pfSense

Test the password, not the hash, or it won't detect if the user reset password from the console or otherwise changed it to the default manually. Issue #8596

Change warning wording to avoid using a "click here" link. Issue #8596

Fixed #8596

Fixed #8597 The edit page will no longer initialize with focus on any element

Merge pull request #3960 from PiBa-NL/20180704-ipsec-fix-phase1-edit-page

Merge pull request #3951 from whislock/dh-rfc

Merge pull request #3958 from PiBa-NL/20180702-gateway-none

Add missing global $g declaration

Create pkg_conf_setup() to setup pkg.conf

It will be necessary in near future for thoth setup

Suppress display of AutoConfigBackup in package list

Fix #7024: Fix Radius include extension

ipsec, fix Phase1 and Phase2 edit pages 'section' class does not have a setHelp() function, and add help for insecure DH groups on mobile settings page

Add gettext() and other cosmetic changes

Fixed #8048 now properly removes dhcpv6 for lan if lan is not configured

Provide warning if legacy mode not configured

Add legacy encrytopn password support

Add tabs to settings page

Update $config references

Fix #7024: Deprecate /etc/inc/radius.inc in favor of pear-Auth_RADIUS port

Initial commit of ACB core functionality

routing, add option 'automatic' for gateway selection, and allow manual ordering of gateways

Merge pull request #3941 from mattund/master

Fixing @jim-p's change requests

Merge pull request #3956 from PiBa-NL/20180609-fix-default-route-for-dynamic-gateway-pppoe

Merge pull request #3955 from PiBa-NL/20180623-fix-edit-interface-set-default-gateway

Merge pull request #3953 from whislock/gw-mon-interval

Merge pull request #3952 from imcdona/master

Merge pull request #3939 from seanm/IPSec-Warnings2

Make GUI/config values for gateway groups match what the backend code expects. Fixes #8586

Fix style

Fixing GitHub reported issues

Correct a PHP error when saving on system_advanced_admin.php. Fixes #8606

Fix OpenVPN Wizard LDAP handling of ATTR fields. Fixes #8605

While here, also add missing LDAP fields and fix a PHP 7.2 error.

Fixed #7013
Added warning requiring reboot if group scope is changed

Do not generate a NAT reflection rule with an interface source if that interface has no IP address. Fixes #8604

Fix PHP 7 error on services_unbound_host_edit.php

Deprecate the copy of simplepie, use the port instead

Remove unneeded commas

routing, fix setting the default-route when the configured default gateway is a dynamic pppoe gateway

routing, when adding a new gateway and setting it as the default actually allow that to happen by indicating the proper ipprotocol for the gateway to set it for as a default

Remove RFC 7919 from DH group titles

Nothing is preventing the user from overwriting them, which would mean they're no longer the RFC groups.

Added new DH groups to valid groups list

Reduce max interval to 60 minutes

Per discussion on Redmine, bringing the maximum probe interval down to 60 minutes. Anything higher than this would provide little real-world benefit to gateway monitoring.

Redmine #8592: Clarify DHCP hostname registration

Extend maximum monitoring interval.
The existing monitoring interval was a maximum of 86400 ms, or approximately 86 seconds. This can cause excessive data usage over strictly metered connections. This patch extends the maximum interval to 86,400,000 ms, or exactly 24 hours.

Provide DH groups from RFC 7919.

Replaced 2048-bit and 4096-bit groups with RFC 7919 parameters. Added 3072, 6144, and 8192-bit groups from same. Relocated PEM generator script to tools directory.

PHP7 fixed illegal string offset

Merge pull request #3950 from marcelloc/patch-5

Merge pull request #3949 from Hobby-Student/master

Merge pull request #3947 from PiBa-NL/20180609-fix-default-route-for-dynamic-gateway-pppoe

Merge pull request #3945 from laurentquillerou/http2

Merge pull request #3943 from miken32/patch-2

Merge https://github.com/pfsense/pfsense into http2

requested changes

fix the fix

get total size on system dashboad

check total swap size on dashboard

Refer to bug #8587

fixed wrong if conditions
added support of dns server

misspelled ldap bind username variable

• $ldapbndun -> $ldapbindun

Correct PHP syntax error that leads to a PHP 7 error.

Correct the gateway check when deleting a VIP. Fixes #4438

Now it checks to see if there are other VIPs in the same subnet left,
and only prevents deleting the last VIP by which a gateway could be
reached.

routing, rc.newwanip should also set default-route while booting for ppp interfaces

otherwise we might end up without a default as the bootup script does not wait for ppp interface to obtain the ip, unlike with dhcp interfaces. https://redmine.pfsense.org/issues/8561

Fixed #8515 fixed error in queue defintion where it would repeat

It should now create a new definition for each queue. Queues should
now show up under status > queues.

Added future ACB settings page

Validate NPt IPv6 address input and do not use invalid stored settings in rules. Fixes #8575

1. I rewound src/etc/inc/config.inc back to you guys' base. It was some funny EOL stuff that happened.
2. Unwrapped gettext()
3. Agreed. Sanitized.
4. Unwrapped gettext()
5. Took out input_errors item
6. Took out input_errors item
7. I like the idea of this. I would love to add heavier validation; unless I just affix for datatype I would need to know the constraints on which the parameters live for the AQM/scheds. Maybe that's documented. I can revisit this....

Rework loader.conf(.local) filtering. Fixes #8571

If this isn't aggressive enough, we could remove the "local" changes and only
keep the new matching method.

Fix PHP error in dhcpd_gather_stats.php

Some variables were pre-populated with a string, then math was attempted based on a string value that couldn't be converted to an int.

Fix IPsec status widget conn matching to align with recent changes. Fixes #8562

Be specific with port fwd priv checks. Fixes #8563

This way, users with only privs to view but not edit port forwards can still see the entries, but not act upon them.

routeing, gateways show proper IPv4 IPv6 default, also for dynamic gateways

routing, fix setting the default-route when the configured default gateway is a dynamic pppoe gateway. it doesnt have a gateway-status when it hasn't connected yet.

Fixup ipsec interface static route processing. Issue #8544

Fixed #8515 Queues should now be added either through manually creating them or through the wizard

Make IPsec IKEv2 conn IDs consistent with IKEv1 or IKEv2 split. Also fix vti test for reqid.

Correct PHP syntax error. Fixes #8557

Allow hostname/ip to be deleted if the captive portal is not enabled

Do not put "route-to" on rules for traffic outbound from the firewall itself on ipsecX interfaces. Fixes #8551

Fixed #8539

Fix up user/group management save message descriptions, add logging for same. Fixes #8548

8552 - enable http2

Fix IPsec VTI gateway generation to match interface changes. Fixes #8544

Rework how IPsec VTI interfaces and reqid specifications for same are formed. Ticket #8544

IPsec VTI interface refinements/fixes. Ticket #8544

PHP7 fixed illegal string offset warning

Add the missing new line.

Fix reference to non-existent variable in IPsec P1. Fixes #8543

A couple vpn.inc refinements for VTI. Ticket #8544

Add vpn.inc changes for IPsec VTI that missed the previous commit. Ticket #8544

Please welcome routed IPsec using if_ipsec VTI interfaces. Implements #8544

To use, create a P1/P2 and set P2 to VTI using local/remote network as tunnel endpoint addresses, then assign the interface (enable, but IP type = none), and use like any other interface for routing.

Do not disable rekeying by default on IPsec P1 entries. Fixes #8540

Fix crash reporter download button display when there are only PHP errors, no textdumps.

Fix crash reporter "submit" wording (can't submit anymore!)

Rework crash reporter page so users can download the data files directly rather than submitting to a server.

Restrict entry of DHCP options (ticket #8534)

PHP 7.2 fixed string offset and undefined constant

Update translation files

Regenerate pot

PHP 7.2 Migration. Replace is_numeric() with ctype_xdigit() to check for valid hex string

Add switch config to status output. Implements #8525