pfSense

Add option to invalidate GUI login on IP address change. Implements #14265

Correct Outbound NAT 'other' type selector. Fixes #14354

Fix mac_procs incorrect references. Fixes #14425

Add VLAN support validation for the Packet Capture interface. Fix #14376

Disable CARP until services have started and before shutdown/reboot. Fixes #2218

CARP has historically been enabled as part of interface bringup and sync setup
fairly early in rc.bootup. This change intentionally shuts down CARP from
interface bringup all the way until services have been started to ensure that a...

Revert "Correct RAM disk swap calculation. Issue #13508"

This reverts commit b10998b1951b3e0d1cb74449a6b6dd333b9d292a.

Correct RAM disk swap calculation. Issue #13508

It was not factored into the shell version as it should be (still a
problem here, see Redmine).

It was also returning a bogus small value on systems that have no swap
configured.

Repsect NAT nosync for assoc rules. Fixes #14335

Use new utility function for ethertype, use correct operator, and remove redundant code. Fix #13382

Fix invalid pcap filters in some cases. Fixes #13382

Additional changes to new Packet Capture GUI. Implements #13382

Automatic CARP/VIP rule refinements. Fixes #13908

• Perform a filter reload after deleting a VIP. This is important not
  only for CARP but other VIPs, since they may be referenced in places
  such as tonatsubnets and/or interface macros.
• Only add CARP rules to the ruleset when there is a CARP VIP...

Multiple issues with ICMP NAT/Rules. Fixes #14267

• When making an associated firewall rule for a port forward, do not
  craft what would be an invalid port range.
• When saving a firewall rule, safely handle an empty ICMP subtype list
• When generating firewall rules, only check src/dst ports for protocols...

Additional changes to new Packet Capture GUI. Implements #13382

More flexible packet capture GUI. Implement #13382

RAM disk size check/options update. Fixes #13508

• Update RAM disk size/free memory calculations
• Fix up some text in the option labels
• Show current /tmp and /var usage
• Add info about tmpfs and swap

Add knob for console bell (default: enabled). Fixes #14002

Aliases config access refactor by brd

Fix PHP errors from empty DHCP configs. Fixes #13983

Fix incorrect path for disableconsolemenu.

system_advanced_admin config refactor

Always work with cert list as array. Fixes #14004

Update copyright years to include 2023

Correct RRD backup/restore cmd file handling. Fixes #13935

Refactor some direct config access in sysctl

Rector direct global g accesses

Rector some config unsets with complex paths.

Rector some direct config gets with pure scalar paths.

Rector some more direct config unsets with pure scalar paths

Correct special net NPt dst prefix handling. Fixes #13240

Disables prefix length drop-down when using a special net (e.g. track6
delegated prefix) because that already has its own prefix length.

Being able to specify a custom prefix was of dubious use and served to...

Omit RAM disk size check when disabled. Fixes #13479

Replace direct config accesses to system/webgui paths in system_advanced_admin.inc. Fixes #13659

Also move default assignment of $pconfig['webguiproto'] to 'http' from
system_advanced_admin.php to system_advanced_admin.inc and remove unneccessary
init_config_arr() calls from system_advanced_admin.php.

RemoveUnusedForeachKeyRector runresults

Spelling fixes. Fix #13357

• Incorrect input validation for `dhcp6c` `keyinfo expire` `forever` keyword in `interfaces.inc`.
• Incorrect input validation for associated rule's `Source Port` in `firewall_rules_edit.php`.
• Incorrect `voucher*.` file lock reference in `status_captiveportal_voucher_rolls.php`....

Backup/Restore fixes for dup SSH/RRD. Issue #13132

Fixes for multiple SSHDATA or RRDDATA sections in config.xml

• On backup, strip out any existing SSH and RRD data sections before
  adding new ones.
• On restore, remove any empty data sections and if there is more than...

Rewrite functions for toggle & delete NAT. Fixes #13545

Replace direct config accesses regarding ssh configuration. Fixes #13645

In system_advanced_admin.inc, use config interface funcs instead of direct
$config access regarding ssh configuration nodes. Also initialize the ssh
section as an array if it doesn't exist in system_advanced_admin.php to prevent...

Correctly handle port aliases in port forwarding rules. Fixes #13601

Fix potentially problematic config access in sshd enable/disable. Fixes #13599

Make a better effort to describe an alias reference. Fixes #13539

Each of deleteAlias(), openvpnAlias(), and staticrouteAlias() are called when
deleting or modifying an alias to indicate that it is referenced by some other
configuration item, which in turn call find_alias_reference() which returns...

Do no reload the filter if $apply is false in deleteAlias. Fixes #13538

Fix PHP error when editing aliases w/o if groups.

Update firewall_nat_out.inc for PHP81

Fix firewall_nat_1to1.inc for PHP81

Fix PHP81 error in firewall_nat.inc

Fix warnings in firewall_virtual_ip.inc

• unused variable $natdescr removed
• double quoted gettext string swallows and expands $s, single quote instead
• type of filter_configure() is void, don't assign to $retval

Remove direct config array accesses from firewall_virtual_ip.inc

Replace some config array access in services_dnsmasq.inc

fix: corrects validations for various fields in system_advanced_firewall.inc

Skip URL tables with invalid names. Fixes #13425

Check for empty config.xml restore. Fixes #13289

Fixed handling of single rule selected with multi-delete Issue #9887

Merge branch 'pfsense:master' into fix-omission-of-pr4551

oops. forgot to actually process the dpinger_dont_add_static_routes flag

Port Forward Redirect target IP save fix. Fixes #13171

Remove duplicate SSHDATA tag. Fixes #13132

Merge pull request #4579 from luckman212/store-dnsmasq-opts-as-base64

fix for https://redmine.pfsense.org/issues/13126

store dnsmasq custom_options as base64

Port Forward input validation fix. Issue #4259

Captive Portal ipfw->pf transition. Todo #13100

Slack Notifications fix. Issue #13083

Optimize stacked IP Aliases reconfiguration. Issue #12961

Port forward NAT rules with Any protocol. Implements #4259

Reconfigure stacked IP Aliases on XMLRPC sync and Virtual IP change only. Fixes #12961

Allow auto prefix with manual prefix-length in NPT. Implements #13070

Toggle Button for NAT Pages. Implements #12879

New methods for killing states. Implements #12092

Add rule ID text input to state dump page. Issue #12616

Merge pull request #4551 from luckman212/dpinger_dont_add_static_routes

adds option to not auto-create static routes for dpinger (squashed)

Reboot prompt on RAM disk size change. Fixes #12876

Dynamic NPT support. Implements #4881

Multiple DHCP6 WAN connections. Fixes #6880

Check system default setting for NAT+Proxy mode in Port Forward input validation. Issue #12319

Fix ARP table interface names. Fixes #12698

Don't del ONAT rules w/o selection. Fixes #12694

Make registration process contingent on PLus vs CE to accommodate automatic CE -> Plus merging

netgate-ca.pem is now in the base image at /usr/local/share/${product_name}/ssl/netgate-ca.pem

Update the Copyright year of the files owned by Rubicon/Netgate.

Fix PHP error on backup if SSH keys do not exists. Issue #12635

Revert "move firewall functions to include file"

This reverts commit a5a4cf87eeacfaf922151ce356fca1eee53762eb

Revert "Certmanager mvc"

This reverts commit 033c3ae82d20ca5760ed483cf8d0c947764b2371

Certmanager mvc

Backup and Restore SSH Host Key(s). Feature #11118

move firewall functions to include file

Static routes handling update. Fixes #11599 #11895 #7547

• Confirmation box to apply static routes add/route/change
• Reloading routes using aliases after changing the alias
• Correct route updates after changing destination or gateway

Ui3 bandwidth

Port Forward checks for special interfaces and reflection type. Fixes #12452

deleteVIP() input validation fix. Issue #12442

Slack Notifications. Feature #12291

NAT 1:1 pseudo-interface input validation fix. Issue #12408

1:1 NAT destination entries description fix. Issue #12410

DNS check optimization. Fixes #11512

IPv6 Port Forwarding Proxy+NAT input validation. Fixes #12319

fix #11734 NAT overlap validation does not check special networks

deleteVIP() IPsec PH1 input validation. Fixes #12356

Correct input validation on deleting a CARP VIP which is referenced by an IP Alias. Fixes #12362

Some small cleanups with disk widget and library code.

Fix Disks widget UI on UFS systems

```
PHP 7.4.22 | 10 parallel jobs
............................................................ 60/279 (21 %)
............................................................ 120/279 (43 %)
............................................................ 180/279 (64 %)...