pfSense

Add product_label global variable

Introduce product_label global variable, by default with same value of
product_name. The idea is to make it easier for rebranded products to
change the name on all visual texts while internal structures are
preserved.

While here, remove deprecated $g['platform'] and also replace places...

Allow to select VXLAN interfaces for VLAN. Fixes #11143

Hide VTI interfaces from Interface Group member list. Issue #11134

Bridge prio/cost saving fix. Issue #11122

Use idn_to_ascii() only for host type aliases. Fixes #11106

Ticket #9270: Make sure parameters are UTF-8

As described on ticket, for some reason we still don't know, when
pfSense_kill_states() is called with subnet as parameter (n.n.n.n/n) it
makes changes on $_POST content that can lead system to unpredictable
results....

Fix icon file name

Revise apple touch icons

Update/sync DynDNS/RFC2136 status note. Fixes #3229

Traffic Graphs widget options fix. Issue #11072

Add note about not using bogons on LANs. Issue #10866

Add symlink to accommodate apple-touch-icon-precompressed.png

Create poesX interfaces for PPPoE server. Issue #11034

DynDNS status icons. Implements #3229

Status interfaces icon. Implements #11045

Gateways widget improvements. Implements #11057

Backup extra data fixes. Issue #11050

Fix #11053: Check variable before call implode()

Do not restart L2TP VPN server when deleting user. Fixes #11059

Unbound custom TLS port fix. Issue #11051

Dashboard widget interface name popup hint. Implements #11041

Fix #204: Add messages to all write_config() calls

Remove commented out lines

Fix indent

OpenVPN client fallback cipher variable changed. Fixes #10919

OpenVPN compression settings improvements. Issue #11020

• Hide compression options when compression is not allowed
• Omit compression options from the OpenVPN configuration when
  compression is not allowed

Fix display of OpenVPN dev mode when empty/missing. Issue #10919

Improve OpenVPN Duplicate Connections option description. Fixes #10363

Change default config domain to home.arpa. Implements #10533

Fix display of OpenVPN data cipher when NCP is disabled. Issue #10919

OpenVPN Data Cipher changes. Fixes #10919

• Change handling of data ciphers so they work properly for TLS and
  shared key
• Move some duplicate code to a function
• Improve display of data ciphers in the OpenVPN server list
• Other misc improvements to OpenVPN server and client list to bring...

LDAP shell authentication. Implements #8698

Set child interfaces MTU fix. Issue #11035

IKEv2 vtimap creation fix. Issue #9592

Fix a typo.

Obtained from: FE

OpenVPN data cipher negotiation updates. Fixes #10919

• Rename "NCP Algorithms" to "Data Encryption Algorithms" to reflect the change in OpenVPN (frontend and backend, e.g. "ncp-ciphers" changes to "data_ciphers")
• Change "Encryption Algorithm" to "Fallback Data Encryption Algorithm" and move it below "Data Encryption Algorithms"...

OpenVPN compression options update. Issue #11020

• Add new "Allow Compression" option for OpenVPN 2.5.0. Defaults to asymmetric
  (Decompress incoming packets, do not compress outgoing packets) for a more
  secure and smooth transition to disabling compression entirely....

Remove OpenVPN tun server IPv4 tunnel network requirement. Issue #11020

No longer required on OpenVPN 2.5.0

Track Interface / PD improvements. Issue #5999

HA Sync input validation message fix. Issue #11017

HA sync synchronizetoip input validation. Issue #11017

Fix radvd-dns checkbox after save

Fix diag_dns.php hostname usage

Style fixes

Hide DDNS key algorithm if DDNS is not used. Issue #10224

Allow to register OpenVPN Remote Access (User Auth) client in DNS Resolver. Implements #10999

Save OMAPI settings in dhcpd.conf. Issue #10270

Port Forward IPv6 alias fix. Issue #10984

IPv6 Port Forward alias fix. Issue #10984

LDAP test pop-up style fix. Issue #7912

Merge pull request #4482 from cpick/cloudflare-token-query-zone

Fix number format

Removed debuggery

Added Ajax handler to scaled state table display

1:1 NAT fix dual-stack. Fixes #10986

Port Forward IPv6. Implements #10984

Force NTP peers DNS resolution protocol. Implements #10322

Revise scaling factor calculation

Support omitting Cloudflare Zone ID for dynamic DNS

In May, Cloudflare
[improved their API](https://community.cloudflare.com/t/bug-zone-detail-by-name-requires-zone-list-permission/128042/14)
so that a token scoped to a particular zone now has permission to...

Minor refinements to state table size display

Completed #7016 as specified

Applied regex fix to primary DNS server per #10982

Fixed #10982 by adjusting validation regex.

IPsec bypass WebGUI fix. Issue #10977

VLAN MTU extra fix. Issue #9154

UDP/Other protocols state timeout. Implements #1635

Nested alias IDN fix. Issue #10968

Add gateway substatus. Fixes #10546

Update return_gateways_status to return a substatus as well as the existing status.

status changed to be one of online or down.
substatus can be one of none, down, highloss, highlatency, loss, latency, or force_down
...

Clean NDP table button. Implements #10975

VLAN MTU improvements. Issue #9154

Interface assignment fix for PPP interfaces. Fixes #10240

Fixed #10406 By adding "notoggleall" class to button group

Merge pull request #4470 from vktg/cleardhcpleases

Merge pull request #4478 from vktg/ddnsstatic

Merge pull request #4472 from vktg/ntpauth

Add help text to Register DHCP Leases in Resolver

This change adds a sentence to the help text for the `Register DHCP Leases in the DNS Resolver` input field.

Enabling this option has the non-obvious side effect of reloading Unbound each time a client obtains a DHCP lease. This reload flushes the resolution cache, which can mean long recursive lookups being required for even frequently used domains....

NTP server authentication. Issue #8794

Merge pull request #4477 from vktg/cphadel

Create key and zone section for static DHCP mappings. Issue #10224

Delete Captive Portal related files on HA node. Fixes #10891

Ability to clear all DHCP leases at once. Implements #7406

Use the full path.

Further reduce the sysctls parsed.

Remove the 'a' which does nothing when you specify OIDs.

Prevent over-matching the sysctl output

Merge pull request #4471 from vktg/pppoeaddfix

Merge pull request #4301 from vktg/arpclearbtn

Merge pull request #4469 from vktg/gwgrpopupfix

Merge pull request #4468 from vktg/syslogdintcheck

Remove space from EOL

Merge pull request #4466 from vktg/sanitizewifiradius

Merge pull request #4465 from vktg/sanitizesecret2

PPPoE server add fix. Fixes #10949

Button to clear the ARP cache. Issue #4038

Gateway group popover fix. Issue #10948

Revised fix 10945 to include gateway popup

Popover sanitizer stuff is more logically provided in pfSense.js where other popover controls live

Fixed #10945
By adding the HTML elements used in pfSense popovers to the default sanitizer whitelist

Rebind syslogd on interface change. Issue #9660

Sanitize WiFi 802.1x RADIUS shared secrets. Implements #10946

Sanitize secret2. Implements #10944