pfSense

PFTop filter hide for non-states views. Issue #10625

(cherry picked from commit 253102fd66c35762a28d44ceffdfba7f1752fcda)

NAT Reflection timeout set fix. Issue #10591

(cherry picked from commit b8d9968cf44bc171c0b3eb020a72589d6c85d94e)

Fix #10525: Move locale directories to proper name

Sanitize FreeRADIUS passwords. Fixes #10568

(cherry picked from commit e8bf78f2bac413d86f2646669fda823f6502293e)

Set the default ICMP data payload size to 1 in dpinger probes.

This fixes the dropping of the ICMP probes in some broken routers/ISPs.

There is no increase of the packet size on wire as probes are smaller than 60
 bytes (all probe packets are padded)....

Correct regex to remove redundant RRD tags from backup. Fixes #10508

While here, improve regex so it does not leave extra whitespace/blank
lines in the resulting backup.

(cherry picked from commit 4213d677f6e665d1b391066c27c17155d8da1699)

L2TP secret description fix. Issue #10531

(cherry picked from commit 9623ec5b2396392cde38231e21cb5d6746928bcf)

Fw rule description input validation. Issue #10542

(cherry picked from commit 82f088390fc90c9ee0b90714c496a73817157a4b)

Update user index after making changes. Fixes #9259

(cherry picked from commit e6c79cd3aafdbd25971a62103b51584335523e33)

L2TP client Shared Secret option. Issue #10531

(cherry picked from commit 8e267d3bc59a9d89cf74aa7616566e44b9c5bd69)

Special characters in Schedules descr and rangedescr fields. Issue #10305

(cherry picked from commit 008c15450ec5913c671bc8545682b35f92d63da8)

L2TP username containing @ (realm separator). Issue #9828

(cherry picked from commit f1efc7922e731f8f7f6c02f62fa974eeb884ea85)

Allow dashed DUID to be entered in a DHCPv6 Mapping. Issue #2568

(cherry picked from commit ebccd85b82f468ea83603574c8dc9c573b27ff55)

Add localhost to NTP Interfaces. Issue #10348

(cherry picked from commit 627253089841122bea33f1d0f140fc55e78f611b)

DH group 5 warnings for IPsec Phase 1. Issue #10221

(cherry picked from commit 81a58f837a0422890a12bcdf7b3e1b60a04fcbc5)

Update DH group warnings to say that group 5 is also weak. Issue #10221

(cherry picked from commit 4423176ef39e0461be339b5ded087678f6711c91)

DHCPv6 RA show default values in certain fields. Issue #10448

(cherry picked from commit 4d7bdf64eb1922136082cfff82ee626b3a8ba35d)

Remove bogus warning on limiter/shaper deletion. Issue #9334

(cherry picked from commit 86c560d985b03d421f8b572c33f8e02b2f08ea56)

Sanitize ldapbindpass and ldap_pass. Issue #10349

(cherry picked from commit 787e634e7f801c8a83e2626d50fb98de041c72ea)

allow to disable IPsec P1 when P2 is disabled VTI. Issue #10190

(cherry picked from commit 903826b5b231e371fe934e7ecde2d4f7b6e1be2d)

Exclude unsupported interfaces from DHCP Relay. Issue #10341

(cherry picked from commit 5285aa842118fa893a275e46616734b2f54c7e4f)

Make OpenVPN username-as-common-name options. Implements #8289

(cherry picked from commit e5c4f2a7d977fb1fd6c7b4446e187486b72285be)

Do not restart L2TP server after adding/modifying users. Issue #4866

(cherry picked from commit 810923482479d09c4987f7f29b12299be15ac352)

Add ipsec_reload_package_hook() to apply function. Fixes Bug #10351

Adapted From 4aebc4ba84aefa0be7084960cb1387352e6a3792

Firewall rule states link and Require State Filter option fix. Issue #10359

(cherry picked from commit afb4cdcd2a96138b70b888c6750f8b1140ab8c2a)

Fix OpenVPN status.php output for 2.4.5 Implements #10350

Factor existing RAM disk usage into kmem calculation. Fixes #10420

(cherry picked from commit 355aa65e684431fe435dcf51c92f17659b5b000d)

Remove CA prv key fix. Issue #10509

(Based on 0447f01b1eb02354f5658d535bd33bfa022d6083, Adjusted for RELENG_2_4_5)

Avoid very slow GUI loads when ews.netgate.com can't be resolved #8987

(cherry picked from commit 3c07f4986e6dfdd552ba8c68bb6ae866dff91dd9)

Skip all RRD data on backup. Issue #10508

(cherry picked from commit 6c1b20af47553b6e95669b9ccc2d4109364c0d4c)

EDNS buffer size configuration. Issue #10293

(cherry picked from commit 09d529a6b3888479b015edba166d31cd214387cc)

DHCP Domain trailing dot validation. Issue #8054

(cherry picked from commit 8ee5aa03950902e8de301dedaa1fddda4a74e709)

Add OpenVPN config files to status output. Implements #10350

This form will only work on 2.5.0 since the directory layout changed.

(cherry picked from commit edc7e81f621805af8174fd7cf7299eb6afe1969c)

Port forward dst port Any fix. Issue #7704

(cherry picked from commit da7f67b8f0b1d55b3b0ebfb99b198abc9e47ff53)

status.php: Add upgrade_log.latest.txt. Issue #10455

(cherry picked from commit 6c773de2544d267b8834c09beb40f83d9a1c32d4)

IPsec VTI enable netmask. Issue #10418

(cherry picked from commit 0bb934e9d7dd8c852bae4b221501b90e8dc1569b)

DHCPv6 service Dynamic DNS fix. Issue #10346

(cherry picked from commit 9fbd8f713449b2315daac91e219e711c8954ce7c)

Floating rules tab fix. Issue #4629

(cherry picked from commit 65d935bfddb2d4d0e4816d344573d03e2b73b464)

Add Interfaces column to Floating Rules. Issue #4629

(cherry picked from commit bf83fb9ab93435e605d28b67e0352d32ce63ba2d)

fix #10499 dark theme autocomplete popup not readable

(cherry picked from commit 1d06b51d92483b70be11dcb4ca1d78e2f2b5dd15)

status.php updates

• Add kldstat verbose output. Implements #10423
• Change pkg calls to pkg-static. Fixes #10424

(cherry picked from commit b943d20dcd9a580c18ce804b47f512855272f1dd)

Ticket #9267: Fix dhclient-script to handle error properly

Update translation files

Regenerate pot

Validation and encoding for Ping and Traceroute. Fixes #10355

(cherry picked from commit cc3990a334059018b004c91eeb66c147d8afe83d)

Fix #10331: Fix sprintf() placeholder

Encode user descr before output. Fixes #103241

(cherry picked from commit 3c1e53dabe966f27c9097a5a923e77f49ae5fffa)

Correct 'default' behavior of OpenVPN TLS key dir. Fixes #10287

(cherry picked from commit d2011b0addd27766e6b402270c79d06c6c485f04)

L2TP and PPPoE user password validation. Fixes #10275

(cherry picked from commit 48dae98cf7837af3071521bdabb788af6d3e0f41)

Auto GUI/OpenVPN wizard cert lifetime reduced to 398. Fixes #9825

Fix PHP syntax error in traffic_shaper_wizard_multi_all.inc

Fix PHP errors in traffic_shaper_wizard_dedicated.inc

(cherry picked from commit 9d141b4de6a5760b88b94100aa216e0559a102fc)

Update loader.conf when maximumtableentries changes

On Firewall -> Advanced -> Firewall, when maximumtableentries item
changes, make sure /boot/loader.conf is changed accordingly. If the
value is bigger than sysctl net.pf.request_maxcount, then warn user that...

Point to a checkip doc URL that exists now.

(cherry picked from commit b2bfc3399c802760f25cdc02611b5e79fa3afcd6)

cherry-pick e8a1e9e1288e5a3a2bd9ca5479ac19c8fcfb4c2d

Correct typo

(cherry picked from commit 108a640d66f5666feca530e038831155bfd4577b)

Re-add jquery-ui themes. Fixes #10233

(cherry picked from commit b6063aa7cbb6c7f9c1e365097685a84e97516b49)

RAM Disk robustness improvements. Fixes NG 3173

• Prevents RAM disk from being partially enabled and left in a broken
  state if the RAM disks cannot be created
• Prevents RAM disks from potentially overcommitting free kernel memory,
  which FreeBSD now prevents, but could result in errors....

Sync translations with 2.5.0

Add TTL for CloudFlare DDNS. Fixes #10196

(cherry picked from commit 9404b54a44a820b9c0332149a6ea794eed54bdac)

fix incorrect encrypted backup restore error handling. Issue #10179

(cherry picked from commit 153f78af168e81e89792a92dc81ed719ce86296b)

XMLRPC: fix last shaper/limiter removing. Issue #9468-9469

(cherry picked from commit c9a96f16a4cb582884c8a09d42dd1a61c206b97d)

Update help.php

update crash_reporter.php to a more useful resource

(cherry picked from commit eb10e3293ec967161b2dbb71bba3023e5f812d9b)

Link to the book, not old OpenBSD docs. Fixes #10184

(cherry picked from commit 1bcc6e56e51b8ac1e329c9c0dd2bfc0f40983ead)

diag_packet_capture.php: Input and error checks. Fixes #10183

• Prevent selecting Address Family and ARP, it is not a valid
  combination.
• Prevent PHP errors when the capture file is missing unexpectedly
• Add collapsed info box with running command for debug/curious users....

Sync diag_packet_capture.php with master

• Adds multiple TCP/UDP port input. Issue #9766
• Adds packet capture start time info. Issue #9831
• Adds OSPF protocol capture. Issue #9905
• Corrects pfsync capture syntax. Fixes #10183

Update SSL refs to SSL/TLS. Fixes #10172

switch to resolve_host_addresses() func

(cherry picked from commit 6e658d8dd1a3e05b2b0153651a5060ff9225e415)

Use central download function

Reduce duplicated/inconsistent code by using the new download function.

(cherry picked from commit ecb594d094ce0e11cacd9062ebd0aa0ba190444a)

change http to https for redirect link

(cherry picked from commit a3d92f1b47ca82707b5ba760bb31a8f21f9e4e28)

cosmetic

(cherry picked from commit 81157e5c9872594afd8238445299fb5a1ffc2030)

export aliases to txt file

(cherry picked from commit 0cdb5e9569f4be2aa5a42cb7f986b3c218ab3bf2)

update redirect to issue tracker

(cherry picked from commit 01e88604e991901dbd56fa4ed33ae9687d153d6c)

Fixed 10156
Fixed 10157

New redirects.netgate.com/whatever links set up and incorporated in menu system

(cherry picked from commit f07e6d64f0f94fe7f58fc7ada12d42bcf705dc88)

Revise survey wording

(cherry picked from commit ed6f2195b282008e7d84a087759dbc6b4fc23eed)

Fixed #10154 by revising wizard text

(cherry picked from commit 3ac4b218bc493e004aaf60abdc4a39bdafada07a)

Remove redundant DNSimple instructions

(cherry picked from commit 01a6ef7b28907021533df2b3a17ed05451bbbd31)

check ntp acl only for localhost block

(cherry picked from commit 7faeec0727528d27afbcd1462d5f726985e951e7)

Merge pull request #4155 from BBcan177/RELENG_2_4_5

Do not allow 'invert match' and 'any' on firewall rules. Fixes #10168

The backend code ignores the invert in this case, and it makes the GUI
render confusingly (!* which could never match anything)

(cherry picked from commit 40baab141eb30b11b57efa0cf14521021aa7b4c7)

Add a few more common ports to list. Fixes #10166

(cherry picked from commit d2c6e89c40b1bff2deb1f0a8847a5199b317ba0f)

Unbound python integration

Remove deprecated & unused option that wasn't displayed in the GUI.

(cherry picked from commit 839bf5a209274f9f2e8152815612fa9cd6f50e1a)

Remove vestiges of legacy ACB system

(cherry picked from commit 8a6d9d7f82e7a992d2c48910fb4bb847b28f3f45)

Remove some outdated references. Issue #10156

(cherry picked from commit e48255d5b36fdb953af8afeb775686c619c52500)

This is 2020. Issue #9245

Add help for missing pages. Issue #10135

Relocate IGMP proxy verbose setting. Fixes #10139

Update some old doc URLs

(cherry picked from commit b9c73e94fecf41e6d3a8854ba51d8e3bbc7dd5d4)

help.php book URL updates. Issue #10135

fix vti localid hiding in WebGUI

(cherry picked from commit 16ed13478daeceb1ad6a2b180dba7506574d4480)

Another layer of help.php URL redirects. Issue #10135

Like an onion.

Also remove some non-existent pages.

Update help.php current post-redirect URLs. Issue #10135

URLs were still pointing at the retired docs server URLs, update to
current targets after redirecting.

Fix manual backup flag

(cherry picked from commit 0bdd1774a1666852e35452ea3f17bb9dc075ecec)

cosmetic

(cherry picked from commit f1c43228ab62ffae24dd6059049d2d03dbee10a8)

fix

(cherry picked from commit 2edf9abaacbecbc173262bccc8d797b9553096ca)

allow to disable APIPA blocking

(cherry picked from commit 09b6735d1c936ad7962d66af17a32f8a0bb9f9ed)

use disablepingcheck as option name

(cherry picked from commit a0541b292d4cde76b9e95c1d8cbd99f5f26afee5)

add an option to the DHCP server to disable the ping check feature

(cherry picked from commit 7847e55fa2cd5813adb1ee4aa888b694957109b9)

Update copyright notice years. Issue #9245