pfSense

Update the Copyright year.

A subsequent commit will deal with .po's.

Add product_label global variable

Introduce product_label global variable, by default with same value of
product_name. The idea is to make it easier for rebranded products to
change the name on all visual texts while internal structures are
preserved.

While here, remove deprecated $g['platform'] and also replace places...

Do not restart Unbound on OpenVPN client connection. Implemets #11129

Different interface name for L2TP VPN. Fixes #11006

Rework route functions

- Created route_table() that returns an array containing all items from
route table. It uses --libxo to get a json object
- Created route_get() that return an array with route items to desired
target
- Created route_get_default() to get current default route for inet or...

Ticket #9267: Fix dhclient-script to handle error properly

Merge pull request #4202 from vktg/ovpn6resolve

Handle DHCP Lease when the assigned Gateway is Outside of Subnet. Issue #7380

Register OpenVPN client IPv6 address in DNS Resolver. Issue #8624

OpenVPN radius ACL enhancements. Issue #9206

Use correct syntax for /bin/sh for loop in ovpn_auth_verify Fixes #7767

It's not bash.

Merge pull request #4145 from vktg/ovpnocsp

squashed commit

This is 2020. Issue #9245

Update copyright notice years. Issue #9245

IPsec swanctl conversion. Implements #9603

• Converted IPsec configuration code from ipsec.conf ipsec/stroke style
  to swanctl.conf swanctl/vici style. Issue #9603
• Split up much of the single large IPsec configuration function into
  multiple functions as appropriate....

Merge pull request #4030 from jalavoy/master

Add log compression type option. Issue #9711

Include system.inc in prefixes.php. Fixes #9715

Change logging to plain text, deprecate clog. Issue #8350

Add kernel memory usage to status.php. Implements #9705

Fix copyright message years to reflect BSDP -> ESF -> Netgate

Fixed #9245 updating copyright notices

Revert "Change ovpn_auth_verify_async to php-cgi. Fixes #9460"

check_reload_status 0.0.10 fixes the original issue, this can go back
the way it was.

This reverts commit ce76f299853dccb036de229f08a30013593c98fd.

Change ovpn_auth_verify_async to php-cgi. Fixes #9460

making sure my tabs align with upstream

adjust GEOM rebuild notifications to only notify the user when raid rebuild hits 25% increments

When a geom rebuild is occurring, this script by default notices that the device status has changed every time the rebuild hits a new percentage.
This results in a user getting 100 separate notifications (emails) every time a new percentage ticks....

Update copyright notices to 2019. Happy New Year

ssh settings alignment. Fixes #8974

Remove redundant settings stored in the wrong place
Store all ssh settings in the same place
Initialize this array before use

Added scheduled config backup
Fixed: #8947

Merge pull request #3908 from pdemonaco/master

routing, add option 'automatic' for gateway selection, and allow manual ordering of gateways

Remove Whitespace

I'm aware this is a very large commit. Let me know if you'd rather have it broken down by file type (ie: PHP/shell scripts) so it would be easier to review.

-RJ

Resolves #7905

Minor correction to the script header. Also switches back to printf
instead of echo -n for more broad base compatibility.

Merge remote-tracking branch 'upstream/master'

Bug 7905 - Auth Script & Openvpn Config

Replaces the current auth-user-pass-verify directive with the new plugin
call in the config-file generation code.

Also modifies the new asynchronous script to use "echo -n". This
probably isn't necessary but it doesn't hurt.

Trim domain for learned DNS entries. Ticket #6847

If the CN is already an FQDN on the given domain, this prevents the
domain from being present in the record twice (e.g. host.example.com
as a CN leads to records for host.example.com.example.com)

Bug 7905 - Minor Tweaks

Switched to printf over echo to ensure strict POSIX compliance. Also
added some comments regarding the source of two unset variables.

Bug 7905 - New Auth Script

Initial pass at new auth script which will be called by an openvpn
plugin. See https://github.com/pdemonaco/auth-script-openvpn for detail.

Update the Copyright notice for pfSense.

Fix logging for L2TP and PPPoE server login/logout events. Fixes #8164

See https://redmine.pfsense.org/issues/8164 for the reasoning about why it was done this way.

Merge pull request #3810 from svenauhagen/bugfix/mpd

Merge pull request #3183 from znerol/feature/master/register-openvpn-cn

MPD Custom Modem Init

I changed the path of egrep

As discussed

Update ppp-linkdown

Style fix

Update ppp-linkdown

PPP down script change

Use full paths for more binaries

Remove stray debug-code (/tmp/script)

Always use braces around variable names

Check whether tmp/config files exist before using/removing them

Use full paths for binaries

Remove trailing whitespace

When removing old entries, do not take into account new/changed IP

Ensure that $IP can be used in a file name

Use braces around shell variables to reduce ambiguity

Specify chroot and directory when testing config, use variables for common paths

Register CN of OpenVPN clients in DNS Resolver

WAN flap loss of IPv6

Some hardware is taking too long to set ACCEPT_RTADV on the Interface,
this results in RTSOLD exiting and this not sending RS to start the
process. Apart from adding a delay to the start of RTSOLD which did
improve but not totally fix the issue the other change is to prevent the...

Status / Interfaces - Relinquish DHCP Lease

Send gratuitous DHCP release message to server.

Dependency:
To fully relinquish the DHCP lease, the "RELEASE" reason needs to be added to the /usr/local/sbin/pfSense-dhclient-script.
s/EXPIRE|FAIL)/EXPIRE|FAIL|RELEASE)/...

Remove the now unnecessary and commented code.

Ticket #7042

Revert "Instead of ignoring the IP, add it to interface even if we cannot do it with setfirst."

This reverts commit af6248407bae4d476b483dcb3a388744fb74b465.

Not necessary at all.

Pointy hat to: me
Ticket #7042

Instead of ignoring the IP, add it to interface even if we cannot do it with setfirst.

Ticket #7042

Do not output PHP shell starup message unless it is run interactively. Fixes #7045

Disable "setfirst" line in pfSense-dhclient-script for now. Ticket #7042

OpenVPN populates IPv6 env vars now, so we can fetch them for the IPv6 gateway. Fixes #6016

Fix #6828

Until 2.3.x pfSense carried a patch that changed the behavior of 'route
change' command, making it add the route when it fails to change.
On 2.4 this patch was removed and will not be added back. This change
adjust PHP code to deal with route add / change and make it work...

Remove all calls to conf_mount_r* functions

Move pfSense-upgrade to FreeBSD-ports

Prepare pfSense-upgrade to work with new major OS upgrade

Add 'now' parameter do do_reboot() to force it to happen immediately

Make pkg_lock() and pkg_unlock() work with wildcards

Move copyright from ESF to Netgate

Add ng interface to pppoe group on mpd.conf and remove dead code from vpn-linkup script

Remove workarounds to sort extensions.ini since ports tree now has a better solution in place to track PHP modules dependencies

Move to Apache License 2.0

Review license / copyright on all files (1st round)

Ignore cp result for cases when files are the same. Ticket #6557

Added and modified functions to send correct Radius attributes to the Radius authenticator.

Make sure resolv.conf is present during nanobsd upgrade. Fixes #6557

Move athctrl.sh to /usr/local/sbin

Move our copy of dhclient-script to /usr/local/sbin/pfSense-dhclient-script and change interfaces.inc accordingly

Unlock kernel package to make dry-run output more consistent

Reboot after upgrade when meta package version changed

Reduce values of FETCH_TIMEOUT and FETCH_RETRY to help ticket #6177

Setup HTTP_PROXY environment variable for pkg when it's called from the GUI and also for pfSense-upgrade

Silence /etc/rc.notify_message garbage output

(cherry picked from commit eb3491d99e939ab21d84122ededf9e7e9462ed71)

Fix code used to read config repo path

(cherry picked from commit e429ac7134ac2080af9117c11e2f294d4dd8c5d0)

Do all steps to replace repo package and make sure symlink is in place

(cherry picked from commit 5caee0ba0f8782ea7bf1df54ad0848da1d5084d2)

Force update after reinstall repo pkg

(cherry picked from commit 3e7c1ea74a8c0600c785e9588349afd927719d23)

Simplify logic

Make sure directory exists

(cherry picked from commit cc1b7ddd0ba2d7eee6ee7ec1cae83efda91427d0)

Make sure source file exists

Add a workaround on pfSense-upgrade to make sure repo package is replaced by correct one

(cherry picked from commit a491ec98d8ffc5663cca84df402c2d6274a78a07)

Rework the way repo packages work

- Distribute only a single pfSense-repo package containing all templates
- Create a symlink pointing to selected repo
- Do not limit it only to pfSense-repo and pfSense-repo-devel

(cherry picked from commit a90f1c9b12c4d31ea845fa04188e599ba28dbaf1)

Do not return -1, sh doesn't like it

(cherry picked from commit a35bf546b57558535e3fc1958cf3fb2b4d18ade7)

Ticket #6053

- Do not call ntpdate before start ntpd, ntpd g parameter is enough
Deprecate /usr/local/sbin/ntpdate_sync_once.sh
- Remove system_ntp_configure parameter and always start ntpd

(cherry picked from commit 5a758355ec9a20ff75c9191b6915df64255fb8be)

Set exec bit on gmirror_status_check.php