pfSense

Fix firewall rules for PPPoE server

1) PPPoE Clients are located within 'Remote Address Range' (sa) and not Server Address (ip), see lines 1194 and 1195. 2) Interfaces for floating rules were not being correctly added due to a bug on interface detection caused by PPPoE differences....

Merge pull request #2764 from NewEraCracker/redmine-6011

Allow wildcard for hostname with Namecheap DDNS. Ticket #6260

Merge pull request #2729 from zevlag/BountyRequestTopic106193

Merge pull request #3031 from NOYB/GitSync_Diff_Only_Option

GitSync Diff Only Option

Diff Option
--diff
SSD Friendlier
Same as default but only copies files that are different, instead of every thing even though identical.

Verbose Option
--verbose
Display constructed command.
In combination with the --diff option, display the array of different and missing files....

Merge pull request #2994 from stilez/patch-31

Merge pull request #3018 from phil-davis/usersettings

Merge pull request #3029 from phil-davis/IPv6colons

Merge pull request #3030 from phil-davis/patch-1

Merge pull request #3028 from PiBa-NL/2.3_dnsV6

Rationalize System Update GUI messages

At present, when doing a System Update, there is a message box that says:
"Please wait while the installation of completes.
This may take several minutes."

Between "of" and "completes" is the package name, which is blank in the case of a System Update....

Add playback files for disabling and enabling CARP maintenance mode. Ticket #6560

Handle more invalid IPv6 formats

Omit <secret> tags from L2TP in status.php config.xml dump.

Restore 2.2.x and prior means of obtaining pfsync nodes to avoid exhausting memory on systems with large state tables. Ticket #6364

Diagnostics - DNS Lookup, also query for IPv6 addresses

Merge pull request #2934 from k-paulius/patch-14

Merge pull request #2944 from stilez/patch-23

Merge pull request #3000 from stilez/patch-32

Merge pull request #3024 from phil-davis/include_once

Shorten gwifip if whole socket path exceeds 100 chars

dpinger stopps with an error when the socketname exceeds over
(around) 100 characters. The dpinger will not start and not deliver
monitoring results to the WebUI.

These long socket names can get created when using link-local addresses...

Use a different delimiter for dpinger socket names

Currently underscores are used to seperate gwifip, monitorip, etc, but
underscors are also used in vlan subinterfaces like em0_vlan10 and
therefore can't be used because the interface scope is appended to IPv6...

Set pipe_slot_limit to the maximum configured qlimit value. Move the set_sysctl out if the block where it only gets run if dummynet isn't already loaded. Ticket #6553

Clean up limiter text. Remove old commented out bit.

Merge pull request #3026 from phil-davis/patch-2

Fix matching of chars in IPv6 address segments

The existing regex here is wrong, it matches 0 or more of the hex digits but then there can be other rubbish in the string, in fact anything at all! It matches "az", "z", "qwerty" and so on. So the "return false" inside this "if" never happens....

Remove a-f from IPv4 address pattern

It seems to me that a through f should not be part of the pattern for the "V4" case.

Update include() to include_once()

For safety, use include_once() when including various "side" files.
There are a couple of instances of include("guiconfig,inc") that I
changes to use require_once() to be consistent with everywhere else.
The remaining cases of include() are just (hundreds of) head.inc and...

Merge pull request #3022 from phil-davis/require_once

Run generate-privdefs.php to update priv.defs.inc

Always use require_once

The usage of require() and require_once() throughout the system is
inconsistent, and "bugs" come up now and then when the order of
"requires" is a bit different and some require() happens after the
include file is already included/required....

bring back subnetv4_expand function used by pfblockerng

Use the translated destination for kill_states if one exists. Ticket #6531

Correct/clarify column header. Ticket #6530

Fix style

pfSense_get_pf_states always returns source as src and dest as dst, this flipping based on direction is wrong. Ticket #6530

Fix style

Merge pull request #3013 from dennypage/master

Include interface scope on IPv6 static routes to link local gateway IPs. Ticket #6506

Comment typo

Revert "adding privileges and separating DNS Resolver overrides from general settings"

This reverts commit fc76a1e390c8ce9579df31457c74d1d0e572b78d.

Merge pull request #3019 from NOYB/RFC2136_Client_Edit_Priv_Def

Merge pull request #3017 from phil-davis/patch-2

Restored countdown functionality and menu refresh on successful update/remove/install
Added comments to clarify operation of the page

Move /etc/ascii-art to /usr/local/share/pfSense

Remove unused mtree file

Make base package to populate /etc/platform

Remove copy of serviceproviders.xml, it will be provided by port net/mobile-broadband-provider-info

Move iso_3166-1_list_en.xml to /usr/local/share/pfSense

Remove DejaVuSansMono-Roman.ttf, rrdtool is not plotting graphs anymore

Remove intel license files, they are part of FreeBSD-src

Create /home on rc if it's necessary, then remove home/.empty file from git repo

Move athctrl.sh to /usr/local/sbin

Shouldn't the priv match here be set to "services_rfc2136_edit.php*"?

Feature #6388 custom GUI preference settings per user

Load actual value of webguihostnamemenu

This is a string from a list of valid values (empty, "hostonly", "fqdn"). So it is not correct to just gather a true/false value here.

Clarify ports alias hint. Ticket #6523

% and / are also allowed in values

Merge pull request #3011 from NewEraCracker/redmine-6394

Merge pull request #3010 from NOYB/Remove_Duplicate_ListTags_Entry

Merge pull request #3006 from stilez/patch-33

Merge pull request #3005 from phil-davis/patch-4

Merge pull request #3004 from hailthemelody/master

Merge pull request #3002 from NewEraCracker/patch-invalid-foreach

Merge pull request #3001 from NewEraCracker/patch-pppoe-mpd

Merge pull request #2989 from phil-davis/patch-2

Merge pull request #2988 from stilez/patch-28

Merge pull request #2987 from stilez/patch-27

Merge pull request #2986 from NewEraCracker/patch-ntp-gps

Merge pull request #2982 from stilez/patch-26

Merge pull request #2942 from stilez/patch-22

Merge pull request #2935 from cfazendin/hostname_menu

Merge pull request #2906 from Chrisc-c-c/Fix-QinQ-Interfaces

Allow IGMP Proxy logging verbosity to be selected via system log settings (PR 2901)

Merge pull request #2891 from gottaloveit/dns-overrides-privs

Merge pull request #2783 from jlduran/harden-sshd_config

Fixed #6504 by making table sortable

jQuery datepicker added to interfaces.php and interfaces_ppps_edit.php for setting custom expirey date

Fixed #6516 by replacing HTML5 datepicker with jQuery widget

fix rowhelper select_source empty combo

while using $config['installedpackage']{['...'] as source

Only call interfaces_vips_configure once if it's needed, rather than doing the same thing over and over for every VIP on an interface. Ticket #6515

update d3.js

update nvd3 files

Fix style

require_once auth.inc in vpn.inc since it uses functions from there, though normal use of the system won't require that, those who run certain things manually/custom may require it

Fixed #6514 by requiring string starts with letter ot underscore

Only omit aggressive line from ipsec.conf where IKEv2. Ticket #6513

Fixed #6498 by providing new address type argument to Form_IpAddress(). In this case it is specified as "V6".

(cherry picked from commit 3e4adb7139b4cddbb06a2aba7e0727d1762b35ee)

Create openssl.cnf symlink during boot

Set kern.corefile, fixes #6510

Fix typo

Fix redundant phrasing.

Teach rc script to copy custom_logos over default one

Add include of functions.inc for declaration of gettext

Fix Bug #6394 - Incorrect Output of Translation

Apparently gettext() does not behave correctly when passed an empty string, this commit ensures gettext() is called only with non-empty strings

Remove duplicate listtags() entry 'member'.

Remove tab_array from interfaces_groups_edit.php to be consistent with other *_edit files

Remove subnet_expand()

Function isn't used in main or packages repo, and in any case would need a complete rewrite to handle IPv6.

Correct value for 9600. Ticket #6416