pfSense

Revert "services_dhcp_relay.php: introduce proper shortcut section for dhcrelay"

This reverts commit 834bb946dd952f1d7a59e131d6b265cc82b7837d.

Revert "services_dhcp.php: cleanup warning notice when DHCP relay is enabled"

This reverts commit 564905382d696ef80b45e7552f4fdc502a7d2053.

Revert "services_dhcp.php: just hide relay-enabled interfaces"

This reverts commit 7a1d5e27022fb7183e8a7b17b5514169cbd7ecc7.

Revert "dhcp: support simultaneous v4 dhcpd and dhcrelay, Implements #14620"

This reverts commit e9577ebfd7852646a66697a3bde41b712687a4ca.

Add Next Hop info to status output

Refactor translation target for outbound NAT

Refactor display of special networks

Allow use of interface groups in firewall rule source/destination fields. Implement #14448

Refactor usage of special networks
Pre-requisite for easier implementation of interface group in firewall rules.

Use the correct index when saving rule separators. Fix #14619
Also fix displaying rule separators with an out of range index.

services_dhcp.php: just hide relay-enabled interfaces

Clarify IPsec Keep Alive description. Fix #12762

dhcp: support simultaneous v4 dhcpd and dhcrelay, Implements #14620

diag_edit.php Improvements. Fixes #7589

Fix Captive Portal view HTML link param. Fixes #14598

The way the code regex matches the parameter it needs the extra bit on
the end so it both matches the regex and gets the target parsed out.
Also this makes it consistent with the other links in the section.

Add dynamic DNS support for Porkbun DNS, closes #14402

Signed-off-by: Nita Vesa <nita.vesa@elektrik.link>

services_dhcp_relay.php: introduce proper shortcut section for dhcrelay

services_dhcp.php: cleanup warning notice when DHCP relay is enabled

Don't fetch contents of nonexistent URL aliases. Fix #14574

Correct JS for bulk rule copy convertif. Fixes #14576

ipsec: correct typo in var name when modifying p1s

ipsec: refactor config access

Add page title to system_register.php. Fixes #14462

Improve GIF/GRE interface handling. Fixes #14549

Encode dynamic log if filter. Fixes #14548

Multiple issues with PPP providers. Fixes #14547

• Update code for PHP 8.x
• Fix connection name handling (validation, parsing, etc)
• Fix output encoding of plan data

Tested with a variety of countries/providers/plans, output looks OK in
all cases I've checked.

Add option to invalidate GUI login on IP address change. Implements #14265

firewall_rules.php: default to the first configured interface, Fixes #14345

firewall_nat_out_edit.php: fix invalid format string on Polish translation. Fixes #13946

Correct ambiguous Unbound TTL Host Cache descr text. Fixes #14358

Add the pfSense Plus pkg fingerprints.

Fixes the upgrade from CE now that CE can verify the Plus packages.

Submitted by: KrisM

Use the dynamic repos help text instead of the old 'custom' repo.

Fix a merge problem in the last commit to accommodate a small difference with Plus.

Add the dynamic repos support.

Load the repository settings dynamically from Netgate, allowing for more
flexibility and direct support to update for the Plus repositories.

Fix references to 'disable_carp' introduced in 62fb07c816. #2218

The original commit had some lingering references to a function 'disable_carp'
that had been abandoned in favor of a single 'enable_carp' function with enable
arg. This commit corrects these lingering references.

Fix PHP error from invalid IPsec P1 config. Fixes #14458

Switch to PHP 8.x friendly functions to access multi-level array parts
since there is a chance they may be empty or partially defined in the
encryption algorithm section.

OpenVPN CSO: Improve form field JS. Fixes #13088

Originally-From: PhilZ-cwm6 @ GitHub

Convert AJAX GET calls to POST

Correct Outbound NAT 'other' type selector. Fixes #14354

Fix mac_procs incorrect references. Fixes #14425

Correct alias bulk import regression. Fixes #14412

While here, ensure that a broken alias configuration does not cause PHP
errors which prevent users from using the GUI or console.

Add VLAN support validation for the Packet Capture interface. Fix #14376

Replace abbreviated links from System menu

Disable CARP until services have started and before shutdown/reboot. Fixes #2218

CARP has historically been enabled as part of interface bringup and sync setup
fairly early in rc.bootup. This change intentionally shuts down CARP from
interface bringup all the way until services have been started to ensure that a...

Ensure RSS widget number values are treated as int. Fixes #14365

Revert "Correct RAM disk swap calculation. Issue #13508"

This reverts commit b10998b1951b3e0d1cb74449a6b6dd333b9d292a.

Correct RAM disk swap calculation. Issue #13508

It was not factored into the shell version as it should be (still a
problem here, see Redmine).

It was also returning a bogus small value on systems that have no swap
configured.

Remove unnecessary utf8_encode'ing to pfSense_kill_states arguments. Partial #9270

Repsect NAT nosync for assoc rules. Fixes #14335

FW rule GW status popup improvements. Fixes #14327

• Fix status check to account for current gw status/substatus strings
• Include Tier for gateway groups
• Sort groups by tier and then name
• Fix interface name printout
• Optimize interface name and gw address display to avoid multiple...

Use new utility function for ethertype, use correct operator, and remove redundant code. Fix #13382

Corrections for shaper wizards. Fixes #13915

• Fix many inconsistencies in formatting between the wizards
• Fix a few potential bugs in both (changes made to one to fix issues
  were not reflected in the other).
• Various style and whitespace corrections.

PHP 8 fixes in Dedicated Links Shaper Wizard. Fixes #13915

While here, clean up some formatting.

PHP 8 fixes in Multi-All Shaper Wizard. Issue #13915

While here, clean up some formatting.

Fix invalid pcap filters in some cases. Fixes #13382

Additional changes to new Packet Capture GUI. Implements #13382

Fix handling of OpenVPN client TN. Fixes #13350

• ifconfig format was incorrect for certain mode combinations, leading
  to OpenVPN failing to start.
• Changed wording on GUI TN field descr so it's more clear that the TN
  shouldn't be set in most cases, also mention that the user should be...

Fix default DHCP server if selection. Fixes #14115

Add user limits pchtherm data. Implements #14255

Automatic CARP/VIP rule refinements. Fixes #13908

• Perform a filter reload after deleting a VIP. This is important not
  only for CARP but other VIPs, since they may be referenced in places
  such as tonatsubnets and/or interface macros.
• Only add CARP rules to the ruleset when there is a CARP VIP...

Trim whitespace from static addrs on save. Fixes #13959

Multiple issues with ICMP NAT/Rules. Fixes #14267

• When making an associated firewall rule for a port forward, do not
  craft what would be an invalid port range.
• When saving a firewall rule, safely handle an empty ICMP subtype list
• When generating firewall rules, only check src/dst ports for protocols...

Additional changes to new Packet Capture GUI. Implements #13382

Add PCH thermal data to the thermal sensors widget and RRD graphs. Implements #14255

Fix punctuation. Fixes #14188

Update fw host/domain description text and add to wizard. Fixes #14250

• Update firewall host/domain description text
• Use same description on system.php and setup wizard

More flexible packet capture GUI. Implement #13382

Remove deprecated/removed NCP toggle from OpenVPN. Fixes #14201

OpenVPN wizard updates. Fixes #14183

• Added Randomize Serial option when creating CA
• Added Common Name field to CA/Cert (still can use descr if blank)
• Added OU field to CA/Cert
• Fixed checkbox option text hint/description alignment
• Updated some field descriptions...

Update direct config access in status_logs_settings.php. Fix #13942

Skip blank SAN values, make + more clear. Fixes #14124

Allow editing of CRL properties. Fixes #14185

Fixes editing of imported CRLs and also allows editing properties of
internal CRLs.

Note that CA serial is ignored when randomizing. Fixes #14188

While here, when creating a CA, set the default serial to 1 since the
GUI won't allow saving with the serial remaining at 0. That would
otherwise force the user to change it themselves.

Message queue handling improvements. Fixes #14031 Fixes #14061

• Do not attempt to process the message queue without sufficient
  privileges.
• Check for permission to write the message queue and for write
  failures and bail early if there is a problem.

Capitalize "dns" in DynDNS ttl help text

Reorder DynDNS zone id help text alphabetically

Reorder DynDNS pasxsowrd help text alphabetically

Reorder DynDNS username help text alphabetically

Reorder DynDNS hostname help text alphabetically

Correct plural seconds check.

Improve alias sorting (again). Issue #14015

asort does not handle natural case-insensitive sorting of
multi-dimensional arrays properly, so it needs a custom sort but also
has to preserve the index keys or else making changes in the GUI won't
use the correct IDs....

ppp-linkup: Keep routerv6 address scope

Original code was removing address scope from v6 router and because of
that, system always use default gateway to connect to it, breaking
connectivity on secondary dynamic WANs.

It should fix #13939

RAM disk size check/options update. Fixes #13508

• Update RAM disk size/free memory calculations
• Fix up some text in the option labels
• Show current /tmp and /var usage
• Add info about tmpfs and swap

Add more disk info to status output. Implements #14103

Fix typo. Fixes #13860

Auth log behavior update. Fixes #12464

Add knob for console bell (default: enabled). Fixes #14002

Do not allow an interface to use PF reserved words as its name. Fixes #14007

Improve floating rule handling of missing VPNs. Fixes #13953

Improve handling of XMLRPC sync of empty sections. Fixes #14034

Improve error handling in ACB. Fixes #14060

It wasn't printing a helpful message when it failed to decrypt a
configuration (e.g. using the wrong key).

Resolve various PHP8 issues in ACB. Fixes #14076

Fix labels and description dissapear in firewall_schedule_edit.php, #11877

Aliases config access refactor by brd

Fix PHP errors from empty DHCP configs. Fixes #13983

Fix PHP error from migrating old NTP settings. Fixes #14033

Fixup IPsec enc algo PHP 8 issues. Fixes #14009

Correct includes in IPsec widget. Fixes #14053

Fix incorrect path for disableconsolemenu.

Improve validation and escaping of bridge interfaces. Fixes #14052