pfSense

Fix flagged syntax errors.

Point to a checkip doc URL that exists now.

Fix braces. Issue #10246

NAT rule dst port reference corrections. Fixes #10246

When negating, the number of elements in $dstaddr_port is different. Do
not hardcode the index of the assumed last value, but calculate it
instead.

Otherwise the ruleset can have invalid entries like "port port" in...

Merge pull request #4177 from vktg/gremtu

Merge pull request #4184 from vktg/dhcpmaclimit

IPsec VTI IPv6 address correction. Fixes #9801

When setting up IPv6 VTI, assume /64 -- Previous code was assuming /32
which wasn't correct, and it can't be /128 either since the IPv6
addresses are not point-to-point like IPv4.

Ensure ALTQ bw is treated as int when factoring RRD values. Fixes #10248

Revert "Fix #10235"

This reverts commit 32218e9e1e69a0e2b91bcd829fcba04ec8586bdc.

Merge pull request #4188 from vktg/ipsecph2nohash

Merge pull request #4185 from vktg/dh5warningph1

Fix IPsec issue if no PH2 hashes selected. Issue #9309

Set correct default MTU for GRE,GIF and GRE/IPsec. Issue #10222

DHCP group known clients by interface. Issue #1605

DH group 5 warnings for IPsec Phase 1. Issue #10221

Merge pull request #4116 from Augustin-FL/ldap

PHP: array and string access with curly braces is deprecated

Merge pull request #4049 from Hobby-Student/master

Merge pull request #4171 from apollo13/patch-1

Merge pull request #4169 from vktg/slaaconpppoe

Merge pull request #4165 from vktg/resolve46

Merge pull request #4172 from vktg/compare6vip

Merge pull request #4174 from vktg/dh5warning

Merge pull request #4180 from vktg/qinqppp

Merge pull request #4179 from vktg/shapernowarn

Merge pull request #4181 from vktg/iftopstatus

Merge pull request #4106 from vktg/prfipsec

Fix #10235

Add a missing break to case statement. Without it, $compression was
being filled with a bad value and also if push compress was being used,
it added the option breaking connection.

Reported by: Vinicius Dell'Aglio on Telegram pfSense group

Add iftop support to status_graph.php. Issue #3334

Partial/future work-around for #10216 - When checking to see if the copyright notice has changed (and should be displayed) only check the first HTML <DIV>. This will avoid the notice popping up if the survey text is changed.

Correct typo

Re-add jquery-ui themes. Fixes #10233

RAM Disk robustness improvements. Fixes NG 3173

• Prevents RAM disk from being partially enabled and left in a broken
  state if the RAM disks cannot be created
• Prevents RAM disks from potentially overcommitting free kernel memory,
  which FreeBSD now prevents, but could result in errors....

Allow to select QinQ interfaces for PPP interface. Issue #9472

Remove bogus warning on limiter/shaper deletion. Issue #9334

Update DH group warnings to say that group 5 is also weak. Issue #10221

Compare compressed IPv6 CARP VIP. Issue #6579

IPsec IPv6 dynamic FQDN Remote Gateways, resolve_retry() IPv6 support. Issue #9405

Allow manual selection of IPsec IKE Pseudo-Random Function (PRF). Issue #9309

Update translation files

Regenerate pot

Fixed dhcpdv6 config generation for domain-list option. Fixes #10200

Use IPv4 connectivity as parent interface for SLAAC. Issue #9324

CF DDNS wants int for TTL. Issue #10196

Add TTL for CloudFlare DDNS. Fixes #10196

Merge pull request #4166 from vktg/disablep1vti

Merge pull request #4160 from vktg/restoreerrors

Merge pull request #4157 from vktg/expaes

Merge pull request #4156 from vktg/syncempty

allow to disable IPsec P1 when P2 is disabled VTI. Issue #10190

Merge pull request #4162 from jamesdekker/jamesdekker-patch-1

Merge pull request #4164 from vktg/nottagged

inverse matching of tags. Issue #10186

add fe80::1:1 as an alias. Issue #9998

XMLRPC: fix last shaper/limiter removing. Issue #9468-9469

encrypt exported key with AES-256. Issue #1192

fix incorrect encrypted backup restore error handling. Issue #10179

Link to the book, not old OpenBSD docs. Fixes #10184

diag_packet_capture.php: Input and error checks. Fixes #10183

• Prevent selecting Address Family and ARP, it is not a valid
  combination.
• Prevent PHP errors when the capture file is missing unexpectedly
• Add collapsed info box with running command for debug/curious users.

Use correct pfsync packet capture syntax. Fixes #10183

Update help.php

update crash_reporter.php to a more useful resource

Mount devfs for unbound when python is enabled. Fixes #9251

(cherry picked from commit 741892ee23a9085b71fa94fcfb8375044fec6ee2)

Use correct md value in crypt_data(). Fixes #10178

Use correct syntax for /bin/sh for loop in ovpn_auth_verify Fixes #7767

It's not bash.

openvpn.tls-verify.php syntax fixes. Issue #7767

Fix openvpn.tls-verify.php whitespace. Issue #7767

Reword option help text for issue #9302

Merge pull request #4158 from vktg/systemphproutedel

system.php: full route delete syntax

Update SSL refs to SSL/TLS. Fixes #10172

Update repository info before checking for updates

Merge pull request #4151 from vktg/urltablefeature

Merge pull request #4145 from vktg/ovpnocsp

squashed commit

switch to resolve_host_addresses() func

Merge pull request #4144 from vktg/exportaliases

change http to https for redirect link

update redirect to issue tracker

Merge pull request #4147 from vktg/expkeypasscheck

Merge pull request #4154 from surrural/patch-1

Merge pull request #4152 from vktg/ntpstatlocheck

Merge pull request #4149 from Augustin-FL/nginx

Do not allow 'invert match' and 'any' on firewall rules. Fixes #10168

The backend code ignores the invert in this case, and it makes the GUI
render confusingly (!* which could never match anything)

Ticket #9612: Reboot early when needed

When fsck -z doesn't work on first attempt due to old binary, reboot
before configure the system to make it faster

Ticket #9612: Prevent infinite loop and skip zfs

• Detect when system does not contain any UFS partitions and skip it to
  run fsck -z
• On a system with a broken filesystem it could end up on an infinite
  loop since fsck -z call would always return != 0. Save a counter on...

Add a few more common ports to list. Fixes #10166

Fix #9612: Reboot twice if needed and run fsck -z

After changing pfSense-rc to create /.fix_for_SA-19-10.ufs file to flag
system to run fsck -z during pre-install stage it started failing
because fsck binary, at that point while only kernel was upgraded, still...

rc.php_ini_setup: Replace backticks by $()

Fixed 10156
Fixed 10157

New redirects.netgate.com/whatever links set up and incorporated in menu system

Remove one lingering relayd related message. Issue #9386

Remove deprecated & unused option that wasn't displayed in the GUI.

Remove redundant DNSimple instructions

check ntp acl only for localhost block

urltable can return >1 IPs

Wait 0.2 seconds after stopping Nginx.
Redmine #10159

Revise survey wording

Remove vestiges of legacy ACB system

Remove some outdated references. Issue #10156

Remove some outdated references. Issue #10156

Fix typo