pfSense

Add log compression type option. Issue #9711

Include system.inc in prefixes.php. Fixes #9715

Change logging to plain text, deprecate clog. Issue #8350

Add kernel memory usage to status.php. Implements #9705

Fix copyright message years to reflect BSDP -> ESF -> Netgate

Fixed #9245 updating copyright notices

Revert "Change ovpn_auth_verify_async to php-cgi. Fixes #9460"

check_reload_status 0.0.10 fixes the original issue, this can go back
the way it was.

This reverts commit ce76f299853dccb036de229f08a30013593c98fd.

Change ovpn_auth_verify_async to php-cgi. Fixes #9460

Update copyright notices to 2019. Happy New Year

ssh settings alignment. Fixes #8974

Remove redundant settings stored in the wrong place
Store all ssh settings in the same place
Initialize this array before use

Added scheduled config backup
Fixed: #8947

Merge pull request #3908 from pdemonaco/master

routing, add option 'automatic' for gateway selection, and allow manual ordering of gateways

Remove Whitespace

I'm aware this is a very large commit. Let me know if you'd rather have it broken down by file type (ie: PHP/shell scripts) so it would be easier to review.

-RJ

Resolves #7905

Minor correction to the script header. Also switches back to printf
instead of echo -n for more broad base compatibility.

Merge remote-tracking branch 'upstream/master'

Bug 7905 - Auth Script & Openvpn Config

Replaces the current auth-user-pass-verify directive with the new plugin
call in the config-file generation code.

Also modifies the new asynchronous script to use "echo -n". This
probably isn't necessary but it doesn't hurt.

Trim domain for learned DNS entries. Ticket #6847

If the CN is already an FQDN on the given domain, this prevents the
domain from being present in the record twice (e.g. host.example.com
as a CN leads to records for host.example.com.example.com)

Bug 7905 - Minor Tweaks

Switched to printf over echo to ensure strict POSIX compliance. Also
added some comments regarding the source of two unset variables.

Bug 7905 - New Auth Script

Initial pass at new auth script which will be called by an openvpn
plugin. See https://github.com/pdemonaco/auth-script-openvpn for detail.

Update the Copyright notice for pfSense.

Fix logging for L2TP and PPPoE server login/logout events. Fixes #8164

See https://redmine.pfsense.org/issues/8164 for the reasoning about why it was done this way.

Merge pull request #3810 from svenauhagen/bugfix/mpd

Merge pull request #3183 from znerol/feature/master/register-openvpn-cn

MPD Custom Modem Init

I changed the path of egrep

As discussed

Update ppp-linkdown

Style fix

Update ppp-linkdown

PPP down script change

Use full paths for more binaries

Remove stray debug-code (/tmp/script)

Always use braces around variable names

Check whether tmp/config files exist before using/removing them

Use full paths for binaries

Remove trailing whitespace

When removing old entries, do not take into account new/changed IP

Ensure that $IP can be used in a file name

Use braces around shell variables to reduce ambiguity

Specify chroot and directory when testing config, use variables for common paths

Register CN of OpenVPN clients in DNS Resolver

WAN flap loss of IPv6

Some hardware is taking too long to set ACCEPT_RTADV on the Interface,
this results in RTSOLD exiting and this not sending RS to start the
process. Apart from adding a delay to the start of RTSOLD which did
improve but not totally fix the issue the other change is to prevent the...

Status / Interfaces - Relinquish DHCP Lease

Send gratuitous DHCP release message to server.

Dependency:
To fully relinquish the DHCP lease, the "RELEASE" reason needs to be added to the /usr/local/sbin/pfSense-dhclient-script.
s/EXPIRE|FAIL)/EXPIRE|FAIL|RELEASE)/...

Remove the now unnecessary and commented code.

Ticket #7042

Revert "Instead of ignoring the IP, add it to interface even if we cannot do it with setfirst."

This reverts commit af6248407bae4d476b483dcb3a388744fb74b465.

Not necessary at all.

Pointy hat to: me
Ticket #7042

Instead of ignoring the IP, add it to interface even if we cannot do it with setfirst.

Ticket #7042

Do not output PHP shell starup message unless it is run interactively. Fixes #7045

Disable "setfirst" line in pfSense-dhclient-script for now. Ticket #7042

OpenVPN populates IPv6 env vars now, so we can fetch them for the IPv6 gateway. Fixes #6016

Fix #6828

Until 2.3.x pfSense carried a patch that changed the behavior of 'route
change' command, making it add the route when it fails to change.
On 2.4 this patch was removed and will not be added back. This change
adjust PHP code to deal with route add / change and make it work...

Remove all calls to conf_mount_r* functions

Move pfSense-upgrade to FreeBSD-ports

Prepare pfSense-upgrade to work with new major OS upgrade

Add 'now' parameter do do_reboot() to force it to happen immediately

Make pkg_lock() and pkg_unlock() work with wildcards

Move copyright from ESF to Netgate

Add ng interface to pppoe group on mpd.conf and remove dead code from vpn-linkup script

Remove workarounds to sort extensions.ini since ports tree now has a better solution in place to track PHP modules dependencies

Move to Apache License 2.0

Review license / copyright on all files (1st round)

Ignore cp result for cases when files are the same. Ticket #6557

Added and modified functions to send correct Radius attributes to the Radius authenticator.

Make sure resolv.conf is present during nanobsd upgrade. Fixes #6557

Move athctrl.sh to /usr/local/sbin

Move our copy of dhclient-script to /usr/local/sbin/pfSense-dhclient-script and change interfaces.inc accordingly

Unlock kernel package to make dry-run output more consistent

Reboot after upgrade when meta package version changed

Reduce values of FETCH_TIMEOUT and FETCH_RETRY to help ticket #6177

Setup HTTP_PROXY environment variable for pkg when it's called from the GUI and also for pfSense-upgrade

Silence /etc/rc.notify_message garbage output

(cherry picked from commit eb3491d99e939ab21d84122ededf9e7e9462ed71)

Fix code used to read config repo path

(cherry picked from commit e429ac7134ac2080af9117c11e2f294d4dd8c5d0)

Do all steps to replace repo package and make sure symlink is in place

(cherry picked from commit 5caee0ba0f8782ea7bf1df54ad0848da1d5084d2)

Force update after reinstall repo pkg

(cherry picked from commit 3e7c1ea74a8c0600c785e9588349afd927719d23)

Simplify logic

Make sure directory exists

(cherry picked from commit cc1b7ddd0ba2d7eee6ee7ec1cae83efda91427d0)

Make sure source file exists

Add a workaround on pfSense-upgrade to make sure repo package is replaced by correct one

(cherry picked from commit a491ec98d8ffc5663cca84df402c2d6274a78a07)

Rework the way repo packages work

- Distribute only a single pfSense-repo package containing all templates
- Create a symlink pointing to selected repo
- Do not limit it only to pfSense-repo and pfSense-repo-devel

(cherry picked from commit a90f1c9b12c4d31ea845fa04188e599ba28dbaf1)

Do not return -1, sh doesn't like it

(cherry picked from commit a35bf546b57558535e3fc1958cf3fb2b4d18ade7)

Ticket #6053

- Do not call ntpdate before start ntpd, ntpd g parameter is enough
Deprecate /usr/local/sbin/ntpdate_sync_once.sh
- Remove system_ntp_configure parameter and always start ntpd

(cherry picked from commit 5a758355ec9a20ff75c9191b6915df64255fb8be)

Set exec bit on gmirror_status_check.php

Make sure repo metadata is updated before any other package when repo conf changes. Fixes #6052

(cherry picked from commit 78aee67a9e8ddb40d10c965ee8ce1ad1389d25f6)

Use route_vpn_gateway for tap-type OpenVPN instances as well where specified. Remove old and wrongly copy/pasted comments while here. Ticket #5981

Check $active

Fix missing check for $active to avoid creating a route to a released lease.

Fix substr mistake

Made a silly mistake and overlooked an important difference between javascript substring() and php substr().
Tightened regex check for octal value.

Use PHP CLI explicitly to run rc.conf_mount_r(w|o) from pfSense-upgrade, it fixes #5875

Make a couple changes to PPP default gateway handling to address issues with default gateway switching. Fixes #1837
Tested with default gateway switching on and off, by rebooting, manually disconnecting the PPP link, and manually disconnecting the NIC link, worked each time, though still possible some issues remain. Feedback appreciated.

Fix #5837

Since the introduction of pkg_with_pb(), direct calls to this function
were added using the following format:

if ! pkg_with_pb ... | tee -a $logfile; then

What happened in this case is if was always getting a successfull
return code from tee call, and pkg_with_pb return was always being...

Fix #5831 using a simpler approach, just setting REPO_AUTOUPDATE=false when it's booting

Revert "Fix #5831"

This reverts commit 93a8ddf7a4c5d43cbeb623c923eb76659e6f49e0.

Save pkg call return code to use on return. The way it is now is always returning 0. It should fix #5837

Make additional packages install/delete operations to respect -n (dry-run)

Reorder pkg_reinstall_all(), no functional changes

Respect ALL_PACKAGES for package removal

Fix #5831

After PKG_AUTOUPDATE=false was removed, operations done during boot,
2nd and 3rd stages of upgrade process, are trying to update repository
metadata. The problem is during this stage we don't have a network
available yet and all needed packages were previously downloaded....

Import David W's patch fixing issues with dhcp6c being launched multiple times in some circumstances. Ticket #5621

Test duplicated slice with fsck after cloning during an upgrade

Fix #4605

After base64 encoding username/password, properly escape characters =,+,/
before submitting auth details

fixes 5818 - Dev Shell - Cmd Tab Completion

Meant to have show_recordings here. Ticket #5657