pfSense

Revert "Show negate option in popup for advanced rule options. Fix #15214"

This reverts commit e933a0230e366faa772686447b530a145af06acf.

Show negate option in popup for advanced rule options. Fix #15214

While there, reoder the tag text to read closr to
how rules are processed.

Add scroll when nagivating menus overlfow. Fix #7943

Kill states on gateway failover recovery. Implement #855

Sync generated gateways to config. Fix #12920

Remove OpenVPN engine option. Implements #15188

It's been non-functional for years and is only confusing users now.

Per-rule State Policy option. Implements #15183

Adds a setting in the advanced section when editing a firewall rule
which allows a rule to use a state policy that differs from the
configured default.

Fix RA IPsec EAP-RADIUS accounting. Fixes #15176

Set the flag which only activates accounting for connections with VIPs
which will restrict accounting to only mobile IPsec connections.

IPsec P1/P2 delete corrections. Fixes #15171

Add option to set State Policy. Implements #15173

Also changes default policy to if-bound.

Use absolute links in GUI info messages. Fixes #13413

Fix packet captures on tailscale. Fixes #15145

Merge pull request #4664 from opoplawski/no_system_dns

Handle VIPs in OpenVPN Wizard. Fix #15148

Font Awesome: Update to v6.5.1

Consolidate is_url_hostname_resolvable() into resolve_address()

is_url_hostname_resolvable() used gethostbyname() which only
supports getting IPv4 records. This change makes resolve_address()
more flexible by accepting URLs and consumes the timeout code
from is_url_hostname_resolvable().

Clarify function use and description

Refactor system DNS check. Fix #15127

Improve validation of DNS Resolver Python script. Fixes #15135

Update the years in the Copyright notice.

Correct DHCPv6 lease shortcut section. Fixes #15117

pfSenseHelpers.js: improve usepost interface. See comment.

Trim DHCP & DHCPv6 search strings. #14261

Fix typo in setup wizard. Fixes #14989

Show only the Message column for raw logs. Implement #15106

Remove TOTH. Fix NG#12636

Fix off-by-one error when checking for system uid/gid. Fix #15067

Use the correct fontawesome icon prefix

Allow disabling RA with no IPv6 config on the interface. Fix #14967

Don't refresh the cache when visiting the update page. Fix #15055

Update fontawesome references in form buttons

More fontawesomev6 updates

Refactor use of return_gateways_array() with get_gateways(). Fix #14893

Most calls to return_gateways_array() do not need the gateway list to be
recreated. get_gateways() can filter the gateway list, and indexing is
moved from return_gateways_array() to get_gateways() to avoid using...

Don't split fontawesome icon names

This makes it easier to update fontawesome versions. While here, fix a
missing closing quote, and use the correct fontawesome prefix.

Remove duplicate class

Update fontawesome icon names to v6. Implement #13537

Revert "Update fontawesome icon names to v6. Implement #13537"

This reverts commit 32be4696a301144c650f4765b8a2b51e28d95a40.

Update fontawesome icon names to v6. Implement #13537

Utilize new -C flag to pfSense-upgrade

pfSense-upgrade's -c flag is intended to check only for upgrades against the
currently configured repository (better termed as updates). The new -C flag
expands the search for new versions of core packages into other non-devel repo...

Update direct config access in services_dhcpv6.php. Fix #14978

Remove invalid field from input validation. Fix #14965

Save the mobile IPsec group auth setting. Fix #14963

Merge pull request #4653 from PhilZ-cwm6/patch_ovpn_nbdd

Update nvd3. Implement #13537

Update fontawesome. Implement #13537

Update jQuery and jQuery-ui. Implement #13537

Fix PHP error when saving PPP interface w/o config. Issue #14949

Merge pull request #4603 from luckman212/reduce-log-spew-during-static-dhcp-deletions

Merge pull request #4603 from luckman212/enhancement-to-dhcp-static-map-handling-of-duplicate-ips

Update misleading function names. Fix #11566

OpenVPN: expose NBDD servers in GUI

In GUI for both server and client specific overrides, add option to push DHCP NBDD option to client

Merge pull request #4575 from PhilZ-cwm6/patch_vpn_netbios_settings

Hide WINS fields if NetBIOS is disabled. Fix #13087

Use a function to get OpenVPN device names

Rector some direct config array accesses with pure scalar paths.

Specify specialnet flags when calling get_specialnet(). Fix #14935

Allow passing specialnet flags to pconfig_to_address() to correctly
handle address/network config elements. Also correctly handle VIP
selection in nat/binat rules.

Don't use aliases in binat rules. Fix #14918
While there, handle negated binat addresses.
Also use the correct specialnet description.

Fix some syntax/logic errors in interface config.

Save rules changes before the ruleset is sorted.

MVC updates for SSH and gateways code.

Recognize the 200xx Series QAT device. Implement #14844

Amend P12 error for bad ciphers. Fixes #14877

Fix state dump rule ID validation. Fixes #14880

Correct typo. Fixes #14873

Exclude address/network type from specialnet checks. Fix #14867
These are placeholders for the real value, not specialnets.

Use the interface name for the reserved system alias suffix. Fix #14866

Specify specialnet flags for GUI fields. Fix #14845
Store the flags in variables to allow easier future updates.

Save a duplicated floating rule after the original rule. Fix #14856

Fix PHP error on 1:1 NAT w/if macros. Fixes #14845

kea: prevent configuring static reservations with both mac and cid matching

Refine IPsec P1 cert wildcard check. Fixes #14831

Introduce Kea DHCP

Use intval of portal voucher data. Fixes #14325

It was already tested to be numeric but this normalizes the result so it
doesn't have things like leading zeroes or trailing decimal points.

Avoid PHP err with missing P2 data. Fixes #14525

Use access functions to ensure we always have an array when expected in
this block of code.

Correct CE logo w/Compact-Red Theme. Fixes #14807

Doesn't affect Plus logo, only CE.

Fix submitted by James White via Redmine

Fix build time on sysinfo widget. Fixes #14791

While here, add a fallback method and error handling in case the file is
missing or invalid.

Pcap: Validate+Encode count & length. Fixes #14809

Cleanup some unused variables

Fixup some separator config access issues. Fixes #14794

Fix variable name typo. Fixes #14790

status.php: Fix error count. Fixes #14513

Make header before adding note at the bottom, otherwise error count is
off by one.

Correct PPP provider pre-fill. Fixes #14544

• Make pre-fill behavior function correctly on interfaces_ppps_edit.php
• Fix some inconsistencies in similar code on interfaces.php and
  interfaces_ppps_edit.php

Add status output package plugin hook. Implements #14777

• Move status output functions to a separate include file
• Change function names to be specific to this include, the old generic
  names may conflict in certain cases (e.g. FRR status uses the same...

Improve error handling in status.php. Implements #14513

PHP updates in interfaces.inc. Implements #14790

• Converted to new array/config access functions. Implements #14790
• Eliminated direct config and $g access. Issue #14790
• Fixes #14579
• Fixes the part of issue #14544 relevant to interfaces.php

Use full path to tail, sort output. Issue #14758

status_carp: use the new `pfctl -sc` command

Try alt. way of validating route GW fam. Fixes #8846

The when passed a gaetway name, the function won't see a gateway
for a disabled interface as valid. Thus, since we have already
cached the gateway info, try passing the GW address we have
cached instead. This bypasses making the function look up gateways...

Only log radvd level err and higher by default. Fix #12938
Previous behavior can be restored under System > Advanced > Networking

Automatically configure the state hash tables size. Implement #14750

Add unbound option sock-queue-timeout to the GUI. Implement #14731

Correct Mobile IPsec P2 PFS. Fixes #14736

Show outbound NAT pool options with subnet VIPs. Fix #14740

Show value of Speed Shift preference. Issue #14047

Adds the ability to display the underlying value of range (slider)
controls, and activates this for the Speed Shift epp setting.

Intel Speed Shift support. Implements #14047

GUI controls only appear on hardware that supports Speed Shift.

Show IPsec P1 auth in list. Implements #14726

While here, pluralize "Mobile Client" label on mobile P1 since it's
inconsistent with other usages in the IPsec GUI.

Correctly shift separators when deleting a single rule above a separator. Fix #14691

Remove the original rule when chaning the rule's interface. Fix #14691

Refactor rule separators. Fix #14691

Fixup PPPoE server input validation. Fixes #13909