pfSense

Fix #7118 icmp-type any

When 'any' is selected as the ICMP type, do not write 'icmp-type any' in the rule, just leave it out.

Add IPsec to the state table interface list.

Hide/deactivate the reroot option when ZFS is active. Ticket #6045

Fix #6153

Initialize cached IP and Time on loop for RFC2136 items, without this
the items used on last loop iteration will be used again and second
item on the same interface will not be updated

Fix #7105: Old rules may not have ipprotocol defined, consider it icmp6-type only when ipprotocol is inet6

Merge pull request #3372 from phil-davis/dhcp_client_id

Ticket #6340:

- Stop misusing fsck F parameter, it's supposed to be used when you
plan to run background fsck after filesystems are mounted, what is
not the case on pfSense
Increase attempts to mount all filesystems as read-write to 10
- If we cannot mount filesystems as read-write, start a recovery shell...

Simplify logic

Fix #6712

Use system_hosts_entries to generate unbound host_entries.conf

Ticket #6712: Create system_hosts_entries()

This function will return an array all items to be added to /etc/hosts.

Ticket #6712: Create system_hosts_dhcpd_entries()

This function will return an array with dhcpd and dhcpdv6 items to be added to
/etc/hosts.

Ticket #6712: Create system_hosts_override_entries()

This function will return an array with dnsmasq or unbound items to be added to
/etc/hosts

Ticket #6712: Deprecate read_hosts()

Read local items from system_hosts_local_entries()

Ticket #6712: Create system_hosts_local_entries()

This function will return an array with 127.0.0.1, ::1 and LAN (or
first interface with no gateway when LAN is not there) items to be
added to /etc/hosts

Kill dhcpleases after we are sure we can write /etc/hosts

Fix style

Make sure IP address is v4 before create /etc/hosts entry

Do not write a 'restrict' line to the NTP config if it will be empty. Fixes #7110

Display client id in DHCP Mapping list

Merge pull request #3369 from phil-davis/breadcrumbs_detail

Only include files that ends with .inc

Merge pull request #3341 from phil-davis/sysprvwarn2

Merge pull request #3367 from derelict-pf/require_state_filter

Merge pull request #3360 from plumbeo/faster-disconnect-all

Merge pull request #3361 from PiBa-NL/openvpn_waitforpid_20170107

Merge pull request #3370 from phil-davis/services_widget

Add protocol selection to Radius server configuration

It should fix #7111

Submitted by @ubawurinna at https://github.com/pfsense/pfsense/pull/2687

Merge branch 'master' into sysprvwarn2

Merge pull request #3343 from phil-davis/retval1

Make sure file exists before try to open it

Fix style

Services widget filter checkboxes

Breadcrumb links

Move checkbox styling to the beta file since it produces results that are not consistent across browsers and OS

Revert "get_pkg_info() fallback using pkg info if no local copy of repo catalog"

This reverts commit e47af756de79d4e8b0356cf22f72f62f09e9ad7d.

openvpn, check for valid pid using isvalidpid()

Fix a case where the ALTQ capability warning was showing incorrectly. Fixes #7102

Further refine checkbox styling

Merge pull request #2902 from NOYB/RAM_Disk_Management

Merge pull request #3368 from phil-davis/patch-2

Merge pull request #3365 from phil-davis/format_duid

format_DUID array_walk

format_DUID use str_pad

format_DUID review

Merge pull request #3330 from stilez/patch-54

Merge pull request #3363 from phil-davis/patch-1

Crash Reporter report when no data found

The glob for $crash_files always returns an array - an empty one in the case when there are no matching crash files. So the echo at old line 115 never happened. In any case, if the echo happens, it is spat out as plain text on the GUI outside of all the nice boxes and menus....

RAM Disk Management - Config Upgrade

RAM Disk Management - Update II - Restore RAM Disk Soon as it is Created and Include Logs

Restoring the RAM disk as soon as it is available will make it easier to include additional content that needs to persist across reboots for packages etc.
Include the logs in the RAM disk store so they will persist across reboots.

RAM Disk Management - Update I - Eliminate RRD XML Dump/Restore & Alias Tables Backup Age Logic

Eliminate rrd dump/restore to/from xlm file. Backup and restore the entire /var/db/rrd/ to/from the RAM Disk Store.
Add logic to backup alias tables if the backup is older than the table.

RAM Disk Management

1) Treat the RAM disk more like a permanent storage device with content managed/restored by the system and made available at boot up, before needed by any services.
a) Handle saving and restoring RAM disk content at reboot/shutdown/boot centrally in more of a system manged fashion....

Breadcrumb links support

Add requirestatefilter. Implements #7069.

Helper format_duid() for DUID input

Fix typo. Ticket #7007

Rework how IPsec log settings are stored/retreived, adjust the default values. Implements #7007

Don't allow SNMP hostres module to be selected or used with VMware VMs that have a CD/DVD Drive device. Fixes #6882

Add VMware detection to system_identify_specific_platform(). Ticket #6882

clarify type of firewall rule needed

A comment on the original PR says that it's not clear if the rule for this needs to be IPv6 or IPv4 with protocol IPv6, and users get confused. I've tried to clarify it here. I've also tried to "de-mystify" it, because it's not that tunneling needs special rules, it's just that any traffic needs rules and tunneled traffic is handled as IPv6 for rules purposes, so it needs an IPv6 rule. But the user may want other rules, or selective rules, so I'[ve tried to be clear this isn't about some "special" IPv6 rule, but rather, just that any traffic desired to pass, will need one or more IPv6 rules permitting it.

Fix #7100

Remove unusued $heading in genhtmltitle()

It came into use in https://github.com/pfsense/pfsense/commit/45eebe10a93fa1e2399c6cdf133ad88dc21ee6e7 but genhtmltitle() has changed since then and no longer uses $heading

Further internationalization

Add missing internationalization

Merge pull request #3346 from scherma/reverting

Merge pull request #3359 from phil-davis/admin_notices

Revise gateway widget config form
Make non-checked checkboxes more visible by adding an outline

Fix username reference

openvpn, make sure config is written and not overwritten while starting openvpn, and wait for pid of child process to be written before exiting function

Allow admin to clear notices

Merge branch 'master' of git.netgate.com:pfsense/pfsense

Etc/GMT timezone text using ngettext()

Merge pull request #3356 from phil-davis/gw_widget_filter

Make the emphasis stronger when encouraging use of a geographic location time zone.

Ticket #7089 Enhance Etc/GMT timezone descriptions

These work opposite to the way mere mortals expect.
Read: https://github.com/eggert/tz/blob/master/etcetera

Based on @phil-davis' patch from https://github.com/pfsense/pfsense/pull/3354

Allow hiding of gateways in Gateways Widget

Sometimes there are gateways that I do not care about, so it is handy to
be able to save some space on the dashboard by hiding them.
This uses similar code structure taken from service_status widget. I
made the Save and Clear buttons and all that stuff use the same styles...

Redmine #7089 Add extra help about timezone

We could also add some text like this to encourage users to choose the "Continent/City" time zones.

Handle the RA Search Domain List when writing out the RADVD config. Fixes #7081

Return partial MAC address matching support to is_macaddr(). Fixes #7088

Remove redundancy, more indentation cleanup

Captive portal: make captiveportal_disconnect_all() faster

captiveportal_disconnect_all() removes the users one at a time and in some cases, when many hundreds of users are connected, can take up to several dozens of seconds to complete.
Instead of looping through all users, send all the accounting information, reset the user database and delete all the active rules and reinit them. Use locking to prevent new users from logging in until the function ends.

Corrected indentation style

Completes fix for #6972

Merge pull request #3353 from phil-davis/gw_status_umonitored

get_pkg_info() fallback using pkg info if no local copy of repo catalog

Current behaviour

At the moment, get_pkg_info() is used to get all information on packages. The parameter $local_only is set to request info directly from the local copy of the repo catalog (using -U) without requesting the remote repo catalog or updating the local copy from the remote repo catalog. If the calling code wants only installed pkgs, it filters the returned list of pkgs looking for $pkg['installed'] == true....

Correctly report unmonitored gateway status

If an alternate monitor IP has been entered and saved, then the user
checks "Disable Gateway Monitoring" and saves, the alternate monitor IP
is retained in the config - that is handy for when unchecking "Disable...

Fix label for consistency.

Merge pull request #3351 from phil-davis/patch-2

vpn_openvpn_client comment typo

Same stuff was copied here

Correct the method used for input validation of NTP Orphan mode. Fixes #7034

vpn_openvpn_server comment typo

Fix up OpenVPN CSC page help text, add IPv6 tunnel network. Fixes #7053

Fix a probably copy/paste error

As done on OpenVPN Server, delete tunnel when dev_mode changes so new device is created accordingly

change as commented and remove redundant help text

Destroy tun/tap device when delete OpenVPN tunnel

Remove unnecessary reference

Fix conditional to work as expected when $id == 0

No longer add "null" to the selector when clicking a blank area

Minor help text change

left label as comment above