pfSense

Add VLAN support validation for the Packet Capture interface. Fix #14376

Replace abbreviated links from System menu

Disable CARP until services have started and before shutdown/reboot. Fixes #2218

CARP has historically been enabled as part of interface bringup and sync setup
fairly early in rc.bootup. This change intentionally shuts down CARP from
interface bringup all the way until services have been started to ensure that a...

Ensure RSS widget number values are treated as int. Fixes #14365

Revert "Correct RAM disk swap calculation. Issue #13508"

This reverts commit b10998b1951b3e0d1cb74449a6b6dd333b9d292a.

Correct RAM disk swap calculation. Issue #13508

It was not factored into the shell version as it should be (still a
problem here, see Redmine).

It was also returning a bogus small value on systems that have no swap
configured.

Remove unnecessary utf8_encode'ing to pfSense_kill_states arguments. Partial #9270

Repsect NAT nosync for assoc rules. Fixes #14335

FW rule GW status popup improvements. Fixes #14327

• Fix status check to account for current gw status/substatus strings
• Include Tier for gateway groups
• Sort groups by tier and then name
• Fix interface name printout
• Optimize interface name and gw address display to avoid multiple...

Use new utility function for ethertype, use correct operator, and remove redundant code. Fix #13382

Corrections for shaper wizards. Fixes #13915

• Fix many inconsistencies in formatting between the wizards
• Fix a few potential bugs in both (changes made to one to fix issues
  were not reflected in the other).
• Various style and whitespace corrections.

PHP 8 fixes in Dedicated Links Shaper Wizard. Fixes #13915

While here, clean up some formatting.

PHP 8 fixes in Multi-All Shaper Wizard. Issue #13915

While here, clean up some formatting.

Fix invalid pcap filters in some cases. Fixes #13382

Additional changes to new Packet Capture GUI. Implements #13382

Fix handling of OpenVPN client TN. Fixes #13350

• ifconfig format was incorrect for certain mode combinations, leading
  to OpenVPN failing to start.
• Changed wording on GUI TN field descr so it's more clear that the TN
  shouldn't be set in most cases, also mention that the user should be...

Fix default DHCP server if selection. Fixes #14115

Add user limits pchtherm data. Implements #14255

Automatic CARP/VIP rule refinements. Fixes #13908

• Perform a filter reload after deleting a VIP. This is important not
  only for CARP but other VIPs, since they may be referenced in places
  such as tonatsubnets and/or interface macros.
• Only add CARP rules to the ruleset when there is a CARP VIP...

Trim whitespace from static addrs on save. Fixes #13959

Multiple issues with ICMP NAT/Rules. Fixes #14267

• When making an associated firewall rule for a port forward, do not
  craft what would be an invalid port range.
• When saving a firewall rule, safely handle an empty ICMP subtype list
• When generating firewall rules, only check src/dst ports for protocols...

Additional changes to new Packet Capture GUI. Implements #13382

Add PCH thermal data to the thermal sensors widget and RRD graphs. Implements #14255

Fix punctuation. Fixes #14188

Update fw host/domain description text and add to wizard. Fixes #14250

• Update firewall host/domain description text
• Use same description on system.php and setup wizard

More flexible packet capture GUI. Implement #13382

Remove deprecated/removed NCP toggle from OpenVPN. Fixes #14201

OpenVPN wizard updates. Fixes #14183

• Added Randomize Serial option when creating CA
• Added Common Name field to CA/Cert (still can use descr if blank)
• Added OU field to CA/Cert
• Fixed checkbox option text hint/description alignment
• Updated some field descriptions...

Update direct config access in status_logs_settings.php. Fix #13942

Skip blank SAN values, make + more clear. Fixes #14124

Allow editing of CRL properties. Fixes #14185

Fixes editing of imported CRLs and also allows editing properties of
internal CRLs.

Note that CA serial is ignored when randomizing. Fixes #14188

While here, when creating a CA, set the default serial to 1 since the
GUI won't allow saving with the serial remaining at 0. That would
otherwise force the user to change it themselves.

Message queue handling improvements. Fixes #14031 Fixes #14061

• Do not attempt to process the message queue without sufficient
  privileges.
• Check for permission to write the message queue and for write
  failures and bail early if there is a problem.

Capitalize "dns" in DynDNS ttl help text

Reorder DynDNS zone id help text alphabetically

Reorder DynDNS pasxsowrd help text alphabetically

Reorder DynDNS username help text alphabetically

Reorder DynDNS hostname help text alphabetically

Correct plural seconds check.

Improve alias sorting (again). Issue #14015

asort does not handle natural case-insensitive sorting of
multi-dimensional arrays properly, so it needs a custom sort but also
has to preserve the index keys or else making changes in the GUI won't
use the correct IDs....

ppp-linkup: Keep routerv6 address scope

Original code was removing address scope from v6 router and because of
that, system always use default gateway to connect to it, breaking
connectivity on secondary dynamic WANs.

It should fix #13939

RAM disk size check/options update. Fixes #13508

• Update RAM disk size/free memory calculations
• Fix up some text in the option labels
• Show current /tmp and /var usage
• Add info about tmpfs and swap

Add more disk info to status output. Implements #14103

Fix typo. Fixes #13860

Auth log behavior update. Fixes #12464

Add knob for console bell (default: enabled). Fixes #14002

Do not allow an interface to use PF reserved words as its name. Fixes #14007

Improve floating rule handling of missing VPNs. Fixes #13953

Improve handling of XMLRPC sync of empty sections. Fixes #14034

Improve error handling in ACB. Fixes #14060

It wasn't printing a helpful message when it failed to decrypt a
configuration (e.g. using the wrong key).

Resolve various PHP8 issues in ACB. Fixes #14076

Fix labels and description dissapear in firewall_schedule_edit.php, #11877

Aliases config access refactor by brd

Fix PHP errors from empty DHCP configs. Fixes #13983

Fix PHP error from migrating old NTP settings. Fixes #14033

Fixup IPsec enc algo PHP 8 issues. Fixes #14009

Correct includes in IPsec widget. Fixes #14053

Fix incorrect path for disableconsolemenu.

Improve validation and escaping of bridge interfaces. Fixes #14052

system_advanced_admin config refactor

Update memory calulations. Implements #14011

• Update memory usage calculation for system info widget
• Add RRD data sources for new memory areas
• Upgrade code to expand current memory RRD file with new DS entries
• Make code that composes the commands which fetch memory info more...

Correct alias sort order. Fixes #14015

Correct alias bulk import code for PHP 8.x. Fixes #14013

Always work with cert list as array. Fixes #14004

NTP status corrections. Fixes #13999

While here, unbreak the GPS status display.

Fix DHCP server config path typos. Fixes #13965

Update copyright years to include 2023

Enable the registration page on Plus.

Allow the customers to re-register an existing instance if the NDI changes.

Ticket: 9580

Correct RRD backup/restore cmd file handling. Fixes #13935

Refactor some direct config access in sysctl

Remove unnecessary count param. Fixes #13890

Fix PHP error on diag_backup.php. Fixes #13876

Fix conf history confirmation prompt. Fixes #13861

• Change confirmation method to be compatible with usepost
• Update action icon titles to be more descriptive, which improves the
  confirmation dialog text as well as accessibility.
• While here, add a note to restore message about how to activate the...

Restore resolver host override sorting.

Fix #13799: Unbound python module persistently shows enabled in resolver settings.

Always declare $config global in case a script is included in a non-global scope

$config is expected to always be a global containing the parsed configuration,
however in the sources that it is assigned a value in toplevel scope it is not
explicitly declared as such. As a result, if one of these sources is included in...

Fix regression allowing blocked MAC addresses to login. Fix #13747

PHP 8.1 fixes for DNS Forwarder Hosts/Overrides. Fixes #13781

Don't load CSRF timeout from config. Fixes #13757

This allows us to reorder includes so that authgui.inc can load auth.inc first, which fixes several auth mechanisms that rely on this order for GUI pages.

Protect mem_usage() from doing arithmetic with empty sysctl values.

get_single_sysctl() may return an empty string in some conditions, there is no
guarantee that it returns an expected int value. Protect mem_usage() from
attempting to do arithmetic with sysctl values unless they are definitely...

Some cleanups in system_routes.php

Clean up some global access in system_routes_edit.php

Fix gateway list for static routes. Fixes #13761

Revert "Correct includes/load order in guiconfig.inc. Fixes #13757"

This reverts commit 2a24c162e0a8e69d176c54b5a7be09b23cb233f8.

Correct includes/load order in guiconfig.inc. Fixes #13757

The recent change here ended up loading some things out of order.

Another DDNS empty entry fix. Fixes #13581

Improve handling of empty DDNS entries. Fixes #13581

UPnP rule/service cleanup. Fixes #13755

• Fix several incorrect config paths/tests
• Fix UPnP local interface automatic rule to pass traffic into UPnP
  itself.
• Wrap all rules/anchors in UPnP enabled test, no reason for them to be
  in the ruleset if UPnP is off....

Fix direct config accesses in unbound for php81

Fix DHCP server ping check option. Fixes #13748

Restore default interface media selection. Fix #13635

Prevent get_pf_rules() from indexing a string error. Fixes #13660

pfSense_get_pf_rules(), which populates the $rulescnt variable sent to
get_pf_rules(), will terminate its loop fetching rules if a call to
pfctl_get_rule() returns nonzero, adding to the associative array return value...

Improve visibility of select fields in dark theme. Fix #11730

Rector direct global g accesses

Add ifmcstat to status.php. Implements #13731

Fix a regression caused by Rector: Fixes #13712

Replace direct config access in services_dhcp.php. Fix #13719

Eliminate backticks shell execution operator in diag_system_activity.php.

Fix unnecessarily duplicated work. Issue #13250

Improve LDAP debug logs. Implements #13718