pfSense

Add default value to $ipv6type argument of restart_interface_services(). Fixes #13134

Cleanup PPPoE VIPs to fix IP address order. Issue #11629

Remove topology keyword from openvpn_cc file. Fixes #13133

OpenVPN status improvements. Implements #13129

• Clean up and improve client/p2p state interpretation
• Output OpenVPN instance interface names
• Improve formatting of service status and control icons

Revert "Revert "Remove the leftover pfSense-installer repo if it exists""

This reverts commit ae40f82dc7bdc2cbef8a22ee682ec97e5a69fbd8.

Bring this back in now the build puts the file in /tmp and cleans up
after itself properly

Use dnctl(8) to control limiter rules. Feature #12579

Remove duplicate SSHDATA tag. Fixes #13132

Allow to assign L2TP VPN server interface. Issue #13099

VPN restart on Gateway options change. Issue #13076

Revert "Remove the leftover pfSense-installer repo if it exists"

This reverts commit 2f5b8f48de1875c128e05267b0f7d59075c781c4.

This breaks the build since it removes the file too early

Remove the leftover pfSense-installer repo if it exists

Merge pull request #4581 from kris-anderson/feature/relax-dhcp-input-validation

Merge pull request #4580 from luckman212/trim_static_dhcp_mac_on_save

Merge pull request #4579 from luckman212/store-dnsmasq-opts-as-base64

Merge pull request #4578 from luckman212/warning-for-recursive-sshd-disable

Merge pull request #4584 from luckman212/fix_tcp_udp_nat_rdr

Restart DNS Resolver after OpenVPN config save. Fixes #13117

Suppress php warning when using unlink. Fixes #13112

pfSense: Correct typo in buffer_rules_load 'labels' -> 'label' - R12977

fix for https://redmine.pfsense.org/issues/13126

pfSense: Get rule descs for syslog.inc via pfSense_get_pf_rules() - Regression #12977

Correct CP status function call. Fixes #13123

Correct CP status function call. Fixes #13122

more spelling fixes

more accurate error message

fix a spelling mistake

max dhcp lease can be equal to the default lease

Improve OpenVPN "tls-client"/"pull". Fixes #13116

"tls-client" and "client" are redundant, so only use "tls-client" and
"pull". Omit "pull" in cases where it is known to be incompatible.

pfSense: Utilize pf captiveportal funcs from php-pfSense - Feature #12945

Use mpd embedded bandwidth control to reconnect. Fixes #13092

store dnsmasq custom_options as base64

trim mac address when submitting

eases copy & paste which sometimes grabs a little extra whitespace
on either end -- previously caused input validation to fail

Destroy deleted/disabled IPsec SA. Fixes #13102

Port Forward input validation fix. Issue #4259

Captive Portal remove unused ipfw code. Todo #13100

Captive Portal ipfw->pf transition. Todo #13100

add warning for menu option 14 when it might kill your connection

Fix error handling in pfanchordrill. Fixes #13106

USB NIC handling improvements. Fixes #12606 #9393

Reload static routes on L2TP VPN client connect. Fixes #13099

Update config 215 to 216 fix. Issue #13097

LDAP authentication extended query fix. Issue #13093

Add no noretry to PPPoE mpd configuration. Fixes #13092

Traffic Shaper Wizard bandwidth scale fix. Issue #13086

Fix typo. Issue #13076

Slack Notifications fix. Issue #13083

Slow rule generation regression. Fix #13049

Optimize stacked IP Aliases reconfiguration. Issue #12961

OpenVPN Enforce key usage option typo fix. Issue #13056

Port forward NAT rules with Any protocol. Implements #4259

Restart L2TP VPN on interface change. Fixes #13082

Reconfigure stacked IP Aliases on XMLRPC sync and Virtual IP change only. Fixes #12961

OpenVPN Enforce key usage option fix. Issue #13056

ddb.conf: log registers

When we crash also log the register values. They may contain useful
hints for debugging (especially if the unstripped build artefacts are
still available), and take up very little space in the textdump.

Reload IPsec and OpenVPN on gateway IP or force_down option change. Issue #13076

NPT manual prefix fix. Issue #13070

Send packages reload event on interface change. Issue #13064

Traffic Shaper Wizard ipprotocol fix. Issue #12937

Restart L2TP VPN on interface IP change. Fixes #13066

Restart dpinger on boot if IPsec PH1 remote gateway is FQDN and PH2 mode is VTI. Fixes #12763

Allow auto prefix with manual prefix-length in NPT. Implements #13070

Ensure same type comparison. Fixes #13059

Fix IPsec SAD delete. Fixes #13071

Do not restart IPv4 OpenVPN on IPv6 gateway events and vice versa. Fixes #13061

Reject multiple IPv6 compressions. Fixes #13069

Having :: in an IPv6 address more than once is not valid, even if it
expands to an unambiguous result.

Traffic Shaper Wizard VOIP rules fix. Issue #12937

Include pkg-utils.inc to interfaces.php. Fixes #13064

Do not restart IPv4 IPsec on IPv6 gateway events and vice versa. Issue #3132

WebGUI option for IPsec <dns-interval> option. Feature #13057

Encode alias URL before display. Fixes #13060

Skip IPsec VTI interface if remote FQDN gateway is not resolved. Issue #12763

Reload filter on OpenVPN instance delete. Fixes #13055

Restart services on interface configuration changes. Todo #12619

Do not create negate rules if <negate_networks> is empty. Fixes #13049

IPSec IKEv2 Mobile INTERNAL_DNS_DOMAIN (value 25) attribute. Fixes #12975

Option to keep serial f/renew cert Fixes #13010

Defaults to keep serial for CA but not for certs.

Traffic Shaper wizard minor fixes. Issue #12937

remove some dead code

see https://forum.netgate.com/topic/171394/sledgehammer-killall-in-shaper-php-and-inc-files

Unbound option to keep probing when servers are down. Implements #13023

Do not generate duplicate ``no nat on`` rules for port forwards with a destination of ``Any``. Fixes #13015

Regenerate link-local address on MAC change. Fixes #12794

Do not generate duplicate NAT Reflection rules. Fixes #13012

write_rcfile() restart fix. Issue #13025

Use correct rx/tx index. Fixes #8861

CLI history option optimization. Fixes #12675

There is no longer a need to use the ~/.keephistory flag file. Scripts
can check the config.xml value for a user directly.

Fix syntax error

write_rcfile() restart support. Issue #13004

Improve unbound DNSSEC option check. Issue #12985

OpenVPN unbound restart fixes. Issue #12991

Make openvpn.connect_async.sh executable

Add option to limit concurrent connections per OpenVPN user. Implements #12267

Clear stale Cisco-AVPair anchor rules. Fixes #12332

Improve OpenVPN client connection logging and logic
In preperation for fixes and features

Use OpenVPN deferred client-connect. Implements #12407

Move openvpn client-connect script to separate file
to prepare for deferred client-connect

Duplicate wireless interfaces fix. Issue #12999

Interfaces WIFI WPA configuration fields expose fix. Issue #12998

OpenVPN shared key warning. Implements #12981.

Adds a warning to the OpenVPN client and server list and edit pages
warning the user about shared key mode being deprecated by OpenVPN.

Warning only displays on the instance lists if there is an existing
shared key instance. Warning only displays when editing an instance...

Fix typo

Don't force a network type on page load for VTI mode P2. Fixes #11226

Also affects mode changes from/to VTI