pfSense

Replace unlink() by unlink_if_exists()

Use client-connect/client-disconnect script for Remote Access (SSL/TLS) server mode. Fixes #12238

Fixed missing $ warning

Completes #12193. Ready for testing. Revert only this commit to go back to old ACB system.

Delete unsupported backups

Prototype cron script to upload ACB backups per #12193

OpenVPN client IP address logging. Implements #11935

Add/remove OpenVPN client PTR record. Fixes #11938

ovpn_auth_verify improvements. Issue #11829

Use full path for executables in /usr/local/sbin/ shell scripts. Fixes #11985

Kill IPv6 client states on OpenVPN disconnect. Implements #11700

OpenVPN Cisco AVPair {clientipv6} template. Implements #11596

Change OpenVPN auth to php-cgi for the time being. Fixes #4521

Allow to use OpenVPN provided DNS servers. Implements #11140

Update the Copyright year.

A subsequent commit will deal with .po's.

Add product_label global variable

Introduce product_label global variable, by default with same value of
product_name. The idea is to make it easier for rebranded products to
change the name on all visual texts while internal structures are
preserved.

While here, remove deprecated $g['platform'] and also replace places...

Do not restart Unbound on OpenVPN client connection. Implemets #11129

Different interface name for L2TP VPN. Fixes #11006

Rework route functions

- Created route_table() that returns an array containing all items from
route table. It uses --libxo to get a json object
- Created route_get() that return an array with route items to desired
target
- Created route_get_default() to get current default route for inet or...

Ticket #9267: Fix dhclient-script to handle error properly

Merge pull request #4202 from vktg/ovpn6resolve

Handle DHCP Lease when the assigned Gateway is Outside of Subnet. Issue #7380

Register OpenVPN client IPv6 address in DNS Resolver. Issue #8624

OpenVPN radius ACL enhancements. Issue #9206

Use correct syntax for /bin/sh for loop in ovpn_auth_verify Fixes #7767

It's not bash.

Merge pull request #4145 from vktg/ovpnocsp

squashed commit

This is 2020. Issue #9245

Update copyright notice years. Issue #9245

IPsec swanctl conversion. Implements #9603

• Converted IPsec configuration code from ipsec.conf ipsec/stroke style
  to swanctl.conf swanctl/vici style. Issue #9603
• Split up much of the single large IPsec configuration function into
  multiple functions as appropriate....

Merge pull request #4030 from jalavoy/master

Add log compression type option. Issue #9711

Include system.inc in prefixes.php. Fixes #9715

Change logging to plain text, deprecate clog. Issue #8350

Add kernel memory usage to status.php. Implements #9705

Fix copyright message years to reflect BSDP -> ESF -> Netgate

Fixed #9245 updating copyright notices

Revert "Change ovpn_auth_verify_async to php-cgi. Fixes #9460"

check_reload_status 0.0.10 fixes the original issue, this can go back
the way it was.

This reverts commit ce76f299853dccb036de229f08a30013593c98fd.

Change ovpn_auth_verify_async to php-cgi. Fixes #9460

making sure my tabs align with upstream

adjust GEOM rebuild notifications to only notify the user when raid rebuild hits 25% increments

When a geom rebuild is occurring, this script by default notices that the device status has changed every time the rebuild hits a new percentage.
This results in a user getting 100 separate notifications (emails) every time a new percentage ticks....

Update copyright notices to 2019. Happy New Year

ssh settings alignment. Fixes #8974

Remove redundant settings stored in the wrong place
Store all ssh settings in the same place
Initialize this array before use

Added scheduled config backup
Fixed: #8947

Merge pull request #3908 from pdemonaco/master

routing, add option 'automatic' for gateway selection, and allow manual ordering of gateways

Remove Whitespace

I'm aware this is a very large commit. Let me know if you'd rather have it broken down by file type (ie: PHP/shell scripts) so it would be easier to review.

-RJ

Resolves #7905

Minor correction to the script header. Also switches back to printf
instead of echo -n for more broad base compatibility.

Merge remote-tracking branch 'upstream/master'

Bug 7905 - Auth Script & Openvpn Config

Replaces the current auth-user-pass-verify directive with the new plugin
call in the config-file generation code.

Also modifies the new asynchronous script to use "echo -n". This
probably isn't necessary but it doesn't hurt.

Trim domain for learned DNS entries. Ticket #6847

If the CN is already an FQDN on the given domain, this prevents the
domain from being present in the record twice (e.g. host.example.com
as a CN leads to records for host.example.com.example.com)

Bug 7905 - Minor Tweaks

Switched to printf over echo to ensure strict POSIX compliance. Also
added some comments regarding the source of two unset variables.

Bug 7905 - New Auth Script

Initial pass at new auth script which will be called by an openvpn
plugin. See https://github.com/pdemonaco/auth-script-openvpn for detail.

Update the Copyright notice for pfSense.

Fix logging for L2TP and PPPoE server login/logout events. Fixes #8164

See https://redmine.pfsense.org/issues/8164 for the reasoning about why it was done this way.

Merge pull request #3810 from svenauhagen/bugfix/mpd

Merge pull request #3183 from znerol/feature/master/register-openvpn-cn

MPD Custom Modem Init

I changed the path of egrep

As discussed

Update ppp-linkdown

Style fix

Update ppp-linkdown

PPP down script change

Use full paths for more binaries

Remove stray debug-code (/tmp/script)

Always use braces around variable names

Check whether tmp/config files exist before using/removing them

Use full paths for binaries

Remove trailing whitespace

When removing old entries, do not take into account new/changed IP

Ensure that $IP can be used in a file name

Use braces around shell variables to reduce ambiguity

Specify chroot and directory when testing config, use variables for common paths

Register CN of OpenVPN clients in DNS Resolver

WAN flap loss of IPv6

Some hardware is taking too long to set ACCEPT_RTADV on the Interface,
this results in RTSOLD exiting and this not sending RS to start the
process. Apart from adding a delay to the start of RTSOLD which did
improve but not totally fix the issue the other change is to prevent the...

Status / Interfaces - Relinquish DHCP Lease

Send gratuitous DHCP release message to server.

Dependency:
To fully relinquish the DHCP lease, the "RELEASE" reason needs to be added to the /usr/local/sbin/pfSense-dhclient-script.
s/EXPIRE|FAIL)/EXPIRE|FAIL|RELEASE)/...

Remove the now unnecessary and commented code.

Ticket #7042

Revert "Instead of ignoring the IP, add it to interface even if we cannot do it with setfirst."

This reverts commit af6248407bae4d476b483dcb3a388744fb74b465.

Not necessary at all.

Pointy hat to: me
Ticket #7042

Instead of ignoring the IP, add it to interface even if we cannot do it with setfirst.

Ticket #7042

Do not output PHP shell starup message unless it is run interactively. Fixes #7045

Disable "setfirst" line in pfSense-dhclient-script for now. Ticket #7042

OpenVPN populates IPv6 env vars now, so we can fetch them for the IPv6 gateway. Fixes #6016

Fix #6828

Until 2.3.x pfSense carried a patch that changed the behavior of 'route
change' command, making it add the route when it fails to change.
On 2.4 this patch was removed and will not be added back. This change
adjust PHP code to deal with route add / change and make it work...

Remove all calls to conf_mount_r* functions

Move pfSense-upgrade to FreeBSD-ports

Prepare pfSense-upgrade to work with new major OS upgrade

Add 'now' parameter do do_reboot() to force it to happen immediately

Make pkg_lock() and pkg_unlock() work with wildcards

Move copyright from ESF to Netgate

Add ng interface to pppoe group on mpd.conf and remove dead code from vpn-linkup script

Remove workarounds to sort extensions.ini since ports tree now has a better solution in place to track PHP modules dependencies

Move to Apache License 2.0

Review license / copyright on all files (1st round)

Ignore cp result for cases when files are the same. Ticket #6557

Added and modified functions to send correct Radius attributes to the Radius authenticator.

Make sure resolv.conf is present during nanobsd upgrade. Fixes #6557

Move athctrl.sh to /usr/local/sbin

Move our copy of dhclient-script to /usr/local/sbin/pfSense-dhclient-script and change interfaces.inc accordingly

Unlock kernel package to make dry-run output more consistent

Reboot after upgrade when meta package version changed