutdown) and stop overlapping FreeBSD-src files

Add a check to see if the file exists before running filesize on it, to avoid PHP error.

Move our copy of dhclient-script to /usr/local/sbin/pfSense-dhclient-script and change interfaces.inc accordingly

Move openssl.cnf to better place and copy it over to /etc/ssl during boot

Reduce differences from FreeBSD default openssl.cnf

Remove our copy of /etc/shells

Remove copy of /etc/syslog.conf, it's deleted by /etc/rc and replaced by a symlink to /var/etc/syslog.conf

Move terminal config from cons25 to xterm, same used by FreeBSD

Change serial terminal type to vt100, same FreeBSD uses

Remove our own copy of /etc/ttys

Improve interactive shell detection to cover other terminal types

Remove sshd_config from main repo, it's always replaced by /etc/sshd

Copy users config files from skeleton dir

Every time user is added or modified, make sure all default config
files are copied over from /etc/skel to user's home. It will make sure
users will always get the last version of these files