pfSense

Revert "move firewall functions to include file"

This reverts commit a5a4cf87eeacfaf922151ce356fca1eee53762eb

Revert "Certmanager mvc"

This reverts commit 033c3ae82d20ca5760ed483cf8d0c947764b2371

Certmanager mvc

Add missing upload_url to acbupload.php. Fixes #12572

Gateway/Group link fix on the firewall rules page. Issue #12555

Do not display direction indicator on the non-floating tabs. Fixes #12559

Certificate fields input validation. Issue #12035

SNMP IPv6 support. Implements #12325

Input validation to prevent removing a gateway if it is still in use by DNS servers. Fixes #8390

Backup and Restore SSH Host Key(s). Feature #11118

Gateway / Gateway group edit on the firewall rules page. Implements #12555

Add a note about the AutoConfig backup behavior. Implements #12296

Route overlap input validation fix. Issue #12554

IPsec status isset+is_array phase2 check. Fixes #12550

move firewall functions to include file

Do not show the pulldown menu when rebooting after restoring AutoConfigBackup. Fixes #10662

Static routes handling update. Fixes #11599 #11895 #7547

• Confirmation box to apply static routes add/route/change
• Reloading routes using aliases after changing the alias
• Correct route updates after changing destination or gateway

Support DNS server gateway selection on ``system.php`` for multiple gateways not assigned to interfaces. Implements #12116

Hide the Duplicate Connection Limit input field until the Duplicate Connection check box is ticked. Issue #12267

Interface Groups start digit input validation. Fixes #12529

Fix typo

Ui3 bandwidth

Local Logging warning note. Issue #12511

DNS check improvements for fw check and ACB. Fixes #12141

Uninitialized config variables in interface_assign.php

Use OpenVPN async client-connect, clear stale rules, add option to limit connections per user. Implements #12407 and #12332 and #12267

Port Forward checks for special interfaces and reflection type. Fixes #12452

NTP Peer mode. Implements #11496

Input error message box on the interfaces_ppps.php page. Fixes #12514

Keep port value for PPPoE/L2TP/PPTP on interfaces.php page. Fixes #12498

Do not change ports value for PPPoE/L2TP/PPTP on interfaces.php page. Fixes #12498

IPsec Keep Alive Gateway Group CARP support. Fixes #12472

Allow to delete limiter referenced in filter rules. Fixes #12503

status_logs_settings.php logcompression value fix. Issue #12011

Change traffic shaper wizard default bandwidth type to Mbit/s. Todo #12501

Wake All Devices confirmation prompt. Implements #12480

IPsec SPD status updates. Implements #12397

• Fix backend parsing of setkey data
• Check for VTI vs tunnel mode
• Output mode in GUI status, and VTI interface name if available
• Make directionality of endpoints and arrow icon match in both the
  direction column and tunnel endpoints column.

Revise IPsec widget icon behavior. Fixes #12347

• Change P1 status test so it can detect the "connecting" state and show
  a distinct icon.
• Use gettext() for icon tooltip text
• Code optimization

Allow to select PPPoE Server authentication protocol. Implements #12438

DNS check optimization for NDP diag page. Fixes #11512

Send notification on WebGUI reboot/reroot/halt. Implements #12441

Icon for traffic direction on floating rules tab. Implements #12433

Update DNS Server Override and DNS Query Forwarding help text. Todo #12449

IPsec PC/SC daemon status / services page fix. Issue #12468

Set Gateway creation radio button to Both by default. Fixes #12448

deleteVIP() input validation fix. Issue #12442

Allow to use /0 netmask on IGMP Proxy edit page. Fixes #7749

Traffic Shaper Wizard IPv6 support. Implements #4769

Use proxy for DDNS Check IP Services. Feature #12342

Dynamic DNS proxy option. Fixes #12342

Slack Notifications. Feature #12291

NAT 1:1 pseudo-interface input validation fix. Issue #12408

OpenVPN Generated RADIUS ACL Ruleset for status_output. Implements #12316

Modal window to see RADIUS ACL generated rules on the status_openvpn.php page. Implements #12321

IPsec PH2 BINAT subnet size input validation. Todo #12430

Display default Reflection Timeout value. Feature #12318

1:1 NAT destination entries description fix. Issue #12410

DNS check optimization. Fixes #11512

IPv6 Port Forwarding Proxy+NAT input validation. Fixes #12319

fix #11734 NAT overlap validation does not check special networks

deleteVIP() IPsec PH1 input validation. Fixes #12356

Correct input validation on deleting a CARP VIP which is referenced by an IP Alias. Fixes #12362

Reload syslogd on log Rotation Size / Retention Count change. Fixes #12366

Allow to halt OpenVPN client on status page. Issue #12416

Swap Captive Portal Redirection URL and Blocked MAC redirect URL input validation messages. Fixes #12388

Update help text for RAM disk settings. Fixes #12389

6RD Prefix input validation. Fixes #12435

Default preferred lifetime input validation. Fixes #12439

Fix IPsec P2 Keep Alive mobile check. Issue #12398

Some small cleanups with disk widget and library code.

Fix Disks widget UI on UFS systems

```
PHP 7.4.22 | 10 parallel jobs
............................................................ 60/279 (21 %)
............................................................ 120/279 (43 %)
............................................................ 180/279 (64 %)...

Fix PHP error on firewall_aliases_edit.php page. Issue #2668

Rename incorrect reorder function name in firewall_nat_out.php. Fixes #12377

Move hwcrypto call to sysinfo widget

additional fix #7801 Include IPsec P2 address type in vpn_networks

• Removes disk usage from system information widget
• Adds Pfsense\Services\Filesystem\ library
• Adds new disk widget

Make ssh PermitRootLogin conditional. Fixes #12346

IPsec Widget none/disabled tunnels fixes. Issue #12337

Group copy fix. Issue #12226

Fix the diag_defaults.php PHP errors, include the required file.

Submitted by: SteveW
Ticket: #12340

Use minimized version of treegrid dependency

Adds missing treegrid dependency

Adds the TreeGrid plugin for jQuery to the pfSense UI stack.(https://github.com/maxazan/jquery-treegrid)

Adds the TreeGrid plugin for jQuery to the pfSense UI stack.(https://github.com/maxazan/jquery-treegrid)

Do not disable hash algorithms checkboxes in AH mode. Fixes #12324

Ticket #12151: Pacify PHP lint using static string

OpenVPN exit notify & inactive incompatibilities

• Ignore exit notify in problematic cases. Fixes #12102
• Ignore inactive seconds in problematic cases. Fixes #12219
• Warn against using these options in problematic scenarios
• Hide from the GUI in obvious incompatible scenarios

Cleanup and improve easyrule. Fixes #12151

Restart OpenVPN instances on Host and URL type aliases change. Issue #2668

OpenVPN Aliases support. Implements #2668

Move help redirects to server. Implements #12314

Redirect mappings are already in place on the docs web server.

Rename the Netgate devices.

XG-15xx -> 15xx
SG-5100 -> Netgate-5100

Revert "Clean up some messy HTML in the cert/ca display code. Prep for future MVC changes."

This reverts commit 8d4fcd7ac1167894136e337fc619e63fa7200fa0.

Log settings help text update. Implements #12012

• Improve notes about disk usage
• Add more calculations to estimate potential usage
• Improve notes about when to use/not use compression

Update IPsec Filter Mode text. Implements #12289

VTI mode also works for transport mode (e.g. GRE), so note that as well.

Increase default IPv6 router advertisement (RA) intervals and lifetime. Fixes #12280

Convert RAM disks to tmpfs. Implements #12145

Allow to use nested URL alias in URL alias. Fixes #11863

Port Forward None and Pass associated filter rule copy. Fixes #12272

Do not allow to select PPPoE Server interfaces on the DHCPv6 Server page. Fixes #12277