pfSense

Attempt to clear the ZFS label off the end of the disk before expanding

This prevents hangs when importing the pool due to garbage on the end of
the disk

Rules copy feature. Implements #8365

Bridge interface input validation fix. Issue #12866

Do not remove net.link.ifqmaxlen from /boot/loader.conf.local. Fixes #12862

Correct Namecheap username handling. Fixes #12761

Add option for pw hash algo. Implements #12855

Namecheap DDNS response parse change. Fixes #12816

If the first attempt to parse the response fails, try again without the
XML declaration. The server may not be sending an accurate XML
declaration.

Fix dynamic IPv6 gateway address resolution. Issue #12847

Alias Export description support. Issue #12842

Fix PHP error on firewall_rules_edit.php. Issue #12392

Fix php syntax. Fixes #12831

LAGG hashing option. Implements #12819

Dynamic NPT support. Implements #4881

Update OpenVPN widget to support client halt function. Fixes #12817

Multiple DHCP6 WAN connections. Fixes #6880

Restart services on PPP client connect. Fixes #12811

Use random_bytes() to generate salt for SHA512 password hashing. Fixes #12801

Sanitize SHA512 hashed passwords from status_output. Fixes #12810

Merge pull request #4555 from zacwest/dnsimple-v6

Merge pull request #4554 from lmcquade/master

Merge pull request #4549 from hpeters/master

Remove quotes from TOS values. Fixes #12803

The quotes are no longer required by pf.

See also: #4302

Fallback to package \"name\" during package reinstall on restore. Fixes #12766

Restart services on OpenVPN client connect. Fixes #12771

DDNS edit page refactor + DigitalOcean and Google Domains wildcard support. Issues #12752 #12761

Password prompt on encrypted ECL config.xml. Feature #12685

Remove the reference unbound.conf(5) from the DNS Resolver page. Issue #12781

Start/stop PPPoE interface on parent interface events. Fixes #12633

Allow the selection of "any" interface in floating rules. Implements #12392

SNMP service restart improvements. Fixes #12611

IGMP Proxy service improvements. Fixes #12609

Always restart gateway monitoring and services on interface UP/START event. Fixes #11570

Clear aliases,filter,shaper and natconf flags on filter_configure(). Fixes #12678

DNS Resolver restart improvements. Fixes #12612

Remove unused add_hostname_to_watch() from ipsec_setup_gwifs(). Issue #12645

Restart OpenVPN on interface change. Fixes #11864

Fix full path to executable files. Issue #11941

Disallow 0.0.0.0 and :: as a VTI remote gateway. Issue #12723

Keep command line history WebGUI option. Implements #12675

GoDaddy DDNS wildcard support. Fixes #12750

Optimize openvpn_resync_all(). Fixes #12628

Delete static default route if default gateway is NONE. Fixes #12536 #11692

CARP status check for RADVD with link-local address. Fixes #12582

Remove link-local scope from IPv6 addresses in filter_nat_rules_generate_if(). Fixes #11984

GleSYS DDNS return code check fix. Issue #12672

Add IPv6 scope to DHCP6 link-local routes. Fixes #11764

Fix Custom(v6) requestif on STF interface with Force IPv4 DNS Resolution option. Issue #12590

Skip out-of-range entries on DHCP6 service start. Fixes #12527

Generate unbound ACLs for OpenVPN CSO. Fixes #12636

Reorganize UPnP options. Todo #12624

Initialize $cmp with an empty array. Fixes #12749

IPSec widget default tab option. Feature #2456

ACB notify improvements. Feature #12724

Fix disabling dhcpd rrd stats. Issue #12710

Static IPv6 route delete fix. Issue #12728

Change ACB main link to services_acb_backup.php. Todo #12093

Update Static Route and OpenVPN alias name when the alias is renamed. Fixes #12727

Only request copyright file is ews.netgate.com is resolvable. Issue #12141

Use http_build_query() for Google Domains DDNS post data. Fixes #12754

Reorganize CARP status page. Todo #12701

Eliminate duplicate shell commands from history file. Feature #12741

Convert OpenVPN Tunnel Network to correct format on save. Issue #11416

Button to toggle selected firewall rules. Implements #2505

Display interface interrupts. Fixes #12735

Firewall logs widget fixes. Issue #6253

Make ACB columns sortable. Implements #12773

L2TP/PPTP values reset fix. Fixes #12780

Check system default setting for NAT+Proxy mode in Port Forward input validation. Issue #12319

Add OpenVPN CSO to Automatic Outbound NAT. Fixes #12792

Correct NTP service status logic. Fixes #12775

Add UPnP NAT anchors before NAT rules. Fixes #7727

One-time NTP sync from static servers NG 7447

Sanity check the clock at boot. Issue NG 7447

Delete temporary ACB files. Fixes #12745

Add IPv6 variant of DNSimple DynDNS Provider

Clean up pkg filter text before use. Fixes #12725

Also remove unnecessary echos of the value.

Fix formatting. Add get_ll_scope() check.

Change get_gwgroup_members to include interface in link-local IPv6 addresses (Bug #12721)

Default repo selector to stable repo after upgrade to Plus

Detect correct setting for custom repo and call pkg_switch_repo to be sure

Revert clearing custom repo on boot

Revert "Move custom repo removal code to a better location in rc.reboot"

This reverts commit e696b0868a495af4f19505b8261f25d6604adc8d

Correct PHP syntax error. Fixes #12713

Move custom repo removal code to a better location in rc.reboot

openvpn.tls-verify.php exec() output fix. Issue #11829

Fix ARP table interface names. Fixes #12698

ldap_get_groups() return value fix. Issue #12699

Don't del ONAT rules w/o selection. Fixes #12694

Delete all custom files if the custom repo specification is incomplete

OpenVPN validation improvements. Fixes #12677

Added validation for the following fields:

• OpenVPN Server:
  • mode, dev_mode, protocol, interface, ecdh_curve, digest,
    engine, cert_depth, caref, crlref, certref, allow_compression,
    compression, tlsauth_keydir, netbios_ntype,...

Improve OpenVPN Data Cipher handling. Fixes #12677

Fix typo in warning text.Issue #12680

Update master to 2.7.0

Revert "Update master to 2.7.0"

This reverts commit ac7ec30f39a3069d3192a73b78e5977fc834482e.

Update master to 2.7.0

Redirect user to / if Plus and attempting to directly access system_register.php

Make registration process contingent on PLus vs CE to accommodate automatic CE -> Plus merging

netgate-ca.pem is now in the base image at /usr/local/share/${product_name}/ssl/netgate-ca.pem

Update the git protocol.

For more details see: https://github.blog/2021-09-01-improving-git-protocol-security-github/

Use /conf/restore_config_data trigger file to restore extra data on install. Feature #12518