pfSense

Improve OpenVPN Data Cipher handling. Fixes #12677

Fix typo in warning text.Issue #12680

Redirect user to / if Plus and attempting to directly access system_register.php

Make registration process contingent on PLus vs CE to accommodate automatic CE -> Plus merging

netgate-ca.pem is now in the base image at /usr/local/share/${product_name}/ssl/netgate-ca.pem

Fix default password warning check. Fixes #12666

Use the existing function to check the password to avoid duplicating
effort.

Disable DNS Resolver recursion if the selected outgoing interfaces are not available. Fixes #12460

Originally-By: Viktor Gurov

Revert "Use OpenVPN async client-connect, clear stale rules, add option to limit connections per user. Implements #12407 and #12332 and #12267"

This reverts commit 7aaa20d95a345c4688e8786c755c7d0433451688.

Fix "assignement" typo. Fixes #12383

Update the Copyright year of the files owned by Rubicon/Netgate.

Ignore DynDNS requestif for non-custom providers. Fixes #12631

Merge pull request #4541 from blkeller/document-auto-nat

Merge pull request #4546 from olehfb/namedotcom_dyndns

Merge pull request #4540 from spootle/master

Minor cosmetic fix in gateway widget.

Make sure $sitems (skip items) is always an array.

Restart RADVD on interface IPv6 address change. Fixes #12604

IPsec RADIUS Advanced Parameters default value reset fix. Issue #12575

IPsec IKEv2 Retransmission options. Implements #12184

Revert "move firewall functions to include file"

This reverts commit a5a4cf87eeacfaf922151ce356fca1eee53762eb

Revert "Certmanager mvc"

This reverts commit 033c3ae82d20ca5760ed483cf8d0c947764b2371

Certmanager mvc

Gateway/Group link fix on the firewall rules page. Issue #12555

Add dynamic DNS service provider Name.com, closes #12567

Do not display direction indicator on the non-floating tabs. Fixes #12559

Certificate fields input validation. Issue #12035

SNMP IPv6 support. Implements #12325

Input validation to prevent removing a gateway if it is still in use by DNS servers. Fixes #8390

Backup and Restore SSH Host Key(s). Feature #11118

Gateway / Gateway group edit on the firewall rules page. Implements #12555

Add a note about the AutoConfig backup behavior. Implements #12296

Route overlap input validation fix. Issue #12554

IPsec status isset+is_array phase2 check. Fixes #12550

move firewall functions to include file

Do not show the pulldown menu when rebooting after restoring AutoConfigBackup. Fixes #10662

Static routes handling update. Fixes #11599 #11895 #7547

• Confirmation box to apply static routes add/route/change
• Reloading routes using aliases after changing the alias
• Correct route updates after changing destination or gateway

Support DNS server gateway selection on ``system.php`` for multiple gateways not assigned to interfaces. Implements #12116

Hide the Duplicate Connection Limit input field until the Duplicate Connection check box is ticked. Issue #12267

Interface Groups start digit input validation. Fixes #12529

Fix typo

Ui3 bandwidth

Local Logging warning note. Issue #12511

DNS check improvements for fw check and ACB. Fixes #12141

Uninitialized config variables in interface_assign.php

Use OpenVPN async client-connect, clear stale rules, add option to limit connections per user. Implements #12407 and #12332 and #12267

NTP Peer mode. Implements #11496

Input error message box on the interfaces_ppps.php page. Fixes #12514

Keep port value for PPPoE/L2TP/PPTP on interfaces.php page. Fixes #12498

Do not change ports value for PPPoE/L2TP/PPTP on interfaces.php page. Fixes #12498

Allow to delete limiter referenced in filter rules. Fixes #12503

status_logs_settings.php logcompression value fix. Issue #12011

Change traffic shaper wizard default bandwidth type to Mbit/s. Todo #12501

Wake All Devices confirmation prompt. Implements #12480

Document that upstream gateway controls WAN type vs. LAN type interface

IPsec SPD status updates. Implements #12397

• Fix backend parsing of setkey data
• Check for VTI vs tunnel mode
• Output mode in GUI status, and VTI interface name if available
• Make directionality of endpoints and arrow icon match in both the
  direction column and tunnel endpoints column.

Revise IPsec widget icon behavior. Fixes #12347

• Change P1 status test so it can detect the "connecting" state and show
  a distinct icon.
• Use gettext() for icon tooltip text
• Code optimization

Allow to select PPPoE Server authentication protocol. Implements #12438

DNS check optimization for NDP diag page. Fixes #11512

Send notification on WebGUI reboot/reroot/halt. Implements #12441

Icon for traffic direction on floating rules tab. Implements #12433

Update DNS Server Override and DNS Query Forwarding help text. Todo #12449

IPsec PC/SC daemon status / services page fix. Issue #12468

Set Gateway creation radio button to Both by default. Fixes #12448

Allow to use /0 netmask on IGMP Proxy edit page. Fixes #7749

Traffic Shaper Wizard IPv6 support. Implements #4769

fix filter expression to check correct variable instead of non-existing one

Use proxy for DDNS Check IP Services. Feature #12342

Dynamic DNS proxy option. Fixes #12342

Slack Notifications. Feature #12291

OpenVPN Generated RADIUS ACL Ruleset for status_output. Implements #12316

Modal window to see RADIUS ACL generated rules on the status_openvpn.php page. Implements #12321

IPsec PH2 BINAT subnet size input validation. Todo #12430

Display default Reflection Timeout value. Feature #12318

IPv6 Port Forwarding Proxy+NAT input validation. Fixes #12319

Reload syslogd on log Rotation Size / Retention Count change. Fixes #12366

Allow to halt OpenVPN client on status page. Issue #12416

Swap Captive Portal Redirection URL and Blocked MAC redirect URL input validation messages. Fixes #12388

Update help text for RAM disk settings. Fixes #12389

6RD Prefix input validation. Fixes #12435

Default preferred lifetime input validation. Fixes #12439

Fix IPsec P2 Keep Alive mobile check. Issue #12398

Fix Disks widget UI on UFS systems

```
PHP 7.4.22 | 10 parallel jobs
............................................................ 60/279 (21 %)
............................................................ 120/279 (43 %)
............................................................ 180/279 (64 %)...

Rename incorrect reorder function name in firewall_nat_out.php. Fixes #12377

Move hwcrypto call to sysinfo widget

• Removes disk usage from system information widget
• Adds Pfsense\Services\Filesystem\ library
• Adds new disk widget

Make ssh PermitRootLogin conditional. Fixes #12346

IPsec Widget none/disabled tunnels fixes. Issue #12337

Group copy fix. Issue #12226

Fix the diag_defaults.php PHP errors, include the required file.

Submitted by: SteveW
Ticket: #12340

Use minimized version of treegrid dependency

Adds missing treegrid dependency

Adds the TreeGrid plugin for jQuery to the pfSense UI stack.(https://github.com/maxazan/jquery-treegrid)

Adds the TreeGrid plugin for jQuery to the pfSense UI stack.(https://github.com/maxazan/jquery-treegrid)

Do not disable hash algorithms checkboxes in AH mode. Fixes #12324

OpenVPN exit notify & inactive incompatibilities

• Ignore exit notify in problematic cases. Fixes #12102
• Ignore inactive seconds in problematic cases. Fixes #12219
• Warn against using these options in problematic scenarios
• Hide from the GUI in obvious incompatible scenarios

OpenVPN Aliases support. Implements #2668

Move help redirects to server. Implements #12314

Redirect mappings are already in place on the docs web server.

Rename the Netgate devices.

XG-15xx -> 15xx
SG-5100 -> Netgate-5100

Revert "Clean up some messy HTML in the cert/ca display code. Prep for future MVC changes."

This reverts commit 8d4fcd7ac1167894136e337fc619e63fa7200fa0.

Log settings help text update. Implements #12012

• Improve notes about disk usage
• Add more calculations to estimate potential usage
• Improve notes about when to use/not use compression