pfSense

Fixed NTP status page not honouring NTP ACLs

Reported in redmine https://redmine.pfsense.org/issues/7609

(cherry picked from commit d73918f2a241f5b072a8b9fd2e29b82ad0a16ec1)

Fix JSON encoding of gw/gwg params for firewall rule gw list. Fixes #8962

(cherry picked from commit 157aff9e256aa235ba68ccc2168c61fc61e90072)

Fix a display bug in status_gateways.php
This bug causes the Monitor IP to appear even when a gateway
is unmonitored. The monitor IP from the last gateway in the list
to have one will simply get repeated. This patch fixes that bug,
and also cleans up a few other things- unused variables, gets...

Underscores never hurt nobody
Also, i18n

(cherry picked from commit 42c059894a4a521415c35dc048952658f61fad65)

Fix redirect back to user mgmt when editing user 0. Fixes #8920

(cherry picked from commit e2f60597df488cf073d14913d8a523cbb447f733)

Initialize DHCP settings before use. Fixes #8919

(cherry picked from commit 124ca365049368460598621f962ad0b4f5459d7a)

Don't allow deletion when spoofing another userkey

(cherry picked from commit 3fd4f32c344573addea1dbb44dddef63b0e793e3)

Fixed #8901

(cherry picked from commit d33560e8dcba496a553f33c50113877778c3274b)

Fix dashboard update check & gitsync settings. Fixes #8913

(cherry picked from commit 26e1525c153a672457a92d65f9c05d45b43a204d)

Fix #8911: Keep configured pkg repository when restoring config

small change to fixup https://redmine.pfsense.org/issues/8851
without this, clicking edit on existing CA goes to wrong screen
and breaks Save button

(cherry picked from commit 3319f34dfdec8e09c7b561a0689610c9a4ca3ee2)

Init syslog settings before using the array. Fixes #8905

(cherry picked from commit 508c66ace779a6021b217d055b53587fdb021fec)

Initialize DHCP settings in setup wizard. Fixes #8889

Rather than assume they are present, create the arrays before use.

(cherry picked from commit 7c15c19d76eac725c42133012488cb97e4dcd885)

Fix a PHP erorr when a CRL has no certificates

(cherry picked from commit d9064f0b92452daeaf0cb7f0a0e74561f246ed5b)

Fix typo

(cherry picked from commit 3b55fc639cdea2be20d55113055fd511ba193866)

Revert "Default VTI remote to Address but allow it to change. Fixes #8859"

This reverts commit da54e84ae79328a87b4a319239bb1b14d7ed2ce6.

Prevent a user from selecting VTI for mobile IPsec. Fixes #8877

(cherry picked from commit 885cf6a751f076f43fa89167ba2a79f779244f1b)

Changes on the parent interfaces will create new interfaces and the existing VLANs needs to be redone.

Ticket #8527

(cherry picked from commit 6fd6b8536b80316caf0f3b9221ed6af0b3453571)

IPsec VTI requires a manually specified network/address. Issue #8877

Prevent a user from selecting an interface macro like "LAN Network"
which cannot be used with VTI since it does not work like traditional
IPsec Phase 2 definitions.

(cherry picked from commit 02af14942872567362f1761f06a1d754080da074)

Init gateway group array before use. Fixes #8876

(cherry picked from commit b54a1af45c5add4e57253bfa0b562dadf3ae10f7)

Welcome pfSense 2.4.4-RC

Fix #8806: Configure captive portal on secondary identical as master HA node

Fix #8721: Call proper filter_configure function from this class

Change status.php to use "ifconfig -v". Implements #8860

Default VTI remote to Address but allow it to change. Fixes #8859

Make async_crypto explicit enabled/disabled rather than current isset

Initialize IPsec logging array before use. Fixes #8857

Fix #7694: Replace sshlockout_pf by sshguard

Set default new CA/Cert action to Create Internal. Implements #8851

Fixes #8767 PHP7 syntax error

fixes #8837 part 2, initialize as array instead of string for PHP7

Bug was fixed in pfsense module and this code is no longer needed so removing.

Revert ticket #1337

FreeBSD is not happy with simple set VLAN to use a different MAC
address. Revert it for now and prevent users to change VLAN interface
MAC address.

Fix some integer assumptions with calculate_ipv6_delegation_length()

Escape arguments when relinquishing a DHCP lease. Fixes #8843

Fix extra braces

Fixed #8838

Fixed #8837

Add missing break in IpAddress form class. Fixes #8834

Fixed #8812

Perople were misunderstanding "hint" so changed it to "identifier"

PHP7 fixes: Use of undefined constants

Do not let users change QinQ mac address

Remove not used 'Copy my MAC' button code

Merge pull request #3974 from Augustin-FL/patch-passthrough

Use ctype_xdigit() instead of is_numeric() to validate hex. Issue #8824

Add the GUI support to set the VLAN Priority for the DHCP requests.

Ticket #7425

Automatically store username of the MAC created pass-through

Fixes #8800 Interfaces will show up in the group edit page even if disabled so they can be removed

Redact lightsquid pw in status output. Fixes #8819

Add "select all" control to remaining NAT pages

Make config_array_from_str() function more general

Fixed #8803

Fixed #8803
Don't attempt to access $config elements that don't exist. PHP7 doesn't like it

Only show the DHCP6 VLAN Priority settings for VLAN interfaces.

Certs: Fix CA subject assumptions. Fixes #8801

Several areas made assumptions about the number and order of CA subject
fields that were no longer correct after issue #8381 was corrected.

While here, also remove some outdated references to fields that are no...

Declare variable out of loop

Try to run upgrade script 3 times

Fix #8519

- Remove possible leftover sockfile before call pfSense-upgrade
- Wait until sockfile exists while process is still running
- Make sure to start polling only if process is running and sockfile
exists

Remove leftover

Make sure to use string starting at __RC= position

Do not use gettext() on default LAN interface name

Add logged in user to Dashboard sysinfo widget. Implements #8817

Fixes #8805 Refresh captive portal zone when vouchers are changed to regenerate captive portal login page

Added "select all" control
Fixed #8812

Added PORTAL_MESSAGE to template, fixed some wording and styling

Readded second authentication type to default captiveportal login

Merge branch 'master' of gitlab.netgate.com:pfSense/pfSense

Updated captive portal to use a template with customizable image uploads

Co-authored-by: Felix Häberle <felixhaeberle@users.noreply.github.com>

Do not blindly unset values that may not exist in OpenVPN wizard. Fixes #8792

Merge pull request #3971 from Augustin-FL/captiveportal

fix failed implode when auth_server2 is empty

Disable OpenVPN compression for new instances by default. Fixes #8788

Also add warning text that cautions against enabling compression.

While here, also add missing "stub-v2" compression mode.

Revise setup wizard link

Fixed #8745 by trimming nulls from bridgeif

Merge pull request #3640 from Augustin-FL/master

Rework pkg_mgr_install.php

There were many reports from users that in some specific cases GUI was
losing track of pfSense-upgrade instance and showing messages saying
upgrade process aborted while it was still running in background.

Keep track of pfSense-upgrade wrapper process started by GUI and...

Revise Netgate product links

Update and clarify captiveportal GUI settings

Update captiveportal RADIUS Accounting

Make captiveportal use user manager as auth source

Merge pull request #3946 from martinisoft/martinisoft/dnsimple_v2_api

Merge pull request #3934 from PiBa-NL/20180406-outboundnat-ipv6-mixedaddresses

Normalize RADIUS authentication

Add GUI control for IPsec async crypto. Implements #8772

Remove pfsense => pfSense nonsense that was breaking wizrd hyperlinks that included hte product name

Revise Netgate links

Fix #7604: Rework pkg reinstall on config restore

- Remove old code needed to upgrade fom < 2.3 to 2.3
- Simplify logic using a single file /conf/needs_package_sync
- Create /etc/rc.package_reinstall_all, a script used to reinstall all
packages present in config but not on pkg database...

index.php doesn't need to care about needs_package_sync

Simplify logic and break some long lines

Fixes #8741 make sure type is selected before specifying address(es)

Fixes #8101 added an input error if the alias name was equal to the alias value

Revise setup wized for consistency

Fix #8595

Implement MTU override option that allow client to force a bigger MTU
value than the one negotiated on LCP that is known to work.

Merge pull request #3968 from stephenw10/master

Remove unnecessary 'pppoe' class

Revise page footer height

Show/hide pppoe-multilink-over-singlelink advanced option

Fixed #8673

Fix #8737: Add option to use multilink over single link for PPPoE