pfSense

Remove the reference unbound.conf(5) from the DNS Resolver page. Issue #12781

Allow the selection of "any" interface in floating rules. Implements #12392

SNMP service restart improvements. Fixes #12611

IGMP Proxy service improvements. Fixes #12609

Restart OpenVPN on interface change. Fixes #11864

Fix full path to executable files. Issue #11941

Disallow 0.0.0.0 and :: as a VTI remote gateway. Issue #12723

GoDaddy DDNS wildcard support. Fixes #12750

Fix Custom(v6) requestif on STF interface with Force IPv4 DNS Resolution option. Issue #12590

Reorganize UPnP options. Todo #12624

IPSec widget default tab option. Feature #2456

ACB notify improvements. Feature #12724

Fix disabling dhcpd rrd stats. Issue #12710

Change ACB main link to services_acb_backup.php. Todo #12093

Reorganize CARP status page. Todo #12701

Convert OpenVPN Tunnel Network to correct format on save. Issue #11416

Button to toggle selected firewall rules. Implements #2505

Display interface interrupts. Fixes #12735

Firewall logs widget fixes. Issue #6253

Make ACB columns sortable. Implements #12773

L2TP/PPTP values reset fix. Fixes #12780

Check system default setting for NAT+Proxy mode in Port Forward input validation. Issue #12319

Clean up pkg filter text before use. Fixes #12725

Also remove unnecessary echos of the value.

Correct PHP syntax error. Fixes #12713

Fix ARP table interface names. Fixes #12698

Don't del ONAT rules w/o selection. Fixes #12694

OpenVPN validation improvements. Fixes #12677

Added validation for the following fields:

• OpenVPN Server:
  • mode, dev_mode, protocol, interface, ecdh_curve, digest,
    engine, cert_depth, caref, crlref, certref, allow_compression,
    compression, tlsauth_keydir, netbios_ntype,...

Improve OpenVPN Data Cipher handling. Fixes #12677

Fix typo in warning text.Issue #12680

Redirect user to / if Plus and attempting to directly access system_register.php

Make registration process contingent on PLus vs CE to accommodate automatic CE -> Plus merging

netgate-ca.pem is now in the base image at /usr/local/share/${product_name}/ssl/netgate-ca.pem

Fix default password warning check. Fixes #12666

Use the existing function to check the password to avoid duplicating
effort.

Disable DNS Resolver recursion if the selected outgoing interfaces are not available. Fixes #12460

Originally-By: Viktor Gurov

Revert "Use OpenVPN async client-connect, clear stale rules, add option to limit connections per user. Implements #12407 and #12332 and #12267"

This reverts commit 7aaa20d95a345c4688e8786c755c7d0433451688.

Fix "assignement" typo. Fixes #12383

Update the Copyright year of the files owned by Rubicon/Netgate.

Ignore DynDNS requestif for non-custom providers. Fixes #12631

Fix PHP error on backup if SSH keys do not exists. Issue #12635

Merge pull request #4541 from blkeller/document-auto-nat

Merge pull request #4546 from olehfb/namedotcom_dyndns

Merge pull request #4540 from spootle/master

Minor cosmetic fix in gateway widget.

Make sure $sitems (skip items) is always an array.

Restart RADVD on interface IPv6 address change. Fixes #12604

IPsec RADIUS Advanced Parameters default value reset fix. Issue #12575

IPsec IKEv2 Retransmission options. Implements #12184

Revert "move firewall functions to include file"

This reverts commit a5a4cf87eeacfaf922151ce356fca1eee53762eb

Revert "Certmanager mvc"

This reverts commit 033c3ae82d20ca5760ed483cf8d0c947764b2371

Certmanager mvc

Add missing upload_url to acbupload.php. Fixes #12572

Gateway/Group link fix on the firewall rules page. Issue #12555

Add dynamic DNS service provider Name.com, closes #12567

Do not display direction indicator on the non-floating tabs. Fixes #12559

Certificate fields input validation. Issue #12035

SNMP IPv6 support. Implements #12325

Input validation to prevent removing a gateway if it is still in use by DNS servers. Fixes #8390

Backup and Restore SSH Host Key(s). Feature #11118

Gateway / Gateway group edit on the firewall rules page. Implements #12555

Add a note about the AutoConfig backup behavior. Implements #12296

Route overlap input validation fix. Issue #12554

IPsec status isset+is_array phase2 check. Fixes #12550

move firewall functions to include file

Do not show the pulldown menu when rebooting after restoring AutoConfigBackup. Fixes #10662

Static routes handling update. Fixes #11599 #11895 #7547

• Confirmation box to apply static routes add/route/change
• Reloading routes using aliases after changing the alias
• Correct route updates after changing destination or gateway

Support DNS server gateway selection on ``system.php`` for multiple gateways not assigned to interfaces. Implements #12116

Hide the Duplicate Connection Limit input field until the Duplicate Connection check box is ticked. Issue #12267

Interface Groups start digit input validation. Fixes #12529

Fix typo

Ui3 bandwidth

Local Logging warning note. Issue #12511

DNS check improvements for fw check and ACB. Fixes #12141

Uninitialized config variables in interface_assign.php

Use OpenVPN async client-connect, clear stale rules, add option to limit connections per user. Implements #12407 and #12332 and #12267

Port Forward checks for special interfaces and reflection type. Fixes #12452

NTP Peer mode. Implements #11496

Input error message box on the interfaces_ppps.php page. Fixes #12514

Keep port value for PPPoE/L2TP/PPTP on interfaces.php page. Fixes #12498

Do not change ports value for PPPoE/L2TP/PPTP on interfaces.php page. Fixes #12498

IPsec Keep Alive Gateway Group CARP support. Fixes #12472

Allow to delete limiter referenced in filter rules. Fixes #12503

status_logs_settings.php logcompression value fix. Issue #12011

Change traffic shaper wizard default bandwidth type to Mbit/s. Todo #12501

Wake All Devices confirmation prompt. Implements #12480

Document that upstream gateway controls WAN type vs. LAN type interface

IPsec SPD status updates. Implements #12397

• Fix backend parsing of setkey data
• Check for VTI vs tunnel mode
• Output mode in GUI status, and VTI interface name if available
• Make directionality of endpoints and arrow icon match in both the
  direction column and tunnel endpoints column.

Revise IPsec widget icon behavior. Fixes #12347

• Change P1 status test so it can detect the "connecting" state and show
  a distinct icon.
• Use gettext() for icon tooltip text
• Code optimization

Allow to select PPPoE Server authentication protocol. Implements #12438

DNS check optimization for NDP diag page. Fixes #11512

Send notification on WebGUI reboot/reroot/halt. Implements #12441

Icon for traffic direction on floating rules tab. Implements #12433

Update DNS Server Override and DNS Query Forwarding help text. Todo #12449

IPsec PC/SC daemon status / services page fix. Issue #12468

Set Gateway creation radio button to Both by default. Fixes #12448

deleteVIP() input validation fix. Issue #12442

Allow to use /0 netmask on IGMP Proxy edit page. Fixes #7749

Traffic Shaper Wizard IPv6 support. Implements #4769

fix filter expression to check correct variable instead of non-existing one

Use proxy for DDNS Check IP Services. Feature #12342

Dynamic DNS proxy option. Fixes #12342