pfSense

Add decoration to "On latest version" message

Revise status messages. Adjust PID file timeout to accommodate slower systems

Remove the broken e-mail options from diag_smart.php. Fixes #6393

Print a message about SMART not working on uFW/SG-1000 (smartmontools is not available there)

Remove extraneous )

Correct "not ready" flag

Allow for slower uFW by removing log file before upgrading, and allowing more time for the PID to appear

If there are input errors when creating a user certificate from the user manager, stop and show the errors rather than appearing to fail silently. Fixes #6953

Ensure that the submitted private key matches the certificate or CA when importing. Ticket #6953

When deleting a CA, do not delete all certificates from this CA, only remove the CA reference from certificates that used this CA, as the relationship can be rebuilt if needed. Also, prevent in-use CAs from being deleted and print a list of places a CA is used, similar to the output on certificates. Fixes #6947

Fix the static ARP test

Merge pull request #3219 from NonSecwitter/patch-2

Merge pull request #3241 from phil-davis/patch-2

Merge pull request #3243 from plumbeo/term-cause

Merge pull request #3244 from NonSecwitter/patch-3

Improve input validation on static ARP for DHCP static mapping entries, also prevent the backend from attempting to apply entries with insufficient information stored. Fixes #6969

clarified input format hint for expiration date

Captive portal: use "Admin Reset" as termination cause when disconnecting a user from admin UI

When a user is disconnected by the administrator using the pfSense captive portal status page or widget set the value of the Acct-Terminate-Cause in the RADIUS accounting stop packet to "Admin Reset" (6) as per RFC 2866.

Reword/rework wireless note on assignment page. Ticket #6770

Fix System Update link

Update setup_wizard.xml

IPv6 address can contain a dot

When requiring the entry of an IPv6 address, the regex pattern should still allow a dot, so that an IPv6 address can be entered in the format that has an IPv4-address-like part at the end:
aa:bb:cc:dd:ee:ff:1.2.3.4
which is a valid way to choose to specify an IPv6 address.

Merge pull request #3216 from seanm/master

Merge pull request #3231 from phil-davis/patch-8

Merge pull request #3230 from phil-davis/patch-7

Merge pull request #3226 from phil-davis/patch-3

Merge pull request #3224 from phil-davis/patch-2

Added addrtolower() to interface pages

Add a note that wireless clones must be created before they can be assigned. This should fix #6770

Start wireless clone count from 0

Change wireless interface description

Fix typo. Ticket #6770

Ticket #6770: Create a function to list available wireless interfaces and include model description

Ticket #6770: Detect wlan interfaces from sysctl net.wlan.devices

Added addrtolower calls to force IPv6 addresses to lower case
First of many

Revise filter_reload page to display entire reload_filter_status contents, not just last line

Revise shaper wizards to support multi-line filter_reload_status

Revise update_filter_relaod_status() function to append status messages rather than overwrite the file

Merge branch 'master' of git.netgate.com:pfsense/pfsense

Fixed #6922
Added code for IPv6 Dynamic DNS

Remove config files symlinks from /etc to /var/etc. Fixes #5538

Fixed #6939 by moving CSS only to the two pages that require it

Fixed #6931

Revise host and domain sorting so that the index is not lost

Revert "Fix #6864 automatically convert IPv6 input to lowercase"

This reverts commit d461ff40e364fc0ecc003b9f673cbad7c6a08f2f.

Revert "Fix #6918 Allow aliases with capital letters in rules"

This reverts commit 9444a281f051e11d5456cc37b2a3f56fc8a7bc33.

DHCPv6 ddnsdomainprimary must currently be IPv4

This field is currently validated to allow only an IPv4 address to be entered, so it may as well be consistent client-side so the user knows that only an IPv4 address is allowed.

services_dhcp_edit add extra IPv4 validation

a) Validate that ipaddr must be IPv4 (note if you enter an IPv6 address, it will fail other later tests of being in the subnet etc, but it is nice to give the user an explicit message that they must enter an IPv4 address)...

Specify the IP address family in interfaces.php

Where it is known what sort of IP address is required, we can specify it in the call to Form_IpAddress. That will make the hover text reflect what is really required as input, and make the client-side regex pattern also match only the allowed chars.

Fix #6918 Allow aliases with capital letters in rules

Expand the types of Form_IpAddress so that the caller can specify
exactly what combination of IPv4, IPv6 address and alias is allowed for
the field.
Set the appropriate input pattern and hover help text....

Keep the rule type selection after input errors on firewall rule

If the user:
a) Edit a firewall rule
b) Select "single host or alias"
c) Enter an invalid IP address that is not an alias
d) Press "Save"
The error is displayed "1.2.3.999 is not a valid source IP address or alias"...

Use the ntpd "pool" command for more robust timekeeping. Attempting to automatically determine if we are using a pool, and allow it to be set optionally otherwise. Implements #5985

Revert change to row delete button

Revert "Suppress delete button if only one row"

This reverts commit 75ac7cab1dfb3e8148a27a13369bbb08219e8c3a.

Suppress delete button if only one row

Fixed #6916

LAN IP validation logic

Revert "Fixed #6811"

This reverts commit f92d44da5a4958372c7fb925043abc34588143e3.

Update setup_wizard.xml

Fix a 'divide by zero' bug in traffic_shaper_wizard_multi_all.inc.

Comment typos alphabet

update conditional re:LAN dhcp

Fixed #6903
hosts and domains sorted on display, not on save to config

Merge pull request #3215 from PiBa-NL/xmlrpc-loopback

Fix a 'divide by zero' bug on shaper wizard when PRIQ is used and no bandwitdth is entered (the correct setting for a PRIQ scheduler).

update LAN regex for case insensitivity

Fixed 6901

Store Dynamic DNS passwords in Base64 to protect special characters. Fixes #6688

Fixed #6898

Fixed #6779
Round calculated bandwidth down to nearest integer

Merge pull request #3199 from phil-davis/ipv6lower

• 'ipv6lower' of https://github.com/phil-davis/pfsense:
  Remove "use lowercase" hint
  Fix #6864 automatically convert IPv6 input to lowercase

Fixed #6895
by setting overflow-x: visible; in CSS

When deleting or disabling a non-dynamic gateway, if that gateway was set as default then remove the corresponding default route to respect the user's decision. Fixes #6659

Fixed #6811

Improved error message to explicitly state allowable characters

Related to Bug #6432.

Convert CloudFlare and GratisDNS dynamic DNS over to split hostname and domain name fields, like Namecheap. Otherwise they could both break with subdomains or international TLDs with many parts. Fixes #6778

Fixed #6753
Interface menu entries no longer sorted for consistency with other GUI instances

xmlrpc, fix loopback detection

Do not attempt to remove interfaces from CP zone, captiveportal_configure_zone() will take care of it

Merge pull request #3201 from phil-davis/patch-3

Merge pull request #3192 from PiBa-NL/xmlrpc-auth

Merge pull request #3200 from phil-davis/patch-2

Merge pull request #3197 from phil-davis/dhcp6

Merge pull request #3205 from phil-davis/patch-7

Rework captive portal to run with stock IPFW (round 1)

- Remove use of IPFW context
- Create a rule that will skip to proper rule for each cp zone
- Use new PHP module functions wherever is possible

Provide conrol on system.php to allow display of hostname on login banner

Fix #6872 CP bandwidth 0 is no valid

The front-end validation prevents zero from being entered. "Leave empty" is the way to specify no limit.

Improve IPv4 address validation for services_dhcp

The input pattern that goes with Form_IpAddress by default allows for IPv4 and IPv6 valid characters. The back-end validation here is checking for IPv4 addresses, so it seems reasonable that the front-end input pattern checks might as well be restricted to the IPv4 valid characters. Unneeded setPattern have also been removed....

Fix display advanced after input error for system_gateways_edit

Use case:
1) Edit a gateway that has no advanced settings (i.e. the Advanced section does not need to open on page load) - that works fine.
2) Modify the Gateway IP Address to something invalid like 1:2::z...

Remove "use lowercase" hint

As it is no longer relevant, because the code now automatically converts
to lowercase.

Fix #6864 automatically convert IPv6 input to lowercase

1) As the user leaves the field, or presses Save, onChange will fire and
convert the input string to lowercase. This saves the user havng to even
think about it.
2) Provide some extra text that describes the expected format, to avoid...

Better handle no dhcpv6 leases file

Fix #6828

Until 2.3.x pfSense carried a patch that changed the behavior of 'route
change' command, making it add the route when it fails to change.
On 2.4 this patch was removed and will not be added back. This change
adjust PHP code to deal with route add / change and make it work...

xmlrpc, use authentication through the basic auth header instead of extra user/pass parameters

Fix up help text on outbound NAT.

Clarify source port warning when editing a firewall rule.

In the setup wizard, do not change the DHCP range if it is already set inside the new subnet. Otherwise it will overwrite a range set manually from the DHCP settings or the console when the wizard is run later. Fixes #4820

DHCPV6 only check VIPs in range if range valid

If the user has input invalid values into range from and to, then there
is no point checking any IPv6 VIPs to see if they fall in the range.
None of them would be "in range" because the specified range is not even...

Update pot

Deprecate nanobsd platform and remove all conditionals that uses it