pfSense

Add Next Hop info to status output

Refactor translation target for outbound NAT

Refactor display of special networks

Allow use of interface groups in firewall rule source/destination fields. Implement #14448

Refactor usage of special networks
Pre-requisite for easier implementation of interface group in firewall rules.

Use the correct index when saving rule separators. Fix #14619
Also fix displaying rule separators with an out of range index.

services_dhcp.php: just hide relay-enabled interfaces

Clarify IPsec Keep Alive description. Fix #12762

dhcp: support simultaneous v4 dhcpd and dhcrelay, Implements #14620

diag_edit.php Improvements. Fixes #7589

Fix Captive Portal view HTML link param. Fixes #14598

The way the code regex matches the parameter it needs the extra bit on
the end so it both matches the regex and gets the target parsed out.
Also this makes it consistent with the other links in the section.

Add dynamic DNS support for Porkbun DNS, closes #14402

Signed-off-by: Nita Vesa <nita.vesa@elektrik.link>

services_dhcp_relay.php: introduce proper shortcut section for dhcrelay

services_dhcp.php: cleanup warning notice when DHCP relay is enabled

Don't fetch contents of nonexistent URL aliases. Fix #14574

Correct JS for bulk rule copy convertif. Fixes #14576

ipsec: correct typo in var name when modifying p1s

ipsec: refactor config access

Add page title to system_register.php. Fixes #14462

Improve GIF/GRE interface handling. Fixes #14549

Encode dynamic log if filter. Fixes #14548

Multiple issues with PPP providers. Fixes #14547

• Update code for PHP 8.x
• Fix connection name handling (validation, parsing, etc)
• Fix output encoding of plan data

Tested with a variety of countries/providers/plans, output looks OK in
all cases I've checked.

Add option to invalidate GUI login on IP address change. Implements #14265

firewall_rules.php: default to the first configured interface, Fixes #14345

Correct ambiguous Unbound TTL Host Cache descr text. Fixes #14358

Use the dynamic repos help text instead of the old 'custom' repo.

Fix a merge problem in the last commit to accommodate a small difference with Plus.

Add the dynamic repos support.

Load the repository settings dynamically from Netgate, allowing for more
flexibility and direct support to update for the Plus repositories.

Fix references to 'disable_carp' introduced in 62fb07c816. #2218

The original commit had some lingering references to a function 'disable_carp'
that had been abandoned in favor of a single 'enable_carp' function with enable
arg. This commit corrects these lingering references.

Fix PHP error from invalid IPsec P1 config. Fixes #14458

Switch to PHP 8.x friendly functions to access multi-level array parts
since there is a chance they may be empty or partially defined in the
encryption algorithm section.

OpenVPN CSO: Improve form field JS. Fixes #13088

Originally-From: PhilZ-cwm6 @ GitHub

Convert AJAX GET calls to POST

Correct alias bulk import regression. Fixes #14412

While here, ensure that a broken alias configuration does not cause PHP
errors which prevent users from using the GUI or console.

Add VLAN support validation for the Packet Capture interface. Fix #14376

Replace abbreviated links from System menu

Disable CARP until services have started and before shutdown/reboot. Fixes #2218

CARP has historically been enabled as part of interface bringup and sync setup
fairly early in rc.bootup. This change intentionally shuts down CARP from
interface bringup all the way until services have been started to ensure that a...

Ensure RSS widget number values are treated as int. Fixes #14365

Remove unnecessary utf8_encode'ing to pfSense_kill_states arguments. Partial #9270

FW rule GW status popup improvements. Fixes #14327

• Fix status check to account for current gw status/substatus strings
• Include Tier for gateway groups
• Sort groups by tier and then name
• Fix interface name printout
• Optimize interface name and gw address display to avoid multiple...

Corrections for shaper wizards. Fixes #13915

• Fix many inconsistencies in formatting between the wizards
• Fix a few potential bugs in both (changes made to one to fix issues
  were not reflected in the other).
• Various style and whitespace corrections.

PHP 8 fixes in Dedicated Links Shaper Wizard. Fixes #13915

While here, clean up some formatting.

PHP 8 fixes in Multi-All Shaper Wizard. Issue #13915

While here, clean up some formatting.

Additional changes to new Packet Capture GUI. Implements #13382

Fix handling of OpenVPN client TN. Fixes #13350

• ifconfig format was incorrect for certain mode combinations, leading
  to OpenVPN failing to start.
• Changed wording on GUI TN field descr so it's more clear that the TN
  shouldn't be set in most cases, also mention that the user should be...

Fix default DHCP server if selection. Fixes #14115

Add user limits pchtherm data. Implements #14255

Trim whitespace from static addrs on save. Fixes #13959

Multiple issues with ICMP NAT/Rules. Fixes #14267

• When making an associated firewall rule for a port forward, do not
  craft what would be an invalid port range.
• When saving a firewall rule, safely handle an empty ICMP subtype list
• When generating firewall rules, only check src/dst ports for protocols...

Additional changes to new Packet Capture GUI. Implements #13382

Add PCH thermal data to the thermal sensors widget and RRD graphs. Implements #14255

Fix punctuation. Fixes #14188

Update fw host/domain description text and add to wizard. Fixes #14250

• Update firewall host/domain description text
• Use same description on system.php and setup wizard

More flexible packet capture GUI. Implement #13382

Remove deprecated/removed NCP toggle from OpenVPN. Fixes #14201

OpenVPN wizard updates. Fixes #14183

• Added Randomize Serial option when creating CA
• Added Common Name field to CA/Cert (still can use descr if blank)
• Added OU field to CA/Cert
• Fixed checkbox option text hint/description alignment
• Updated some field descriptions...

Update direct config access in status_logs_settings.php. Fix #13942

Skip blank SAN values, make + more clear. Fixes #14124

Allow editing of CRL properties. Fixes #14185

Fixes editing of imported CRLs and also allows editing properties of
internal CRLs.

Note that CA serial is ignored when randomizing. Fixes #14188

While here, when creating a CA, set the default serial to 1 since the
GUI won't allow saving with the serial remaining at 0. That would
otherwise force the user to change it themselves.

Capitalize "dns" in DynDNS ttl help text

Reorder DynDNS zone id help text alphabetically

Reorder DynDNS pasxsowrd help text alphabetically

Reorder DynDNS username help text alphabetically

Reorder DynDNS hostname help text alphabetically

Correct plural seconds check.

Improve alias sorting (again). Issue #14015

asort does not handle natural case-insensitive sorting of
multi-dimensional arrays properly, so it needs a custom sort but also
has to preserve the index keys or else making changes in the GUI won't
use the correct IDs....

RAM disk size check/options update. Fixes #13508

• Update RAM disk size/free memory calculations
• Fix up some text in the option labels
• Show current /tmp and /var usage
• Add info about tmpfs and swap

Add more disk info to status output. Implements #14103

Fix typo. Fixes #13860

Auth log behavior update. Fixes #12464

Add knob for console bell (default: enabled). Fixes #14002

Do not allow an interface to use PF reserved words as its name. Fixes #14007

Improve floating rule handling of missing VPNs. Fixes #13953

Improve handling of XMLRPC sync of empty sections. Fixes #14034

Improve error handling in ACB. Fixes #14060

It wasn't printing a helpful message when it failed to decrypt a
configuration (e.g. using the wrong key).

Resolve various PHP8 issues in ACB. Fixes #14076

Fix labels and description dissapear in firewall_schedule_edit.php, #11877

Aliases config access refactor by brd

Fix PHP errors from empty DHCP configs. Fixes #13983

Fix PHP error from migrating old NTP settings. Fixes #14033

Fixup IPsec enc algo PHP 8 issues. Fixes #14009

Correct includes in IPsec widget. Fixes #14053

Improve validation and escaping of bridge interfaces. Fixes #14052

system_advanced_admin config refactor

Update memory calulations. Implements #14011

• Update memory usage calculation for system info widget
• Add RRD data sources for new memory areas
• Upgrade code to expand current memory RRD file with new DS entries
• Make code that composes the commands which fetch memory info more...

Correct alias sort order. Fixes #14015

Correct alias bulk import code for PHP 8.x. Fixes #14013

Always work with cert list as array. Fixes #14004

NTP status corrections. Fixes #13999

While here, unbreak the GPS status display.

Fix DHCP server config path typos. Fixes #13965

Update copyright years to include 2023

Enable the registration page on Plus.

Allow the customers to re-register an existing instance if the NDI changes.

Ticket: 9580

Refactor some direct config access in sysctl

Remove unnecessary count param. Fixes #13890

Fix PHP error on diag_backup.php. Fixes #13876

Fix conf history confirmation prompt. Fixes #13861

• Change confirmation method to be compatible with usepost
• Update action icon titles to be more descriptive, which improves the
  confirmation dialog text as well as accessibility.
• While here, add a note to restore message about how to activate the...

Restore resolver host override sorting.

Fix #13799: Unbound python module persistently shows enabled in resolver settings.

Always declare $config global in case a script is included in a non-global scope

$config is expected to always be a global containing the parsed configuration,
however in the sources that it is assigned a value in toplevel scope it is not
explicitly declared as such. As a result, if one of these sources is included in...

PHP 8.1 fixes for DNS Forwarder Hosts/Overrides. Fixes #13781