pfSense

Add ipsec widget to new centralized refresh system

Experimental centralized widget refresh system
Used by the interfaces.widget.php widget only for now

make css compatible with newer nvd3 version

Update config version

Fix upgrade 166 to 167 script

Rename support widget refresh link to match new widget name

Force the support widget to show when a user upgrades to this version

Remove .empty files from trusted/revoked directories

Theme Compact-RED, adopt new logo for theme sizing navbar size

update top nav bar logo

change login page logo to svg

remove image from rss widget

update favicon

Update translation files

Regenerate pot

Fix #7625: Auto select '128' as mask for IPv6

Fix VLAN Priority set pf syntax. Fixes #7744

Merge pull request #3762 from PiBa-NL/20170624_gatewayalarm_log

Merge pull request #3535 from fernsehkind/Redmine1629

Add pt_BR back to GUI since it's over 75% complete

Merge pull request #3773 from PiBa-NL/20170703-ipsec-sleep-lock

Merge pull request #3784 from PiBa-NL/20170713-shaper-show-disabled-interface-names

Merge pull request #3761 from marjohn56/master

Merge pull request #3789 from stilez/patch-69

Merge pull request #3787 from stilez/patch-68

Merge pull request #3788 from znerol/feature/master/bridge-ipv6-auto-linklocal

Merge pull request #3770 from hamnur/master

Merge pull request #3791 from marjohn56/PD-FIX

Merge pull request #3585 from PiBa-NL/trafficgraphs-optimize

Merge pull request #3785 from stilez/patch-67

Update translation files

Regenerate pot

important exclusion - update help text for packets dropped by NIC / offload

Say that non-promiscuous mode doesn't see packets dropped by NIC.
(promiscuous detection relies mainly on different responses if a packet is dropped by NIC or kernel, so corollary is that non-promisc won't see certain packets even if directed at the host)

trafficgraphs, move common code to 1 file, and remove usage of 'localstorage' which shares unwanted changes to graph settings between widget and stats

traffic-graphs, optimize retrieval of data every x seconds to reduce spikes in the graphs and load on pfSense
also cleanup some old code.

Comment fixes

Revise default widget settings to accommodate new support widget name

Add renamed support widget

Merge pull request #3783 from PiBa-NL/20170713-dns-delete-last-additional-name

dhcp6c Advanced Config prefix interface

Currently, when using dhcp6c advanced configuration the prefix interface is WAN, this is not very useful!

The changes here allow the user to select the interface that the PD will be applied on..

Eliminate Gold menu item

Rename support widget to "Netgate Services And Support"

Correct typo's as per Jim's request

Add Option to use static IPV6 over v4 parent ( PPPoE

A new option when setting a v6 static on the WAN to allow the connection to use the V4 interfaces i.e. PPPoE

Fixed 7128

Allow recheck on refresh if JSON not available

Make rules that deal with IP+MAC pairs to be layer2 only

Add some info to HELP text (no code change otherwise)

NTP background isn't going to be widely known. So provide a bit of info so that it's done properly if someone cares.

For example, it's easy to think a small number is enough, as one might with alternative DNS servers, despite NTP website recommending 4-5 or a pool. So state the consequence of too few servers....

Restore calls to pfSense_ipfw_table_zerocnt(), it's fixed now

Remove unused parameters

Do not associate IP and MAC on down table

Fix syntax

Remove leftover debug

Ressurrect nomacfilter option on CP now IPFW supports combined tables with IP and MAC address

Add support for IPv6 AUTO_LINKLOCAL flag on bridge interfaces

typo

"Networked" not "network" - "Internet of Things" especially.

grammar fix

format %1$s etc in help

Improve the HELP note about what will/won't work if TLD is set to ".local"

For example, some people won't use mDNS and won't know other things might break; also it's not clear that while ".local" is a problem, ".local.lan" isn't.

Re-introduce Captive Portal statistics

Update translation files

Regenerate pot

Support widget visible by default

Add customer support widget

Prevent iOS auto-capitalization on username field

Use attribute rekey_enable as usual but optionally allow to set margintime if rekeying is not disabled

Change login page links to absolute paths

add "very"

slight further text/format improvement

Improve help text for promiscuous mode

"promiscuous mode" is often quoted but not always understood. Also its possible drawbacks (other than compatibility which will be clear upon failure) may be relevant in some cases, but there's no indication of any drawbacks existing. Update help text to be more useful here. The extra detail is in a hidden clickable infobox.

Use an alternate method to stop unbound and fix #7326

If a client address is in the webConfiguratorlockout table, do not allow them to access the GUI. Print an error and kill their states. Ticket #7693
Extra check to be sure that an existing open state cannot bypass lockout controls.

Fix indent of if-block

Merge branch 'master' of https://github.com/hamnur/pfsense into HEAD

Check if margintime is numeric and smaller than P1 lifetime

Hide margintime if rekeying is disabled

Fix typo

Trafficshaper, show interface names for disabled interfaces, dont just show a kinda 'empty' spot..

dns, allow deleting last row for "Additional Names for this Host"

Merge pull request #3771 from PiBa-NL/20170701-cron-fix

Merge pull request #3772 from PiBa-NL/20170703-boot-config-check-message

Merge pull request #3782 from PiBa-NL/20170712-nat-configure-skip-no-dest

Restructure how unbound zone data is written to fix processing of "redirect" zone entries. Fixes #7690
Also corrects some other misc issues for formatting of zone data.
While here, add an option, not exposed in the GUI, for users to get the previous behavior of defining short names for hosts.

nat, portforwards should not make up a new destination information when a configured dhcp interface does not currently have an address.

fixes: https://forum.pfsense.org/index.php?topic=127585.msg733528#msg733528

Improve the way the auth server list is generated and account for a key being removed from the array when deleting. Fixes #7682

Fix OpenVPN Auth Digest Algorithm selection so it does not use duplicate/alias names in the list, and fix existing entries on upgrade so they use the actual digest name and not an alias.

Fix CA reference so serial increases properly. Remove variable for feature that didn't work out. Ticket #7527

Stop using pecl-ssh2

Add another possible CSR Armor string when validating. Ticket #7383

Restructure how certificate types and SANs are handled in the cert manager when making a Cert/CSR/Signing, so each section can properly use the controls without duplicating. It is now possible to add SANs and EKUs to certificates when signing using the certificate manager. Fixes #7527 and also Fixes #7677...

Removed MSS clamping exclusions

Several complaints of unbound problems after commiting, so back this out. Revert "Change the way unbound is stopped when the process is being restarted, to give the old process enough time to exit cleanly. Fixes #7326"

This reverts commit 38d110824c87ff60c6289c0432d55009586ceee4.

Add the ability to set certificate type and SAN attributes in a CSR. Ticket #7527
TODO: They are not carried over after signing in the GUI

Fix missing line from openssl.cnf

Update translation files

Regenerate pot

Add the username as the first SAN when making a user certificate from the user manager creation screen. Fixes #7666

Fix some additional cases for CN->SAN handling, and move some code to a function to avoid duplication for other pending uses. Ticket #7666

Include User Agent information when update bogons list

Remove extra spaces from User Agent