pfSense

Silence unused/undef'd variable warnings in filter.inc

Correct required param after optional param syntax errors

Inhibit startup error printing to stdout in read_global_var

Consider EC digest prefix when renewing CA/Cert. Fixes #13437

fix: corrects validations for various fields in system_advanced_firewall.inc

CRL lifetime fixes to avoid rollover. Fixes #13424

Skip URL tables with invalid names. Fixes #13425

Clean up+encode pkg rule filenames. Fixes #13426

Update UPnP status regex. Fixes #4500

Submitted-By: rtadams89 @ GitHub PR #4610

CA/Cert descr validation fixes. Fixes #13387

Validate description on save when editing and in other situations that
were not yet covered.

While here, ensure that errors when editing a cert leave the user on the
cert edit screen properly, but successful cases return to the cert list....

Check for empty config.xml restore. Fixes #13289

Trim leading space from CSV vouchers. Fixes #13272

Fixed handling of single rule selected with multi-delete Issue #9887

Clarify delegated IPv6 prefix source. Fixes #13310

Indicates the tracked interface and prefix ID, which is more important
now that delegation works from multiple upstream sources.

Fix OpenVPN override TN handling. Fixes #13274

Encode filename browser.php. Fixes #13262

Merge branch 'pfsense:master' into fix-omission-of-pr4551

oops. forgot to actually process the dpinger_dont_add_static_routes flag

Update CARP status state sync note. Fixes #12701

Always display Global Root CA List. Fixes #13185

Reload Captive Portal rules on nomacfilter or per-user bandwidth change. Fixes #13216

Fix CP pipe function call. Fixes #13204

Captive Portal pipes reserve fix. Fixes #13204

Do not force setting a gateway with floating match limiter rules. Fix #13027

Incompatible OpenVPN P2P option note. Issue #13189

Revert "Destroy deleted/disabled IPsec SA. Fixes #13102"

This appears to be causing a pileup of swanctl processes on systems with
a significant number of disabled tunnels.

This reverts commit d90552c59e51fb13c712b6a96a51ca2462424156.

Delete temporary route file on OpenVPN client disconnect. Fixes #13145

Merge pull request #4586 from luckman212/outbound-nat-remove-colon

Merge pull request #4585 from luckman212/fix-status-dhcpleases-wrong-ifname

Merge pull request #4583 from luckman212/add-restore-dashboard-layout

Merge pull request #4588 from luckman212/fix-infoblock-placement-firewall_nat_out.php

captiveportal_ether_delete_entry() anchors/pipes delete fix. Issue #13169

captiveportal_passthru_delete_entry() -> captiveportal_passthrumac_delete_entry(). Fixes #13175

User Mgr scope icon corrections. Fixes #13174

Port Forward Redirect target IP save fix. Fixes #13171

fix infoblock placement on firewall_nat_out.php - redmine #13164

Ensure same type comparison. Additional fix #13059

ovpn-dnslinkup: do not set interface routes for DNS servers

If the OpenVPN server provides DNS server information (and 'Pull DNS' is
set) we add these DNS servers to our DNS configuration.
That's fine, but we should not add interface routes for these DNS...

Fix JS for mobile IPsec disconnect. Fixes #13131

remove colon to stay consistent with the rest of the GUI

Cleanup PPPoE VIPs on interface down to fix IP address order. Issue #11629

Adapt OpenVPN widget to new output. Fixes #13129

Add default value to $ipv6type argument of restart_interface_services(). Fixes #13134

add option to restore dashboard widget layout

fix for https://redmine.pfsense.org/issues/13127

OpenVPN status improvements. Implements #13129

• Clean up and improve client/p2p state interpretation
• Output OpenVPN instance interface names
• Improve formatting of service status and control icons

Use dnctl(8) to control limiter rules. Feature #12579

Remove duplicate SSHDATA tag. Fixes #13132

Allow to assign L2TP VPN server interface. Issue #13099

Merge pull request #4581 from kris-anderson/feature/relax-dhcp-input-validation

Merge pull request #4580 from luckman212/trim_static_dhcp_mac_on_save

Merge pull request #4579 from luckman212/store-dnsmasq-opts-as-base64

Merge pull request #4584 from luckman212/fix_tcp_udp_nat_rdr

Restart DNS Resolver after OpenVPN config save. Fixes #13117

Suppress php warning when using unlink. Fixes #13112

fix for https://redmine.pfsense.org/issues/13126

more spelling fixes

more accurate error message

fix a spelling mistake

max dhcp lease can be equal to the default lease

store dnsmasq custom_options as base64

trim mac address when submitting

eases copy & paste which sometimes grabs a little extra whitespace
on either end -- previously caused input validation to fail

Destroy deleted/disabled IPsec SA. Fixes #13102

Port Forward input validation fix. Issue #4259

Captive Portal ipfw->pf transition. Todo #13100

Reload static routes on L2TP VPN client connect. Fixes #13099

Traffic Shaper Wizard bandwidth scale fix. Issue #13086

Slack Notifications fix. Issue #13083

Optimize stacked IP Aliases reconfiguration. Issue #12961

OpenVPN Enforce key usage option typo fix. Issue #13056

Port forward NAT rules with Any protocol. Implements #4259

Reconfigure stacked IP Aliases on XMLRPC sync and Virtual IP change only. Fixes #12961

OpenVPN Enforce key usage option fix. Issue #13056

Reload IPsec and OpenVPN on gateway IP or force_down option change. Issue #13076

NPT manual prefix fix. Issue #13070

Send packages reload event on interface change. Issue #13064

Traffic Shaper Wizard ipprotocol fix. Issue #12937

Allow auto prefix with manual prefix-length in NPT. Implements #13070

Ensure same type comparison. Fixes #13059

Fix IPsec SAD delete. Fixes #13071

Traffic Shaper Wizard VOIP rules fix. Issue #12937

Include pkg-utils.inc to interfaces.php. Fixes #13064

WebGUI option for IPsec <dns-interval> option. Feature #13057

Encode alias URL before display. Fixes #13060

Restart services on interface configuration changes. Todo #12619

Option to keep serial f/renew cert Fixes #13010

Defaults to keep serial for CA but not for certs.

Traffic Shaper wizard minor fixes. Issue #12937

remove some dead code

see https://forum.netgate.com/topic/171394/sledgehammer-killall-in-shaper-php-and-inc-files

Unbound option to keep probing when servers are down. Implements #13023

Use correct rx/tx index. Fixes #8861

OpenVPN unbound restart fixes. Issue #12991

Make openvpn.connect_async.sh executable

Add option to limit concurrent connections per OpenVPN user. Implements #12267

Clear stale Cisco-AVPair anchor rules. Fixes #12332

Improve OpenVPN client connection logging and logic
In preperation for fixes and features

Use OpenVPN deferred client-connect. Implements #12407

Move openvpn client-connect script to separate file
to prepare for deferred client-connect

Interfaces WIFI WPA configuration fields expose fix. Issue #12998

OpenVPN shared key warning. Implements #12981.

Adds a warning to the OpenVPN client and server list and edit pages
warning the user about shared key mode being deprecated by OpenVPN.

Warning only displays on the instance lists if there is an existing
shared key instance. Warning only displays when editing an instance...

Fix typo