pfSense

ppp-linkup: Keep routerv6 address scope

Original code was removing address scope from v6 router and because of
that, system always use default gateway to connect to it, breaking
connectivity on secondary dynamic WANs.

It should fix #13939

Update copyright years to include 2023

Rector direct global g accesses

Remove unused deprecated code from dhclient script. Fixes #13501

Spelling fixes. Fix #13357

• Incorrect input validation for `dhcp6c` `keyinfo expire` `forever` keyword in `interfaces.inc`.
• Incorrect input validation for associated rule's `Source Port` in `firewall_rules_edit.php`.
• Incorrect `voucher*.` file lock reference in `status_captiveportal_voucher_rolls.php`....

Revert "Change OpenVPN auth to php-cgi for the time being. Fixes #4521"

This reverts commit 1bfdb794cb2a06932da0029ca37f9727c3f74274.

OVPN linkdown script improvements

Add quotes around variable usage to prevent word splitting

Avoid using -o in test(1)

-1 is not allowed, exit only uses 0-255

Add quotes around variable usage to prevent word splitting

Fix PHP syntax in prefixes.php

Properly quote variables

No functional change intended

Update external http links

Avoid creating empty ciscoavpair rules files. Fix #13243

Inhibit startup error printing to stdout in read_global_var

Delete temporary route file on OpenVPN client disconnect. Fixes #13145

ovpn-dnslinkup: do not set interface routes for DNS servers

If the OpenVPN server provides DNS server information (and 'Pull DNS' is
set) we add these DNS servers to our DNS configuration.
That's fine, but we should not add interface routes for these DNS...

Cleanup PPPoE VIPs on interface down to fix IP address order. Issue #11629

Reload static routes on L2TP VPN client connect. Fixes #13099

Make openvpn.connect_async.sh executable

Add option to limit concurrent connections per OpenVPN user. Implements #12267

Clear stale Cisco-AVPair anchor rules. Fixes #12332

Improve OpenVPN client connection logging and logic
In preperation for fixes and features

Use OpenVPN deferred client-connect. Implements #12407

Move openvpn client-connect script to separate file
to prepare for deferred client-connect

Remember dyn GW when if is down. Issue #12931

• When a dynamic interface goes down, retain its old gateway address in
  a place we can read if if necessary
• When a dynamic interface comes up, remove the file with the old gw
• Add a function to fetch the old gateway...

Multiple DHCP6 WAN connections. Fixes #6880

Restart services on PPP client connect. Fixes #12811

Restart services on OpenVPN client connect. Fixes #12771

ACB notify improvements. Feature #12724

Revert "Use OpenVPN async client-connect, clear stale rules, add option to limit connections per user. Implements #12407 and #12332 and #12267"

This reverts commit 7aaa20d95a345c4688e8786c755c7d0433451688.

Update the Copyright year of the files owned by Rubicon/Netgate.

Add missing upload_url to acbupload.php. Fixes #12572

Use OpenVPN async client-connect, clear stale rules, add option to limit connections per user. Implements #12407 and #12332 and #12267

Modal window to see RADIUS ACL generated rules on the status_openvpn.php page. Implements #12321

Replace unlink() by unlink_if_exists()

Use client-connect/client-disconnect script for Remote Access (SSL/TLS) server mode. Fixes #12238

Fixed missing $ warning

Completes #12193. Ready for testing. Revert only this commit to go back to old ACB system.

Delete unsupported backups

Prototype cron script to upload ACB backups per #12193

OpenVPN client IP address logging. Implements #11935

Add/remove OpenVPN client PTR record. Fixes #11938

ovpn_auth_verify improvements. Issue #11829

Use full path for executables in /usr/local/sbin/ shell scripts. Fixes #11985

Kill IPv6 client states on OpenVPN disconnect. Implements #11700

OpenVPN Cisco AVPair {clientipv6} template. Implements #11596

Change OpenVPN auth to php-cgi for the time being. Fixes #4521

Allow to use OpenVPN provided DNS servers. Implements #11140

Update the Copyright year.

A subsequent commit will deal with .po's.

Add product_label global variable

Introduce product_label global variable, by default with same value of
product_name. The idea is to make it easier for rebranded products to
change the name on all visual texts while internal structures are
preserved.

While here, remove deprecated $g['platform'] and also replace places...

Do not restart Unbound on OpenVPN client connection. Implemets #11129

Different interface name for L2TP VPN. Fixes #11006

Rework route functions

- Created route_table() that returns an array containing all items from
route table. It uses --libxo to get a json object
- Created route_get() that return an array with route items to desired
target
- Created route_get_default() to get current default route for inet or...

Ticket #9267: Fix dhclient-script to handle error properly

Merge pull request #4202 from vktg/ovpn6resolve

Handle DHCP Lease when the assigned Gateway is Outside of Subnet. Issue #7380

Register OpenVPN client IPv6 address in DNS Resolver. Issue #8624

OpenVPN radius ACL enhancements. Issue #9206

Use correct syntax for /bin/sh for loop in ovpn_auth_verify Fixes #7767

It's not bash.

Merge pull request #4145 from vktg/ovpnocsp

squashed commit

This is 2020. Issue #9245

Update copyright notice years. Issue #9245

IPsec swanctl conversion. Implements #9603

• Converted IPsec configuration code from ipsec.conf ipsec/stroke style
  to swanctl.conf swanctl/vici style. Issue #9603
• Split up much of the single large IPsec configuration function into
  multiple functions as appropriate....

Merge pull request #4030 from jalavoy/master

Add log compression type option. Issue #9711

Include system.inc in prefixes.php. Fixes #9715

Change logging to plain text, deprecate clog. Issue #8350

Add kernel memory usage to status.php. Implements #9705

Fix copyright message years to reflect BSDP -> ESF -> Netgate

Fixed #9245 updating copyright notices

Revert "Change ovpn_auth_verify_async to php-cgi. Fixes #9460"

check_reload_status 0.0.10 fixes the original issue, this can go back
the way it was.

This reverts commit ce76f299853dccb036de229f08a30013593c98fd.

Change ovpn_auth_verify_async to php-cgi. Fixes #9460

making sure my tabs align with upstream

adjust GEOM rebuild notifications to only notify the user when raid rebuild hits 25% increments

When a geom rebuild is occurring, this script by default notices that the device status has changed every time the rebuild hits a new percentage.
This results in a user getting 100 separate notifications (emails) every time a new percentage ticks....

Update copyright notices to 2019. Happy New Year

ssh settings alignment. Fixes #8974

Remove redundant settings stored in the wrong place
Store all ssh settings in the same place
Initialize this array before use

Added scheduled config backup
Fixed: #8947

Merge pull request #3908 from pdemonaco/master

routing, add option 'automatic' for gateway selection, and allow manual ordering of gateways

Remove Whitespace

I'm aware this is a very large commit. Let me know if you'd rather have it broken down by file type (ie: PHP/shell scripts) so it would be easier to review.

-RJ

Resolves #7905

Minor correction to the script header. Also switches back to printf
instead of echo -n for more broad base compatibility.

Merge remote-tracking branch 'upstream/master'

Bug 7905 - Auth Script & Openvpn Config

Replaces the current auth-user-pass-verify directive with the new plugin
call in the config-file generation code.

Also modifies the new asynchronous script to use "echo -n". This
probably isn't necessary but it doesn't hurt.

Trim domain for learned DNS entries. Ticket #6847

If the CN is already an FQDN on the given domain, this prevents the
domain from being present in the record twice (e.g. host.example.com
as a CN leads to records for host.example.com.example.com)

Bug 7905 - Minor Tweaks

Switched to printf over echo to ensure strict POSIX compliance. Also
added some comments regarding the source of two unset variables.

Bug 7905 - New Auth Script

Initial pass at new auth script which will be called by an openvpn
plugin. See https://github.com/pdemonaco/auth-script-openvpn for detail.

Update the Copyright notice for pfSense.

Fix logging for L2TP and PPPoE server login/logout events. Fixes #8164

See https://redmine.pfsense.org/issues/8164 for the reasoning about why it was done this way.

Merge pull request #3810 from svenauhagen/bugfix/mpd

Merge pull request #3183 from znerol/feature/master/register-openvpn-cn

MPD Custom Modem Init

I changed the path of egrep

As discussed

Update ppp-linkdown

Style fix

Update ppp-linkdown

PPP down script change

Use full paths for more binaries