pfSense

Fixed #6703

(cherry picked from commit e5343844c6de78feafae9e601b25bdf31f114a50)

Fixed #6706

(cherry picked from commit b86938e7e19a09a5b1f3f54825193b57f7c73131)

Fixed #6705

(cherry picked from commit d526fc2d2acc87af2ca829dfe01f0037e3368051)

Fixed #6701

(cherry picked from commit 03fd538eefd641771b6302370b901fe4ace3ab4f)

Fixed #6704

(cherry picked from commit fd778d8bef8ea3b0e5dcc8007de242b6e2ac6d5a)

Fixed to properly save configs in PPPs interfaces

Pass along send_smtp_message() return, otherwise message will not be shown when testing SMTP settings

Fix wording of the "Reject leases from" option for a DHCP interface.

Text typo

Noted by Daryl Morse in comment on Redmine bug 6637.
(cherry picked from commit bf6ae0ad277710ffa64ee0967c5d4f717c2bc54b)

Verify if interface is active gw for gw group before update dynamic DNS

pfSense.css: Fix sortable tables' font

Experiment using the OS' native font stack

Following the steps of bfbfa4dd254c110db4122925d0a3716a34d4c664,
experiment using the OS' native font stack.

Obtained from the Bootstrap project (twbs/bootstrap#19098,
twbs/bootstrap@0a31dacf3e0c43a73b2e61e266155b9dcce35339)

Fix a redundant HTTP "User-Agent" string.

CURLOPT_USERAGENT expect the value to the user-agent string, not the entire key-value pair.
Before this fix, HTTP header "User-Agent: User-Agent: phpDynDNS/0.7" was sent for DDNS updates.
NGINX configuration at GratisDNS will not accept a user-agent formatted in the above way....

Add a field to CA/Cert pages for OU, which is required by some external CAs and users. Fixes #6672

Remove defunct link to the devwiki site. Everything is on doc.pfsense.org now.

Fix typo, LT2P->L2TP

Fixed #6669
Read widget config before adding a new one. (Was starting a new array)

(cherry picked from commit 236e6a54e9a93284ca170b68aa1188dfaa195c3d)

experiment with tighter styling

Fixes #6601 clean up installed packages html

clean up Installed Packages widget by removing category

Increase filtering tail limit for logging, fixes #6652

Whitespace fixes

Fix redmine #6640 DHCPv6 server time format

The original code here ended up always applying the time zone offset once, and if you had set dhcpv6leaseinlocaltime then it got applied twice, so Sydney at UTC+10:00 would show UTC+20:00 and presumably somewhere at UTC-04:00 would show UTC-08:00...

Welcome 2.3.2-RELEASE

Set HTTP_PROXY to empty as recommended at https://httpoxy.org/#fix-now

Allow section header to be omitted by specifying "NOTITLE" as the section title.

(cherry picked from commit 9ce54773be5e02235e3be7d2b970f61fbb27ba86)

Show "cannot delete alias" message as error

If I try to delete an alias that is in use, the "cannot delete alias" message was being displayed as the "success" color.
(cherry picked from commit 04b571e836077c436d109d982be5a8e710ff8aab)

Allow AES-GCM for P1 where using IKEv2. Ticket #5990

Clarify that HMAC-MD5 key is required. Ticket #6622

Fix "http://pf.sense/UNKNOWN" links in Pkg Manager

I noticed recently that many packages do not have the 'www' field in the database filled, or have it set to UNKNOWN The way the table is built, this causes bad links to be generated pointing to e.g. http://pf.sense/UNKNOWN. This patch fixes it, causing only packages with actual links to get the <a> tag.

fix typo

Fix xml syntax after license update

(cherry picked from commit f7057140af3a98af925f76b6b0bb544dc7bfc418)

Make a function to resync all OpenVPN CSCs and use it when saving an OpenVPN server. Fixes #6139

dse was under contract with BSDP for all the work he did, we own (c)

Review license / copyright on all files (final round)

Set dhcp-cache-threshold to 0 to avoid a bug in dhcpd 4.3.x where it omits client-hostname where the cache threshold is reached. Ticket #6589

Bring back the "set iface route default" used in 2.2.6 and earlier versions, which works around the root problem in Ticket #6495

Fix #6613 Do not show Aply Changes button when Save needed

I got a bit carried away in the fix for #6460 https://github.com/pfsense/pfsense/commit/21c18c3df11547aba172c10f95872dbd8682f7d9
The message here at line 507 should not actually show the Apply Changes button. At this point the user needs to adjust the assigned interfaces and save. Then after saving an Apply Changes button can be used to implement the saved changes.

Review license / copyright on all files (1st round)

Retire deactivated widgets

chmod 0644 php web pages

Retire copyright-master.txt

chmod 0644 php web pages

Retire /usr/local/bin/slowdownpipe.sh

Ignore cp result for cases when files are the same. Ticket #6557

Fix #6050 DHCP - provide Network Booting display/hide advanced button

This one moves the "Network Booting" above the "Additional BOOTP/DHCP Options". That allows "Network Booting" to be a Display/Hide Advanced group of buttons just like TFTP, LDAP etc. (without a special section header) and for "Additional BOOTP/DHCP Options" to come last on the page....

simplify DHCP_Config_Option_Split, no loop needed for returning option array

(cherry picked from commit 264ca54e406eee7c01b01f748aabd4a29e9c4872)

Allow passing comma in string quoted DHCP client options

(cherry picked from commit 332a64d0c8a6486d40c6295351ca3068a77a216a)

style sortable tables

clean up captive poral widget

change order of css files in head element

write_config before openvpn_resync here as well. Ticket #6139

Add upgrade code to clean up the old GRE/GIF flags that are no longer used. Ticket #6586 and Ticket #6587

Align GIF link options with those currently supported by the base OS. Ticket #6587

Remove GRE link flag options from GUI/backend. Keep link1 as it was also used to add an explicit static route, though the GUI previous GUI option name wasn't related to that at all. Updated GUI description to match reality. Ticket #6586

write_config before calling openvpn_resync. Ticket #6319

Fix firewall rules for PPPoE server

1) PPPoE Clients are located within 'Remote Address Range' (sa) and not Server Address (ip), see lines 1194 and 1195. 2) Interfaces for floating rules were not being correctly added due to a bug on interface detection caused by PPPoE differences....

Properly follow style guidelines.

Include ignored DHCP server(s) config option even when advanced DHCP config is enabled

fix typo. noticed-by: phil.davis

set net.isr.dispatch instead since net.inet.ipsec.directdispatch no longer exists. Ticket #4754

Add config option for AdvDefaultLifetime, clean up descriptions on other. Ticket #6533

Add configuration for Min and MaxRtrAdvInterval. Ticket #6533

Fix #6590 NTPd Leapfile Upload

Leave this to 2.4 only for now. Revert "Omit non-qualified hostnames from unbound's local-data. Ticket #6064"

This reverts commit cde0ef17a60cffa4a54f3ab4922b77bc0447d068.

Omit non-qualified hostnames from unbound's local-data. Ticket #6064

Call filter_configure in rc.linkup. Ticket #6297

Verify a valid IPv6 subnet is going to be used before including in radvd's config. Ticket #6581

Missing closing quote

Create /var/run/dmesg.boot symlink for vm-bhyve (Feature #6573)

See https://redmine.pfsense.org/issues/6573

Fix indent and spaces

Remove stray '

Fix #6582 Allow import of ports

This change does:
1) Allow bulk import of a port alias. That happens when the Import
button is pressed from the Ports tab of the firewall_aliases screen.
2) Allow bulk import of an IP alias, automatically determine if the
imported data fits a host or network alias type. That happens when the...

Improve patterns to read dhcpd6.leases to prevent leases containing '}' in ia-na line not showing up. It fixes #6543

Fix #6585 Do not use [] syntax for lookups

IPv6 address plus port is displayed with the format [1:2::3]:80 - the address is in square brackets followed by colon and the port number. This is necessary to disambiguate the port from the address, a good thing. But it messes up the use of the IPv6 address for reverse lookup....

Show "cannot delete alias" message as error

If I try to delete an alias that is in use, the "cannot delete alias" message was being displayed as the "success" color.
(cherry picked from commit 04b571e836077c436d109d982be5a8e710ff8aab)

Do not check platform to decide if enableserial and primaryconsole fields will be hidden, global parameters are the rule to decide it. Fixes #6291

Fix PTR lookups on diag_dns.php. Ticket #6561

Change group labels s/MAC controls/MAC Address/

Add missing -R parameter to pkg call

Correct spacing

(cherry picked from commit a0b0acd1540764d5221ea54ea596d569bbe2df2a)

Remove debug

Fixed #6577 - Preserve user input on error

(cherry picked from commit a654d899cd5d288501fea1ec52dba2e3f0e479ba)

Make sure resolv.conf is present during nanobsd upgrade. Fixes #6557

Leave an empty file for URL Table aliases that return an empty file, and include it in the ruleset regardless so it doesn't generate any filter errors. Ticket #6181

Protect get_dir from causing PHP errors

https://forum.pfsense.org/index.php?topic=114570.0

webgui tables, doubleclick event to perform 'edit' action, part 2

(cherry picked from commit 1c10ce9750f3702f433a91754f79e637e1c3369b)

webgui tables, doubleclick event to perform 'edit' action

(cherry picked from commit 54691fc663eae7c6e92e4eaad596906758d7ebea)

ipsec widget, check for valid array

(cherry picked from commit 658180daffe0fe5f005b6fe6b528c758309dffef)

spdns.de renamed to spdyn.de

Forgot to update the select description and values

spdns.de renamed to spdyn.de

The service renamed there addresses

Clarify Negate option description on firewall_nat_out.php.

Change button order on diag_dns.php so hitting enter in the field does a lookup rather than update alias. semi-related to Ticket #6561

Update system_usermanager_settings.php

Use of undefined constant min - assumed 'min'

Update system_crlmanager.php

Use of undefined constant min - assumed 'min'
Use of undefined constant max - assumed 'max'

Fix undefined constant

Notice: Use of undefined constant min - assumed 'min'
Notice: Use of undefined constant max - assumed 'max'

startsWith Polyfill

Fixes hidding of custom individual settings when not in use on user manager page.

Diag Tables Last Update

Use correct Thursday abbreviation (s/Thr/Thu/).

Fix Redmine #6011

This will add linklocal fallback where no IPv6 is otherwise configured to allow login using this IPs

Allow wildcard for hostname with Namecheap DDNS. Ticket #6260